![[BACK]](/icons/back.gif){kind=icon}
Up to [local] / src / lib / libcrypto
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.187 / (download) - annotate - [select for diffs], Tue Apr 16 07:34:18 2024 UTC (7 weeks, 6 days ago) by tb
Branch: MAIN
CVS Tags: HEAD
Changes since 1.186: +1 -1 lines
Diff to previous 1.186 (colored)
sort
Revision 1.186 / (download) - annotate - [select for diffs], Mon Apr 15 15:55:01 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.185: +0 -2 lines
Diff to previous 1.185 (colored)
Bye, bye, OPENSSL_str{,n}casecmp()
ok jsing
Revision 1.185 / (download) - annotate - [select for diffs], Mon Apr 15 15:52:46 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.184: +0 -9 lines
Diff to previous 1.184 (colored)
And a pile of TS ASN.1 stuff becomes internal-only, too ok jsing
Revision 1.184 / (download) - annotate - [select for diffs], Mon Apr 15 15:52:01 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.183: +0 -2 lines
Diff to previous 1.183 (colored)
X509_NAME_ENTRIES_it and X509_NAME_INTERNAL_it go internal It's always good to see something called internal in the public API. ok jsing
Revision 1.183 / (download) - annotate - [select for diffs], Mon Apr 15 15:49:37 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.182: +0 -2 lines
Diff to previous 1.182 (colored)
And here go {,EC}DSA_SIG_it
ok jsing
Revision 1.182 / (download) - annotate - [select for diffs], Mon Apr 15 15:47:37 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.181: +0 -1 lines
Diff to previous 1.181 (colored)
DHparam_it becomes static, too ok jsing
Revision 1.181 / (download) - annotate - [select for diffs], Mon Apr 15 15:46:29 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.180: +0 -8 lines
Diff to previous 1.180 (colored)
More X9.62 stuff was never used outside of ec_asn1.c We only need the ASN.1 items. ok jsing
Revision 1.180 / (download) - annotate - [select for diffs], Mon Apr 15 15:44:15 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.179: +0 -5 lines
Diff to previous 1.179 (colored)
EC_PRIVATEKEY becomes internal-only, too ok jsing
Revision 1.179 / (download) - annotate - [select for diffs], Mon Apr 15 15:42:23 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.178: +0 -5 lines
Diff to previous 1.178 (colored)
Unexport the ECPKPARAMETERS API ok jsing
Revision 1.178 / (download) - annotate - [select for diffs], Mon Apr 15 15:41:27 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.177: +0 -3 lines
Diff to previous 1.177 (colored)
Make ECPARAMETERS_{new,free,it} internal-only
ok jsing
Revision 1.177 / (download) - annotate - [select for diffs], Mon Apr 15 15:40:08 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.176: +0 -2 lines
Diff to previous 1.176 (colored)
Move BIO_CONNECT_{new,free}() to internal-only
ok jsing
Revision 1.176 / (download) - annotate - [select for diffs], Mon Apr 15 15:37:37 2024 UTC (8 weeks ago) by tb
Branch: MAIN
Changes since 1.175: +0 -1 lines
Diff to previous 1.175 (colored)
Remove ASN1_time_clamp_not_after() from Symbols.list This was only ever semi-public and libtls no longer uses it since it was switched to the BoringSSL POSIX time API. ok jsing
Revision 1.175 / (download) - annotate - [select for diffs], Sat Mar 2 11:37:13 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE,
OPENBSD_7_5
Changes since 1.174: +0 -4 lines
Diff to previous 1.174 (colored)
Make CRYPTO_THREADID opaque With ERR_STATE out of the way, we can make CRYPTO_THREADID opaque. The type is still accessed by used public API, but some of the public API can also go away. ok jsing
Revision 1.174 / (download) - annotate - [select for diffs], Sat Mar 2 11:32:31 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.173: +0 -3 lines
Diff to previous 1.173 (colored)
Remove CRYPTO_*info Long time neutered, only used (pointlessly without error checking) in the error code until very recently. ok jsing
Revision 1.173 / (download) - annotate - [select for diffs], Sat Mar 2 11:28:46 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.172: +0 -24 lines
Diff to previous 1.172 (colored)
Remove a bunch of CRYPTO memory API This was neutered early on in the fork and has been rotting ever since. Some parts of the API are still used, but it's easier to clean up when most of the mess is gone. ok jsing
Revision 1.172 / (download) - annotate - [select for diffs], Sat Mar 2 11:20:36 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.171: +0 -1 lines
Diff to previous 1.171 (colored)
Remove sk_find_ex() This API intends to find the closest match to the needle. M2Crypto exposes it because it can. This will be fixed by patching the port. ok jsing
Revision 1.171 / (download) - annotate - [select for diffs], Sat Mar 2 11:17:27 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.170: +0 -50 lines
Diff to previous 1.170 (colored)
Unhook and remove GOST and STREEBOG This stops compiling the GOST source. The current implementation is low quality and got in the way, especially in libssl. While we would be open for GOST support, it needs to be significantly better than what we have had and it also needs a maintainer. Add OPENSSL_NO_GOST to opensslfeatures and stop installing gost.h. Some code wrapped in #ifndef OPENSSL_NO_GOST will be removed later. ok jsing
Revision 1.170 / (download) - annotate - [select for diffs], Sat Mar 2 11:11:11 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.169: +1 -0 lines
Diff to previous 1.169 (colored)
Make LHASH_OF() and STACK_OF() use opaque structs This removes internals of these two special snowflakes and will allow further simplifications. Unfortunately, there are some pieces of software that actually use LHASH_OF() (looking at you, pound, Ruby, and openssl(1)), so we get to keep exposing this garbage, at least for now. Expose lh_error() as a symbol to replace a macro reaching into _LHASH. lh_down_load() is no longer available. _LHASH and _STACK are now opaque, LHASH_NODE becomes internal-only. from jsing
Revision 1.169 / (download) - annotate - [select for diffs], Sat Mar 2 11:04:51 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.168: +0 -6 lines
Diff to previous 1.168 (colored)
Remove lh stats This could have been removed in an earlier bump. Now it's time for it to say goodbye. ok jsing
Revision 1.168 / (download) - annotate - [select for diffs], Sat Mar 2 10:59:41 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.167: +0 -5 lines
Diff to previous 1.167 (colored)
Remove X509_CRL_METHOD API I would keep repeating myself... In the bit bucket you go. ok jsing
Revision 1.167 / (download) - annotate - [select for diffs], Sat Mar 2 10:57:03 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.166: +0 -7 lines
Diff to previous 1.166 (colored)
Garbage collect most of the public LOOKUP API Yet another bit of extensibility that no one ever really used. X509_LOOKUP_free() needs to stay because of ... rust-openssl (and kdelibs4support). ok jsing
Revision 1.166 / (download) - annotate - [select for diffs], Sat Mar 2 10:54:39 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.165: +1 -0 lines
Diff to previous 1.165 (colored)
Expose X509_STORE_get1_objects() Safer replacement API for the unsafe X509_STORE_get0_objects(). ok jsing
Revision 1.165 / (download) - annotate - [select for diffs], Sat Mar 2 10:52:24 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.164: +0 -6 lines
Diff to previous 1.164 (colored)
Make X509_CERT_AUX internal Another struct/API that should never have leaked out of the library. ok jsing
Revision 1.164 / (download) - annotate - [select for diffs], Sat Mar 2 10:48:17 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.163: +0 -10 lines
Diff to previous 1.163 (colored)
Remove unused public X509_TRUST API Another thing that should never have leaked out of the library. It will become internal entirely, where the code can be simplified greatly. ok jsing
Revision 1.163 / (download) - annotate - [select for diffs], Sat Mar 2 10:40:05 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.162: +0 -6 lines
Diff to previous 1.162 (colored)
Remove unused parts of the purpose API Most of this is the ability to add custom purposes. Also the astounding X509_STORE_CTX_purpose_inherit(). The names are used by PHP, and M2Crypto exposes X509_check_purpose(), so these remain public. Some weird, most likely invalid, uses also remain in rust-openssl. ok jsing
Revision 1.162 / (download) - annotate - [select for diffs], Sat Mar 2 10:35:32 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.161: +0 -4 lines
Diff to previous 1.161 (colored)
Remove X509V3_EXT extensibility API You used to be able to define your own X.509 extension handlers. Great. Even greater: the verifier would ignore any custom extensions. So this was only ever useful for serialization and deserialization. In other words, almost entirely pointless. The API was also unused except for a hack in kore-acme, which was fixed recently. ok jsing
Revision 1.161 / (download) - annotate - [select for diffs], Sat Mar 2 10:33:51 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.160: +0 -1 lines
Diff to previous 1.160 (colored)
Remove X509_ALGOR_set_md() One of those void APIs that are super hard to use safely since they can fail but can't communicate failure. Nothing uses this. Internal uses have been converted to error checked X509_ALGOR_set_evp_md(). ok jsing
Revision 1.160 / (download) - annotate - [select for diffs], Sat Mar 2 10:30:48 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.159: +0 -1 lines
Diff to previous 1.159 (colored)
Remove ERR_get_state The ERR_STATE struct is an unused implementation detail of the horrific error stack code. It is the last public consumer of CRYPTO_THREAD internals. Make this and its accessor internal so we can make the CRYPTO_THREAD struct opaque. ok jsing
Revision 1.159 / (download) - annotate - [select for diffs], Sat Mar 2 10:20:27 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.158: +0 -7 lines
Diff to previous 1.158 (colored)
Remove more PBE stuff from the public API This is still needed internally for CMS and its predecessors. This removal will enable disentangling some of its innards. ok jsing
Revision 1.158 / (download) - annotate - [select for diffs], Sat Mar 2 10:17:37 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.157: +0 -14 lines
Diff to previous 1.157 (colored)
Remove most PBEPARAM stuff from public visibility The struct itself needs to remain public, unfortunately. ok jsing
Revision 1.157 / (download) - annotate - [select for diffs], Sat Mar 2 10:15:15 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.156: +0 -39 lines
Diff to previous 1.156 (colored)
Remove a lot of PKCS12 garbage from the public API PKCS12 is a hot mess. Please participate in the survey at the end of https://www.cs.auckland.ac.nz/~pgut001/pubs/pfx.html to increase its credibility and unanimity. ok jsing
Revision 1.156 / (download) - annotate - [select for diffs], Sat Mar 2 10:13:12 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.155: +0 -3 lines
Diff to previous 1.155 (colored)
Remove RC4-HMAC-MD5 and AES-{128,256}-CBC-HMAC-SHA-1
"Stitched" mode AEADs were removed from libssl a long time ago. Nothing
uses these CIPHERs anymore.
ok jsing
Revision 1.155 / (download) - annotate - [select for diffs], Sat Mar 2 10:08:29 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.154: +0 -4 lines
Diff to previous 1.154 (colored)
Make legacy cipher methods internal These are ASN.1 handlers for CIPHERs, still used by CMS and its predecessors. They should never have been public. ok jsing
Revision 1.154 / (download) - annotate - [select for diffs], Sat Mar 2 10:06:48 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.153: +0 -6 lines
Diff to previous 1.153 (colored)
Remove EVP_PBE_* API from public visibility You can no longer add your custom PBE algorithm. Pity. EVP_PBE_CipherInit() stays for internal use, the rest goes away copmletely. ok jsing
Revision 1.153 / (download) - annotate - [select for diffs], Sat Mar 2 10:04:40 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.152: +0 -23 lines
Diff to previous 1.152 (colored)
Remove EVP_PKEY_meth_*() API After ameth, the second bit of custom EVP_PKEY API removal. ok jsing
Revision 1.152 / (download) - annotate - [select for diffs], Sat Mar 2 10:03:12 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.151: +0 -14 lines
Diff to previous 1.151 (colored)
Remove the ameth lib This is accessor API for ASN.1 methods needed for custom PKEYs. Nothing has ever used this. This has been neutered for months. The EVP_PKEY_asn1_* API that needs to stay was moved elsewhere. ok jsing
Revision 1.151 / (download) - annotate - [select for diffs], Sat Mar 2 09:59:56 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.150: +0 -13 lines
Diff to previous 1.150 (colored)
Remove EVP_MD_meth* again Erlang upstream disabled the otp_test_engine for LibreSSL >= 3.5 without explanation. It was the only reason we added this garbage API in the first place. Meanwhile libfido2 started using it for a mock up of OpenSSL 3's broken fetch design with old API. This is pointless, so all this garbage goes away again (in particular we can remove the absolutely horrifying EVP_MD_meth_set_app_datasize() again). ok jsing
Revision 1.150 / (download) - annotate - [select for diffs], Sat Mar 2 09:49:45 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.149: +0 -1 lines
Diff to previous 1.149 (colored)
Make OBJ_add_object() static This is another implementation detail that should never have leaked out of the library. Only OBJ_create() ever used this. ok jsing
Revision 1.149 / (download) - annotate - [select for diffs], Sat Mar 2 09:47:16 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.148: +0 -1 lines
Diff to previous 1.148 (colored)
Remove OBJ_bsearch_() The only reason this has still been part of the public API was that libssl used it for cipher lookup. This was fixed by replacing the lookup by proper bsearch() -- why OpenSSL felt the need to reinvent ANSI C API badly will forever remain a mystery. The stack code in libcrypto still uses a version of this. This should be rewritten. It will be a bit easier once sk_find_ex() is removed. ok jsing
Revision 1.148 / (download) - annotate - [select for diffs], Sat Mar 2 09:41:02 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.147: +0 -6 lines
Diff to previous 1.147 (colored)
Remove unused public OBJ_NAME_* API This functionality has been disabled for a few months. Now it is high time to garbage collect it. ok jsing
Revision 1.147 / (download) - annotate - [select for diffs], Sat Mar 2 09:36:40 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.146: +0 -2 lines
Diff to previous 1.146 (colored)
Remove EVP_add_{cipher,digest}() from public API
Ciphers and digests are now handled in a static lookup table and no
longer by the associative array that used to underlie the OBJ_NAME API.
Adding ciphers is no longer possible. What uses this API does so for
historic reasons coming from a time where SHA-2 and some AES variants
needed to be enabled explicitly. Ports doing this (PHP and DANE code)
were fixed.
ok jsing
Revision 1.146 / (download) - annotate - [select for diffs], Sat Mar 2 09:33:14 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.145: +0 -1 lines
Diff to previous 1.145 (colored)
Remove DSA_generate_parameters This was deprecated in 0.9.8 and used until recently by rust-openssl and by keynote (keynote has the excuse that it was written before the deprecation). Fortunately Paul Kehrer fixed this in rust-openssl, so we can garbage collect this turd. (It was replaced with the less ergonomic DSA_generate_parameters_ex() to expose a new fancy way of displaying dots, stars and pluses on key generation). ok jsing
Revision 1.145 / (download) - annotate - [select for diffs], Sat Mar 2 09:30:21 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.144: +0 -1 lines
Diff to previous 1.144 (colored)
Remove CMAC_resume() While it is a neat design detail of CMAC that you can resume it after having finalized it, nothing uses this functionality and it adds some gross things such as retaining intermediate secrets in the CMAC ctx. Once this is gone, we can simplify the CMAC code a bit. ok jsing
Revision 1.144 / (download) - annotate - [select for diffs], Sat Mar 2 09:27:31 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.143: +0 -2 lines
Diff to previous 1.143 (colored)
Make BN_mod_exp2_mont() and BN_mod_exp_mont_word() internal The former could be useful but nothing uses it. The latter is a dangerous implementation detail of Montgomery exponentiation that should never have been leaked out of the library. Fix this. ok jsing
Revision 1.143 / (download) - annotate - [select for diffs], Sat Mar 2 09:24:59 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.142: +0 -1 lines
Diff to previous 1.142 (colored)
Make BN_mod_exp_simple() internal This function is very slow and useful for testing purposes only. It should never have been part of the public API. Remove it from there. ok jsing
Revision 1.142 / (download) - annotate - [select for diffs], Sat Mar 2 09:22:41 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.141: +0 -1 lines
Diff to previous 1.141 (colored)
Remove BIO_set() This used to be a dangerous implementation detail of BIO_new() that was never used outside of libcrypto. ok jsing
Revision 1.141 / (download) - annotate - [select for diffs], Sat Mar 2 09:21:24 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.140: +0 -4 lines
Diff to previous 1.140 (colored)
Remove BIO_dump_*{cb,fp}()
These were disabled and the internals that need to remain were fixed.
Time for this garbage to go.
ok jsing
Revision 1.140 / (download) - annotate - [select for diffs], Sat Mar 2 09:18:28 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.139: +0 -3 lines
Diff to previous 1.139 (colored)
Remove BIO_{sn,v,vsn}printf(3)
Unsued printing functionality. If something should need this we can readily
add it back.
ok jsing
Revision 1.139 / (download) - annotate - [select for diffs], Sat Mar 2 09:15:03 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.138: +4 -0 lines
Diff to previous 1.138 (colored)
Expose OPENSSL_{gmtime,posix_to_tm,timegm,tm_to_posix}()
Apart from OPENSSL_gmtime(), which is OpenSSL API, this is BoringSSL's
interface to deal with the time related portability and code mess.
ok jsing
Revision 1.138 / (download) - annotate - [select for diffs], Sat Mar 2 09:08:41 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.137: +0 -3 lines
Diff to previous 1.137 (colored)
Remove beck's ASN.1 time API from public visibility This API was needed since OpenSSL didn't have one. We now have variants of OpenSSL's API and will also expose BoringSSL's complementary API. The users of this API were ported to the OpenSSL variants and some may switch to BoringSSL's in the future. Part of it is still used internally. ASN1_time_tm_clamp_notafter() is still used by libtls (and only libtls). This will be fixed in a future bump. ok jsing
Revision 1.137 / (download) - annotate - [select for diffs], Sat Mar 2 09:04:07 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.136: +0 -12 lines
Diff to previous 1.136 (colored)
Remove ASN1_PCTX nonsense This is only used by the fuzzing code. Another bit of poorly thought out extensibility that makes people pass NULL pointers to a bunch of APIs. ok jsing
Revision 1.136 / (download) - annotate - [select for diffs], Sat Mar 2 09:02:04 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.135: +0 -1 lines
Diff to previous 1.135 (colored)
Make ASN1_add_oid_module internal ok jsing
Revision 1.135 / (download) - annotate - [select for diffs], Sat Mar 2 08:54:02 2024 UTC (3 months, 1 week ago) by tb
Branch: MAIN
Changes since 1.134: +0 -2 lines
Diff to previous 1.134 (colored)
Remove ASN1_STRING_TABLE_{add,cleanup}
This was API for the ASN1_STRING_TABLE extensibility which has been
neutered for months and was completely unused in the ecosystem.
ok jsing
Revision 1.134 / (download) - annotate - [select for diffs], Sun Nov 12 10:49:27 2023 UTC (6 months, 4 weeks ago) by robert
Branch: MAIN
Changes since 1.133: +0 -1 lines
Diff to previous 1.133 (colored)
split the Symbols.list up so that arch specific symbols do not end up everywhere ok tb@
Revision 1.133 / (download) - annotate - [select for diffs], Fri Jul 28 10:35:14 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_4_BASE,
OPENBSD_7_4
Changes since 1.132: +0 -6 lines
Diff to previous 1.132 (colored)
Remove various ${thing}_options
Various, ancient ciphers exposed some of their innards via an _options()
API. Apart from openssl version/speed, only some lua thingie in nmap ever
looked at these. Go figure.
hppa testing by miod, i386 testing by sthen. Thanks!
ok jsing
Revision 1.132 / (download) - annotate - [select for diffs], Fri Jul 28 10:33:13 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.131: +0 -3 lines
Diff to previous 1.131 (colored)
Remove more ASN1_BIT_STRING API
This removes ASN1_BIT_STRING_name_print(), ASN1_BIT_STRING_{num,set}_asc().
Before trust was properly handled using OIDs, there was a period where it
used bit strings. The actual interfaces used in openssl x509 were removed,
but the functions they wrapped remained unused for the next 24 years.
ok jsing
Revision 1.131 / (download) - annotate - [select for diffs], Fri Jul 28 10:30:16 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.130: +0 -1 lines
Diff to previous 1.130 (colored)
Remove ASN1_BIT_STRING_check This was added with the TS code for no discernible reason. I could not find a single consumer. In the unlikely event that you need this, it is easy enough to write a better version of it yourself. ok jsing
Revision 1.130 / (download) - annotate - [select for diffs], Fri Jul 28 10:28:02 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.129: +2 -0 lines
Diff to previous 1.129 (colored)
Provide CMS{,_SignerInfo}_get_version
Add accessors for the syntax versions of ContentInfo and SignerInfo.
These will be used soon in rpki-client for some more compliance checks.
ok job jsing
Revision 1.129 / (download) - annotate - [select for diffs], Fri Jul 28 10:25:05 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.128: +0 -2 lines
Diff to previous 1.128 (colored)
Remove OBJ_add_sigid() and OBJ_sigid_free() Another bit of unused extensibility that was responsible for a lot of complexity until recently. This removes the remaining stubs from the public API. ok jsing
Revision 1.128 / (download) - annotate - [select for diffs], Fri Jul 28 10:23:19 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.127: +0 -3 lines
Diff to previous 1.127 (colored)
Remove more ERR cruft Ever wondered how many entries populate the various err hashes? Me neither. Remove this garbage. ok jsing
Revision 1.127 / (download) - annotate - [select for diffs], Fri Jul 28 10:21:01 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.126: +0 -2 lines
Diff to previous 1.126 (colored)
Remove ERR_{get,set}_implementation()
Much like ex_data, applications can make the library use their own error
stack implementation. Well, except as of right now they no longer can.
ok jsing
Revision 1.126 / (download) - annotate - [select for diffs], Fri Jul 28 10:19:20 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.125: +0 -3 lines
Diff to previous 1.125 (colored)
Make ex_data implementations internal To state the obvious: library suffers from way too much extensibility. In theory, applications can implement their own ex_data implementation. In practice, none did. A glance at ex_data.c might give an idea as to why. Make this internal so this particular turd can be replaced with something slightly saner. Also sync up the CRYPTO_EX_INDEX_* defines with OpenSSL - at least the parts we support. ok jsing
Revision 1.125 / (download) - annotate - [select for diffs], Fri Jul 28 10:17:21 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.124: +0 -6 lines
Diff to previous 1.124 (colored)
Remove BUF_[a-z]* API This are a bunch of strange string handlers with NULL checks that make no real sense except to some devs who like to sprinkle them everywhere. Fortunately, nothing uses these anymore, so they can go. ok jsing
Revision 1.124 / (download) - annotate - [select for diffs], Fri Jul 28 10:13:50 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.123: +0 -4 lines
Diff to previous 1.123 (colored)
Drop BIO_n{read,write}{,0}()
This is one of those strange things that should never have made it into
a security-oriented libraries. From BIO_s_bio.3:
.\" The following non-copying I/O functions are intentionally undocumented
.\" because they seem fragile and unused by anything:
It was used in a single place: the gorgeous ssltest. I'm not smart enough
to follow. Also:
/* WARNING: The non-copying interface is largely untested as of yet
* and may contain bugs. */
Oh, really? Into the great bitbucket in the sky you go.
ok jsing
Revision 1.123 / (download) - annotate - [select for diffs], Fri Jul 28 10:07:30 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.122: +0 -8 lines
Diff to previous 1.122 (colored)
Remove the get_rfc*_prime_*() API Inconsistently named with the rest of the API, so OpenSSL 1.1 introduced the same functions with a BN_ prefix. We'll keep the latter. ok jsing
Revision 1.122 / (download) - annotate - [select for diffs], Fri Jul 28 10:05:16 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.121: +0 -12 lines
Diff to previous 1.121 (colored)
Make BN_BLINDING internal RSA is pretty bad. In my most optimistic moments I dream of a world that stopped using it. That won't happen during my lifetime, unfortunately. Blinding is one way of making it a little less leaky. Unfortunately this side-channel leak mitigation leaked out of the library for no good reason. Let's at least fix that aspect of it. ok jsing
Revision 1.121 / (download) - annotate - [select for diffs], Fri Jul 28 10:02:11 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.120: +0 -2 lines
Diff to previous 1.120 (colored)
Remove ASN1_bn_print() and ASN1_buf_print() ASN1_bn_print() is a hilariously bad API that was replaced with a saner interface internally. ASN1_buf_print() isn't terrible, but it is too specialized to be of real use. It was only exposed because ASN1_bn_print() was already there. Its only use had been in the EdDSA printing code before it was replaced with an internal helper. ok jsing
Revision 1.120 / (download) - annotate - [select for diffs], Fri Jul 28 10:00:10 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.119: +0 -6 lines
Diff to previous 1.119 (colored)
Make ASN1_{primitive,template}_* internal
These were long removed from the public OpenSSL API, so we can do the
same. Remove ASN1_template_{d2i,i2d}() - those are unused internally.
ok jsing
Revision 1.119 / (download) - annotate - [select for diffs], Fri Jul 28 09:58:30 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.118: +0 -5 lines
Diff to previous 1.118 (colored)
Make ASN.1 BIO internal
With every bump we can remove a bit more of the ASN.1 BIO and the
streaming interface. At some point enough will be internal so that
we can rewrite it and bring it in a shape where mere mortals can
follow all the twists and turns. This is the next step: BIO_f_asn1(3)
goes away and takes BIO_asn1_{get,set}_{prefix,suffix}() with it,
a bunch of functions helping along in a write-after-free recently.
The getters go away, the setters stay for now.
ok jsing
Revision 1.118 / (download) - annotate - [select for diffs], Fri Jul 28 09:53:55 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.117: +0 -115 lines
Diff to previous 1.117 (colored)
Set OPENSSL_NO_ENGINE, remove engine code ENGINE was special. It's horrible code even by the low standards of this library. Some ports may now try to use the stubs which will fail, but the fallout from this should be minimal. Of course there are various language bindings that expose the ENGINE API. OpenSSL 3 disabling ENGINE by default will likely help fixing this at some point. ok jsing
Revision 1.117 / (download) - annotate - [select for diffs], Fri Jul 28 09:46:36 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.116: +0 -25 lines
Diff to previous 1.116 (colored)
Drop DSO and define OPENSSL_NO_DSO DSO and in particular dlopen() was used for dynamic engines, which we removed a long time ago and for dynamic conf modules, which we removed only very recently. Now remove this dangerous interface. ok jsing
Revision 1.116 / (download) - annotate - [select for diffs], Fri Jul 28 09:42:44 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.115: +0 -8 lines
Diff to previous 1.115 (colored)
Drop the comp module opensslfeatures.h has long defined OPENSSL_NO_COMP and the build with ZLIB was broken in openssl(1) since 2015 and in libcrypto since 2022. ZLIB was unifdefed a while ago, now we can retire the public API. The comp.h header stays devoid of code because a number of ports use it for historic reasons. ok jsing
Revision 1.115 / (download) - annotate - [select for diffs], Fri Jul 28 09:22:26 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.114: +0 -14 lines
Diff to previous 1.114 (colored)
Excise ECDH_METHOD Unlike ECDSA_METHOD, this has been unused forever but kind of needed to stay for symmetry with ECDSA_METHOD. Now we can finally take it behind the barn and remove its tendrils into ENGINE. ok jsing
Revision 1.114 / (download) - annotate - [select for diffs], Fri Jul 28 09:19:58 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.113: +0 -1 lines
Diff to previous 1.113 (colored)
Remove ECDH errors Much like the ECDSA errors, the ECDH errors have been unused for a while. Garbage collect them. ok jsing
Revision 1.113 / (download) - annotate - [select for diffs], Fri Jul 28 09:08:31 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.112: +0 -14 lines
Diff to previous 1.112 (colored)
Remove ECDSA_METHOD After smtpd (in base) and libtls finally switched from ECDSA_METHOD to EC_KEY_METHOD, much of the ECDSA_METHOD code was neutered. Remove the remaining public API as well as numerous tentacles into ENGINE. ok jsing
Revision 1.112 / (download) - annotate - [select for diffs], Fri Jul 28 09:01:25 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.111: +0 -1 lines
Diff to previous 1.111 (colored)
Remove ecs_err.c These error codes have been unused for a while, so the public API loading them is pointless. ok jsing
Revision 1.111 / (download) - annotate - [select for diffs], Fri Jul 28 08:49:43 2023 UTC (10 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.110: +0 -3 lines
Diff to previous 1.110 (colored)
Make extended ECDSA signing routines internal
ECDSA_sign_setup() permits precomputing the values of the inverse of the
random k and the corresponding r. These can then be fed into the signing
routines ECDSA_{do_,}sign_ex() multiple times if needed. This is not a
great idea and the interface adds a lot of unwanted complexity.
Not to mention that nothing ever used this correctly - if s works out to
0, a special error code is thrown requesting that the caller provide new
kinv and r values. Unsurprisingly, nobody ever checked for that special
error code.
ok jsing
This commit marks the start of a libcrypto major bump. Do not build the
tree until I bumped the shlib_version and synced file sets (in about 35
commits).
Revision 1.110 / (download) - annotate - [select for diffs], Wed Apr 26 08:25:37 2023 UTC (13 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.109: +0 -10 lines
Diff to previous 1.109 (colored)
Remove e_old.c again Also remove nonexistent symbols #defined to other symbols that confuse some linkers in -portable. This commit entails no ABI change on OpenBSD. Discussed with jsing
Revision 1.109 / (download) - annotate - [select for diffs], Tue Apr 25 19:52:25 2023 UTC (13 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.108: +0 -1 lines
Diff to previous 1.108 (colored)
ASN1_item_ndef_i2d also goes. discussed with deraadt
Revision 1.108 / (download) - annotate - [select for diffs], Tue Apr 25 15:52:41 2023 UTC (13 months, 2 weeks ago) by tb
Branch: MAIN
Changes since 1.107: +10 -134 lines
Diff to previous 1.107 (colored)
Update Symbols.list after symbol addition and removal
Revision 1.107 / (download) - annotate - [select for diffs], Fri Mar 10 16:44:43 2023 UTC (15 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE,
OPENBSD_7_3
Changes since 1.106: +18 -0 lines
Diff to previous 1.106 (colored)
Update Symbols.list
Revision 1.106 / (download) - annotate - [select for diffs], Sun Nov 13 14:06:15 2022 UTC (18 months, 4 weeks ago) by tb
Branch: MAIN
Changes since 1.105: +8 -0 lines
Diff to previous 1.105 (colored)
Update Symbols.list
Revision 1.105 / (download) - annotate - [select for diffs], Mon Sep 19 12:25:52 2022 UTC (20 months, 3 weeks ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE,
OPENBSD_7_2
Changes since 1.104: +0 -2 lines
Diff to previous 1.104 (colored)
Remove PKCS12_MAKE_{,SH}KEYBAG from Symbols.list
These functions were renamed in the last bump
#define PKCS12_MAKE_KEYBAG PKCS12_SAFEBAG_create0_p8inf #define PKCS12_MAKE_SHKEYBAG PKCS12_SAFEBAG_create_pkcs8_encrypt
They don't appear in the compiled library itself, so no further bump
required.
Fixes libressl-portable/portable#791
Found the hard way by vollkommenheit
ok deraadt jsing
Revision 1.104 / (download) - annotate - [select for diffs], Sun Sep 11 17:32:01 2022 UTC (20 months, 4 weeks ago) by tb
Branch: MAIN
Changes since 1.103: +31 -9 lines
Diff to previous 1.103 (colored)
Update Symbols.list ok jsing
Revision 1.103 / (download) - annotate - [select for diffs], Thu Jul 7 13:01:51 2022 UTC (23 months ago) by tb
Branch: MAIN
Changes since 1.102: +21 -0 lines
Diff to previous 1.102 (colored)
Update Symbols.list ok jsing
Revision 1.102 / (download) - annotate - [select for diffs], Fri Jan 14 09:06:02 2022 UTC (2 years, 4 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE,
OPENBSD_7_1
Changes since 1.101: +190 -49 lines
Diff to previous 1.101 (colored)
Update Symbols.list ok inoguchi
Revision 1.101 / (download) - annotate - [select for diffs], Sat Nov 20 18:39:48 2021 UTC (2 years, 6 months ago) by tb
Branch: MAIN
Changes since 1.100: +4 -4 lines
Diff to previous 1.100 (colored)
sort
Revision 1.100 / (download) - annotate - [select for diffs], Sun Oct 31 16:33:16 2021 UTC (2 years, 7 months ago) by tb
Branch: MAIN
Changes since 1.99: +33 -10 lines
Diff to previous 1.99 (colored)
Update Symbols.list for new API and API removal/renaming
Revision 1.99 / (download) - annotate - [select for diffs], Fri Sep 10 15:04:11 2021 UTC (2 years, 9 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE,
OPENBSD_7_0
Changes since 1.98: +4 -0 lines
Diff to previous 1.98 (colored)
Add BN_bn2{,le}binpad(), BN_lebin2bn(), EC_GROUP_order_bits to Symbols.list
ok beck inoguchi jsing
Revision 1.98 / (download) - annotate - [select for diffs], Mon May 10 17:00:32 2021 UTC (3 years, 1 month ago) by tb
Branch: MAIN
Changes since 1.97: +2 -0 lines
Diff to previous 1.97 (colored)
Expose EVP_Digest{Sign,Verify}(3)
ok jsing
Revision 1.97 / (download) - annotate - [select for diffs], Mon May 10 16:58:18 2021 UTC (3 years, 1 month ago) by tb
Branch: MAIN
Changes since 1.96: +3 -0 lines
Diff to previous 1.96 (colored)
Expose EC_POINT_{get,set}_affine_coordinates(3) and
EC_POINT_set_compressed_coordinates(3)
ok jsing
Revision 1.96 / (download) - annotate - [select for diffs], Mon May 10 16:55:19 2021 UTC (3 years, 1 month ago) by tb
Branch: MAIN
Changes since 1.95: +2 -0 lines
Diff to previous 1.95 (colored)
Expose EC_GROUP_{get,set}_curve(3)
ok jsing
Revision 1.95 / (download) - annotate - [select for diffs], Wed Mar 31 16:47:00 2021 UTC (3 years, 2 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE,
OPENBSD_6_9
Changes since 1.94: +1 -0 lines
Diff to previous 1.94 (colored)
Provide EVP_PKEY_new_CMAC_key(3) ok bcook inoguchi jsing
Revision 1.94 / (download) - annotate - [select for diffs], Sat Nov 2 13:52:31 2019 UTC (4 years, 7 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE,
OPENBSD_6_8,
OPENBSD_6_7_BASE,
OPENBSD_6_7
Changes since 1.93: +1 -0 lines
Diff to previous 1.93 (colored)
Provide RSA_PKCS1_OpenSSL(). Prompted by inoguchi@
Revision 1.93 / (download) - annotate - [select for diffs], Sat Nov 2 13:47:41 2019 UTC (4 years, 7 months ago) by jsing
Branch: MAIN
Changes since 1.92: +2 -0 lines
Diff to previous 1.92 (colored)
Make RSA_padding_{add,check}_PKCS1_OAEP_mgf1() public.
Revision 1.92 / (download) - annotate - [select for diffs], Sat Nov 2 13:44:19 2019 UTC (4 years, 7 months ago) by jsing
Branch: MAIN
Changes since 1.91: +5 -0 lines
Diff to previous 1.91 (colored)
Make RSA_OAEP_PARAMs public.
Revision 1.91 / (download) - annotate - [select for diffs], Sat Nov 2 13:38:04 2019 UTC (4 years, 7 months ago) by jsing
Branch: MAIN
Changes since 1.90: +128 -0 lines
Diff to previous 1.90 (colored)
Enable CMS in LibreSSL. ok bcook@ deraadt@ inoguchi@ job@ tb@
Revision 1.90 / (download) - annotate - [select for diffs], Thu Oct 24 15:47:15 2019 UTC (4 years, 7 months ago) by jsing
Branch: MAIN
Changes since 1.89: +1 -0 lines
Diff to previous 1.89 (colored)
Provide RSA_pkey_ctx_ctrl(). This is a wrapper around EVP_PKEY_CTX_ctrl() which requires the key to be either RSA or RSA-PSS. From OpenSSL 1.1.1d. ok tb@
Revision 1.89 / (download) - annotate - [select for diffs], Wed Jun 5 15:41:33 2019 UTC (5 years ago) by gilles
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE,
OPENBSD_6_6
Changes since 1.88: +23 -0 lines
Diff to previous 1.88 (colored)
provide getters and setters for the RSA_METHOD interface ok tb@, jsing@, sthen@
Revision 1.88 / (download) - annotate - [select for diffs], Sun Mar 17 18:17:44 2019 UTC (5 years, 2 months ago) by tb
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE,
OPENBSD_6_5
Changes since 1.87: +1 -0 lines
Diff to previous 1.87 (colored)
Provide EVP_PKEY_get0_hmac(). From OpenSSL 1.1.1 which is still freely licensed. From jsing
Revision 1.87 / (download) - annotate - [select for diffs], Sun Mar 17 18:07:41 2019 UTC (5 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.86: +3 -0 lines
Diff to previous 1.86 (colored)
Provide EVP_aes_{128,192,256}_wrap(). This is a compatible
implementation based on the one in OpenSSL 1.0.2r which is
still freely licensed.
The functions are undocumented in OpenSSL. To use them, one
needs to set the undocumented EVP_CIPHER_CTX_FLAG_WRAP_ALLOW
flag on the EVP_CIPHER_CTX.
resolves #505
ok jsing
Revision 1.86 / (download) - annotate - [select for diffs], Sun Mar 17 17:42:37 2019 UTC (5 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.85: +8 -0 lines
Diff to previous 1.85 (colored)
Add the SM4 block cipher from the Chinese standard GB/T 32907-2016. This is an ISC licensed version based on the sources by Ribose Inc that were ported to OpenSSL in 2017. Patch from Daniel Wyatt with minor tweaks. ok inoguchi, jsing
Revision 1.85 / (download) - annotate - [select for diffs], Tue Jan 22 01:06:45 2019 UTC (5 years, 4 months ago) by tb
Branch: MAIN
Changes since 1.84: +8 -0 lines
Diff to previous 1.84 (colored)
Add missing symbols from the EC_KEY_METHOD port. Reported by bcook and sthen
Revision 1.84 / (download) - annotate - [select for diffs], Tue Jan 22 00:59:21 2019 UTC (5 years, 4 months ago) by dlg
Branch: MAIN
Changes since 1.83: +3 -0 lines
Diff to previous 1.83 (colored)
add support for xchacha20 and xchacha20-poly1305 xchacha is a chacha stream that allows for an extended nonce, which in turn makes it feasible to use random nonces. ok tb@
Revision 1.83 / (download) - annotate - [select for diffs], Sat Jan 19 01:24:18 2019 UTC (5 years, 4 months ago) by tb
Branch: MAIN
Changes since 1.82: +2 -0 lines
Diff to previous 1.82 (colored)
provide EVP_ENCODE_CTX_{new,free}().
ok jsing
Revision 1.82 / (download) - annotate - [select for diffs], Sat Jan 19 01:12:47 2019 UTC (5 years, 4 months ago) by tb
Branch: MAIN
Changes since 1.81: +6 -0 lines
Diff to previous 1.81 (colored)
Partial port of EC_KEY_METHOD from OpenSSL 1.1. This commit adds missing API for ECDH/ECDSA_verify. from markus
Revision 1.81 / (download) - annotate - [select for diffs], Sat Jan 19 01:07:00 2019 UTC (5 years, 4 months ago) by tb
Branch: MAIN
Changes since 1.80: +13 -0 lines
Diff to previous 1.80 (colored)
Partial port of EC_KEY_METHOD from OpenSSL 1.1. This commit adds init/free, support for signing, setting and getting the method, engine support as well as extra data. from markus
Revision 1.80 / (download) - annotate - [select for diffs], Sun Nov 11 06:53:31 2018 UTC (5 years, 7 months ago) by tb
Branch: MAIN
Changes since 1.79: +4 -0 lines
Diff to previous 1.79 (colored)
Add Ribose Inc's implementation of the SM3 hashing function with tweaks from jsing and myself. The SM2/SM3/SM4 algorithms are mandatory for legal use of cryptography within China and [are] widely applied in the country, covering identification/financial cards, contactless, TPM 2.0 and PKI. ok beck inoguchi jsing
Revision 1.79 / (download) - annotate - [select for diffs], Fri Nov 2 13:38:01 2018 UTC (5 years, 7 months ago) by tb
Branch: MAIN
Changes since 1.78: +1 -1 lines
Diff to previous 1.78 (colored)
move X509_get0_serialNumber where it belongs
Revision 1.78 / (download) - annotate - [select for diffs], Wed Oct 24 17:57:52 2018 UTC (5 years, 7 months ago) by jsing
Branch: MAIN
Changes since 1.77: +0 -1 lines
Diff to previous 1.77 (colored)
Remove a GOST data symbol that should not be exported.
Revision 1.77 / (download) - annotate - [select for diffs], Wed Oct 24 17:57:22 2018 UTC (5 years, 7 months ago) by jsing
Branch: MAIN
Changes since 1.76: +0 -13 lines
Diff to previous 1.76 (colored)
Remove a bunch of ancient and highly crufty ASN.1 related code from libcrypto (the "new" stuff replaced this back around 2000 or so...). ok tb@
Revision 1.76 / (download) - annotate - [select for diffs], Wed Sep 12 06:35:38 2018 UTC (5 years, 9 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE,
OPENBSD_6_4
Changes since 1.75: +4 -0 lines
Diff to previous 1.75 (colored)
Add some accessor functions: RSA_meth_get_finish() RSA_meth_set1_name() EVP_CIPHER_CTX_(get|set)_iv() feedback and ok jsing@ tb@
Revision 1.75 / (download) - annotate - [select for diffs], Fri Aug 24 20:07:41 2018 UTC (5 years, 9 months ago) by tb
Branch: MAIN
Changes since 1.74: +2 -2 lines
Diff to previous 1.74 (colored)
Remove EVP_PKEY2PKCS8_broken() and PKCS8_set_broken() Provide PKCS8_pkey_add1_attr_by_NID() and PKCS8_pkey_get0_attrs(). Remove the whole broken code and simplify pkcs8_priv_key_info_st accordingly. Based on OpenSSL commit 54dbf42398e23349b59f258a3dd60387bbc5ba13 plus some const that was added later. tested in a bulk build by sthen ok jsing
Revision 1.74 / (download) - annotate - [select for diffs], Fri Aug 24 19:59:32 2018 UTC (5 years, 9 months ago) by tb
Branch: MAIN
Changes since 1.73: +1 -0 lines
Diff to previous 1.73 (colored)
Provide X509_get0_serialNumber() tested in a bulk by sthen ok jsing
Revision 1.73 / (download) - annotate - [select for diffs], Fri Aug 24 19:55:58 2018 UTC (5 years, 9 months ago) by tb
Branch: MAIN
Changes since 1.72: +9 -0 lines
Diff to previous 1.72 (colored)
Turn a number of #defines into proper functions with prototypes matching those that OpenSSL has had for ages. ok jsing
Revision 1.72 / (download) - annotate - [select for diffs], Fri Aug 24 19:36:52 2018 UTC (5 years, 9 months ago) by tb
Branch: MAIN
Changes since 1.71: +1 -0 lines
Diff to previous 1.71 (colored)
Provide EVP_CIPHER_CTX_encrypting(). tested in a bulk by sthen ok jsing
Revision 1.71 / (download) - annotate - [select for diffs], Sat Mar 17 16:20:01 2018 UTC (6 years, 2 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE,
OPENBSD_6_3
Changes since 1.70: +1 -0 lines
Diff to previous 1.70 (colored)
Bring in compatibility for OpenSSL 1.1 style init functions. This adds OPENSSL_init_crypto and OPENSSL_init_ssl, as well thread safety modifications for the existing LibreSSL init functions. The initialization routines are called automatically by the normal entry points into the library, as in newer OpenSSL ok jsing@, nits by tb@ and deraadt@
Revision 1.70 / (download) - annotate - [select for diffs], Sat Mar 17 15:43:32 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.69: +1 -0 lines
Diff to previous 1.69 (colored)
Provide X509_STORE_get0_param() ok jsing
Revision 1.69 / (download) - annotate - [select for diffs], Sat Mar 17 15:39:43 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.68: +1 -0 lines
Diff to previous 1.68 (colored)
Provide X509_OBJECT_get_type(). Instead of the X509_LOOKUP_TYPE enum (which we don't have) it returns a plain int. ok jsing
Revision 1.68 / (download) - annotate - [select for diffs], Sat Mar 17 15:28:27 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.67: +1 -0 lines
Diff to previous 1.67 (colored)
Provide X509_NAME_ENTRY_set() ok jsing
Revision 1.67 / (download) - annotate - [select for diffs], Sat Mar 17 15:24:44 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.66: +2 -0 lines
Diff to previous 1.66 (colored)
Provide ECDSA_SIG_{g,s}et0().
ok jsing
Revision 1.66 / (download) - annotate - [select for diffs], Sat Mar 17 15:19:12 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.65: +5 -0 lines
Diff to previous 1.65 (colored)
Add DSA_meth_{dup,free,new,set_{finish,sign}}()
As in RSA_meth_*, note that these functions return NULL in
out-of-memory situations, but they do not set an error explicitly.
ok jsing
Revision 1.65 / (download) - annotate - [select for diffs], Sat Mar 17 15:12:56 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.64: +6 -0 lines
Diff to previous 1.64 (colored)
Provide RSA_meth_{dup,free,new,set_{finish,priv_{dec,enc}}}()
Note that these functions return NULL in out-of-memory situations,
but contrary to OpenSSL's versions they do not set an error.
ok jsing
Revision 1.64 / (download) - annotate - [select for diffs], Sat Mar 17 15:05:55 2018 UTC (6 years, 2 months ago) by tb
Branch: MAIN
Changes since 1.63: +1 -0 lines
Diff to previous 1.63 (colored)
Make BIO_meth_get_write() public. Omission spotted by schwarze. ok jsing
Revision 1.63 / (download) - annotate - [select for diffs], Sat Mar 17 14:55:39 2018 UTC (6 years, 2 months ago) by jsing
Branch: MAIN
Changes since 1.62: +1 -0 lines
Diff to previous 1.62 (colored)
Provide X509_PUBKEY_get0() by splitting X509_PUBKEY_get() and turning it into a wrapper that calls X509_PUBKEY_get0() and up refs.
Revision 1.62 / (download) - annotate - [select for diffs], Sat Mar 17 14:44:34 2018 UTC (6 years, 2 months ago) by jsing
Branch: MAIN
Changes since 1.61: +1 -0 lines
Diff to previous 1.61 (colored)
Provide OCSP_SINGLERESP_get0_id().
Revision 1.61 / (download) - annotate - [select for diffs], Sat Mar 17 14:33:20 2018 UTC (6 years, 2 months ago) by jsing
Branch: MAIN
Changes since 1.60: +1 -0 lines
Diff to previous 1.60 (colored)
Provide X509_REVOKED_dup().
Revision 1.60 / (download) - annotate - [select for diffs], Thu Feb 22 17:22:02 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.59: +1 -0 lines
Diff to previous 1.59 (colored)
Provide X509_chain_up_ref(). From BoringSSL.
Revision 1.59 / (download) - annotate - [select for diffs], Thu Feb 22 17:19:31 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.58: +3 -0 lines
Diff to previous 1.58 (colored)
Provide X509_STORE_get0_objects(), X509_STORE_get_ex_data() and X509_STORE_set_ex_data().
Revision 1.58 / (download) - annotate - [select for diffs], Thu Feb 22 17:17:09 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.57: +2 -0 lines
Diff to previous 1.57 (colored)
Provide X509_OBJECT_get0_X509() and X509_OBJECT_get0_X509_CRL().
Revision 1.57 / (download) - annotate - [select for diffs], Thu Feb 22 17:15:09 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.56: +1 -0 lines
Diff to previous 1.56 (colored)
Provide X509_STORE_up_ref().
Revision 1.56 / (download) - annotate - [select for diffs], Thu Feb 22 17:11:30 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.55: +2 -0 lines
Diff to previous 1.55 (colored)
Provide X509_STORE_CTX_get0_chain() and X509_STORE_CTX_get0_store().
Revision 1.55 / (download) - annotate - [select for diffs], Thu Feb 22 17:09:28 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.54: +1 -0 lines
Diff to previous 1.54 (colored)
Provide X509_get0_tbs_sigalg().
Revision 1.54 / (download) - annotate - [select for diffs], Thu Feb 22 17:06:42 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.53: +2 -0 lines
Diff to previous 1.53 (colored)
Provide X509_set1_notBefore() and X509_set1_notAfter().
Revision 1.53 / (download) - annotate - [select for diffs], Thu Feb 22 17:05:35 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.52: +1 -0 lines
Diff to previous 1.52 (colored)
Provide X509_get0_pubkey().
Revision 1.52 / (download) - annotate - [select for diffs], Thu Feb 22 17:01:44 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.51: +2 -0 lines
Diff to previous 1.51 (colored)
Provide X509_CRL_set1_lastUpdate() and X509_CRL_set1_nextUpdate().
Revision 1.51 / (download) - annotate - [select for diffs], Thu Feb 22 16:58:45 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.50: +2 -0 lines
Diff to previous 1.50 (colored)
Provide X509_CRL_get0_extensions() and X509_CRL_get_signature_nid().
Revision 1.50 / (download) - annotate - [select for diffs], Thu Feb 22 16:53:42 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.49: +1 -0 lines
Diff to previous 1.49 (colored)
Provide X509_CRL_up_ref().
Revision 1.49 / (download) - annotate - [select for diffs], Thu Feb 22 16:50:30 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.48: +1 -0 lines
Diff to previous 1.48 (colored)
Provide X509_REQ_get_signature_nid().
Revision 1.48 / (download) - annotate - [select for diffs], Thu Feb 22 16:47:50 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.47: +3 -0 lines
Diff to previous 1.47 (colored)
Provide X509_REVOKED_get0_extensions(), X509_REVOKED_get0_revocationDate() and X509_REVOKED_get0_serialNumber().
Revision 1.47 / (download) - annotate - [select for diffs], Thu Feb 22 16:41:04 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.46: +1 -0 lines
Diff to previous 1.46 (colored)
Provide DH_get0_engine().
Revision 1.46 / (download) - annotate - [select for diffs], Thu Feb 22 16:38:43 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.45: +1 -0 lines
Diff to previous 1.45 (colored)
Provide BIO_up_ref().
Revision 1.45 / (download) - annotate - [select for diffs], Tue Feb 20 20:59:19 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.44: +1 -1 lines
Diff to previous 1.44 (colored)
RSA_get_flags should be RSA_test_flags. Noted by sthen. Rides previous minor bump.
Revision 1.44 / (download) - annotate - [select for diffs], Tue Feb 20 18:17:17 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.43: +2 -0 lines
Diff to previous 1.43 (colored)
Provide BIO_meth_{g,s}et_callback_ctrl()
with & ok jsing
Revision 1.43 / (download) - annotate - [select for diffs], Tue Feb 20 18:13:31 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.42: +6 -0 lines
Diff to previous 1.42 (colored)
Provide BIO_meth_get_{create,ctrl,destroy,gets,puts,read}()
ok jsing
Revision 1.42 / (download) - annotate - [select for diffs], Tue Feb 20 18:05:28 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.41: +1 -0 lines
Diff to previous 1.41 (colored)
Provide EVP_PKEY_get0_EC_KEY() and 'if (ret)' vs 'if (ret != 0)' cosmetics. ok jsing
Revision 1.41 / (download) - annotate - [select for diffs], Tue Feb 20 18:01:42 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.40: +1 -0 lines
Diff to previous 1.40 (colored)
Provide DH_set_length() ok jsing
Revision 1.40 / (download) - annotate - [select for diffs], Tue Feb 20 17:59:31 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.39: +1 -0 lines
Diff to previous 1.39 (colored)
Provide DH_bits() ok jsing
Revision 1.39 / (download) - annotate - [select for diffs], Tue Feb 20 17:55:26 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.38: +2 -0 lines
Diff to previous 1.38 (colored)
Provide BIO_{g,s}et_shutdown().
ok jsing
Revision 1.38 / (download) - annotate - [select for diffs], Tue Feb 20 17:52:27 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.37: +1 -0 lines
Diff to previous 1.37 (colored)
Provide DSA_get0_engine() ok jsing
Revision 1.37 / (download) - annotate - [select for diffs], Tue Feb 20 17:48:35 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.36: +2 -0 lines
Diff to previous 1.36 (colored)
Provide DSA_SIG_{g,s}et0()
ok jsing
Revision 1.36 / (download) - annotate - [select for diffs], Tue Feb 20 17:45:44 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.35: +3 -0 lines
Diff to previous 1.35 (colored)
Provide DSA_{clear,set,test}_flags()
ok jsing
Revision 1.35 / (download) - annotate - [select for diffs], Tue Feb 20 17:42:32 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.34: +3 -0 lines
Diff to previous 1.34 (colored)
Provide RSA_{clear,set,test}_flasg()
ok jsing
Revision 1.34 / (download) - annotate - [select for diffs], Tue Feb 20 17:38:15 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.33: +3 -0 lines
Diff to previous 1.33 (colored)
Provide DH_{clear,set,test}_flags().
ok jsing
Revision 1.33 / (download) - annotate - [select for diffs], Tue Feb 20 17:15:27 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.32: +1 -0 lines
Diff to previous 1.32 (colored)
Provide BIO_get_new_index(). Based on BoringSSL.
Revision 1.32 / (download) - annotate - [select for diffs], Tue Feb 20 17:13:14 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.31: +3 -0 lines
Diff to previous 1.31 (colored)
Provide BN_GENCB_new(), BN_GENCB_free() and BN_GENCB_get_arg()
Revision 1.31 / (download) - annotate - [select for diffs], Tue Feb 20 17:09:20 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.30: +1 -0 lines
Diff to previous 1.30 (colored)
Provide X509_NAME_get0_der(). From OpenSSL.
Revision 1.30 / (download) - annotate - [select for diffs], Tue Feb 20 17:06:19 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.29: +1 -0 lines
Diff to previous 1.29 (colored)
Provide X509_REQ_get0_signature()
Revision 1.29 / (download) - annotate - [select for diffs], Tue Feb 20 17:04:58 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.28: +3 -0 lines
Diff to previous 1.28 (colored)
Provide X509_CRL_get0_{last,next}Update() and X509_CRL_get0_signature().
Revision 1.28 / (download) - annotate - [select for diffs], Tue Feb 20 17:02:30 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.27: +9 -1 lines
Diff to previous 1.27 (colored)
Provide BN_get_rfc2409_prime_*() and BN_get_rfc3526_prime_*().
Revision 1.27 / (download) - annotate - [select for diffs], Sun Feb 18 14:58:12 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.26: +2 -0 lines
Diff to previous 1.26 (colored)
Provide {DH,DSA}_set0_key(). Requested by sthen.
ok jsing
Revision 1.26 / (download) - annotate - [select for diffs], Sun Feb 18 12:59:06 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.25: +1 -0 lines
Diff to previous 1.25 (colored)
Provide BIO_meth_set_gets(). ok jsing
Revision 1.25 / (download) - annotate - [select for diffs], Sun Feb 18 12:58:25 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.24: +3 -0 lines
Diff to previous 1.24 (colored)
Provide BIO_{g,s}et_data() and BIO_set_init().
ok jsing
Revision 1.24 / (download) - annotate - [select for diffs], Sun Feb 18 12:57:14 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.23: +2 -0 lines
Diff to previous 1.23 (colored)
Provide RSA_{g,s}et0_crt_params()
ok jsing
Revision 1.23 / (download) - annotate - [select for diffs], Sun Feb 18 12:53:46 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.22: +2 -0 lines
Diff to previous 1.22 (colored)
Provide RSA_{g,s}et0_factors()
ok jsing
Revision 1.22 / (download) - annotate - [select for diffs], Sun Feb 18 12:52:13 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.21: +1 -0 lines
Diff to previous 1.21 (colored)
Provide RSA_bits() ok jsing
Revision 1.21 / (download) - annotate - [select for diffs], Sun Feb 18 12:51:31 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.20: +1 -0 lines
Diff to previous 1.20 (colored)
Provide DH_set0_pqg. ok jsing
Revision 1.20 / (download) - annotate - [select for diffs], Sun Feb 18 12:50:58 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.19: +1 -0 lines
Diff to previous 1.19 (colored)
Provide DSA_set0_pqg. ok jsing
Revision 1.19 / (download) - annotate - [select for diffs], Sat Feb 17 16:54:08 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.18: +1 -0 lines
Diff to previous 1.18 (colored)
Provide EVP_CIPHER_CTX_reset(). Rides previous minor bump.
Revision 1.18 / (download) - annotate - [select for diffs], Sat Feb 17 15:50:42 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.17: +5 -3 lines
Diff to previous 1.17 (colored)
Provide X509_get0_extensions() and X509_get0_signature()
Revision 1.17 / (download) - annotate - [select for diffs], Sat Feb 17 14:55:31 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.16: +3 -0 lines
Diff to previous 1.16 (colored)
Provide EVP_MD_CTX_new(), EVP_MD_CTX_free() and EVP_MD_CTX_reset().
Revision 1.16 / (download) - annotate - [select for diffs], Sat Feb 17 14:53:58 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.15: +4 -0 lines
Diff to previous 1.15 (colored)
Provide HMAC_CTX_new(), HMAC_CTX_free(), HMAC_CTX_reset() and HMAC_CTX_get_md().
Revision 1.15 / (download) - annotate - [select for diffs], Sat Feb 17 13:57:14 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.14: +8 -0 lines
Diff to previous 1.14 (colored)
Provide BIO_meth_{free,new}() and BIO_meth_set_{create,crtl,destroy}()
and BIO_meth_set_{puts,read,write}().
ok jsing
Revision 1.14 / (download) - annotate - [select for diffs], Sat Feb 17 13:47:35 2018 UTC (6 years, 3 months ago) by tb
Branch: MAIN
Changes since 1.13: +9 -0 lines
Diff to previous 1.13 (colored)
Provide further parts of the OpenSSL 1.1 API: {DH,DSA}_get0_{key,pqg}(),
EVP_PKEY_get0_{DH,DSA,RSA}(), RSA_{g,s}et0_key().
ok jsing
Revision 1.13 / (download) - annotate - [select for diffs], Wed Feb 14 17:06:34 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.12: +4 -0 lines
Diff to previous 1.12 (colored)
Provide X509_STORE_CTX_get0_{cert,untrusted}() and
X509_STORE_CTX_set0_{trusted_stack,untrusted}().
Revision 1.12 / (download) - annotate - [select for diffs], Wed Feb 14 16:57:25 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.11: +4 -0 lines
Diff to previous 1.11 (colored)
Provide X509_get{0,m}_not{Before,After}().
Revision 1.11 / (download) - annotate - [select for diffs], Wed Feb 14 16:46:04 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.10: +1 -0 lines
Diff to previous 1.10 (colored)
Provide ASN1_STRING_get0_data().
Revision 1.10 / (download) - annotate - [select for diffs], Wed Feb 14 16:40:42 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.9: +1 -0 lines
Diff to previous 1.9 (colored)
Provide EVP_PKEY_up_ref().
Revision 1.9 / (download) - annotate - [select for diffs], Wed Feb 14 16:32:06 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.8: +2 -0 lines
Diff to previous 1.8 (colored)
Start providing parts of the OpenSSL 1.1 API. This will ease the burden on ports and others trying to make software work with LibreSSL, while avoiding #ifdef mazes. Note that we are not removing 1.0.1 API or making things opaque, hence software written to use the older APIs will continue to work, as will software written to use the 1.1 API (as more functionality become available). Discussed at length with deraadt@ and others.
Revision 1.8 / (download) - annotate - [select for diffs], Wed Feb 14 16:18:10 2018 UTC (6 years, 3 months ago) by jsing
Branch: MAIN
Changes since 1.7: +11 -10 lines
Diff to previous 1.7 (colored)
Provide X509_get_signature_nid().
Revision 1.7 / (download) - annotate - [select for diffs], Sat Feb 10 04:33:47 2018 UTC (6 years, 4 months ago) by jsing
Branch: MAIN
Changes since 1.6: +10 -0 lines
Diff to previous 1.6 (colored)
Expose X509_VERIFY_PARAM_* functions that appeared in the OpenSSL 1.0.2 API and are now in use by various libraries and applications.
Revision 1.6 / (download) - annotate - [select for diffs], Mon Aug 28 17:48:02 2017 UTC (6 years, 9 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE,
OPENBSD_6_2
Changes since 1.5: +0 -1 lines
Diff to previous 1.5 (colored)
Remove EVP_aead_chacha20_poly1305_old() now that the original/old chacha20-poly1305 cipher suites have been removed from libssl.
Revision 1.5 / (download) - annotate - [select for diffs], Mon Aug 28 17:41:59 2017 UTC (6 years, 9 months ago) by jsing
Branch: MAIN
Changes since 1.4: +0 -2 lines
Diff to previous 1.4 (colored)
Remove RSA_padding_add_SSLv23()/RSA_padding_check_SSLv23() and related code. We removed SSLv2/SSLv3 a long time ago... Discussed with doug@
Revision 1.4 / (download) - annotate - [select for diffs], Sun Aug 27 01:39:26 2017 UTC (6 years, 9 months ago) by beck
Branch: MAIN
Changes since 1.3: +1 -0 lines
Diff to previous 1.3 (colored)
Make the symbol for ASN1_time_tm_clamp_notafter visible so libtls can get at it, so libtls can also deal with notafter's past the realm of 32 bit time in portable
Revision 1.3 / (download) - annotate - [select for diffs], Sat May 6 17:16:40 2017 UTC (7 years, 1 month ago) by beck
Branch: MAIN
Changes since 1.2: +4 -0 lines
Diff to previous 1.2 (colored)
Add ASN1_TIME_set_to to exported symbols ok jsing@
Revision 1.2 / (download) - annotate - [select for diffs], Tue Feb 28 14:15:37 2017 UTC (7 years, 3 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE,
OPENBSD_6_1
Changes since 1.1: +1 -0 lines
Diff to previous 1.1 (colored)
Add an EVP interface that provides concatenated MD5+SHA1 hashes, which are used in various parts of TLS 1.0/1.1. This will allow for code simplification in libssl. The same interface exists in OpenSSL 1.1. ok beck@ deraadt@ inoguchi@ millert@
Revision 1.1 / (download) - annotate - [select for diffs], Wed Dec 21 15:49:29 2016 UTC (7 years, 5 months ago) by jsing
Branch: MAIN
Explicitly export a list of symbols from libcrypto. Move the "internal" BN functions from bn.h to bn_lcl.h and stop exporting the bn_* symbols. These are documented as only being intended for internal use, so why they were placed in a public header is beyond me... This hides 363 previously exported symbols, most of which exist in headers that are not installed and were never intended to be public. This also removes a few crusty old things that should have died long ago (like _ossl_old_des_read_pw). But don't worry... there are still 3451 symbols exported from the library. With input and testing from inoguchi@. ok beck@ inoguchi@