wireguard-openbsd/lib/libcrypto/asn1, branch jd/queueboostsWireGuard implementation for the OpenBSD kernelhttps://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/asn1?h=jd%2Fqueueboosts2020-06-04T21:21:03ZWhen X509_ATTRIBUTE_create() receives an invalid NID (e.g., -1), return2020-06-04T21:21:03Zschwarzeschwarze@openbsd.org2020-06-04T21:21:03Zurn:sha1:d0d7c83557b3c415802d9c96ee21246a0813f62c
failure rather than silently constructing a broken X509_ATTRIBUTE object
that might cause NULL pointer accesses later on. This matters because
X509_ATTRIBUTE_create() is used by documented API functions like
PKCS7_add_attribute(3) and the NID comes straight from the user.
This fixes a bug found while working on documentation.
OK tb@ and "thanks" bluhm@
When printing the serialNumber, fall back to the colon separated hex2020-04-10T07:05:24Ztbtb@openbsd.org2020-04-10T07:05:24Zurn:sha1:7f8f8deddf97791fa2c29ffa0c447b4f33cc54e0
bytes in case ASN1_INTEGER_get() failed. This happens more often since
asn1/a_int.c -r1.34. Matches OpenSSL behavior.
Issue in openssl x509 -text output reported by sthen
ok jsing sthen
Fix ASN1 print functions2020-03-24T10:46:38Zinoguchiinoguchi@openbsd.org2020-03-24T10:46:38Zurn:sha1:ed3ab26a2c7654ab24bf2120d1d2866ff0e8b9a2
Check and print out boolean type properly.
Based on OpenSSL commit ad72d9fdf7709ddb97a58d7d45d755e6e0504b96.
Reduced unneeded parentheses from if condition.
Check return value from i2s_ASN1_INTEGER.
Based on OpenSSL commit 5e3553c2de9a365479324b8ba8b998f0cce3e527.
Added if condition expression and return 0 if NULL is returned.
ok tb@
Avoid leak in error path of asn1_parse22020-01-09T11:27:21Zinoguchiinoguchi@openbsd.org2020-01-09T11:27:21Zurn:sha1:de9f0cbc1d46e445fdba61962fc8b8e9267cf8a9
ok tb@
Sort standard_methods by pkey_id.2019-11-02T16:06:25Zinoguchiinoguchi@openbsd.org2019-11-02T16:06:25Zurn:sha1:a2c9b92b2371b96de1d3c6083133a247928b6f9e
ok jsing@
Wire up ASN.1 methods for RSA-PSS.2019-11-01T15:08:36Zjsingjsing@openbsd.org2019-11-01T15:08:36Zurn:sha1:011f8799cf4daae1ddda4870e285f798598b7f63
ok tb@
Provide ASN1_TYPE_{,un}pack_sequence().2019-10-24T16:36:10Zjsingjsing@openbsd.org2019-10-24T16:36:10Zurn:sha1:434c8a018109e78da75dfdc17c134227f2eb6b6f
These are internal only for now.
Based on OpenSSL 1.1.1d.
ok inoguchi@
Add static_ASN1_* macro2019-08-20T13:10:09Zinoguchiinoguchi@openbsd.org2019-08-20T13:10:09Zurn:sha1:6da48468566124c38446f12db6f665ebad62f074
- Add static_ASN1_* macro. Patch was provided by steils AT gentoo.org
Fix signed overflow in X509_CRL_print().2019-05-12T15:56:31Ztbtb@openbsd.org2019-05-12T15:56:31Zurn:sha1:3c3e846b4b81c3b7a3d979a2df1079c05cc32363
fixes oss-fuzz #14558
ok beck jsing
Avoid an undefined shift in ASN1_ENUMERATED_get().2019-04-28T05:05:56Ztbtb@openbsd.org2019-04-28T05:05:56Zurn:sha1:48eb3f71463cd24e9de2a05809adcc8f2bfd044b
(same fix as in a_int.c rev 1.34)
Fixes oss-fuzz issue #13809
ok beck, jsing