wireguard-openbsd/lib/libcrypto/pem, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/pem?h=jd%2Fqueueboosts 2019-09-06T17:41:05Z Handle CMS PEM headers. 2019-09-06T17:41:05Z jsing jsing@openbsd.org 2019-09-06T17:41:05Z urn:sha1:2df0f7a19cb6fd1bbfef2eee71f78d3b6aaae8c2 ok inoguchi@ tb@ Clean up pvkfmt.c 2019-07-08T11:56:18Z inoguchi inoguchi@openbsd.org 2019-07-08T11:56:18Z urn:sha1:896b2b4fd009706b76ac0f36d864050edade9407 - Replace EVP_CIPHER_CTX_init with EVP_CIPHER_CTX_new and handle return value - Replace EVP_CIPHER_CTX_cleanup with EVP_CIPHER_CTX_free - Change two 'return -1;' to 'goto err;' for avoiding leak - Remove the case if enclevel == 0 - Change enclevel checking to make more consistent - Change all goto label to 'err' and insert space before goto label ok and advise from tb@ Fix pvk format processing in libcrypto 2019-07-07T10:52:56Z inoguchi inoguchi@openbsd.org 2019-07-07T10:52:56Z urn:sha1:3278f4d9aecba3f46c07bf4df1702be126c2def0 - Return the valid pointer in i2b_PVK() - Use EVP_Decrypt* instead of EVP_Encrypt* - Fix error handling after BIO_write() in i2b_PVK_bio() ok tb@ Change PEM_Sign{Init,Update}() to return an int. 2018-08-24T19:51:31Z tb tb@openbsd.org 2018-08-24T19:51:31Z urn:sha1:40ff503a4db30956cca34dc3bdf38f21654f9c10 tested in a bulk by sthen ok jsing Check return value of EVP_EncodeUpdate() in PEM_write_bio(). 2018-08-24T19:48:39Z tb tb@openbsd.org 2018-08-24T19:48:39Z urn:sha1:4256894af567b9e26b42a23caa47bf237dc4c629 ok jsing Fix memory leak in i2b_PVK in error handling. 2018-08-05T11:19:25Z bcook bcook@openbsd.org 2018-08-05T11:19:25Z urn:sha1:2819ceea818a3723e4852bd9d2f4d4ff3fc9a1cb Simplify parameter checks since this is only called from one place. Found by Coverity, CID 183502. ok beck@ Add const qualifier to the 'name', 'header', and 'data' arguments of 2018-05-13T10:47:54Z tb tb@openbsd.org 2018-05-13T10:47:54Z urn:sha1:dffa7454ffa1b2213c245e1003d0a9a64536240e PEM_write(3) and PEM_write_bio(3). tested in a bulk build by sthen ok jsing make ENGINE_finish() succeed on NULL and simplify callers as in 2018-04-14T07:09:21Z tb tb@openbsd.org 2018-04-14T07:09:21Z urn:sha1:341fd9e0365d25e6e931af82db9dcc52a587c361 OpenSSL commit 7c96dbcdab9 by Rich Salz. This cleans up the caller side quite a bit and reduces the number of lines enclosed in #ifndef OPENSSL_NO_ENGINE. codesearch.debian.net shows that almost nothing checks the return value of ENGINE_finish(). While there, replace a few nearby 'if (!ptr)' with 'if (ptr == NULL)'. ok jsing, tested by & ok inoguchi use freezero() instead of memset/explicit_bzero + free. Substantially 2017-05-02T03:59:44Z deraadt deraadt@openbsd.org 2017-05-02T03:59:44Z urn:sha1:7de8a6843ca16b4f1c9d2a7eab4c71e8af96a4e6 reduces conditional logic (-218, +82). MOD_EXP_CTIME_MIN_CACHE_LINE_WIDTH cache alignment calculation bn/bn_exp.c wasn'tt quite right. Two other tricky bits with ASN1_STRING_FLAG_NDEF and BN_FLG_STATIC_DATA where the condition cannot be collapsed completely. Passes regress. ok beck Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:22Z beck beck@openbsd.org 2017-01-29T17:49:22Z urn:sha1:5067ae9f807f8af9e6350e51e6a54619386c06ba as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@