wireguard-openbsd/lib/libcrypto/pkcs12/p12_mutl.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libcrypto/pkcs12/p12_mutl.c?h=jd%2Fqueueboosts 2017-01-29T17:49:22Z Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:22Z beck beck@openbsd.org 2017-01-29T17:49:22Z urn:sha1:5067ae9f807f8af9e6350e51e6a54619386c06ba as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ Stricter checks of ASN1_INTEGER to reject ASN1_NEG_INTEGER in places when 2016-11-08T20:01:06Z miod miod@openbsd.org 2016-11-08T20:01:06Z urn:sha1:d0ed2b2740a32b701df3bd82199efbb9237fff47 they don't make sense. ok beck@ Replace M_ASN1_INTEGER_(new|free) with ASN1_INTEGER_(new|free) - this is 2015-09-30T17:30:15Z jsing jsing@openbsd.org 2015-09-30T17:30:15Z urn:sha1:d42c09919c52c38745c8b4aaa8da1b7081200a2c different from the macro expansion, but the result is the same. Also replace some ASN1_STRING_dup() with ASN1_INTEGER_dup(). ok beck@ doug@ Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generated 2015-07-29T14:58:34Z jsing jsing@openbsd.org 2015-07-29T14:58:34Z urn:sha1:3e1a72ea05a71ae3681b404f7429cdefbdd303f8 assembly. ok bcook@ In PKCS12_setup_mac(), do not assign p12->mac->salt->length until the allocation 2014-10-22T18:37:22Z miod miod@openbsd.org 2014-10-22T18:37:22Z urn:sha1:6cfd5b95c07614bc7e46cee805a54adb86969eae of p12->mac->salt->data has actually succeeded. In one of my trees for a long time already... Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). 2014-10-22T13:02:03Z jsing jsing@openbsd.org 2014-10-22T13:02:03Z urn:sha1:ef624301d95e1d2367e46a80103e7ba867cb892f arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@ Only import cryptlib.h in the four source files that actually need it. 2014-07-11T08:44:47Z jsing jsing@openbsd.org 2014-07-11T08:44:47Z urn:sha1:b6ab114e77db2581d5bda2ca4b0aa0d68b2e0f90 Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ Explicitly include <openssl/opensslconf.h> in every file that references 2014-07-10T22:45:56Z jsing jsing@openbsd.org 2014-07-10T22:45:56Z urn:sha1:8cf4d6a6f06280da23bb640b5f3f1330158a5205 an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. Stop including standard headers via cryptlib.h - pull in the headers that 2014-07-10T13:58:21Z jsing jsing@openbsd.org 2014-07-10T13:58:21Z urn:sha1:a8913c44aee6c78b4770e56ab6afb429afabee6d are needed in the source files that actually require them. ok beck@ miod@ KNF. 2014-07-08T09:24:53Z jsing jsing@openbsd.org 2014-07-08T09:24:53Z urn:sha1:d2af6916acb9ece48b3772396767dd707e41035b