wireguard-openbsd/lib/libssl/Makefile, branch jd/simplify-queueing WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl/Makefile?h=jd%2Fsimplify-queueing 2020-06-09T16:53:52Z The check_includes step is incorrect dependency management model for 2020-06-09T16:53:52Z deraadt deraadt@openbsd.org 2020-06-09T16:53:52Z urn:sha1:4d97159af714fa3a4da75400501d3840d07e13c2 how our tree gets built. If this was done in all the libraries (imagine sys/dev), it would disrupt the development process hugely. So it should not be done here either. use 'make includes' by hand instead. Provide an easy way to get debug information from TLSv1.3 handshakes. 2020-05-10T14:22:51Z jsing jsing@openbsd.org 2020-05-10T14:22:51Z urn:sha1:be03a99efd312eae6e9bcea2b3833c4accc6f629 This makes it easier to debug TLSv1.3 handshake failures. "Yes please!" tb@, ok beck@ Remove dtls1_enc(). 2020-03-13T16:40:42Z jsing jsing@openbsd.org 2020-03-13T16:40:42Z urn:sha1:da1872888b16efa296a704f345ca24c9e0a24937 Like much of the original DTLS code, dtls1_enc() is effectively a renamed copy of tls1_enc(). Since then tls1_enc() has been modified, however the non-AEAD code remains largely the same. As such, remove dtls1_enc() and instead call tls1_enc() from the DTLS code. The tls1_enc() AEAD code does not currently work correctly with DTLS, however this is a non-issue since we do not support AEAD cipher suites with DTLS currently. ok tb@ Move the TLSv1.3 code that interfaces with the legacy APIs/stack into a 2020-02-15T14:40:38Z jsing jsing@openbsd.org 2020-02-15T14:40:38Z urn:sha1:8cf56ebe48d51afde8949ae424808710761510c8 separate file. Discussed with beck@ and tb@ Provide struct/functions for handling TLSv1.3 key shares. 2020-01-30T17:09:23Z jsing jsing@openbsd.org 2020-01-30T17:09:23Z urn:sha1:4673309b7add502ba4c75a5eed0b550a38c0a8b1 Pull out the key share handling code and provide a clean/self contained interface. This will make it easier to support groups other than X25519. ok beck@ inoguchi@ tb@ Factor out/rewrite the ECDHE EC point key exchange code. 2020-01-30T16:25:09Z jsing jsing@openbsd.org 2020-01-30T16:25:09Z urn:sha1:69428dcae83cc2110bdec85102a22da1502f1acd This reduces replication between the existing TLS client/server and allows the code to soon be reused for TLSv1.3. With feedback from inoguchi@ and tb@ ok inoguchi@ tb@ Add checks to ensure that lib{crypto,ssl,tls} public headers have actually 2020-01-22T07:58:27Z jsing jsing@openbsd.org 2020-01-22T07:58:27Z urn:sha1:c1fdfe6ba76cdf23a4d829d27fc59eec0923c673 been installed prior to building. Requested by and ok tb@ Split the TLSv1.3 guards into separate client and server guards. 2020-01-22T01:21:43Z jsing jsing@openbsd.org 2020-01-22T01:21:43Z urn:sha1:7214807f44f621693bd895b83ec6fd2c0890412d ok beck@ tb@ Provide an error framework for use with the TLSv1.3 code. 2020-01-20T13:10:37Z jsing jsing@openbsd.org 2020-01-20T13:10:37Z urn:sha1:c9989395360567c0e7c9b540b886291d6c8d222f This is based on the libtls error handling code, but adds machine readable codes and subcodes. We then map these codes back to libssl error codes. ok beck@ inoguchi@ Add the initial framework for the TLSv1.3 server. 2019-11-17T06:35:30Z jsing jsing@openbsd.org 2019-11-17T06:35:30Z urn:sha1:8630be8620c03e6ca68c645367d7f98e89c059e7 ok beck@