wireguard-openbsd/lib/libssl/bs_ber.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl/bs_ber.c?h=jd%2Fqueueboosts 2016-12-03T12:34:35Z Avoid signed vs unsigned warnings from clang by adding two casts, 2016-12-03T12:34:35Z jsing jsing@openbsd.org 2016-12-03T12:34:35Z urn:sha1:bc99fb9a541640cc76264c31e90a0409d164801e slightly rewriting some code and changing the type of an array. ok bcook@ doug@ Check for failure with CBB_init() in bs_ber.c. 2015-06-21T16:10:45Z doug doug@openbsd.org 2015-06-21T16:10:45Z urn:sha1:0d289efd8e15b50466df7a88cafe699f2aeca835 From BoringSSL commit 3fa65f0f05f67615d9daf48940e07f84d094ac6e. Use explicit int in bs_ber.c. 2015-06-17T07:20:39Z doug doug@openbsd.org 2015-06-17T07:20:39Z urn:sha1:8cb1c40e9236534a5b8c0d9c73a91f9e4598dd3f ok miod@ jsing@ Be more strict about BER and DER terminology. 2015-06-16T06:37:58Z doug doug@openbsd.org 2015-06-16T06:37:58Z urn:sha1:50933c7b621fc99209f85811ec1c37a70d870ffa bs_ber.c does not convert BER to DER. It's a hack to convert a DER-like encoding with one violation (indefinite form) to strict DER. Rename the functions to reflect this. ok miod@ jsing@ Make CBS_get_any_asn1_element() more compliant with DER encoding. 2015-06-15T07:35:49Z doug doug@openbsd.org 2015-06-15T07:35:49Z urn:sha1:0870ee343aa39b66a4b36e75c03c2379b807e74d CBS_get_any_asn1_element violates DER encoding by allowing indefinite form. All callers except bs_ber.c expect DER encoding. The callers must check to see if it was indefinite or not. Rather than exposing all callers to this behavior, cbs_get_any_asn1_element_internal() allows specifying whether you want to allow the normally forbidden indefinite form. This is used by CBS_get_any_asn1_element() for strict DER encoding and by a new static function in bs_ber.c for the relaxed version. While I was here, I added comments to differentiate between ASN.1 restrictions and CBS limitations. ok miod@ Add whitespace and replace OPENSSL_free with free in documentation. 2015-04-29T02:11:09Z doug doug@openbsd.org 2015-04-29T02:11:09Z urn:sha1:1f70f88b1a9f455feaefec8778a056e21b33cad0 ok jsing@ Call CBS_mem_equal() rather than reimplementing it. 2015-04-29T01:31:39Z doug doug@openbsd.org 2015-04-29T01:31:39Z urn:sha1:e9bb426a54ed3b2af34878baa98ed2294fc1e56f ok jsing@ KNF bytestring files. 2015-02-06T22:22:33Z doug doug@openbsd.org 2015-02-06T22:22:33Z urn:sha1:732f1cb2d02d218c39e4e4d43c185363bcd578e0 I checked that this doesn't change anything. Compiled with clang using -Wno-pointer-sign -g0 to reduce the differences. Only difference in the asm is due to assert(0) line number changes in bs_cbs.c and bs_cbb.c. miod is ok with the general process. Import BoringSSL's crypto bytestring and crypto bytebuilder APIs. 2015-02-06T09:36:16Z doug doug@openbsd.org 2015-02-06T09:36:16Z urn:sha1:c4905cd3d35713977c7256087e95241d8bae7e2a This is imported with as few changes as possible for the initial commit. I removed OPENSSL_EXPORT, replaced OPENSSL_malloc() etc with malloc() and changed a few header includes. BoringSSL has this as part of their public API. We're leaving it internal to libssl for now. Based on BoringSSL's CBB/CBS API as of commit c5cc15b4f5b1d6e9b9112cb8d30205a638aa2c54. input + ok jsing@, miod@