wireguard-openbsd/lib/libssl/d1_lib.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/lib/libssl/d1_lib.c?h=jd%2Fqueueboosts 2020-03-12T17:01:53Z Use internal versions of SSL3_BUFFER, SSL3_RECORD and DTLS1_RECORD_DATA. 2020-03-12T17:01:53Z jsing jsing@openbsd.org 2020-03-12T17:01:53Z urn:sha1:6182911e33a2ad3f3fb1c68d36e203f50c40469a SSL3_BUFFER, SSL3_RECORD and DTLS1_RECORD_DATA are currently still in public headers, even though their usage is internal. This moves to using _INTERNAL suffixed versions that are in internal headers, which then allows us to change them without any potential public API fallout. ok inoguchi@ tb@ Remove the enc function pointers. 2020-03-10T17:02:21Z jsing jsing@openbsd.org 2020-03-10T17:02:21Z urn:sha1:6f4f83c6639d358ea671991be6accae1493a7516 The enc function pointers do not serve any purpose these days - remove a layer of indirection and call dtls1_enc()/tls1_enc() directly. ok inoguchi@ tb@ Convert dtls1_build_sequence_number() to CBB. 2020-02-21T16:12:18Z jsing jsing@openbsd.org 2020-02-21T16:12:18Z urn:sha1:94777d7c366bec9e8db99745e9bca3e7cd1f7560 ok inoguchi@ tb@ Use freezero() for the internal opaque structures, instead of the current 2017-04-10T17:27:33Z jsing jsing@openbsd.org 2017-04-10T17:27:33Z urn:sha1:8f2be08bb3450546a0413c2e8cd4b1a35d4a494b explicit_bzero()/free(). Less code and potentially less overhead. Change SSLerror() back to taking two args, with the first one being an SSL *. 2017-02-07T02:08:38Z beck beck@openbsd.org 2017-02-07T02:08:38Z urn:sha1:c9d7abb729ab657a1b8a3ce173cfa0bd7ee58fd6 Make a table of "function codes" which maps the internal state of the SSL * to something like a useful name so in a typical error in the connection you know in what sort of place in the handshake things happened. (instead of by arcane function name). Add SSLerrorx() for when we don't have an SSL * ok jsing@ after us both being prodded by bluhm@ to make it not terrible Send the error function codes to rot in the depths of hell where they belong 2017-01-26T10:40:21Z beck beck@openbsd.org 2017-01-26T10:40:21Z urn:sha1:c37c9edfef0160532e31e5d5ada0f7781b5704ec We leave a single funciton code (0xFFF) to say "SSL_internal" so the public API will not break, and we replace all internal use of the two argument SSL_err() with the internal only SSL_error() that only takes a reason code. ok jsing@ Remove most of SSL3_ENC_METHOD - we can just inline the function calls 2017-01-26T06:32:58Z jsing jsing@openbsd.org 2017-01-26T06:32:58Z urn:sha1:53f78dfd664e371a1c7d0aa18adf6139de8bb900 and defines since they are the same everywhere. ok beck@ Change the SSL_IS_DTLS() macro to check the version, rather than using a 2017-01-25T06:38:01Z jsing jsing@openbsd.org 2017-01-25T06:38:01Z urn:sha1:8e085139a9db4732f5e82ef6018013cebb7bf74d flag in the encryption methods. We can do this since there is currently only one DTLS version. This makes upcoming changes easier. ok beck@ Split most of SSL_METHOD out into an internal variant, which is opaque. 2017-01-23T13:36:12Z jsing jsing@openbsd.org 2017-01-23T13:36:12Z urn:sha1:9eac7899ed76d83aff808c8376c1d53fc748541a Discussed with beck@ Move most of DTLS1_STATE to internal. 2017-01-22T07:16:38Z beck beck@openbsd.org 2017-01-22T07:16:38Z urn:sha1:f7271532151d495f01d630a2c982761e61cd34c1 ok jsing@