| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Remove the libssl/src directory |   beck | 2016-09-03 | 10 | -4525/+0 |
| | | |||||
| * | Clean up OCSP_check_validity() a bit more. | beck | 2016-07-16 | 1 | -11/+10 |
| | | | | | | | - Return on first failure rather than continuing. - Don't compare times by comparing strings that possibly were not parsable as a time. ok deraadt@ | ||||
| * | remove unneeded duplicate call - spotted by jsing@ | beck | 2016-07-05 | 1 | -3/+1 |
| | | |||||
| * | Add several fixes from OpenSSL to make OCSP work with intermediate | beck | 2016-07-05 | 1 | -10/+24 |
| | | | | | | | certificates provided in the response. - makes our newly added ocsp regress test pass too.. ok bcook@ | ||||
| * | Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP uses | beck | 2016-06-25 | 1 | -2/+2 |
| | | | | | Generalized Time on requests as per RFC6960 | ||||
| * | Fix the ocsp code to actually check for errors when comparing time values | beck | 2016-06-25 | 1 | -7/+31 |
| | | | | | | | | | | which was not being done due to a lack of checking of the return code for X509_cmp_time. Ensure that we only compare GERNERALIZEDTIME values because this is what is specified by RFC6960. Issue reported, and fix provided by Kazuki Yamaguchi <k@rhe.jp> ok bcook@ | ||||
| * | Use ASN1_item_dup() instead of ASN1_dup(). |   jsing | 2015-09-26 | 1 | -4/+3 |
| | | | | | ok bcook@ | ||||
| * | Expand ASN.1 template macros - no change in generated assembly. | jsing | 2015-07-25 | 1 | -76/+496 |
| | | |||||
| * | Drop stupid (int) casts for the arguments of malloc() and friends. This is |   miod | 2015-07-19 | 1 | -3/+3 |
| | | | | | | not 16-bit MS-DOS anymore. ok bcook@ tedu@ | ||||
| * | Check return value of all used functions in OCSP_REQUEST_print(); covers | miod | 2015-07-16 | 1 | -5/+9 |
| | | | | | Coverity CID 78796; ok beck@ | ||||
| * | Manually expand ASN1_ITEM_rptr macros that should have been expanded with | jsing | 2015-02-10 | 1 | -2/+2 |
| | | | | | the IMPLEMENT_ASN1_DUP_FUNCTION macro. | ||||
| * | Expand the IMPLEMENT_ASN1_DUP_FUNCTION macro so that the code is visible | jsing | 2015-02-10 | 1 | -2/+7 |
| | | | | | | | | | | and functions can be readily located. Change has been scripted and the generated assembly only differs by changes to line numbers. Discussed with beck@ miod@ tedu@ | ||||
| * | Expand the IMPLEMENT_ASN1_FUNCTIONS macro so that the code is visible and | jsing | 2015-02-09 | 1 | -16/+376 |
| | | | | | | | | | functions can be readily located. Change has been scripted and there is no change to the generated assembly. Discussed with beck@ miod@ tedu@ | ||||
| * | Check the result of sk_*_push() operations for failure. | miod | 2014-10-28 | 1 | -2/+5 |
| | | | | | ok doug@ jsing@ | ||||
| * | Use arc4random_buf() instead of RAND_bytes() or RAND_pseudo_bytes(). | jsing | 2014-10-22 | 1 | -3/+3 |
| | | | | | | | | | arc4random_buf() is guaranteed to always succeed - it is worth noting that a number of the replaced function calls were already missing return value checks. ok deraadt@ | ||||
| * | None of these need to include <openssl/rand.h> | jsing | 2014-10-18 | 3 | -6/+3 |
| | | |||||
| * | Use string literals in printf style calls so gcc's -Wformat works. |   doug | 2014-10-03 | 1 | -8/+4 |
| | | | | | ok tedu@, miod@ | ||||
| * | BIO_free() returns immediately when the sole input is NULL. | doug | 2014-07-25 | 1 | -3/+2 |
| | | | | | | | Remove unnecessary NULL check. ok miod@ | ||||
| * | The bell tolls for BUF_strdup - Start the migration to using | beck | 2014-07-13 | 1 | -6/+6 |
| | | | | | | | intrinsics. This is the easy ones, a few left to check one at a time. ok miod@ deraadt@ | ||||
| * | Principle of least surprise: make CMAC_CTX_free(), OCSP_REQ_CTX_free() and | miod | 2014-07-12 | 1 | -1/+4 |
| | | | | | | X509_STORE_CTX_free() accept NULL pointers as input without dereferencing them, like all the other well-behaved *_CTX_free() functions do. | ||||
| * | Only import cryptlib.h in the four source files that actually need it. | jsing | 2014-07-11 | 4 | -16/+17 |
| | | | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@ | ||||
| * | Explicitly include <openssl/opensslconf.h> in every file that references | jsing | 2014-07-10 | 2 | -2/+7 |
| | | | | | | | | | | an OPENSSL_NO_* define. This avoids relying on something else pulling it in for us, plus it fixes several cases where the #ifndef OPENSSL_NO_XYZ is never going to do anything, since OPENSSL_NO_XYZ will never defined, due to the fact that opensslconf.h has not been included. This also includes some miscellaneous sorting/tidying of headers. | ||||
| * | Stop including standard headers via cryptlib.h - pull in the headers that | jsing | 2014-07-10 | 2 | -4/+8 |
| | | | | | | | are needed in the source files that actually require them. ok beck@ miod@ | ||||
| * | reset host, port, path to null after freeing so the caller doesn't |   tedu | 2014-07-09 | 1 | -1/+4 |
| | | | | | | accidentally free them again. actually a bug in the caller and (hey hey) apps/ocsp.c has exactly that bug, but it's easier/safer to fix here. | ||||
| * | ocsp_check_ids says "If algoritm mismatch let caller deal with it" before | tedu | 2014-07-09 | 1 | -6/+1 |
| | | | | | | | returning 2. The one and only caller doesn't check for that, so... Stop returning it. ok miod | ||||
| * | tags as requested by miod and tedu |   deraadt | 2014-06-12 | 10 | -10/+10 |
| | | |||||
| * | no need for null check before free. from Brendan MacDonell | tedu | 2014-05-30 | 1 | -2/+1 |
| | | |||||
| * | Not OPENSSL_SYS_SUNOS. | jsing | 2014-05-23 | 1 | -3/+0 |
| | | |||||
| * | Plug memory leaks upon error in OCSP_url_svcloc_new(). | miod | 2014-05-18 | 1 | -6/+9 |
| | | | | | ok jsing@ | ||||
| * | In OCSP_sendreq_bio(), cope with OCSP_sendreq_new() returning NULL. | miod | 2014-05-18 | 1 | -4/+6 |
| | | | | | ok jsing@ | ||||
| * | More KNF. | jsing | 2014-05-18 | 10 | -193/+208 |
| | | |||||
| * | unchecked malloc() return value in OCSP_sendreq_new(). | miod | 2014-05-17 | 1 | -0/+2 |
| | | |||||
| * | KNF | miod | 2014-05-17 | 8 | -1274/+1332 |
| | | |||||
| * | Replace all use of ERR_add_error_data with ERR_asprintf_error_data. | beck | 2014-04-26 | 2 | -5/+5 |
| | | | | | | | | | This avoids a lot of ugly gymnastics to do snprintfs before sending the bag of strings to ERR, and eliminates at least one place in dso_dlfctn.c where it was being called with the incorrect number of arguments and using random things off the stack as addresses of strings. ok krw@, jsing@ | ||||
| * | Put the final pieces from e_os.h in the required places, and remove it. | deraadt | 2014-04-18 | 1 | -1/+0 |
| | | | | | | "dance on it's grave" says beck ok guenther beck | ||||
| * | fix some more leaks, mostly suggestions from miod |   jsg | 2014-04-17 | 1 | -0/+3 |
| | | | | | ok miod@ | ||||
| * | fix some of the leaks | jsg | 2014-04-17 | 1 | -3/+11 |
| | | | | | ok miod@ looks good deraadt@ | ||||
| * | Change library to use intrinsic memory allocation functions instead of | beck | 2014-04-17 | 3 | -15/+15 |
| | | | | | | | | | OPENSSL_foo wrappers. This changes: OPENSSL_malloc->malloc OPENSSL_free->free OPENSSL_relloc->realloc OPENSSL_freeFunc->free | ||||
| * | we don't use these files for building | tedu | 2014-04-15 | 1 | -78/+0 |
| | | |||||
| * | remove auto-generated dependencies from the old unused build system, so | deraadt | 2014-04-14 | 1 | -135/+0 |
| | | | | | | that it is easier to find code pieces. They are getting in the way. ok miod | ||||
| * | Merge conflicts; remove MacOS, Netware, OS/2, VMS and Windows build machinery. | miod | 2014-04-13 | 1 | -0/+1 |
| | | |||||
| * | cherry pick bugfixes for http://www.openssl.org/news/secadv_20130205.txt |   markus | 2013-02-14 | 1 | -3/+6 |
| | | | | | | from the openssl git (changes between openssl 1.0.1c and 1.0.1d). ok djm@ | ||||
| * | resolve conflicts |   djm | 2012-10-13 | 1 | -1/+2 |
| | | |||||
| * | openssl-1.0.0e: resolve conflicts | djm | 2011-11-03 | 3 | -9/+13 |
| | | |||||
| * | resolve conflicts, fix local changes | djm | 2010-10-01 | 9 | -370/+82 |
| | | |||||
| * | import OpenSSL-1.0.0a | djm | 2010-10-01 | 1 | -48/+43 |
| | | |||||
| * | resolve conflicts | djm | 2009-01-09 | 3 | -4/+5 |
| | | |||||
| * | import openssl-0.9.8j | djm | 2009-01-09 | 2 | -39/+44 |
| | | |||||
| * | resolve conflicts | djm | 2008-09-06 | 6 | -111/+414 |
| | | |||||
| * | import of OpenSSL 0.9.8h | djm | 2008-09-06 | 4 | -196/+124 |
| | | |||||
 |
index : wireguard-openbsd | |
| WireGuard implementation for the OpenBSD kernel | Matt Dunwoodie |
| summaryrefslogtreecommitdiffstats |