aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Removes SCT_LIST_set_source and SCT_LIST_set0_logsRob Percival2016-03-094-50/+13
| | | | | | | Both of these functions can easily be implemented by callers instead. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Makes SCT_get0_log return const CTLOG*Rob Percival2016-03-093-3/+3
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Makes CTLOG_STORE_get0_log_by_id return const CTLOG*Rob Percival2016-03-092-7/+7
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Improved documentation of SCT_CTX_* functionsRob Percival2016-03-092-15/+29
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Updates ct_err.cRob Percival2016-03-091-5/+5
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove unnecessary call to SCT_set1_extensions(sct, "", 0) in ct_test.cRob Percival2016-03-091-4/+0
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Reset SCT validation_status if the SCT is modifiedRob Percival2016-03-091-0/+12
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Use SCT_VERSION_V1 in place of literal 0 in ct_test.cRob Percival2016-03-091-1/+1
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fixes "usuable" typo in ct_locl.hRob Percival2016-03-091-1/+1
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Treat boolean functions as booleansRob Percival2016-03-095-25/+16
| | | | | | | | Use "!x" instead of "x <= 0", as these functions never return a negative value. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make parameters of CTLOG_get* constRob Percival2016-03-092-6/+8
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Extensive application of __owur to CT functions that return a booleanRob Percival2016-03-095-53/+98
| | | | | | | Also improves some documentation of those functions. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Makes SCT_LIST_set_source return the number of successesRob Percival2016-03-092-5/+4
| | | | | | | | No longer terminates on first error, but instead tries to set the source of every SCT regardless of whether an error occurs with some. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix locking in ssl_cert_dup()Todd Short2016-03-091-1/+1
| | | | | | | Properly check the return value of CRYPTO_THREAD_lock_new() Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Restore building out of source with the unified build schemeRichard Levitte2016-03-091-7/+7
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* CT test can't run without EC, so skip it on that algo as wellRichard Levitte2016-03-091-1/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix ct_test to not assume it's in the source directoryRichard Levitte2016-03-092-44/+97
| | | | | | | | | | ct_test assumed it's run in the source directory and failed when built elsewhere. It still defaults to that, but can be told another story with the environment variables CT_DIR and CERTS_DIR. Test recipe updated to match. Reviewed-by: Matt Caswell <matt@openssl.org>
* Update CHANGES and NEWSMatt Caswell2016-03-092-0/+16
| | | | | | | Update the CHANGES and NEWS files with information about the recently added AFALG engine and pipelining. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix classic buildMatt Caswell2016-03-091-1/+1
| | | | | | The Thread API changes broke classic build. This fixes it. Reviewed-by: Richard Levitte <levitte@openssl.org>
* In build.info, an IF within a clause that's skipped over shouldn't applyRichard Levitte2016-03-091-1/+7
| | | | | | | If we find an IF within a clause that's skipped over, set it to be skipped as well. Reviewed-by: Matt Caswell <matt@openssl.org>
* Add an entry in NEWS about the new threading APIMatt Caswell2016-03-091-0/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Update CHANGES for the new threading APIMatt Caswell2016-03-091-0/+8
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove the old threading APIMatt Caswell2016-03-099-968/+71
| | | | | | | | | | All OpenSSL code has now been transferred to use the new threading API, so the old one is no longer used and can be removed. We provide some compat macros for removed functions which are all no-ops. There is now no longer a need to set locking callbacks!! Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove use of the old CRYPTO_LOCK_X5O9_STOREMatt Caswell2016-03-091-12/+22
| | | | | | | | The locking here is a bit strange and unclear. Rather than refactor anything and possibly break stuff I have just moved to using the new thread API following as closely as possible what was there previously. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Don't call ENGINE_cleanup when configured "no-engine"Richard Levitte2016-03-091-0/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Don't add engines if configured "no-engine"Richard Levitte2016-03-091-23/+30
| | | | | | | | Similarly, don't add e_capi if configured "no-capieng" Also, indent a little deeper, for clarity. Reviewed-by: Matt Caswell <matt@openssl.org>
* Don't add afalg engine if configured "no-engine"Richard Levitte2016-03-091-10/+12
| | | | | | Also, indent a little deeper, for clarity. Reviewed-by: Matt Caswell <matt@openssl.org>
* Don't check the conditions to build e_afalg if configured "no-engine"Richard Levitte2016-03-091-14/+16
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Have Configure display the value of SHARED_CFLAGRichard Levitte2016-03-091-0/+1
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Make sure the effect of "pic" / "no-pic" is used with assembler compilationsRichard Levitte2016-03-0918-18/+18
| | | | | | | | | | | | | | Before the 'Introduce the "pic" / "no-pic" config option' commit, the shared_cflag value for the chosen config would be part of the make variable CFLAG, which got replicated into CFLAGS and ASFLAGS. Since said commit, the shared_cflag value has become a make variable of its own, SHARED_CFLAG (which is left empty in a "no-pic" build). However, ASFLAGS was forgotten. That's what's corrected with this change. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Touch the correct variables for the system; shlib_wrap.sh on SolarisRichard Levitte2016-03-091-3/+7
| | | | | | | | | If there is cause to think LD_LIBRARY_PATH_32 and LD_PRELOAD_32 are appropriate variables to touch, do so. Otherwise, touch the usual LD_LIBRARY_PATH and LD_PRELOAD. This covers for older installations that don't have a mix of 32-bit and 64-bit libs. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Recognise 32-bit Solaris in util/shlib_wrap.shRichard Levitte2016-03-091-0/+5
| | | | | | Submitted by Erik Forsberg <erik@efca.com> Reviewed-by: Andy Polyakov <appro@openssl.org>
* Check gcc version to see if it supports -MM and friendsRichard Levitte2016-03-091-1/+5
| | | | | | | | | According to manuals found here: https://gcc.gnu.org/onlinedocs/, GNU C version 3 and on support the dependency generation options. We therefore need to check the gcc version to see if we're going to use it or makedepend for dependency generation. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Add extra include directory for includers of ppc_arch.hRichard Levitte2016-03-092-1/+3
| | | | | | | | | crypto/evp/e_aes.c and crypto/modes/gcm128.c include ppc_arch.h, which is located in crypto/, so add that as extra include directory for them. Issue reported by Jeffrey Walton <noloader@gmail.com> Reviewed-by: Andy Polyakov <appro@openssl.org>
* Adapt INSTALL and related notes for WindowsRichard Levitte2016-03-092-127/+127
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Adapt appveyor.yml for the new unified buildRichard Levitte2016-03-091-11/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Adapt the Windows makefile template to source generationRichard Levitte2016-03-091-0/+47
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Don't run the TLSProxy based tests in native WindowsRichard Levitte2016-03-097-7/+7
| | | | | | | There are issues binding listening ports. This may be analyzed more thoroughly later on. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Unified - name native Windows shared libraries like MingW builds doRichard Levitte2016-03-091-0/+3
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Unified - extract settings from util/pl/VC-32.pl and make the config settingsRichard Levitte2016-03-093-36/+212
| | | | | | | | | | | This introduces the settings loutflag and aroutflag, because different Windows tools that do the same thing have different ways to specify the output file. The Borland C++ config is commented away for the monent, perhaps permanently. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Unified - a native Windows makefile templateRichard Levitte2016-03-091-0/+293
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* ec/asm/ecp_nistz256-sparcv9.pl: get corner logic right.Andy Polyakov2016-03-091-3/+12
| | | | | | RT#4284 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Adapt mk1mf.pl and companions to changed perlasm script semanticsRichard Levitte2016-03-092-4/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Unified - adapt the generation of whirlpool assembler to use GENERATERichard Levitte2016-03-093-8/+10
| | | | | | | | | This gets rid of the BEGINRAW..ENDRAW sections in crypto/whrlpool/build.info. This also moves the assembler generating perl scripts to take the output file name as last command line argument, where necessary. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Unified - adapt the generation of sha assembler to use GENERATERichard Levitte2016-03-097-79/+70
| | | | | | | | | This gets rid of the BEGINRAW..ENDRAW sections in crypto/sha/build.info. This also moves the assembler generating perl scripts to take the output file name as last command line argument, where necessary. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Unified - adapt the generation of rc4 assembler to use GENERATERichard Levitte2016-03-094-15/+20
| | | | | | | | | This gets rid of the BEGINRAW..ENDRAW sections in crypto/rc4/build.info. This also moves the assembler generating perl scripts to take the output file name as last command line argument, where necessary. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Unified - adapt the generation of rc5 assembler to use GENERATERichard Levitte2016-03-093-7/+8
| | | | | | | | | This gets rid of the BEGINRAW..ENDRAW sections in crypto/rc5/build.info. This also moves the assembler generating perl scripts to take the output file name as last command line argument, where necessary. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Unified - adapt the generation of ripemd assembler to use GENERATERichard Levitte2016-03-093-7/+8
| | | | | | | | | This gets rid of the BEGINRAW..ENDRAW sections in crypto/ripemd/build.info. This also moves the assembler generating perl scripts to take the output file name as last command line argument, where necessary. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Unified - adapt the generation of md5 assembler to use GENERATERichard Levitte2016-03-093-9/+12
| | | | | | | | | This gets rid of the BEGINRAW..ENDRAW sections in crypto/md5/build.info. This also moves the assembler generating perl scripts to take the output file name as last command line argument, where necessary. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Unified - adapt the generation of modes assembler to use GENERATERichard Levitte2016-03-095-28/+22
| | | | | | | | | This gets rid of the BEGINRAW..ENDRAW sections in crypto/modes/build.info. This also moves the assembler generating perl scripts to take the output file name as last command line argument, where necessary. Reviewed-by: Andy Polyakov <appro@openssl.org>