aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove RSA_FLAG_SIGN_VER flag.Dr. Stephen Henson2015-12-024-19/+4
| | | | | | | | Remove RSA_FLAG_SIGN_VER: this was origininally used to retain binary compatibility after RSA_METHOD was extended to include rsa_sign and rsa_verify fields. It is no longer needed. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Move the backtrace memleak options to a separate variableRichard Levitte2015-12-021-1/+13
| | | | | | | | The contents of this variable ($memleak_devteam_backtrace) is added to $cflags unless we build for a platform we know doesn't support gcc's -rdynamic och backtrace() and friends. Reviewed-by: Andy Polyakov <appro@openssl.org>
* make updateDr. Stephen Henson2015-12-021-2/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove legacy sign/verify from EVP_MD.Dr. Stephen Henson2015-12-0225-486/+78
| | | | | | | | | | | | | Remove sign/verify and required_pkey_type fields of EVP_MD: these are a legacy from when digests were linked to public key types. All signing is now handled by the corresponding EVP_PKEY_METHOD. Only allow supported digest types in RSA EVP_PKEY_METHOD: other algorithms already block unsupported types. Remove now obsolete EVP_dss1() and EVP_ecdsa(). Reviewed-by: Richard Levitte <levitte@openssl.org>
* Run test_ordinals after updateRich Salz2015-12-022-1/+4
| | | | | | Catch a common 'make update' failure: conflicting ordinals. Reviewed-by: Richard Levitte <levitte@openssl.org>
* _BSD_SOURCE is deprecated, use _DEFAULT_SOURCE insteadRichard Levitte2015-12-021-0/+1
| | | | | | | | The feature_test_macros(7) manual tells us that _BSD_SOURCE is deprecated since glibc 2.20 and that the compiler will warn about it being used, unless _DEFAULT_SOURCE is defined as well. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add backtrace to memory leak outputRichard Levitte2015-12-022-27/+50
| | | | | | This is an option for builds with gcc and --strict-warnings. Reviewed-by: Rich Salz <rsalz@openssl.org>
* crypto/sparcv9cap.c: add SIGILL-free feature detection for Solaris.Andy Polyakov2015-12-021-0/+47
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* modes/ocb128.c: split fixed block xors to aligned and misaligned.Andy Polyakov2015-12-022-57/+26
| | | | | | | Main goal was to improve performance on RISC platforms, e.g. 10% was measured on MIPS, POWER8... Reviewed-by: Matt Caswell <matt@openssl.org>
* modes/ocb128.c: ocb_lookup_l to allow non-contiguous lookupAndy Polyakov2015-12-021-8/+29
| | | | | | and CRYPTO_ocb128_encrypt to handle in==out. Reviewed-by: Matt Caswell <matt@openssl.org>
* typo fix on functionRich Salz2015-12-011-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* ex_data part 2: doc fixes and CRYPTO_free_ex_index.Rich Salz2015-12-0150-788/+537
| | | | | | | | | | Add CRYPTO_free_ex_index (for shared libraries) Unify and complete the documentation for all "ex_data" API's and objects. Replace xxx_get_ex_new_index functions with a macro. Added an exdata test. Renamed the ex_data internal datatypes. Reviewed-by: Matt Caswell <matt@openssl.org>
* Remove BN_initRich Salz2015-11-307-32/+16
| | | | | | Rename it to be an internal function bn_init. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove GOST special case: handled automatically now.Dr. Stephen Henson2015-11-301-15/+0
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Use digest indices for signature algorithms.Dr. Stephen Henson2015-11-303-35/+20
| | | | | | | Don't hard code EVP_sha* etc for signature algorithms: use table indices instead. Add SHA224 and SHA512 to tables. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* For TLS < 1.2 use default digest for client certificateDr. Stephen Henson2015-11-301-3/+9
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Use digest tables for defaults.Dr. Stephen Henson2015-11-303-10/+11
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Correct aes-128-cbc cipher nameViktor Dukhovni2015-11-282-2/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* fix function code discrepancyDr. Stephen Henson2015-11-273-4/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* PRF and handshake hash revision.Dr. Stephen Henson2015-11-276-231/+138
| | | | | | | | | | | | | | Change handshake hash array into a single digest context simplifying the handhake hash code. Use EVP_md5_sha1() if needed for handshake hashes in TLS 1.1 and earlier. Simplify PRF code to also use a single digest and treat EVP_md5_sha1() as a special case. Modify algorithm2 field of ciphers to use a single index value for handshake hash and PRF instead of a bitmap. Reviewed-by: Matt Caswell <matt@openssl.org>
* Updates to GOST2012Matt Caswell2015-11-276-40/+46
| | | | | | | Various updates following feedback from the recent commit of the new GOST2012 code. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Remove X509_VERIFY_PARAM_IDDr. Stephen Henson2015-11-264-74/+49
| | | | | | | Now that X509_VERIFY_PARAM is opaque X509_VERIFY_PARAM_ID is no longer needed. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix a NULL deref in an error pathMatt Caswell2015-11-261-1/+1
| | | | | | | The SRP_create_verifier_BN function goes to the |err| label if the |salt| value passed to it is NULL. It is then deref'd. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add documentation for BN_with_flagsMatt Caswell2015-11-262-3/+35
| | | | | | | Following on from the previous commit this adds some documentation for the BN_with_flags function which is easy to misuse. Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Tighten up BN_with_flags usage and avoid a reachable assertMatt Caswell2015-11-267-129/+194
| | | | | | | | | | | | | | | | | | The function rsa_ossl_mod_exp uses the function BN_with_flags to create a temporary copy (local_r1) of a BIGNUM (r1) with modified flags. This temporary copy shares some state with the original r1. If the state of r1 gets updated then local_r1's state will be stale. This was occurring in the function so that when local_r1 was freed a call to bn_check_top was made which failed an assert due to the stale state. To resolve this we must free local_r1 immediately after we have finished using it and not wait until the end of the function. This problem prompted a review of all BN_with_flag usage within the codebase. All other usage appears to be correct, although often not obviously so. This commit refactors things to make it much clearer for these other uses. Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Remove unused cert_verify_mac codeDr. Stephen Henson2015-11-257-47/+0
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Configuratons: add -DFILIO_H to harmonized Solaris targets.Andy Polyakov2015-11-242-39/+27
| | | | | | Triggered by RT#4144. Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Remove useless locking codeAlessandro Ghedini2015-11-241-2/+0
| | | | | | | | | Follow-up to 070c233. Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Rich Salz <rsalz@akamai.com> GH: #454
* Fix typo: _REENTERANT -> _REENTRANTFinn Hakansson2015-11-241-1/+1
| | | | | | | Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Richard Levitte <levitte@openssl.org> GH: #484
* mark openssl configuration as loaded at end of OPENSSL_configMarcus Meissner2015-11-241-0/+1
| | | | | | | Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Rich Salz <rsalz@akamai.com> GH: #466
* Fix grammar errorsQuanah Gibson-Mount2015-11-241-4/+4
| | | | | | | Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Rich Salz <rsalz@akamai.com> GH: #481
* ssl3_free(): Return if it wasn't createdPascal Cuoq2015-11-241-1/+1
| | | | | | | | | | If somewhere in SSL_new() there is a memory allocation failure, ssl3_free() can get called with s->s3 still being NULL. Patch also provided by Willy Tarreau <wtarreau@haproxy.com> Signed-off-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Viktor Dukhovni <openssl-users@dukhovni.org>
* Add ctrl for SHA1 and SSLv3Dr. Stephen Henson2015-11-241-0/+55
| | | | | | | Add SSLv3 ctrl to EVP_sha1() this is only needed if SSLv3 client authentication is used with DSA/ECDSA. Reviewed-by: Tim Hudson <tjh@openssl.org>
* make updateDr. Stephen Henson2015-11-242-0/+17
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Use EVP_md5_sha1() to process client verifyDr. Stephen Henson2015-11-241-130/+44
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Use EVP_md5_sha1() to generate client verifyDr. Stephen Henson2015-11-243-141/+39
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Add EVP_MD_CTX_ctrl function.Dr. Stephen Henson2015-11-242-0/+12
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Add ssl3 ctrl to EVP_md5_sha1().Dr. Stephen Henson2015-11-242-0/+72
| | | | | | | Add a ctrl to EVP_md5_sha1() to handle the additional operations needed to handle SSL v3 client authentication and finished message. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove RSA exception when generating server key exchange.Dr. Stephen Henson2015-11-241-37/+0
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Remove RSA exception when processing server key exchange.Dr. Stephen Henson2015-11-241-66/+20
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Use MD5+SHA1 for default digest if appropriate.Dr. Stephen Henson2015-11-241-2/+5
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Add MD5+SHA1Dr. Stephen Henson2015-11-244-2/+118
| | | | | | | Add digest combining MD5 and SHA1. This is used by RSA signatures for TLS 1.1 and earlier. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix uninitialised p error.Dr. Stephen Henson2015-11-241-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Limit depth of ASN1 parse printing.Dr. Stephen Henson2015-11-241-0/+9
| | | | | | Thanks to Guido Vranken <guidovranken@gmail.com> for reporting this issue. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Drop the old perl start magic and replace it with a normal shebangRichard Levitte2015-11-241-3/+2
| | | | | | perlrun(1) leads the way. Reviewed-by: Matt Caswell <matt@openssl.org>
* Add perl modeline to Configure scriptsJacob Bandes-Storch2015-11-249-0/+9
| | | | | | | Encourages GitHub to perform proper syntax highlighting. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* "make update" after async merge.Rich Salz2015-11-232-11/+19
| | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Fix a few missed "if (!ptr)" cleanupsRich Salz2015-11-233-6/+5
| | | | | And a scalar !x --> x==0 test Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Patch containing TLS implementation for GOST 2012Dmitry Belyavsky2015-11-2312-84/+365
| | | | | | | | This patch contains the necessary changes to provide GOST 2012 ciphersuites in TLS. It requires the use of an external GOST 2012 engine. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* x86_64 assembly pack: tune clang version detection.Andy Polyakov2015-11-2313-13/+13
| | | | | | RT#4142 Reviewed-by: Richard Levitte <levitte@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-19 19:25:25 +0000