aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* add to build.infoDr. Stephen Henson2016-08-131-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* make errorsDr. Stephen Henson2016-08-132-0/+12
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* X25519 public key methodsDr. Stephen Henson2016-08-131-0/+348
| | | | | | | Add X25519 methods to match current key format defined in draft-ietf-curdle-pkix-02 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix type of ptr field.Dr. Stephen Henson2016-08-131-1/+1
| | | | | | | Since "ptr" is used to handle arbitrary other types it should be void *. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Use OIDs from draft-ietf-curdle-pkix-02Dr. Stephen Henson2016-08-133-23/+22
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* GH1446: Add SSL_SESSION_get0_cipherRich Salz2016-08-124-0/+49
| | | | Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1451)
* Check for bad filename in evp_testRich Salz2016-08-121-0/+4
| | | | | | Thanks to Brian Carpter for reporting this. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Update documentation for DSA_SIG and ECDSA_SIG.Dr. Stephen Henson2016-08-122-3/+3
| | | | | | RT#4590 Reviewed-by: Rich Salz <rsalz@openssl.org>
* crypto/sparcv9cap.c: add missing declaration.Andy Polyakov2016-08-121-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* crypto/ui/ui_openssl.c: let new-line through after query in Windows path.Andy Polyakov2016-08-111-2/+0
| | | | | | | | Originally new-line was suppressed, because double new-line was observed under wine. But it appears rather to be a wine bug, because on real Windows new-line is much needed. Reviewed-by: Richard Levitte <levitte@openssl.org>
* crypto/sparcv9cap.c: fix overstep in getisax.Andy Polyakov2016-08-111-2/+2
| | | | | | | | Problem was introduced in 299ccadcdb99001c618d188fb243c1caaaa86a1c as future extension, i.e. at this point it wasn't an actual problem, because uninitialized capability bit was not actually used. Reviewed-by: Tim Hudson <tjh@openssl.org>
* sha/asm/sha1-x86_64.pl: fix crash in SHAEXT code on Windows.Andy Polyakov2016-08-111-2/+2
| | | | | | RT#4530 Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix doc and help about ca -valid optionFdaSilvaYY2016-08-112-1/+7
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Don't attempt to load the CT log list with no-ecEmilia Kasper2016-08-102-2/+4
| | | | | | | | In practice, CT isn't really functional without EC anyway, as most logs use EC keys. So, skip loading the log list with no-ec, and skip CT tests completely in that conf. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fixed typojamercee2016-08-101-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1386)
* Documented BIO_set_accept_port()/BIO_get_accept_port()JimC2016-08-101-4/+11
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1386)
* Adapt BIO_new_accept() to call BIO_set_accept_name()jamercee2016-08-102-14/+19
| | | | | | | | | | | | Commit 417be66 broken BIO_new_accept() by changing the definition of the macro BIO_set_accept_port() which stopped acpt_ctrl() from calling BIO_parse_hostserv(). This commit completes the series of changes initiated in 417be66. Updated pods to reflect new definition introduced by 417be66. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1386)
* Change callers to use the new constants.Rich Salz2016-08-107-18/+19
| | | | Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1429)
* Add #defines for magic numbers in API.Rich Salz2016-08-102-6/+20
| | | | | | Binary- and backward-compatible. Just better. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1429)
* Fix spelling of error codeKurt Roeckx2016-08-103-4/+4
| | | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1421)
* Add some const castsRich Salz2016-08-104-38/+32
| | | | Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1397)
* GH1383: Add casts to ERR_PACKRich Salz2016-08-101-5/+7
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1385
* Gracefully free a NULL HANDSHAKE_RESULTEmilia Kasper2016-08-101-0/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add TEST_checkEmilia Kasper2016-08-105-58/+71
| | | | | | Like OPENSSL_assert, but also prints the error stack before exiting. Reviewed-by: Rich Salz <rsalz@openssl.org>
* SSL tests: port CT tests, add a few moreEmilia Kasper2016-08-1010-25/+302
| | | | | | | | This commit only ports existing tests, and adds some coverage for resumption. We don't appear to have any handshake tests that cover SCT validation success, and this commit doesn't change that. Reviewed-by: Rich Salz <rsalz@openssl.org>
* CT: fix documentationEmilia Kasper2016-08-101-9/+9
| | | | | | Make method names match reality Reviewed-by: Rich Salz <rsalz@openssl.org>
* SSL test ctx: fix testsEmilia Kasper2016-08-102-2/+18
| | | | | | | Some failure tests were failing for the wrong reason after the CTX refactoring. Update those tests. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Kill PACKET_starts() from bad_dtls_testDavid Woodhouse2016-08-101-22/+6
| | | | | | | As discussed in PR#1409 it can be done differently. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix clienthellotest to use PACKET functionsDavid Woodhouse2016-08-101-36/+24
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix test of first of 255 CBC padding bytes.Adam Langley2016-08-081-3/+3
| | | | | | | | | | Thanks to Peter Gijsels for pointing out that if a CBC record has 255 bytes of padding, the first was not being checked. (This is an import of change 80842bdb from BoringSSL.) Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1431)
* speed.c: use size_t instead of int to match function signaturesCristian Stoica2016-08-081-3/+4
| | | | | | | Signed-off-by: Cristian Stoica <cristian.stoica@nxp.com> Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1378)
* NPN and ALPN: test resumptionEmilia Kasper2016-08-086-52/+950
| | | | | | | In NPN and ALPN, the protocol is renegotiated upon resumption. Test that resumption picks up changes to the extension. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix ALPN tests when NPN is offEmilia Kasper2016-08-083-11/+7
| | | | | | OPENSSL_NO_NEXTPROTONEG only disables NPN, not ALPN Reviewed-by: Richard Levitte <levitte@openssl.org>
* Reorganize SSL test structuresEmilia Kasper2016-08-0828-913/+1698
| | | | | | | | | | | | | | | | | | | | | Move custom server and client options from the test dictionary to an "extra" section of each server/client. Rename test expectations to say "Expected". This is a big but straightforward change. Primarily, this allows us to specify multiple server and client contexts without redefining the custom options for each of them. For example, instead of "ServerNPNProtocols", "Server2NPNProtocols", "ResumeServerNPNProtocols", we now have, "NPNProtocols". This simplifies writing resumption and SNI tests. The first application will be resumption tests for NPN and ALPN. Regrouping the options also makes it clearer which options apply to the server, which apply to the client, which configure the test, and which are test expectations. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix CIPHER_DEBUGJimC2016-08-061-1/+1
| | | | | | | Commit 3eb2aff renamed a field of ssl_cipher_st from algorithm_ssl -> min_tls but neglected to update the fprintf reference which is included by -DCIPHER_DEBUG Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1417)
* Add a note about a perl issue on VMS and how to work around itRichard Levitte2016-08-062-2/+20
| | | | | | | | | I bug in perl's File::Spec->canonpath() was uncovered. There's nothing we can do about it (except re-implementing canonpath()), except working around the problem (a directory rename) and reporting the issue to the perl module developers. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix irregularities in GENERAL_NAME_print().Tomas Mraz2016-08-051-2/+2
| | | | | | | | | Add colon when printing Registered ID. Remove extra space when printing DirName. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1401)
* Mkae CT_log_new_from_base64 always return 0 on failureRob Percival2016-08-053-3/+5
| | | | | | | | | | In one failure case, it used to return -1. That failure case (CTLOG_new() returning NULL) was not usefully distinct from all of the other failure cases. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1407)
* fixing too optimistic typo-fixklemens2016-08-051-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1413)
* spelling fixes, just comments and readme.klemens2016-08-0556-82/+82
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1413)
* Removes CTLOG_new_null from the CT public APIRob Percival2016-08-053-19/+4
| | | | | | | | This is an entirely useless function, given that CTLOG is publicly immutable. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1406)
* openssl-format-source: A few more (DECLARE|IMPLEMENT) variants to care forRichard Levitte2016-08-051-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* The capi engine uses stdio, so don't build it when configuring 'no-stdio'Richard Levitte2016-08-051-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove OPENSSL_NO_STDIO guards around certain SSL cert/key functionsRichard Levitte2016-08-051-14/+0
| | | | | | | | | | | | | | | | | These functions are: SSL_use_certificate_file SSL_use_RSAPrivateKey_file SSL_use_PrivateKey_file SSL_CTX_use_certificate_file SSL_CTX_use_RSAPrivateKey_file SSL_CTX_use_PrivateKey_file SSL_use_certificate_chain_file Internally, they use BIO_s_file(), which is defined and implemented at all times, even when OpenSSL is configured no-stdio. Reviewed-by: Rich Salz <rsalz@openssl.org>
* make updateRichard Levitte2016-08-052-46/+46
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* util/mkdef.pl: mark certain PEM function declarations with STDIORichard Levitte2016-08-051-4/+4
| | | | | | | | The macros that produce PEM_write_FOO() andd PEM_read_FOO() only do so unless 'no-stdio' has been configured. mkdef.pl should mimic that by marking those functions with the "STDIO" algo. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Travis: add a build with no-stdioRichard Levitte2016-08-051-0/+10
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Move the building of test/buildtest_*. to be done unconditionallyRichard Levitte2016-08-052-8/+16
| | | | | | | | | These were guarded by $disabled{tests}. However, 'tests' is disabled if we configure 'no-stdio', which means that we don't detect the lack of OPENSSL_NO_STDIO guards in our public header files. So we move the generation and build of test/buildtest_*.c to be unconditional. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Sanity check input length in OPENSSL_uni2asc().Dr. Stephen Henson2016-08-051-1/+3
| | | | | | Thanks to Hanno Böck for reporting this bug. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add --gcov-options '\-lp' to coverageEmilia Kasper2016-08-051-1/+1
| | | | | | | Should result in more accurate header file coverage, see https://github.com/eddyxu/cpp-coveralls/issues/54 Reviewed-by: Kurt Roeckx <kurt@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-19 12:50:23 +0000