aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix a TLSProxy race conditionMatt Caswell2016-03-154-15/+50
| | | | | | | | | | | TLSProxy starts s_server and specifies the number of client connects it should expect. After that s_server is supposed to close down automatically. However, if another test is then run then TLSProxy will start a new instance of s_server. If the previous instance hasn't closed down yet then the new instance can fail to bind to the socket. Reviewed-by: Richard Levitte <levitte@openssl.org>
* poly1305/asm/poly1305-x86_64.pl: make it work with linux-x32.Andy Polyakov2016-03-152-3/+9
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* On Windows, page walking is known as __chkstk.Emilia Kasper2016-03-153-0/+6
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Explain *cough*-dowsEmilia Kasper2016-03-153-3/+3
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Make the perl dependency post-processor into just one lineRichard Levitte2016-03-151-3/+1
| | | | | | | Make doesn't always treat multiline quoted strings as nicely as one would wish. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Not all shells understand !Richard Levitte2016-03-151-9/+9
| | | | | | | | | | | In unix-Makefile.tmpl, this construction has been used a few times if ! something; then ... It seems, though, that some shells do not understand !, so these need to be changed. Reviewed-by: Rich Salz <rsalz@openssl.org>
* General verify options to openssl tsfbroda2016-03-153-28/+99
| | | | | | | | | | | | | | This commit adds the general verify options of ocsp, verify, cms, etc. to the openssl timestamping app as suggested by Stephen N. Henson in [openssl.org #4287]. The conflicting "-policy" option of "openssl ts" has been renamed to "-tspolicy". Documentation and tests have been updated. CAVE: This will break code, which currently uses the "-policy" option. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix CRYPTO_THREAD_run_once return value checksEmilia Kasper2016-03-151-4/+4
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Cygwin configs were missing thread_scheme settings, add themRichard Levitte2016-03-151-0/+2
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Small typoRichard Levitte2016-03-151-1/+1
| | | | | | | OPENSSL_INIT_ONCE and OPENSSL_INIT_ONCE_STATIC_INIT are really CRYPTO_ONCE and CRYPTO_ONCE_STATIC_INIT. Reviewed-by: Rich Salz <rsalz@openssl.org>
* static-engine is no longer an internal keyword, remove it from %disabledRichard Levitte2016-03-151-1/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Clarify NOTES.WIN.Andy Polyakov2016-03-151-37/+43
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Update and clarify ECDSA documentation.Dr. Stephen Henson2016-03-141-121/+119
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Disable afalg when engine is disabled.Emilia Kasper2016-03-143-15/+23
| | | | | | | | Also make it possible to disable afalg separately. we still need to update config again Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix typo in manual, missing ending '>'Richard Levitte2016-03-141-1/+1
| | | | Reviewed-by: Stephen Henson <steve@openssl.org>
* Travis: build tests in BUILDONLY modeEmilia Kasper2016-03-141-0/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* config: fix HP-UX PA-RISC detection.Andy Polyakov2016-03-141-1/+6
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* s390x assembly pack: 32-bit fixups.Andy Polyakov2016-03-143-3/+6
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* build.info/Makefile.in: Itanium fixups.Andy Polyakov2016-03-143-12/+12
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* engines/Makefile.in: some [older] shell complain about 'for i ;',Andy Polyakov2016-03-141-1/+1
| | | | | | but not if there is reference to empty variable. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix the init cleanup orderMatt Caswell2016-03-141-14/+21
| | | | | | | There are internal dependencies between the various cleanup functions. This re-orders things to try and get that right. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add some missing cleanup calls to de-initMatt Caswell2016-03-141-0/+2
| | | | | | | | OBJ_cleanup() doesn't always get called from EVP_cleanup() so needs to be explicitly called in de-init. Also BIO_sock_cleanup() also needs to be called. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix freeze in config's interrupt trap with some shellsRichard Levitte2016-03-141-11/+11
| | | | | | | | | | | | | | | With bash and zsh, the trap on the 5 second read does respond, but doesn't break out of the read. What's worse is that it takes away the 5 second timer, and therefore has the read hang indefinitely and (almost) unbreakable. Having the trap do 'exit 0' after reseting the tty params has it break out of read and continue with the configuration. Other shells do not appear to have the issue described here, but neither does the extra 'exit 0' appear to harm them. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Enforce the demand for Perl 5.10.0 as a minimum.Richard Levitte2016-03-141-1/+1
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Fix a few Configure errorsRichard Levitte2016-03-142-15/+11
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Document X509_get_serialNumber and X509_set_serialNumber.Dr. Stephen Henson2016-03-141-0/+55
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add EVP_PKEY documentation.Dr. Stephen Henson2016-03-131-11/+27
| | | | | | Document EVP_PKEY_id() and EVP_PKEY_base_id(). Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Change an function macro for ERR match the function it's used in.Richard Levitte2016-03-131-1/+1
| | | | Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Complete incomplete makefile variable referensesRichard Levitte2016-03-131-2/+2
| | | | | | A couple of '$(PERLASM_SCHEM' had sneaked in. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Collect the names of generated files and clean them away at target clean:Richard Levitte2016-03-131-7/+9
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add $(LIB_CFLAGS) for any build.info generator that uses $(CFLAGS)Richard Levitte2016-03-1318-35/+35
| | | | | | | The reason to do so is that some of the generators detect PIC flags like -fPIC and -KPIC, and those are normally delivered in LD_CFLAGS. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Use single quotes rather than double quotes when neededRichard Levitte2016-03-131-16/+16
| | | | | | | When passing down values to Makefile.shared, do so with single quotes as much as possible to avoid having the shell create a mess of quotes. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Harmonize Unix Makefile template with Windows ditoRichard Levitte2016-03-132-27/+28
| | | | | | | | | | | | | | | | | | The variable SHARED_CFLAGS and SHARD_LDFLAGS were used in the Unix template because they normally contain options used when building "shared". The Windows template, on the other hand, uses LIB_CFLAGS, to express the intended use of those flags rather than their content. The Windows template still used SHARED_LDFLAGS, which seems inconsistent. To harmonize the two, any SHARED_CFLAGS gets renamed to LIB_CFLAGS and SHARED_LDFLAGS to LIB_LDFLAGS. That makes the intent consistent along with BIN_{C,LD}FLAGS and DSO_{C,LD}FLAGS. Finally, make sure to pass down $(LIB_CFLAGS) or $(DSO_CFLAGS) along with $(CFLAGS) when using Makefile.shared. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix memory leak in library deinitEmilia Kasper2016-03-122-16/+20
| | | | | | | | | | | | | | ENGINE_cleanup calls CRYPTO_free_ex_data and therefore, CRYPTO_cleanup_all_ex_data - which cleans up the method pointers - must run after ENGINE_cleanup. Additionally, don't needlessly initialize the EX_CALLBACKS stack during e.g. CRYPTO_free_ex_data. The only time this is actually needed is when reserving the first ex data index. Specifically, since sk_num returns -1 on NULL input, the rest of the code already handles a NULL method stack correctly. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add doc on when to use SCT callback.Rich Salz2016-03-122-1/+7
| | | | | | With help from Viktor. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Workaround for false -Warray-bounds in TravisEmilia Kasper2016-03-121-1/+1
| | | | | | | | | | | ccache + clang produces a false strcmp warning, see https://llvm.org/bugs/show_bug.cgi?id=20144 Since this only happens with ccache and --strict-warnings, and only with certain versions of glibc / clang, disabling ccache is a reasonable short-term workaround. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix no-comp buildEmilia Kasper2016-03-122-1/+9
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix build break; add function declarationRich Salz2016-03-111-0/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* When creating directory specs, use srctop_dir rather than srctop_file.Richard Levitte2016-03-121-3/+3
| | | | | | | | While insignificant on Unix like systems, this is significant on systems like VMS. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org>
* Avoid sed for dependency post-processingRichard Levitte2016-03-121-7/+3
| | | | | | | | It turns out that different sed implementations treat -i differently to cause issues. make it simpler by avoiding it entirely and give perl the trust to be consistent enough. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Because bn_expand2 is declared non-static, it must not be staticRichard Levitte2016-03-121-1/+1
| | | | | | That doesn't change even to make a dummy to hide its unavailability. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove some dead code from 1999Matt Caswell2016-03-112-12/+0
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Don't clobber the last errorMatt Caswell2016-03-111-4/+8
| | | | | | | | | | | | | | | | On Windows we call WSAGetLastError() to find out the last error that happened on a socket operation. We use this to find out whether we can retry the operation or not. You are supposed to call this immediately however in a couple of places we logged an error first. This can end up making other Windows system calls to get the thread local error state. Sometimes that can clobber the error code, so if you call WSAGetLastError() later on you get a spurious response and the socket operation looks like a fatal error. Really we shouldn't be logging an error anyway if its a retryable issue. Otherwise we could end up with stale errors on the error queue. Reviewed-by: Richard Levitte <levitte@openssl.org>
* removed extra defineMat2016-03-111-1/+0
| | | | | | verified that build succeeds without the extra define Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix no-blake2 for Windows classic buildMat2016-03-111-0/+4
| | | | | | Fix no-blake2 for Windows classic build Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* make updateDr. Stephen Henson2016-03-111-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make X509_SIG opaque.Dr. Stephen Henson2016-03-1110-33/+66
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Some sed implementations are not greedy enough, use perl insteadRichard Levitte2016-03-111-1/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | The issue is demonstrated as follows: On Linux: $ echo ': foo.h /usr/include/stddef.h bar.h' | sed -e 's/ \/\(\\.\|[^ ]\)*//g' : foo.h bar.h On MacOS X: $ echo ': foo.h /usr/include/stddef.h bar.h' | sed -e 's/ \/\(\\.\|[^ ]\)*//g' : foo.husr/include/stddef.h bar.h Perl is more consistent: On Linux: $ echo ': foo.h /usr/include/stddef.h bar.h' | perl -pe 's/ \/(\\.|[^ ])*//g;' : foo.h bar.h On MacOS X: $ echo ': foo.h /usr/include/stddef.h bar.h' | perl -pe 's/ \/(\\.|[^ ])*//g;' : foo.h bar.h Reviewed-by: Andy Polyakov <appro@openssl.org>
* Make update to catch function renames.Rich Salz2016-03-111-2/+2
| | | | Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Use unsigned int instead of just unsigned.Kurt Roeckx2016-03-111-2/+2
| | | | | Reviewed-by: Andy Polyakov <appro@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-27 17:26:00 +0000