aboutsummaryrefslogtreecommitdiffstats
path: root/crypto
Commit message (Collapse)AuthorAgeFilesLines
...
* bn/bn_exp.c: make it indent-friendly.Andy Polyakov2015-01-221-7/+7
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Manually reformat aes_core.cMatt Caswell2015-01-221-400/+405
| | | | | | Add aes_core.c to the list of files not processed by openssl-format-source Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix strange formatting by indentMatt Caswell2015-01-2216-78/+152
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* modes/modes_lcl.h: make it indent-friendly.Andy Polyakov2015-01-221-31/+31
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* indent has problems with comments that are on the right hand side of a line.Matt Caswell2015-01-2219-184/+314
| | | | | | | Sometimes it fails to format them very well, and sometimes it corrupts them! This commit moves some particularly problematic ones. Reviewed-by: Tim Hudson <tjh@openssl.org>
* modes/gcm128.c: make it indent-friendly.Andy Polyakov2015-01-221-162/+416
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* modes/cts128.c: make it indent-friendly.Andy Polyakov2015-01-221-21/+36
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* crypto/mem_dbg.c: make it indent-friendly.Andy Polyakov2015-01-221-3/+4
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* More indent fixes for STACK_OFMatt Caswell2015-01-224-4/+4
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix indent issue with functions using STACK_OFMatt Caswell2015-01-222-4/+4
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix indent issue with engine.hMatt Caswell2015-01-221-1/+2
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* crypto/cryptlib.c: make it indent-friendly.Andy Polyakov2015-01-221-2/+4
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* bn/bntest.c: make it indent-friendly.Andy Polyakov2015-01-221-25/+27
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* bn/bn_recp.c: make it indent-friendly.Andy Polyakov2015-01-221-8/+8
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* bn/rsaz_exp.c: make it indent-friendly.Andy Polyakov2015-01-221-9/+13
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix source where indent will not be able to copeMatt Caswell2015-01-223-534/+1405
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Yet more commentsMatt Caswell2015-01-221-1/+1
| | | | | | | | | | | | | | | | | | Conflicts: crypto/dsa/dsa_asn1.c crypto/pem/pem_all.c fips/dh/dh_gen.c fips/dh/fips_dh_check.c fips/dh/fips_dh_gen.c ssl/ssl_ciph.c Conflicts: ssl/d1_clnt.c Conflicts: ssl/s2_pkt.c Reviewed-by: Tim Hudson <tjh@openssl.org>
* More commentsMatt Caswell2015-01-226-8/+13
| | | | | | | | | | | | | | | | | Conflicts: crypto/dsa/dsa_vrf.c crypto/ec/ec2_smpl.c crypto/ec/ecp_smpl.c Conflicts: demos/bio/saccept.c ssl/d1_clnt.c Conflicts: bugs/dggccbug.c demos/tunala/cb.c Reviewed-by: Tim Hudson <tjh@openssl.org>
* Further comment changes for reformat (master)Matt Caswell2015-01-2233-85/+118
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Cleanup OPENSSL_NO_xxx, part 1master-pre-reformatRich Salz2015-01-1446-81/+81
| | | | | | | | | | OPENSSL_NO_RIPEMD160, OPENSSL_NO_RIPEMD merged into OPENSSL_NO_RMD160 OPENSSL_NO_FP_API merged into OPENSSL_NO_STDIO Two typo's on #endif comments fixed: OPENSSL_NO_ECB fixed to OPENSSL_NO_OCB OPENSSL_NO_HW_SureWare fixed to OPENSSL_NO_HW_SUREWARE Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add Broadwell performance results.Andy Polyakov2015-01-133-2/+11
| | | | Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Remove use of BN_init, BN_RECP_CTX_init from bntestDr. Stephen Henson2015-01-131-212/+212
| | | | | | | BN_init and BN_RECP_CTX_init are deprecated and are not exported from shared libraries on some platforms (e.g. Windows) convert bntest to use BN_new and BN_RECP_CTX_new instead. Reviewed-by: Matt Caswell <matt@openssl.org>
* Make output from openssl version -f consistent with previous versionsMatt Caswell2015-01-131-1/+1
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Fix warning where BIO_FLAGS_UPLINK was being redefined.Matt Caswell2015-01-131-1/+1
| | | | | | This warning breaks the build in 1.0.0 and 0.9.8 Reviewed-by: Andy Polyakov <appro@openssl.org>
* Avoid deprecation problems in Visual Studio 13Matt Caswell2015-01-131-59/+2
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* RT3548: Remove unsupported platformsRich Salz2015-01-1219-126/+62
| | | | | | | This last one for this ticket. Removes WIN16. So long, MS_CALLBACK and MS_FAR. We won't miss you. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Allow multiple IDN xn-- indicatorsRich Salz2015-01-121-27/+8
| | | | | | | | Update the X509v3 name parsing to allow multiple xn-- international domain name indicators in a name. Previously, only allowed one at the beginning of a name, which was wrong. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* RT3548: Remove some unsupported platforms.Rich Salz2015-01-129-90/+6
| | | | | | | | | This commit removes NCR, Tandem, Cray. Regenerates TABLE. Removes another missing BEOS fluff. The last platform remaining on this ticket is WIN16. Reviewed-by: Richard Levitte <levitte@openssl.org>
* RT478: Add uninstall make targetRich Salz2015-01-121-0/+2
| | | | | | | | | | | | | | | | | Add INSTALLDIRS variable, list of directories where things get installed. Change install_html_docs to use perl mkdir-p script. Add uninstall, uninstall_sw, uninstall_docs, uninstall_html_docs to Makefile.org. The actions of these targets were figured out by "inverting" the install target. Recurse into subdirs to do uninstall as needed. Added uninstall targets whose actions were similarly figured out by "inverting" the install target. Also remove some 'space before tab' complaints in Makefile.org Reviewed-by: Tim Hudson <tjh@openssl.org>
* make updateMatt Caswell2015-01-121-6/+7
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove redundant DSO_METHOD_beos declaration in dso.h. BEOS support has beenMatt Caswell2015-01-121-3/+0
| | | | | | removed. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Make build reproducibleKurt Roeckx2015-01-101-0/+4
| | | | | | It contained a date on when it was build. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix build failure on Windows due to undefined cflags identifierMatt Caswell2015-01-081-1/+1
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix for CVE-2014-3570 (with minor bn_asm.c revamp).Andy Polyakov2015-01-084-676/+379
| | | | Reviewed-by: Emilia Kasper <emilia@openssl.org>
* Fix irix-cc build.Andy Polyakov2015-01-074-4/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* use correct function nameDr. Stephen Henson2015-01-061-1/+1
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* RT3662: Allow leading . in nameConstraintsDr. Stephen Henson2015-01-061-1/+1
| | | | | | Change by SteveH from original by John Denker (in the RT) Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix memory leak.Martin Brejcha2015-01-061-2/+10
| | | | | | | | Fix memory leak by freeing up saved_message.data if it is not NULL. PR#3489 Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org>
* Further comment amendments to preserve formatting prior to source reformatMatt Caswell2015-01-0628-40/+75
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Revert "CHANGES: mention "universal" ARM support."Andy Polyakov2015-01-061-1/+1
| | | | | | This reverts commit 4fec91506975f62a2f93be71a46acc7fae7eef45. Reviewed-by: Matt Caswell <matt@openssl.org>
* CHANGES: mention "universal" ARM support.Andy Polyakov2015-01-061-1/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Constify ASN1_TYPE_cmp add X509_ALGOR_cmp.Dr. Stephen Henson2015-01-054-2/+14
| | | | Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Fix various certificate fingerprint issues.Dr. Stephen Henson2015-01-054-2/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By using non-DER or invalid encodings outside the signed portion of a certificate the fingerprint can be changed without breaking the signature. Although no details of the signed portion of the certificate can be changed this can cause problems with some applications: e.g. those using the certificate fingerprint for blacklists. 1. Reject signatures with non zero unused bits. If the BIT STRING containing the signature has non zero unused bits reject the signature. All current signature algorithms require zero unused bits. 2. Check certificate algorithm consistency. Check the AlgorithmIdentifier inside TBS matches the one in the certificate signature. NB: this will result in signature failure errors for some broken certificates. 3. Check DSA/ECDSA signatures use DER. Reencode DSA/ECDSA signatures and compare with the original received signature. Return an error if there is a mismatch. This will reject various cases including garbage after signature (thanks to Antti Karjalainen and Tuomo Untinen from the Codenomicon CROSS program for discovering this case) and use of BER or invalid ASN.1 INTEGERs (negative or with leading zeroes). CVE-2014-8275 Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Remove inconsistency in ARM support.Andy Polyakov2015-01-0413-157/+195
| | | | | | | | | This facilitates "universal" builds, ones that target multiple architectures, e.g. ARMv5 through ARMv7. See commentary in Configure for details. Reviewed-by: Ard Biesheuvel <ard.biesheuvel@linaro.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* ecp_nistz256-x86_64.pl: fix occasional failures.Andy Polyakov2015-01-041-290/+191
| | | | | | RT: 3607 Reviewed-by: Adam Langley <agl@google.com> Reviewed-by: Emilia Kasper <emilia@openssl.org>
* RT2914: NULL check missing in X509_name_canonRich Salz2015-01-041-0/+2
| | | | | | Check for NULL return from X509_NAME_ENTRY_new() Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Add missing include of sys/time.hKurt Roeckx2014-12-311-0/+3
| | | | | | gettimeofday was undefined Reviewed-by: Geoff Thorpe <geoff@openssl.org>
* mark all block comments that need format preserving so thatTim Hudson2014-12-3098-313/+471
| | | | | | | indent will not alter them when reformatting comments Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* dlfcn: always define _GNU_SOURCEKurt Roeckx2014-12-301-4/+2
| | | | | | | We need this for the freebsd kernel with glibc as used in the Debian kfreebsd ports. There shouldn't be a problem defining this on systems not using glibc. Reviewed-by: Richard Levitte <levitte@openssl.org>
* RT3548: Remove unsupported platformsRich Salz2014-12-281-2/+0
| | | | | | | | This commit removes DG-UX. It also flushes out some left-behinds in config. And regenerates TABLE from Configure (hadn't been done in awhile). Reviewed-by: Richard Levitte <levitte@openssl.org>