aboutsummaryrefslogtreecommitdiffstats
path: root/engines
Commit message (Collapse)AuthorAgeFilesLines
* Handle inability to create AFALG socketMatt Caswell2016-06-131-0/+9
| | | | | | | | | | | | | Some Linux platforms have a suitably recent kernel to support AFALG, but apparently you still can't actually create an afalg socket. This extends the afalg_chk_platform() function to additionally check whether we can create an AFALG socket. We also amend the afalgtest to not report a failure to load the engine as a test failure. A failure to load is almost certainly due to platform environmental issues, and not an OpenSSL problem. RT 4434 Reviewed-by: Andy Polyakov <appro@openssl.org>
* Fixes to get -ansi workingJeffrey Walton2016-06-081-8/+8
| | | | | | | | | | | | Various fixes to get the following to compile: ./config no-asm -ansi -D_DEFAULT_SOURCE RT4479 RT4480 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix some GitHub issues.Rich Salz2016-06-071-1/+1
| | | | | | | | | GH1180: Local variable sometimes unused GH1181: Missing close paren. Thanks to <wipedout@yandex.ru> for reporting these. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove/rename some old files.Rich Salz2016-06-011-1/+0
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add final(?) set of copyrights.Rich Salz2016-06-011-2/+9
| | | | | | | | | Add copyright to missing assembler files. Add copyrights to missing test/* files. Add copyrights Various source and misc files. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Raise an Err when CRYPTO_THREAD_lock_new failsFdaSilvaYY2016-06-012-2/+8
| | | | | | | | Add missing error raise call, as it is done everywhere else. and as CRYPTO_THREAD_lock_new don't do it internally. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* x86_64 assembly pack: tolerate spaces in source directory name.Andy Polyakov2016-05-291-1/+1
| | | | | | [as it is now quoting $output is not required, but done just in case] Reviewed-by: Richard Levitte <levitte@openssl.org>
* build.info files: add quotes around any spec that may contain spacesRichard Levitte2016-05-252-5/+5
| | | | | | RT#4492 Reviewed-by: Tim Hudson <tjh@openssl.org>
* GH919: Fix wrappers for two headersRich Salz2016-05-241-2/+2
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Add OpenSSL copyright to .pl filesRich Salz2016-05-212-2/+16
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add some check for malloc failure in the CAPI engineMatt Caswell2016-05-181-6/+26
| | | | | | | | In the CAPI engine there were some unchecked calls to OPENSSL_strdup(). GH Issue #830 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Manual fixes after copyright consolidationRich Salz2016-05-1710-530/+90
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Copyright consolidation 02/10Rich Salz2016-05-177-363/+38
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix RSA dasync engine bugMatt Caswell2016-05-171-1/+1
| | | | | | | When RSA went opaque a bug was introduced into the dasync engine where the wrong function was being set for the rsa_priv_dec operation. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add missing initialiser in e_chil.cRichard Levitte2016-05-161-1/+1
| | | | | | RT#2616 Reviewed-by: Tim Hudson <tjh@openssl.org>
* typoDr. Stephen Henson2016-05-111-1/+1
| | | | | | RT#4442 Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Remove obsolete defined(__INTEL__) condition.Andy Polyakov2016-05-021-2/+1
| | | | | | This macro was defined by no-longer-supported __MWERKS__ compiler. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix capi engine for no-dsaMatt Caswell2016-04-221-0/+22
| | | | | | | The capi engine was failing to compile on Windows if the no-dsa option was selected. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove --classic build entirelyRichard Levitte2016-04-202-194/+0
| | | | | | | | The Unix build was the last to retain the classic build scheme. The new unified scheme has matured enough, even though some details may need polishing. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix AFALG kernel and headers mismatch problemMatt Caswell2016-04-141-0/+3
| | | | | | | | | | | | During Configure we attempt to check the kernel version of this platform to see whether we can compile the AFALG engine. If the kernel version looks recent enough then we enable AFALG. However when we compile e_afalg.c we check the version of the linux headers. If there is a mismatch between the linux headers and the currently running kernel then we don't compile the AFLAG engine and continue. This was causing a link error. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove OPENSSL_NO_AES guardsMatt Caswell2016-04-131-44/+34
| | | | | | | no-aes is no longer a Configure option and therefore the OPENSSL_NO_AES guards can be removed. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Rename internal symbol to follow internal naming patternRichard Levitte2016-04-131-1/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Rename int_*() functions to *_int()Matt Caswell2016-04-134-9/+9
| | | | | | | | | | There is a preference for suffixes to indicate that a function is internal rather than prefixes. Note: the suffix is only required to disambiguate internal functions and public symbols with the same name (but different case) Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Rename lots of *_intern or *_internal function to int_*Matt Caswell2016-04-134-10/+10
| | | | | | | | There was a lot of naming inconsistency, so we try and standardise on one form. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix forgotten adaptation to opaque RSA and RSA_METHODRichard Levitte2016-04-071-32/+48
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make the RSA_METHOD structure opaqueRichard Levitte2016-04-061-25/+28
| | | | | | | | | Move rsa_meth_st away from public headers. Add RSA_METHOD creator/destructor functions. Add RSA_METHOD accessor/writer functions. Adapt all other source to use the creator, destructor, accessors and writers. Reviewed-by: Matt Caswell <matt@openssl.org>
* Make sure the rand_byte buffer in padlock engine is cleansed.Richard Levitte2016-04-041-1/+1
| | | | | | Submitted by Michael McConville <mmcco@mykolab.com> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Rename get/set_app_data to get0/set0_app_dataMatt Caswell2016-04-031-3/+3
| | | | | | | Also fixed a style issue Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org>
* Various DSA opacity fixupsMatt Caswell2016-04-031-6/+10
| | | | | | | Numerous fixups based on feedback of the DSA opacity changes. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org>
* Make DSA_METHOD opaqueMatt Caswell2016-04-031-29/+26
| | | | | | | | Move the dsa_method structure out of the public header file, and provide getter and setter functions for creating and modifying custom DSA_METHODs. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Stephen Henson <steve@openssl.org>
* Move dso.h to internalRich Salz2016-03-232-2/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove the remainder of util/mk1mf.pl and companion scriptsRichard Levitte2016-03-212-7/+0
| | | | | | | This removes all scripts that deal with MINFO as well, since that's only used by mk1mf. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Fix no-deprecatedMatt Caswell2016-03-181-0/+1
| | | | | | | The no-deprecated build was failing because afalg was relying on a transitive include that does not exist in a no-deprecated build. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Resolved unresolved symbols with no-hwMatt Caswell2016-03-181-7/+10
| | | | | | | Compiling on Windows with no-hw was resulting in unresolved symbols in the padlock engine. Reviewed-by: Richard Levitte <levitte@openssl.org>
* engines/Makefile.in: some [older] shell complain about 'for i ;',Andy Polyakov2016-03-141-1/+1
| | | | | | but not if there is reference to empty variable. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add $(LIB_CFLAGS) for any build.info generator that uses $(CFLAGS)Richard Levitte2016-03-131-1/+1
| | | | | | | The reason to do so is that some of the generators detect PIC flags like -fPIC and -KPIC, and those are normally delivered in LD_CFLAGS. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix a memory leak in the afalg engineMatt Caswell2016-03-101-0/+2
| | | | | | | The AFALG engine created a global EVP_CIPHER instance but was not freeing it up when the engine was destroyed. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Don't add engines if configured "no-engine"Richard Levitte2016-03-091-23/+30
| | | | | | | | Similarly, don't add e_capi if configured "no-capieng" Also, indent a little deeper, for clarity. Reviewed-by: Matt Caswell <matt@openssl.org>
* Don't add afalg engine if configured "no-engine"Richard Levitte2016-03-091-10/+12
| | | | | | Also, indent a little deeper, for clarity. Reviewed-by: Matt Caswell <matt@openssl.org>
* Make sure the effect of "pic" / "no-pic" is used with assembler compilationsRichard Levitte2016-03-091-1/+1
| | | | | | | | | | | | | | Before the 'Introduce the "pic" / "no-pic" config option' commit, the shared_cflag value for the chosen config would be part of the make variable CFLAG, which got replicated into CFLAGS and ASFLAGS. Since said commit, the shared_cflag value has become a make variable of its own, SHARED_CFLAG (which is left empty in a "no-pic" build). However, ASFLAGS was forgotten. That's what's corrected with this change. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Convert the dynlocks in e_chil to the new Thread API locksRichard Levitte2016-03-091-14/+10
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Remove another lock from e_chilMatt Caswell2016-03-091-2/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Move chil engine to the new thread apiMatt Caswell2016-03-091-17/+24
| | | | | | | Move the chil engine to use the new thread API. As I don't have access to the hardware I can't test this :-(. I think its ok... Reviewed-by: Richard Levitte <levitte@openssl.org>
* Use correct function ID in error pathAlessandro Ghedini2016-03-093-2/+5
| | | | | | | This fixes "make update". Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Adapt e_capi to the DSA_SIG_get0() APIRichard Levitte2016-03-081-6/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix engine/asm/e_padlock-x86.pl for newer semanticsRichard Levitte2016-03-081-0/+5
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Refactor dasync cipher implementations to improve code reuseMatt Caswell2016-03-071-144/+97
| | | | | | | Move out most of the boiler plate code that is common between aes128-cbc and aes128-cbc-hmac-sha1 into helper functions to improve code reuse. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Move the _hidden_* static variables in dasync to be constructed in bindMatt Caswell2016-03-071-61/+83
| | | | | | | | The _hidden_* variables were being created on-the-fly. It is better to create them once up front during bind to avoid any potential race conditions. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Rename EVP_CIPHER_CTX_cipher_data to EVP_CIPHER_CTX_get_cipher_dataMatt Caswell2016-03-073-12/+12
| | | | | | | | We had the function EVP_CIPHER_CTX_cipher_data which is newly added for 1.1.0. As we now also need an EVP_CIPHER_CTX_set_cipher_data it makes more sense for the former to be called EVP_CIPHER_CTX_get_cipher_data. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Add dummy pipeline support for aes128_cbc_hmac_sha1Matt Caswell2016-03-073-10/+221
| | | | | | | Add dummy pipline support to dasync for the aes128_cbc_hmac_sha1 cipher. This is treated as an AEAD cipher. Reviewed-by: Tim Hudson <tjh@openssl.org>