aboutsummaryrefslogtreecommitdiffstats
path: root/engines
Commit message (Collapse)AuthorAgeFilesLines
* Add predicatable RAND_METHOD to test ENGINEDr. Stephen Henson2017-08-061-0/+32
| | | | | | | | | | | The test ENGINE effectively used a predictable PRNG because it supplied a bogus implementation of SHA256 which the old version of OpenSSL's PRNG used. The new DRBG does not use SHA256 so it is no longer predictable if the SHA256 implementation is replaced. Use an explicit predictable PRNG instead. Reviewed-by: Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/4098)
* Cleanup some copyright stuffRich Salz2017-06-301-509/+0
| | | | | | | | | | | | | | Remove some incorrect copyright references. Move copyright to standard place Add OpenSSL copyright where missing. Remove copyrighted file that we don't use any more Remove Itanium assembler for RC4 and MD5 (assembler versions of old and weak algorithms for an old chip) Standardize apps/rehash copyright comment; approved by Timo Put dual-copyright notice on mkcert Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3691)
* Put message strings in state filesRich Salz2017-06-1210-162/+138
| | | | | | | | | | | | Add "*" as indicator meaning the function/reason is removed, so put an empty string in the function/reason string table; this preserves backward compatibility by keeping the #define's. In state files, trailing backslash means text is on the next line. Add copyright to state files Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3640)
* make error tables const and separate header fileRich Salz2017-06-0724-429/+418
| | | | | | | | | | | | | | | | | | | Run perltidy on util/mkerr Change some mkerr flags, write some doc comments Make generated tables "const" when genearting lib-internal ones. Add "state" file for mkerr Renerate error tables and headers Rationalize declaration of ERR_load_XXX_strings Fix out-of-tree build Add -static; sort flags/vars for options. Also tweak code output Moved engines/afalg to engines (from master) Use -static flag Standard engine #include's of errors Don't linewrap err string tables unless necessary Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3392)
* Move engines/afalg to enginesRich Salz2017-05-197-13/+10
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3491)
* Remove filename argument to x86 asm_init.David Benjamin2017-05-111-1/+1
| | | | | | | | | | | | | | | The assembler already knows the actual path to the generated file and, in other perlasm architectures, is left to manage debug symbols itself. Notably, in OpenSSL 1.1.x's new build system, which allows a separate build directory, converting .pl to .s as the scripts currently do result in the wrong paths. This also avoids inconsistencies from some of the files using $0 and some passing in the filename. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3431)
* check length sanity before correcting in EVP_CTRL_AEAD_TLS1_AADRich Salz2017-04-241-0/+2
| | | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3289)
* e_afalg.[ch]: fix --strict-warnings with gcc 4.x and 32-bit build.Andy Polyakov2017-04-012-10/+11
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* engines/e_capi.c: slip in PROV_RSA_AES for interchangable CSP only.Andy Polyakov2017-03-291-12/+15
| | | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3034)
* engines/e_capi.c: adhere to CryptAcquireContextW unconditionally.Andy Polyakov2017-03-291-47/+27
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* engine/e_capi.c: more formatting and styling fixes.Andy Polyakov2017-03-291-31/+31
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* engines/e_capi.c: formatting and styling fixes.Andy Polyakov2017-03-251-70/+59
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Code health: Remove unused VAX transfer vector for enginesRichard Levitte2017-02-281-24/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2793)
* Move the CHIL engine to demos/enginesRichard Levitte2017-02-284-1461/+0
| | | | | | Moving out of the way, Makefile to be added Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2780)
* e_afalg: Don't warn about kernel version when pedanticRichard Levitte2016-12-161-2/+4
| | | | | | | | | When built with --strict-warnings and the Linux kernel headers don't match the kernel version, the preprocessor warnings in engines/afalg/e_afalg.c cause compilation errors. Use the macro PEDANTIC to avoid those warnings in that case. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/2095)
* Fix some style issues in the TLSv1.3 nonce construction codeMatt Caswell2016-11-291-6/+3
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Use the TLSv1.3 nonce constructionMatt Caswell2016-11-291-11/+24
| | | | | | | | This updates the record layer to use the TLSv1.3 style nonce construciton. It also updates TLSProxy and ossltest to be able to recognise the new layout. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix a missing function prototype in AFALG engineMatt Caswell2016-11-241-0/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Only build the body of e_padlock when there are lower level routinesRichard Levitte2016-11-151-7/+3
| | | | | | | | | | | | engines/e_padlock.c assumes that for all x86 and x86_64 platforms, the lower level routines will be present. However, that's not always true, for example for solaris-x86-cc, and that leads to build errors. The better solution is to have configure detect if the lower level padlock routines are being built, and define the macro PADLOCK_ASM if they are, and use that macro in our C code. Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1510)
* Fix some style issues in ossltestMatt Caswell2016-11-021-7/+4
| | | | | | Based on feedback received Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make sure ossltest engine works with TLS1.3Matt Caswell2016-11-021-1/+85
| | | | | | | This might need more changes once we do a "real" TLS1.3 ciphersuite. But it should do for now. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Engine afalg: properly set operation type also on big endian.Tomas Mraz2016-10-141-2/+2
| | | | | | | Copy the whole ALG_OP_TYPE to CMSG_DATA. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Remove trailing whitespace from some files.David Benjamin2016-10-101-1/+1
| | | | | | | | | | | | | | | | | | The prevailing style seems to not have trailing whitespace, but a few lines do. This is mostly in the perlasm files, but a few C files got them after the reformat. This is the result of: find . -name '*.pl' | xargs sed -E -i '' -e 's/( |'$'\t'')*$//' find . -name '*.c' | xargs sed -E -i '' -e 's/( |'$'\t'')*$//' find . -name '*.h' | xargs sed -E -i '' -e 's/( |'$'\t'')*$//' Then bn_prime.h was excluded since this is a generated file. Note mkerr.pl has some changes in a heredoc for some help output, but other lines there lack trailing whitespace too. Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* engines/afalg: make it compile with backward compatibility headers.Andy Polyakov2016-09-081-3/+6
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* dasync is an internal testing engine, so don't install itRichard Levitte2016-08-171-4/+4
| | | | | | | Unfortunately, it means that the VMS IVP gets a bit crippled. This will be fixed later on. Reviewed-by: Matt Caswell <matt@openssl.org>
* Avoid truncating the pointer on x32 platform.Tomas Mraz2016-08-151-5/+9
| | | | | | | | The 64 bit pointer must not be cast to 32bit unsigned long on x32 platform. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Add a comment for the added cast with explanation.Tomas Mraz2016-08-151-0/+4
| | | | | Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix af_alg engine failure on 32 bit architectures.Tomas Mraz2016-08-151-1/+1
| | | | | | | | Add extra cast to unsigned long to avoid sign extension when converting pointer to 64 bit data. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Use _NO_INST in some build.info filesRichard Levitte2016-07-181-1/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* include/openssl: don't include <windows.h> in public headers.Andy Polyakov2016-07-082-18/+20
| | | | | | | | | | | If application uses any of Windows-specific interfaces, make it application developer's respondibility to include <windows.h>. Rationale is that <windows.h> is quite "toxic" and is sensitive to inclusion order (most notably in relation to <winsock2.h>). It's only natural to give complete control to the application developer. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Simplify INCLUDE statements in build.info filesRichard Levitte2016-07-012-8/+5
| | | | | | | Now that INCLUDE considers both the source and build trees, no need for the rel2abs perl fragment hacks any more. Reviewed-by: Rich Salz <rsalz@openssl.org>
* engines/e_capi.c: accommodate recent DSA_SIG_[get|set]0 changes.Andy Polyakov2016-06-271-9/+9
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Handle inability to create AFALG socketMatt Caswell2016-06-131-0/+9
| | | | | | | | | | | | | Some Linux platforms have a suitably recent kernel to support AFALG, but apparently you still can't actually create an afalg socket. This extends the afalg_chk_platform() function to additionally check whether we can create an AFALG socket. We also amend the afalgtest to not report a failure to load the engine as a test failure. A failure to load is almost certainly due to platform environmental issues, and not an OpenSSL problem. RT 4434 Reviewed-by: Andy Polyakov <appro@openssl.org>
* Fixes to get -ansi workingJeffrey Walton2016-06-081-8/+8
| | | | | | | | | | | | Various fixes to get the following to compile: ./config no-asm -ansi -D_DEFAULT_SOURCE RT4479 RT4480 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix some GitHub issues.Rich Salz2016-06-071-1/+1
| | | | | | | | | GH1180: Local variable sometimes unused GH1181: Missing close paren. Thanks to <wipedout@yandex.ru> for reporting these. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove/rename some old files.Rich Salz2016-06-011-1/+0
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add final(?) set of copyrights.Rich Salz2016-06-011-2/+9
| | | | | | | | | Add copyright to missing assembler files. Add copyrights to missing test/* files. Add copyrights Various source and misc files. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Raise an Err when CRYPTO_THREAD_lock_new failsFdaSilvaYY2016-06-012-2/+8
| | | | | | | | Add missing error raise call, as it is done everywhere else. and as CRYPTO_THREAD_lock_new don't do it internally. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* x86_64 assembly pack: tolerate spaces in source directory name.Andy Polyakov2016-05-291-1/+1
| | | | | | [as it is now quoting $output is not required, but done just in case] Reviewed-by: Richard Levitte <levitte@openssl.org>
* build.info files: add quotes around any spec that may contain spacesRichard Levitte2016-05-252-5/+5
| | | | | | RT#4492 Reviewed-by: Tim Hudson <tjh@openssl.org>
* GH919: Fix wrappers for two headersRich Salz2016-05-241-2/+2
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Add OpenSSL copyright to .pl filesRich Salz2016-05-212-2/+16
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add some check for malloc failure in the CAPI engineMatt Caswell2016-05-181-6/+26
| | | | | | | | In the CAPI engine there were some unchecked calls to OPENSSL_strdup(). GH Issue #830 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Manual fixes after copyright consolidationRich Salz2016-05-1710-530/+90
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Copyright consolidation 02/10Rich Salz2016-05-177-363/+38
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix RSA dasync engine bugMatt Caswell2016-05-171-1/+1
| | | | | | | When RSA went opaque a bug was introduced into the dasync engine where the wrong function was being set for the rsa_priv_dec operation. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add missing initialiser in e_chil.cRichard Levitte2016-05-161-1/+1
| | | | | | RT#2616 Reviewed-by: Tim Hudson <tjh@openssl.org>
* typoDr. Stephen Henson2016-05-111-1/+1
| | | | | | RT#4442 Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Remove obsolete defined(__INTEL__) condition.Andy Polyakov2016-05-021-2/+1
| | | | | | This macro was defined by no-longer-supported __MWERKS__ compiler. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix capi engine for no-dsaMatt Caswell2016-04-221-0/+22
| | | | | | | The capi engine was failing to compile on Windows if the no-dsa option was selected. Reviewed-by: Richard Levitte <levitte@openssl.org>