aboutsummaryrefslogtreecommitdiffstats
path: root/include
Commit message (Collapse)AuthorAgeFilesLines
* Secure memory fixesTodd Short2016-05-021-1/+1
| | | | | | | | | | | | | | | Fix some of the variables to be (s)size_t, so that more than 1GB of secure memory can be allocated. The arena has to be a power of 2, and 2GB fails because it ends up being a negative 32-bit signed number. The |too_late| flag is not strictly necessary; it is easy to figure out if something is secure memory by looking at the arena. As before, secure memory allocations will not fail, but now they can be freed correctly. Once initialized, secure memory can still be used, even if allocations occured before initialization. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix some X509_STORE macrosMatt Caswell2016-04-291-4/+9
| | | | | | Some X509_STORE macros do not work since the type was made opaque. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add checks to X509_NAME_oneline()Dr. Stephen Henson2016-04-291-0/+1
| | | | | | | | | Sanity check field lengths and sums to avoid potential overflows and reject excessively large X509_NAME structures. Issue reported by Guido Vranken. Reviewed-by: Matt Caswell <matt@openssl.org>
* Remove BIO_dummy, it's old cruftRichard Levitte2016-04-291-3/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Change 'struct bio_st' in all public header where applicableRichard Levitte2016-04-291-5/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add asn1_macRich Salz2016-04-291-0/+10
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Make header signature of CRYPTO_mem_leaks BIO instead of struct bio_stPaul Kehrer2016-04-291-1/+1
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1012)
* VMS: It seems DEC C doesn't handle certain header files quite rightRichard Levitte2016-04-292-0/+0
| | | | | | | | | | | With DEC C on VMS, you can use __DECC_INCLUDE_PROLOGUE.H and __DECC_INCLUDE_EPILOGUE.H to include some DEC C specific features or pragmas without having to touch the other header files. It seems, however, that the current version of the compiler requires the file names to be upcased, or it doesn't handle them quite right. Reviewed-by: Andy Polyakov <appro@openssl.org>
* make updateRichard Levitte2016-04-291-0/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix an error code spelling.FdaSilvaYY2016-04-281-1/+1
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/952)
* various spelling fixesFdaSilvaYY2016-04-288-17/+17
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/952)
* Add getters for X509_STORE and X509_OBJECT membersChristian Heimes2016-04-281-0/+3
| | | | | | | | | | | | | | | OpenSSL 1.1.0-pre5 has made some additional structs opaque. Python's ssl module requires access to some of the struct members. Three new getters are added: int X509_OBJECT_get_type(X509_OBJECT *a); STACK_OF(X509_OBJECT) *X509_STORE_get0_objects(X509_STORE *v); X509_VERIFY_PARAM *X509_STORE_get0_param(X509_STORE *ctx); Signed-off-by: Christian Heimes <cheimes@redhat.com> Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Implement X509_STORE_CTX_set_current_cert() accessorViktor Dukhovni2016-04-281-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* GH975 Add ex_data functions for X509_STOREKazuki Yamaguchi2016-04-271-0/+4
| | | | | | | | | | | Add X509_STORE_{set,get}_ex_data() function and X509_STORE_get_ex_new_index() macro. X509_STORE has ex_data and the documentation also mentions them but they are not actually implemented. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Added missing X509_STORE_CTX_set_error_depth() accessorViktor Dukhovni2016-04-251-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* API compat macros for renamed X509_STORE_CTX functionsViktor Dukhovni2016-04-251-0/+6
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* make updateViktor Dukhovni2016-04-221-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Enabled DANE only when at least one TLSA RR was addedViktor Dukhovni2016-04-221-1/+2
| | | | | | | | | | | | | | | | It is up to the caller of SSL_dane_tlsa_add() to take appropriate action when no records are added successfully or adding some records triggers an internal error (negative return value). With this change the caller can continue with PKIX if desired when none of the TLSA records are usable, or take some appropriate action if DANE is required. Also fixed the internal ssl_dane_dup() function to properly initialize the TLSA RR stack in the target SSL handle. Errors in ssl_dane_dup() are no longer ignored. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix no-dsa on Windows/VMSMatt Caswell2016-04-221-1/+3
| | | | | | | | The no-dsa option was failing on Windows because some symbols were not correctly flagged in libcrypto.num. Problem found due to the new symbol consistency test. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix the indentation of OPENSSL_NO_STDIO in pem.hMatt Caswell2016-04-221-2/+2
| | | | | | Some pre-processor macros were incorrectly indented Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix no-cmac on Windows/VMSMatt Caswell2016-04-221-0/+4
| | | | | | | no-cmac was failing on Windows/VMS due to libcrypto.num not marking the CMAC functions properly. Found due to the new symbol consistency test. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix no-ocsp on Windows (and probably VMS)Matt Caswell2016-04-211-66/+77
| | | | | | | | | The ocsp.h file did not have appropriate guards causing link failures on Windows. GH Issue 900 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix no-ui on WindowsMatt Caswell2016-04-201-8/+12
| | | | | | | | Ensure public functions have appropriate guards in header files. GH Issue 899 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Update copyright; generated files.Rich Salz2016-04-201-58/+7
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix no-sock on WindowsMatt Caswell2016-04-201-40/+50
| | | | | | | Link errors were occurring on Windows because the header files were not correctly guarding some functions with OPENSSL_NO_SOCK Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix no-dgram on WindowsMatt Caswell2016-04-201-14/+11
| | | | | | | Link errors were occurring on Windows because the header files were not correctly guarding some functions with OPENSSL_NO_DGRAM Reviewed-by: Rich Salz <rsalz@openssl.org>
* Copyright consolidation: perl filesRich Salz2016-04-201-0/+7
| | | | | | | | | Add copyright to most .pl files This does NOT cover any .pl file that has other copyright in it. Most of those are Andy's but some are public domain. Fix typo's in some existing files. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Prepare for 1.1.0-pre6-devMatt Caswell2016-04-191-3/+3
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Prepare for 1.1.0-pre5 releaseOpenSSL_1_1_0-pre5Matt Caswell2016-04-191-2/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make string_to_hex/hex_to_string publicRich Salz2016-04-182-7/+12
| | | | | | Give the API new names, document it. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Rename some lowercase API'sRich Salz2016-04-183-47/+72
| | | | | | | | | Make OBJ_name_cmp internal Rename idea_xxx to IDEA_xxx Rename get_rfc_xxx to BN_get_rfc_xxx Rename v3_addr and v3_asid functions to X509v3_... Reviewed-by: Richard Levitte <levitte@openssl.org>
* Restore OCSP_basic_verify() error return semanticsRichard Levitte2016-04-171-0/+1
| | | | | | | | Recently, OCSP_basic_verify() was changed to always return 0 on error, when it would previously return 0 on error and < 0 on fatal error. This restores the previous semantics back. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove declaration of function that isn't implementedRichard Levitte2016-04-171-1/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add X509_STORE_CTX_set0_untrusted function.Dr. Stephen Henson2016-04-161-0/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Make many X509_xxx types opaque.Rich Salz2016-04-153-163/+25
| | | | | | | | | Make X509_OBJECT, X509_STORE_CTX, X509_STORE, X509_LOOKUP, and X509_LOOKUP_METHOD opaque. Remove unused X509_CERT_FILE_CTX Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Fix ex_data locks issueMatt Caswell2016-04-141-0/+1
| | | | | | | | | | | Travis identified a problem with freeing the ex_data locks which wasn't quite right in ff2344052. Trying to fix it identified a further problem: the ex_data locks are cleaned up by OPENSSL_cleanup(), which is called explicitly by CRYPTO_mem_leaks(), but then later the BIO passed to CRYPTO_mem_leaks() is freed. An attempt is then made to use the ex_data lock already freed. Reviewed-by: Tim Hudson <tjh@openssl.org>
* The err_cleanup() funtion is internal so shouldn't be exportedMatt Caswell2016-04-141-1/+0
| | | | | | | Running a "make update" wanted to add err_cleanup to libcrypto.num which is wrong. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add SSL_SESSION_get0_hostname()Lyon Chen2016-04-141-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Ensure all locks are properly cleaned upMatt Caswell2016-04-142-1/+2
| | | | | | Some locks were not being properly cleaned up during close down. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove OPENSSL_NO_AES guardsMatt Caswell2016-04-132-13/+9
| | | | | | | no-aes is no longer a Configure option and therefore the OPENSSL_NO_AES guards can be removed. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove check_defer()Dr. Stephen Henson2016-04-131-3/+0
| | | | | | | | | | | The check_defer() function was used to ensure that EVP_cleanup() was always called before OBJ_cleanup(). The new cleanup code ensures this so it is no longer needed. Remove obj_cleanup() call in OID config module: it is not needed any more either. Reviewed-by: Matt Caswell <matt@openssl.org>
* Move a declaration that's private to libcryptoRichard Levitte2016-04-131-1/+0
| | | | | | Don't expose purely libcrypto internal symbols, even to libssl. Reviewed-by: Matt Caswell <matt@openssl.org>
* Rename int_*() functions to *_int()Matt Caswell2016-04-134-7/+7
| | | | | | | | | | There is a preference for suffixes to indicate that a function is internal rather than prefixes. Note: the suffix is only required to disambiguate internal functions and public symbols with the same name (but different case) Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix explicit de-init macrosMatt Caswell2016-04-1310-10/+10
| | | | | | | | The no-op de-init macros may fail because of extraneous ";", so we use a slightly different construct instead. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix symbols missing from shared buildMatt Caswell2016-04-131-0/+5
| | | | | | | libssl needs to have access to some internal libcrypto symbols. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Rename lots of *_intern or *_internal function to int_*Matt Caswell2016-04-134-7/+7
| | | | | | | | There was a lot of naming inconsistency, so we try and standardise on one form. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Deprecate CONF_modules_free() and make it a no-opMatt Caswell2016-04-132-1/+4
| | | | | | | | CONF_modules_free() should not be called expicitly - we should leave auto-deinit to clean this up instead. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Deprecate ENGINE_cleanup() and make it a no-opMatt Caswell2016-04-131-7/+6
| | | | | | | | ENGINE_cleanup() should not be called expicitly - we should leave auto-deinit to clean this up instead. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Deprecate OBJ_cleanup() and make it a no-opMatt Caswell2016-04-131-1/+3
| | | | | | | | OBJ_cleanup() should not be called expicitly - we should leave auto-deinit to clean this up instead. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Deprecate EVP_cleanup() and make it a no-opMatt Caswell2016-04-131-5/+6
| | | | | | | | EVP_cleanup() should not be called expicitly - we should leave auto-deinit to clean this up instead. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-07 13:08:00 +0000