aboutsummaryrefslogtreecommitdiffstats
path: root/util
Commit message (Collapse)AuthorAgeFilesLines
...
* Add a test for the supported_versions extensionMatt Caswell2016-11-091-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add server side support for supported_versions extensionMatt Caswell2016-11-091-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add a test for the wrong version number in a recordMatt Caswell2016-11-071-5/+8
| | | | | | | | Prior to TLS1.3 we check that the received record version number is correct. In TLS1.3 we need to ignore the record version number. This adds a test to make sure we do it correctly. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Convert libssl writing for size_tMatt Caswell2016-11-041-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Further libssl size_t-ify of readingMatt Caswell2016-11-041-0/+2
| | | | | | Writing still to be done Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add a DSO_dsobyaddr() functionMatt Caswell2016-11-021-0/+1
| | | | | | | This works the same way as DSO_pathbyaddr() but instead returns a ptr to the DSO that contains the provided symbol. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Partial revert of 3d8b2ec42 to add back DSO_pathbyaddrMatt Caswell2016-11-021-0/+1
| | | | | | | | | Commit 3d8b2ec42 removed various unused functions. However now we need to use one of them! This commit resurrects DSO_pathbyaddr(). We're not going to resurrect the Windows version though because what we need to achieve can be done a different way on Windows. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Add a test for unrecognised record typesMatt Caswell2016-11-021-2/+4
| | | | | | We should fail if we receive an unrecognised record type Reviewed-by: Tim Hudson <tjh@openssl.org>
* Add DTLS_get_data_mtu() functionDavid Woodhouse2016-11-021-0/+1
| | | | | | | | | | We add ssl_cipher_get_overhead() as an internal function, to avoid having too much ciphersuite-specific knowledge in DTLS_get_data_mtu() itself. It's going to need adjustment for TLSv1.3... but then again, so is fairly much *all* of the SSL_CIPHER handling. This bit is in the noise. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Enable TLSProxy to talk TLS1.3Matt Caswell2016-11-022-16/+19
| | | | | | | Now that ossltest knows about a TLS1.3 cipher we can now do TLS1.3 in TLSProxy Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add the SSL_METHOD for TLSv1.3 and all other base changes requiredMatt Caswell2016-11-021-1/+3
| | | | | | | | | | | Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add SSL_CTX_set1_cert_store()Todd Short2016-11-011-0/+1
| | | | | | | | | For convenience, combine getting a new ref for the new SSL_CTX with assigning the store and freeing the old one. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1755)
* Create BIO_write_ex() which handles size_t argumentsMatt Caswell2016-10-281-0/+3
| | | | | | | Also extend BIO_METHOD to be able to supply an implementation for the new BIO_write_ex function. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Create BIO_read_ex() which handles size_t argumentsMatt Caswell2016-10-281-0/+5
| | | | | | | Also extend BIO_METHOD to be able to supply an implementation for the new BIO_read function. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Move manpages to man[1357] structure.Rich Salz2016-10-264-40/+18
| | | | | | | | | | Move manpages to manX directories Add Windows/VMS install fix from Richard Levitte Update README Fix typo's Remove some duplicates Reviewed-by: Richard Levitte <levitte@openssl.org>
* Allow older versions in the *.num filesMatt Caswell2016-10-171-2/+1
| | | | | | | | | | | | | In 1.1.0 we only allowed a strictly increasing version number in the *.num files, i.e. you could never introduce a symbol at the end of the *.num file with a lower version number than the one preceding it. This made sense for 1.1.0. However in master we may be introducing symbols for backport to 1.1.0. Therefore it is ok in master to have a symbol for version 1.1.0c coming after a symbol for version 1.1.1. This commit fixes the check in mkdef.pl to be a bit looser to allow this. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove automatic RPATH - adapt shlib_wrap.shRichard Levitte2016-10-131-2/+2
| | | | | | | | | | | | | | Looking for something starting with '-Wl,-rpath,' isn't good enough, as someone might give something like '-Wl,--enable-new-dtags,-rpath,/PATH'. Looking for ',-rpath,' should be safe enough. We could remove the preloading stuff entirely, but just in case the user has chosen to given RPATH setting arguments at configuration, we'd better make sure testing will still work. Fair warning, there are some configuration options that do not work with preloaded OpenSSL libraries, such as the sanity checking ones. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove trailing whitespace from some files.David Benjamin2016-10-106-17/+17
| | | | | | | | | | | | | | | | | | The prevailing style seems to not have trailing whitespace, but a few lines do. This is mostly in the perlasm files, but a few C files got them after the reformat. This is the result of: find . -name '*.pl' | xargs sed -E -i '' -e 's/( |'$'\t'')*$//' find . -name '*.c' | xargs sed -E -i '' -e 's/( |'$'\t'')*$//' find . -name '*.h' | xargs sed -E -i '' -e 's/( |'$'\t'')*$//' Then bn_prime.h was excluded since this is a generated file. Note mkerr.pl has some changes in a heredoc for some help output, but other lines there lack trailing whitespace too. Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Add some missing types to indent.proFdaSilvaYY2016-10-101-0/+8
| | | | | Reviewed-by: Andy Polyakov <appro@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* make updateDr. Stephen Henson2016-09-291-0/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Test CBC mode padding.David Benjamin2016-09-262-3/+14
| | | | | | | | | | | | This is a regression test for https://github.com/openssl/openssl/pull/1431. It tests a maximally-padded record with each possible invalid offset. This required fixing a bug in Message.pm where the client sending a fatal alert followed by close_notify was still treated as success. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Add OCSP_RESPID_match()Matt Caswell2016-09-221-0/+1
| | | | | | | Add a function for testing whether a given OCSP_RESPID matches with a certificate. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add the ability to set OCSP_RESPID fieldsMatt Caswell2016-09-221-0/+2
| | | | | | | OCSP_RESPID was made opaque in 1.1.0, but no accessors were provided for setting the name/key value for the OCSP_RESPID. Reviewed-by: Rich Salz <rsalz@openssl.org>
* VMS: add [.util]shlib_wrap.exe and its build instructionsRichard Levitte2016-09-212-2/+121
| | | | | | This is a program for VMS that corresponds to util/shlib_wrap.sh. Reviewed-by: Rich Salz <rsalz@openssl.org>
* util/dofile.pl: report if a template couldn't be loadedRichard Levitte2016-09-211-1/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Allow asan, msan and ubsan to be configured with shared librariesRichard Levitte2016-09-072-0/+4
| | | | | | | | | | | | | | | The background story is that util/shlib_wrap.sh was setting LD_PRELOAD or similar platform dependent variables, just in case the shared libraries were built with -rpath. Unfortunately, this doesn't work too well with asan, msan or ubsan. So, the solution is to forbid the combination of shared libraries, -rpath and any of the sanity analyzers we can configure. This changes util/shlib_wrap.sh so it only contains the code that sets LD_PRELOAD when -rpath has been used when configuring. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Un-delete still documented X509_STORE_CTX_set_verifyViktor Dukhovni2016-08-241-1/+1
| | | | | | It should not have been removed. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Removes {i2o,o2i}_SCT_signature from the CT public APIRob Percival2016-08-231-2/+0
| | | | | | | | | They may return if an SCT_signature struct is added in the future that allows them to be refactored to conform to the i2d/d2i function signature conventions. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Internalizes SCT_verify and removes SCT_verify_v1Rob Percival2016-08-231-2/+0
| | | | | | | | | | | | | SCT_verify is impossible to call through the public API (SCT_CTX_new() is not part of the public API), so rename it to SCT_CTX_verify and move it out of the public API. SCT_verify_v1 is redundant, since SCT_validate does the same verification (by calling SCT_verify) and more. The API is less confusing with a single verification function (SCT_validate). Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Expose alloc functions for EC{PK,}PARAMETERSKazuki Yamaguchi2016-08-221-0/+4
| | | | | | | | | | Declare EC{PK,}PARAMETERS_{new,free} functions in public headers. The free functions are necessary because EC_GROUP_get_ec{pk,}parameters() was made public by commit 60b350a3ef96 ("RT3676: Expose ECgroup i2d functions"). Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* crypto/pkcs12: add UTF8 support.Andy Polyakov2016-08-221-0/+4
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* update ordinalsDr. Stephen Henson2016-08-211-3/+3
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add BIO_get_new_index()Rich Salz2016-08-191-0/+1
| | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* make updateDr. Stephen Henson2016-08-191-4/+8
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* rename ordinalsDr. Stephen Henson2016-08-191-4/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* make updateDr. Stephen Henson2016-08-191-0/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* make updateDr. Stephen Henson2016-08-191-0/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Simplify indentation of DECLARE_ and IMPLEMENT_ linesRichard Levitte2016-08-181-1/+1
| | | | | | | | There's no reason we should enumerate every type of IMPLEMENT_ and DECLARE_ line (and forget the ones we add a little now and then). They all start with the same first word, let's just take'm all. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Indent ssl/Emilia Kasper2016-08-181-1/+6
| | | | | | | | | Run util/openssl-format-source on ssl/ Some comments and hand-formatted tables were fixed up manually by disabling auto-formatting. Reviewed-by: Rich Salz <rsalz@openssl.org>
* make updateDr. Stephen Henson2016-08-171-0/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Add missing session id and tlsext_status accessorsRemi Gacogne2016-08-171-0/+2
| | | | | | | | | | * SSL_SESSION_set1_id() * SSL_SESSION_get0_id_context() * SSL_CTX_get_tlsext_status_cb() * SSL_CTX_get_tlsext_status_arg() Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* make updateDr. Stephen Henson2016-08-161-1/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove duplicate ordinalsRichard Levitte2016-08-161-3/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add some SSLv2 ClientHello testsMatt Caswell2016-08-153-6/+31
| | | | | | Test that we handle a TLS ClientHello in an SSLv2 record correctly. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Replaces CT_POLICY_EVAL_CTX_set0 entries with new setters in libcrypto.numRob Percival2016-08-151-3/+3
| | | | | Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1408)
* Improves CTLOG_STORE settersRob Percival2016-08-151-3/+6
| | | | | | | | Changes them to have clearer ownership semantics, as suggested in https://github.com/openssl/openssl/pull/1372#discussion_r73232196. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1408)
* make updateDr. Stephen Henson2016-08-131-0/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* GH1446: Add SSL_SESSION_get0_cipherRich Salz2016-08-121-0/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1451)
* Mkae CT_log_new_from_base64 always return 0 on failureRob Percival2016-08-051-1/+0
| | | | | | | | | | In one failure case, it used to return -1. That failure case (CTLOG_new() returning NULL) was not usefully distinct from all of the other failure cases. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1407)
* openssl-format-source: A few more (DECLARE|IMPLEMENT) variants to care forRichard Levitte2016-08-051-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-08 14:35:33 +0000