This project is mirrored from https://github.com/openssl/openssl.git.
Pull mirroring failed .
Last successful update .
Last successful update .
- 26 Nov, 2020 3 commits
-
-
Matt Caswell authored
Reviewed-by:Tomas Mraz <tmraz@fedoraproject.org>
-
Matt Caswell authored
Reviewed-by:
-
Richard Levitte authored
The examples are also updated to have correct terminators. doc/man3/OSSL_PARAM.pod is deliberately written with no help from the constructor macros described in OSSL_PARAM_int.pod. Therefore, use of OSSL_PARAM_END isn't shown directly here, only leaving a link to its man-page to indicate that there is that option. Fixes #11280 Reviewed-by:
Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/13478)
-
- 25 Nov, 2020 12 commits
-
-
Matt Caswell authored
Skip a test that relies on RC2 being present in a no-rc2 build. Reviewed-by:
-
Matt Caswell authored
genpkey was supressing deprecation warnings in order to support ENGINE functionality. We move all of that into a separate file so that we don't need to suppress the warnings anymore. Fixes #13118 Reviewed-by:
Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13454)
-
Dr. David von Oheimb authored
Also make clear we cannot use get_ui_method() at this point. Fixes #13494 Reviewed-by:
Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13497)
-
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
Fixes #13494 Reviewed-by:
-
Matt Caswell authored
Commit be9d82bb inadvertently disabled ciphersuite testing. This masked some issues. Therefore we fix this testing. Reviewed-by:
-
Matt Caswell authored
The RC4-MD5 ciphersuites were not removing the length of the MAC when calculating the length of decrypted TLS data. Since RC4 is a streamed cipher that doesn't use padding we separate out the concepts of fixed length TLS data to be removed, and TLS padding. Reviewed-by:
-
Matt Caswell authored
We previously updated the block ciphers to know how to remove a TLS MAC when using Encrypt-then-MAC. We also need to do the same for stream ciphers. Fixes #13363 Reviewed-by:
-
Matt Caswell authored
There have been instances where OSSL_STORE got confused between DSA and DH params (e.g. see issue #13046) due the DER encoding of DH and DSA params looking identical. Therefore we test that we get the types that we expect. Reviewed-by:
-
Matt Caswell authored
Add tests for various deprecated PEM_read_bio_*() functions to ensure they can still read the various files. Reviewed-by:
-
Matt Caswell authored
The OSSL_STORE code was forgetting the datatype that we read from the PEM header when decoding the DER. Fixes #13046 Reviewed-by:
-
Richard Levitte authored
Fixes #13482 Reviewed-by:
-
- 24 Nov, 2020 8 commits
-
-
Matt Caswell authored
The -dsaparam option was deprecated because it was previously using deprecated functions in order to operate. This is no longer the case and therefore does not need to be deprecated. Reviewed-by:
-
Richard Levitte authored
This partially reverts commit a308acb2. Reviewed-by:
-
Richard Levitte authored
This is the result of 'make errors ERROR_REBUILD=-rebuild' Reviewed-by:
-
Richard Levitte authored
This deprecates all the ERR_load_ functions, and moves their definition to separate C source files that can easily be removed when those functions are finally removed. This also reduces include/openssl/kdferr.h to include cryptoerr_legacy.h, moves the declaration of ERR_load_ERR_strings() from include/openssl/err.h to include/openssl/cryptoerr_legacy.h, and finally removes the declaration of ERR_load_DSO_strings(), which was entirely internal anyway. Reviewed-by:
-
Richard Levitte authored
This also modifies the .ec L statement to take a third file, which is the internal header file to declare internal things. This is only useful for our internal declarations and will not affect engines. Fixes #10527 Reviewed-by:
-
Matt Caswell authored
As an interim measure until we work out our longer term CI strategy this PR enables some basic CI tests using the Github CI capability. Reviewed-by:
Tim Hudson <tjh@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13489)
-
Petr Gotthard authored
Fix for the issue #13472. The decoderctx has to be initialized in every cycle as its constructor may not be called due to lazy evaluation of the if-condition. CLA: trivial Reviewed-by:
-
Richard Levitte authored
Our test data (test/data.txt and test/data2.txt) are text files, but declaring them binary means that there will be no line ending transformation done on them. This is necessary for testing on non-Unix platforms, where certain tests could otherwise give results that don't match expected results. Fixes #13474 Reviewed-by:
-
- 23 Nov, 2020 7 commits
-
-
Matt Caswell authored
disabled_enc_mask et al were global. Now that cipher loading is done individually for each SSL_CTX, based on the libctx configured for that SSL_CTX this means that some things will be disabled for one SSL_CTX but not for another. The global variables set up the potential for different SSL_CTXs to trample on each other. We move these variables into the SSL_CTX structure. Fixes #12040 Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Previously changes left some variables behind that were no longer needed. We now remove them. Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Fred Hornsey authored
I think builds using standalone toolchain are fine so I left them alone, but `Configure` will fail if using the NDK directly because the `platforms` and `sysroot` directories were removed. If `sysroot` is missing, omit the `--sysroot` and `-gcc-toolchain` arguments and use the triplet form clang command. Also since `platforms` was being used for the default API level, use `meta/platforms.json` instead if needed. Reviewed-by:
-
Richard Levitte authored
A OSSL_DEPRECATEDIN_0_9_8 function was surrounded by a OPENSSL_NO_DEPRECATED_3_0 guard. Reviewed-by:
-
- 22 Nov, 2020 1 commit
-
-
Ankita Shetty authored
Reviewed-by:
-
- 20 Nov, 2020 8 commits
-
-
Richard Levitte authored
Use this for quick and easy conversion of old-style to new-style deprecation: perl util/fix-deprecation \ < include/openssl/rsa.h > include/openssl/rsa.h.new mv include/openssl/rsa.h.new include/openssl/rsa.h This is not a perfect utility, but it does the job. It doesn't try to re-indent, that's left for manual post processing. Reviewed-by: -
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
Reviewed-by:
-
Dr. David von Oheimb authored
Fixes #13403 Reviewed-by:
-
Richard Levitte authored
This was probably due to a merge Fixes #13449 Reviewed-by:
David von Oheimb <david.von.oheimb@siemens.com> (Merged from https://github.com/openssl/openssl/pull/13450)
-
Shane Lontis authored
By the time the keygen is called the references to strings inside the gen ctx are floating pointers. A strdup solves this problem. Reviewed-by:
-
- 19 Nov, 2020 1 commit
-
-
David Carlier authored
overriding ar and flags from BASE_common mainly. Reviewed-by:
-
