aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2016-03-09Remove unused codeKurt Roeckx1-15/+4
Reviewed-by: Viktor Dukhovni <viktor@openssl.org> MR: #1595
2016-03-09Make function to convert version to stringKurt Roeckx3-32/+24
Reviewed-by: Viktor Dukhovni <viktor@openssl.org> MR: #1595
2016-03-09Constify security callbacksKurt Roeckx5-19/+19
Reviewed-by: Viktor Dukhovni <viktor@openssl.org> MR: #1595
2016-03-09Documentation for ctx_set_ctlog_list_file()Rob Percival1-0/+6
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Minor improvement to formatting of SCT output in s_clientRob Percival1-5/+10
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Do not display a CT log error message if CT validation is disabledRob Percival4-15/+14
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09RT3676: Expose ECgroup i2d functionsRich Salz5-127/+161
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2016-03-09Comment away the extra checks in ConfigureRichard Levitte1-5/+5
The "extra checks" is a debugging tool to check the config resolving mechanism. It uses Perl's smart match, which is experimental and therefore always causes Perl to give out a warning, and it causes older Perl versions to fail entirely. So, it gets commented away, but stays otherwise in place, as it may be useful again. Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Make ct_dir and certs_dir static in test/ct_test.cRichard Levitte1-2/+2
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Fix ct_test to not assume it's in the source directoryRichard Levitte1-1/+0
ct_test assumed it's run in the source directory and failed when built elsewhere. It still defaults to that, but can be told another story with the environment variables CT_DIR and CERTS_DIR. Test recipe updated to match. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Document importance of CTLOG_STORE outliving SCT if SCT_set0_log is usedRob Percival1-0/+2
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Make SCT literals into const variables in ct_test.cRob Percival1-14/+19
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Makes STACK_OF(SCT)* parameter of i2d_SCT_LIST constRob Percival2-2/+2
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Removes SCT_LIST_set_source and SCT_LIST_set0_logsRob Percival4-50/+13
Both of these functions can easily be implemented by callers instead. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Makes SCT_get0_log return const CTLOG*Rob Percival3-3/+3
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Makes CTLOG_STORE_get0_log_by_id return const CTLOG*Rob Percival2-7/+7
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Improved documentation of SCT_CTX_* functionsRob Percival2-15/+29
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Updates ct_err.cRob Percival1-5/+5
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Remove unnecessary call to SCT_set1_extensions(sct, "", 0) in ct_test.cRob Percival1-4/+0
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Reset SCT validation_status if the SCT is modifiedRob Percival1-0/+12
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Use SCT_VERSION_V1 in place of literal 0 in ct_test.cRob Percival1-1/+1
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Fixes "usuable" typo in ct_locl.hRob Percival1-1/+1
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Treat boolean functions as booleansRob Percival5-25/+16
Use "!x" instead of "x <= 0", as these functions never return a negative value. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Make parameters of CTLOG_get* constRob Percival2-6/+8
Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Extensive application of __owur to CT functions that return a booleanRob Percival5-53/+98
Also improves some documentation of those functions. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Makes SCT_LIST_set_source return the number of successesRob Percival2-5/+4
No longer terminates on first error, but instead tries to set the source of every SCT regardless of whether an error occurs with some. Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Fix locking in ssl_cert_dup()Todd Short1-1/+1
Properly check the return value of CRYPTO_THREAD_lock_new() Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Restore building out of source with the unified build schemeRichard Levitte1-7/+7
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09CT test can't run without EC, so skip it on that algo as wellRichard Levitte1-1/+1
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Fix ct_test to not assume it's in the source directoryRichard Levitte2-44/+97
ct_test assumed it's run in the source directory and failed when built elsewhere. It still defaults to that, but can be told another story with the environment variables CT_DIR and CERTS_DIR. Test recipe updated to match. Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Update CHANGES and NEWSMatt Caswell2-0/+16
Update the CHANGES and NEWS files with information about the recently added AFALG engine and pipelining. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-09Fix classic buildMatt Caswell1-1/+1
The Thread API changes broke classic build. This fixes it. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-09In build.info, an IF within a clause that's skipped over shouldn't applyRichard Levitte1-1/+7
If we find an IF within a clause that's skipped over, set it to be skipped as well. Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Add an entry in NEWS about the new threading APIMatt Caswell1-0/+1
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-09Update CHANGES for the new threading APIMatt Caswell1-0/+8
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-09Remove the old threading APIMatt Caswell9-968/+71
All OpenSSL code has now been transferred to use the new threading API, so the old one is no longer used and can be removed. We provide some compat macros for removed functions which are all no-ops. There is now no longer a need to set locking callbacks!! Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-09Remove use of the old CRYPTO_LOCK_X5O9_STOREMatt Caswell1-12/+22
The locking here is a bit strange and unclear. Rather than refactor anything and possibly break stuff I have just moved to using the new thread API following as closely as possible what was there previously. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-09Don't call ENGINE_cleanup when configured "no-engine"Richard Levitte1-0/+4
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Don't add engines if configured "no-engine"Richard Levitte1-23/+30
Similarly, don't add e_capi if configured "no-capieng" Also, indent a little deeper, for clarity. Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Don't add afalg engine if configured "no-engine"Richard Levitte1-10/+12
Also, indent a little deeper, for clarity. Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Don't check the conditions to build e_afalg if configured "no-engine"Richard Levitte1-14/+16
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-09Have Configure display the value of SHARED_CFLAGRichard Levitte1-0/+1
Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-09Make sure the effect of "pic" / "no-pic" is used with assembler compilationsRichard Levitte18-18/+18
Before the 'Introduce the "pic" / "no-pic" config option' commit, the shared_cflag value for the chosen config would be part of the make variable CFLAG, which got replicated into CFLAGS and ASFLAGS. Since said commit, the shared_cflag value has become a make variable of its own, SHARED_CFLAG (which is left empty in a "no-pic" build). However, ASFLAGS was forgotten. That's what's corrected with this change. Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-09Touch the correct variables for the system; shlib_wrap.sh on SolarisRichard Levitte1-3/+7
If there is cause to think LD_LIBRARY_PATH_32 and LD_PRELOAD_32 are appropriate variables to touch, do so. Otherwise, touch the usual LD_LIBRARY_PATH and LD_PRELOAD. This covers for older installations that don't have a mix of 32-bit and 64-bit libs. Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-09Recognise 32-bit Solaris in util/shlib_wrap.shRichard Levitte1-0/+5
Submitted by Erik Forsberg <erik@efca.com> Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-09Check gcc version to see if it supports -MM and friendsRichard Levitte1-1/+5
According to manuals found here: https://gcc.gnu.org/onlinedocs/, GNU C version 3 and on support the dependency generation options. We therefore need to check the gcc version to see if we're going to use it or makedepend for dependency generation. Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-09Add extra include directory for includers of ppc_arch.hRichard Levitte2-1/+3
crypto/evp/e_aes.c and crypto/modes/gcm128.c include ppc_arch.h, which is located in crypto/, so add that as extra include directory for them. Issue reported by Jeffrey Walton <noloader@gmail.com> Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-09Adapt INSTALL and related notes for WindowsRichard Levitte2-127/+127
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Adapt appveyor.yml for the new unified buildRichard Levitte1-11/+2
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-09Adapt the Windows makefile template to source generationRichard Levitte1-0/+47
Reviewed-by: Rich Salz <rsalz@openssl.org>