summaryrefslogtreecommitdiffstats
path: root/crypto/dllmain.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2016-11-02Update Configure to know about tls1_3Matt Caswell6-1457/+387
Also we disable TLS1.3 by default (use enable-tls1_3 to re-enable). This is because this is a WIP and will not be interoperable with any other TLS1.3 implementation. Finally, we fix some tests that started failing when TLS1.3 was disabled by default. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-11-02Use ciphersuite id when matching if we've got oneMatt Caswell1-0/+2
When matching a ciphersuite if we are given an id, make sure we use it otherwise we will match another ciphersuite which is identical except for the TLS version. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-11-02Add the SSL_METHOD for TLSv1.3 and all other base changes requiredMatt Caswell35-1457/+11486
Includes addition of the various options to s_server/s_client. Also adds one of the new TLS1.3 ciphersuites. This isn't "real" TLS1.3!! It's identical to TLS1.2 apart from the protocol and the ciphersuite...and the ciphersuite is just a renamed TLS1.2 one (not a "real" TLS1.3 ciphersuite). Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-11-02TEST_check macro: don't end with semiEmilia Kasper1-1/+1
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-11-02Secure our notification email.Richard Levitte1-2/+1
Forks will have to define their own Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1821)
2016-11-01Add SSL_CTX_set1_cert_store()Todd Short5-1/+28
For convenience, combine getting a new ref for the new SSL_CTX with assigning the store and freeing the old one. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1755)
2016-11-01[fuzzers] do not fail fuzzers with empty inputMike Aizatsky2-4/+14
Reviewed-by: Kurt Roeckx <kurt@roeckx.be> Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1788
2016-11-01Fix grammar-o in CONTRIBUTINGBenjamin Kaduk1-1/+1
Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1625)
2016-11-01Revert "Disable MDC2 by default."Rich Salz4-9/+7
This reverts commit ca1574cec20589885000d039eed3a9375fb29a0d. Not suitabled for a minor release as it breaks the ABI. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-11-01HPUX: Add the forgotten $(DSTDIR) when linking DSOsRichard Levitte1-4/+4
Reviewed-by: Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1802)
2016-10-31Unix Makefile: Some sed implementation truncate long lines. Use perl instead.Richard Levitte1-1/+1
Fixes #1781 Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1813)
2016-10-31sha/keccak1600.c: add couple of soft asserts.Andy Polyakov1-0/+4
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-31Disable MDC2 by default.Rich Salz4-7/+9
Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
2016-10-31Mark VC templates correctly.Richard Levitte1-0/+2
VC-noCE-common and VC-WIN64-common were missing this line: template => 1, Fixes GH#1809 Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1811)
2016-10-29Try to unify BIO read/write parameter namesBenjamin Kaduk4-45/+45
After the recent reworking, not everything matched up, and some comments didn't catch up to the outl-->dlen and inl-->dlen renames that happened during the development of the recent patches. Try to make parameter names consistent across header, implementation, and manual pages. Also remove some trailing whitespace that was inadvertently introduced. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1798)
2016-10-29Wordsmith INSTALLBenjamin Kaduk1-2/+2
Make it clear that the OPENSSL_LOCAL_CONFIG_DIR settings take precedence over the in-tree configs. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1798)
2016-10-28Fix stdio build following BIO size_t workMatt Caswell1-0/+4
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Fix more shadowed variable warningsMatt Caswell2-19/+19
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Fix some feedback issues for BIO size_t-ifyMatt Caswell3-35/+42
Rename some parameters; add some error codes; fix a comment; etc Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Add some sanity checks for BIO_read* and BIO_getsMatt Caswell1-1/+11
Make sure the return value isn't bigger than the buffer len Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28More parameter naming of BIO_read*/BIO_write* related functionsMatt Caswell4-32/+33
Based on feedback received. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Tweaks based on review feedback of BIO size_t workMatt Caswell3-17/+17
Rename some parameters. Also change handling of buffer sizes >INT_MAX in length. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Ensure that BIO_read_ex() and BIO_write_ex() only return 0 or 1Matt Caswell1-29/+63
They should return 0 for a failure (retryable or not), and 1 for a success. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Read up to INT_MAX when calling legacy BIO_read() implementationsMatt Caswell1-1/+1
In converting a new style BIO_read() call into an old one, read as much data as we can (INT_MAX), if the size of the buffer is >INT_MAX. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Fix a shadowed variable declaration warningMatt Caswell1-3/+3
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Fix some bogus uninit variable warningsMatt Caswell1-2/+2
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Document the new BIO functions introduced as part of the size_t workMatt Caswell13-73/+194
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Ensure all BIO functions call the new style callbackMatt Caswell2-113/+155
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Create BIO_write_ex() which handles size_t argumentsMatt Caswell26-28/+139
Also extend BIO_METHOD to be able to supply an implementation for the new BIO_write_ex function. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Create BIO_read_ex() which handles size_t argumentsMatt Caswell27-25/+210
Also extend BIO_METHOD to be able to supply an implementation for the new BIO_read function. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28Fix a double free in ca command lineMatt Caswell1-1/+0
Providing a spkac file with no default section causes a double free. Thanks to Brian Carpenter for reporting this issue. Reviewed-by: Kurt Roeckx <kurt@openssl.org>
2016-10-28Add a test for BIO_read() returning 0 in SSL_read() (and also for write)Matt Caswell1-1/+42
A BIO_read() 0 return indicates that a failure occurred that may be retryable. An SSL_read() 0 return indicates a non-retryable failure. Check that if BIO_read() returns 0, SSL_read() returns <0. Same for SSL_write(). The asyncio test filter BIO already returns 0 on a retryable failure so we build on that. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-28A zero return from BIO_read()/BIO_write() could be retryableMatt Caswell1-3/+15
A zero return from BIO_read()/BIO_write() could mean that an IO operation is retryable. A zero return from SSL_read()/SSL_write() means that the connection has been closed down (either cleanly or not). Therefore we should not propagate a zero return value from BIO_read()/BIO_write() back up the stack to SSL_read()/SSL_write(). This could result in a retryable failure being treated as fatal. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-26Provide a cross-platform format specifier (OSSLzu) for printing size_tMatt Caswell1-0/+11
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-26Move manpages to man[1357] structure.Rich Salz444-98/+40
Move manpages to manX directories Add Windows/VMS install fix from Richard Levitte Update README Fix typo's Remove some duplicates Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-26VMS: tell the C compiler to use the ISO C94 standardRichard Levitte1-1/+1
The current version of the VMS compiler provides C99 features, strictly language wise. Unfortunately, even the most recent standard library isn't fully updated for that standard, so we need to use an earlier standard that the compiler supports. Most importantly, this affects the __STDC_VERSION__ value, which the compiler unfortunately currently defaults to 199901L. With this change we won't have to give VMS special treatment when looking for features based on that macro. Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1785)
2016-10-26Fix typo (reported by Matthias St. Pierre)Rich Salz1-1/+1
Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-10-25Backdated note in CHANGES about shared library namesRichard Levitte1-0/+6
Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1767)
2016-10-25Add some notes on shared library names on different platformsRichard Levitte1-2/+27
This is overdue since the addition of the unified build system Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1767)
2016-10-24ppccap.c: engage new multipplication and squaring subroutines.Andy Polyakov3-33/+16
[And remove FPU mutiplication subroutine.] Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-24bn/asm/ppc-mont.pl: add optimized multiplication and squaring subroutines.Andy Polyakov1-1/+1645
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-24bn/asm/ppc-mont.pl: prepare for extension.Andy Polyakov1-19/+24
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-10-24sha/asm/sha512-armv8.pl: adapt for kernel use.Andy Polyakov1-15/+38
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-24Add NPN to an SSL3 buildRich Salz1-2/+2
Reviewed-by: Emilia Käsper <emilia@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1629)
2016-10-24x86_64 assembly pack: add Goldmont performance results.Andy Polyakov11-1/+14
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-10-24sha/keccak1600.c: add known answer and verify result with memcmp.Andy Polyakov1-3/+83
Reviewed-by: Richard Levitte <levitte@openssl.org>