summaryrefslogtreecommitdiffstats
path: root/doc (follow)
Commit message (Collapse)AuthorAgeFilesLines
* DOC: fix documentation of som EVP_MD_CTX functionsRichard Levitte2019-09-241-3/+3
| | | | | | | | | | They were documented to take an EVP_MD pointer, when they really take an EVP_MD_CTX pointer. Fixes #9993 Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9996)
* Fix bugs in "info" commands flagsRich Salz2019-09-241-9/+9
| | | | | | | | | | Remove -c/-e/-m aliases, OpenSSL commands don't do that. Fix typo's in the documentation. Fix -module flag to print the right thing. Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9986)
* Update new TLS version options to s_time man pageraja-ashok2019-09-231-12/+10
| | | | | | Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9947)
* Note that the mac command is preferrable to the MAC command line options.Pauli2019-09-211-0/+16
| | | | | | | | | | The dgst command allows MACs to be calculated, the mac command is the more recent interface for doing the same and provides better access to a wider range of MACs. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> (Merged from https://github.com/openssl/openssl/pull/9962)
* Modify providers that keep track of underlying algorithmsRichard Levitte2019-09-192-1/+14
| | | | | | | | | | | | | | | | | | | | | With some provider implementations, there are underlying ciphers, digests and macs. For some of them, the name was retrieved from the method, but since the methods do not store those any more, we add different mechanics. For code that needs to pass on the name of a cipher or diges via parameters, we simply locally store the name that was used when fetching said cipher or digest. This will ensure that any underlying code that needs to fetch that same cipher or digest does so with the exact same name instead of any random name from the set of names associated with the algorithm. For code that needs to check what kind of algorithm was passed, we provide EVP_{type}_is_a(), that returns true if the given method has the given name as one of its names. Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9897)
* In provider implemented methods, save the name number, not the name stringRichard Levitte2019-09-192-27/+48
| | | | | | | | | | | | | | | | | | | | | | | | | Multiple names per implementation is already supported in the namemap, but hasn't been used yet. However, as soon as we have multiple names, we will get an issue with what name should be saved in the method. The solution is to not save the name itself, but rather the number it's associated with. This number is supposed to be unique for each set of names, and we assume that algorithm names are globally unique, i.e. there can be no name overlap between different algorithm types. Incidently, it was also found that the 'get' function used by ossl_construct_method() doesn't need all the parameters it was given; most of what it needs, it can now get through the data structure given by the caller of ossl_construct_method(). As a consequence, ossl_construct_method() itself doesn't need all the parameters it was given either. There are some added internal functions that are expected to disappear as soon as legacy code is removed, such as evp_first_name() and ossl_namemap_num2name(). Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9897)
* Change PARAMETER NAMES links to PARAMETERSPauli2019-09-187-14/+14
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9905)
* Use PARAMETERS instead of PARAMETER NAMES for the heading for consistency.Pauli2019-09-182-2/+2
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9905)
* Fix links to functions.Pauli2019-09-188-50/+50
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9905)
* Cleanup KDF section 1 documentation.Pauli2019-09-181-11/+14
| | | | | | | | | Remove reference to EVP_KDF_ctrl_str and replace it with EVP_KDF_CTX_set_params. Add missing links, and specify two extra KDFs. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9905)
* Clean up KDF documentation in section 7.Pauli2019-09-188-19/+19
| | | | | | | | | | | The EVP_KDF_ctrl function doesn't exist anymore and have been replaced by EVP_KDF_CTX_set_params. The EVP_KDF_new_id function doesn't exist either and EVP_KDF_new should be used instead. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9905)
* Avoid mentioning ctrl_str in the MAC documentation.Pauli2019-09-161-7/+7
| | | | | | | Change to mentioning params instead. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9908)
* Use "PARAMETERS" in the documentation headings.Pauli2019-09-161-4/+4
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9906)
* Add fips module integrity checkShane Lontis2019-09-152-3/+8
| | | | | | | Add environment variable for setting CONF .include path Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9769)
* Fix small typo in doc for X509_STORE_CTX_newJan-Frederik Rieckers2019-09-151-1/+1
| | | | | | | | CLA: trivial Reviewed-by: Matthias St. Pierre <Matthias.St.Pierre@ncp-e.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9894)
* Fix examples in the section 7 KDF man pages.Pauli2019-09-157-17/+17
| | | | | | | | All of the examples called EVP_KDF_set_params() when they should have been calling EVP_KDF_CTX_set_params(). Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9898)
* Use param types instead of native types in the param descriptionsPauli2019-09-141-4/+5
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9891)
* Use param types for parameter descriptions. Mention a size_t limit to those ↵Pauli2019-09-141-4/+6
| | | | | | | where it makes sense. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9891)
* Add wording to limit the 'size' parameter to no more than can be specified ↵Pauli2019-09-141-5/+6
| | | | | | | using a size_t variable Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9891)
* Define the MAC parameter types without using C type names to avoid confusion.Pauli2019-09-131-7/+7
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9875)
* Document the deprecation of ERR_func_error_string()Richard Levitte2019-09-121-9/+16
| | | | | | | | Also, correct the output template for ERR_error_string() and ERR_error_string_n(). Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9756)
* Modernise the ERR functionality further (new functions and deprecations)Richard Levitte2019-09-121-7/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ERR_func_error_string() essentially returns NULL, and since all function codes are now removed for all intents and purposes, this function has fallen out of use and cannot be modified to suit the data, since its only function is to interpret an error code. To compensate for the loss of error code, we instead provide new functions that extracts the function name strings from an error record: - ERR_get_error_func() - ERR_peek_error_func() - ERR_peek_last_error_func() Similarly, the once all encompasing functions ERR_peek_last_error_line_data(), ERR_peek_error_line_data() and ERR_get_error_line_data() lack the capability of getting the function name string, so we deprecate those and add these functions to replace them: - ERR_get_error_all() - ERR_peek_error_all() - ERR_peek_last_error_all() Finally, we adjust a few lines of code that used the now deprecated functions. Fixes #9756 Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9756)
* doc/man3/OSSL_PARAM.pod: add details about multiple elements with same keyRichard Levitte2019-09-121-0/+4
| | | | | | | | | | Usually, each element in an OSSL_PARAM array will have a unique key. However, there may be some rare cases when a responder will handle multiple elements with the same key. This adds a short passage explaining this case. Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9741)
* doc/man3/OSSL_PARAM.pod: remove a comment that isn't true any moreRichard Levitte2019-09-121-5/+0
| | | | | Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9741)
* doc/man3/OSSL_PARAM.pod: conform to man-page standardsRichard Levitte2019-09-121-50/+50
| | | | | Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9741)
* Add EVP_CIPHER_CTX_tag_length()Shane Lontis2019-09-112-0/+14
| | | | | | | There is no deprecated CTRL support for this new field. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9698)
* Use simple names in core_names.hMatt Caswell2019-09-091-1/+1
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9753)
* Revise EVP_PKEY param handlingMatt Caswell2019-09-093-44/+87
| | | | | | | | | | | | We add new functions for getting parameters and discovering the gettable and settable parameters. We also make EVP_PKEY_CTX_get_signature_md() a function and implement it in terms of the new functions. This enables applications to discover the set of parameters that are supported for a given algorithm implementation. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9753)
* Add docs for the provider interface for signature operationsMatt Caswell2019-09-091-0/+229
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9753)
* Add public API docs for newly added EVP_SIGNATURE related functionsMatt Caswell2019-09-096-13/+130
| | | | | | | | Documentation for EVP_SIGNATURE_*() as well as EVP_PKEY_sign_init_ex(), EVP_PKEY_verify_init_ex() and EVP_PKEY_verify_recover_init_ex(). Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9753)
* Check the DH modulus bit lengthBernd Edlinger2019-09-091-1/+9
| | | | | | | | | The check was missing in DH_check and DH_check_params. [extended tests] Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9796)
* Fix typos in the OSSL_METHOD_STORE docJakub Zelenka2019-09-091-5/+5
| | | | | | Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9825)
* Add 'engine' param to KDFsPauli2019-09-071-8/+12
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9770)
* Remove reference to legacy aliases for MAC and KDFPauli2019-09-061-4/+0
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9662)
* Update KDF documentation (section 3)Pauli2019-09-062-274/+259
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9662)
* Update KDF documentation (section 1)Pauli2019-09-062-9/+15
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9662)
* Update KDF documentation (section 7)Pauli2019-09-0613-974/+811
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9662)
* Documentation updates in light of the KDF conversionPauli2019-09-061-57/+35
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9662)
* Change provider params from int to size_tShane Lontis2019-09-054-16/+16
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9699)
* OSSL_PARAM_construct_utf8_string computes the string length.Pauli2019-09-042-12/+9
| | | | | | | | If the passed string length is zero, the function computes the string length from the passed string. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9760)
* New function EVP_CIPHER_free()Richard Levitte2019-09-042-9/+23
| | | | | | | | | | | | | | | This function re-implements EVP_CIPHER_meth_free(), but has a name that isn't encumbered by legacy EVP_CIPHER construction functionality. We also refactor most of EVP_CIPHER_meth_new() into an internal evp_cipher_new() that's used when creating fetched methods. EVP_CIPHER_meth_new() and EVP_CIPHER_meth_free() are rewritten in terms of evp_cipher_new() and EVP_CIPHER_free(). This means that at any time, we can deprecate all the EVP_CIPHER_meth_ functions with no harmful consequence. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9758)
* New function EVP_MD_free()Richard Levitte2019-09-042-19/+34
| | | | | | | | | | | | | | | This function re-implements EVP_MD_meth_free(), but has a name that isn't encumbered by legacy EVP_MD construction functionality. We also refactor most of EVP_MD_meth_new() into an internal evp_md_new() that's used when creating fetched methods. EVP_MD_meth_new() and EVP_MD_meth_free() are rewritten in terms of evp_md_new() and EVP_MD_free(). This means that at any time, we can deprecate all the EVP_MD_meth_ functions with no harmful consequence. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9758)
* Refactor how KEYMGMT methods get associated with other methodsRichard Levitte2019-09-031-2/+7
| | | | | | | | | | | | | | | | | KEYMGMT methods were attached to other methods after those were fully created and registered, thereby creating a potential data race, if two threads tried to create the exact same method at the same time. Instead of this, we change the method creating function to take an extra data parameter, passed all the way from the public fetching function. In the case of EVP_KEYEXCH, we pass all the necessary data that evp_keyexch_from_dispatch() needs to be able to fetch the appropriate KEYMGMT method on the fly. Fixes #9592 Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9678)
* Add CPU info to the speed command summaryBernd Edlinger2019-09-023-1/+43
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9669)
* Rework the documentation of our individual MAC implementationsRichard Levitte2019-09-0215-554/+479
| | | | | | | | | | | | | | | | We now describe parameters instead of controls. Also, since macros like EVP_MAC_CMAC do not exist any more, we rename the pod files from EVP_MAC_{algo}.pod to EVP_MAC-{algo}.pod. This allows getting the documentation like this: man EVP_MAC CMAC [skip ci] Fixes #9709 Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9713)
* Fix function name typo in MAC documentation.Pauli2019-09-021-1/+1
| | | | | | | A spurious CTX crept into one of the function names. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9750)
* openssl provider: New sub-command, for provider discoveryRichard Levitte2019-08-281-0/+57
| | | | | | | | This command is somewhat similar to 'openssl engine', but displays what it can about the given providers. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9697)
* OPENSSL_info(): add the item OPENSSL_INFO_SEED_SOURCE and use itRichard Levitte2019-08-271-0/+5
| | | | | | | | | | 'openssl version -r' prints the seed source based on compiler macros. This does not necessarily reflect the library's idea of what seed sources to use, so we reimplement the list of seed sources as a OPENSSL_info() item and display that instead. Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9689)
* Do not have duplicate section headsRich Salz2019-08-2619-95/+67
| | | | | | | | | | | | | | | | | | | | | | Change find-doc-nits to complain if a section header is repeated, within a parent header (i.e., duplicate =head2 within a =head1). In almost all cases, we just remove the duplicate header, as it was a "continuation" of the =head1 that was already in affect. In some cases, just remove "=head1 NOTES", possibly moving text around, because the "NOTES" were really important parts of the DESCRIPTION section. No =headX sections should end with a period. All =head1 labels should be in all uppercase. No sub-head (=head2, etc) should be in all uppercase. Update find-doc-nits to reject the above. Fixup an internal POD link Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/9631)
* Cleanup ciphers and Add 3des ciphers.Shane Lontis2019-08-261-0/+6
| | | | | | | | Moved the relevant ciphers into default and restructed headers to allow the move. This removed most of the cases of #ifdef NO_XXX (which are now specified in build.info) Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/9482)
generated by cgit v1.2.3 (git 2.39.1) at 2024-12-12 23:53:17 +0100