summaryrefslogtreecommitdiff
path: root/crypto
AgeCommit message (Collapse)Author
2003-12-11Fix the checkflist for builds without Kerberos 4 (MKKERBEROS4=no)dyoung
and without Kerberos 4 & 5 (MKKERBEROS=no). Previously checkflist complained of missing files. * move kerberos- and kerberos 4-only files into new flists, distrib/sets/lists/*/krb.* * make the flist generators grok MKKERBEROS{,4} variables * fix Makefiles which treat MKKERBEROS=no as MKKERBEROS5=no. 9 out of 10 experts agree that it is ludicrous to build w/ KERBEROS4 and w/o KERBEROS5. * fix header files, also, which treat MKKERBEROS=no as MKKERBEROS5=no. * omit some Kerberos-only subdirectories from the build as MKKERBEROS{,4} indicate (I acknowledge the sentiment that flists are the wrong way to go, and that the makefiles should produce the metalog directly. That sounds to me like the right way to go, but I am not prepared to do revamp all the makefiles. While my approach is expedient, it fits painlessly within the current build architecture until we are delivered from flist purgatory, and it does not postpone our delivery. Fair enough?)
2003-11-23avoid memory leak. hint from Andrew Lunnitojun
2003-11-23do not malloc(0). Andrew Lunnitojun
2003-11-20Patch OpenSSL to use opencrypto (aka /dev/crypto), if configured andjonathan
(per kernel policy) for crypto transforms for which hardware acceleration is available. Affects: crypto/dist/openssl/crypto/engine/eng_all.c crypto/dist/openssl/crypto/engine/hw_cryptodev.c crypto/dist/openssl/crypto/evp/c_all.c as posted to tech-crypto for review/comment on 2003-08-21.
2003-11-17Various typo fixes from Jonathon Gray via jmc@openbsd.wiz
2003-11-13typo. minouraitojun
2003-11-09pfkey_dump_sadb: when it get an error using sysctl,yamt
mimic an error msg from keysock so that caller can process it correctly. PR/23122.
2003-11-04sync w/ openssl 0.9.7c. shlib minor bump for libcrypto.itojun
(ERR_release_err_state_table() added)
2003-11-04more unifdefitojun
2003-11-04openssl 0.9.7c. security changes are already in placeitojun
2003-11-04bring in kame rev 1.32. PR 23122itojun
2003-10-25Fix NULL vs 0 mixup.thorpej
2003-10-23do not build "null ESP and no AUTH" proposal. (racoon 174) by Tom Lendackyitojun
2003-10-21Don't assign NULL as an integer.fvdl
2003-10-21Don't return NULL as an integer.fvdl
2003-10-09Make sure HAVE_OPENSSL is undefined, to avoid depending on boththorpej
libcrypto and libdes. Patch by lha@, posted to tech-userlevel.
2003-10-03realloc error check failure; Greg Troxel, sync w/kameitojun
2003-10-02support policy w/o selector.itojun
2003-10-02correct unsafe realloc().itojun
2003-10-02more fixes from 0.9.7c, from openbsditojun
2003-10-02from openbsd:itojun
Correct some off-by-ones. They currently don't matter, but this is for future safety and consistency. OK krw@, markus@
2003-09-30Apply security fix: http://www.openssl.org/news/secadv_20030930.txtchristos
Changelog from: http://cvs.openssl.org/chngview?cn=11471
2003-09-25Fix what is obviously a bug: valloc() -> vmalloc(). Now racoon(8) doesn't coremycroft
dump all the time.
2003-09-22off-by-one. from openbsditojun
2003-09-18typo. markus@openbsditojun
2003-09-18protect against double free; #660; zardoz at users.sf.netitojun
from openbsd
2003-09-18missing buffer_free(&encrypted); #662; zardoz at users.sf.netitojun
from openbsd
2003-09-18make sure we init nalloc.christos
2003-09-18fix problem in previous patchchristos
2003-09-17More buffer size adjusted before allocation succeeded fixes. Bump to 20030917.christos
From FreeBSD (with an additional one from me).
2003-09-16dammit, don't apply patches blindly.christos
2003-09-16bring more fixes from 3.7.1christos
2003-09-16crank __NETBSDSSH_VERSION for buffer.c fixlukem
2003-09-16Do not record expanded size before attempting to reallocate the associatedchristos
memory. From OpenBSD, via FreeBSD.
2003-09-12use sysctl to dump SAs if possible (not really tested)itojun
2003-09-08SKEY and BSDAUTH #ifdef mixupitojun
2003-09-04bzero() 2nd arg mistake. found by openbsd guys. from kameitojun
2003-08-27reject rc5/idea/mdc2 commands if OPENSSL_NO_xx is specifieditojun
2003-08-26Make getlastlogx have the pathname to the lastlogx database as firstwiz
argument, to be consistent with updlastlogx. Approved by christos, reviewed by kleink. [The lastlogxname function should not be used any longer.]
2003-08-26update racoon to 2003/8/26 version. mostly minor bugfixes.itojun
2003-08-26KAME racoon, as of 2003/08/26itojun
2003-08-26KAME libipsec/libpfkey, 2003/08/26itojun
2003-08-13style; total size of buf is (num + 3)itojun
2003-08-12Fix bad use of "sizeof(pointer)" where the length of a buffer was thesimonb
intention. Fixes problems with least ssh's known_hosts file and factor. Patch from Berndt Josef Wulf's PR lib/22347.
2003-08-07Move UCB-licensed code from 4-clause to 3-clause licence.agc
Patches provided by Joel Baker in PR 22252, verified by myself.
2003-07-31consistently use new DES API, re-enable des regression testitojun
2003-07-30re-enable __RCSID, sys/cdefs_elf.h rev 1.15 fixed the problemitojun
2003-07-29disable __RCSID for now, somehow it puts some of integer variablesitojun
into .text region
2003-07-29remove unused macro. PR 21150itojun
2003-07-29xx_keylen has to return bits, not bytes. KAME-PR-488itojun