crypto


Log

Author Commit Date CI Message
Brent Cook 58fcd3c3 2014-11-20T00:26:55 Add conditional compilation for windows and posix functions. This adds a Windows-specific versions of several symbols from libcrypto and openssl(1).
Brent Cook 2103690c 2014-11-19T22:02:17 improve readability of generated Makefile.am files
宋冬生 648e9136 2014-11-05T20:52:00 Use _WIN32 instead of __WIN32. ok bcook@
Brent Cook 0aeb93b9 2014-10-27T19:22:03 override native arc4random_buf on FreeBSD The FreeBSD-native arc4random_buf implementation falls back to weak sources of entropy if the sysctl fails. Remove these dangerous fallbacks by overriding locally. Unfortunately, pthread_atfork() is broken on FreeBSD (at least 9 and 10) if a program does not link to -lthr. Callbacks registered with pthread_atfork() simply fail silently. So, it is not always possible to detect a PID wraparound. I wish we could do better. This improves arc4random_buf's safety compared to the native FreeBSD implementation. Tested on FreeBSD 9 and 10. ok beck@ deraadt@
Brent Cook a2373f70 2014-10-30T10:52:29 wrap arc4random header ok @doug
Brent Cook a4cc9539 2014-10-29T15:44:36 Improve and simplify function and header detection logic. Simplify autoconf checks by using AC_CHECK_FUNCS/HEADERS. Clarify some ambiguous dependencies around strnlen/strndup. Unconditionally enable pidwraptest for all arc4random implementations. Remove HAVE_VASPRINTF conditional, since asprintf requires vasprintf. ok @doug
Brent Cook 00b51d5c 2014-08-02T21:43:56 conditionally build strnlen if needed. it is only used by strndup prodded by Sortie@
Brent Cook b9ff0728 2014-07-30T06:53:02 harmonize asprintf with OpenSSH * use the original name for the file from OpenSSH (remove duplicate version) * add va_copy/__va_copy checks to configure * incorporate proposed fixes to openssh version: + include more system headers directly for various definitions + limit the scope of va_copy/va_end to their affected vsnprintf calls + simplify error handling, removing a dead assignment
Brent Cook a07e3370 2014-07-29T18:21:58 include comment on windows services
Brent Cook 983103b0 2014-07-28T21:06:37 stub win32 issetugid implementation ok deraadt@ beck@
Brent Cook d328203f 2014-07-28T20:57:43 produce a error if platform has no arc4random hook ok deraadt@ beck@
Brent Cook 35e2d8d0 2014-07-28T19:26:15 add asprintf / vasprintf from OpenSSH portable ok deraadt@ beck@
Brent Cook 0a74a4d4 2014-07-27T06:11:56 add strndup/strnlen compat functions from OpenBSD
Brent Cook 6383a072 2014-07-27T06:09:51 remove thread_private.h, no longer needed
Brent Cook f425f564 2014-07-21T07:50:32 test for and use system explicit_bzero if it exists ok beck@ guenther@
Brent Cook edebb7a6 2014-07-19T10:49:08 remove thread_private.h defines, moved to arc4random_*.h
Brent Cook 1b1bce16 2014-07-17T23:58:46 update to newly-refactored arc4random compatibility shims the thread-private bits can move next ok beck@
Brent Cook d697fdb4 2014-07-17T21:20:34 initial underpinnings for mingw/cross compilation support Use canonical host rather than target so that this works: CC=i686-w64-mingw32-gcc ./configure --host=i686-w64-mingw32 Conditionally compile Linux issetugid compatibility function ok beck@
Brent Cook 32d9eeee 2014-07-15T14:50:05 register the atfork handler from arc4random From kettenis@ People have suggested using pthread_atfork(3) before, but discarded the idea because it involves linking with -lpthread, which has other undesirable consequences. However: * Most systems actually have pthread_atfork(3) in libc. I verified this on OS X and Solaris. I believe this is the case on Linux systems that use musl as well. * On Linux systems that use glibc, this isn't the case. However, those systems have __register_atfork(3), which is fully documented in the "Linux Standard Base Core Specification". ok kettenis@ deraadt@ beck@
Bob Beck c1f7374d 2014-07-12T09:15:11 We're probably gonna need this for solaris 10
Brent Cook 65944782 2014-07-12T03:34:08 add platform libraries to libcompat's LIBADD list ok beck@
Brent Cook 8b125f31 2014-07-11T04:47:03 build strtonum directly into apps/openssl it is not needed as a library export ok beck@
Charlie Root abe7bee3 2014-07-10T08:36:47 Make things build again - add some missing headers ok bcook@
Brent Cook 2b6dbc39 2014-07-10T06:21:51 initial top-level import of subdirectories