elric
95bd2d4a1e
Remove crypto/dist/heimdal and its associated build infrastructure as
...
it has been replaced by crypto/external/bsd/heimdal.
2011-08-28 16:21:57 +00:00
elric
9f9617f826
Change the location of version.h from the old Heimdal srcs to the
...
new srcs.
2011-08-28 11:20:16 +00:00
elric
1ea30656a2
Change the location of version.h from the old Heimdal srcs to the
...
new srcs.
2011-08-28 10:28:35 +00:00
joerg
5cfa560df9
Avoid using non-literal format strings and optimizing code a bit at the
...
same time.
2011-08-25 15:37:00 +00:00
joerg
cc096ecebe
msg.c uses non-literal format strings
2011-08-25 15:30:54 +00:00
elric
0a56de1dcb
This file should not have been imported.
2011-08-25 00:25:47 +00:00
dholland
84c562e368
Previous here required stdint.h.
2011-08-22 00:24:42 +00:00
tteras
cbb586e05f
Allow inherited remote blocks without additional remote statements to
...
be specified in a simpler way. patch by Roman Hoog Antink <rha@open.ch>
2011-08-19 05:36:47 +00:00
christos
5434bb1cbb
Remove gcc-4.5 hacks. I must have fixed them in a different pass.
2011-08-17 05:32:09 +00:00
christos
5573cb4a88
remove gcc-4.5 hacks; gcc-4.5 does not like fileno() to be unchecked, and
...
produces an unhelpful out of bounds array warning, so check it.
2011-08-17 05:30:01 +00:00
christos
0a61f86410
undo junk committed.
2011-08-16 09:43:03 +00:00
christos
6c83058fe2
kill non-literal format strings or document them.
2011-08-16 09:42:21 +00:00
christos
4e1d834d15
add extra cast for systems where sizeof(time_t) < sizeof(intmax_t)
2011-08-16 02:59:00 +00:00
elric
51efa0609e
We shouldn't cast client_time to (intmax_t) because it is a char * not
...
an integer.
2011-08-16 01:14:57 +00:00
christos
b4f44e540e
use intmax_t to print times.
2011-08-15 21:00:49 +00:00
christos
641b42eda3
simplify the code; this is what asprintf() is for, don't re-invent it.
2011-08-14 11:19:51 +00:00
tteras
cd00f2949d
Have privilege separation child process exit if the parent exits.
2011-08-12 05:21:50 +00:00
agc
6b77872003
default the format for recovering key data to be "human", rather than hard
...
coding it in the embedded calls.
2011-08-02 07:18:13 +00:00
agc
7c7d9aa184
plug some memory leaks in error paths
2011-08-02 07:16:56 +00:00
agc
5f50489b1b
when matching pubkeys, also return the first (pgp) uid for the key in the
...
resultant key listing
when using json to format keys returned from libnetpgp, also prepare for
machine-readable format ("mr") as well as human ("human"), even though
it's not yet used.
2011-08-02 05:36:45 +00:00
christos
18eab2817e
PR/45200: : J. Hannken-Illjes: Scp hangs after sending:
...
- check for vwrite() instead of read() to avoid read() being renamed by SSP
2011-08-01 15:55:00 +00:00
plunky
84e06c949d
revert previous, actually cleanup the *_asn1-template.c files
...
in Makefile.rules.inc. They are generated when -one-code-file
is passed.
2011-07-31 09:58:19 +00:00
plunky
7d2b0ea36f
Clean up intermediate asn1 template files
...
(this should reeally be fixed in <${HEIMBASE}/Makefile.rules.inc>
but I don't see where since they are not generated for all asn1 sources)
2011-07-31 06:49:03 +00:00
plunky
d38e8168f4
cleanup vars.texi
2011-07-31 06:43:56 +00:00
joerg
aa1008d816
Drop @GOTPCREL when accessing local variables. For yet unknown reasons,
...
our version of GNU as decides to silently ignore it. Never versions on
other systems and Clang actually keep it around and create bad object
files. The object files are identical after the changes modulo the GOT
entry in the symbol table.
2011-07-28 20:24:36 +00:00
matt
376bdd7ba0
Workaround around make bug by using an intermediate file/rule.
2011-07-27 03:18:52 +00:00
jym
767a408b3c
Get rid of the "rep ret" trick in places where it is not needed. FWIW,
...
the "rep ret" trick is recommended by AMD as a branch prediction
optimization in certain circumstances (quoting their manual):
- any kind of branch (either conditional or unconditional) that has the
single-byte near-return RET instruction as its target
- a conditional branch that occurs in the code directly before the
single-byte near-return RET instruction.
2011-07-25 19:11:49 +00:00
joerg
9c5ebc857f
Works with the integrated assembler again.
2011-07-25 09:36:10 +00:00
joerg
f40b364521
Fix obvious logic error
2011-07-25 08:51:10 +00:00
christos
185c8f9719
- Merge conflicts
...
- WARNS=5
2011-07-25 03:03:09 +00:00
christos
9921411534
from ftp.openbsd.org
2011-07-24 15:08:11 +00:00
jym
714fcad23a
Turn AES NI support code into something more readable.
...
i386 and amd64 both tested with their own chroot. No regression observed.
2011-07-22 22:50:55 +00:00
joerg
5158e28f3b
Disable Clang's integrated assembler for the AES-NI files for now.
...
Somewhere in this mess of .byte streams, corruption happens. Disassembly
only shows slightly different filling of alignment sequences, further
analysis is needed.
XXX This should be rewritten to be proper assembler code
2011-07-17 19:48:31 +00:00
drochner
929391d8b0
remove SSL3_FLAGS_ALLOW_UNSAFE_LEGACY_RENEGOTIATION -- openssl uses
...
another mechanism now, and these remainders break renogotiation with
(at least) tor and postgres
2011-07-07 18:11:18 +00:00
spz
c22e711e00
cpuid and aesni additions for i386
2011-07-05 16:53:58 +00:00
spz
7d2aeb8d2a
more pieces to enable using the assembler routines and aes-ni for amd64
2011-07-05 10:42:54 +00:00
spz
e910cee8f4
fix some define and cleanliness issues relevant when test compiling
...
in dist (which we normally don't do)
2011-07-05 10:29:22 +00:00
spz
0d71cd5d7d
use aes-ni for i386 also: from jym@
2011-07-05 10:25:45 +00:00
spz
3619dd3d7c
version bump second part
2011-07-05 10:06:10 +00:00
joerg
fa1a81643b
Fix memset usage.
2011-07-01 02:10:19 +00:00
agc
2008a1289b
get some things off the TODO list
...
when initialising, recognise keys in a different order.
1. read the public keyring
2. if a userid has been specified, use it
3. if not, check the configuration file (~/.gnupg/gpg.conf) for a
default user id
4, only read the secret keyring if we need to (decrypting or signing)
5. if signing, and we still don't have a userid, use the first key in
the secret keyring
6. if encrypting, and we still have no userid, use the first in the
public keyring
ssh keys remain the same as previously.
2011-06-28 03:35:28 +00:00
agc
00f7aade09
re-do the tests so that it's much easier to see at a glance which tests
...
passed and which failed.
2011-06-28 03:29:38 +00:00
agc
e5bfab614c
only attempt to load the secret key if we need to (for signing or for
...
decrypting).
2011-06-27 07:05:31 +00:00
wiz
7b95ccb149
Quote minus so it does not become a dash.
2011-06-25 12:43:03 +00:00
agc
e63e4d57f9
change mj library to take an additional argument for a string type,
...
denoting its length. this allows binary strings to be encoded using
libmj.
escape magic characters in json strings in a more efficient manner.
the previous method was not scalable.
update callers to suit
bump libmj major version number
add examples to the libmj(3) man page
2011-06-25 00:37:44 +00:00
mrg
c111245a78
apply some -Wno-error and/or -fno-strict-aliasing.
...
all of this should be looked at closer, but some of them are not
very trivial.
2011-06-22 02:49:41 +00:00
mrg
7496e29126
adjust a grep pattern to (only) match the right line with GCC 4.5.
...
from chuq.
2011-06-21 02:19:30 +00:00
mrg
493d341048
various build fixes for gcc 4.5. from chuq. XXX i'm not sure all of
...
these work properly wtf pointer aliasing, but there are no casts at
least...
the lib/libpuffs/puffs_priv.h is definately a real bug fix.
from chuq.
2011-06-20 09:11:16 +00:00
mrg
75e42fa7da
remove most of the remaining HAVE_GCC tests that are always true in
...
the modern world.
2011-06-20 07:43:56 +00:00
spz
82dcaa0984
- fix a typo in libcrypto.pl
...
- refresh manpages
2011-06-13 18:53:31 +00:00