aboutsummaryrefslogtreecommitdiffstats
path: root/src/openssl.c
Commit message (Collapse)AuthorAgeFilesLines
* add and use pkey:getDefaultDigestName because the old digest type names used ↵LibravatarLibravatar William Ahern 2016-10-291-9/+28
| | | | in examples/vrfy.sig are not accepted by OpenSSL 1.1
* final bits handle EVP_CIPHER_CTX, EVP_MD_CTX, and HMAC_CTX as opaque objectsLibravatarLibravatar William Ahern 2016-10-291-32/+127
|
* use SSL_client_versionLibravatarLibravatar William Ahern 2016-10-291-2/+22
| | | | OPENSSL_NO_SSL2 isn't defined even though SSLv2 methods are gone
* X509_STORE_CTX is opaque, fixup store:verifyLibravatarLibravatar William Ahern 2016-10-291-45/+80
|
* must use i2d_re_X509_REQ_tbs to dirty the X509_REQ cached encodingLibravatarLibravatar William Ahern 2016-10-291-0/+8
|
* use EVP_PKEY_get_default_digest_nid to determine the default signature, and ↵LibravatarLibravatar William Ahern 2016-10-291-11/+41
| | | | emulate for OpenSSL 0.9.8 using our old code from xc_signature
* more OpenSSL 1.1 workLibravatarLibravatar William Ahern 2016-10-291-25/+127
|
* lots of OpenSSL 1.1 compatability workLibravatarLibravatar William Ahern 2016-10-281-58/+339
|
* libressl has supported ALPN since 2.1.3LibravatarLibravatar William Ahern 2016-10-191-1/+1
|
* unbreak BSDs by using arc4random_bufLibravatarLibravatar William Ahern 2016-10-191-2/+2
|
* there are no kernel headers installed by default in Alpine Linux ↵LibravatarLibravatar William Ahern 2016-10-191-31/+25
| | | | (Linux/musl) so use alternate feature test; support running binaries built with getrandom on older kernels with only sysctl(RANDOM_UUID); change preprocessor test for feature macros so they can be easily overridden with build flags; and remove feature macro definitions in favor of those in config.h (config.h.guess)
* Use syscall() to call getrandom()LibravatarLibravatar Ondřej Surý 2016-08-301-1/+2
|
* Add __DragonFly__ and generic BSD detection for ARC4RANDOMLibravatarLibravatar Ondřej Surý 2016-08-301-1/+1
|
* Use RAND_seed() instead of RAND_add() where appropriateLibravatarLibravatar Ondřej Surý 2016-08-301-4/+4
|
* Reinstate sysctl call for older Linux kernelsLibravatarLibravatar Ondřej Surý 2016-08-301-8/+29
|
* Use arc4random()/getrandom() to get random bytes instead of sysctl() interfaceLibravatarLibravatar Ondřej Surý 2016-08-301-31/+32
|
* in bignum string conversion, don't pass char or signed char to isdigit or ↵LibravatarLibravatar William Ahern 2016-08-121-2/+2
| | | | isxdigit
* temporarily address issue #54 by copying solution from lunix and autoguess ↵LibravatarLibravatar William Ahern 2016-06-251-2/+2
| | | | project
* refactor style to more closely match the style of the existing code, such as ↵LibravatarLibravatar William Ahern 2016-06-241-22/+35
| | | | it is
* initialize attr to NULL in xr_setExtensionByNid to silence clang, which ↵LibravatarLibravatar William Ahern 2016-06-231-0/+1
| | | | can't see that has_attrs indirectly assures at least one iteration of the for loop (in the single-threaded case, at least)
* Support for getting and setting SAN on a CSRLibravatarLibravatar Ash Berlin 2016-04-111-0/+81
| | | | | Extensions in a CSR are a bit more complex than in a CRL or a certificate itself so we don't quite use the same interface.
* Add terminator to openssl.x509.extension.LibravatarLibravatar Ash Berlin 2016-04-091-0/+1
| | | | | | | | | | | | | | | Without this we ended up over-running the buffer and setting functions as numbers again. Before: $ lua -e 'print(require "openssl.x509.extension".new)' 4519558960 After: $ lua -e 'print(require "openssl.x509.extension".new)' function: 0x10f9755e0
* Merge branch 'bignum-new' of git://github.com/daurnimator/luaossl into ↵LibravatarLibravatar William Ahern 2016-02-161-7/+42
|\ | | | | | | daurnimator-bignum-new
| * bignum: Don't allow empty numbers/strings to passLibravatarLibravatar daurnimator 2016-01-041-5/+5
| | | | | | | | | | Previously, "-" would pass the len>0 check; and end up as "0" The `*str` check was redundant, the switch/case already ensures the object at the given stack index is a string
| * bignum: validate hex and decimal strings before feeding to opensslLibravatarLibravatar daurnimator 2016-01-041-2/+11
| | | | | | | | OpenSSL doesn't throw an error on invalid numbers
| * bignum: handle negative hex numbersLibravatarLibravatar daurnimator 2016-01-041-2/+11
| |
| * bignum: Add fromBinary constructorLibravatarLibravatar daurnimator 2016-01-041-0/+12
| | | | | | | | Closes #44
| * bignum.new: Allow initialisation from hex stringsLibravatarLibravatar daurnimator 2016-01-041-5/+10
| |
* | Lua 5.1 doesn't permit NULL msg argument to luaL_checkstackLibravatarLibravatar William Ahern 2016-01-141-2/+2
| |
* | try to avoid negative stack indices with luaL_checkstring as error messages ↵LibravatarLibravatar William Ahern 2016-01-081-1/+1
| | | | | | | | are confusing (per daurnimator)
* | unbreak openssl.rand by fixing auxL_newlib bugLibravatarLibravatar William Ahern 2016-01-081-1/+1
| |
* | fix EVP_PKEY method interposingLibravatarLibravatar William Ahern 2016-01-081-16/+64
| |
* | permit direct indexing of EVP_KEY as alternative to getParameters/setParametersLibravatarLibravatar William Ahern 2016-01-071-218/+356
| |
* | fix comment typoLibravatarLibravatar William Ahern 2016-01-071-1/+1
| |
* | preliminary support for pkey:setParametersLibravatarLibravatar William Ahern 2016-01-071-31/+470
|/
* Merge branch 'fix-wrong-type' of git://github.com/daurnimator/luaossl into ↵LibravatarLibravatar William Ahern 2016-01-041-3/+3
|\ | | | | | | daurnimator-fix-wrong-type
| * Fix incorrect type check in ssl:{set,get,clear}OptionsLibravatarLibravatar daurnimator 2016-01-031-3/+3
| | | | | | | | Was checking for SSL_CTX instead of SSL
* | bignum: Add generatePrime as new constructorLibravatarLibravatar daurnimator 2016-01-031-3/+26
| |
* | bignum: Add :isPrimeLibravatarLibravatar daurnimator 2016-01-031-15/+30
| |
* | bignum: bugfix: unm shouldn't modify it's operandsLibravatarLibravatar daurnimator 2016-01-031-1/+2
| |
* | bignum: Bind sqr, nnmod and gcdLibravatarLibravatar daurnimator 2016-01-031-0/+39
| |
* | bignum: Use openssl function namesLibravatarLibravatar daurnimator 2016-01-031-12/+12
|/
* for now, don't be so harsh and break any existing codeLibravatarLibravatar William Ahern 2015-12-211-0/+1
|
* bignum: Move div operator to idiv operator (breaks API)LibravatarLibravatar daurnimator 2015-12-211-8/+8
|
* bignum: Add tohex functionLibravatarLibravatar daurnimator 2015-12-211-0/+30
|
* bignum: Rename tostring function to todec. Expose as ":todec" methodLibravatarLibravatar daurnimator 2015-12-211-4/+5
|
* bignum: Add shl (lshift), shr (rshift) functionsLibravatarLibravatar daurnimator 2015-12-211-0/+34
|
* bignum: exposing existing math operators as methodsLibravatarLibravatar daurnimator 2015-12-211-0/+6
|
* Merge branch 'remove-warnings' of git://github.com/daurnimator/luaossl into ↵LibravatarLibravatar William Ahern 2015-12-211-15/+15
|\ | | | | | | daurnimator-remove-warnings
| * Give auxL_getref NOTUSED attributeLibravatarLibravatar daurnimator 2015-12-181-1/+1
| |