summaryrefslogtreecommitdiff
path: root/src/sys-crypto-md.h
Commit message (Collapse)AuthorAgeFilesLines
* [mod_mbedtls] changes to build with mbedtls 3.0.0Glenn Strauss2022-01-191-1/+50
| | | | | | x-ref: "issues migrating lighttpd mod_mbedtls to mbedtls 3.0.0" https://github.com/ARMmbed/mbedtls/issues/5331
* [mod_openssl] boringssl compatGlenn Strauss2021-10-031-0/+3
|
* [core] add wolfssl-specific includeGlenn Strauss2021-09-081-0/+2
| | | | | x-ref: https://github.com/lighttpd/lighttpd1.4/pull/107
* [core] move backtrace and assert macros to ck.[ch]Glenn Strauss2021-08-271-5/+5
|
* [core] add iovec wrappers to sys-crypto-md.hGlenn Strauss2021-08-271-2/+99
|
* [core] avoid multiple definition of SHA512_CTXGlenn Strauss2021-01-161-2/+4
| | | | avoid multiple definition of SHA512_CTX when using Nettle
* [core] check ifdef WOLFSSL_SHA512 for SHA512 availGlenn Strauss2021-01-161-0/+2
|
* [core] SHA512_Init, SHA512_Update, SHA512_FinalGlenn Strauss2020-12-061-0/+136
|
* [core] define SHA*_DIGEST_LENGTH macros if missingGlenn Strauss2020-11-101-3/+14
|
* [core] set NSS_VER_INCLUDE after crypto lib selectGlenn Strauss2020-10-291-0/+6
|
* [multiple] include wolfssl/options.h after selectGlenn Strauss2020-10-291-1/+7
| | | | | | | | | | | | | include wolfssl/options.h crypto lib config after selecting crypto lib to use wolfSSL does not prefix its defines with a wolfSSL-specific namespace (so we would like to avoid unnecessarily polluting preproc namespace) This commit further isolates wolfSSL after split from mod_openssl. Cleans up some preprocessor logic that was put in place when using the wolfSSL compatibility layer for openssl, before creating a dedicated mod_wolfssl.
* [multiple] include mbedtls/config.h after selectGlenn Strauss2020-10-291-0/+2
| | | | | include mbedtls/config.h crypto lib config after selecting crypto lib to use
* [multiple] test for nss includesGlenn Strauss2020-10-221-0/+8
| | | | | some distro packages deploy NSS includes under nss/, others nss3/ (and similar for nspr/ vs nspr4/)
* [core] init NSS lib for basic crypto algorithmsGlenn Strauss2020-10-211-0/+16
| | | | | | | | basic algorithms fail if NSS library has not been init'd (WTH) lighttpd defers initialization of rand and crypto until first use to attempt to avoid long, blocking init at startup while waiting for sufficient system entropy to become available
* [core] use inline funcs in sys-crypto-md.hGlenn Strauss2020-10-211-28/+84
| | | | | use inline funcs in sys-crypto-md.h for consistency and to avoid compiler warnings when result is ignored
* [multiple] use NSS crypto if no other crypto availGlenn Strauss2020-10-191-0/+48
| | | | | | | use NSS crypto if no other crypto avail, but NSS crypto is available "NSS crypto support" is not included in tests/LightyTest.pm:has_crypto() due to NSS libraries (freebl3) lacking public export for HMAC funcs
* [core] sys-crypto-md.h consistent interfacesGlenn Strauss2020-10-191-63/+114
| | | | | | | | | | | | | return values for sys-crypto-md.h interfaces While some library implementations do not fail and have no return value, others might fail on memory allocation or on failure to communicate with an external or dedicated engine or device, e.g. which might store a private key. future: lighttpd callers of sys-crypto-md.h do not currently expect or check for errors from these digest functions, but should consider doing so.
* [multiple] openssl 3.0.0 digest interface migrateGlenn Strauss2020-10-191-9/+141
| | | | | | | | | | | provide implementations for conventional digest interfaces but use the newer openssl digest interfaces under the hood <rant> It is baffling that the openssl library -- with *thousands* of public interfaces -- does not provide these, and suggests that openssl developers do not frequently write apps which utilize these interfaces. </rant>
* [multiple] ignore openssl 3.0.0 deprecation warnsGlenn Strauss2020-10-191-0/+7
| | | | | | | | | | | | | quiet openssl 3.0.0 deprecation warnings for low-level digest algorithm interfaces future: migrate to openssl interfaces: EVP_DigestInit_ex(3), EVP_DigestUpdate(3), and EVP_DigestFinal_ex(3) x-ref: https://github.com/openssl/openssl/pull/10791 https://www.openssl.org/docs/manmaster/man3/EVP_DigestInit_ex.html https://wiki.openssl.org/index.php/EVP_Message_Digests
* [mod_wolfssl] standalone moduleGlenn Strauss2020-10-111-3/+5
| | | | standalone module forked from mod_openssl
* [core] rename md5.[ch] to algo_md5.[ch]Glenn Strauss2020-10-111-2/+2
|
* [core] Nettle assert()s if buffer len > digest szGlenn Strauss2020-07-131-5/+5
|
* [mod_openssl] prefer some WolfSSL native APIsGlenn Strauss2020-07-081-0/+109
| | | | | | | | Prefer some WolfSSL native APIs when building with WolfSSL. However, some functionality in WolfSSL is available only through the WolfSSL compatibility layer for OpenSSL, so the effort to create a native mod_wolfssl halted here.
* [core] sys-crypto-md.h w/ inline message digest fnGlenn Strauss2020-07-081-0/+239
sys-crypto-md.h w/ inline message digest functions; shared code
View Lorry Controller Status