From 5a9bbaa93d7693c21dc6e2b23d07716c12aac220 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Sat, 25 Nov 2017 13:03:13 +0000 Subject: [PATCH 01/91] openssl: Update to version 1.1 Signed-off-by: Michael Tremer --- config/rootfiles/common/i586/openssl-sse2 | 2 +- config/rootfiles/common/openssl | 6531 ++++++++++++++++- lfs/openssl | 50 +- .../openssl-1.0.0-beta5-enginesdir.patch | 52 - .../openssl-1.0.2-fix_parallel_build-1.patch | 340 - src/patches/openssl-1.0.2a-rpmbuild.patch | 115 - .../openssl-1.0.2a_auto_enable_padlock.patch | 34 - ...openssl-1.0.2a_disable_ssse3_for_amd.patch | 11 - .../openssl-1.0.2g-disable-sslv2v3.patch | 18 - src/patches/openssl-1.0.2h-weak-ciphers.patch | 12 - src/patches/openssl-1.1.0-disable-ssl3.patch | 86 + 11 files changed, 6602 insertions(+), 649 deletions(-) delete mode 100644 src/patches/openssl-1.0.0-beta5-enginesdir.patch delete mode 100644 src/patches/openssl-1.0.2-fix_parallel_build-1.patch delete mode 100644 src/patches/openssl-1.0.2a-rpmbuild.patch delete mode 100644 src/patches/openssl-1.0.2a_auto_enable_padlock.patch delete mode 100644 src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch delete mode 100644 src/patches/openssl-1.0.2g-disable-sslv2v3.patch delete mode 100644 src/patches/openssl-1.0.2h-weak-ciphers.patch create mode 100644 src/patches/openssl-1.1.0-disable-ssl3.patch diff --git a/config/rootfiles/common/i586/openssl-sse2 b/config/rootfiles/common/i586/openssl-sse2 index 7f6ddd69b..d366bd47f 100644 --- a/config/rootfiles/common/i586/openssl-sse2 +++ b/config/rootfiles/common/i586/openssl-sse2 @@ -1 +1 @@ -usr/lib/sse2/libcrypto.so.10 +usr/lib/sse2/libcrypto.so.1.1 diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl index ec92d1cbc..6f65e710b 100644 --- a/config/rootfiles/common/openssl +++ b/config/rootfiles/common/openssl @@ -2,13 +2,9 @@ #etc/ssl/certs #etc/ssl/misc #etc/ssl/misc/CA.pl -#etc/ssl/misc/CA.sh -#etc/ssl/misc/c_hash -#etc/ssl/misc/c_info -#etc/ssl/misc/c_issuer -#etc/ssl/misc/c_name #etc/ssl/misc/tsget etc/ssl/openssl.cnf +#etc/ssl/openssl.cnf.dist #etc/ssl/private usr/bin/c_rehash usr/bin/openssl @@ -17,6 +13,7 @@ usr/bin/openssl #usr/include/openssl/asn1.h #usr/include/openssl/asn1_mac.h #usr/include/openssl/asn1t.h +#usr/include/openssl/async.h #usr/include/openssl/bio.h #usr/include/openssl/blowfish.h #usr/include/openssl/bn.h @@ -29,11 +26,10 @@ usr/bin/openssl #usr/include/openssl/conf.h #usr/include/openssl/conf_api.h #usr/include/openssl/crypto.h +#usr/include/openssl/ct.h #usr/include/openssl/des.h -#usr/include/openssl/des_old.h #usr/include/openssl/dh.h #usr/include/openssl/dsa.h -#usr/include/openssl/dso.h #usr/include/openssl/dtls1.h #usr/include/openssl/e_os2.h #usr/include/openssl/ebcdic.h @@ -44,12 +40,13 @@ usr/bin/openssl #usr/include/openssl/err.h #usr/include/openssl/evp.h #usr/include/openssl/hmac.h -#usr/include/openssl/krb5_asn.h -#usr/include/openssl/kssl.h +#usr/include/openssl/idea.h +#usr/include/openssl/kdf.h #usr/include/openssl/lhash.h #usr/include/openssl/md2.h #usr/include/openssl/md4.h #usr/include/openssl/md5.h +#usr/include/openssl/mdc2.h #usr/include/openssl/modes.h #usr/include/openssl/obj_mac.h #usr/include/openssl/objects.h @@ -61,19 +58,19 @@ usr/bin/openssl #usr/include/openssl/pem2.h #usr/include/openssl/pkcs12.h #usr/include/openssl/pkcs7.h -#usr/include/openssl/pqueue.h #usr/include/openssl/rand.h #usr/include/openssl/rc2.h #usr/include/openssl/rc4.h +#usr/include/openssl/rc5.h #usr/include/openssl/ripemd.h #usr/include/openssl/rsa.h #usr/include/openssl/safestack.h #usr/include/openssl/seed.h #usr/include/openssl/sha.h +#usr/include/openssl/srp.h #usr/include/openssl/srtp.h #usr/include/openssl/ssl.h #usr/include/openssl/ssl2.h -#usr/include/openssl/ssl23.h #usr/include/openssl/ssl3.h #usr/include/openssl/stack.h #usr/include/openssl/symhacks.h @@ -81,31 +78,6509 @@ usr/bin/openssl #usr/include/openssl/ts.h #usr/include/openssl/txt_db.h #usr/include/openssl/ui.h -#usr/include/openssl/ui_compat.h #usr/include/openssl/whrlpool.h #usr/include/openssl/x509.h #usr/include/openssl/x509_vfy.h #usr/include/openssl/x509v3.h #usr/lib/libcrypto.a usr/lib/libcrypto.so -usr/lib/libcrypto.so.10 +usr/lib/libcrypto.so.1.1 #usr/lib/libssl.a usr/lib/libssl.so -usr/lib/libssl.so.10 -#usr/lib/openssl -usr/lib/openssl/engines -#usr/lib/openssl/engines/lib4758cca.so -#usr/lib/openssl/engines/libaep.so -#usr/lib/openssl/engines/libatalla.so -#usr/lib/openssl/engines/libcapi.so -#usr/lib/openssl/engines/libchil.so -#usr/lib/openssl/engines/libcswift.so -#usr/lib/openssl/engines/libgmp.so -#usr/lib/openssl/engines/libgost.so -#usr/lib/openssl/engines/libnuron.so -#usr/lib/openssl/engines/libpadlock.so -#usr/lib/openssl/engines/libsureware.so -#usr/lib/openssl/engines/libubsec.so +usr/lib/libssl.so.1.1 #usr/lib/pkgconfig/libcrypto.pc #usr/lib/pkgconfig/libssl.pc #usr/lib/pkgconfig/openssl.pc +#usr/share/doc/openssl +#usr/share/doc/openssl/html +#usr/share/doc/openssl/html/man1 +#usr/share/doc/openssl/html/man1/CA.pl.html +#usr/share/doc/openssl/html/man1/asn1parse.html +#usr/share/doc/openssl/html/man1/blake2b.html +#usr/share/doc/openssl/html/man1/blake2s.html +#usr/share/doc/openssl/html/man1/c_rehash.html +#usr/share/doc/openssl/html/man1/ca.html +#usr/share/doc/openssl/html/man1/ciphers.html +#usr/share/doc/openssl/html/man1/cms.html +#usr/share/doc/openssl/html/man1/crl.html +#usr/share/doc/openssl/html/man1/crl2pkcs7.html +#usr/share/doc/openssl/html/man1/dgst.html +#usr/share/doc/openssl/html/man1/dhparam.html +#usr/share/doc/openssl/html/man1/dsa.html +#usr/share/doc/openssl/html/man1/dsaparam.html +#usr/share/doc/openssl/html/man1/ec.html +#usr/share/doc/openssl/html/man1/ecparam.html +#usr/share/doc/openssl/html/man1/enc.html +#usr/share/doc/openssl/html/man1/engine.html +#usr/share/doc/openssl/html/man1/errstr.html +#usr/share/doc/openssl/html/man1/gendsa.html +#usr/share/doc/openssl/html/man1/genpkey.html +#usr/share/doc/openssl/html/man1/genrsa.html +#usr/share/doc/openssl/html/man1/list.html +#usr/share/doc/openssl/html/man1/md4.html +#usr/share/doc/openssl/html/man1/md5.html +#usr/share/doc/openssl/html/man1/mdc2.html +#usr/share/doc/openssl/html/man1/nseq.html +#usr/share/doc/openssl/html/man1/ocsp.html +#usr/share/doc/openssl/html/man1/openssl-asn1parse.html +#usr/share/doc/openssl/html/man1/openssl-c_rehash.html +#usr/share/doc/openssl/html/man1/openssl-ca.html +#usr/share/doc/openssl/html/man1/openssl-ciphers.html +#usr/share/doc/openssl/html/man1/openssl-cms.html +#usr/share/doc/openssl/html/man1/openssl-crl.html +#usr/share/doc/openssl/html/man1/openssl-crl2pkcs7.html +#usr/share/doc/openssl/html/man1/openssl-dgst.html +#usr/share/doc/openssl/html/man1/openssl-dhparam.html +#usr/share/doc/openssl/html/man1/openssl-dsa.html +#usr/share/doc/openssl/html/man1/openssl-dsaparam.html +#usr/share/doc/openssl/html/man1/openssl-ec.html +#usr/share/doc/openssl/html/man1/openssl-ecparam.html +#usr/share/doc/openssl/html/man1/openssl-enc.html +#usr/share/doc/openssl/html/man1/openssl-engine.html +#usr/share/doc/openssl/html/man1/openssl-errstr.html +#usr/share/doc/openssl/html/man1/openssl-gendsa.html +#usr/share/doc/openssl/html/man1/openssl-genpkey.html +#usr/share/doc/openssl/html/man1/openssl-genrsa.html +#usr/share/doc/openssl/html/man1/openssl-list.html +#usr/share/doc/openssl/html/man1/openssl-nseq.html +#usr/share/doc/openssl/html/man1/openssl-ocsp.html +#usr/share/doc/openssl/html/man1/openssl-passwd.html +#usr/share/doc/openssl/html/man1/openssl-pkcs12.html +#usr/share/doc/openssl/html/man1/openssl-pkcs7.html +#usr/share/doc/openssl/html/man1/openssl-pkcs8.html +#usr/share/doc/openssl/html/man1/openssl-pkey.html +#usr/share/doc/openssl/html/man1/openssl-pkeyparam.html +#usr/share/doc/openssl/html/man1/openssl-pkeyutl.html +#usr/share/doc/openssl/html/man1/openssl-rand.html +#usr/share/doc/openssl/html/man1/openssl-rehash.html +#usr/share/doc/openssl/html/man1/openssl-req.html +#usr/share/doc/openssl/html/man1/openssl-rsa.html +#usr/share/doc/openssl/html/man1/openssl-rsautl.html +#usr/share/doc/openssl/html/man1/openssl-s_client.html +#usr/share/doc/openssl/html/man1/openssl-s_server.html +#usr/share/doc/openssl/html/man1/openssl-s_time.html +#usr/share/doc/openssl/html/man1/openssl-sess_id.html +#usr/share/doc/openssl/html/man1/openssl-smime.html +#usr/share/doc/openssl/html/man1/openssl-speed.html +#usr/share/doc/openssl/html/man1/openssl-spkac.html +#usr/share/doc/openssl/html/man1/openssl-ts.html +#usr/share/doc/openssl/html/man1/openssl-tsget.html +#usr/share/doc/openssl/html/man1/openssl-verify.html +#usr/share/doc/openssl/html/man1/openssl-version.html +#usr/share/doc/openssl/html/man1/openssl-x509.html +#usr/share/doc/openssl/html/man1/openssl.html +#usr/share/doc/openssl/html/man1/passwd.html +#usr/share/doc/openssl/html/man1/pkcs12.html +#usr/share/doc/openssl/html/man1/pkcs7.html +#usr/share/doc/openssl/html/man1/pkcs8.html +#usr/share/doc/openssl/html/man1/pkey.html +#usr/share/doc/openssl/html/man1/pkeyparam.html +#usr/share/doc/openssl/html/man1/pkeyutl.html +#usr/share/doc/openssl/html/man1/rand.html +#usr/share/doc/openssl/html/man1/rehash.html +#usr/share/doc/openssl/html/man1/req.html +#usr/share/doc/openssl/html/man1/ripemd160.html +#usr/share/doc/openssl/html/man1/rsa.html +#usr/share/doc/openssl/html/man1/rsautl.html +#usr/share/doc/openssl/html/man1/s_client.html +#usr/share/doc/openssl/html/man1/s_server.html +#usr/share/doc/openssl/html/man1/s_time.html +#usr/share/doc/openssl/html/man1/sess_id.html +#usr/share/doc/openssl/html/man1/sha.html +#usr/share/doc/openssl/html/man1/sha1.html +#usr/share/doc/openssl/html/man1/sha224.html +#usr/share/doc/openssl/html/man1/sha256.html +#usr/share/doc/openssl/html/man1/sha384.html +#usr/share/doc/openssl/html/man1/sha512.html +#usr/share/doc/openssl/html/man1/smime.html +#usr/share/doc/openssl/html/man1/speed.html +#usr/share/doc/openssl/html/man1/spkac.html +#usr/share/doc/openssl/html/man1/ts.html +#usr/share/doc/openssl/html/man1/tsget.html +#usr/share/doc/openssl/html/man1/verify.html +#usr/share/doc/openssl/html/man1/version.html +#usr/share/doc/openssl/html/man1/x509.html +#usr/share/doc/openssl/html/man3 +#usr/share/doc/openssl/html/man3/ACCESS_DESCRIPTION_free.html +#usr/share/doc/openssl/html/man3/ACCESS_DESCRIPTION_new.html +#usr/share/doc/openssl/html/man3/ASIdOrRange_free.html +#usr/share/doc/openssl/html/man3/ASIdOrRange_new.html +#usr/share/doc/openssl/html/man3/ASIdentifierChoice_free.html +#usr/share/doc/openssl/html/man3/ASIdentifierChoice_new.html +#usr/share/doc/openssl/html/man3/ASIdentifiers_free.html +#usr/share/doc/openssl/html/man3/ASIdentifiers_new.html +#usr/share/doc/openssl/html/man3/ASN1_ENUMERATED_get.html +#usr/share/doc/openssl/html/man3/ASN1_ENUMERATED_get_int64.html +#usr/share/doc/openssl/html/man3/ASN1_ENUMERATED_set.html +#usr/share/doc/openssl/html/man3/ASN1_ENUMERATED_set_int64.html +#usr/share/doc/openssl/html/man3/ASN1_ENUMERATED_to_BN.html +#usr/share/doc/openssl/html/man3/ASN1_INTEGER_get.html +#usr/share/doc/openssl/html/man3/ASN1_INTEGER_get_int64.html +#usr/share/doc/openssl/html/man3/ASN1_INTEGER_get_uint64.html +#usr/share/doc/openssl/html/man3/ASN1_INTEGER_set.html +#usr/share/doc/openssl/html/man3/ASN1_INTEGER_set_int64.html +#usr/share/doc/openssl/html/man3/ASN1_INTEGER_set_uint64.html +#usr/share/doc/openssl/html/man3/ASN1_INTEGER_to_BN.html +#usr/share/doc/openssl/html/man3/ASN1_ITEM.html +#usr/share/doc/openssl/html/man3/ASN1_OBJECT_free.html +#usr/share/doc/openssl/html/man3/ASN1_OBJECT_new.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_cmp.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_data.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_dup.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_free.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_get0_data.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_length.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_new.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_print.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_print_ex.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_print_ex_fp.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_set.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_to_UTF8.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_type.html +#usr/share/doc/openssl/html/man3/ASN1_STRING_type_new.html +#usr/share/doc/openssl/html/man3/ASN1_TIME_adj.html +#usr/share/doc/openssl/html/man3/ASN1_TIME_check.html +#usr/share/doc/openssl/html/man3/ASN1_TIME_diff.html +#usr/share/doc/openssl/html/man3/ASN1_TIME_print.html +#usr/share/doc/openssl/html/man3/ASN1_TIME_set.html +#usr/share/doc/openssl/html/man3/ASN1_TIME_set_string.html +#usr/share/doc/openssl/html/man3/ASN1_TYPE_cmp.html +#usr/share/doc/openssl/html/man3/ASN1_TYPE_get.html +#usr/share/doc/openssl/html/man3/ASN1_TYPE_pack_sequence.html +#usr/share/doc/openssl/html/man3/ASN1_TYPE_set.html +#usr/share/doc/openssl/html/man3/ASN1_TYPE_set1.html +#usr/share/doc/openssl/html/man3/ASN1_TYPE_unpack_sequence.html +#usr/share/doc/openssl/html/man3/ASN1_add_oid_module.html +#usr/share/doc/openssl/html/man3/ASN1_generate_nconf.html +#usr/share/doc/openssl/html/man3/ASN1_generate_v3.html +#usr/share/doc/openssl/html/man3/ASN1_tag2str.html +#usr/share/doc/openssl/html/man3/ASRange_free.html +#usr/share/doc/openssl/html/man3/ASRange_new.html +#usr/share/doc/openssl/html/man3/ASYNC_WAIT_CTX_clear_fd.html +#usr/share/doc/openssl/html/man3/ASYNC_WAIT_CTX_free.html +#usr/share/doc/openssl/html/man3/ASYNC_WAIT_CTX_get_all_fds.html +#usr/share/doc/openssl/html/man3/ASYNC_WAIT_CTX_get_changed_fds.html +#usr/share/doc/openssl/html/man3/ASYNC_WAIT_CTX_get_fd.html +#usr/share/doc/openssl/html/man3/ASYNC_WAIT_CTX_new.html +#usr/share/doc/openssl/html/man3/ASYNC_WAIT_CTX_set_wait_fd.html +#usr/share/doc/openssl/html/man3/ASYNC_block_pause.html +#usr/share/doc/openssl/html/man3/ASYNC_cleanup_thread.html +#usr/share/doc/openssl/html/man3/ASYNC_get_current_job.html +#usr/share/doc/openssl/html/man3/ASYNC_get_wait_ctx.html +#usr/share/doc/openssl/html/man3/ASYNC_init_thread.html +#usr/share/doc/openssl/html/man3/ASYNC_is_capable.html +#usr/share/doc/openssl/html/man3/ASYNC_pause_job.html +#usr/share/doc/openssl/html/man3/ASYNC_start_job.html +#usr/share/doc/openssl/html/man3/ASYNC_unblock_pause.html +#usr/share/doc/openssl/html/man3/AUTHORITY_INFO_ACCESS_free.html +#usr/share/doc/openssl/html/man3/AUTHORITY_INFO_ACCESS_new.html +#usr/share/doc/openssl/html/man3/AUTHORITY_KEYID_free.html +#usr/share/doc/openssl/html/man3/AUTHORITY_KEYID_new.html +#usr/share/doc/openssl/html/man3/BASIC_CONSTRAINTS_free.html +#usr/share/doc/openssl/html/man3/BASIC_CONSTRAINTS_new.html +#usr/share/doc/openssl/html/man3/BF_cbc_encrypt.html +#usr/share/doc/openssl/html/man3/BF_cfb64_encrypt.html +#usr/share/doc/openssl/html/man3/BF_decrypt.html +#usr/share/doc/openssl/html/man3/BF_ecb_encrypt.html +#usr/share/doc/openssl/html/man3/BF_encrypt.html +#usr/share/doc/openssl/html/man3/BF_ofb64_encrypt.html +#usr/share/doc/openssl/html/man3/BF_options.html +#usr/share/doc/openssl/html/man3/BF_set_key.html +#usr/share/doc/openssl/html/man3/BIO_ADDR.html +#usr/share/doc/openssl/html/man3/BIO_ADDRINFO.html +#usr/share/doc/openssl/html/man3/BIO_ADDRINFO_address.html +#usr/share/doc/openssl/html/man3/BIO_ADDRINFO_family.html +#usr/share/doc/openssl/html/man3/BIO_ADDRINFO_free.html +#usr/share/doc/openssl/html/man3/BIO_ADDRINFO_next.html +#usr/share/doc/openssl/html/man3/BIO_ADDRINFO_protocol.html +#usr/share/doc/openssl/html/man3/BIO_ADDRINFO_socktype.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_clear.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_family.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_free.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_hostname_string.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_new.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_path_string.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_rawaddress.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_rawmake.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_rawport.html +#usr/share/doc/openssl/html/man3/BIO_ADDR_service_string.html +#usr/share/doc/openssl/html/man3/BIO_accept_ex.html +#usr/share/doc/openssl/html/man3/BIO_append_filename.html +#usr/share/doc/openssl/html/man3/BIO_callback_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_callback_fn.html +#usr/share/doc/openssl/html/man3/BIO_callback_fn_ex.html +#usr/share/doc/openssl/html/man3/BIO_closesocket.html +#usr/share/doc/openssl/html/man3/BIO_connect.html +#usr/share/doc/openssl/html/man3/BIO_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_ctrl_get_read_request.html +#usr/share/doc/openssl/html/man3/BIO_ctrl_get_write_guarantee.html +#usr/share/doc/openssl/html/man3/BIO_ctrl_pending.html +#usr/share/doc/openssl/html/man3/BIO_ctrl_reset_read_request.html +#usr/share/doc/openssl/html/man3/BIO_ctrl_wpending.html +#usr/share/doc/openssl/html/man3/BIO_debug_callback.html +#usr/share/doc/openssl/html/man3/BIO_destroy_bio_pair.html +#usr/share/doc/openssl/html/man3/BIO_do_accept.html +#usr/share/doc/openssl/html/man3/BIO_do_connect.html +#usr/share/doc/openssl/html/man3/BIO_do_handshake.html +#usr/share/doc/openssl/html/man3/BIO_eof.html +#usr/share/doc/openssl/html/man3/BIO_f_base64.html +#usr/share/doc/openssl/html/man3/BIO_f_buffer.html +#usr/share/doc/openssl/html/man3/BIO_f_cipher.html +#usr/share/doc/openssl/html/man3/BIO_f_md.html +#usr/share/doc/openssl/html/man3/BIO_f_null.html +#usr/share/doc/openssl/html/man3/BIO_f_ssl.html +#usr/share/doc/openssl/html/man3/BIO_find_type.html +#usr/share/doc/openssl/html/man3/BIO_flush.html +#usr/share/doc/openssl/html/man3/BIO_free.html +#usr/share/doc/openssl/html/man3/BIO_free_all.html +#usr/share/doc/openssl/html/man3/BIO_get_accept_name.html +#usr/share/doc/openssl/html/man3/BIO_get_accept_port.html +#usr/share/doc/openssl/html/man3/BIO_get_bind_mode.html +#usr/share/doc/openssl/html/man3/BIO_get_buffer_num_lines.html +#usr/share/doc/openssl/html/man3/BIO_get_callback.html +#usr/share/doc/openssl/html/man3/BIO_get_callback_arg.html +#usr/share/doc/openssl/html/man3/BIO_get_callback_ex.html +#usr/share/doc/openssl/html/man3/BIO_get_cipher_ctx.html +#usr/share/doc/openssl/html/man3/BIO_get_cipher_status.html +#usr/share/doc/openssl/html/man3/BIO_get_close.html +#usr/share/doc/openssl/html/man3/BIO_get_conn_address.html +#usr/share/doc/openssl/html/man3/BIO_get_conn_hostname.html +#usr/share/doc/openssl/html/man3/BIO_get_conn_port.html +#usr/share/doc/openssl/html/man3/BIO_get_data.html +#usr/share/doc/openssl/html/man3/BIO_get_ex_data.html +#usr/share/doc/openssl/html/man3/BIO_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/BIO_get_fd.html +#usr/share/doc/openssl/html/man3/BIO_get_fp.html +#usr/share/doc/openssl/html/man3/BIO_get_info_callback.html +#usr/share/doc/openssl/html/man3/BIO_get_init.html +#usr/share/doc/openssl/html/man3/BIO_get_md.html +#usr/share/doc/openssl/html/man3/BIO_get_md_ctx.html +#usr/share/doc/openssl/html/man3/BIO_get_mem_data.html +#usr/share/doc/openssl/html/man3/BIO_get_mem_ptr.html +#usr/share/doc/openssl/html/man3/BIO_get_new_index.html +#usr/share/doc/openssl/html/man3/BIO_get_num_renegotiates.html +#usr/share/doc/openssl/html/man3/BIO_get_read_request.html +#usr/share/doc/openssl/html/man3/BIO_get_retry_BIO.html +#usr/share/doc/openssl/html/man3/BIO_get_retry_reason.html +#usr/share/doc/openssl/html/man3/BIO_get_shutdown.html +#usr/share/doc/openssl/html/man3/BIO_get_ssl.html +#usr/share/doc/openssl/html/man3/BIO_get_write_buf_size.html +#usr/share/doc/openssl/html/man3/BIO_get_write_guarantee.html +#usr/share/doc/openssl/html/man3/BIO_gets.html +#usr/share/doc/openssl/html/man3/BIO_hostserv_priorities.html +#usr/share/doc/openssl/html/man3/BIO_int_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_listen.html +#usr/share/doc/openssl/html/man3/BIO_lookup.html +#usr/share/doc/openssl/html/man3/BIO_lookup_type.html +#usr/share/doc/openssl/html/man3/BIO_make_bio_pair.html +#usr/share/doc/openssl/html/man3/BIO_meth_free.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_callback_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_create.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_destroy.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_gets.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_puts.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_read.html +#usr/share/doc/openssl/html/man3/BIO_meth_get_write.html +#usr/share/doc/openssl/html/man3/BIO_meth_new.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_callback_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_create.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_destroy.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_gets.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_puts.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_read.html +#usr/share/doc/openssl/html/man3/BIO_meth_set_write.html +#usr/share/doc/openssl/html/man3/BIO_method_type.html +#usr/share/doc/openssl/html/man3/BIO_new.html +#usr/share/doc/openssl/html/man3/BIO_new_CMS.html +#usr/share/doc/openssl/html/man3/BIO_new_accept.html +#usr/share/doc/openssl/html/man3/BIO_new_bio_pair.html +#usr/share/doc/openssl/html/man3/BIO_new_buffer_ssl_connect.html +#usr/share/doc/openssl/html/man3/BIO_new_connect.html +#usr/share/doc/openssl/html/man3/BIO_new_fd.html +#usr/share/doc/openssl/html/man3/BIO_new_file.html +#usr/share/doc/openssl/html/man3/BIO_new_fp.html +#usr/share/doc/openssl/html/man3/BIO_new_mem_buf.html +#usr/share/doc/openssl/html/man3/BIO_new_socket.html +#usr/share/doc/openssl/html/man3/BIO_new_ssl.html +#usr/share/doc/openssl/html/man3/BIO_new_ssl_connect.html +#usr/share/doc/openssl/html/man3/BIO_next.html +#usr/share/doc/openssl/html/man3/BIO_parse_hostserv.html +#usr/share/doc/openssl/html/man3/BIO_pending.html +#usr/share/doc/openssl/html/man3/BIO_pop.html +#usr/share/doc/openssl/html/man3/BIO_printf.html +#usr/share/doc/openssl/html/man3/BIO_ptr_ctrl.html +#usr/share/doc/openssl/html/man3/BIO_push.html +#usr/share/doc/openssl/html/man3/BIO_puts.html +#usr/share/doc/openssl/html/man3/BIO_read.html +#usr/share/doc/openssl/html/man3/BIO_read_filename.html +#usr/share/doc/openssl/html/man3/BIO_reset.html +#usr/share/doc/openssl/html/man3/BIO_retry_type.html +#usr/share/doc/openssl/html/man3/BIO_rw_filename.html +#usr/share/doc/openssl/html/man3/BIO_s_accept.html +#usr/share/doc/openssl/html/man3/BIO_s_bio.html +#usr/share/doc/openssl/html/man3/BIO_s_connect.html +#usr/share/doc/openssl/html/man3/BIO_s_fd.html +#usr/share/doc/openssl/html/man3/BIO_s_file.html +#usr/share/doc/openssl/html/man3/BIO_s_mem.html +#usr/share/doc/openssl/html/man3/BIO_s_null.html +#usr/share/doc/openssl/html/man3/BIO_s_secmem.html +#usr/share/doc/openssl/html/man3/BIO_s_socket.html +#usr/share/doc/openssl/html/man3/BIO_seek.html +#usr/share/doc/openssl/html/man3/BIO_set.html +#usr/share/doc/openssl/html/man3/BIO_set_accept_bios.html +#usr/share/doc/openssl/html/man3/BIO_set_accept_name.html +#usr/share/doc/openssl/html/man3/BIO_set_accept_port.html +#usr/share/doc/openssl/html/man3/BIO_set_bind_mode.html +#usr/share/doc/openssl/html/man3/BIO_set_buffer_read_data.html +#usr/share/doc/openssl/html/man3/BIO_set_buffer_size.html +#usr/share/doc/openssl/html/man3/BIO_set_callback.html +#usr/share/doc/openssl/html/man3/BIO_set_callback_arg.html +#usr/share/doc/openssl/html/man3/BIO_set_callback_ex.html +#usr/share/doc/openssl/html/man3/BIO_set_cipher.html +#usr/share/doc/openssl/html/man3/BIO_set_close.html +#usr/share/doc/openssl/html/man3/BIO_set_conn_address.html +#usr/share/doc/openssl/html/man3/BIO_set_conn_hostname.html +#usr/share/doc/openssl/html/man3/BIO_set_conn_port.html +#usr/share/doc/openssl/html/man3/BIO_set_data.html +#usr/share/doc/openssl/html/man3/BIO_set_ex_data.html +#usr/share/doc/openssl/html/man3/BIO_set_fd.html +#usr/share/doc/openssl/html/man3/BIO_set_fp.html +#usr/share/doc/openssl/html/man3/BIO_set_info_callback.html +#usr/share/doc/openssl/html/man3/BIO_set_init.html +#usr/share/doc/openssl/html/man3/BIO_set_md.html +#usr/share/doc/openssl/html/man3/BIO_set_mem_buf.html +#usr/share/doc/openssl/html/man3/BIO_set_mem_eof_return.html +#usr/share/doc/openssl/html/man3/BIO_set_nbio.html +#usr/share/doc/openssl/html/man3/BIO_set_nbio_accept.html +#usr/share/doc/openssl/html/man3/BIO_set_next.html +#usr/share/doc/openssl/html/man3/BIO_set_read_buffer_size.html +#usr/share/doc/openssl/html/man3/BIO_set_retry_reason.html +#usr/share/doc/openssl/html/man3/BIO_set_shutdown.html +#usr/share/doc/openssl/html/man3/BIO_set_ssl.html +#usr/share/doc/openssl/html/man3/BIO_set_ssl_mode.html +#usr/share/doc/openssl/html/man3/BIO_set_ssl_renegotiate_bytes.html +#usr/share/doc/openssl/html/man3/BIO_set_ssl_renegotiate_timeout.html +#usr/share/doc/openssl/html/man3/BIO_set_write_buf_size.html +#usr/share/doc/openssl/html/man3/BIO_set_write_buffer_size.html +#usr/share/doc/openssl/html/man3/BIO_should_io_special.html +#usr/share/doc/openssl/html/man3/BIO_should_read.html +#usr/share/doc/openssl/html/man3/BIO_should_retry.html +#usr/share/doc/openssl/html/man3/BIO_should_write.html +#usr/share/doc/openssl/html/man3/BIO_shutdown_wr.html +#usr/share/doc/openssl/html/man3/BIO_snprintf.html +#usr/share/doc/openssl/html/man3/BIO_socket.html +#usr/share/doc/openssl/html/man3/BIO_ssl_copy_session_id.html +#usr/share/doc/openssl/html/man3/BIO_ssl_shutdown.html +#usr/share/doc/openssl/html/man3/BIO_tell.html +#usr/share/doc/openssl/html/man3/BIO_up_ref.html +#usr/share/doc/openssl/html/man3/BIO_vfree.html +#usr/share/doc/openssl/html/man3/BIO_vprintf.html +#usr/share/doc/openssl/html/man3/BIO_vsnprintf.html +#usr/share/doc/openssl/html/man3/BIO_wpending.html +#usr/share/doc/openssl/html/man3/BIO_write.html +#usr/share/doc/openssl/html/man3/BIO_write_filename.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_convert.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_convert_ex.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_create_param.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_free.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_get_flags.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_invert.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_invert_ex.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_is_current_thread.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_lock.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_new.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_set_current_thread.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_set_flags.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_unlock.html +#usr/share/doc/openssl/html/man3/BN_BLINDING_update.html +#usr/share/doc/openssl/html/man3/BN_CTX_end.html +#usr/share/doc/openssl/html/man3/BN_CTX_free.html +#usr/share/doc/openssl/html/man3/BN_CTX_get.html +#usr/share/doc/openssl/html/man3/BN_CTX_new.html +#usr/share/doc/openssl/html/man3/BN_CTX_secure_new.html +#usr/share/doc/openssl/html/man3/BN_CTX_start.html +#usr/share/doc/openssl/html/man3/BN_GENCB_call.html +#usr/share/doc/openssl/html/man3/BN_GENCB_free.html +#usr/share/doc/openssl/html/man3/BN_GENCB_get_arg.html +#usr/share/doc/openssl/html/man3/BN_GENCB_new.html +#usr/share/doc/openssl/html/man3/BN_GENCB_set.html +#usr/share/doc/openssl/html/man3/BN_GENCB_set_old.html +#usr/share/doc/openssl/html/man3/BN_MONT_CTX_copy.html +#usr/share/doc/openssl/html/man3/BN_MONT_CTX_free.html +#usr/share/doc/openssl/html/man3/BN_MONT_CTX_new.html +#usr/share/doc/openssl/html/man3/BN_MONT_CTX_set.html +#usr/share/doc/openssl/html/man3/BN_RECP_CTX_free.html +#usr/share/doc/openssl/html/man3/BN_RECP_CTX_new.html +#usr/share/doc/openssl/html/man3/BN_RECP_CTX_set.html +#usr/share/doc/openssl/html/man3/BN_add.html +#usr/share/doc/openssl/html/man3/BN_add_word.html +#usr/share/doc/openssl/html/man3/BN_bin2bn.html +#usr/share/doc/openssl/html/man3/BN_bn2bin.html +#usr/share/doc/openssl/html/man3/BN_bn2binpad.html +#usr/share/doc/openssl/html/man3/BN_bn2dec.html +#usr/share/doc/openssl/html/man3/BN_bn2hex.html +#usr/share/doc/openssl/html/man3/BN_bn2lebinpad.html +#usr/share/doc/openssl/html/man3/BN_bn2mpi.html +#usr/share/doc/openssl/html/man3/BN_clear.html +#usr/share/doc/openssl/html/man3/BN_clear_bit.html +#usr/share/doc/openssl/html/man3/BN_clear_free.html +#usr/share/doc/openssl/html/man3/BN_cmp.html +#usr/share/doc/openssl/html/man3/BN_copy.html +#usr/share/doc/openssl/html/man3/BN_dec2bn.html +#usr/share/doc/openssl/html/man3/BN_div.html +#usr/share/doc/openssl/html/man3/BN_div_recp.html +#usr/share/doc/openssl/html/man3/BN_div_word.html +#usr/share/doc/openssl/html/man3/BN_dup.html +#usr/share/doc/openssl/html/man3/BN_exp.html +#usr/share/doc/openssl/html/man3/BN_free.html +#usr/share/doc/openssl/html/man3/BN_from_montgomery.html +#usr/share/doc/openssl/html/man3/BN_gcd.html +#usr/share/doc/openssl/html/man3/BN_generate_prime.html +#usr/share/doc/openssl/html/man3/BN_generate_prime_ex.html +#usr/share/doc/openssl/html/man3/BN_get0_nist_prime_192.html +#usr/share/doc/openssl/html/man3/BN_get0_nist_prime_224.html +#usr/share/doc/openssl/html/man3/BN_get0_nist_prime_256.html +#usr/share/doc/openssl/html/man3/BN_get0_nist_prime_384.html +#usr/share/doc/openssl/html/man3/BN_get0_nist_prime_521.html +#usr/share/doc/openssl/html/man3/BN_get_rfc2409_prime_1024.html +#usr/share/doc/openssl/html/man3/BN_get_rfc2409_prime_768.html +#usr/share/doc/openssl/html/man3/BN_get_rfc3526_prime_1536.html +#usr/share/doc/openssl/html/man3/BN_get_rfc3526_prime_2048.html +#usr/share/doc/openssl/html/man3/BN_get_rfc3526_prime_3072.html +#usr/share/doc/openssl/html/man3/BN_get_rfc3526_prime_4096.html +#usr/share/doc/openssl/html/man3/BN_get_rfc3526_prime_6144.html +#usr/share/doc/openssl/html/man3/BN_get_rfc3526_prime_8192.html +#usr/share/doc/openssl/html/man3/BN_get_word.html +#usr/share/doc/openssl/html/man3/BN_hex2bn.html +#usr/share/doc/openssl/html/man3/BN_is_bit_set.html +#usr/share/doc/openssl/html/man3/BN_is_odd.html +#usr/share/doc/openssl/html/man3/BN_is_one.html +#usr/share/doc/openssl/html/man3/BN_is_prime.html +#usr/share/doc/openssl/html/man3/BN_is_prime_ex.html +#usr/share/doc/openssl/html/man3/BN_is_prime_fasttest.html +#usr/share/doc/openssl/html/man3/BN_is_prime_fasttest_ex.html +#usr/share/doc/openssl/html/man3/BN_is_word.html +#usr/share/doc/openssl/html/man3/BN_is_zero.html +#usr/share/doc/openssl/html/man3/BN_lebin2bn.html +#usr/share/doc/openssl/html/man3/BN_lshift.html +#usr/share/doc/openssl/html/man3/BN_lshift1.html +#usr/share/doc/openssl/html/man3/BN_mask_bits.html +#usr/share/doc/openssl/html/man3/BN_mod.html +#usr/share/doc/openssl/html/man3/BN_mod_add.html +#usr/share/doc/openssl/html/man3/BN_mod_exp.html +#usr/share/doc/openssl/html/man3/BN_mod_inverse.html +#usr/share/doc/openssl/html/man3/BN_mod_mul.html +#usr/share/doc/openssl/html/man3/BN_mod_mul_montgomery.html +#usr/share/doc/openssl/html/man3/BN_mod_mul_reciprocal.html +#usr/share/doc/openssl/html/man3/BN_mod_sqr.html +#usr/share/doc/openssl/html/man3/BN_mod_sub.html +#usr/share/doc/openssl/html/man3/BN_mod_word.html +#usr/share/doc/openssl/html/man3/BN_mpi2bn.html +#usr/share/doc/openssl/html/man3/BN_mul.html +#usr/share/doc/openssl/html/man3/BN_mul_word.html +#usr/share/doc/openssl/html/man3/BN_new.html +#usr/share/doc/openssl/html/man3/BN_nnmod.html +#usr/share/doc/openssl/html/man3/BN_num_bits.html +#usr/share/doc/openssl/html/man3/BN_num_bits_word.html +#usr/share/doc/openssl/html/man3/BN_num_bytes.html +#usr/share/doc/openssl/html/man3/BN_one.html +#usr/share/doc/openssl/html/man3/BN_print.html +#usr/share/doc/openssl/html/man3/BN_print_fp.html +#usr/share/doc/openssl/html/man3/BN_pseudo_rand.html +#usr/share/doc/openssl/html/man3/BN_pseudo_rand_range.html +#usr/share/doc/openssl/html/man3/BN_rand.html +#usr/share/doc/openssl/html/man3/BN_rand_range.html +#usr/share/doc/openssl/html/man3/BN_rshift.html +#usr/share/doc/openssl/html/man3/BN_rshift1.html +#usr/share/doc/openssl/html/man3/BN_secure_new.html +#usr/share/doc/openssl/html/man3/BN_set_bit.html +#usr/share/doc/openssl/html/man3/BN_set_word.html +#usr/share/doc/openssl/html/man3/BN_sqr.html +#usr/share/doc/openssl/html/man3/BN_sub.html +#usr/share/doc/openssl/html/man3/BN_sub_word.html +#usr/share/doc/openssl/html/man3/BN_swap.html +#usr/share/doc/openssl/html/man3/BN_to_ASN1_ENUMERATED.html +#usr/share/doc/openssl/html/man3/BN_to_ASN1_INTEGER.html +#usr/share/doc/openssl/html/man3/BN_to_montgomery.html +#usr/share/doc/openssl/html/man3/BN_ucmp.html +#usr/share/doc/openssl/html/man3/BN_value_one.html +#usr/share/doc/openssl/html/man3/BN_with_flags.html +#usr/share/doc/openssl/html/man3/BN_zero.html +#usr/share/doc/openssl/html/man3/BUF_MEM_free.html +#usr/share/doc/openssl/html/man3/BUF_MEM_grow.html +#usr/share/doc/openssl/html/man3/BUF_MEM_grow_clean.html +#usr/share/doc/openssl/html/man3/BUF_MEM_new.html +#usr/share/doc/openssl/html/man3/BUF_MEM_new_ex.html +#usr/share/doc/openssl/html/man3/BUF_reverse.html +#usr/share/doc/openssl/html/man3/CERTIFICATEPOLICIES_free.html +#usr/share/doc/openssl/html/man3/CERTIFICATEPOLICIES_new.html +#usr/share/doc/openssl/html/man3/CMS_ContentInfo_free.html +#usr/share/doc/openssl/html/man3/CMS_ContentInfo_new.html +#usr/share/doc/openssl/html/man3/CMS_ContentInfo_print_ctx.html +#usr/share/doc/openssl/html/man3/CMS_ReceiptRequest_create0.html +#usr/share/doc/openssl/html/man3/CMS_ReceiptRequest_free.html +#usr/share/doc/openssl/html/man3/CMS_ReceiptRequest_get0_values.html +#usr/share/doc/openssl/html/man3/CMS_ReceiptRequest_new.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_decrypt.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_encrypt.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_kekri_get0_id.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_kekri_id_cmp.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_ktri_cert_cmp.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_ktri_get0_signer_id.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_set0_key.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_set0_pkey.html +#usr/share/doc/openssl/html/man3/CMS_RecipientInfo_type.html +#usr/share/doc/openssl/html/man3/CMS_SignerInfo_cert_cmp.html +#usr/share/doc/openssl/html/man3/CMS_SignerInfo_get0_signature.html +#usr/share/doc/openssl/html/man3/CMS_SignerInfo_get0_signer_id.html +#usr/share/doc/openssl/html/man3/CMS_SignerInfo_set1_signer_cert.html +#usr/share/doc/openssl/html/man3/CMS_SignerInfo_sign.html +#usr/share/doc/openssl/html/man3/CMS_add0_cert.html +#usr/share/doc/openssl/html/man3/CMS_add0_crl.html +#usr/share/doc/openssl/html/man3/CMS_add0_recipient_key.html +#usr/share/doc/openssl/html/man3/CMS_add1_ReceiptRequest.html +#usr/share/doc/openssl/html/man3/CMS_add1_cert.html +#usr/share/doc/openssl/html/man3/CMS_add1_crl.html +#usr/share/doc/openssl/html/man3/CMS_add1_recipient_cert.html +#usr/share/doc/openssl/html/man3/CMS_add1_signer.html +#usr/share/doc/openssl/html/man3/CMS_compress.html +#usr/share/doc/openssl/html/man3/CMS_decrypt.html +#usr/share/doc/openssl/html/man3/CMS_encrypt.html +#usr/share/doc/openssl/html/man3/CMS_final.html +#usr/share/doc/openssl/html/man3/CMS_get0_RecipientInfos.html +#usr/share/doc/openssl/html/man3/CMS_get0_SignerInfos.html +#usr/share/doc/openssl/html/man3/CMS_get0_content.html +#usr/share/doc/openssl/html/man3/CMS_get0_eContentType.html +#usr/share/doc/openssl/html/man3/CMS_get0_signers.html +#usr/share/doc/openssl/html/man3/CMS_get0_type.html +#usr/share/doc/openssl/html/man3/CMS_get1_ReceiptRequest.html +#usr/share/doc/openssl/html/man3/CMS_get1_certs.html +#usr/share/doc/openssl/html/man3/CMS_get1_crls.html +#usr/share/doc/openssl/html/man3/CMS_set1_eContentType.html +#usr/share/doc/openssl/html/man3/CMS_sign.html +#usr/share/doc/openssl/html/man3/CMS_sign_receipt.html +#usr/share/doc/openssl/html/man3/CMS_uncompress.html +#usr/share/doc/openssl/html/man3/CMS_verify.html +#usr/share/doc/openssl/html/man3/CMS_verify_receipt.html +#usr/share/doc/openssl/html/man3/CONF_modules_finish.html +#usr/share/doc/openssl/html/man3/CONF_modules_free.html +#usr/share/doc/openssl/html/man3/CONF_modules_load.html +#usr/share/doc/openssl/html/man3/CONF_modules_load_file.html +#usr/share/doc/openssl/html/man3/CONF_modules_unload.html +#usr/share/doc/openssl/html/man3/CRL_DIST_POINTS_free.html +#usr/share/doc/openssl/html/man3/CRL_DIST_POINTS_new.html +#usr/share/doc/openssl/html/man3/CRYPTO_EX_dup.html +#usr/share/doc/openssl/html/man3/CRYPTO_EX_free.html +#usr/share/doc/openssl/html/man3/CRYPTO_EX_new.html +#usr/share/doc/openssl/html/man3/CRYPTO_THREAD_lock_free.html +#usr/share/doc/openssl/html/man3/CRYPTO_THREAD_lock_new.html +#usr/share/doc/openssl/html/man3/CRYPTO_THREAD_read_lock.html +#usr/share/doc/openssl/html/man3/CRYPTO_THREAD_run_once.html +#usr/share/doc/openssl/html/man3/CRYPTO_THREAD_unlock.html +#usr/share/doc/openssl/html/man3/CRYPTO_THREAD_write_lock.html +#usr/share/doc/openssl/html/man3/CRYPTO_atomic_add.html +#usr/share/doc/openssl/html/man3/CRYPTO_clear_free.html +#usr/share/doc/openssl/html/man3/CRYPTO_clear_realloc.html +#usr/share/doc/openssl/html/man3/CRYPTO_free.html +#usr/share/doc/openssl/html/man3/CRYPTO_free_ex_data.html +#usr/share/doc/openssl/html/man3/CRYPTO_free_ex_index.html +#usr/share/doc/openssl/html/man3/CRYPTO_get_ex_data.html +#usr/share/doc/openssl/html/man3/CRYPTO_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/CRYPTO_get_mem_functions.html +#usr/share/doc/openssl/html/man3/CRYPTO_malloc.html +#usr/share/doc/openssl/html/man3/CRYPTO_mem_ctrl.html +#usr/share/doc/openssl/html/man3/CRYPTO_mem_debug_pop.html +#usr/share/doc/openssl/html/man3/CRYPTO_mem_debug_push.html +#usr/share/doc/openssl/html/man3/CRYPTO_mem_leaks.html +#usr/share/doc/openssl/html/man3/CRYPTO_mem_leaks_fp.html +#usr/share/doc/openssl/html/man3/CRYPTO_new_ex_data.html +#usr/share/doc/openssl/html/man3/CRYPTO_realloc.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_clear_free.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_free.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_malloc.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_malloc_done.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_malloc_init.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_malloc_initialized.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_used.html +#usr/share/doc/openssl/html/man3/CRYPTO_secure_zalloc.html +#usr/share/doc/openssl/html/man3/CRYPTO_set_ex_data.html +#usr/share/doc/openssl/html/man3/CRYPTO_set_mem_debug.html +#usr/share/doc/openssl/html/man3/CRYPTO_set_mem_functions.html +#usr/share/doc/openssl/html/man3/CRYPTO_strdup.html +#usr/share/doc/openssl/html/man3/CRYPTO_strndup.html +#usr/share/doc/openssl/html/man3/CRYPTO_zalloc.html +#usr/share/doc/openssl/html/man3/CTLOG_STORE_free.html +#usr/share/doc/openssl/html/man3/CTLOG_STORE_get0_log_by_id.html +#usr/share/doc/openssl/html/man3/CTLOG_STORE_load_default_file.html +#usr/share/doc/openssl/html/man3/CTLOG_STORE_load_file.html +#usr/share/doc/openssl/html/man3/CTLOG_STORE_new.html +#usr/share/doc/openssl/html/man3/CTLOG_free.html +#usr/share/doc/openssl/html/man3/CTLOG_get0_log_id.html +#usr/share/doc/openssl/html/man3/CTLOG_get0_name.html +#usr/share/doc/openssl/html/man3/CTLOG_get0_public_key.html +#usr/share/doc/openssl/html/man3/CTLOG_new.html +#usr/share/doc/openssl/html/man3/CTLOG_new_from_base64.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_free.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_get0_cert.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_get0_issuer.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_get0_log_store.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_get_time.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_new.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_set1_cert.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_set1_issuer.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE.html +#usr/share/doc/openssl/html/man3/CT_POLICY_EVAL_CTX_set_time.html +#usr/share/doc/openssl/html/man3/DECLARE_ASN1_FUNCTIONS.html +#usr/share/doc/openssl/html/man3/DECLARE_LHASH_OF.html +#usr/share/doc/openssl/html/man3/DECLARE_PEM_rw.html +#usr/share/doc/openssl/html/man3/DEFINE_SPECIAL_STACK_OF.html +#usr/share/doc/openssl/html/man3/DEFINE_SPECIAL_STACK_OF_CONST.html +#usr/share/doc/openssl/html/man3/DEFINE_STACK_OF.html +#usr/share/doc/openssl/html/man3/DEFINE_STACK_OF_CONST.html +#usr/share/doc/openssl/html/man3/DES_cbc_cksum.html +#usr/share/doc/openssl/html/man3/DES_cfb64_encrypt.html +#usr/share/doc/openssl/html/man3/DES_cfb_encrypt.html +#usr/share/doc/openssl/html/man3/DES_crypt.html +#usr/share/doc/openssl/html/man3/DES_ecb2_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ecb3_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ecb_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ede2_cbc_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ede2_cfb64_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ede2_ofb64_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ede3_cbc_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ede3_cfb64_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ede3_ofb64_encrypt.html +#usr/share/doc/openssl/html/man3/DES_fcrypt.html +#usr/share/doc/openssl/html/man3/DES_is_weak_key.html +#usr/share/doc/openssl/html/man3/DES_key_sched.html +#usr/share/doc/openssl/html/man3/DES_ncbc_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ofb64_encrypt.html +#usr/share/doc/openssl/html/man3/DES_ofb_encrypt.html +#usr/share/doc/openssl/html/man3/DES_pcbc_encrypt.html +#usr/share/doc/openssl/html/man3/DES_quad_cksum.html +#usr/share/doc/openssl/html/man3/DES_random_key.html +#usr/share/doc/openssl/html/man3/DES_set_key.html +#usr/share/doc/openssl/html/man3/DES_set_key_checked.html +#usr/share/doc/openssl/html/man3/DES_set_key_unchecked.html +#usr/share/doc/openssl/html/man3/DES_set_odd_parity.html +#usr/share/doc/openssl/html/man3/DES_string_to_2keys.html +#usr/share/doc/openssl/html/man3/DES_string_to_key.html +#usr/share/doc/openssl/html/man3/DES_xcbc_encrypt.html +#usr/share/doc/openssl/html/man3/DH_OpenSSL.html +#usr/share/doc/openssl/html/man3/DH_bits.html +#usr/share/doc/openssl/html/man3/DH_check.html +#usr/share/doc/openssl/html/man3/DH_check_params.html +#usr/share/doc/openssl/html/man3/DH_clear_flags.html +#usr/share/doc/openssl/html/man3/DH_compute_key.html +#usr/share/doc/openssl/html/man3/DH_free.html +#usr/share/doc/openssl/html/man3/DH_generate_key.html +#usr/share/doc/openssl/html/man3/DH_generate_parameters.html +#usr/share/doc/openssl/html/man3/DH_generate_parameters_ex.html +#usr/share/doc/openssl/html/man3/DH_get0_engine.html +#usr/share/doc/openssl/html/man3/DH_get0_key.html +#usr/share/doc/openssl/html/man3/DH_get0_pqg.html +#usr/share/doc/openssl/html/man3/DH_get_1024_160.html +#usr/share/doc/openssl/html/man3/DH_get_2048_224.html +#usr/share/doc/openssl/html/man3/DH_get_2048_256.html +#usr/share/doc/openssl/html/man3/DH_get_default_method.html +#usr/share/doc/openssl/html/man3/DH_get_ex_data.html +#usr/share/doc/openssl/html/man3/DH_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/DH_get_length.html +#usr/share/doc/openssl/html/man3/DH_meth_dup.html +#usr/share/doc/openssl/html/man3/DH_meth_free.html +#usr/share/doc/openssl/html/man3/DH_meth_get0_app_data.html +#usr/share/doc/openssl/html/man3/DH_meth_get0_name.html +#usr/share/doc/openssl/html/man3/DH_meth_get_bn_mod_exp.html +#usr/share/doc/openssl/html/man3/DH_meth_get_compute_key.html +#usr/share/doc/openssl/html/man3/DH_meth_get_finish.html +#usr/share/doc/openssl/html/man3/DH_meth_get_flags.html +#usr/share/doc/openssl/html/man3/DH_meth_get_generate_key.html +#usr/share/doc/openssl/html/man3/DH_meth_get_generate_params.html +#usr/share/doc/openssl/html/man3/DH_meth_get_init.html +#usr/share/doc/openssl/html/man3/DH_meth_new.html +#usr/share/doc/openssl/html/man3/DH_meth_set0_app_data.html +#usr/share/doc/openssl/html/man3/DH_meth_set1_name.html +#usr/share/doc/openssl/html/man3/DH_meth_set_bn_mod_exp.html +#usr/share/doc/openssl/html/man3/DH_meth_set_compute_key.html +#usr/share/doc/openssl/html/man3/DH_meth_set_finish.html +#usr/share/doc/openssl/html/man3/DH_meth_set_flags.html +#usr/share/doc/openssl/html/man3/DH_meth_set_generate_key.html +#usr/share/doc/openssl/html/man3/DH_meth_set_generate_params.html +#usr/share/doc/openssl/html/man3/DH_meth_set_init.html +#usr/share/doc/openssl/html/man3/DH_new.html +#usr/share/doc/openssl/html/man3/DH_new_method.html +#usr/share/doc/openssl/html/man3/DH_set0_key.html +#usr/share/doc/openssl/html/man3/DH_set0_pqg.html +#usr/share/doc/openssl/html/man3/DH_set_default_method.html +#usr/share/doc/openssl/html/man3/DH_set_ex_data.html +#usr/share/doc/openssl/html/man3/DH_set_flags.html +#usr/share/doc/openssl/html/man3/DH_set_length.html +#usr/share/doc/openssl/html/man3/DH_set_method.html +#usr/share/doc/openssl/html/man3/DH_size.html +#usr/share/doc/openssl/html/man3/DH_test_flags.html +#usr/share/doc/openssl/html/man3/DHparams_print.html +#usr/share/doc/openssl/html/man3/DHparams_print_fp.html +#usr/share/doc/openssl/html/man3/DIRECTORYSTRING_free.html +#usr/share/doc/openssl/html/man3/DIRECTORYSTRING_new.html +#usr/share/doc/openssl/html/man3/DISPLAYTEXT_free.html +#usr/share/doc/openssl/html/man3/DISPLAYTEXT_new.html +#usr/share/doc/openssl/html/man3/DIST_POINT_NAME_free.html +#usr/share/doc/openssl/html/man3/DIST_POINT_NAME_new.html +#usr/share/doc/openssl/html/man3/DIST_POINT_free.html +#usr/share/doc/openssl/html/man3/DIST_POINT_new.html +#usr/share/doc/openssl/html/man3/DSA_OpenSSL.html +#usr/share/doc/openssl/html/man3/DSA_SIG_free.html +#usr/share/doc/openssl/html/man3/DSA_SIG_get0.html +#usr/share/doc/openssl/html/man3/DSA_SIG_new.html +#usr/share/doc/openssl/html/man3/DSA_SIG_set0.html +#usr/share/doc/openssl/html/man3/DSA_bits.html +#usr/share/doc/openssl/html/man3/DSA_clear_flags.html +#usr/share/doc/openssl/html/man3/DSA_do_sign.html +#usr/share/doc/openssl/html/man3/DSA_do_verify.html +#usr/share/doc/openssl/html/man3/DSA_dup_DH.html +#usr/share/doc/openssl/html/man3/DSA_free.html +#usr/share/doc/openssl/html/man3/DSA_generate_key.html +#usr/share/doc/openssl/html/man3/DSA_generate_parameters.html +#usr/share/doc/openssl/html/man3/DSA_generate_parameters_ex.html +#usr/share/doc/openssl/html/man3/DSA_get0_engine.html +#usr/share/doc/openssl/html/man3/DSA_get0_key.html +#usr/share/doc/openssl/html/man3/DSA_get0_pqg.html +#usr/share/doc/openssl/html/man3/DSA_get_default_method.html +#usr/share/doc/openssl/html/man3/DSA_get_ex_data.html +#usr/share/doc/openssl/html/man3/DSA_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/DSA_meth_dup.html +#usr/share/doc/openssl/html/man3/DSA_meth_free.html +#usr/share/doc/openssl/html/man3/DSA_meth_get0_app_data.html +#usr/share/doc/openssl/html/man3/DSA_meth_get0_name.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_bn_mod_exp.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_finish.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_flags.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_init.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_keygen.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_mod_exp.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_paramgen.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_sign.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_sign_setup.html +#usr/share/doc/openssl/html/man3/DSA_meth_get_verify.html +#usr/share/doc/openssl/html/man3/DSA_meth_new.html +#usr/share/doc/openssl/html/man3/DSA_meth_set0_app_data.html +#usr/share/doc/openssl/html/man3/DSA_meth_set1_name.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_bn_mod_exp.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_finish.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_flags.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_init.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_keygen.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_mod_exp.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_paramgen.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_sign.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_sign_setup.html +#usr/share/doc/openssl/html/man3/DSA_meth_set_verify.html +#usr/share/doc/openssl/html/man3/DSA_new.html +#usr/share/doc/openssl/html/man3/DSA_new_method.html +#usr/share/doc/openssl/html/man3/DSA_print.html +#usr/share/doc/openssl/html/man3/DSA_print_fp.html +#usr/share/doc/openssl/html/man3/DSA_set0_key.html +#usr/share/doc/openssl/html/man3/DSA_set0_pqg.html +#usr/share/doc/openssl/html/man3/DSA_set_default_method.html +#usr/share/doc/openssl/html/man3/DSA_set_ex_data.html +#usr/share/doc/openssl/html/man3/DSA_set_flags.html +#usr/share/doc/openssl/html/man3/DSA_set_method.html +#usr/share/doc/openssl/html/man3/DSA_sign.html +#usr/share/doc/openssl/html/man3/DSA_sign_setup.html +#usr/share/doc/openssl/html/man3/DSA_size.html +#usr/share/doc/openssl/html/man3/DSA_test_flags.html +#usr/share/doc/openssl/html/man3/DSA_verify.html +#usr/share/doc/openssl/html/man3/DSAparams_dup.html +#usr/share/doc/openssl/html/man3/DSAparams_print.html +#usr/share/doc/openssl/html/man3/DSAparams_print_fp.html +#usr/share/doc/openssl/html/man3/DTLS_client_method.html +#usr/share/doc/openssl/html/man3/DTLS_method.html +#usr/share/doc/openssl/html/man3/DTLS_server_method.html +#usr/share/doc/openssl/html/man3/DTLSv1_2_client_method.html +#usr/share/doc/openssl/html/man3/DTLSv1_2_method.html +#usr/share/doc/openssl/html/man3/DTLSv1_2_server_method.html +#usr/share/doc/openssl/html/man3/DTLSv1_client_method.html +#usr/share/doc/openssl/html/man3/DTLSv1_listen.html +#usr/share/doc/openssl/html/man3/DTLSv1_method.html +#usr/share/doc/openssl/html/man3/DTLSv1_server_method.html +#usr/share/doc/openssl/html/man3/ECDH_get_ex_data.html +#usr/share/doc/openssl/html/man3/ECDH_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/ECDH_set_ex_data.html +#usr/share/doc/openssl/html/man3/ECDSA_SIG_free.html +#usr/share/doc/openssl/html/man3/ECDSA_SIG_get0.html +#usr/share/doc/openssl/html/man3/ECDSA_SIG_new.html +#usr/share/doc/openssl/html/man3/ECDSA_SIG_set0.html +#usr/share/doc/openssl/html/man3/ECDSA_do_sign.html +#usr/share/doc/openssl/html/man3/ECDSA_do_sign_ex.html +#usr/share/doc/openssl/html/man3/ECDSA_do_verify.html +#usr/share/doc/openssl/html/man3/ECDSA_sign.html +#usr/share/doc/openssl/html/man3/ECDSA_sign_ex.html +#usr/share/doc/openssl/html/man3/ECDSA_sign_setup.html +#usr/share/doc/openssl/html/man3/ECDSA_size.html +#usr/share/doc/openssl/html/man3/ECDSA_verify.html +#usr/share/doc/openssl/html/man3/ECPARAMETERS_free.html +#usr/share/doc/openssl/html/man3/ECPARAMETERS_new.html +#usr/share/doc/openssl/html/man3/ECPKPARAMETERS_free.html +#usr/share/doc/openssl/html/man3/ECPKPARAMETERS_new.html +#usr/share/doc/openssl/html/man3/ECPKParameters_print.html +#usr/share/doc/openssl/html/man3/ECPKParameters_print_fp.html +#usr/share/doc/openssl/html/man3/EC_GF2m_simple_method.html +#usr/share/doc/openssl/html/man3/EC_GFp_mont_method.html +#usr/share/doc/openssl/html/man3/EC_GFp_nist_method.html +#usr/share/doc/openssl/html/man3/EC_GFp_nistp224_method.html +#usr/share/doc/openssl/html/man3/EC_GFp_nistp256_method.html +#usr/share/doc/openssl/html/man3/EC_GFp_nistp521_method.html +#usr/share/doc/openssl/html/man3/EC_GFp_simple_method.html +#usr/share/doc/openssl/html/man3/EC_GROUP_check.html +#usr/share/doc/openssl/html/man3/EC_GROUP_check_discriminant.html +#usr/share/doc/openssl/html/man3/EC_GROUP_clear_free.html +#usr/share/doc/openssl/html/man3/EC_GROUP_cmp.html +#usr/share/doc/openssl/html/man3/EC_GROUP_copy.html +#usr/share/doc/openssl/html/man3/EC_GROUP_dup.html +#usr/share/doc/openssl/html/man3/EC_GROUP_free.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get0_cofactor.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get0_generator.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get0_order.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get0_seed.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_asn1_flag.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_basis_type.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_cofactor.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_curve_GF2m.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_curve_GFp.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_curve_name.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_degree.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_ecparameters.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_ecpkparameters.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_order.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_pentanomial_basis.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_point_conversion_form.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_seed_len.html +#usr/share/doc/openssl/html/man3/EC_GROUP_get_trinomial_basis.html +#usr/share/doc/openssl/html/man3/EC_GROUP_have_precompute_mult.html +#usr/share/doc/openssl/html/man3/EC_GROUP_method_of.html +#usr/share/doc/openssl/html/man3/EC_GROUP_new.html +#usr/share/doc/openssl/html/man3/EC_GROUP_new_by_curve_name.html +#usr/share/doc/openssl/html/man3/EC_GROUP_new_curve_GF2m.html +#usr/share/doc/openssl/html/man3/EC_GROUP_new_curve_GFp.html +#usr/share/doc/openssl/html/man3/EC_GROUP_new_from_ecparameters.html +#usr/share/doc/openssl/html/man3/EC_GROUP_new_from_ecpkparameters.html +#usr/share/doc/openssl/html/man3/EC_GROUP_order_bits.html +#usr/share/doc/openssl/html/man3/EC_GROUP_precompute_mult.html +#usr/share/doc/openssl/html/man3/EC_GROUP_set_asn1_flag.html +#usr/share/doc/openssl/html/man3/EC_GROUP_set_curve_GF2m.html +#usr/share/doc/openssl/html/man3/EC_GROUP_set_curve_GFp.html +#usr/share/doc/openssl/html/man3/EC_GROUP_set_curve_name.html +#usr/share/doc/openssl/html/man3/EC_GROUP_set_generator.html +#usr/share/doc/openssl/html/man3/EC_GROUP_set_point_conversion_form.html +#usr/share/doc/openssl/html/man3/EC_GROUP_set_seed.html +#usr/share/doc/openssl/html/man3/EC_KEY_check_key.html +#usr/share/doc/openssl/html/man3/EC_KEY_clear_flags.html +#usr/share/doc/openssl/html/man3/EC_KEY_copy.html +#usr/share/doc/openssl/html/man3/EC_KEY_dup.html +#usr/share/doc/openssl/html/man3/EC_KEY_free.html +#usr/share/doc/openssl/html/man3/EC_KEY_generate_key.html +#usr/share/doc/openssl/html/man3/EC_KEY_get0_group.html +#usr/share/doc/openssl/html/man3/EC_KEY_get0_private_key.html +#usr/share/doc/openssl/html/man3/EC_KEY_get0_public_key.html +#usr/share/doc/openssl/html/man3/EC_KEY_get_conv_form.html +#usr/share/doc/openssl/html/man3/EC_KEY_get_enc_flags.html +#usr/share/doc/openssl/html/man3/EC_KEY_get_ex_data.html +#usr/share/doc/openssl/html/man3/EC_KEY_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/EC_KEY_get_flags.html +#usr/share/doc/openssl/html/man3/EC_KEY_get_method.html +#usr/share/doc/openssl/html/man3/EC_KEY_key2buf.html +#usr/share/doc/openssl/html/man3/EC_KEY_new.html +#usr/share/doc/openssl/html/man3/EC_KEY_new_by_curve_name.html +#usr/share/doc/openssl/html/man3/EC_KEY_oct2key.html +#usr/share/doc/openssl/html/man3/EC_KEY_oct2priv.html +#usr/share/doc/openssl/html/man3/EC_KEY_precompute_mult.html +#usr/share/doc/openssl/html/man3/EC_KEY_priv2buf.html +#usr/share/doc/openssl/html/man3/EC_KEY_priv2oct.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_asn1_flag.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_conv_form.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_enc_flags.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_ex_data.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_flags.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_group.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_method.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_private_key.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_public_key.html +#usr/share/doc/openssl/html/man3/EC_KEY_set_public_key_affine_coordinates.html +#usr/share/doc/openssl/html/man3/EC_KEY_up_ref.html +#usr/share/doc/openssl/html/man3/EC_METHOD_get_field_type.html +#usr/share/doc/openssl/html/man3/EC_POINT_add.html +#usr/share/doc/openssl/html/man3/EC_POINT_bn2point.html +#usr/share/doc/openssl/html/man3/EC_POINT_clear_free.html +#usr/share/doc/openssl/html/man3/EC_POINT_cmp.html +#usr/share/doc/openssl/html/man3/EC_POINT_copy.html +#usr/share/doc/openssl/html/man3/EC_POINT_dbl.html +#usr/share/doc/openssl/html/man3/EC_POINT_dup.html +#usr/share/doc/openssl/html/man3/EC_POINT_free.html +#usr/share/doc/openssl/html/man3/EC_POINT_get_Jprojective_coordinates_GFp.html +#usr/share/doc/openssl/html/man3/EC_POINT_get_affine_coordinates_GF2m.html +#usr/share/doc/openssl/html/man3/EC_POINT_get_affine_coordinates_GFp.html +#usr/share/doc/openssl/html/man3/EC_POINT_hex2point.html +#usr/share/doc/openssl/html/man3/EC_POINT_invert.html +#usr/share/doc/openssl/html/man3/EC_POINT_is_at_infinity.html +#usr/share/doc/openssl/html/man3/EC_POINT_is_on_curve.html +#usr/share/doc/openssl/html/man3/EC_POINT_make_affine.html +#usr/share/doc/openssl/html/man3/EC_POINT_method_of.html +#usr/share/doc/openssl/html/man3/EC_POINT_mul.html +#usr/share/doc/openssl/html/man3/EC_POINT_new.html +#usr/share/doc/openssl/html/man3/EC_POINT_oct2point.html +#usr/share/doc/openssl/html/man3/EC_POINT_point2bn.html +#usr/share/doc/openssl/html/man3/EC_POINT_point2buf.html +#usr/share/doc/openssl/html/man3/EC_POINT_point2hex.html +#usr/share/doc/openssl/html/man3/EC_POINT_point2oct.html +#usr/share/doc/openssl/html/man3/EC_POINT_set_Jprojective_coordinates_GFp.html +#usr/share/doc/openssl/html/man3/EC_POINT_set_affine_coordinates_GF2m.html +#usr/share/doc/openssl/html/man3/EC_POINT_set_affine_coordinates_GFp.html +#usr/share/doc/openssl/html/man3/EC_POINT_set_compressed_coordinates_GF2m.html +#usr/share/doc/openssl/html/man3/EC_POINT_set_compressed_coordinates_GFp.html +#usr/share/doc/openssl/html/man3/EC_POINT_set_to_infinity.html +#usr/share/doc/openssl/html/man3/EC_POINTs_make_affine.html +#usr/share/doc/openssl/html/man3/EC_POINTs_mul.html +#usr/share/doc/openssl/html/man3/EC_get_builtin_curves.html +#usr/share/doc/openssl/html/man3/EDIPARTYNAME_free.html +#usr/share/doc/openssl/html/man3/EDIPARTYNAME_new.html +#usr/share/doc/openssl/html/man3/ENGINE_add.html +#usr/share/doc/openssl/html/man3/ENGINE_add_conf_module.html +#usr/share/doc/openssl/html/man3/ENGINE_by_id.html +#usr/share/doc/openssl/html/man3/ENGINE_cleanup.html +#usr/share/doc/openssl/html/man3/ENGINE_cmd_is_executable.html +#usr/share/doc/openssl/html/man3/ENGINE_ctrl.html +#usr/share/doc/openssl/html/man3/ENGINE_ctrl_cmd.html +#usr/share/doc/openssl/html/man3/ENGINE_ctrl_cmd_string.html +#usr/share/doc/openssl/html/man3/ENGINE_finish.html +#usr/share/doc/openssl/html/man3/ENGINE_free.html +#usr/share/doc/openssl/html/man3/ENGINE_get_DH.html +#usr/share/doc/openssl/html/man3/ENGINE_get_DSA.html +#usr/share/doc/openssl/html/man3/ENGINE_get_ECDH.html +#usr/share/doc/openssl/html/man3/ENGINE_get_ECDSA.html +#usr/share/doc/openssl/html/man3/ENGINE_get_RAND.html +#usr/share/doc/openssl/html/man3/ENGINE_get_RSA.html +#usr/share/doc/openssl/html/man3/ENGINE_get_cipher.html +#usr/share/doc/openssl/html/man3/ENGINE_get_cipher_engine.html +#usr/share/doc/openssl/html/man3/ENGINE_get_ciphers.html +#usr/share/doc/openssl/html/man3/ENGINE_get_cmd_defns.html +#usr/share/doc/openssl/html/man3/ENGINE_get_ctrl_function.html +#usr/share/doc/openssl/html/man3/ENGINE_get_default_DH.html +#usr/share/doc/openssl/html/man3/ENGINE_get_default_DSA.html +#usr/share/doc/openssl/html/man3/ENGINE_get_default_ECDH.html +#usr/share/doc/openssl/html/man3/ENGINE_get_default_ECDSA.html +#usr/share/doc/openssl/html/man3/ENGINE_get_default_RAND.html +#usr/share/doc/openssl/html/man3/ENGINE_get_default_RSA.html +#usr/share/doc/openssl/html/man3/ENGINE_get_destroy_function.html +#usr/share/doc/openssl/html/man3/ENGINE_get_digest.html +#usr/share/doc/openssl/html/man3/ENGINE_get_digest_engine.html +#usr/share/doc/openssl/html/man3/ENGINE_get_digests.html +#usr/share/doc/openssl/html/man3/ENGINE_get_ex_data.html +#usr/share/doc/openssl/html/man3/ENGINE_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/ENGINE_get_finish_function.html +#usr/share/doc/openssl/html/man3/ENGINE_get_first.html +#usr/share/doc/openssl/html/man3/ENGINE_get_flags.html +#usr/share/doc/openssl/html/man3/ENGINE_get_id.html +#usr/share/doc/openssl/html/man3/ENGINE_get_init_function.html +#usr/share/doc/openssl/html/man3/ENGINE_get_last.html +#usr/share/doc/openssl/html/man3/ENGINE_get_load_privkey_function.html +#usr/share/doc/openssl/html/man3/ENGINE_get_load_pubkey_function.html +#usr/share/doc/openssl/html/man3/ENGINE_get_name.html +#usr/share/doc/openssl/html/man3/ENGINE_get_next.html +#usr/share/doc/openssl/html/man3/ENGINE_get_prev.html +#usr/share/doc/openssl/html/man3/ENGINE_get_table_flags.html +#usr/share/doc/openssl/html/man3/ENGINE_init.html +#usr/share/doc/openssl/html/man3/ENGINE_load_builtin_engines.html +#usr/share/doc/openssl/html/man3/ENGINE_load_private_key.html +#usr/share/doc/openssl/html/man3/ENGINE_load_public_key.html +#usr/share/doc/openssl/html/man3/ENGINE_new.html +#usr/share/doc/openssl/html/man3/ENGINE_register_DH.html +#usr/share/doc/openssl/html/man3/ENGINE_register_DSA.html +#usr/share/doc/openssl/html/man3/ENGINE_register_ECDH.html +#usr/share/doc/openssl/html/man3/ENGINE_register_ECDSA.html +#usr/share/doc/openssl/html/man3/ENGINE_register_RAND.html +#usr/share/doc/openssl/html/man3/ENGINE_register_RSA.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_DH.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_DSA.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_ECDH.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_ECDSA.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_RAND.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_RSA.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_ciphers.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_complete.html +#usr/share/doc/openssl/html/man3/ENGINE_register_all_digests.html +#usr/share/doc/openssl/html/man3/ENGINE_register_ciphers.html +#usr/share/doc/openssl/html/man3/ENGINE_register_complete.html +#usr/share/doc/openssl/html/man3/ENGINE_register_digests.html +#usr/share/doc/openssl/html/man3/ENGINE_remove.html +#usr/share/doc/openssl/html/man3/ENGINE_set_DH.html +#usr/share/doc/openssl/html/man3/ENGINE_set_DSA.html +#usr/share/doc/openssl/html/man3/ENGINE_set_ECDH.html +#usr/share/doc/openssl/html/man3/ENGINE_set_ECDSA.html +#usr/share/doc/openssl/html/man3/ENGINE_set_RAND.html +#usr/share/doc/openssl/html/man3/ENGINE_set_RSA.html +#usr/share/doc/openssl/html/man3/ENGINE_set_ciphers.html +#usr/share/doc/openssl/html/man3/ENGINE_set_cmd_defns.html +#usr/share/doc/openssl/html/man3/ENGINE_set_ctrl_function.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_DH.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_DSA.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_ECDH.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_ECDSA.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_RAND.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_RSA.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_ciphers.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_digests.html +#usr/share/doc/openssl/html/man3/ENGINE_set_default_string.html +#usr/share/doc/openssl/html/man3/ENGINE_set_destroy_function.html +#usr/share/doc/openssl/html/man3/ENGINE_set_digests.html +#usr/share/doc/openssl/html/man3/ENGINE_set_ex_data.html +#usr/share/doc/openssl/html/man3/ENGINE_set_finish_function.html +#usr/share/doc/openssl/html/man3/ENGINE_set_flags.html +#usr/share/doc/openssl/html/man3/ENGINE_set_id.html +#usr/share/doc/openssl/html/man3/ENGINE_set_init_function.html +#usr/share/doc/openssl/html/man3/ENGINE_set_load_privkey_function.html +#usr/share/doc/openssl/html/man3/ENGINE_set_load_pubkey_function.html +#usr/share/doc/openssl/html/man3/ENGINE_set_name.html +#usr/share/doc/openssl/html/man3/ENGINE_set_table_flags.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_DH.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_DSA.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_ECDH.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_ECDSA.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_RAND.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_RSA.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_ciphers.html +#usr/share/doc/openssl/html/man3/ENGINE_unregister_digests.html +#usr/share/doc/openssl/html/man3/ENGINE_up_ref.html +#usr/share/doc/openssl/html/man3/ERR_FATAL_ERROR.html +#usr/share/doc/openssl/html/man3/ERR_GET_FUNC.html +#usr/share/doc/openssl/html/man3/ERR_GET_LIB.html +#usr/share/doc/openssl/html/man3/ERR_GET_REASON.html +#usr/share/doc/openssl/html/man3/ERR_PACK.html +#usr/share/doc/openssl/html/man3/ERR_add_error_data.html +#usr/share/doc/openssl/html/man3/ERR_clear_error.html +#usr/share/doc/openssl/html/man3/ERR_error_string.html +#usr/share/doc/openssl/html/man3/ERR_error_string_n.html +#usr/share/doc/openssl/html/man3/ERR_free_strings.html +#usr/share/doc/openssl/html/man3/ERR_func_error_string.html +#usr/share/doc/openssl/html/man3/ERR_get_error.html +#usr/share/doc/openssl/html/man3/ERR_get_error_line.html +#usr/share/doc/openssl/html/man3/ERR_get_error_line_data.html +#usr/share/doc/openssl/html/man3/ERR_get_next_error_library.html +#usr/share/doc/openssl/html/man3/ERR_lib_error_string.html +#usr/share/doc/openssl/html/man3/ERR_load_crypto_strings.html +#usr/share/doc/openssl/html/man3/ERR_load_strings.html +#usr/share/doc/openssl/html/man3/ERR_peek_error.html +#usr/share/doc/openssl/html/man3/ERR_peek_error_line.html +#usr/share/doc/openssl/html/man3/ERR_peek_error_line_data.html +#usr/share/doc/openssl/html/man3/ERR_peek_last_error.html +#usr/share/doc/openssl/html/man3/ERR_peek_last_error_line.html +#usr/share/doc/openssl/html/man3/ERR_peek_last_error_line_data.html +#usr/share/doc/openssl/html/man3/ERR_pop_to_mark.html +#usr/share/doc/openssl/html/man3/ERR_print_errors.html +#usr/share/doc/openssl/html/man3/ERR_print_errors_cb.html +#usr/share/doc/openssl/html/man3/ERR_print_errors_fp.html +#usr/share/doc/openssl/html/man3/ERR_put_error.html +#usr/share/doc/openssl/html/man3/ERR_reason_error_string.html +#usr/share/doc/openssl/html/man3/ERR_remove_state.html +#usr/share/doc/openssl/html/man3/ERR_remove_thread_state.html +#usr/share/doc/openssl/html/man3/ERR_set_mark.html +#usr/share/doc/openssl/html/man3/ESS_CERT_ID_dup.html +#usr/share/doc/openssl/html/man3/ESS_CERT_ID_free.html +#usr/share/doc/openssl/html/man3/ESS_CERT_ID_new.html +#usr/share/doc/openssl/html/man3/ESS_ISSUER_SERIAL_dup.html +#usr/share/doc/openssl/html/man3/ESS_ISSUER_SERIAL_free.html +#usr/share/doc/openssl/html/man3/ESS_ISSUER_SERIAL_new.html +#usr/share/doc/openssl/html/man3/ESS_SIGNING_CERT_dup.html +#usr/share/doc/openssl/html/man3/ESS_SIGNING_CERT_free.html +#usr/share/doc/openssl/html/man3/ESS_SIGNING_CERT_new.html +#usr/share/doc/openssl/html/man3/EVP_BytesToKey.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_block_size.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_cipher.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_ctrl.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_flags.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_free.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_get_app_data.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_get_cipher_data.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_iv_length.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_key_length.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_mode.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_new.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_nid.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_reset.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_set_app_data.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_set_cipher_data.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_set_key_length.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_set_padding.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_CTX_type.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_asn1_to_param.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_block_size.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_flags.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_iv_length.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_key_length.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_dup.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_free.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_get_cleanup.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_get_ctrl.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_get_do_cipher.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_get_get_asn1_params.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_get_init.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_get_set_asn1_params.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_new.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_cleanup.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_ctrl.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_do_cipher.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_flags.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_get_asn1_params.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_impl_ctx_size.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_init.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_iv_length.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_meth_set_set_asn1_params.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_mode.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_nid.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_param_to_asn1.html +#usr/share/doc/openssl/html/man3/EVP_CIPHER_type.html +#usr/share/doc/openssl/html/man3/EVP_CipherFinal.html +#usr/share/doc/openssl/html/man3/EVP_CipherFinal_ex.html +#usr/share/doc/openssl/html/man3/EVP_CipherInit.html +#usr/share/doc/openssl/html/man3/EVP_CipherInit_ex.html +#usr/share/doc/openssl/html/man3/EVP_CipherUpdate.html +#usr/share/doc/openssl/html/man3/EVP_DecodeBlock.html +#usr/share/doc/openssl/html/man3/EVP_DecodeFinal.html +#usr/share/doc/openssl/html/man3/EVP_DecodeInit.html +#usr/share/doc/openssl/html/man3/EVP_DecodeUpdate.html +#usr/share/doc/openssl/html/man3/EVP_DecryptFinal.html +#usr/share/doc/openssl/html/man3/EVP_DecryptFinal_ex.html +#usr/share/doc/openssl/html/man3/EVP_DecryptInit.html +#usr/share/doc/openssl/html/man3/EVP_DecryptInit_ex.html +#usr/share/doc/openssl/html/man3/EVP_DecryptUpdate.html +#usr/share/doc/openssl/html/man3/EVP_DigestFinal.html +#usr/share/doc/openssl/html/man3/EVP_DigestFinal_ex.html +#usr/share/doc/openssl/html/man3/EVP_DigestInit.html +#usr/share/doc/openssl/html/man3/EVP_DigestInit_ex.html +#usr/share/doc/openssl/html/man3/EVP_DigestSignFinal.html +#usr/share/doc/openssl/html/man3/EVP_DigestSignInit.html +#usr/share/doc/openssl/html/man3/EVP_DigestSignUpdate.html +#usr/share/doc/openssl/html/man3/EVP_DigestUpdate.html +#usr/share/doc/openssl/html/man3/EVP_DigestVerifyFinal.html +#usr/share/doc/openssl/html/man3/EVP_DigestVerifyInit.html +#usr/share/doc/openssl/html/man3/EVP_DigestVerifyUpdate.html +#usr/share/doc/openssl/html/man3/EVP_ENCODE_CTX_copy.html +#usr/share/doc/openssl/html/man3/EVP_ENCODE_CTX_free.html +#usr/share/doc/openssl/html/man3/EVP_ENCODE_CTX_new.html +#usr/share/doc/openssl/html/man3/EVP_ENCODE_CTX_num.html +#usr/share/doc/openssl/html/man3/EVP_EncodeBlock.html +#usr/share/doc/openssl/html/man3/EVP_EncodeFinal.html +#usr/share/doc/openssl/html/man3/EVP_EncodeInit.html +#usr/share/doc/openssl/html/man3/EVP_EncodeUpdate.html +#usr/share/doc/openssl/html/man3/EVP_EncryptFinal.html +#usr/share/doc/openssl/html/man3/EVP_EncryptFinal_ex.html +#usr/share/doc/openssl/html/man3/EVP_EncryptInit.html +#usr/share/doc/openssl/html/man3/EVP_EncryptInit_ex.html +#usr/share/doc/openssl/html/man3/EVP_EncryptUpdate.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_block_size.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_copy.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_copy_ex.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_free.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_md.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_md_data.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_new.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_reset.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_size.html +#usr/share/doc/openssl/html/man3/EVP_MD_CTX_type.html +#usr/share/doc/openssl/html/man3/EVP_MD_block_size.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_dup.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_free.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_app_datasize.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_cleanup.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_copy.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_ctrl.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_final.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_flags.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_init.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_input_blocksize.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_result_size.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_get_update.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_new.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_app_datasize.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_cleanup.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_copy.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_ctrl.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_final.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_flags.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_init.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_input_blocksize.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_result_size.html +#usr/share/doc/openssl/html/man3/EVP_MD_meth_set_update.html +#usr/share/doc/openssl/html/man3/EVP_MD_pkey_type.html +#usr/share/doc/openssl/html/man3/EVP_MD_size.html +#usr/share/doc/openssl/html/man3/EVP_MD_type.html +#usr/share/doc/openssl/html/man3/EVP_OpenFinal.html +#usr/share/doc/openssl/html/man3/EVP_OpenInit.html +#usr/share/doc/openssl/html/man3/EVP_OpenUpdate.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_ASN1_METHOD.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_add1_hkdf_info.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_add1_tls1_prf_seed.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_ctrl.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_ctrl_str.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_dup.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_free.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_get_app_data.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_get_cb.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_get_keygen_info.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_new.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_new_id.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set1_hkdf_key.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set1_hkdf_salt.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set1_tls1_prf_secret.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_app_data.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_cb.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_dh_paramgen_generator.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_dh_paramgen_prime_len.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_dsa_paramgen_bits.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_ec_param_enc.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_ec_paramgen_curve_nid.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_hkdf_md.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_rsa_keygen_pubexp.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_rsa_padding.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_rsa_pss_saltlen.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_rsa_rsa_keygen_bits.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_signature_md.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_CTX_set_tls1_prf_md.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_add0.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_add_alias.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_copy.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_find.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_find_str.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_free.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_get0.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_get0_info.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_get_count.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_new.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_set_ctrl.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_set_free.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_set_item.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_set_param.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_set_private.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_set_public.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_asn1_set_security_bits.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_assign_DH.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_assign_DSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_assign_EC_KEY.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_assign_RSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_base_id.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_cmp.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_cmp_parameters.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_copy_parameters.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_decrypt.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_decrypt_init.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_derive.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_derive_init.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_derive_set_peer.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_encrypt.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_encrypt_init.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_free.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_gen_cb.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get0_DH.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get0_DSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get0_EC_KEY.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get0_RSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get0_asn1.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get0_hmac.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get1_DH.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get1_DSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get1_EC_KEY.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get1_RSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_get_default_digest_nid.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_id.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_keygen.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_keygen_init.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_missing_parameters.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_new.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_paramgen.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_paramgen_init.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_print_params.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_print_private.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_print_public.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_set1_DH.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_set1_DSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_set1_EC_KEY.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_set1_RSA.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_set1_engine.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_sign.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_sign_init.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_size.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_type.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_up_ref.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_verify.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_verify_init.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_verify_recover.html +#usr/share/doc/openssl/html/man3/EVP_PKEY_verify_recover_init.html +#usr/share/doc/openssl/html/man3/EVP_SealFinal.html +#usr/share/doc/openssl/html/man3/EVP_SealInit.html +#usr/share/doc/openssl/html/man3/EVP_SealUpdate.html +#usr/share/doc/openssl/html/man3/EVP_SignFinal.html +#usr/share/doc/openssl/html/man3/EVP_SignInit.html +#usr/share/doc/openssl/html/man3/EVP_SignInit_ex.html +#usr/share/doc/openssl/html/man3/EVP_SignUpdate.html +#usr/share/doc/openssl/html/man3/EVP_VerifyFinal.html +#usr/share/doc/openssl/html/man3/EVP_VerifyInit.html +#usr/share/doc/openssl/html/man3/EVP_VerifyInit_ex.html +#usr/share/doc/openssl/html/man3/EVP_VerifyUpdate.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_cbc.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_cbc_hmac_sha1.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_cbc_hmac_sha256.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_ccm.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_cfb.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_ecb.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_gcm.html +#usr/share/doc/openssl/html/man3/EVP_aes_128_ofb.html +#usr/share/doc/openssl/html/man3/EVP_aes_192_cbc.html +#usr/share/doc/openssl/html/man3/EVP_aes_192_ccm.html +#usr/share/doc/openssl/html/man3/EVP_aes_192_cfb.html +#usr/share/doc/openssl/html/man3/EVP_aes_192_ecb.html +#usr/share/doc/openssl/html/man3/EVP_aes_192_gcm.html +#usr/share/doc/openssl/html/man3/EVP_aes_192_ofb.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_cbc.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_cbc_hmac_sha1.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_cbc_hmac_sha256.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_ccm.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_cfb.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_ecb.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_gcm.html +#usr/share/doc/openssl/html/man3/EVP_aes_256_ofb.html +#usr/share/doc/openssl/html/man3/EVP_bf_cbc.html +#usr/share/doc/openssl/html/man3/EVP_bf_cfb.html +#usr/share/doc/openssl/html/man3/EVP_bf_ecb.html +#usr/share/doc/openssl/html/man3/EVP_bf_ofb.html +#usr/share/doc/openssl/html/man3/EVP_blake2b512.html +#usr/share/doc/openssl/html/man3/EVP_blake2s256.html +#usr/share/doc/openssl/html/man3/EVP_cast5_cbc.html +#usr/share/doc/openssl/html/man3/EVP_cast5_cfb.html +#usr/share/doc/openssl/html/man3/EVP_cast5_ecb.html +#usr/share/doc/openssl/html/man3/EVP_cast5_ofb.html +#usr/share/doc/openssl/html/man3/EVP_chacha20.html +#usr/share/doc/openssl/html/man3/EVP_chacha20_poly1305.html +#usr/share/doc/openssl/html/man3/EVP_cleanup.html +#usr/share/doc/openssl/html/man3/EVP_des_cbc.html +#usr/share/doc/openssl/html/man3/EVP_des_cfb.html +#usr/share/doc/openssl/html/man3/EVP_des_ecb.html +#usr/share/doc/openssl/html/man3/EVP_des_ede.html +#usr/share/doc/openssl/html/man3/EVP_des_ede3.html +#usr/share/doc/openssl/html/man3/EVP_des_ede3_cbc.html +#usr/share/doc/openssl/html/man3/EVP_des_ede3_cfb.html +#usr/share/doc/openssl/html/man3/EVP_des_ede3_ofb.html +#usr/share/doc/openssl/html/man3/EVP_des_ede_cbc.html +#usr/share/doc/openssl/html/man3/EVP_des_ede_cfb.html +#usr/share/doc/openssl/html/man3/EVP_des_ede_ofb.html +#usr/share/doc/openssl/html/man3/EVP_des_ofb.html +#usr/share/doc/openssl/html/man3/EVP_desx_cbc.html +#usr/share/doc/openssl/html/man3/EVP_enc_null.html +#usr/share/doc/openssl/html/man3/EVP_get_cipherbyname.html +#usr/share/doc/openssl/html/man3/EVP_get_cipherbynid.html +#usr/share/doc/openssl/html/man3/EVP_get_cipherbyobj.html +#usr/share/doc/openssl/html/man3/EVP_get_digestbyname.html +#usr/share/doc/openssl/html/man3/EVP_get_digestbynid.html +#usr/share/doc/openssl/html/man3/EVP_get_digestbyobj.html +#usr/share/doc/openssl/html/man3/EVP_idea_cbc.html +#usr/share/doc/openssl/html/man3/EVP_idea_cfb.html +#usr/share/doc/openssl/html/man3/EVP_idea_ecb.html +#usr/share/doc/openssl/html/man3/EVP_idea_ofb.html +#usr/share/doc/openssl/html/man3/EVP_md2.html +#usr/share/doc/openssl/html/man3/EVP_md5.html +#usr/share/doc/openssl/html/man3/EVP_md_null.html +#usr/share/doc/openssl/html/man3/EVP_mdc2.html +#usr/share/doc/openssl/html/man3/EVP_rc2_40_cbc.html +#usr/share/doc/openssl/html/man3/EVP_rc2_64_cbc.html +#usr/share/doc/openssl/html/man3/EVP_rc2_cbc.html +#usr/share/doc/openssl/html/man3/EVP_rc2_cfb.html +#usr/share/doc/openssl/html/man3/EVP_rc2_ecb.html +#usr/share/doc/openssl/html/man3/EVP_rc2_ofb.html +#usr/share/doc/openssl/html/man3/EVP_rc4.html +#usr/share/doc/openssl/html/man3/EVP_rc4_40.html +#usr/share/doc/openssl/html/man3/EVP_rc4_hmac_md5.html +#usr/share/doc/openssl/html/man3/EVP_rc5_32_12_16_cbc.html +#usr/share/doc/openssl/html/man3/EVP_rc5_32_12_16_cfb.html +#usr/share/doc/openssl/html/man3/EVP_rc5_32_12_16_ecb.html +#usr/share/doc/openssl/html/man3/EVP_rc5_32_12_16_ofb.html +#usr/share/doc/openssl/html/man3/EVP_ripemd160.html +#usr/share/doc/openssl/html/man3/EVP_sha1.html +#usr/share/doc/openssl/html/man3/EVP_sha224.html +#usr/share/doc/openssl/html/man3/EVP_sha256.html +#usr/share/doc/openssl/html/man3/EVP_sha384.html +#usr/share/doc/openssl/html/man3/EVP_sha512.html +#usr/share/doc/openssl/html/man3/EXTENDED_KEY_USAGE_free.html +#usr/share/doc/openssl/html/man3/EXTENDED_KEY_USAGE_new.html +#usr/share/doc/openssl/html/man3/GENERAL_NAMES_free.html +#usr/share/doc/openssl/html/man3/GENERAL_NAMES_new.html +#usr/share/doc/openssl/html/man3/GENERAL_NAME_dup.html +#usr/share/doc/openssl/html/man3/GENERAL_NAME_free.html +#usr/share/doc/openssl/html/man3/GENERAL_NAME_new.html +#usr/share/doc/openssl/html/man3/GENERAL_SUBTREE_free.html +#usr/share/doc/openssl/html/man3/GENERAL_SUBTREE_new.html +#usr/share/doc/openssl/html/man3/GEN_SESSION_CB.html +#usr/share/doc/openssl/html/man3/HMAC.html +#usr/share/doc/openssl/html/man3/HMAC_CTX_copy.html +#usr/share/doc/openssl/html/man3/HMAC_CTX_free.html +#usr/share/doc/openssl/html/man3/HMAC_CTX_get_md.html +#usr/share/doc/openssl/html/man3/HMAC_CTX_new.html +#usr/share/doc/openssl/html/man3/HMAC_CTX_reset.html +#usr/share/doc/openssl/html/man3/HMAC_CTX_set_flags.html +#usr/share/doc/openssl/html/man3/HMAC_Final.html +#usr/share/doc/openssl/html/man3/HMAC_Init.html +#usr/share/doc/openssl/html/man3/HMAC_Init_ex.html +#usr/share/doc/openssl/html/man3/HMAC_Update.html +#usr/share/doc/openssl/html/man3/IMPLEMENT_ASN1_FUNCTIONS.html +#usr/share/doc/openssl/html/man3/IMPLEMENT_LHASH_COMP_FN.html +#usr/share/doc/openssl/html/man3/IMPLEMENT_LHASH_HASH_FN.html +#usr/share/doc/openssl/html/man3/IPAddressChoice_free.html +#usr/share/doc/openssl/html/man3/IPAddressChoice_new.html +#usr/share/doc/openssl/html/man3/IPAddressFamily_free.html +#usr/share/doc/openssl/html/man3/IPAddressFamily_new.html +#usr/share/doc/openssl/html/man3/IPAddressOrRange_free.html +#usr/share/doc/openssl/html/man3/IPAddressOrRange_new.html +#usr/share/doc/openssl/html/man3/IPAddressRange_free.html +#usr/share/doc/openssl/html/man3/IPAddressRange_new.html +#usr/share/doc/openssl/html/man3/ISSUING_DIST_POINT_free.html +#usr/share/doc/openssl/html/man3/ISSUING_DIST_POINT_new.html +#usr/share/doc/openssl/html/man3/LHASH_DOALL_ARG_FN_TYPE.html +#usr/share/doc/openssl/html/man3/MD2.html +#usr/share/doc/openssl/html/man3/MD2_Final.html +#usr/share/doc/openssl/html/man3/MD2_Init.html +#usr/share/doc/openssl/html/man3/MD2_Update.html +#usr/share/doc/openssl/html/man3/MD4.html +#usr/share/doc/openssl/html/man3/MD4_Final.html +#usr/share/doc/openssl/html/man3/MD4_Init.html +#usr/share/doc/openssl/html/man3/MD4_Update.html +#usr/share/doc/openssl/html/man3/MD5.html +#usr/share/doc/openssl/html/man3/MD5_Final.html +#usr/share/doc/openssl/html/man3/MD5_Init.html +#usr/share/doc/openssl/html/man3/MD5_Update.html +#usr/share/doc/openssl/html/man3/MDC2.html +#usr/share/doc/openssl/html/man3/MDC2_Final.html +#usr/share/doc/openssl/html/man3/MDC2_Init.html +#usr/share/doc/openssl/html/man3/MDC2_Update.html +#usr/share/doc/openssl/html/man3/NAME_CONSTRAINTS_free.html +#usr/share/doc/openssl/html/man3/NAME_CONSTRAINTS_new.html +#usr/share/doc/openssl/html/man3/NETSCAPE_CERT_SEQUENCE_free.html +#usr/share/doc/openssl/html/man3/NETSCAPE_CERT_SEQUENCE_new.html +#usr/share/doc/openssl/html/man3/NETSCAPE_SPKAC_free.html +#usr/share/doc/openssl/html/man3/NETSCAPE_SPKAC_new.html +#usr/share/doc/openssl/html/man3/NETSCAPE_SPKI_free.html +#usr/share/doc/openssl/html/man3/NETSCAPE_SPKI_new.html +#usr/share/doc/openssl/html/man3/NOTICEREF_free.html +#usr/share/doc/openssl/html/man3/NOTICEREF_new.html +#usr/share/doc/openssl/html/man3/OBJ_cleanup.html +#usr/share/doc/openssl/html/man3/OBJ_cmp.html +#usr/share/doc/openssl/html/man3/OBJ_create.html +#usr/share/doc/openssl/html/man3/OBJ_dup.html +#usr/share/doc/openssl/html/man3/OBJ_get0_data.html +#usr/share/doc/openssl/html/man3/OBJ_length.html +#usr/share/doc/openssl/html/man3/OBJ_ln2nid.html +#usr/share/doc/openssl/html/man3/OBJ_nid2ln.html +#usr/share/doc/openssl/html/man3/OBJ_nid2obj.html +#usr/share/doc/openssl/html/man3/OBJ_nid2sn.html +#usr/share/doc/openssl/html/man3/OBJ_obj2nid.html +#usr/share/doc/openssl/html/man3/OBJ_obj2txt.html +#usr/share/doc/openssl/html/man3/OBJ_sn2nid.html +#usr/share/doc/openssl/html/man3/OBJ_txt2nid.html +#usr/share/doc/openssl/html/man3/OBJ_txt2obj.html +#usr/share/doc/openssl/html/man3/OCSP_BASICRESP_free.html +#usr/share/doc/openssl/html/man3/OCSP_BASICRESP_new.html +#usr/share/doc/openssl/html/man3/OCSP_CERTID_dup.html +#usr/share/doc/openssl/html/man3/OCSP_CERTID_free.html +#usr/share/doc/openssl/html/man3/OCSP_CERTID_new.html +#usr/share/doc/openssl/html/man3/OCSP_CERTSTATUS_free.html +#usr/share/doc/openssl/html/man3/OCSP_CERTSTATUS_new.html +#usr/share/doc/openssl/html/man3/OCSP_CRLID_free.html +#usr/share/doc/openssl/html/man3/OCSP_CRLID_new.html +#usr/share/doc/openssl/html/man3/OCSP_ONEREQ_free.html +#usr/share/doc/openssl/html/man3/OCSP_ONEREQ_new.html +#usr/share/doc/openssl/html/man3/OCSP_REQINFO_free.html +#usr/share/doc/openssl/html/man3/OCSP_REQINFO_new.html +#usr/share/doc/openssl/html/man3/OCSP_REQUEST_free.html +#usr/share/doc/openssl/html/man3/OCSP_REQUEST_new.html +#usr/share/doc/openssl/html/man3/OCSP_REQ_CTX_add1_header.html +#usr/share/doc/openssl/html/man3/OCSP_REQ_CTX_free.html +#usr/share/doc/openssl/html/man3/OCSP_REQ_CTX_set1_req.html +#usr/share/doc/openssl/html/man3/OCSP_RESPBYTES_free.html +#usr/share/doc/openssl/html/man3/OCSP_RESPBYTES_new.html +#usr/share/doc/openssl/html/man3/OCSP_RESPDATA_free.html +#usr/share/doc/openssl/html/man3/OCSP_RESPDATA_new.html +#usr/share/doc/openssl/html/man3/OCSP_RESPID_free.html +#usr/share/doc/openssl/html/man3/OCSP_RESPID_match.html +#usr/share/doc/openssl/html/man3/OCSP_RESPID_new.html +#usr/share/doc/openssl/html/man3/OCSP_RESPID_set_by_key.html +#usr/share/doc/openssl/html/man3/OCSP_RESPID_set_by_name.html +#usr/share/doc/openssl/html/man3/OCSP_RESPONSE_free.html +#usr/share/doc/openssl/html/man3/OCSP_RESPONSE_new.html +#usr/share/doc/openssl/html/man3/OCSP_REVOKEDINFO_free.html +#usr/share/doc/openssl/html/man3/OCSP_REVOKEDINFO_new.html +#usr/share/doc/openssl/html/man3/OCSP_SERVICELOC_free.html +#usr/share/doc/openssl/html/man3/OCSP_SERVICELOC_new.html +#usr/share/doc/openssl/html/man3/OCSP_SIGNATURE_free.html +#usr/share/doc/openssl/html/man3/OCSP_SIGNATURE_new.html +#usr/share/doc/openssl/html/man3/OCSP_SINGLERESP_free.html +#usr/share/doc/openssl/html/man3/OCSP_SINGLERESP_new.html +#usr/share/doc/openssl/html/man3/OCSP_basic_add1_nonce.html +#usr/share/doc/openssl/html/man3/OCSP_cert_id_new.html +#usr/share/doc/openssl/html/man3/OCSP_cert_to_id.html +#usr/share/doc/openssl/html/man3/OCSP_check_nonce.html +#usr/share/doc/openssl/html/man3/OCSP_check_validity.html +#usr/share/doc/openssl/html/man3/OCSP_copy_nonce.html +#usr/share/doc/openssl/html/man3/OCSP_id_cmp.html +#usr/share/doc/openssl/html/man3/OCSP_id_get0_info.html +#usr/share/doc/openssl/html/man3/OCSP_id_issuer_cmp.html +#usr/share/doc/openssl/html/man3/OCSP_request_add0_id.html +#usr/share/doc/openssl/html/man3/OCSP_request_add1_cert.html +#usr/share/doc/openssl/html/man3/OCSP_request_add1_nonce.html +#usr/share/doc/openssl/html/man3/OCSP_request_onereq_count.html +#usr/share/doc/openssl/html/man3/OCSP_request_onereq_get0.html +#usr/share/doc/openssl/html/man3/OCSP_request_sign.html +#usr/share/doc/openssl/html/man3/OCSP_resp_count.html +#usr/share/doc/openssl/html/man3/OCSP_resp_find.html +#usr/share/doc/openssl/html/man3/OCSP_resp_find_status.html +#usr/share/doc/openssl/html/man3/OCSP_resp_get0.html +#usr/share/doc/openssl/html/man3/OCSP_resp_get0_certs.html +#usr/share/doc/openssl/html/man3/OCSP_resp_get0_id.html +#usr/share/doc/openssl/html/man3/OCSP_resp_get0_produced_at.html +#usr/share/doc/openssl/html/man3/OCSP_response_create.html +#usr/share/doc/openssl/html/man3/OCSP_response_get1_basic.html +#usr/share/doc/openssl/html/man3/OCSP_response_status.html +#usr/share/doc/openssl/html/man3/OCSP_sendreq_bio.html +#usr/share/doc/openssl/html/man3/OCSP_sendreq_nbio.html +#usr/share/doc/openssl/html/man3/OCSP_sendreq_new.html +#usr/share/doc/openssl/html/man3/OCSP_set_max_response_length.html +#usr/share/doc/openssl/html/man3/OCSP_single_get0_status.html +#usr/share/doc/openssl/html/man3/OPENSSL_Applink.html +#usr/share/doc/openssl/html/man3/OPENSSL_INIT_free.html +#usr/share/doc/openssl/html/man3/OPENSSL_INIT_set_config_appname.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_COMPFUNC.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_DOALL_FUNC.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_HASHFUNC.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_node_stats.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_node_stats_bio.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_node_usage_stats.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_node_usage_stats_bio.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_stats.html +#usr/share/doc/openssl/html/man3/OPENSSL_LH_stats_bio.html +#usr/share/doc/openssl/html/man3/OPENSSL_VERSION_NUMBER.html +#usr/share/doc/openssl/html/man3/OPENSSL_atexit.html +#usr/share/doc/openssl/html/man3/OPENSSL_buf2hexstr.html +#usr/share/doc/openssl/html/man3/OPENSSL_cleanse.html +#usr/share/doc/openssl/html/man3/OPENSSL_cleanup.html +#usr/share/doc/openssl/html/man3/OPENSSL_clear_free.html +#usr/share/doc/openssl/html/man3/OPENSSL_clear_realloc.html +#usr/share/doc/openssl/html/man3/OPENSSL_config.html +#usr/share/doc/openssl/html/man3/OPENSSL_free.html +#usr/share/doc/openssl/html/man3/OPENSSL_hexchar2int.html +#usr/share/doc/openssl/html/man3/OPENSSL_hexstr2buf.html +#usr/share/doc/openssl/html/man3/OPENSSL_ia32cap.html +#usr/share/doc/openssl/html/man3/OPENSSL_init_crypto.html +#usr/share/doc/openssl/html/man3/OPENSSL_init_new.html +#usr/share/doc/openssl/html/man3/OPENSSL_init_ssl.html +#usr/share/doc/openssl/html/man3/OPENSSL_instrument_bus.html +#usr/share/doc/openssl/html/man3/OPENSSL_instrument_bus2.html +#usr/share/doc/openssl/html/man3/OPENSSL_load_builtin_modules.html +#usr/share/doc/openssl/html/man3/OPENSSL_malloc.html +#usr/share/doc/openssl/html/man3/OPENSSL_malloc_init.html +#usr/share/doc/openssl/html/man3/OPENSSL_mem_debug_pop.html +#usr/share/doc/openssl/html/man3/OPENSSL_mem_debug_push.html +#usr/share/doc/openssl/html/man3/OPENSSL_memdup.html +#usr/share/doc/openssl/html/man3/OPENSSL_no_config.html +#usr/share/doc/openssl/html/man3/OPENSSL_realloc.html +#usr/share/doc/openssl/html/man3/OPENSSL_secure_actual_size.html +#usr/share/doc/openssl/html/man3/OPENSSL_secure_allocated.html +#usr/share/doc/openssl/html/man3/OPENSSL_secure_clear_free.html +#usr/share/doc/openssl/html/man3/OPENSSL_secure_free.html +#usr/share/doc/openssl/html/man3/OPENSSL_secure_malloc.html +#usr/share/doc/openssl/html/man3/OPENSSL_secure_zalloc.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_deep_copy.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_delete.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_delete_ptr.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_dup.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_find.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_find_ex.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_free.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_insert.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_is_sorted.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_new.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_new_null.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_num.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_pop.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_pop_free.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_push.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_set.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_set_cmp_func.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_shift.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_sort.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_unshift.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_value.html +#usr/share/doc/openssl/html/man3/OPENSSL_sk_zero.html +#usr/share/doc/openssl/html/man3/OPENSSL_strdup.html +#usr/share/doc/openssl/html/man3/OPENSSL_strlcat.html +#usr/share/doc/openssl/html/man3/OPENSSL_strlcpy.html +#usr/share/doc/openssl/html/man3/OPENSSL_strndup.html +#usr/share/doc/openssl/html/man3/OPENSSL_thread_stop.html +#usr/share/doc/openssl/html/man3/OPENSSL_zalloc.html +#usr/share/doc/openssl/html/man3/OTHERNAME_free.html +#usr/share/doc/openssl/html/man3/OTHERNAME_new.html +#usr/share/doc/openssl/html/man3/OpenSSL_add_all_algorithms.html +#usr/share/doc/openssl/html/man3/OpenSSL_add_all_ciphers.html +#usr/share/doc/openssl/html/man3/OpenSSL_add_all_digests.html +#usr/share/doc/openssl/html/man3/OpenSSL_add_ssl_algorithms.html +#usr/share/doc/openssl/html/man3/OpenSSL_version.html +#usr/share/doc/openssl/html/man3/OpenSSL_version_num.html +#usr/share/doc/openssl/html/man3/PBE2PARAM_free.html +#usr/share/doc/openssl/html/man3/PBE2PARAM_new.html +#usr/share/doc/openssl/html/man3/PBEPARAM_free.html +#usr/share/doc/openssl/html/man3/PBEPARAM_new.html +#usr/share/doc/openssl/html/man3/PBKDF2PARAM_free.html +#usr/share/doc/openssl/html/man3/PBKDF2PARAM_new.html +#usr/share/doc/openssl/html/man3/PEM_do_header.html +#usr/share/doc/openssl/html/man3/PEM_get_EVP_CIPHER_INFO.html +#usr/share/doc/openssl/html/man3/PEM_read.html +#usr/share/doc/openssl/html/man3/PEM_read_CMS.html +#usr/share/doc/openssl/html/man3/PEM_read_DHparams.html +#usr/share/doc/openssl/html/man3/PEM_read_DSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_read_DSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_DSAparams.html +#usr/share/doc/openssl/html/man3/PEM_read_ECPKParameters.html +#usr/share/doc/openssl/html/man3/PEM_read_ECPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_read_EC_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_NETSCAPE_CERT_SEQUENCE.html +#usr/share/doc/openssl/html/man3/PEM_read_PKCS7.html +#usr/share/doc/openssl/html/man3/PEM_read_PKCS8.html +#usr/share/doc/openssl/html/man3/PEM_read_PKCS8_PRIV_KEY_INFO.html +#usr/share/doc/openssl/html/man3/PEM_read_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_PrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_read_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_read_RSAPublicKey.html +#usr/share/doc/openssl/html/man3/PEM_read_RSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_SSL_SESSION.html +#usr/share/doc/openssl/html/man3/PEM_read_X509.html +#usr/share/doc/openssl/html/man3/PEM_read_X509_AUX.html +#usr/share/doc/openssl/html/man3/PEM_read_X509_CRL.html +#usr/share/doc/openssl/html/man3/PEM_read_X509_REQ.html +#usr/share/doc/openssl/html/man3/PEM_read_bio.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_CMS.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_DHparams.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_DSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_DSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_DSAparams.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_ECPKParameters.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_EC_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_NETSCAPE_CERT_SEQUENCE.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_PKCS7.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_PKCS8.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_PKCS8_PRIV_KEY_INFO.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_PrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_RSAPublicKey.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_RSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_SSL_SESSION.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_X509.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_X509_AUX.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_X509_CRL.html +#usr/share/doc/openssl/html/man3/PEM_read_bio_X509_REQ.html +#usr/share/doc/openssl/html/man3/PEM_write.html +#usr/share/doc/openssl/html/man3/PEM_write_CMS.html +#usr/share/doc/openssl/html/man3/PEM_write_DHparams.html +#usr/share/doc/openssl/html/man3/PEM_write_DHxparams.html +#usr/share/doc/openssl/html/man3/PEM_write_DSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_DSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_DSAparams.html +#usr/share/doc/openssl/html/man3/PEM_write_ECPKParameters.html +#usr/share/doc/openssl/html/man3/PEM_write_ECPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_EC_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_NETSCAPE_CERT_SEQUENCE.html +#usr/share/doc/openssl/html/man3/PEM_write_PKCS7.html +#usr/share/doc/openssl/html/man3/PEM_write_PKCS8.html +#usr/share/doc/openssl/html/man3/PEM_write_PKCS8PrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_PKCS8PrivateKey_nid.html +#usr/share/doc/openssl/html/man3/PEM_write_PKCS8_PRIV_KEY_INFO.html +#usr/share/doc/openssl/html/man3/PEM_write_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_PrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_RSAPublicKey.html +#usr/share/doc/openssl/html/man3/PEM_write_RSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_SSL_SESSION.html +#usr/share/doc/openssl/html/man3/PEM_write_X509.html +#usr/share/doc/openssl/html/man3/PEM_write_X509_AUX.html +#usr/share/doc/openssl/html/man3/PEM_write_X509_CRL.html +#usr/share/doc/openssl/html/man3/PEM_write_X509_REQ.html +#usr/share/doc/openssl/html/man3/PEM_write_X509_REQ_NEW.html +#usr/share/doc/openssl/html/man3/PEM_write_bio.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_CMS.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_CMS_stream.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_DHparams.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_DHxparams.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_DSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_DSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_DSAparams.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_ECPKParameters.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_ECPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_EC_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_NETSCAPE_CERT_SEQUENCE.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PKCS7.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PKCS7_stream.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PKCS8.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PKCS8PrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PKCS8PrivateKey_nid.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PKCS8_PRIV_KEY_INFO.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_PrivateKey_traditional.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_RSAPublicKey.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_RSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_SSL_SESSION.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_X509.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_X509_AUX.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_X509_CRL.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_X509_REQ.html +#usr/share/doc/openssl/html/man3/PEM_write_bio_X509_REQ_NEW.html +#usr/share/doc/openssl/html/man3/PKCS12_BAGS_free.html +#usr/share/doc/openssl/html/man3/PKCS12_BAGS_new.html +#usr/share/doc/openssl/html/man3/PKCS12_MAC_DATA_free.html +#usr/share/doc/openssl/html/man3/PKCS12_MAC_DATA_new.html +#usr/share/doc/openssl/html/man3/PKCS12_SAFEBAG_free.html +#usr/share/doc/openssl/html/man3/PKCS12_SAFEBAG_new.html +#usr/share/doc/openssl/html/man3/PKCS12_create.html +#usr/share/doc/openssl/html/man3/PKCS12_free.html +#usr/share/doc/openssl/html/man3/PKCS12_new.html +#usr/share/doc/openssl/html/man3/PKCS12_newpass.html +#usr/share/doc/openssl/html/man3/PKCS12_parse.html +#usr/share/doc/openssl/html/man3/PKCS5_PBKDF2_HMAC.html +#usr/share/doc/openssl/html/man3/PKCS5_PBKDF2_HMAC_SHA1.html +#usr/share/doc/openssl/html/man3/PKCS7_DIGEST_free.html +#usr/share/doc/openssl/html/man3/PKCS7_DIGEST_new.html +#usr/share/doc/openssl/html/man3/PKCS7_ENCRYPT_free.html +#usr/share/doc/openssl/html/man3/PKCS7_ENCRYPT_new.html +#usr/share/doc/openssl/html/man3/PKCS7_ENC_CONTENT_free.html +#usr/share/doc/openssl/html/man3/PKCS7_ENC_CONTENT_new.html +#usr/share/doc/openssl/html/man3/PKCS7_ENVELOPE_free.html +#usr/share/doc/openssl/html/man3/PKCS7_ENVELOPE_new.html +#usr/share/doc/openssl/html/man3/PKCS7_ISSUER_AND_SERIAL_digest.html +#usr/share/doc/openssl/html/man3/PKCS7_ISSUER_AND_SERIAL_free.html +#usr/share/doc/openssl/html/man3/PKCS7_ISSUER_AND_SERIAL_new.html +#usr/share/doc/openssl/html/man3/PKCS7_RECIP_INFO_free.html +#usr/share/doc/openssl/html/man3/PKCS7_RECIP_INFO_new.html +#usr/share/doc/openssl/html/man3/PKCS7_SIGNED_free.html +#usr/share/doc/openssl/html/man3/PKCS7_SIGNED_new.html +#usr/share/doc/openssl/html/man3/PKCS7_SIGNER_INFO_free.html +#usr/share/doc/openssl/html/man3/PKCS7_SIGNER_INFO_new.html +#usr/share/doc/openssl/html/man3/PKCS7_SIGN_ENVELOPE_free.html +#usr/share/doc/openssl/html/man3/PKCS7_SIGN_ENVELOPE_new.html +#usr/share/doc/openssl/html/man3/PKCS7_decrypt.html +#usr/share/doc/openssl/html/man3/PKCS7_dup.html +#usr/share/doc/openssl/html/man3/PKCS7_encrypt.html +#usr/share/doc/openssl/html/man3/PKCS7_free.html +#usr/share/doc/openssl/html/man3/PKCS7_get0_signers.html +#usr/share/doc/openssl/html/man3/PKCS7_new.html +#usr/share/doc/openssl/html/man3/PKCS7_print_ctx.html +#usr/share/doc/openssl/html/man3/PKCS7_sign.html +#usr/share/doc/openssl/html/man3/PKCS7_sign_add_signer.html +#usr/share/doc/openssl/html/man3/PKCS7_verify.html +#usr/share/doc/openssl/html/man3/PKCS8_PRIV_KEY_INFO_free.html +#usr/share/doc/openssl/html/man3/PKCS8_PRIV_KEY_INFO_new.html +#usr/share/doc/openssl/html/man3/PKEY_USAGE_PERIOD_free.html +#usr/share/doc/openssl/html/man3/PKEY_USAGE_PERIOD_new.html +#usr/share/doc/openssl/html/man3/POLICYINFO_free.html +#usr/share/doc/openssl/html/man3/POLICYINFO_new.html +#usr/share/doc/openssl/html/man3/POLICYQUALINFO_free.html +#usr/share/doc/openssl/html/man3/POLICYQUALINFO_new.html +#usr/share/doc/openssl/html/man3/POLICY_CONSTRAINTS_free.html +#usr/share/doc/openssl/html/man3/POLICY_CONSTRAINTS_new.html +#usr/share/doc/openssl/html/man3/POLICY_MAPPING_free.html +#usr/share/doc/openssl/html/man3/POLICY_MAPPING_new.html +#usr/share/doc/openssl/html/man3/PROXY_CERT_INFO_EXTENSION_free.html +#usr/share/doc/openssl/html/man3/PROXY_CERT_INFO_EXTENSION_new.html +#usr/share/doc/openssl/html/man3/PROXY_POLICY_free.html +#usr/share/doc/openssl/html/man3/PROXY_POLICY_new.html +#usr/share/doc/openssl/html/man3/RAND_OpenSSL.html +#usr/share/doc/openssl/html/man3/RAND_add.html +#usr/share/doc/openssl/html/man3/RAND_bytes.html +#usr/share/doc/openssl/html/man3/RAND_cleanup.html +#usr/share/doc/openssl/html/man3/RAND_egd.html +#usr/share/doc/openssl/html/man3/RAND_egd_bytes.html +#usr/share/doc/openssl/html/man3/RAND_event.html +#usr/share/doc/openssl/html/man3/RAND_file_name.html +#usr/share/doc/openssl/html/man3/RAND_get_rand_method.html +#usr/share/doc/openssl/html/man3/RAND_load_file.html +#usr/share/doc/openssl/html/man3/RAND_pseudo_bytes.html +#usr/share/doc/openssl/html/man3/RAND_query_egd_bytes.html +#usr/share/doc/openssl/html/man3/RAND_screen.html +#usr/share/doc/openssl/html/man3/RAND_seed.html +#usr/share/doc/openssl/html/man3/RAND_set_rand_method.html +#usr/share/doc/openssl/html/man3/RAND_status.html +#usr/share/doc/openssl/html/man3/RAND_write_file.html +#usr/share/doc/openssl/html/man3/RC4.html +#usr/share/doc/openssl/html/man3/RC4_set_key.html +#usr/share/doc/openssl/html/man3/RIPEMD160.html +#usr/share/doc/openssl/html/man3/RIPEMD160_Final.html +#usr/share/doc/openssl/html/man3/RIPEMD160_Init.html +#usr/share/doc/openssl/html/man3/RIPEMD160_Update.html +#usr/share/doc/openssl/html/man3/RSAPrivateKey_dup.html +#usr/share/doc/openssl/html/man3/RSAPublicKey_dup.html +#usr/share/doc/openssl/html/man3/RSA_OAEP_PARAMS_free.html +#usr/share/doc/openssl/html/man3/RSA_OAEP_PARAMS_new.html +#usr/share/doc/openssl/html/man3/RSA_PKCS1_OpenSSL.html +#usr/share/doc/openssl/html/man3/RSA_PSS_PARAMS_free.html +#usr/share/doc/openssl/html/man3/RSA_PSS_PARAMS_new.html +#usr/share/doc/openssl/html/man3/RSA_bits.html +#usr/share/doc/openssl/html/man3/RSA_blinding_off.html +#usr/share/doc/openssl/html/man3/RSA_blinding_on.html +#usr/share/doc/openssl/html/man3/RSA_check_key.html +#usr/share/doc/openssl/html/man3/RSA_check_key_ex.html +#usr/share/doc/openssl/html/man3/RSA_clear_flags.html +#usr/share/doc/openssl/html/man3/RSA_flags.html +#usr/share/doc/openssl/html/man3/RSA_free.html +#usr/share/doc/openssl/html/man3/RSA_generate_key.html +#usr/share/doc/openssl/html/man3/RSA_generate_key_ex.html +#usr/share/doc/openssl/html/man3/RSA_get0_crt_params.html +#usr/share/doc/openssl/html/man3/RSA_get0_engine.html +#usr/share/doc/openssl/html/man3/RSA_get0_factors.html +#usr/share/doc/openssl/html/man3/RSA_get0_key.html +#usr/share/doc/openssl/html/man3/RSA_get_default_method.html +#usr/share/doc/openssl/html/man3/RSA_get_ex_data.html +#usr/share/doc/openssl/html/man3/RSA_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/RSA_get_method.html +#usr/share/doc/openssl/html/man3/RSA_meth_dup.html +#usr/share/doc/openssl/html/man3/RSA_meth_free.html +#usr/share/doc/openssl/html/man3/RSA_meth_get0_app_data.html +#usr/share/doc/openssl/html/man3/RSA_meth_get0_name.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_bn_mod_exp.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_finish.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_flags.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_init.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_keygen.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_mod_exp.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_priv_dec.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_priv_enc.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_pub_dec.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_pub_enc.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_sign.html +#usr/share/doc/openssl/html/man3/RSA_meth_get_verify.html +#usr/share/doc/openssl/html/man3/RSA_meth_new.html +#usr/share/doc/openssl/html/man3/RSA_meth_set0_app_data.html +#usr/share/doc/openssl/html/man3/RSA_meth_set1_name.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_bn_mod_exp.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_finish.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_flags.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_init.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_keygen.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_mod_exp.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_priv_dec.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_priv_enc.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_pub_dec.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_pub_enc.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_sign.html +#usr/share/doc/openssl/html/man3/RSA_meth_set_verify.html +#usr/share/doc/openssl/html/man3/RSA_new.html +#usr/share/doc/openssl/html/man3/RSA_new_method.html +#usr/share/doc/openssl/html/man3/RSA_padding_add_PKCS1_OAEP.html +#usr/share/doc/openssl/html/man3/RSA_padding_add_PKCS1_type_1.html +#usr/share/doc/openssl/html/man3/RSA_padding_add_PKCS1_type_2.html +#usr/share/doc/openssl/html/man3/RSA_padding_add_SSLv23.html +#usr/share/doc/openssl/html/man3/RSA_padding_add_none.html +#usr/share/doc/openssl/html/man3/RSA_padding_check_PKCS1_OAEP.html +#usr/share/doc/openssl/html/man3/RSA_padding_check_PKCS1_type_1.html +#usr/share/doc/openssl/html/man3/RSA_padding_check_PKCS1_type_2.html +#usr/share/doc/openssl/html/man3/RSA_padding_check_SSLv23.html +#usr/share/doc/openssl/html/man3/RSA_padding_check_none.html +#usr/share/doc/openssl/html/man3/RSA_print.html +#usr/share/doc/openssl/html/man3/RSA_print_fp.html +#usr/share/doc/openssl/html/man3/RSA_private_decrypt.html +#usr/share/doc/openssl/html/man3/RSA_private_encrypt.html +#usr/share/doc/openssl/html/man3/RSA_public_decrypt.html +#usr/share/doc/openssl/html/man3/RSA_public_encrypt.html +#usr/share/doc/openssl/html/man3/RSA_set0_crt_params.html +#usr/share/doc/openssl/html/man3/RSA_set0_factors.html +#usr/share/doc/openssl/html/man3/RSA_set0_key.html +#usr/share/doc/openssl/html/man3/RSA_set_default_method.html +#usr/share/doc/openssl/html/man3/RSA_set_ex_data.html +#usr/share/doc/openssl/html/man3/RSA_set_flags.html +#usr/share/doc/openssl/html/man3/RSA_set_method.html +#usr/share/doc/openssl/html/man3/RSA_sign.html +#usr/share/doc/openssl/html/man3/RSA_sign_ASN1_OCTET_STRING.html +#usr/share/doc/openssl/html/man3/RSA_size.html +#usr/share/doc/openssl/html/man3/RSA_test_flags.html +#usr/share/doc/openssl/html/man3/RSA_verify.html +#usr/share/doc/openssl/html/man3/RSA_verify_ASN1_OCTET_STRING.html +#usr/share/doc/openssl/html/man3/SCT_LIST_free.html +#usr/share/doc/openssl/html/man3/SCT_LIST_print.html +#usr/share/doc/openssl/html/man3/SCT_LIST_validate.html +#usr/share/doc/openssl/html/man3/SCT_free.html +#usr/share/doc/openssl/html/man3/SCT_get0_extensions.html +#usr/share/doc/openssl/html/man3/SCT_get0_log_id.html +#usr/share/doc/openssl/html/man3/SCT_get0_signature.html +#usr/share/doc/openssl/html/man3/SCT_get_log_entry_type.html +#usr/share/doc/openssl/html/man3/SCT_get_signature_nid.html +#usr/share/doc/openssl/html/man3/SCT_get_source.html +#usr/share/doc/openssl/html/man3/SCT_get_timestamp.html +#usr/share/doc/openssl/html/man3/SCT_get_validation_status.html +#usr/share/doc/openssl/html/man3/SCT_get_version.html +#usr/share/doc/openssl/html/man3/SCT_new.html +#usr/share/doc/openssl/html/man3/SCT_new_from_base64.html +#usr/share/doc/openssl/html/man3/SCT_print.html +#usr/share/doc/openssl/html/man3/SCT_set0_extensions.html +#usr/share/doc/openssl/html/man3/SCT_set0_log_id.html +#usr/share/doc/openssl/html/man3/SCT_set0_signature.html +#usr/share/doc/openssl/html/man3/SCT_set1_extensions.html +#usr/share/doc/openssl/html/man3/SCT_set1_log_id.html +#usr/share/doc/openssl/html/man3/SCT_set1_signature.html +#usr/share/doc/openssl/html/man3/SCT_set_log_entry_type.html +#usr/share/doc/openssl/html/man3/SCT_set_signature_nid.html +#usr/share/doc/openssl/html/man3/SCT_set_source.html +#usr/share/doc/openssl/html/man3/SCT_set_timestamp.html +#usr/share/doc/openssl/html/man3/SCT_set_version.html +#usr/share/doc/openssl/html/man3/SCT_validate.html +#usr/share/doc/openssl/html/man3/SCT_validation_status_string.html +#usr/share/doc/openssl/html/man3/SHA1.html +#usr/share/doc/openssl/html/man3/SHA1_Final.html +#usr/share/doc/openssl/html/man3/SHA1_Init.html +#usr/share/doc/openssl/html/man3/SHA1_Update.html +#usr/share/doc/openssl/html/man3/SHA224.html +#usr/share/doc/openssl/html/man3/SHA224_Final.html +#usr/share/doc/openssl/html/man3/SHA224_Init.html +#usr/share/doc/openssl/html/man3/SHA224_Update.html +#usr/share/doc/openssl/html/man3/SHA256.html +#usr/share/doc/openssl/html/man3/SHA256_Final.html +#usr/share/doc/openssl/html/man3/SHA256_Init.html +#usr/share/doc/openssl/html/man3/SHA256_Update.html +#usr/share/doc/openssl/html/man3/SHA384.html +#usr/share/doc/openssl/html/man3/SHA384_Final.html +#usr/share/doc/openssl/html/man3/SHA384_Init.html +#usr/share/doc/openssl/html/man3/SHA384_Update.html +#usr/share/doc/openssl/html/man3/SHA512.html +#usr/share/doc/openssl/html/man3/SHA512_Final.html +#usr/share/doc/openssl/html/man3/SHA512_Init.html +#usr/share/doc/openssl/html/man3/SHA512_Update.html +#usr/share/doc/openssl/html/man3/SMIME_read_CMS.html +#usr/share/doc/openssl/html/man3/SMIME_read_PKCS7.html +#usr/share/doc/openssl/html/man3/SMIME_write_CMS.html +#usr/share/doc/openssl/html/man3/SMIME_write_PKCS7.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_description.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_get_auth_nid.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_get_bits.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_get_cipher_nid.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_get_digest_nid.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_get_kx_nid.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_get_name.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_get_version.html +#usr/share/doc/openssl/html/man3/SSL_CIPHER_is_aead.html +#usr/share/doc/openssl/html/man3/SSL_COMP_add_compression_method.html +#usr/share/doc/openssl/html/man3/SSL_COMP_free_compression_methods.html +#usr/share/doc/openssl/html/man3/SSL_COMP_get0_name.html +#usr/share/doc/openssl/html/man3/SSL_COMP_get_compression_methods.html +#usr/share/doc/openssl/html/man3/SSL_COMP_get_id.html +#usr/share/doc/openssl/html/man3/SSL_CONF_CTX_clear_flags.html +#usr/share/doc/openssl/html/man3/SSL_CONF_CTX_free.html +#usr/share/doc/openssl/html/man3/SSL_CONF_CTX_new.html +#usr/share/doc/openssl/html/man3/SSL_CONF_CTX_set1_prefix.html +#usr/share/doc/openssl/html/man3/SSL_CONF_CTX_set_flags.html +#usr/share/doc/openssl/html/man3/SSL_CONF_CTX_set_ssl.html +#usr/share/doc/openssl/html/man3/SSL_CONF_CTX_set_ssl_ctx.html +#usr/share/doc/openssl/html/man3/SSL_CONF_cmd.html +#usr/share/doc/openssl/html/man3/SSL_CONF_cmd_argv.html +#usr/share/doc/openssl/html/man3/SSL_CONF_cmd_value_type.html +#usr/share/doc/openssl/html/man3/SSL_CONF_finish.html +#usr/share/doc/openssl/html/man3/SSL_CTX_add0_chain_cert.html +#usr/share/doc/openssl/html/man3/SSL_CTX_add1_chain_cert.html +#usr/share/doc/openssl/html/man3/SSL_CTX_add_client_CA.html +#usr/share/doc/openssl/html/man3/SSL_CTX_add_client_custom_ext.html +#usr/share/doc/openssl/html/man3/SSL_CTX_add_extra_chain_cert.html +#usr/share/doc/openssl/html/man3/SSL_CTX_add_server_custom_ext.html +#usr/share/doc/openssl/html/man3/SSL_CTX_add_session.html +#usr/share/doc/openssl/html/man3/SSL_CTX_build_cert_chain.html +#usr/share/doc/openssl/html/man3/SSL_CTX_callback_ctrl.html +#usr/share/doc/openssl/html/man3/SSL_CTX_check_private_key.html +#usr/share/doc/openssl/html/man3/SSL_CTX_clear_chain_certs.html +#usr/share/doc/openssl/html/man3/SSL_CTX_clear_extra_chain_certs.html +#usr/share/doc/openssl/html/man3/SSL_CTX_clear_options.html +#usr/share/doc/openssl/html/man3/SSL_CTX_config.html +#usr/share/doc/openssl/html/man3/SSL_CTX_ct_is_enabled.html +#usr/share/doc/openssl/html/man3/SSL_CTX_ctrl.html +#usr/share/doc/openssl/html/man3/SSL_CTX_dane_clear_flags.html +#usr/share/doc/openssl/html/man3/SSL_CTX_dane_enable.html +#usr/share/doc/openssl/html/man3/SSL_CTX_dane_mtype_set.html +#usr/share/doc/openssl/html/man3/SSL_CTX_dane_set_flags.html +#usr/share/doc/openssl/html/man3/SSL_CTX_disable_ct.html +#usr/share/doc/openssl/html/man3/SSL_CTX_enable_ct.html +#usr/share/doc/openssl/html/man3/SSL_CTX_flush_sessions.html +#usr/share/doc/openssl/html/man3/SSL_CTX_free.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get0_chain_certs.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get0_param.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get0_security_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_ciphers.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_client_CA_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_client_cert_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_default_passwd_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_default_passwd_cb_userdata.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_default_read_ahead.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_info_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_max_cert_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_max_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_min_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_mode.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_options.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_quiet_shutdown.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_read_ahead.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_security_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_security_level.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_session_cache_mode.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_timeout.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_tlsext_status_arg.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_tlsext_status_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_tlsext_status_type.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_verify_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_verify_depth.html +#usr/share/doc/openssl/html/man3/SSL_CTX_get_verify_mode.html +#usr/share/doc/openssl/html/man3/SSL_CTX_has_client_custom_ext.html +#usr/share/doc/openssl/html/man3/SSL_CTX_load_verify_locations.html +#usr/share/doc/openssl/html/man3/SSL_CTX_new.html +#usr/share/doc/openssl/html/man3/SSL_CTX_remove_session.html +#usr/share/doc/openssl/html/man3/SSL_CTX_select_current_cert.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_accept.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_accept_good.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_accept_renegotiate.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_cache_full.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_cb_hits.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_connect.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_connect_good.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_connect_renegotiate.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_get_cache_size.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_get_get_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_get_new_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_get_remove_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_hits.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_misses.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_number.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_set_cache_size.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_set_get_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_set_new_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_set_remove_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sess_timeouts.html +#usr/share/doc/openssl/html/man3/SSL_CTX_sessions.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set0_chain.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set0_chain_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set0_security_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set0_verify_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_chain.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_chain_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_client_sigalgs.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_client_sigalgs_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_curves.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_curves_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_param.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_sigalgs.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_sigalgs_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set1_verify_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_alpn_protos.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_alpn_select_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_cert_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_cert_verify_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_cipher_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_client_CA_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_client_cert_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_ct_validation_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_ctlog_list_file.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_current_cert.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_default_ctlog_list_file.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_default_passwd_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_default_passwd_cb_userdata.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_default_read_buffer_len.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_default_verify_dir.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_default_verify_file.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_default_verify_paths.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_generate_session_id.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_info_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_max_cert_list.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_max_pipelines.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_max_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_max_send_fragment.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_min_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_mode.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_msg_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_msg_callback_arg.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_next_proto_select_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_next_protos_advertised_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_options.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_psk_client_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_psk_server_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_quiet_shutdown.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_read_ahead.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_security_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_security_level.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_session_cache_mode.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_session_id_context.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_split_send_fragment.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_ssl_version.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_timeout.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_tlsext_status_arg.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_tlsext_status_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_tlsext_status_type.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_tlsext_ticket_key_cb.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_tlsext_use_srtp.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_tmp_dh.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_tmp_dh_callback.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_verify.html +#usr/share/doc/openssl/html/man3/SSL_CTX_set_verify_depth.html +#usr/share/doc/openssl/html/man3/SSL_CTX_up_ref.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_PrivateKey.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_PrivateKey_ASN1.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_PrivateKey_file.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_RSAPrivateKey_ASN1.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_RSAPrivateKey_file.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_certificate.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_certificate_ASN1.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_certificate_chain_file.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_certificate_file.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_psk_identity_hint.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_serverinfo.html +#usr/share/doc/openssl/html/man3/SSL_CTX_use_serverinfo_file.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_free.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get0_cipher.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get0_hostname.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get0_id_context.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get0_peer.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get0_ticket.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_compress_id.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_id.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_master_key.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_protocol_version.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_ticket_lifetime_hint.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_time.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_get_timeout.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_has_ticket.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_new.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_print.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_print_fp.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_print_keylog.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_set1_id.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_set1_id_context.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_set_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_set_time.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_set_timeout.html +#usr/share/doc/openssl/html/man3/SSL_SESSION_up_ref.html +#usr/share/doc/openssl/html/man3/SSL_accept.html +#usr/share/doc/openssl/html/man3/SSL_add0_chain_cert.html +#usr/share/doc/openssl/html/man3/SSL_add1_chain_cert.html +#usr/share/doc/openssl/html/man3/SSL_add1_host.html +#usr/share/doc/openssl/html/man3/SSL_add_client_CA.html +#usr/share/doc/openssl/html/man3/SSL_add_session.html +#usr/share/doc/openssl/html/man3/SSL_alert_desc_string.html +#usr/share/doc/openssl/html/man3/SSL_alert_desc_string_long.html +#usr/share/doc/openssl/html/man3/SSL_alert_type_string.html +#usr/share/doc/openssl/html/man3/SSL_alert_type_string_long.html +#usr/share/doc/openssl/html/man3/SSL_build_cert_chain.html +#usr/share/doc/openssl/html/man3/SSL_callback_ctrl.html +#usr/share/doc/openssl/html/man3/SSL_check_chain.html +#usr/share/doc/openssl/html/man3/SSL_check_private_key.html +#usr/share/doc/openssl/html/man3/SSL_clear.html +#usr/share/doc/openssl/html/man3/SSL_clear_chain_certs.html +#usr/share/doc/openssl/html/man3/SSL_clear_options.html +#usr/share/doc/openssl/html/man3/SSL_config.html +#usr/share/doc/openssl/html/man3/SSL_connect.html +#usr/share/doc/openssl/html/man3/SSL_ct_is_enabled.html +#usr/share/doc/openssl/html/man3/SSL_ctrl.html +#usr/share/doc/openssl/html/man3/SSL_dane_clear_flags.html +#usr/share/doc/openssl/html/man3/SSL_dane_enable.html +#usr/share/doc/openssl/html/man3/SSL_dane_set_flags.html +#usr/share/doc/openssl/html/man3/SSL_dane_tlsa_add.html +#usr/share/doc/openssl/html/man3/SSL_disable_ct.html +#usr/share/doc/openssl/html/man3/SSL_do_handshake.html +#usr/share/doc/openssl/html/man3/SSL_enable_ct.html +#usr/share/doc/openssl/html/man3/SSL_export_keying_material.html +#usr/share/doc/openssl/html/man3/SSL_extension_supported.html +#usr/share/doc/openssl/html/man3/SSL_flush_sessions.html +#usr/share/doc/openssl/html/man3/SSL_free.html +#usr/share/doc/openssl/html/man3/SSL_get0_alpn_selected.html +#usr/share/doc/openssl/html/man3/SSL_get0_chain_certs.html +#usr/share/doc/openssl/html/man3/SSL_get0_dane_authority.html +#usr/share/doc/openssl/html/man3/SSL_get0_dane_tlsa.html +#usr/share/doc/openssl/html/man3/SSL_get0_next_proto_negotiated.html +#usr/share/doc/openssl/html/man3/SSL_get0_param.html +#usr/share/doc/openssl/html/man3/SSL_get0_peer_scts.html +#usr/share/doc/openssl/html/man3/SSL_get0_peername.html +#usr/share/doc/openssl/html/man3/SSL_get0_security_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_get0_session.html +#usr/share/doc/openssl/html/man3/SSL_get0_verified_chain.html +#usr/share/doc/openssl/html/man3/SSL_get1_curves.html +#usr/share/doc/openssl/html/man3/SSL_get1_session.html +#usr/share/doc/openssl/html/man3/SSL_get1_supported_ciphers.html +#usr/share/doc/openssl/html/man3/SSL_get_SSL_CTX.html +#usr/share/doc/openssl/html/man3/SSL_get_all_async_fds.html +#usr/share/doc/openssl/html/man3/SSL_get_changed_async_fds.html +#usr/share/doc/openssl/html/man3/SSL_get_cipher.html +#usr/share/doc/openssl/html/man3/SSL_get_cipher_bits.html +#usr/share/doc/openssl/html/man3/SSL_get_cipher_list.html +#usr/share/doc/openssl/html/man3/SSL_get_cipher_name.html +#usr/share/doc/openssl/html/man3/SSL_get_cipher_version.html +#usr/share/doc/openssl/html/man3/SSL_get_ciphers.html +#usr/share/doc/openssl/html/man3/SSL_get_client_CA_list.html +#usr/share/doc/openssl/html/man3/SSL_get_client_ciphers.html +#usr/share/doc/openssl/html/man3/SSL_get_client_random.html +#usr/share/doc/openssl/html/man3/SSL_get_current_cipher.html +#usr/share/doc/openssl/html/man3/SSL_get_default_passwd_cb.html +#usr/share/doc/openssl/html/man3/SSL_get_default_passwd_cb_userdata.html +#usr/share/doc/openssl/html/man3/SSL_get_default_timeout.html +#usr/share/doc/openssl/html/man3/SSL_get_error.html +#usr/share/doc/openssl/html/man3/SSL_get_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_get_ex_data_X509_STORE_CTX_idx.html +#usr/share/doc/openssl/html/man3/SSL_get_extms_support.html +#usr/share/doc/openssl/html/man3/SSL_get_fd.html +#usr/share/doc/openssl/html/man3/SSL_get_info_callback.html +#usr/share/doc/openssl/html/man3/SSL_get_max_cert_list.html +#usr/share/doc/openssl/html/man3/SSL_get_max_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_get_min_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_get_mode.html +#usr/share/doc/openssl/html/man3/SSL_get_options.html +#usr/share/doc/openssl/html/man3/SSL_get_peer_cert_chain.html +#usr/share/doc/openssl/html/man3/SSL_get_peer_certificate.html +#usr/share/doc/openssl/html/man3/SSL_get_psk_identity.html +#usr/share/doc/openssl/html/man3/SSL_get_psk_identity_hint.html +#usr/share/doc/openssl/html/man3/SSL_get_quiet_shutdown.html +#usr/share/doc/openssl/html/man3/SSL_get_rbio.html +#usr/share/doc/openssl/html/man3/SSL_get_read_ahead.html +#usr/share/doc/openssl/html/man3/SSL_get_rfd.html +#usr/share/doc/openssl/html/man3/SSL_get_secure_renegotiation_support.html +#usr/share/doc/openssl/html/man3/SSL_get_security_callback.html +#usr/share/doc/openssl/html/man3/SSL_get_security_level.html +#usr/share/doc/openssl/html/man3/SSL_get_selected_srtp_profile.html +#usr/share/doc/openssl/html/man3/SSL_get_server_random.html +#usr/share/doc/openssl/html/man3/SSL_get_session.html +#usr/share/doc/openssl/html/man3/SSL_get_shared_curve.html +#usr/share/doc/openssl/html/man3/SSL_get_shared_sigalgs.html +#usr/share/doc/openssl/html/man3/SSL_get_shutdown.html +#usr/share/doc/openssl/html/man3/SSL_get_sigalgs.html +#usr/share/doc/openssl/html/man3/SSL_get_srtp_profiles.html +#usr/share/doc/openssl/html/man3/SSL_get_ssl_method.html +#usr/share/doc/openssl/html/man3/SSL_get_time.html +#usr/share/doc/openssl/html/man3/SSL_get_timeout.html +#usr/share/doc/openssl/html/man3/SSL_get_tlsext_status_ocsp_resp.html +#usr/share/doc/openssl/html/man3/SSL_get_tlsext_status_type.html +#usr/share/doc/openssl/html/man3/SSL_get_verify_callback.html +#usr/share/doc/openssl/html/man3/SSL_get_verify_depth.html +#usr/share/doc/openssl/html/man3/SSL_get_verify_mode.html +#usr/share/doc/openssl/html/man3/SSL_get_verify_result.html +#usr/share/doc/openssl/html/man3/SSL_get_version.html +#usr/share/doc/openssl/html/man3/SSL_get_wbio.html +#usr/share/doc/openssl/html/man3/SSL_get_wfd.html +#usr/share/doc/openssl/html/man3/SSL_has_matching_session_id.html +#usr/share/doc/openssl/html/man3/SSL_has_pending.html +#usr/share/doc/openssl/html/man3/SSL_is_dtls.html +#usr/share/doc/openssl/html/man3/SSL_library_init.html +#usr/share/doc/openssl/html/man3/SSL_load_client_CA_file.html +#usr/share/doc/openssl/html/man3/SSL_load_error_strings.html +#usr/share/doc/openssl/html/man3/SSL_new.html +#usr/share/doc/openssl/html/man3/SSL_pending.html +#usr/share/doc/openssl/html/man3/SSL_read.html +#usr/share/doc/openssl/html/man3/SSL_remove_session.html +#usr/share/doc/openssl/html/man3/SSL_rstate_string.html +#usr/share/doc/openssl/html/man3/SSL_rstate_string_long.html +#usr/share/doc/openssl/html/man3/SSL_select_current_cert.html +#usr/share/doc/openssl/html/man3/SSL_select_next_proto.html +#usr/share/doc/openssl/html/man3/SSL_session_reused.html +#usr/share/doc/openssl/html/man3/SSL_set0_chain.html +#usr/share/doc/openssl/html/man3/SSL_set0_chain_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_set0_rbio.html +#usr/share/doc/openssl/html/man3/SSL_set0_security_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_set0_verify_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_set0_wbio.html +#usr/share/doc/openssl/html/man3/SSL_set1_chain.html +#usr/share/doc/openssl/html/man3/SSL_set1_chain_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_set1_client_sigalgs.html +#usr/share/doc/openssl/html/man3/SSL_set1_client_sigalgs_list.html +#usr/share/doc/openssl/html/man3/SSL_set1_curves.html +#usr/share/doc/openssl/html/man3/SSL_set1_curves_list.html +#usr/share/doc/openssl/html/man3/SSL_set1_host.html +#usr/share/doc/openssl/html/man3/SSL_set1_param.html +#usr/share/doc/openssl/html/man3/SSL_set1_sigalgs.html +#usr/share/doc/openssl/html/man3/SSL_set1_sigalgs_list.html +#usr/share/doc/openssl/html/man3/SSL_set1_verify_cert_store.html +#usr/share/doc/openssl/html/man3/SSL_set_accept_state.html +#usr/share/doc/openssl/html/man3/SSL_set_alpn_protos.html +#usr/share/doc/openssl/html/man3/SSL_set_bio.html +#usr/share/doc/openssl/html/man3/SSL_set_cert_cb.html +#usr/share/doc/openssl/html/man3/SSL_set_cipher_list.html +#usr/share/doc/openssl/html/man3/SSL_set_client_CA_list.html +#usr/share/doc/openssl/html/man3/SSL_set_connect_state.html +#usr/share/doc/openssl/html/man3/SSL_set_ct_validation_callback.html +#usr/share/doc/openssl/html/man3/SSL_set_current_cert.html +#usr/share/doc/openssl/html/man3/SSL_set_default_passwd_cb.html +#usr/share/doc/openssl/html/man3/SSL_set_default_passwd_cb_userdata.html +#usr/share/doc/openssl/html/man3/SSL_set_default_read_buffer_len.html +#usr/share/doc/openssl/html/man3/SSL_set_ex_data.html +#usr/share/doc/openssl/html/man3/SSL_set_fd.html +#usr/share/doc/openssl/html/man3/SSL_set_generate_session_id.html +#usr/share/doc/openssl/html/man3/SSL_set_hostflags.html +#usr/share/doc/openssl/html/man3/SSL_set_info_callback.html +#usr/share/doc/openssl/html/man3/SSL_set_max_cert_list.html +#usr/share/doc/openssl/html/man3/SSL_set_max_pipelines.html +#usr/share/doc/openssl/html/man3/SSL_set_max_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_set_max_send_fragment.html +#usr/share/doc/openssl/html/man3/SSL_set_min_proto_version.html +#usr/share/doc/openssl/html/man3/SSL_set_mode.html +#usr/share/doc/openssl/html/man3/SSL_set_msg_callback.html +#usr/share/doc/openssl/html/man3/SSL_set_msg_callback_arg.html +#usr/share/doc/openssl/html/man3/SSL_set_options.html +#usr/share/doc/openssl/html/man3/SSL_set_psk_client_callback.html +#usr/share/doc/openssl/html/man3/SSL_set_psk_server_callback.html +#usr/share/doc/openssl/html/man3/SSL_set_quiet_shutdown.html +#usr/share/doc/openssl/html/man3/SSL_set_read_ahead.html +#usr/share/doc/openssl/html/man3/SSL_set_rfd.html +#usr/share/doc/openssl/html/man3/SSL_set_security_callback.html +#usr/share/doc/openssl/html/man3/SSL_set_security_level.html +#usr/share/doc/openssl/html/man3/SSL_set_session.html +#usr/share/doc/openssl/html/man3/SSL_set_session_id_context.html +#usr/share/doc/openssl/html/man3/SSL_set_shutdown.html +#usr/share/doc/openssl/html/man3/SSL_set_split_send_fragment.html +#usr/share/doc/openssl/html/man3/SSL_set_ssl_method.html +#usr/share/doc/openssl/html/man3/SSL_set_time.html +#usr/share/doc/openssl/html/man3/SSL_set_timeout.html +#usr/share/doc/openssl/html/man3/SSL_set_tlsext_status_ocsp_resp.html +#usr/share/doc/openssl/html/man3/SSL_set_tlsext_status_type.html +#usr/share/doc/openssl/html/man3/SSL_set_tlsext_use_srtp.html +#usr/share/doc/openssl/html/man3/SSL_set_tmp_dh.html +#usr/share/doc/openssl/html/man3/SSL_set_tmp_dh_callback.html +#usr/share/doc/openssl/html/man3/SSL_set_verify.html +#usr/share/doc/openssl/html/man3/SSL_set_verify_depth.html +#usr/share/doc/openssl/html/man3/SSL_set_verify_result.html +#usr/share/doc/openssl/html/man3/SSL_set_wfd.html +#usr/share/doc/openssl/html/man3/SSL_shutdown.html +#usr/share/doc/openssl/html/man3/SSL_state_string.html +#usr/share/doc/openssl/html/man3/SSL_state_string_long.html +#usr/share/doc/openssl/html/man3/SSL_up_ref.html +#usr/share/doc/openssl/html/man3/SSL_use_PrivateKey.html +#usr/share/doc/openssl/html/man3/SSL_use_PrivateKey_ASN1.html +#usr/share/doc/openssl/html/man3/SSL_use_PrivateKey_file.html +#usr/share/doc/openssl/html/man3/SSL_use_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/SSL_use_RSAPrivateKey_ASN1.html +#usr/share/doc/openssl/html/man3/SSL_use_RSAPrivateKey_file.html +#usr/share/doc/openssl/html/man3/SSL_use_certificate.html +#usr/share/doc/openssl/html/man3/SSL_use_certificate_ASN1.html +#usr/share/doc/openssl/html/man3/SSL_use_certificate_chain_file.html +#usr/share/doc/openssl/html/man3/SSL_use_certificate_file.html +#usr/share/doc/openssl/html/man3/SSL_use_psk_identity_hint.html +#usr/share/doc/openssl/html/man3/SSL_verify_cb.html +#usr/share/doc/openssl/html/man3/SSL_waiting_for_async.html +#usr/share/doc/openssl/html/man3/SSL_want.html +#usr/share/doc/openssl/html/man3/SSL_want_async.html +#usr/share/doc/openssl/html/man3/SSL_want_async_job.html +#usr/share/doc/openssl/html/man3/SSL_want_nothing.html +#usr/share/doc/openssl/html/man3/SSL_want_read.html +#usr/share/doc/openssl/html/man3/SSL_want_write.html +#usr/share/doc/openssl/html/man3/SSL_want_x509_lookup.html +#usr/share/doc/openssl/html/man3/SSL_write.html +#usr/share/doc/openssl/html/man3/SSLv23_client_method.html +#usr/share/doc/openssl/html/man3/SSLv23_method.html +#usr/share/doc/openssl/html/man3/SSLv23_server_method.html +#usr/share/doc/openssl/html/man3/SSLv3_client_method.html +#usr/share/doc/openssl/html/man3/SSLv3_method.html +#usr/share/doc/openssl/html/man3/SSLv3_server_method.html +#usr/share/doc/openssl/html/man3/SXNETID_free.html +#usr/share/doc/openssl/html/man3/SXNETID_new.html +#usr/share/doc/openssl/html/man3/SXNET_free.html +#usr/share/doc/openssl/html/man3/SXNET_new.html +#usr/share/doc/openssl/html/man3/TLS_FEATURE_free.html +#usr/share/doc/openssl/html/man3/TLS_FEATURE_new.html +#usr/share/doc/openssl/html/man3/TLS_client_method.html +#usr/share/doc/openssl/html/man3/TLS_method.html +#usr/share/doc/openssl/html/man3/TLS_server_method.html +#usr/share/doc/openssl/html/man3/TLSv1_1_client_method.html +#usr/share/doc/openssl/html/man3/TLSv1_1_method.html +#usr/share/doc/openssl/html/man3/TLSv1_1_server_method.html +#usr/share/doc/openssl/html/man3/TLSv1_2_client_method.html +#usr/share/doc/openssl/html/man3/TLSv1_2_method.html +#usr/share/doc/openssl/html/man3/TLSv1_2_server_method.html +#usr/share/doc/openssl/html/man3/TLSv1_client_method.html +#usr/share/doc/openssl/html/man3/TLSv1_method.html +#usr/share/doc/openssl/html/man3/TLSv1_server_method.html +#usr/share/doc/openssl/html/man3/TS_ACCURACY_dup.html +#usr/share/doc/openssl/html/man3/TS_ACCURACY_free.html +#usr/share/doc/openssl/html/man3/TS_ACCURACY_new.html +#usr/share/doc/openssl/html/man3/TS_MSG_IMPRINT_dup.html +#usr/share/doc/openssl/html/man3/TS_MSG_IMPRINT_free.html +#usr/share/doc/openssl/html/man3/TS_MSG_IMPRINT_new.html +#usr/share/doc/openssl/html/man3/TS_REQ_dup.html +#usr/share/doc/openssl/html/man3/TS_REQ_free.html +#usr/share/doc/openssl/html/man3/TS_REQ_new.html +#usr/share/doc/openssl/html/man3/TS_RESP_dup.html +#usr/share/doc/openssl/html/man3/TS_RESP_free.html +#usr/share/doc/openssl/html/man3/TS_RESP_new.html +#usr/share/doc/openssl/html/man3/TS_STATUS_INFO_dup.html +#usr/share/doc/openssl/html/man3/TS_STATUS_INFO_free.html +#usr/share/doc/openssl/html/man3/TS_STATUS_INFO_new.html +#usr/share/doc/openssl/html/man3/TS_TST_INFO_dup.html +#usr/share/doc/openssl/html/man3/TS_TST_INFO_free.html +#usr/share/doc/openssl/html/man3/TS_TST_INFO_new.html +#usr/share/doc/openssl/html/man3/UI.html +#usr/share/doc/openssl/html/man3/UI_METHOD.html +#usr/share/doc/openssl/html/man3/UI_OpenSSL.html +#usr/share/doc/openssl/html/man3/UI_STRING.html +#usr/share/doc/openssl/html/man3/UI_add_error_string.html +#usr/share/doc/openssl/html/man3/UI_add_info_string.html +#usr/share/doc/openssl/html/man3/UI_add_input_boolean.html +#usr/share/doc/openssl/html/man3/UI_add_input_string.html +#usr/share/doc/openssl/html/man3/UI_add_user_data.html +#usr/share/doc/openssl/html/man3/UI_add_verify_string.html +#usr/share/doc/openssl/html/man3/UI_construct_prompt.html +#usr/share/doc/openssl/html/man3/UI_create_method.html +#usr/share/doc/openssl/html/man3/UI_ctrl.html +#usr/share/doc/openssl/html/man3/UI_destroy_method.html +#usr/share/doc/openssl/html/man3/UI_dup_error_string.html +#usr/share/doc/openssl/html/man3/UI_dup_info_string.html +#usr/share/doc/openssl/html/man3/UI_dup_input_boolean.html +#usr/share/doc/openssl/html/man3/UI_dup_input_string.html +#usr/share/doc/openssl/html/man3/UI_dup_verify_string.html +#usr/share/doc/openssl/html/man3/UI_free.html +#usr/share/doc/openssl/html/man3/UI_get0_action_string.html +#usr/share/doc/openssl/html/man3/UI_get0_output_string.html +#usr/share/doc/openssl/html/man3/UI_get0_result.html +#usr/share/doc/openssl/html/man3/UI_get0_result_string.html +#usr/share/doc/openssl/html/man3/UI_get0_test_string.html +#usr/share/doc/openssl/html/man3/UI_get0_user_data.html +#usr/share/doc/openssl/html/man3/UI_get_default_method.html +#usr/share/doc/openssl/html/man3/UI_get_ex_data.html +#usr/share/doc/openssl/html/man3/UI_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/UI_get_input_flags.html +#usr/share/doc/openssl/html/man3/UI_get_method.html +#usr/share/doc/openssl/html/man3/UI_get_result_maxsize.html +#usr/share/doc/openssl/html/man3/UI_get_result_minsize.html +#usr/share/doc/openssl/html/man3/UI_get_string_type.html +#usr/share/doc/openssl/html/man3/UI_method_get_closer.html +#usr/share/doc/openssl/html/man3/UI_method_get_ex_data.html +#usr/share/doc/openssl/html/man3/UI_method_get_flusher.html +#usr/share/doc/openssl/html/man3/UI_method_get_opener.html +#usr/share/doc/openssl/html/man3/UI_method_get_prompt_constructor.html +#usr/share/doc/openssl/html/man3/UI_method_get_reader.html +#usr/share/doc/openssl/html/man3/UI_method_get_writer.html +#usr/share/doc/openssl/html/man3/UI_method_set_closer.html +#usr/share/doc/openssl/html/man3/UI_method_set_ex_data.html +#usr/share/doc/openssl/html/man3/UI_method_set_flusher.html +#usr/share/doc/openssl/html/man3/UI_method_set_opener.html +#usr/share/doc/openssl/html/man3/UI_method_set_prompt_constructor.html +#usr/share/doc/openssl/html/man3/UI_method_set_reader.html +#usr/share/doc/openssl/html/man3/UI_method_set_writer.html +#usr/share/doc/openssl/html/man3/UI_new.html +#usr/share/doc/openssl/html/man3/UI_new_method.html +#usr/share/doc/openssl/html/man3/UI_null.html +#usr/share/doc/openssl/html/man3/UI_process.html +#usr/share/doc/openssl/html/man3/UI_set_default_method.html +#usr/share/doc/openssl/html/man3/UI_set_ex_data.html +#usr/share/doc/openssl/html/man3/UI_set_method.html +#usr/share/doc/openssl/html/man3/UI_set_result.html +#usr/share/doc/openssl/html/man3/UI_string_types.html +#usr/share/doc/openssl/html/man3/USERNOTICE_free.html +#usr/share/doc/openssl/html/man3/USERNOTICE_new.html +#usr/share/doc/openssl/html/man3/X509V3_EXT_d2i.html +#usr/share/doc/openssl/html/man3/X509V3_EXT_i2d.html +#usr/share/doc/openssl/html/man3/X509V3_add1_i2d.html +#usr/share/doc/openssl/html/man3/X509V3_get_d2i.html +#usr/share/doc/openssl/html/man3/X509_ALGOR_cmp.html +#usr/share/doc/openssl/html/man3/X509_ALGOR_dup.html +#usr/share/doc/openssl/html/man3/X509_ALGOR_free.html +#usr/share/doc/openssl/html/man3/X509_ALGOR_get0.html +#usr/share/doc/openssl/html/man3/X509_ALGOR_new.html +#usr/share/doc/openssl/html/man3/X509_ALGOR_set0.html +#usr/share/doc/openssl/html/man3/X509_ALGOR_set_md.html +#usr/share/doc/openssl/html/man3/X509_ATTRIBUTE_dup.html +#usr/share/doc/openssl/html/man3/X509_ATTRIBUTE_free.html +#usr/share/doc/openssl/html/man3/X509_ATTRIBUTE_new.html +#usr/share/doc/openssl/html/man3/X509_CERT_AUX_free.html +#usr/share/doc/openssl/html/man3/X509_CERT_AUX_new.html +#usr/share/doc/openssl/html/man3/X509_CINF_free.html +#usr/share/doc/openssl/html/man3/X509_CINF_new.html +#usr/share/doc/openssl/html/man3/X509_CRL_INFO_free.html +#usr/share/doc/openssl/html/man3/X509_CRL_INFO_new.html +#usr/share/doc/openssl/html/man3/X509_CRL_add0_revoked.html +#usr/share/doc/openssl/html/man3/X509_CRL_add1_ext_i2d.html +#usr/share/doc/openssl/html/man3/X509_CRL_add_ext.html +#usr/share/doc/openssl/html/man3/X509_CRL_delete_ext.html +#usr/share/doc/openssl/html/man3/X509_CRL_digest.html +#usr/share/doc/openssl/html/man3/X509_CRL_dup.html +#usr/share/doc/openssl/html/man3/X509_CRL_free.html +#usr/share/doc/openssl/html/man3/X509_CRL_get0_by_cert.html +#usr/share/doc/openssl/html/man3/X509_CRL_get0_by_serial.html +#usr/share/doc/openssl/html/man3/X509_CRL_get0_extensions.html +#usr/share/doc/openssl/html/man3/X509_CRL_get0_lastUpdate.html +#usr/share/doc/openssl/html/man3/X509_CRL_get0_nextUpdate.html +#usr/share/doc/openssl/html/man3/X509_CRL_get0_signature.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_REVOKED.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_ext.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_ext_by_NID.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_ext_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_ext_by_critical.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_ext_count.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_ext_d2i.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_issuer.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_signature_nid.html +#usr/share/doc/openssl/html/man3/X509_CRL_get_version.html +#usr/share/doc/openssl/html/man3/X509_CRL_new.html +#usr/share/doc/openssl/html/man3/X509_CRL_set1_lastUpdate.html +#usr/share/doc/openssl/html/man3/X509_CRL_set1_nextUpdate.html +#usr/share/doc/openssl/html/man3/X509_CRL_set_issuer_name.html +#usr/share/doc/openssl/html/man3/X509_CRL_set_version.html +#usr/share/doc/openssl/html/man3/X509_CRL_sign.html +#usr/share/doc/openssl/html/man3/X509_CRL_sign_ctx.html +#usr/share/doc/openssl/html/man3/X509_CRL_sort.html +#usr/share/doc/openssl/html/man3/X509_CRL_verify.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_create_by_NID.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_create_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_dup.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_free.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_get_critical.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_get_data.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_get_object.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_new.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_set_critical.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_set_data.html +#usr/share/doc/openssl/html/man3/X509_EXTENSION_set_object.html +#usr/share/doc/openssl/html/man3/X509_LOOKUP_file.html +#usr/share/doc/openssl/html/man3/X509_LOOKUP_hash_dir.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_create_by_NID.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_create_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_create_by_txt.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_dup.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_free.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_get_data.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_get_object.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_new.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_set_data.html +#usr/share/doc/openssl/html/man3/X509_NAME_ENTRY_set_object.html +#usr/share/doc/openssl/html/man3/X509_NAME_add_entry.html +#usr/share/doc/openssl/html/man3/X509_NAME_add_entry_by_NID.html +#usr/share/doc/openssl/html/man3/X509_NAME_add_entry_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_NAME_add_entry_by_txt.html +#usr/share/doc/openssl/html/man3/X509_NAME_delete_entry.html +#usr/share/doc/openssl/html/man3/X509_NAME_digest.html +#usr/share/doc/openssl/html/man3/X509_NAME_dup.html +#usr/share/doc/openssl/html/man3/X509_NAME_entry_count.html +#usr/share/doc/openssl/html/man3/X509_NAME_free.html +#usr/share/doc/openssl/html/man3/X509_NAME_get0_der.html +#usr/share/doc/openssl/html/man3/X509_NAME_get_entry.html +#usr/share/doc/openssl/html/man3/X509_NAME_get_index_by_NID.html +#usr/share/doc/openssl/html/man3/X509_NAME_get_index_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_NAME_get_text_by_NID.html +#usr/share/doc/openssl/html/man3/X509_NAME_get_text_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_NAME_new.html +#usr/share/doc/openssl/html/man3/X509_NAME_oneline.html +#usr/share/doc/openssl/html/man3/X509_NAME_print.html +#usr/share/doc/openssl/html/man3/X509_NAME_print_ex.html +#usr/share/doc/openssl/html/man3/X509_NAME_print_ex_fp.html +#usr/share/doc/openssl/html/man3/X509_PUBKEY_free.html +#usr/share/doc/openssl/html/man3/X509_PUBKEY_get.html +#usr/share/doc/openssl/html/man3/X509_PUBKEY_get0.html +#usr/share/doc/openssl/html/man3/X509_PUBKEY_get0_param.html +#usr/share/doc/openssl/html/man3/X509_PUBKEY_new.html +#usr/share/doc/openssl/html/man3/X509_PUBKEY_set.html +#usr/share/doc/openssl/html/man3/X509_PUBKEY_set0_param.html +#usr/share/doc/openssl/html/man3/X509_REQ_INFO_free.html +#usr/share/doc/openssl/html/man3/X509_REQ_INFO_new.html +#usr/share/doc/openssl/html/man3/X509_REQ_digest.html +#usr/share/doc/openssl/html/man3/X509_REQ_dup.html +#usr/share/doc/openssl/html/man3/X509_REQ_free.html +#usr/share/doc/openssl/html/man3/X509_REQ_get0_pubkey.html +#usr/share/doc/openssl/html/man3/X509_REQ_get0_signature.html +#usr/share/doc/openssl/html/man3/X509_REQ_get_X509_PUBKEY.html +#usr/share/doc/openssl/html/man3/X509_REQ_get_pubkey.html +#usr/share/doc/openssl/html/man3/X509_REQ_get_signature_nid.html +#usr/share/doc/openssl/html/man3/X509_REQ_get_subject_name.html +#usr/share/doc/openssl/html/man3/X509_REQ_get_version.html +#usr/share/doc/openssl/html/man3/X509_REQ_new.html +#usr/share/doc/openssl/html/man3/X509_REQ_set_pubkey.html +#usr/share/doc/openssl/html/man3/X509_REQ_set_subject_name.html +#usr/share/doc/openssl/html/man3/X509_REQ_set_version.html +#usr/share/doc/openssl/html/man3/X509_REQ_sign.html +#usr/share/doc/openssl/html/man3/X509_REQ_sign_ctx.html +#usr/share/doc/openssl/html/man3/X509_REQ_verify.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_add1_ext_i2d.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_add_ext.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_delete_ext.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_dup.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_free.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get0_extensions.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get0_revocationDate.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get0_serialNumber.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get_ext.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get_ext_by_NID.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get_ext_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get_ext_by_critical.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get_ext_count.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_get_ext_d2i.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_new.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_set_revocationDate.html +#usr/share/doc/openssl/html/man3/X509_REVOKED_set_serialNumber.html +#usr/share/doc/openssl/html/man3/X509_SIG_free.html +#usr/share/doc/openssl/html/man3/X509_SIG_get0.html +#usr/share/doc/openssl/html/man3/X509_SIG_getm.html +#usr/share/doc/openssl/html/man3/X509_SIG_new.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_cert_crl_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_check_crl_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_check_issued_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_check_policy_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_check_revocation_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_cleanup.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_cleanup_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_free.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get0_cert.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get0_chain.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get0_param.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get0_untrusted.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get1_chain.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_cert_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_check_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_check_issued.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_check_policy.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_check_revocation.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_cleanup.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_crl_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_current_cert.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_error.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_error_depth.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_ex_data.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_get_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_get_issuer.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_issuer_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_lookup_certs.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_lookup_crls.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_num_untrusted.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_verify.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_get_verify_cb.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_init.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_lookup_certs_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_lookup_crls_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_new.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_crls.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_param.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_trusted_stack.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_untrusted.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set0_verified_chain.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_cert.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_current_cert.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_default.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_error.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_error_depth.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_ex_data.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_verify.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_set_verify_cb.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_verify_cb.html +#usr/share/doc/openssl/html/man3/X509_STORE_CTX_verify_fn.html +#usr/share/doc/openssl/html/man3/X509_STORE_free.html +#usr/share/doc/openssl/html/man3/X509_STORE_get0_objects.html +#usr/share/doc/openssl/html/man3/X509_STORE_get0_param.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_cert_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_check_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_check_issued.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_check_policy.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_check_revocation.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_cleanup.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_ex_data.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_get_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_get_issuer.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_lookup_certs.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_lookup_crls.html +#usr/share/doc/openssl/html/man3/X509_STORE_get_verify_cb.html +#usr/share/doc/openssl/html/man3/X509_STORE_lock.html +#usr/share/doc/openssl/html/man3/X509_STORE_new.html +#usr/share/doc/openssl/html/man3/X509_STORE_set1_param.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_cert_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_check_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_check_issued.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_check_policy.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_check_revocation.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_cleanup.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_ex_data.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_get_crl.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_get_issuer.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_lookup_certs.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_lookup_crls.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_lookup_crls_cb.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_verify.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_verify_cb.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_verify_cb_func.html +#usr/share/doc/openssl/html/man3/X509_STORE_set_verify_func.html +#usr/share/doc/openssl/html/man3/X509_STORE_unlock.html +#usr/share/doc/openssl/html/man3/X509_STORE_up_ref.html +#usr/share/doc/openssl/html/man3/X509_VAL_free.html +#usr/share/doc/openssl/html/man3/X509_VAL_new.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_add0_policy.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_add1_host.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_clear_flags.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_get0_peername.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_get_auth_level.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_get_depth.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_get_flags.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_get_inh_flags.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_get_time.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set1_email.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set1_host.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set1_ip.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set1_ip_asc.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set1_policies.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_auth_level.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_depth.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_flags.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_hostflags.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_inh_flags.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_purpose.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_time.html +#usr/share/doc/openssl/html/man3/X509_VERIFY_PARAM_set_trust.html +#usr/share/doc/openssl/html/man3/X509_add1_ext_i2d.html +#usr/share/doc/openssl/html/man3/X509_add_ext.html +#usr/share/doc/openssl/html/man3/X509_chain_up_ref.html +#usr/share/doc/openssl/html/man3/X509_check_ca.html +#usr/share/doc/openssl/html/man3/X509_check_email.html +#usr/share/doc/openssl/html/man3/X509_check_host.html +#usr/share/doc/openssl/html/man3/X509_check_ip.html +#usr/share/doc/openssl/html/man3/X509_check_ip_asc.html +#usr/share/doc/openssl/html/man3/X509_check_issued.html +#usr/share/doc/openssl/html/man3/X509_delete_ext.html +#usr/share/doc/openssl/html/man3/X509_digest.html +#usr/share/doc/openssl/html/man3/X509_dup.html +#usr/share/doc/openssl/html/man3/X509_free.html +#usr/share/doc/openssl/html/man3/X509_get0_extensions.html +#usr/share/doc/openssl/html/man3/X509_get0_notAfter.html +#usr/share/doc/openssl/html/man3/X509_get0_notBefore.html +#usr/share/doc/openssl/html/man3/X509_get0_pubkey.html +#usr/share/doc/openssl/html/man3/X509_get0_serialNumber.html +#usr/share/doc/openssl/html/man3/X509_get0_signature.html +#usr/share/doc/openssl/html/man3/X509_get0_subject_key_id.html +#usr/share/doc/openssl/html/man3/X509_get0_tbs_sigalg.html +#usr/share/doc/openssl/html/man3/X509_get0_uids.html +#usr/share/doc/openssl/html/man3/X509_get_X509_PUBKEY.html +#usr/share/doc/openssl/html/man3/X509_get_ex_data.html +#usr/share/doc/openssl/html/man3/X509_get_ex_new_index.html +#usr/share/doc/openssl/html/man3/X509_get_ext.html +#usr/share/doc/openssl/html/man3/X509_get_ext_by_NID.html +#usr/share/doc/openssl/html/man3/X509_get_ext_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509_get_ext_by_critical.html +#usr/share/doc/openssl/html/man3/X509_get_ext_count.html +#usr/share/doc/openssl/html/man3/X509_get_ext_d2i.html +#usr/share/doc/openssl/html/man3/X509_get_extended_key_usage.html +#usr/share/doc/openssl/html/man3/X509_get_extension_flags.html +#usr/share/doc/openssl/html/man3/X509_get_issuer_name.html +#usr/share/doc/openssl/html/man3/X509_get_key_usage.html +#usr/share/doc/openssl/html/man3/X509_get_pathlen.html +#usr/share/doc/openssl/html/man3/X509_get_proxy_pathlen.html +#usr/share/doc/openssl/html/man3/X509_get_pubkey.html +#usr/share/doc/openssl/html/man3/X509_get_serialNumber.html +#usr/share/doc/openssl/html/man3/X509_get_signature_nid.html +#usr/share/doc/openssl/html/man3/X509_get_subject_name.html +#usr/share/doc/openssl/html/man3/X509_get_version.html +#usr/share/doc/openssl/html/man3/X509_getm_notAfter.html +#usr/share/doc/openssl/html/man3/X509_getm_notBefore.html +#usr/share/doc/openssl/html/man3/X509_load_cert_crl_file.html +#usr/share/doc/openssl/html/man3/X509_load_cert_file.html +#usr/share/doc/openssl/html/man3/X509_load_crl_file.html +#usr/share/doc/openssl/html/man3/X509_new.html +#usr/share/doc/openssl/html/man3/X509_pubkey_digest.html +#usr/share/doc/openssl/html/man3/X509_set1_notAfter.html +#usr/share/doc/openssl/html/man3/X509_set1_notBefore.html +#usr/share/doc/openssl/html/man3/X509_set_ex_data.html +#usr/share/doc/openssl/html/man3/X509_set_issuer_name.html +#usr/share/doc/openssl/html/man3/X509_set_proxy_flag.html +#usr/share/doc/openssl/html/man3/X509_set_proxy_pathlen.html +#usr/share/doc/openssl/html/man3/X509_set_pubkey.html +#usr/share/doc/openssl/html/man3/X509_set_serialNumber.html +#usr/share/doc/openssl/html/man3/X509_set_subject_name.html +#usr/share/doc/openssl/html/man3/X509_set_version.html +#usr/share/doc/openssl/html/man3/X509_sign.html +#usr/share/doc/openssl/html/man3/X509_sign_ctx.html +#usr/share/doc/openssl/html/man3/X509_up_ref.html +#usr/share/doc/openssl/html/man3/X509_verify.html +#usr/share/doc/openssl/html/man3/X509_verify_cert.html +#usr/share/doc/openssl/html/man3/X509_verify_cert_error_string.html +#usr/share/doc/openssl/html/man3/X509v3_add_ext.html +#usr/share/doc/openssl/html/man3/X509v3_delete_ext.html +#usr/share/doc/openssl/html/man3/X509v3_get_ext.html +#usr/share/doc/openssl/html/man3/X509v3_get_ext_by_NID.html +#usr/share/doc/openssl/html/man3/X509v3_get_ext_by_OBJ.html +#usr/share/doc/openssl/html/man3/X509v3_get_ext_by_critical.html +#usr/share/doc/openssl/html/man3/X509v3_get_ext_count.html +#usr/share/doc/openssl/html/man3/bio.html +#usr/share/doc/openssl/html/man3/bio_info_cb.html +#usr/share/doc/openssl/html/man3/custom_ext_add_cb.html +#usr/share/doc/openssl/html/man3/custom_ext_free_cb.html +#usr/share/doc/openssl/html/man3/custom_ext_parse_cb.html +#usr/share/doc/openssl/html/man3/d2i_ACCESS_DESCRIPTION.html +#usr/share/doc/openssl/html/man3/d2i_ASIdOrRange.html +#usr/share/doc/openssl/html/man3/d2i_ASIdentifierChoice.html +#usr/share/doc/openssl/html/man3/d2i_ASIdentifiers.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_BIT_STRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_BMPSTRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_ENUMERATED.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_GENERALIZEDTIME.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_GENERALSTRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_IA5STRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_INTEGER.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_NULL.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_OBJECT.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_OCTET_STRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_PRINTABLE.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_PRINTABLESTRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_SEQUENCE_ANY.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_SET_ANY.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_T61STRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_TIME.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_TYPE.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_UINTEGER.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_UNIVERSALSTRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_UTCTIME.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_UTF8STRING.html +#usr/share/doc/openssl/html/man3/d2i_ASN1_VISIBLESTRING.html +#usr/share/doc/openssl/html/man3/d2i_ASRange.html +#usr/share/doc/openssl/html/man3/d2i_AUTHORITY_INFO_ACCESS.html +#usr/share/doc/openssl/html/man3/d2i_AUTHORITY_KEYID.html +#usr/share/doc/openssl/html/man3/d2i_AutoPrivateKey.html +#usr/share/doc/openssl/html/man3/d2i_BASIC_CONSTRAINTS.html +#usr/share/doc/openssl/html/man3/d2i_CERTIFICATEPOLICIES.html +#usr/share/doc/openssl/html/man3/d2i_CMS_ContentInfo.html +#usr/share/doc/openssl/html/man3/d2i_CMS_ReceiptRequest.html +#usr/share/doc/openssl/html/man3/d2i_CMS_bio.html +#usr/share/doc/openssl/html/man3/d2i_CRL_DIST_POINTS.html +#usr/share/doc/openssl/html/man3/d2i_DHparams.html +#usr/share/doc/openssl/html/man3/d2i_DHxparams.html +#usr/share/doc/openssl/html/man3/d2i_DIRECTORYSTRING.html +#usr/share/doc/openssl/html/man3/d2i_DISPLAYTEXT.html +#usr/share/doc/openssl/html/man3/d2i_DIST_POINT.html +#usr/share/doc/openssl/html/man3/d2i_DIST_POINT_NAME.html +#usr/share/doc/openssl/html/man3/d2i_DSAPrivateKey.html +#usr/share/doc/openssl/html/man3/d2i_DSAPrivateKey_bio.html +#usr/share/doc/openssl/html/man3/d2i_DSAPrivateKey_fp.html +#usr/share/doc/openssl/html/man3/d2i_DSAPublicKey.html +#usr/share/doc/openssl/html/man3/d2i_DSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/d2i_DSA_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/d2i_DSA_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/d2i_DSA_SIG.html +#usr/share/doc/openssl/html/man3/d2i_DSAparams.html +#usr/share/doc/openssl/html/man3/d2i_ECDSA_SIG.html +#usr/share/doc/openssl/html/man3/d2i_ECPKParameters.html +#usr/share/doc/openssl/html/man3/d2i_ECParameters.html +#usr/share/doc/openssl/html/man3/d2i_ECPrivateKey.html +#usr/share/doc/openssl/html/man3/d2i_ECPrivateKey_bio.html +#usr/share/doc/openssl/html/man3/d2i_ECPrivateKey_fp.html +#usr/share/doc/openssl/html/man3/d2i_EC_PUBKEY.html +#usr/share/doc/openssl/html/man3/d2i_EC_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/d2i_EC_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/d2i_EDIPARTYNAME.html +#usr/share/doc/openssl/html/man3/d2i_ESS_CERT_ID.html +#usr/share/doc/openssl/html/man3/d2i_ESS_ISSUER_SERIAL.html +#usr/share/doc/openssl/html/man3/d2i_ESS_SIGNING_CERT.html +#usr/share/doc/openssl/html/man3/d2i_EXTENDED_KEY_USAGE.html +#usr/share/doc/openssl/html/man3/d2i_GENERAL_NAME.html +#usr/share/doc/openssl/html/man3/d2i_GENERAL_NAMES.html +#usr/share/doc/openssl/html/man3/d2i_IPAddressChoice.html +#usr/share/doc/openssl/html/man3/d2i_IPAddressFamily.html +#usr/share/doc/openssl/html/man3/d2i_IPAddressOrRange.html +#usr/share/doc/openssl/html/man3/d2i_IPAddressRange.html +#usr/share/doc/openssl/html/man3/d2i_ISSUING_DIST_POINT.html +#usr/share/doc/openssl/html/man3/d2i_NETSCAPE_CERT_SEQUENCE.html +#usr/share/doc/openssl/html/man3/d2i_NETSCAPE_SPKAC.html +#usr/share/doc/openssl/html/man3/d2i_NETSCAPE_SPKI.html +#usr/share/doc/openssl/html/man3/d2i_NOTICEREF.html +#usr/share/doc/openssl/html/man3/d2i_Netscape_RSA.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_BASICRESP.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_CERTID.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_CERTSTATUS.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_CRLID.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_ONEREQ.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_REQINFO.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_REQUEST.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_RESPBYTES.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_RESPDATA.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_RESPID.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_RESPONSE.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_REVOKEDINFO.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_SERVICELOC.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_SIGNATURE.html +#usr/share/doc/openssl/html/man3/d2i_OCSP_SINGLERESP.html +#usr/share/doc/openssl/html/man3/d2i_OTHERNAME.html +#usr/share/doc/openssl/html/man3/d2i_PBE2PARAM.html +#usr/share/doc/openssl/html/man3/d2i_PBEPARAM.html +#usr/share/doc/openssl/html/man3/d2i_PBKDF2PARAM.html +#usr/share/doc/openssl/html/man3/d2i_PKCS12.html +#usr/share/doc/openssl/html/man3/d2i_PKCS12_BAGS.html +#usr/share/doc/openssl/html/man3/d2i_PKCS12_MAC_DATA.html +#usr/share/doc/openssl/html/man3/d2i_PKCS12_SAFEBAG.html +#usr/share/doc/openssl/html/man3/d2i_PKCS12_bio.html +#usr/share/doc/openssl/html/man3/d2i_PKCS12_fp.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_DIGEST.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_ENCRYPT.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_ENC_CONTENT.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_ENVELOPE.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_ISSUER_AND_SERIAL.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_RECIP_INFO.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_SIGNED.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_SIGNER_INFO.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_SIGN_ENVELOPE.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_bio.html +#usr/share/doc/openssl/html/man3/d2i_PKCS7_fp.html +#usr/share/doc/openssl/html/man3/d2i_PKCS8PrivateKey_bio.html +#usr/share/doc/openssl/html/man3/d2i_PKCS8PrivateKey_fp.html +#usr/share/doc/openssl/html/man3/d2i_PKCS8_PRIV_KEY_INFO.html +#usr/share/doc/openssl/html/man3/d2i_PKCS8_PRIV_KEY_INFO_bio.html +#usr/share/doc/openssl/html/man3/d2i_PKCS8_PRIV_KEY_INFO_fp.html +#usr/share/doc/openssl/html/man3/d2i_PKCS8_bio.html +#usr/share/doc/openssl/html/man3/d2i_PKCS8_fp.html +#usr/share/doc/openssl/html/man3/d2i_PKEY_USAGE_PERIOD.html +#usr/share/doc/openssl/html/man3/d2i_POLICYINFO.html +#usr/share/doc/openssl/html/man3/d2i_POLICYQUALINFO.html +#usr/share/doc/openssl/html/man3/d2i_PROXY_CERT_INFO_EXTENSION.html +#usr/share/doc/openssl/html/man3/d2i_PROXY_POLICY.html +#usr/share/doc/openssl/html/man3/d2i_PUBKEY.html +#usr/share/doc/openssl/html/man3/d2i_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/d2i_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/d2i_PrivateKey.html +#usr/share/doc/openssl/html/man3/d2i_PrivateKey_bio.html +#usr/share/doc/openssl/html/man3/d2i_PrivateKey_fp.html +#usr/share/doc/openssl/html/man3/d2i_PublicKey.html +#usr/share/doc/openssl/html/man3/d2i_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/d2i_RSAPrivateKey_bio.html +#usr/share/doc/openssl/html/man3/d2i_RSAPrivateKey_fp.html +#usr/share/doc/openssl/html/man3/d2i_RSAPublicKey.html +#usr/share/doc/openssl/html/man3/d2i_RSAPublicKey_bio.html +#usr/share/doc/openssl/html/man3/d2i_RSAPublicKey_fp.html +#usr/share/doc/openssl/html/man3/d2i_RSA_OAEP_PARAMS.html +#usr/share/doc/openssl/html/man3/d2i_RSA_PSS_PARAMS.html +#usr/share/doc/openssl/html/man3/d2i_RSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/d2i_RSA_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/d2i_RSA_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/d2i_SCT_LIST.html +#usr/share/doc/openssl/html/man3/d2i_SSL_SESSION.html +#usr/share/doc/openssl/html/man3/d2i_SXNET.html +#usr/share/doc/openssl/html/man3/d2i_SXNETID.html +#usr/share/doc/openssl/html/man3/d2i_TS_ACCURACY.html +#usr/share/doc/openssl/html/man3/d2i_TS_MSG_IMPRINT.html +#usr/share/doc/openssl/html/man3/d2i_TS_MSG_IMPRINT_bio.html +#usr/share/doc/openssl/html/man3/d2i_TS_MSG_IMPRINT_fp.html +#usr/share/doc/openssl/html/man3/d2i_TS_REQ.html +#usr/share/doc/openssl/html/man3/d2i_TS_REQ_bio.html +#usr/share/doc/openssl/html/man3/d2i_TS_REQ_fp.html +#usr/share/doc/openssl/html/man3/d2i_TS_RESP.html +#usr/share/doc/openssl/html/man3/d2i_TS_RESP_bio.html +#usr/share/doc/openssl/html/man3/d2i_TS_RESP_fp.html +#usr/share/doc/openssl/html/man3/d2i_TS_STATUS_INFO.html +#usr/share/doc/openssl/html/man3/d2i_TS_TST_INFO.html +#usr/share/doc/openssl/html/man3/d2i_TS_TST_INFO_bio.html +#usr/share/doc/openssl/html/man3/d2i_TS_TST_INFO_fp.html +#usr/share/doc/openssl/html/man3/d2i_USERNOTICE.html +#usr/share/doc/openssl/html/man3/d2i_X509.html +#usr/share/doc/openssl/html/man3/d2i_X509_ALGOR.html +#usr/share/doc/openssl/html/man3/d2i_X509_ALGORS.html +#usr/share/doc/openssl/html/man3/d2i_X509_ATTRIBUTE.html +#usr/share/doc/openssl/html/man3/d2i_X509_AUX.html +#usr/share/doc/openssl/html/man3/d2i_X509_CERT_AUX.html +#usr/share/doc/openssl/html/man3/d2i_X509_CINF.html +#usr/share/doc/openssl/html/man3/d2i_X509_CRL.html +#usr/share/doc/openssl/html/man3/d2i_X509_CRL_INFO.html +#usr/share/doc/openssl/html/man3/d2i_X509_CRL_bio.html +#usr/share/doc/openssl/html/man3/d2i_X509_CRL_fp.html +#usr/share/doc/openssl/html/man3/d2i_X509_EXTENSION.html +#usr/share/doc/openssl/html/man3/d2i_X509_EXTENSIONS.html +#usr/share/doc/openssl/html/man3/d2i_X509_NAME.html +#usr/share/doc/openssl/html/man3/d2i_X509_NAME_ENTRY.html +#usr/share/doc/openssl/html/man3/d2i_X509_PUBKEY.html +#usr/share/doc/openssl/html/man3/d2i_X509_REQ.html +#usr/share/doc/openssl/html/man3/d2i_X509_REQ_INFO.html +#usr/share/doc/openssl/html/man3/d2i_X509_REQ_bio.html +#usr/share/doc/openssl/html/man3/d2i_X509_REQ_fp.html +#usr/share/doc/openssl/html/man3/d2i_X509_REVOKED.html +#usr/share/doc/openssl/html/man3/d2i_X509_SIG.html +#usr/share/doc/openssl/html/man3/d2i_X509_VAL.html +#usr/share/doc/openssl/html/man3/i2d_ACCESS_DESCRIPTION.html +#usr/share/doc/openssl/html/man3/i2d_ASIdOrRange.html +#usr/share/doc/openssl/html/man3/i2d_ASIdentifierChoice.html +#usr/share/doc/openssl/html/man3/i2d_ASIdentifiers.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_BIT_STRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_BMPSTRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_ENUMERATED.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_GENERALIZEDTIME.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_GENERALSTRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_IA5STRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_INTEGER.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_NULL.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_OBJECT.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_OCTET_STRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_PRINTABLE.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_PRINTABLESTRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_SEQUENCE_ANY.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_SET_ANY.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_T61STRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_TIME.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_TYPE.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_UNIVERSALSTRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_UTCTIME.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_UTF8STRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_VISIBLESTRING.html +#usr/share/doc/openssl/html/man3/i2d_ASN1_bio_stream.html +#usr/share/doc/openssl/html/man3/i2d_ASRange.html +#usr/share/doc/openssl/html/man3/i2d_AUTHORITY_INFO_ACCESS.html +#usr/share/doc/openssl/html/man3/i2d_AUTHORITY_KEYID.html +#usr/share/doc/openssl/html/man3/i2d_BASIC_CONSTRAINTS.html +#usr/share/doc/openssl/html/man3/i2d_CERTIFICATEPOLICIES.html +#usr/share/doc/openssl/html/man3/i2d_CMS_ContentInfo.html +#usr/share/doc/openssl/html/man3/i2d_CMS_ReceiptRequest.html +#usr/share/doc/openssl/html/man3/i2d_CMS_bio.html +#usr/share/doc/openssl/html/man3/i2d_CMS_bio_stream.html +#usr/share/doc/openssl/html/man3/i2d_CRL_DIST_POINTS.html +#usr/share/doc/openssl/html/man3/i2d_DHparams.html +#usr/share/doc/openssl/html/man3/i2d_DHxparams.html +#usr/share/doc/openssl/html/man3/i2d_DIRECTORYSTRING.html +#usr/share/doc/openssl/html/man3/i2d_DISPLAYTEXT.html +#usr/share/doc/openssl/html/man3/i2d_DIST_POINT.html +#usr/share/doc/openssl/html/man3/i2d_DIST_POINT_NAME.html +#usr/share/doc/openssl/html/man3/i2d_DSAPrivateKey.html +#usr/share/doc/openssl/html/man3/i2d_DSAPrivateKey_bio.html +#usr/share/doc/openssl/html/man3/i2d_DSAPrivateKey_fp.html +#usr/share/doc/openssl/html/man3/i2d_DSAPublicKey.html +#usr/share/doc/openssl/html/man3/i2d_DSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/i2d_DSA_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/i2d_DSA_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/i2d_DSA_SIG.html +#usr/share/doc/openssl/html/man3/i2d_DSAparams.html +#usr/share/doc/openssl/html/man3/i2d_ECDSA_SIG.html +#usr/share/doc/openssl/html/man3/i2d_ECPKParameters.html +#usr/share/doc/openssl/html/man3/i2d_ECParameters.html +#usr/share/doc/openssl/html/man3/i2d_ECPrivateKey.html +#usr/share/doc/openssl/html/man3/i2d_ECPrivateKey_bio.html +#usr/share/doc/openssl/html/man3/i2d_ECPrivateKey_fp.html +#usr/share/doc/openssl/html/man3/i2d_EC_PUBKEY.html +#usr/share/doc/openssl/html/man3/i2d_EC_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/i2d_EC_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/i2d_EDIPARTYNAME.html +#usr/share/doc/openssl/html/man3/i2d_ESS_CERT_ID.html +#usr/share/doc/openssl/html/man3/i2d_ESS_ISSUER_SERIAL.html +#usr/share/doc/openssl/html/man3/i2d_ESS_SIGNING_CERT.html +#usr/share/doc/openssl/html/man3/i2d_EXTENDED_KEY_USAGE.html +#usr/share/doc/openssl/html/man3/i2d_GENERAL_NAME.html +#usr/share/doc/openssl/html/man3/i2d_GENERAL_NAMES.html +#usr/share/doc/openssl/html/man3/i2d_IPAddressChoice.html +#usr/share/doc/openssl/html/man3/i2d_IPAddressFamily.html +#usr/share/doc/openssl/html/man3/i2d_IPAddressOrRange.html +#usr/share/doc/openssl/html/man3/i2d_IPAddressRange.html +#usr/share/doc/openssl/html/man3/i2d_ISSUING_DIST_POINT.html +#usr/share/doc/openssl/html/man3/i2d_NETSCAPE_CERT_SEQUENCE.html +#usr/share/doc/openssl/html/man3/i2d_NETSCAPE_SPKAC.html +#usr/share/doc/openssl/html/man3/i2d_NETSCAPE_SPKI.html +#usr/share/doc/openssl/html/man3/i2d_NOTICEREF.html +#usr/share/doc/openssl/html/man3/i2d_Netscape_RSA.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_BASICRESP.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_CERTID.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_CERTSTATUS.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_CRLID.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_ONEREQ.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_REQINFO.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_REQUEST.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_RESPBYTES.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_RESPDATA.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_RESPID.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_RESPONSE.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_REVOKEDINFO.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_SERVICELOC.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_SIGNATURE.html +#usr/share/doc/openssl/html/man3/i2d_OCSP_SINGLERESP.html +#usr/share/doc/openssl/html/man3/i2d_OTHERNAME.html +#usr/share/doc/openssl/html/man3/i2d_PBE2PARAM.html +#usr/share/doc/openssl/html/man3/i2d_PBEPARAM.html +#usr/share/doc/openssl/html/man3/i2d_PBKDF2PARAM.html +#usr/share/doc/openssl/html/man3/i2d_PKCS12.html +#usr/share/doc/openssl/html/man3/i2d_PKCS12_BAGS.html +#usr/share/doc/openssl/html/man3/i2d_PKCS12_MAC_DATA.html +#usr/share/doc/openssl/html/man3/i2d_PKCS12_SAFEBAG.html +#usr/share/doc/openssl/html/man3/i2d_PKCS12_bio.html +#usr/share/doc/openssl/html/man3/i2d_PKCS12_fp.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_DIGEST.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_ENCRYPT.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_ENC_CONTENT.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_ENVELOPE.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_ISSUER_AND_SERIAL.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_NDEF.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_RECIP_INFO.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_SIGNED.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_SIGNER_INFO.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_SIGN_ENVELOPE.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_bio.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_bio_stream.html +#usr/share/doc/openssl/html/man3/i2d_PKCS7_fp.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8PrivateKeyInfo_bio.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8PrivateKeyInfo_fp.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8PrivateKey_bio.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8PrivateKey_fp.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8PrivateKey_nid_bio.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8PrivateKey_nid_fp.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8_PRIV_KEY_INFO.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8_PRIV_KEY_INFO_bio.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8_PRIV_KEY_INFO_fp.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8_bio.html +#usr/share/doc/openssl/html/man3/i2d_PKCS8_fp.html +#usr/share/doc/openssl/html/man3/i2d_PKEY_USAGE_PERIOD.html +#usr/share/doc/openssl/html/man3/i2d_POLICYINFO.html +#usr/share/doc/openssl/html/man3/i2d_POLICYQUALINFO.html +#usr/share/doc/openssl/html/man3/i2d_PROXY_CERT_INFO_EXTENSION.html +#usr/share/doc/openssl/html/man3/i2d_PROXY_POLICY.html +#usr/share/doc/openssl/html/man3/i2d_PUBKEY.html +#usr/share/doc/openssl/html/man3/i2d_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/i2d_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/i2d_PrivateKey.html +#usr/share/doc/openssl/html/man3/i2d_PublicKey.html +#usr/share/doc/openssl/html/man3/i2d_RSAPrivateKey.html +#usr/share/doc/openssl/html/man3/i2d_RSAPrivateKey_bio.html +#usr/share/doc/openssl/html/man3/i2d_RSAPrivateKey_fp.html +#usr/share/doc/openssl/html/man3/i2d_RSAPublicKey.html +#usr/share/doc/openssl/html/man3/i2d_RSAPublicKey_bio.html +#usr/share/doc/openssl/html/man3/i2d_RSAPublicKey_fp.html +#usr/share/doc/openssl/html/man3/i2d_RSA_OAEP_PARAMS.html +#usr/share/doc/openssl/html/man3/i2d_RSA_PSS_PARAMS.html +#usr/share/doc/openssl/html/man3/i2d_RSA_PUBKEY.html +#usr/share/doc/openssl/html/man3/i2d_RSA_PUBKEY_bio.html +#usr/share/doc/openssl/html/man3/i2d_RSA_PUBKEY_fp.html +#usr/share/doc/openssl/html/man3/i2d_SCT_LIST.html +#usr/share/doc/openssl/html/man3/i2d_SSL_SESSION.html +#usr/share/doc/openssl/html/man3/i2d_SXNET.html +#usr/share/doc/openssl/html/man3/i2d_SXNETID.html +#usr/share/doc/openssl/html/man3/i2d_TS_ACCURACY.html +#usr/share/doc/openssl/html/man3/i2d_TS_MSG_IMPRINT.html +#usr/share/doc/openssl/html/man3/i2d_TS_MSG_IMPRINT_bio.html +#usr/share/doc/openssl/html/man3/i2d_TS_MSG_IMPRINT_fp.html +#usr/share/doc/openssl/html/man3/i2d_TS_REQ.html +#usr/share/doc/openssl/html/man3/i2d_TS_REQ_bio.html +#usr/share/doc/openssl/html/man3/i2d_TS_REQ_fp.html +#usr/share/doc/openssl/html/man3/i2d_TS_RESP.html +#usr/share/doc/openssl/html/man3/i2d_TS_RESP_bio.html +#usr/share/doc/openssl/html/man3/i2d_TS_RESP_fp.html +#usr/share/doc/openssl/html/man3/i2d_TS_STATUS_INFO.html +#usr/share/doc/openssl/html/man3/i2d_TS_TST_INFO.html +#usr/share/doc/openssl/html/man3/i2d_TS_TST_INFO_bio.html +#usr/share/doc/openssl/html/man3/i2d_TS_TST_INFO_fp.html +#usr/share/doc/openssl/html/man3/i2d_USERNOTICE.html +#usr/share/doc/openssl/html/man3/i2d_X509.html +#usr/share/doc/openssl/html/man3/i2d_X509_ALGOR.html +#usr/share/doc/openssl/html/man3/i2d_X509_ALGORS.html +#usr/share/doc/openssl/html/man3/i2d_X509_ATTRIBUTE.html +#usr/share/doc/openssl/html/man3/i2d_X509_AUX.html +#usr/share/doc/openssl/html/man3/i2d_X509_CERT_AUX.html +#usr/share/doc/openssl/html/man3/i2d_X509_CINF.html +#usr/share/doc/openssl/html/man3/i2d_X509_CRL.html +#usr/share/doc/openssl/html/man3/i2d_X509_CRL_INFO.html +#usr/share/doc/openssl/html/man3/i2d_X509_CRL_bio.html +#usr/share/doc/openssl/html/man3/i2d_X509_CRL_fp.html +#usr/share/doc/openssl/html/man3/i2d_X509_EXTENSION.html +#usr/share/doc/openssl/html/man3/i2d_X509_EXTENSIONS.html +#usr/share/doc/openssl/html/man3/i2d_X509_NAME.html +#usr/share/doc/openssl/html/man3/i2d_X509_NAME_ENTRY.html +#usr/share/doc/openssl/html/man3/i2d_X509_PUBKEY.html +#usr/share/doc/openssl/html/man3/i2d_X509_REQ.html +#usr/share/doc/openssl/html/man3/i2d_X509_REQ_INFO.html +#usr/share/doc/openssl/html/man3/i2d_X509_REQ_bio.html +#usr/share/doc/openssl/html/man3/i2d_X509_REQ_fp.html +#usr/share/doc/openssl/html/man3/i2d_X509_REVOKED.html +#usr/share/doc/openssl/html/man3/i2d_X509_SIG.html +#usr/share/doc/openssl/html/man3/i2d_X509_VAL.html +#usr/share/doc/openssl/html/man3/i2d_re_X509_CRL_tbs.html +#usr/share/doc/openssl/html/man3/i2d_re_X509_REQ_tbs.html +#usr/share/doc/openssl/html/man3/i2d_re_X509_tbs.html +#usr/share/doc/openssl/html/man3/i2o_SCT.html +#usr/share/doc/openssl/html/man3/i2o_SCT_LIST.html +#usr/share/doc/openssl/html/man3/i2t_ASN1_OBJECT.html +#usr/share/doc/openssl/html/man3/lh_TYPE_delete.html +#usr/share/doc/openssl/html/man3/lh_TYPE_doall.html +#usr/share/doc/openssl/html/man3/lh_TYPE_doall_arg.html +#usr/share/doc/openssl/html/man3/lh_TYPE_error.html +#usr/share/doc/openssl/html/man3/lh_TYPE_free.html +#usr/share/doc/openssl/html/man3/lh_TYPE_insert.html +#usr/share/doc/openssl/html/man3/lh_TYPE_new.html +#usr/share/doc/openssl/html/man3/lh_TYPE_retrieve.html +#usr/share/doc/openssl/html/man3/o2i_SCT.html +#usr/share/doc/openssl/html/man3/o2i_SCT_LIST.html +#usr/share/doc/openssl/html/man3/pem_password_cb.html +#usr/share/doc/openssl/html/man3/sk_TYPE_deep_copy.html +#usr/share/doc/openssl/html/man3/sk_TYPE_delete.html +#usr/share/doc/openssl/html/man3/sk_TYPE_delete_ptr.html +#usr/share/doc/openssl/html/man3/sk_TYPE_dup.html +#usr/share/doc/openssl/html/man3/sk_TYPE_find.html +#usr/share/doc/openssl/html/man3/sk_TYPE_find_ex.html +#usr/share/doc/openssl/html/man3/sk_TYPE_free.html +#usr/share/doc/openssl/html/man3/sk_TYPE_insert.html +#usr/share/doc/openssl/html/man3/sk_TYPE_is_sorted.html +#usr/share/doc/openssl/html/man3/sk_TYPE_new.html +#usr/share/doc/openssl/html/man3/sk_TYPE_new_null.html +#usr/share/doc/openssl/html/man3/sk_TYPE_num.html +#usr/share/doc/openssl/html/man3/sk_TYPE_pop.html +#usr/share/doc/openssl/html/man3/sk_TYPE_pop_free.html +#usr/share/doc/openssl/html/man3/sk_TYPE_push.html +#usr/share/doc/openssl/html/man3/sk_TYPE_set.html +#usr/share/doc/openssl/html/man3/sk_TYPE_set_cmp_func.html +#usr/share/doc/openssl/html/man3/sk_TYPE_shift.html +#usr/share/doc/openssl/html/man3/sk_TYPE_sort.html +#usr/share/doc/openssl/html/man3/sk_TYPE_unshift.html +#usr/share/doc/openssl/html/man3/sk_TYPE_value.html +#usr/share/doc/openssl/html/man3/sk_TYPE_zero.html +#usr/share/doc/openssl/html/man3/ssl_ct_validation_cb.html +#usr/share/doc/openssl/html/man5 +#usr/share/doc/openssl/html/man5/config.html +#usr/share/doc/openssl/html/man5/x509v3_config.html +#usr/share/doc/openssl/html/man7 +#usr/share/doc/openssl/html/man7/crypto.html +#usr/share/doc/openssl/html/man7/ct.html +#usr/share/doc/openssl/html/man7/des_modes.html +#usr/share/doc/openssl/html/man7/evp.html +#usr/share/doc/openssl/html/man7/ssl.html +#usr/share/doc/openssl/html/man7/x509.html +#usr/share/man/man1/CA.pl.1 +#usr/share/man/man1/asn1parse.1 +#usr/share/man/man1/blake2b.1 +#usr/share/man/man1/blake2s.1 +#usr/share/man/man1/c_rehash.1 +#usr/share/man/man1/ca.1 +#usr/share/man/man1/ciphers.1 +#usr/share/man/man1/cms.1 +#usr/share/man/man1/crl.1 +#usr/share/man/man1/crl2pkcs7.1 +#usr/share/man/man1/dgst.1 +#usr/share/man/man1/dhparam.1 +#usr/share/man/man1/dsa.1 +#usr/share/man/man1/dsaparam.1 +#usr/share/man/man1/ec.1 +#usr/share/man/man1/ecparam.1 +#usr/share/man/man1/enc.1 +#usr/share/man/man1/engine.1 +#usr/share/man/man1/errstr.1 +#usr/share/man/man1/gendsa.1 +#usr/share/man/man1/genpkey.1 +#usr/share/man/man1/genrsa.1 +#usr/share/man/man1/list.1 +#usr/share/man/man1/md4.1 +#usr/share/man/man1/md5.1 +#usr/share/man/man1/mdc2.1 +#usr/share/man/man1/nseq.1 +#usr/share/man/man1/ocsp.1 +#usr/share/man/man1/openssl-asn1parse.1 +#usr/share/man/man1/openssl-c_rehash.1 +#usr/share/man/man1/openssl-ca.1 +#usr/share/man/man1/openssl-ciphers.1 +#usr/share/man/man1/openssl-cms.1 +#usr/share/man/man1/openssl-crl.1 +#usr/share/man/man1/openssl-crl2pkcs7.1 +#usr/share/man/man1/openssl-dgst.1 +#usr/share/man/man1/openssl-dhparam.1 +#usr/share/man/man1/openssl-dsa.1 +#usr/share/man/man1/openssl-dsaparam.1 +#usr/share/man/man1/openssl-ec.1 +#usr/share/man/man1/openssl-ecparam.1 +#usr/share/man/man1/openssl-enc.1 +#usr/share/man/man1/openssl-engine.1 +#usr/share/man/man1/openssl-errstr.1 +#usr/share/man/man1/openssl-gendsa.1 +#usr/share/man/man1/openssl-genpkey.1 +#usr/share/man/man1/openssl-genrsa.1 +#usr/share/man/man1/openssl-list.1 +#usr/share/man/man1/openssl-nseq.1 +#usr/share/man/man1/openssl-ocsp.1 +#usr/share/man/man1/openssl-passwd.1 +#usr/share/man/man1/openssl-pkcs12.1 +#usr/share/man/man1/openssl-pkcs7.1 +#usr/share/man/man1/openssl-pkcs8.1 +#usr/share/man/man1/openssl-pkey.1 +#usr/share/man/man1/openssl-pkeyparam.1 +#usr/share/man/man1/openssl-pkeyutl.1 +#usr/share/man/man1/openssl-rand.1 +#usr/share/man/man1/openssl-rehash.1 +#usr/share/man/man1/openssl-req.1 +#usr/share/man/man1/openssl-rsa.1 +#usr/share/man/man1/openssl-rsautl.1 +#usr/share/man/man1/openssl-s_client.1 +#usr/share/man/man1/openssl-s_server.1 +#usr/share/man/man1/openssl-s_time.1 +#usr/share/man/man1/openssl-sess_id.1 +#usr/share/man/man1/openssl-smime.1 +#usr/share/man/man1/openssl-speed.1 +#usr/share/man/man1/openssl-spkac.1 +#usr/share/man/man1/openssl-ts.1 +#usr/share/man/man1/openssl-tsget.1 +#usr/share/man/man1/openssl-verify.1 +#usr/share/man/man1/openssl-version.1 +#usr/share/man/man1/openssl-x509.1 +#usr/share/man/man1/openssl.1 +#usr/share/man/man1/pkcs12.1 +#usr/share/man/man1/pkcs7.1 +#usr/share/man/man1/pkcs8.1 +#usr/share/man/man1/pkey.1 +#usr/share/man/man1/pkeyparam.1 +#usr/share/man/man1/pkeyutl.1 +#usr/share/man/man1/rand.1 +#usr/share/man/man1/rehash.1 +#usr/share/man/man1/req.1 +#usr/share/man/man1/ripemd160.1 +#usr/share/man/man1/rsa.1 +#usr/share/man/man1/rsautl.1 +#usr/share/man/man1/s_client.1 +#usr/share/man/man1/s_server.1 +#usr/share/man/man1/s_time.1 +#usr/share/man/man1/sess_id.1 +#usr/share/man/man1/sha.1 +#usr/share/man/man1/sha1.1 +#usr/share/man/man1/sha224.1 +#usr/share/man/man1/sha256.1 +#usr/share/man/man1/sha384.1 +#usr/share/man/man1/sha512.1 +#usr/share/man/man1/smime.1 +#usr/share/man/man1/speed.1 +#usr/share/man/man1/spkac.1 +#usr/share/man/man1/ts.1 +#usr/share/man/man1/tsget.1 +#usr/share/man/man1/verify.1 +#usr/share/man/man1/version.1 +#usr/share/man/man1/x509.1 +#usr/share/man/man3/ACCESS_DESCRIPTION_free.3 +#usr/share/man/man3/ACCESS_DESCRIPTION_new.3 +#usr/share/man/man3/ASIdOrRange_free.3 +#usr/share/man/man3/ASIdOrRange_new.3 +#usr/share/man/man3/ASIdentifierChoice_free.3 +#usr/share/man/man3/ASIdentifierChoice_new.3 +#usr/share/man/man3/ASIdentifiers_free.3 +#usr/share/man/man3/ASIdentifiers_new.3 +#usr/share/man/man3/ASN1_ENUMERATED_get.3 +#usr/share/man/man3/ASN1_ENUMERATED_get_int64.3 +#usr/share/man/man3/ASN1_ENUMERATED_set.3 +#usr/share/man/man3/ASN1_ENUMERATED_set_int64.3 +#usr/share/man/man3/ASN1_ENUMERATED_to_BN.3 +#usr/share/man/man3/ASN1_INTEGER_get.3 +#usr/share/man/man3/ASN1_INTEGER_get_int64.3 +#usr/share/man/man3/ASN1_INTEGER_get_uint64.3 +#usr/share/man/man3/ASN1_INTEGER_set.3 +#usr/share/man/man3/ASN1_INTEGER_set_int64.3 +#usr/share/man/man3/ASN1_INTEGER_set_uint64.3 +#usr/share/man/man3/ASN1_INTEGER_to_BN.3 +#usr/share/man/man3/ASN1_ITEM.3 +#usr/share/man/man3/ASN1_OBJECT_free.3 +#usr/share/man/man3/ASN1_OBJECT_new.3 +#usr/share/man/man3/ASN1_STRING_cmp.3 +#usr/share/man/man3/ASN1_STRING_data.3 +#usr/share/man/man3/ASN1_STRING_dup.3 +#usr/share/man/man3/ASN1_STRING_free.3 +#usr/share/man/man3/ASN1_STRING_get0_data.3 +#usr/share/man/man3/ASN1_STRING_length.3 +#usr/share/man/man3/ASN1_STRING_new.3 +#usr/share/man/man3/ASN1_STRING_print.3 +#usr/share/man/man3/ASN1_STRING_print_ex.3 +#usr/share/man/man3/ASN1_STRING_print_ex_fp.3 +#usr/share/man/man3/ASN1_STRING_set.3 +#usr/share/man/man3/ASN1_STRING_to_UTF8.3 +#usr/share/man/man3/ASN1_STRING_type.3 +#usr/share/man/man3/ASN1_STRING_type_new.3 +#usr/share/man/man3/ASN1_TIME_adj.3 +#usr/share/man/man3/ASN1_TIME_check.3 +#usr/share/man/man3/ASN1_TIME_diff.3 +#usr/share/man/man3/ASN1_TIME_print.3 +#usr/share/man/man3/ASN1_TIME_set.3 +#usr/share/man/man3/ASN1_TIME_set_string.3 +#usr/share/man/man3/ASN1_TYPE_cmp.3 +#usr/share/man/man3/ASN1_TYPE_get.3 +#usr/share/man/man3/ASN1_TYPE_pack_sequence.3 +#usr/share/man/man3/ASN1_TYPE_set.3 +#usr/share/man/man3/ASN1_TYPE_set1.3 +#usr/share/man/man3/ASN1_TYPE_unpack_sequence.3 +#usr/share/man/man3/ASN1_add_oid_module.3 +#usr/share/man/man3/ASN1_generate_nconf.3 +#usr/share/man/man3/ASN1_generate_v3.3 +#usr/share/man/man3/ASN1_tag2str.3 +#usr/share/man/man3/ASRange_free.3 +#usr/share/man/man3/ASRange_new.3 +#usr/share/man/man3/ASYNC_WAIT_CTX_clear_fd.3 +#usr/share/man/man3/ASYNC_WAIT_CTX_free.3 +#usr/share/man/man3/ASYNC_WAIT_CTX_get_all_fds.3 +#usr/share/man/man3/ASYNC_WAIT_CTX_get_changed_fds.3 +#usr/share/man/man3/ASYNC_WAIT_CTX_get_fd.3 +#usr/share/man/man3/ASYNC_WAIT_CTX_new.3 +#usr/share/man/man3/ASYNC_WAIT_CTX_set_wait_fd.3 +#usr/share/man/man3/ASYNC_block_pause.3 +#usr/share/man/man3/ASYNC_cleanup_thread.3 +#usr/share/man/man3/ASYNC_get_current_job.3 +#usr/share/man/man3/ASYNC_get_wait_ctx.3 +#usr/share/man/man3/ASYNC_init_thread.3 +#usr/share/man/man3/ASYNC_is_capable.3 +#usr/share/man/man3/ASYNC_pause_job.3 +#usr/share/man/man3/ASYNC_start_job.3 +#usr/share/man/man3/ASYNC_unblock_pause.3 +#usr/share/man/man3/AUTHORITY_INFO_ACCESS_free.3 +#usr/share/man/man3/AUTHORITY_INFO_ACCESS_new.3 +#usr/share/man/man3/AUTHORITY_KEYID_free.3 +#usr/share/man/man3/AUTHORITY_KEYID_new.3 +#usr/share/man/man3/BASIC_CONSTRAINTS_free.3 +#usr/share/man/man3/BASIC_CONSTRAINTS_new.3 +#usr/share/man/man3/BF_cbc_encrypt.3 +#usr/share/man/man3/BF_cfb64_encrypt.3 +#usr/share/man/man3/BF_decrypt.3 +#usr/share/man/man3/BF_ecb_encrypt.3 +#usr/share/man/man3/BF_encrypt.3 +#usr/share/man/man3/BF_ofb64_encrypt.3 +#usr/share/man/man3/BF_options.3 +#usr/share/man/man3/BF_set_key.3 +#usr/share/man/man3/BIO_ADDR.3 +#usr/share/man/man3/BIO_ADDRINFO.3 +#usr/share/man/man3/BIO_ADDRINFO_address.3 +#usr/share/man/man3/BIO_ADDRINFO_family.3 +#usr/share/man/man3/BIO_ADDRINFO_free.3 +#usr/share/man/man3/BIO_ADDRINFO_next.3 +#usr/share/man/man3/BIO_ADDRINFO_protocol.3 +#usr/share/man/man3/BIO_ADDRINFO_socktype.3 +#usr/share/man/man3/BIO_ADDR_clear.3 +#usr/share/man/man3/BIO_ADDR_family.3 +#usr/share/man/man3/BIO_ADDR_free.3 +#usr/share/man/man3/BIO_ADDR_hostname_string.3 +#usr/share/man/man3/BIO_ADDR_new.3 +#usr/share/man/man3/BIO_ADDR_path_string.3 +#usr/share/man/man3/BIO_ADDR_rawaddress.3 +#usr/share/man/man3/BIO_ADDR_rawmake.3 +#usr/share/man/man3/BIO_ADDR_rawport.3 +#usr/share/man/man3/BIO_ADDR_service_string.3 +#usr/share/man/man3/BIO_accept_ex.3 +#usr/share/man/man3/BIO_append_filename.3 +#usr/share/man/man3/BIO_callback_ctrl.3 +#usr/share/man/man3/BIO_callback_fn.3 +#usr/share/man/man3/BIO_callback_fn_ex.3 +#usr/share/man/man3/BIO_closesocket.3 +#usr/share/man/man3/BIO_connect.3 +#usr/share/man/man3/BIO_ctrl.3 +#usr/share/man/man3/BIO_ctrl_get_read_request.3 +#usr/share/man/man3/BIO_ctrl_get_write_guarantee.3 +#usr/share/man/man3/BIO_ctrl_pending.3 +#usr/share/man/man3/BIO_ctrl_reset_read_request.3 +#usr/share/man/man3/BIO_ctrl_wpending.3 +#usr/share/man/man3/BIO_debug_callback.3 +#usr/share/man/man3/BIO_destroy_bio_pair.3 +#usr/share/man/man3/BIO_do_accept.3 +#usr/share/man/man3/BIO_do_connect.3 +#usr/share/man/man3/BIO_do_handshake.3 +#usr/share/man/man3/BIO_eof.3 +#usr/share/man/man3/BIO_f_base64.3 +#usr/share/man/man3/BIO_f_buffer.3 +#usr/share/man/man3/BIO_f_cipher.3 +#usr/share/man/man3/BIO_f_md.3 +#usr/share/man/man3/BIO_f_null.3 +#usr/share/man/man3/BIO_f_ssl.3 +#usr/share/man/man3/BIO_find_type.3 +#usr/share/man/man3/BIO_flush.3 +#usr/share/man/man3/BIO_free.3 +#usr/share/man/man3/BIO_free_all.3 +#usr/share/man/man3/BIO_get_accept_name.3 +#usr/share/man/man3/BIO_get_accept_port.3 +#usr/share/man/man3/BIO_get_bind_mode.3 +#usr/share/man/man3/BIO_get_buffer_num_lines.3 +#usr/share/man/man3/BIO_get_callback.3 +#usr/share/man/man3/BIO_get_callback_arg.3 +#usr/share/man/man3/BIO_get_callback_ex.3 +#usr/share/man/man3/BIO_get_cipher_ctx.3 +#usr/share/man/man3/BIO_get_cipher_status.3 +#usr/share/man/man3/BIO_get_close.3 +#usr/share/man/man3/BIO_get_conn_address.3 +#usr/share/man/man3/BIO_get_conn_hostname.3 +#usr/share/man/man3/BIO_get_conn_port.3 +#usr/share/man/man3/BIO_get_data.3 +#usr/share/man/man3/BIO_get_ex_data.3 +#usr/share/man/man3/BIO_get_ex_new_index.3 +#usr/share/man/man3/BIO_get_fd.3 +#usr/share/man/man3/BIO_get_fp.3 +#usr/share/man/man3/BIO_get_info_callback.3 +#usr/share/man/man3/BIO_get_init.3 +#usr/share/man/man3/BIO_get_md.3 +#usr/share/man/man3/BIO_get_md_ctx.3 +#usr/share/man/man3/BIO_get_mem_data.3 +#usr/share/man/man3/BIO_get_mem_ptr.3 +#usr/share/man/man3/BIO_get_new_index.3 +#usr/share/man/man3/BIO_get_num_renegotiates.3 +#usr/share/man/man3/BIO_get_read_request.3 +#usr/share/man/man3/BIO_get_retry_BIO.3 +#usr/share/man/man3/BIO_get_retry_reason.3 +#usr/share/man/man3/BIO_get_shutdown.3 +#usr/share/man/man3/BIO_get_ssl.3 +#usr/share/man/man3/BIO_get_write_buf_size.3 +#usr/share/man/man3/BIO_get_write_guarantee.3 +#usr/share/man/man3/BIO_gets.3 +#usr/share/man/man3/BIO_hostserv_priorities.3 +#usr/share/man/man3/BIO_int_ctrl.3 +#usr/share/man/man3/BIO_listen.3 +#usr/share/man/man3/BIO_lookup.3 +#usr/share/man/man3/BIO_lookup_type.3 +#usr/share/man/man3/BIO_make_bio_pair.3 +#usr/share/man/man3/BIO_meth_free.3 +#usr/share/man/man3/BIO_meth_get_callback_ctrl.3 +#usr/share/man/man3/BIO_meth_get_create.3 +#usr/share/man/man3/BIO_meth_get_ctrl.3 +#usr/share/man/man3/BIO_meth_get_destroy.3 +#usr/share/man/man3/BIO_meth_get_gets.3 +#usr/share/man/man3/BIO_meth_get_puts.3 +#usr/share/man/man3/BIO_meth_get_read.3 +#usr/share/man/man3/BIO_meth_get_write.3 +#usr/share/man/man3/BIO_meth_new.3 +#usr/share/man/man3/BIO_meth_set_callback_ctrl.3 +#usr/share/man/man3/BIO_meth_set_create.3 +#usr/share/man/man3/BIO_meth_set_ctrl.3 +#usr/share/man/man3/BIO_meth_set_destroy.3 +#usr/share/man/man3/BIO_meth_set_gets.3 +#usr/share/man/man3/BIO_meth_set_puts.3 +#usr/share/man/man3/BIO_meth_set_read.3 +#usr/share/man/man3/BIO_meth_set_write.3 +#usr/share/man/man3/BIO_method_type.3 +#usr/share/man/man3/BIO_new.3 +#usr/share/man/man3/BIO_new_CMS.3 +#usr/share/man/man3/BIO_new_accept.3 +#usr/share/man/man3/BIO_new_bio_pair.3 +#usr/share/man/man3/BIO_new_buffer_ssl_connect.3 +#usr/share/man/man3/BIO_new_connect.3 +#usr/share/man/man3/BIO_new_fd.3 +#usr/share/man/man3/BIO_new_file.3 +#usr/share/man/man3/BIO_new_fp.3 +#usr/share/man/man3/BIO_new_mem_buf.3 +#usr/share/man/man3/BIO_new_socket.3 +#usr/share/man/man3/BIO_new_ssl.3 +#usr/share/man/man3/BIO_new_ssl_connect.3 +#usr/share/man/man3/BIO_next.3 +#usr/share/man/man3/BIO_parse_hostserv.3 +#usr/share/man/man3/BIO_pending.3 +#usr/share/man/man3/BIO_pop.3 +#usr/share/man/man3/BIO_printf.3 +#usr/share/man/man3/BIO_ptr_ctrl.3 +#usr/share/man/man3/BIO_push.3 +#usr/share/man/man3/BIO_puts.3 +#usr/share/man/man3/BIO_read.3 +#usr/share/man/man3/BIO_read_filename.3 +#usr/share/man/man3/BIO_reset.3 +#usr/share/man/man3/BIO_retry_type.3 +#usr/share/man/man3/BIO_rw_filename.3 +#usr/share/man/man3/BIO_s_accept.3 +#usr/share/man/man3/BIO_s_bio.3 +#usr/share/man/man3/BIO_s_connect.3 +#usr/share/man/man3/BIO_s_fd.3 +#usr/share/man/man3/BIO_s_file.3 +#usr/share/man/man3/BIO_s_mem.3 +#usr/share/man/man3/BIO_s_null.3 +#usr/share/man/man3/BIO_s_secmem.3 +#usr/share/man/man3/BIO_s_socket.3 +#usr/share/man/man3/BIO_seek.3 +#usr/share/man/man3/BIO_set.3 +#usr/share/man/man3/BIO_set_accept_bios.3 +#usr/share/man/man3/BIO_set_accept_name.3 +#usr/share/man/man3/BIO_set_accept_port.3 +#usr/share/man/man3/BIO_set_bind_mode.3 +#usr/share/man/man3/BIO_set_buffer_read_data.3 +#usr/share/man/man3/BIO_set_buffer_size.3 +#usr/share/man/man3/BIO_set_callback.3 +#usr/share/man/man3/BIO_set_callback_arg.3 +#usr/share/man/man3/BIO_set_callback_ex.3 +#usr/share/man/man3/BIO_set_cipher.3 +#usr/share/man/man3/BIO_set_close.3 +#usr/share/man/man3/BIO_set_conn_address.3 +#usr/share/man/man3/BIO_set_conn_hostname.3 +#usr/share/man/man3/BIO_set_conn_port.3 +#usr/share/man/man3/BIO_set_data.3 +#usr/share/man/man3/BIO_set_ex_data.3 +#usr/share/man/man3/BIO_set_fd.3 +#usr/share/man/man3/BIO_set_fp.3 +#usr/share/man/man3/BIO_set_info_callback.3 +#usr/share/man/man3/BIO_set_init.3 +#usr/share/man/man3/BIO_set_md.3 +#usr/share/man/man3/BIO_set_mem_buf.3 +#usr/share/man/man3/BIO_set_mem_eof_return.3 +#usr/share/man/man3/BIO_set_nbio.3 +#usr/share/man/man3/BIO_set_nbio_accept.3 +#usr/share/man/man3/BIO_set_next.3 +#usr/share/man/man3/BIO_set_read_buffer_size.3 +#usr/share/man/man3/BIO_set_retry_reason.3 +#usr/share/man/man3/BIO_set_shutdown.3 +#usr/share/man/man3/BIO_set_ssl.3 +#usr/share/man/man3/BIO_set_ssl_mode.3 +#usr/share/man/man3/BIO_set_ssl_renegotiate_bytes.3 +#usr/share/man/man3/BIO_set_ssl_renegotiate_timeout.3 +#usr/share/man/man3/BIO_set_write_buf_size.3 +#usr/share/man/man3/BIO_set_write_buffer_size.3 +#usr/share/man/man3/BIO_should_io_special.3 +#usr/share/man/man3/BIO_should_read.3 +#usr/share/man/man3/BIO_should_retry.3 +#usr/share/man/man3/BIO_should_write.3 +#usr/share/man/man3/BIO_shutdown_wr.3 +#usr/share/man/man3/BIO_snprintf.3 +#usr/share/man/man3/BIO_socket.3 +#usr/share/man/man3/BIO_ssl_copy_session_id.3 +#usr/share/man/man3/BIO_ssl_shutdown.3 +#usr/share/man/man3/BIO_tell.3 +#usr/share/man/man3/BIO_up_ref.3 +#usr/share/man/man3/BIO_vfree.3 +#usr/share/man/man3/BIO_vprintf.3 +#usr/share/man/man3/BIO_vsnprintf.3 +#usr/share/man/man3/BIO_wpending.3 +#usr/share/man/man3/BIO_write.3 +#usr/share/man/man3/BIO_write_filename.3 +#usr/share/man/man3/BN_BLINDING_convert.3 +#usr/share/man/man3/BN_BLINDING_convert_ex.3 +#usr/share/man/man3/BN_BLINDING_create_param.3 +#usr/share/man/man3/BN_BLINDING_free.3 +#usr/share/man/man3/BN_BLINDING_get_flags.3 +#usr/share/man/man3/BN_BLINDING_invert.3 +#usr/share/man/man3/BN_BLINDING_invert_ex.3 +#usr/share/man/man3/BN_BLINDING_is_current_thread.3 +#usr/share/man/man3/BN_BLINDING_lock.3 +#usr/share/man/man3/BN_BLINDING_new.3 +#usr/share/man/man3/BN_BLINDING_set_current_thread.3 +#usr/share/man/man3/BN_BLINDING_set_flags.3 +#usr/share/man/man3/BN_BLINDING_unlock.3 +#usr/share/man/man3/BN_BLINDING_update.3 +#usr/share/man/man3/BN_CTX_end.3 +#usr/share/man/man3/BN_CTX_free.3 +#usr/share/man/man3/BN_CTX_get.3 +#usr/share/man/man3/BN_CTX_new.3 +#usr/share/man/man3/BN_CTX_secure_new.3 +#usr/share/man/man3/BN_CTX_start.3 +#usr/share/man/man3/BN_GENCB_call.3 +#usr/share/man/man3/BN_GENCB_free.3 +#usr/share/man/man3/BN_GENCB_get_arg.3 +#usr/share/man/man3/BN_GENCB_new.3 +#usr/share/man/man3/BN_GENCB_set.3 +#usr/share/man/man3/BN_GENCB_set_old.3 +#usr/share/man/man3/BN_MONT_CTX_copy.3 +#usr/share/man/man3/BN_MONT_CTX_free.3 +#usr/share/man/man3/BN_MONT_CTX_new.3 +#usr/share/man/man3/BN_MONT_CTX_set.3 +#usr/share/man/man3/BN_RECP_CTX_free.3 +#usr/share/man/man3/BN_RECP_CTX_new.3 +#usr/share/man/man3/BN_RECP_CTX_set.3 +#usr/share/man/man3/BN_add.3 +#usr/share/man/man3/BN_add_word.3 +#usr/share/man/man3/BN_bin2bn.3 +#usr/share/man/man3/BN_bn2bin.3 +#usr/share/man/man3/BN_bn2binpad.3 +#usr/share/man/man3/BN_bn2dec.3 +#usr/share/man/man3/BN_bn2hex.3 +#usr/share/man/man3/BN_bn2lebinpad.3 +#usr/share/man/man3/BN_bn2mpi.3 +#usr/share/man/man3/BN_clear.3 +#usr/share/man/man3/BN_clear_bit.3 +#usr/share/man/man3/BN_clear_free.3 +#usr/share/man/man3/BN_cmp.3 +#usr/share/man/man3/BN_copy.3 +#usr/share/man/man3/BN_dec2bn.3 +#usr/share/man/man3/BN_div.3 +#usr/share/man/man3/BN_div_recp.3 +#usr/share/man/man3/BN_div_word.3 +#usr/share/man/man3/BN_dup.3 +#usr/share/man/man3/BN_exp.3 +#usr/share/man/man3/BN_free.3 +#usr/share/man/man3/BN_from_montgomery.3 +#usr/share/man/man3/BN_gcd.3 +#usr/share/man/man3/BN_generate_prime.3 +#usr/share/man/man3/BN_generate_prime_ex.3 +#usr/share/man/man3/BN_get0_nist_prime_192.3 +#usr/share/man/man3/BN_get0_nist_prime_224.3 +#usr/share/man/man3/BN_get0_nist_prime_256.3 +#usr/share/man/man3/BN_get0_nist_prime_384.3 +#usr/share/man/man3/BN_get0_nist_prime_521.3 +#usr/share/man/man3/BN_get_rfc2409_prime_1024.3 +#usr/share/man/man3/BN_get_rfc2409_prime_768.3 +#usr/share/man/man3/BN_get_rfc3526_prime_1536.3 +#usr/share/man/man3/BN_get_rfc3526_prime_2048.3 +#usr/share/man/man3/BN_get_rfc3526_prime_3072.3 +#usr/share/man/man3/BN_get_rfc3526_prime_4096.3 +#usr/share/man/man3/BN_get_rfc3526_prime_6144.3 +#usr/share/man/man3/BN_get_rfc3526_prime_8192.3 +#usr/share/man/man3/BN_get_word.3 +#usr/share/man/man3/BN_hex2bn.3 +#usr/share/man/man3/BN_is_bit_set.3 +#usr/share/man/man3/BN_is_odd.3 +#usr/share/man/man3/BN_is_one.3 +#usr/share/man/man3/BN_is_prime.3 +#usr/share/man/man3/BN_is_prime_ex.3 +#usr/share/man/man3/BN_is_prime_fasttest.3 +#usr/share/man/man3/BN_is_prime_fasttest_ex.3 +#usr/share/man/man3/BN_is_word.3 +#usr/share/man/man3/BN_is_zero.3 +#usr/share/man/man3/BN_lebin2bn.3 +#usr/share/man/man3/BN_lshift.3 +#usr/share/man/man3/BN_lshift1.3 +#usr/share/man/man3/BN_mask_bits.3 +#usr/share/man/man3/BN_mod.3 +#usr/share/man/man3/BN_mod_add.3 +#usr/share/man/man3/BN_mod_exp.3 +#usr/share/man/man3/BN_mod_inverse.3 +#usr/share/man/man3/BN_mod_mul.3 +#usr/share/man/man3/BN_mod_mul_montgomery.3 +#usr/share/man/man3/BN_mod_mul_reciprocal.3 +#usr/share/man/man3/BN_mod_sqr.3 +#usr/share/man/man3/BN_mod_sub.3 +#usr/share/man/man3/BN_mod_word.3 +#usr/share/man/man3/BN_mpi2bn.3 +#usr/share/man/man3/BN_mul.3 +#usr/share/man/man3/BN_mul_word.3 +#usr/share/man/man3/BN_new.3 +#usr/share/man/man3/BN_nnmod.3 +#usr/share/man/man3/BN_num_bits.3 +#usr/share/man/man3/BN_num_bits_word.3 +#usr/share/man/man3/BN_num_bytes.3 +#usr/share/man/man3/BN_one.3 +#usr/share/man/man3/BN_print.3 +#usr/share/man/man3/BN_print_fp.3 +#usr/share/man/man3/BN_pseudo_rand.3 +#usr/share/man/man3/BN_pseudo_rand_range.3 +#usr/share/man/man3/BN_rand.3 +#usr/share/man/man3/BN_rand_range.3 +#usr/share/man/man3/BN_rshift.3 +#usr/share/man/man3/BN_rshift1.3 +#usr/share/man/man3/BN_secure_new.3 +#usr/share/man/man3/BN_set_bit.3 +#usr/share/man/man3/BN_set_word.3 +#usr/share/man/man3/BN_sqr.3 +#usr/share/man/man3/BN_sub.3 +#usr/share/man/man3/BN_sub_word.3 +#usr/share/man/man3/BN_swap.3 +#usr/share/man/man3/BN_to_ASN1_ENUMERATED.3 +#usr/share/man/man3/BN_to_ASN1_INTEGER.3 +#usr/share/man/man3/BN_to_montgomery.3 +#usr/share/man/man3/BN_ucmp.3 +#usr/share/man/man3/BN_value_one.3 +#usr/share/man/man3/BN_with_flags.3 +#usr/share/man/man3/BN_zero.3 +#usr/share/man/man3/BUF_MEM_free.3 +#usr/share/man/man3/BUF_MEM_grow.3 +#usr/share/man/man3/BUF_MEM_grow_clean.3 +#usr/share/man/man3/BUF_MEM_new.3 +#usr/share/man/man3/BUF_MEM_new_ex.3 +#usr/share/man/man3/BUF_reverse.3 +#usr/share/man/man3/CERTIFICATEPOLICIES_free.3 +#usr/share/man/man3/CERTIFICATEPOLICIES_new.3 +#usr/share/man/man3/CMS_ContentInfo_free.3 +#usr/share/man/man3/CMS_ContentInfo_new.3 +#usr/share/man/man3/CMS_ContentInfo_print_ctx.3 +#usr/share/man/man3/CMS_ReceiptRequest_create0.3 +#usr/share/man/man3/CMS_ReceiptRequest_free.3 +#usr/share/man/man3/CMS_ReceiptRequest_get0_values.3 +#usr/share/man/man3/CMS_ReceiptRequest_new.3 +#usr/share/man/man3/CMS_RecipientInfo_decrypt.3 +#usr/share/man/man3/CMS_RecipientInfo_encrypt.3 +#usr/share/man/man3/CMS_RecipientInfo_kekri_get0_id.3 +#usr/share/man/man3/CMS_RecipientInfo_kekri_id_cmp.3 +#usr/share/man/man3/CMS_RecipientInfo_ktri_cert_cmp.3 +#usr/share/man/man3/CMS_RecipientInfo_ktri_get0_signer_id.3 +#usr/share/man/man3/CMS_RecipientInfo_set0_key.3 +#usr/share/man/man3/CMS_RecipientInfo_set0_pkey.3 +#usr/share/man/man3/CMS_RecipientInfo_type.3 +#usr/share/man/man3/CMS_SignerInfo_cert_cmp.3 +#usr/share/man/man3/CMS_SignerInfo_get0_signature.3 +#usr/share/man/man3/CMS_SignerInfo_get0_signer_id.3 +#usr/share/man/man3/CMS_SignerInfo_set1_signer_cert.3 +#usr/share/man/man3/CMS_SignerInfo_sign.3 +#usr/share/man/man3/CMS_add0_cert.3 +#usr/share/man/man3/CMS_add0_crl.3 +#usr/share/man/man3/CMS_add0_recipient_key.3 +#usr/share/man/man3/CMS_add1_ReceiptRequest.3 +#usr/share/man/man3/CMS_add1_cert.3 +#usr/share/man/man3/CMS_add1_crl.3 +#usr/share/man/man3/CMS_add1_recipient_cert.3 +#usr/share/man/man3/CMS_add1_signer.3 +#usr/share/man/man3/CMS_compress.3 +#usr/share/man/man3/CMS_decrypt.3 +#usr/share/man/man3/CMS_encrypt.3 +#usr/share/man/man3/CMS_final.3 +#usr/share/man/man3/CMS_get0_RecipientInfos.3 +#usr/share/man/man3/CMS_get0_SignerInfos.3 +#usr/share/man/man3/CMS_get0_content.3 +#usr/share/man/man3/CMS_get0_eContentType.3 +#usr/share/man/man3/CMS_get0_signers.3 +#usr/share/man/man3/CMS_get0_type.3 +#usr/share/man/man3/CMS_get1_ReceiptRequest.3 +#usr/share/man/man3/CMS_get1_certs.3 +#usr/share/man/man3/CMS_get1_crls.3 +#usr/share/man/man3/CMS_set1_eContentType.3 +#usr/share/man/man3/CMS_sign.3 +#usr/share/man/man3/CMS_sign_receipt.3 +#usr/share/man/man3/CMS_uncompress.3 +#usr/share/man/man3/CMS_verify.3 +#usr/share/man/man3/CMS_verify_receipt.3 +#usr/share/man/man3/CONF_modules_finish.3 +#usr/share/man/man3/CONF_modules_free.3 +#usr/share/man/man3/CONF_modules_load.3 +#usr/share/man/man3/CONF_modules_load_file.3 +#usr/share/man/man3/CONF_modules_unload.3 +#usr/share/man/man3/CRL_DIST_POINTS_free.3 +#usr/share/man/man3/CRL_DIST_POINTS_new.3 +#usr/share/man/man3/CRYPTO_EX_dup.3 +#usr/share/man/man3/CRYPTO_EX_free.3 +#usr/share/man/man3/CRYPTO_EX_new.3 +#usr/share/man/man3/CRYPTO_THREAD_lock_free.3 +#usr/share/man/man3/CRYPTO_THREAD_lock_new.3 +#usr/share/man/man3/CRYPTO_THREAD_read_lock.3 +#usr/share/man/man3/CRYPTO_THREAD_run_once.3 +#usr/share/man/man3/CRYPTO_THREAD_unlock.3 +#usr/share/man/man3/CRYPTO_THREAD_write_lock.3 +#usr/share/man/man3/CRYPTO_atomic_add.3 +#usr/share/man/man3/CRYPTO_clear_free.3 +#usr/share/man/man3/CRYPTO_clear_realloc.3 +#usr/share/man/man3/CRYPTO_free.3 +#usr/share/man/man3/CRYPTO_free_ex_data.3 +#usr/share/man/man3/CRYPTO_free_ex_index.3 +#usr/share/man/man3/CRYPTO_get_ex_data.3 +#usr/share/man/man3/CRYPTO_get_ex_new_index.3 +#usr/share/man/man3/CRYPTO_get_mem_functions.3 +#usr/share/man/man3/CRYPTO_malloc.3 +#usr/share/man/man3/CRYPTO_mem_ctrl.3 +#usr/share/man/man3/CRYPTO_mem_debug_pop.3 +#usr/share/man/man3/CRYPTO_mem_debug_push.3 +#usr/share/man/man3/CRYPTO_mem_leaks.3 +#usr/share/man/man3/CRYPTO_mem_leaks_fp.3 +#usr/share/man/man3/CRYPTO_new_ex_data.3 +#usr/share/man/man3/CRYPTO_realloc.3 +#usr/share/man/man3/CRYPTO_secure_clear_free.3 +#usr/share/man/man3/CRYPTO_secure_free.3 +#usr/share/man/man3/CRYPTO_secure_malloc.3 +#usr/share/man/man3/CRYPTO_secure_malloc_done.3 +#usr/share/man/man3/CRYPTO_secure_malloc_init.3 +#usr/share/man/man3/CRYPTO_secure_malloc_initialized.3 +#usr/share/man/man3/CRYPTO_secure_used.3 +#usr/share/man/man3/CRYPTO_secure_zalloc.3 +#usr/share/man/man3/CRYPTO_set_ex_data.3 +#usr/share/man/man3/CRYPTO_set_mem_debug.3 +#usr/share/man/man3/CRYPTO_set_mem_functions.3 +#usr/share/man/man3/CRYPTO_strdup.3 +#usr/share/man/man3/CRYPTO_strndup.3 +#usr/share/man/man3/CRYPTO_zalloc.3 +#usr/share/man/man3/CTLOG_STORE_free.3 +#usr/share/man/man3/CTLOG_STORE_get0_log_by_id.3 +#usr/share/man/man3/CTLOG_STORE_load_default_file.3 +#usr/share/man/man3/CTLOG_STORE_load_file.3 +#usr/share/man/man3/CTLOG_STORE_new.3 +#usr/share/man/man3/CTLOG_free.3 +#usr/share/man/man3/CTLOG_get0_log_id.3 +#usr/share/man/man3/CTLOG_get0_name.3 +#usr/share/man/man3/CTLOG_get0_public_key.3 +#usr/share/man/man3/CTLOG_new.3 +#usr/share/man/man3/CTLOG_new_from_base64.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_free.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_get0_cert.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_get0_issuer.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_get0_log_store.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_get_time.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_new.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_set1_cert.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_set1_issuer.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE.3 +#usr/share/man/man3/CT_POLICY_EVAL_CTX_set_time.3 +#usr/share/man/man3/DECLARE_ASN1_FUNCTIONS.3 +#usr/share/man/man3/DECLARE_LHASH_OF.3 +#usr/share/man/man3/DECLARE_PEM_rw.3 +#usr/share/man/man3/DEFINE_SPECIAL_STACK_OF.3 +#usr/share/man/man3/DEFINE_SPECIAL_STACK_OF_CONST.3 +#usr/share/man/man3/DEFINE_STACK_OF.3 +#usr/share/man/man3/DEFINE_STACK_OF_CONST.3 +#usr/share/man/man3/DES_cbc_cksum.3 +#usr/share/man/man3/DES_cfb64_encrypt.3 +#usr/share/man/man3/DES_cfb_encrypt.3 +#usr/share/man/man3/DES_crypt.3 +#usr/share/man/man3/DES_ecb2_encrypt.3 +#usr/share/man/man3/DES_ecb3_encrypt.3 +#usr/share/man/man3/DES_ecb_encrypt.3 +#usr/share/man/man3/DES_ede2_cbc_encrypt.3 +#usr/share/man/man3/DES_ede2_cfb64_encrypt.3 +#usr/share/man/man3/DES_ede2_ofb64_encrypt.3 +#usr/share/man/man3/DES_ede3_cbc_encrypt.3 +#usr/share/man/man3/DES_ede3_cfb64_encrypt.3 +#usr/share/man/man3/DES_ede3_ofb64_encrypt.3 +#usr/share/man/man3/DES_fcrypt.3 +#usr/share/man/man3/DES_is_weak_key.3 +#usr/share/man/man3/DES_key_sched.3 +#usr/share/man/man3/DES_ncbc_encrypt.3 +#usr/share/man/man3/DES_ofb64_encrypt.3 +#usr/share/man/man3/DES_ofb_encrypt.3 +#usr/share/man/man3/DES_pcbc_encrypt.3 +#usr/share/man/man3/DES_quad_cksum.3 +#usr/share/man/man3/DES_random_key.3 +#usr/share/man/man3/DES_set_key.3 +#usr/share/man/man3/DES_set_key_checked.3 +#usr/share/man/man3/DES_set_key_unchecked.3 +#usr/share/man/man3/DES_set_odd_parity.3 +#usr/share/man/man3/DES_string_to_2keys.3 +#usr/share/man/man3/DES_string_to_key.3 +#usr/share/man/man3/DES_xcbc_encrypt.3 +#usr/share/man/man3/DH_OpenSSL.3 +#usr/share/man/man3/DH_bits.3 +#usr/share/man/man3/DH_check.3 +#usr/share/man/man3/DH_check_params.3 +#usr/share/man/man3/DH_clear_flags.3 +#usr/share/man/man3/DH_compute_key.3 +#usr/share/man/man3/DH_free.3 +#usr/share/man/man3/DH_generate_key.3 +#usr/share/man/man3/DH_generate_parameters.3 +#usr/share/man/man3/DH_generate_parameters_ex.3 +#usr/share/man/man3/DH_get0_engine.3 +#usr/share/man/man3/DH_get0_key.3 +#usr/share/man/man3/DH_get0_pqg.3 +#usr/share/man/man3/DH_get_1024_160.3 +#usr/share/man/man3/DH_get_2048_224.3 +#usr/share/man/man3/DH_get_2048_256.3 +#usr/share/man/man3/DH_get_default_method.3 +#usr/share/man/man3/DH_get_ex_data.3 +#usr/share/man/man3/DH_get_ex_new_index.3 +#usr/share/man/man3/DH_get_length.3 +#usr/share/man/man3/DH_meth_dup.3 +#usr/share/man/man3/DH_meth_free.3 +#usr/share/man/man3/DH_meth_get0_app_data.3 +#usr/share/man/man3/DH_meth_get0_name.3 +#usr/share/man/man3/DH_meth_get_bn_mod_exp.3 +#usr/share/man/man3/DH_meth_get_compute_key.3 +#usr/share/man/man3/DH_meth_get_finish.3 +#usr/share/man/man3/DH_meth_get_flags.3 +#usr/share/man/man3/DH_meth_get_generate_key.3 +#usr/share/man/man3/DH_meth_get_generate_params.3 +#usr/share/man/man3/DH_meth_get_init.3 +#usr/share/man/man3/DH_meth_new.3 +#usr/share/man/man3/DH_meth_set0_app_data.3 +#usr/share/man/man3/DH_meth_set1_name.3 +#usr/share/man/man3/DH_meth_set_bn_mod_exp.3 +#usr/share/man/man3/DH_meth_set_compute_key.3 +#usr/share/man/man3/DH_meth_set_finish.3 +#usr/share/man/man3/DH_meth_set_flags.3 +#usr/share/man/man3/DH_meth_set_generate_key.3 +#usr/share/man/man3/DH_meth_set_generate_params.3 +#usr/share/man/man3/DH_meth_set_init.3 +#usr/share/man/man3/DH_new.3 +#usr/share/man/man3/DH_new_method.3 +#usr/share/man/man3/DH_set0_key.3 +#usr/share/man/man3/DH_set0_pqg.3 +#usr/share/man/man3/DH_set_default_method.3 +#usr/share/man/man3/DH_set_ex_data.3 +#usr/share/man/man3/DH_set_flags.3 +#usr/share/man/man3/DH_set_length.3 +#usr/share/man/man3/DH_set_method.3 +#usr/share/man/man3/DH_size.3 +#usr/share/man/man3/DH_test_flags.3 +#usr/share/man/man3/DHparams_print.3 +#usr/share/man/man3/DHparams_print_fp.3 +#usr/share/man/man3/DIRECTORYSTRING_free.3 +#usr/share/man/man3/DIRECTORYSTRING_new.3 +#usr/share/man/man3/DISPLAYTEXT_free.3 +#usr/share/man/man3/DISPLAYTEXT_new.3 +#usr/share/man/man3/DIST_POINT_NAME_free.3 +#usr/share/man/man3/DIST_POINT_NAME_new.3 +#usr/share/man/man3/DIST_POINT_free.3 +#usr/share/man/man3/DIST_POINT_new.3 +#usr/share/man/man3/DSA_OpenSSL.3 +#usr/share/man/man3/DSA_SIG_free.3 +#usr/share/man/man3/DSA_SIG_get0.3 +#usr/share/man/man3/DSA_SIG_new.3 +#usr/share/man/man3/DSA_SIG_set0.3 +#usr/share/man/man3/DSA_bits.3 +#usr/share/man/man3/DSA_clear_flags.3 +#usr/share/man/man3/DSA_do_sign.3 +#usr/share/man/man3/DSA_do_verify.3 +#usr/share/man/man3/DSA_dup_DH.3 +#usr/share/man/man3/DSA_free.3 +#usr/share/man/man3/DSA_generate_key.3 +#usr/share/man/man3/DSA_generate_parameters.3 +#usr/share/man/man3/DSA_generate_parameters_ex.3 +#usr/share/man/man3/DSA_get0_engine.3 +#usr/share/man/man3/DSA_get0_key.3 +#usr/share/man/man3/DSA_get0_pqg.3 +#usr/share/man/man3/DSA_get_default_method.3 +#usr/share/man/man3/DSA_get_ex_data.3 +#usr/share/man/man3/DSA_get_ex_new_index.3 +#usr/share/man/man3/DSA_meth_dup.3 +#usr/share/man/man3/DSA_meth_free.3 +#usr/share/man/man3/DSA_meth_get0_app_data.3 +#usr/share/man/man3/DSA_meth_get0_name.3 +#usr/share/man/man3/DSA_meth_get_bn_mod_exp.3 +#usr/share/man/man3/DSA_meth_get_finish.3 +#usr/share/man/man3/DSA_meth_get_flags.3 +#usr/share/man/man3/DSA_meth_get_init.3 +#usr/share/man/man3/DSA_meth_get_keygen.3 +#usr/share/man/man3/DSA_meth_get_mod_exp.3 +#usr/share/man/man3/DSA_meth_get_paramgen.3 +#usr/share/man/man3/DSA_meth_get_sign.3 +#usr/share/man/man3/DSA_meth_get_sign_setup.3 +#usr/share/man/man3/DSA_meth_get_verify.3 +#usr/share/man/man3/DSA_meth_new.3 +#usr/share/man/man3/DSA_meth_set0_app_data.3 +#usr/share/man/man3/DSA_meth_set1_name.3 +#usr/share/man/man3/DSA_meth_set_bn_mod_exp.3 +#usr/share/man/man3/DSA_meth_set_finish.3 +#usr/share/man/man3/DSA_meth_set_flags.3 +#usr/share/man/man3/DSA_meth_set_init.3 +#usr/share/man/man3/DSA_meth_set_keygen.3 +#usr/share/man/man3/DSA_meth_set_mod_exp.3 +#usr/share/man/man3/DSA_meth_set_paramgen.3 +#usr/share/man/man3/DSA_meth_set_sign.3 +#usr/share/man/man3/DSA_meth_set_sign_setup.3 +#usr/share/man/man3/DSA_meth_set_verify.3 +#usr/share/man/man3/DSA_new.3 +#usr/share/man/man3/DSA_new_method.3 +#usr/share/man/man3/DSA_print.3 +#usr/share/man/man3/DSA_print_fp.3 +#usr/share/man/man3/DSA_set0_key.3 +#usr/share/man/man3/DSA_set0_pqg.3 +#usr/share/man/man3/DSA_set_default_method.3 +#usr/share/man/man3/DSA_set_ex_data.3 +#usr/share/man/man3/DSA_set_flags.3 +#usr/share/man/man3/DSA_set_method.3 +#usr/share/man/man3/DSA_sign.3 +#usr/share/man/man3/DSA_sign_setup.3 +#usr/share/man/man3/DSA_size.3 +#usr/share/man/man3/DSA_test_flags.3 +#usr/share/man/man3/DSA_verify.3 +#usr/share/man/man3/DSAparams_dup.3 +#usr/share/man/man3/DSAparams_print.3 +#usr/share/man/man3/DSAparams_print_fp.3 +#usr/share/man/man3/DTLS_client_method.3 +#usr/share/man/man3/DTLS_method.3 +#usr/share/man/man3/DTLS_server_method.3 +#usr/share/man/man3/DTLSv1_2_client_method.3 +#usr/share/man/man3/DTLSv1_2_method.3 +#usr/share/man/man3/DTLSv1_2_server_method.3 +#usr/share/man/man3/DTLSv1_client_method.3 +#usr/share/man/man3/DTLSv1_listen.3 +#usr/share/man/man3/DTLSv1_method.3 +#usr/share/man/man3/DTLSv1_server_method.3 +#usr/share/man/man3/ECDH_get_ex_data.3 +#usr/share/man/man3/ECDH_get_ex_new_index.3 +#usr/share/man/man3/ECDH_set_ex_data.3 +#usr/share/man/man3/ECDSA_SIG_free.3 +#usr/share/man/man3/ECDSA_SIG_get0.3 +#usr/share/man/man3/ECDSA_SIG_new.3 +#usr/share/man/man3/ECDSA_SIG_set0.3 +#usr/share/man/man3/ECDSA_do_sign.3 +#usr/share/man/man3/ECDSA_do_sign_ex.3 +#usr/share/man/man3/ECDSA_do_verify.3 +#usr/share/man/man3/ECDSA_sign.3 +#usr/share/man/man3/ECDSA_sign_ex.3 +#usr/share/man/man3/ECDSA_sign_setup.3 +#usr/share/man/man3/ECDSA_size.3 +#usr/share/man/man3/ECDSA_verify.3 +#usr/share/man/man3/ECPARAMETERS_free.3 +#usr/share/man/man3/ECPARAMETERS_new.3 +#usr/share/man/man3/ECPKPARAMETERS_free.3 +#usr/share/man/man3/ECPKPARAMETERS_new.3 +#usr/share/man/man3/ECPKParameters_print.3 +#usr/share/man/man3/ECPKParameters_print_fp.3 +#usr/share/man/man3/EC_GF2m_simple_method.3 +#usr/share/man/man3/EC_GFp_mont_method.3 +#usr/share/man/man3/EC_GFp_nist_method.3 +#usr/share/man/man3/EC_GFp_nistp224_method.3 +#usr/share/man/man3/EC_GFp_nistp256_method.3 +#usr/share/man/man3/EC_GFp_nistp521_method.3 +#usr/share/man/man3/EC_GFp_simple_method.3 +#usr/share/man/man3/EC_GROUP_check.3 +#usr/share/man/man3/EC_GROUP_check_discriminant.3 +#usr/share/man/man3/EC_GROUP_clear_free.3 +#usr/share/man/man3/EC_GROUP_cmp.3 +#usr/share/man/man3/EC_GROUP_copy.3 +#usr/share/man/man3/EC_GROUP_dup.3 +#usr/share/man/man3/EC_GROUP_free.3 +#usr/share/man/man3/EC_GROUP_get0_cofactor.3 +#usr/share/man/man3/EC_GROUP_get0_generator.3 +#usr/share/man/man3/EC_GROUP_get0_order.3 +#usr/share/man/man3/EC_GROUP_get0_seed.3 +#usr/share/man/man3/EC_GROUP_get_asn1_flag.3 +#usr/share/man/man3/EC_GROUP_get_basis_type.3 +#usr/share/man/man3/EC_GROUP_get_cofactor.3 +#usr/share/man/man3/EC_GROUP_get_curve_GF2m.3 +#usr/share/man/man3/EC_GROUP_get_curve_GFp.3 +#usr/share/man/man3/EC_GROUP_get_curve_name.3 +#usr/share/man/man3/EC_GROUP_get_degree.3 +#usr/share/man/man3/EC_GROUP_get_ecparameters.3 +#usr/share/man/man3/EC_GROUP_get_ecpkparameters.3 +#usr/share/man/man3/EC_GROUP_get_order.3 +#usr/share/man/man3/EC_GROUP_get_pentanomial_basis.3 +#usr/share/man/man3/EC_GROUP_get_point_conversion_form.3 +#usr/share/man/man3/EC_GROUP_get_seed_len.3 +#usr/share/man/man3/EC_GROUP_get_trinomial_basis.3 +#usr/share/man/man3/EC_GROUP_have_precompute_mult.3 +#usr/share/man/man3/EC_GROUP_method_of.3 +#usr/share/man/man3/EC_GROUP_new.3 +#usr/share/man/man3/EC_GROUP_new_by_curve_name.3 +#usr/share/man/man3/EC_GROUP_new_curve_GF2m.3 +#usr/share/man/man3/EC_GROUP_new_curve_GFp.3 +#usr/share/man/man3/EC_GROUP_new_from_ecparameters.3 +#usr/share/man/man3/EC_GROUP_new_from_ecpkparameters.3 +#usr/share/man/man3/EC_GROUP_order_bits.3 +#usr/share/man/man3/EC_GROUP_precompute_mult.3 +#usr/share/man/man3/EC_GROUP_set_asn1_flag.3 +#usr/share/man/man3/EC_GROUP_set_curve_GF2m.3 +#usr/share/man/man3/EC_GROUP_set_curve_GFp.3 +#usr/share/man/man3/EC_GROUP_set_curve_name.3 +#usr/share/man/man3/EC_GROUP_set_generator.3 +#usr/share/man/man3/EC_GROUP_set_point_conversion_form.3 +#usr/share/man/man3/EC_GROUP_set_seed.3 +#usr/share/man/man3/EC_KEY_check_key.3 +#usr/share/man/man3/EC_KEY_clear_flags.3 +#usr/share/man/man3/EC_KEY_copy.3 +#usr/share/man/man3/EC_KEY_dup.3 +#usr/share/man/man3/EC_KEY_free.3 +#usr/share/man/man3/EC_KEY_generate_key.3 +#usr/share/man/man3/EC_KEY_get0_group.3 +#usr/share/man/man3/EC_KEY_get0_private_key.3 +#usr/share/man/man3/EC_KEY_get0_public_key.3 +#usr/share/man/man3/EC_KEY_get_conv_form.3 +#usr/share/man/man3/EC_KEY_get_enc_flags.3 +#usr/share/man/man3/EC_KEY_get_ex_data.3 +#usr/share/man/man3/EC_KEY_get_ex_new_index.3 +#usr/share/man/man3/EC_KEY_get_flags.3 +#usr/share/man/man3/EC_KEY_get_method.3 +#usr/share/man/man3/EC_KEY_key2buf.3 +#usr/share/man/man3/EC_KEY_new.3 +#usr/share/man/man3/EC_KEY_new_by_curve_name.3 +#usr/share/man/man3/EC_KEY_oct2key.3 +#usr/share/man/man3/EC_KEY_oct2priv.3 +#usr/share/man/man3/EC_KEY_precompute_mult.3 +#usr/share/man/man3/EC_KEY_priv2buf.3 +#usr/share/man/man3/EC_KEY_priv2oct.3 +#usr/share/man/man3/EC_KEY_set_asn1_flag.3 +#usr/share/man/man3/EC_KEY_set_conv_form.3 +#usr/share/man/man3/EC_KEY_set_enc_flags.3 +#usr/share/man/man3/EC_KEY_set_ex_data.3 +#usr/share/man/man3/EC_KEY_set_flags.3 +#usr/share/man/man3/EC_KEY_set_group.3 +#usr/share/man/man3/EC_KEY_set_method.3 +#usr/share/man/man3/EC_KEY_set_private_key.3 +#usr/share/man/man3/EC_KEY_set_public_key.3 +#usr/share/man/man3/EC_KEY_set_public_key_affine_coordinates.3 +#usr/share/man/man3/EC_KEY_up_ref.3 +#usr/share/man/man3/EC_METHOD_get_field_type.3 +#usr/share/man/man3/EC_POINT_add.3 +#usr/share/man/man3/EC_POINT_bn2point.3 +#usr/share/man/man3/EC_POINT_clear_free.3 +#usr/share/man/man3/EC_POINT_cmp.3 +#usr/share/man/man3/EC_POINT_copy.3 +#usr/share/man/man3/EC_POINT_dbl.3 +#usr/share/man/man3/EC_POINT_dup.3 +#usr/share/man/man3/EC_POINT_free.3 +#usr/share/man/man3/EC_POINT_get_Jprojective_coordinates_GFp.3 +#usr/share/man/man3/EC_POINT_get_affine_coordinates_GF2m.3 +#usr/share/man/man3/EC_POINT_get_affine_coordinates_GFp.3 +#usr/share/man/man3/EC_POINT_hex2point.3 +#usr/share/man/man3/EC_POINT_invert.3 +#usr/share/man/man3/EC_POINT_is_at_infinity.3 +#usr/share/man/man3/EC_POINT_is_on_curve.3 +#usr/share/man/man3/EC_POINT_make_affine.3 +#usr/share/man/man3/EC_POINT_method_of.3 +#usr/share/man/man3/EC_POINT_mul.3 +#usr/share/man/man3/EC_POINT_new.3 +#usr/share/man/man3/EC_POINT_oct2point.3 +#usr/share/man/man3/EC_POINT_point2bn.3 +#usr/share/man/man3/EC_POINT_point2buf.3 +#usr/share/man/man3/EC_POINT_point2hex.3 +#usr/share/man/man3/EC_POINT_point2oct.3 +#usr/share/man/man3/EC_POINT_set_Jprojective_coordinates_GFp.3 +#usr/share/man/man3/EC_POINT_set_affine_coordinates_GF2m.3 +#usr/share/man/man3/EC_POINT_set_affine_coordinates_GFp.3 +#usr/share/man/man3/EC_POINT_set_compressed_coordinates_GF2m.3 +#usr/share/man/man3/EC_POINT_set_compressed_coordinates_GFp.3 +#usr/share/man/man3/EC_POINT_set_to_infinity.3 +#usr/share/man/man3/EC_POINTs_make_affine.3 +#usr/share/man/man3/EC_POINTs_mul.3 +#usr/share/man/man3/EC_get_builtin_curves.3 +#usr/share/man/man3/EDIPARTYNAME_free.3 +#usr/share/man/man3/EDIPARTYNAME_new.3 +#usr/share/man/man3/ENGINE_add.3 +#usr/share/man/man3/ENGINE_add_conf_module.3 +#usr/share/man/man3/ENGINE_by_id.3 +#usr/share/man/man3/ENGINE_cleanup.3 +#usr/share/man/man3/ENGINE_cmd_is_executable.3 +#usr/share/man/man3/ENGINE_ctrl.3 +#usr/share/man/man3/ENGINE_ctrl_cmd.3 +#usr/share/man/man3/ENGINE_ctrl_cmd_string.3 +#usr/share/man/man3/ENGINE_finish.3 +#usr/share/man/man3/ENGINE_free.3 +#usr/share/man/man3/ENGINE_get_DH.3 +#usr/share/man/man3/ENGINE_get_DSA.3 +#usr/share/man/man3/ENGINE_get_ECDH.3 +#usr/share/man/man3/ENGINE_get_ECDSA.3 +#usr/share/man/man3/ENGINE_get_RAND.3 +#usr/share/man/man3/ENGINE_get_RSA.3 +#usr/share/man/man3/ENGINE_get_cipher.3 +#usr/share/man/man3/ENGINE_get_cipher_engine.3 +#usr/share/man/man3/ENGINE_get_ciphers.3 +#usr/share/man/man3/ENGINE_get_cmd_defns.3 +#usr/share/man/man3/ENGINE_get_ctrl_function.3 +#usr/share/man/man3/ENGINE_get_default_DH.3 +#usr/share/man/man3/ENGINE_get_default_DSA.3 +#usr/share/man/man3/ENGINE_get_default_ECDH.3 +#usr/share/man/man3/ENGINE_get_default_ECDSA.3 +#usr/share/man/man3/ENGINE_get_default_RAND.3 +#usr/share/man/man3/ENGINE_get_default_RSA.3 +#usr/share/man/man3/ENGINE_get_destroy_function.3 +#usr/share/man/man3/ENGINE_get_digest.3 +#usr/share/man/man3/ENGINE_get_digest_engine.3 +#usr/share/man/man3/ENGINE_get_digests.3 +#usr/share/man/man3/ENGINE_get_ex_data.3 +#usr/share/man/man3/ENGINE_get_ex_new_index.3 +#usr/share/man/man3/ENGINE_get_finish_function.3 +#usr/share/man/man3/ENGINE_get_first.3 +#usr/share/man/man3/ENGINE_get_flags.3 +#usr/share/man/man3/ENGINE_get_id.3 +#usr/share/man/man3/ENGINE_get_init_function.3 +#usr/share/man/man3/ENGINE_get_last.3 +#usr/share/man/man3/ENGINE_get_load_privkey_function.3 +#usr/share/man/man3/ENGINE_get_load_pubkey_function.3 +#usr/share/man/man3/ENGINE_get_name.3 +#usr/share/man/man3/ENGINE_get_next.3 +#usr/share/man/man3/ENGINE_get_prev.3 +#usr/share/man/man3/ENGINE_get_table_flags.3 +#usr/share/man/man3/ENGINE_init.3 +#usr/share/man/man3/ENGINE_load_builtin_engines.3 +#usr/share/man/man3/ENGINE_load_private_key.3 +#usr/share/man/man3/ENGINE_load_public_key.3 +#usr/share/man/man3/ENGINE_new.3 +#usr/share/man/man3/ENGINE_register_DH.3 +#usr/share/man/man3/ENGINE_register_DSA.3 +#usr/share/man/man3/ENGINE_register_ECDH.3 +#usr/share/man/man3/ENGINE_register_ECDSA.3 +#usr/share/man/man3/ENGINE_register_RAND.3 +#usr/share/man/man3/ENGINE_register_RSA.3 +#usr/share/man/man3/ENGINE_register_all_DH.3 +#usr/share/man/man3/ENGINE_register_all_DSA.3 +#usr/share/man/man3/ENGINE_register_all_ECDH.3 +#usr/share/man/man3/ENGINE_register_all_ECDSA.3 +#usr/share/man/man3/ENGINE_register_all_RAND.3 +#usr/share/man/man3/ENGINE_register_all_RSA.3 +#usr/share/man/man3/ENGINE_register_all_ciphers.3 +#usr/share/man/man3/ENGINE_register_all_complete.3 +#usr/share/man/man3/ENGINE_register_all_digests.3 +#usr/share/man/man3/ENGINE_register_ciphers.3 +#usr/share/man/man3/ENGINE_register_complete.3 +#usr/share/man/man3/ENGINE_register_digests.3 +#usr/share/man/man3/ENGINE_remove.3 +#usr/share/man/man3/ENGINE_set_DH.3 +#usr/share/man/man3/ENGINE_set_DSA.3 +#usr/share/man/man3/ENGINE_set_ECDH.3 +#usr/share/man/man3/ENGINE_set_ECDSA.3 +#usr/share/man/man3/ENGINE_set_RAND.3 +#usr/share/man/man3/ENGINE_set_RSA.3 +#usr/share/man/man3/ENGINE_set_ciphers.3 +#usr/share/man/man3/ENGINE_set_cmd_defns.3 +#usr/share/man/man3/ENGINE_set_ctrl_function.3 +#usr/share/man/man3/ENGINE_set_default.3 +#usr/share/man/man3/ENGINE_set_default_DH.3 +#usr/share/man/man3/ENGINE_set_default_DSA.3 +#usr/share/man/man3/ENGINE_set_default_ECDH.3 +#usr/share/man/man3/ENGINE_set_default_ECDSA.3 +#usr/share/man/man3/ENGINE_set_default_RAND.3 +#usr/share/man/man3/ENGINE_set_default_RSA.3 +#usr/share/man/man3/ENGINE_set_default_ciphers.3 +#usr/share/man/man3/ENGINE_set_default_digests.3 +#usr/share/man/man3/ENGINE_set_default_string.3 +#usr/share/man/man3/ENGINE_set_destroy_function.3 +#usr/share/man/man3/ENGINE_set_digests.3 +#usr/share/man/man3/ENGINE_set_ex_data.3 +#usr/share/man/man3/ENGINE_set_finish_function.3 +#usr/share/man/man3/ENGINE_set_flags.3 +#usr/share/man/man3/ENGINE_set_id.3 +#usr/share/man/man3/ENGINE_set_init_function.3 +#usr/share/man/man3/ENGINE_set_load_privkey_function.3 +#usr/share/man/man3/ENGINE_set_load_pubkey_function.3 +#usr/share/man/man3/ENGINE_set_name.3 +#usr/share/man/man3/ENGINE_set_table_flags.3 +#usr/share/man/man3/ENGINE_unregister_DH.3 +#usr/share/man/man3/ENGINE_unregister_DSA.3 +#usr/share/man/man3/ENGINE_unregister_ECDH.3 +#usr/share/man/man3/ENGINE_unregister_ECDSA.3 +#usr/share/man/man3/ENGINE_unregister_RAND.3 +#usr/share/man/man3/ENGINE_unregister_RSA.3 +#usr/share/man/man3/ENGINE_unregister_ciphers.3 +#usr/share/man/man3/ENGINE_unregister_digests.3 +#usr/share/man/man3/ENGINE_up_ref.3 +#usr/share/man/man3/ERR_FATAL_ERROR.3 +#usr/share/man/man3/ERR_GET_FUNC.3 +#usr/share/man/man3/ERR_GET_LIB.3 +#usr/share/man/man3/ERR_GET_REASON.3 +#usr/share/man/man3/ERR_PACK.3 +#usr/share/man/man3/ERR_add_error_data.3 +#usr/share/man/man3/ERR_clear_error.3 +#usr/share/man/man3/ERR_error_string.3 +#usr/share/man/man3/ERR_error_string_n.3 +#usr/share/man/man3/ERR_free_strings.3 +#usr/share/man/man3/ERR_func_error_string.3 +#usr/share/man/man3/ERR_get_error.3 +#usr/share/man/man3/ERR_get_error_line.3 +#usr/share/man/man3/ERR_get_error_line_data.3 +#usr/share/man/man3/ERR_get_next_error_library.3 +#usr/share/man/man3/ERR_lib_error_string.3 +#usr/share/man/man3/ERR_load_crypto_strings.3 +#usr/share/man/man3/ERR_load_strings.3 +#usr/share/man/man3/ERR_peek_error.3 +#usr/share/man/man3/ERR_peek_error_line.3 +#usr/share/man/man3/ERR_peek_error_line_data.3 +#usr/share/man/man3/ERR_peek_last_error.3 +#usr/share/man/man3/ERR_peek_last_error_line.3 +#usr/share/man/man3/ERR_peek_last_error_line_data.3 +#usr/share/man/man3/ERR_pop_to_mark.3 +#usr/share/man/man3/ERR_print_errors.3 +#usr/share/man/man3/ERR_print_errors_cb.3 +#usr/share/man/man3/ERR_print_errors_fp.3 +#usr/share/man/man3/ERR_put_error.3 +#usr/share/man/man3/ERR_reason_error_string.3 +#usr/share/man/man3/ERR_remove_state.3 +#usr/share/man/man3/ERR_remove_thread_state.3 +#usr/share/man/man3/ERR_set_mark.3 +#usr/share/man/man3/ESS_CERT_ID_dup.3 +#usr/share/man/man3/ESS_CERT_ID_free.3 +#usr/share/man/man3/ESS_CERT_ID_new.3 +#usr/share/man/man3/ESS_ISSUER_SERIAL_dup.3 +#usr/share/man/man3/ESS_ISSUER_SERIAL_free.3 +#usr/share/man/man3/ESS_ISSUER_SERIAL_new.3 +#usr/share/man/man3/ESS_SIGNING_CERT_dup.3 +#usr/share/man/man3/ESS_SIGNING_CERT_free.3 +#usr/share/man/man3/ESS_SIGNING_CERT_new.3 +#usr/share/man/man3/EVP_BytesToKey.3 +#usr/share/man/man3/EVP_CIPHER_CTX_block_size.3 +#usr/share/man/man3/EVP_CIPHER_CTX_cipher.3 +#usr/share/man/man3/EVP_CIPHER_CTX_ctrl.3 +#usr/share/man/man3/EVP_CIPHER_CTX_flags.3 +#usr/share/man/man3/EVP_CIPHER_CTX_free.3 +#usr/share/man/man3/EVP_CIPHER_CTX_get_app_data.3 +#usr/share/man/man3/EVP_CIPHER_CTX_get_cipher_data.3 +#usr/share/man/man3/EVP_CIPHER_CTX_iv_length.3 +#usr/share/man/man3/EVP_CIPHER_CTX_key_length.3 +#usr/share/man/man3/EVP_CIPHER_CTX_mode.3 +#usr/share/man/man3/EVP_CIPHER_CTX_new.3 +#usr/share/man/man3/EVP_CIPHER_CTX_nid.3 +#usr/share/man/man3/EVP_CIPHER_CTX_reset.3 +#usr/share/man/man3/EVP_CIPHER_CTX_set_app_data.3 +#usr/share/man/man3/EVP_CIPHER_CTX_set_cipher_data.3 +#usr/share/man/man3/EVP_CIPHER_CTX_set_key_length.3 +#usr/share/man/man3/EVP_CIPHER_CTX_set_padding.3 +#usr/share/man/man3/EVP_CIPHER_CTX_type.3 +#usr/share/man/man3/EVP_CIPHER_asn1_to_param.3 +#usr/share/man/man3/EVP_CIPHER_block_size.3 +#usr/share/man/man3/EVP_CIPHER_flags.3 +#usr/share/man/man3/EVP_CIPHER_iv_length.3 +#usr/share/man/man3/EVP_CIPHER_key_length.3 +#usr/share/man/man3/EVP_CIPHER_meth_dup.3 +#usr/share/man/man3/EVP_CIPHER_meth_free.3 +#usr/share/man/man3/EVP_CIPHER_meth_get_cleanup.3 +#usr/share/man/man3/EVP_CIPHER_meth_get_ctrl.3 +#usr/share/man/man3/EVP_CIPHER_meth_get_do_cipher.3 +#usr/share/man/man3/EVP_CIPHER_meth_get_get_asn1_params.3 +#usr/share/man/man3/EVP_CIPHER_meth_get_init.3 +#usr/share/man/man3/EVP_CIPHER_meth_get_set_asn1_params.3 +#usr/share/man/man3/EVP_CIPHER_meth_new.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_cleanup.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_ctrl.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_do_cipher.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_flags.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_get_asn1_params.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_impl_ctx_size.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_init.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_iv_length.3 +#usr/share/man/man3/EVP_CIPHER_meth_set_set_asn1_params.3 +#usr/share/man/man3/EVP_CIPHER_mode.3 +#usr/share/man/man3/EVP_CIPHER_nid.3 +#usr/share/man/man3/EVP_CIPHER_param_to_asn1.3 +#usr/share/man/man3/EVP_CIPHER_type.3 +#usr/share/man/man3/EVP_CipherFinal.3 +#usr/share/man/man3/EVP_CipherFinal_ex.3 +#usr/share/man/man3/EVP_CipherInit.3 +#usr/share/man/man3/EVP_CipherInit_ex.3 +#usr/share/man/man3/EVP_CipherUpdate.3 +#usr/share/man/man3/EVP_DecodeBlock.3 +#usr/share/man/man3/EVP_DecodeFinal.3 +#usr/share/man/man3/EVP_DecodeInit.3 +#usr/share/man/man3/EVP_DecodeUpdate.3 +#usr/share/man/man3/EVP_DecryptFinal.3 +#usr/share/man/man3/EVP_DecryptFinal_ex.3 +#usr/share/man/man3/EVP_DecryptInit.3 +#usr/share/man/man3/EVP_DecryptInit_ex.3 +#usr/share/man/man3/EVP_DecryptUpdate.3 +#usr/share/man/man3/EVP_DigestFinal.3 +#usr/share/man/man3/EVP_DigestFinal_ex.3 +#usr/share/man/man3/EVP_DigestInit.3 +#usr/share/man/man3/EVP_DigestInit_ex.3 +#usr/share/man/man3/EVP_DigestSignFinal.3 +#usr/share/man/man3/EVP_DigestSignInit.3 +#usr/share/man/man3/EVP_DigestSignUpdate.3 +#usr/share/man/man3/EVP_DigestUpdate.3 +#usr/share/man/man3/EVP_DigestVerifyFinal.3 +#usr/share/man/man3/EVP_DigestVerifyInit.3 +#usr/share/man/man3/EVP_DigestVerifyUpdate.3 +#usr/share/man/man3/EVP_ENCODE_CTX_copy.3 +#usr/share/man/man3/EVP_ENCODE_CTX_free.3 +#usr/share/man/man3/EVP_ENCODE_CTX_new.3 +#usr/share/man/man3/EVP_ENCODE_CTX_num.3 +#usr/share/man/man3/EVP_EncodeBlock.3 +#usr/share/man/man3/EVP_EncodeFinal.3 +#usr/share/man/man3/EVP_EncodeInit.3 +#usr/share/man/man3/EVP_EncodeUpdate.3 +#usr/share/man/man3/EVP_EncryptFinal.3 +#usr/share/man/man3/EVP_EncryptFinal_ex.3 +#usr/share/man/man3/EVP_EncryptInit.3 +#usr/share/man/man3/EVP_EncryptInit_ex.3 +#usr/share/man/man3/EVP_EncryptUpdate.3 +#usr/share/man/man3/EVP_MD_CTX_block_size.3 +#usr/share/man/man3/EVP_MD_CTX_copy.3 +#usr/share/man/man3/EVP_MD_CTX_copy_ex.3 +#usr/share/man/man3/EVP_MD_CTX_free.3 +#usr/share/man/man3/EVP_MD_CTX_md.3 +#usr/share/man/man3/EVP_MD_CTX_md_data.3 +#usr/share/man/man3/EVP_MD_CTX_new.3 +#usr/share/man/man3/EVP_MD_CTX_reset.3 +#usr/share/man/man3/EVP_MD_CTX_size.3 +#usr/share/man/man3/EVP_MD_CTX_type.3 +#usr/share/man/man3/EVP_MD_block_size.3 +#usr/share/man/man3/EVP_MD_meth_dup.3 +#usr/share/man/man3/EVP_MD_meth_free.3 +#usr/share/man/man3/EVP_MD_meth_get_app_datasize.3 +#usr/share/man/man3/EVP_MD_meth_get_cleanup.3 +#usr/share/man/man3/EVP_MD_meth_get_copy.3 +#usr/share/man/man3/EVP_MD_meth_get_ctrl.3 +#usr/share/man/man3/EVP_MD_meth_get_final.3 +#usr/share/man/man3/EVP_MD_meth_get_flags.3 +#usr/share/man/man3/EVP_MD_meth_get_init.3 +#usr/share/man/man3/EVP_MD_meth_get_input_blocksize.3 +#usr/share/man/man3/EVP_MD_meth_get_result_size.3 +#usr/share/man/man3/EVP_MD_meth_get_update.3 +#usr/share/man/man3/EVP_MD_meth_new.3 +#usr/share/man/man3/EVP_MD_meth_set_app_datasize.3 +#usr/share/man/man3/EVP_MD_meth_set_cleanup.3 +#usr/share/man/man3/EVP_MD_meth_set_copy.3 +#usr/share/man/man3/EVP_MD_meth_set_ctrl.3 +#usr/share/man/man3/EVP_MD_meth_set_final.3 +#usr/share/man/man3/EVP_MD_meth_set_flags.3 +#usr/share/man/man3/EVP_MD_meth_set_init.3 +#usr/share/man/man3/EVP_MD_meth_set_input_blocksize.3 +#usr/share/man/man3/EVP_MD_meth_set_result_size.3 +#usr/share/man/man3/EVP_MD_meth_set_update.3 +#usr/share/man/man3/EVP_MD_pkey_type.3 +#usr/share/man/man3/EVP_MD_size.3 +#usr/share/man/man3/EVP_MD_type.3 +#usr/share/man/man3/EVP_OpenFinal.3 +#usr/share/man/man3/EVP_OpenInit.3 +#usr/share/man/man3/EVP_OpenUpdate.3 +#usr/share/man/man3/EVP_PKEY_ASN1_METHOD.3 +#usr/share/man/man3/EVP_PKEY_CTX_add1_hkdf_info.3 +#usr/share/man/man3/EVP_PKEY_CTX_add1_tls1_prf_seed.3 +#usr/share/man/man3/EVP_PKEY_CTX_ctrl.3 +#usr/share/man/man3/EVP_PKEY_CTX_ctrl_str.3 +#usr/share/man/man3/EVP_PKEY_CTX_dup.3 +#usr/share/man/man3/EVP_PKEY_CTX_free.3 +#usr/share/man/man3/EVP_PKEY_CTX_get_app_data.3 +#usr/share/man/man3/EVP_PKEY_CTX_get_cb.3 +#usr/share/man/man3/EVP_PKEY_CTX_get_keygen_info.3 +#usr/share/man/man3/EVP_PKEY_CTX_new.3 +#usr/share/man/man3/EVP_PKEY_CTX_new_id.3 +#usr/share/man/man3/EVP_PKEY_CTX_set1_hkdf_key.3 +#usr/share/man/man3/EVP_PKEY_CTX_set1_hkdf_salt.3 +#usr/share/man/man3/EVP_PKEY_CTX_set1_tls1_prf_secret.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_app_data.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_cb.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_dh_paramgen_generator.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_dh_paramgen_prime_len.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_dsa_paramgen_bits.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_ec_param_enc.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_ec_paramgen_curve_nid.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_hkdf_md.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_rsa_keygen_pubexp.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_rsa_padding.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_rsa_pss_saltlen.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_rsa_rsa_keygen_bits.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_signature_md.3 +#usr/share/man/man3/EVP_PKEY_CTX_set_tls1_prf_md.3 +#usr/share/man/man3/EVP_PKEY_asn1_add0.3 +#usr/share/man/man3/EVP_PKEY_asn1_add_alias.3 +#usr/share/man/man3/EVP_PKEY_asn1_copy.3 +#usr/share/man/man3/EVP_PKEY_asn1_find.3 +#usr/share/man/man3/EVP_PKEY_asn1_find_str.3 +#usr/share/man/man3/EVP_PKEY_asn1_free.3 +#usr/share/man/man3/EVP_PKEY_asn1_get0.3 +#usr/share/man/man3/EVP_PKEY_asn1_get0_info.3 +#usr/share/man/man3/EVP_PKEY_asn1_get_count.3 +#usr/share/man/man3/EVP_PKEY_asn1_new.3 +#usr/share/man/man3/EVP_PKEY_asn1_set_ctrl.3 +#usr/share/man/man3/EVP_PKEY_asn1_set_free.3 +#usr/share/man/man3/EVP_PKEY_asn1_set_item.3 +#usr/share/man/man3/EVP_PKEY_asn1_set_param.3 +#usr/share/man/man3/EVP_PKEY_asn1_set_private.3 +#usr/share/man/man3/EVP_PKEY_asn1_set_public.3 +#usr/share/man/man3/EVP_PKEY_asn1_set_security_bits.3 +#usr/share/man/man3/EVP_PKEY_assign_DH.3 +#usr/share/man/man3/EVP_PKEY_assign_DSA.3 +#usr/share/man/man3/EVP_PKEY_assign_EC_KEY.3 +#usr/share/man/man3/EVP_PKEY_assign_RSA.3 +#usr/share/man/man3/EVP_PKEY_base_id.3 +#usr/share/man/man3/EVP_PKEY_cmp.3 +#usr/share/man/man3/EVP_PKEY_cmp_parameters.3 +#usr/share/man/man3/EVP_PKEY_copy_parameters.3 +#usr/share/man/man3/EVP_PKEY_decrypt.3 +#usr/share/man/man3/EVP_PKEY_decrypt_init.3 +#usr/share/man/man3/EVP_PKEY_derive.3 +#usr/share/man/man3/EVP_PKEY_derive_init.3 +#usr/share/man/man3/EVP_PKEY_derive_set_peer.3 +#usr/share/man/man3/EVP_PKEY_encrypt.3 +#usr/share/man/man3/EVP_PKEY_encrypt_init.3 +#usr/share/man/man3/EVP_PKEY_free.3 +#usr/share/man/man3/EVP_PKEY_gen_cb.3 +#usr/share/man/man3/EVP_PKEY_get0_DH.3 +#usr/share/man/man3/EVP_PKEY_get0_DSA.3 +#usr/share/man/man3/EVP_PKEY_get0_EC_KEY.3 +#usr/share/man/man3/EVP_PKEY_get0_RSA.3 +#usr/share/man/man3/EVP_PKEY_get0_asn1.3 +#usr/share/man/man3/EVP_PKEY_get0_hmac.3 +#usr/share/man/man3/EVP_PKEY_get1_DH.3 +#usr/share/man/man3/EVP_PKEY_get1_DSA.3 +#usr/share/man/man3/EVP_PKEY_get1_EC_KEY.3 +#usr/share/man/man3/EVP_PKEY_get1_RSA.3 +#usr/share/man/man3/EVP_PKEY_get_default_digest_nid.3 +#usr/share/man/man3/EVP_PKEY_id.3 +#usr/share/man/man3/EVP_PKEY_keygen.3 +#usr/share/man/man3/EVP_PKEY_keygen_init.3 +#usr/share/man/man3/EVP_PKEY_missing_parameters.3 +#usr/share/man/man3/EVP_PKEY_new.3 +#usr/share/man/man3/EVP_PKEY_paramgen.3 +#usr/share/man/man3/EVP_PKEY_paramgen_init.3 +#usr/share/man/man3/EVP_PKEY_print_params.3 +#usr/share/man/man3/EVP_PKEY_print_private.3 +#usr/share/man/man3/EVP_PKEY_print_public.3 +#usr/share/man/man3/EVP_PKEY_set1_DH.3 +#usr/share/man/man3/EVP_PKEY_set1_DSA.3 +#usr/share/man/man3/EVP_PKEY_set1_EC_KEY.3 +#usr/share/man/man3/EVP_PKEY_set1_RSA.3 +#usr/share/man/man3/EVP_PKEY_set1_engine.3 +#usr/share/man/man3/EVP_PKEY_sign.3 +#usr/share/man/man3/EVP_PKEY_sign_init.3 +#usr/share/man/man3/EVP_PKEY_size.3 +#usr/share/man/man3/EVP_PKEY_type.3 +#usr/share/man/man3/EVP_PKEY_up_ref.3 +#usr/share/man/man3/EVP_PKEY_verify.3 +#usr/share/man/man3/EVP_PKEY_verify_init.3 +#usr/share/man/man3/EVP_PKEY_verify_recover.3 +#usr/share/man/man3/EVP_PKEY_verify_recover_init.3 +#usr/share/man/man3/EVP_SealFinal.3 +#usr/share/man/man3/EVP_SealInit.3 +#usr/share/man/man3/EVP_SealUpdate.3 +#usr/share/man/man3/EVP_SignFinal.3 +#usr/share/man/man3/EVP_SignInit.3 +#usr/share/man/man3/EVP_SignInit_ex.3 +#usr/share/man/man3/EVP_SignUpdate.3 +#usr/share/man/man3/EVP_VerifyFinal.3 +#usr/share/man/man3/EVP_VerifyInit.3 +#usr/share/man/man3/EVP_VerifyInit_ex.3 +#usr/share/man/man3/EVP_VerifyUpdate.3 +#usr/share/man/man3/EVP_aes_128_cbc.3 +#usr/share/man/man3/EVP_aes_128_cbc_hmac_sha1.3 +#usr/share/man/man3/EVP_aes_128_cbc_hmac_sha256.3 +#usr/share/man/man3/EVP_aes_128_ccm.3 +#usr/share/man/man3/EVP_aes_128_cfb.3 +#usr/share/man/man3/EVP_aes_128_ecb.3 +#usr/share/man/man3/EVP_aes_128_gcm.3 +#usr/share/man/man3/EVP_aes_128_ofb.3 +#usr/share/man/man3/EVP_aes_192_cbc.3 +#usr/share/man/man3/EVP_aes_192_ccm.3 +#usr/share/man/man3/EVP_aes_192_cfb.3 +#usr/share/man/man3/EVP_aes_192_ecb.3 +#usr/share/man/man3/EVP_aes_192_gcm.3 +#usr/share/man/man3/EVP_aes_192_ofb.3 +#usr/share/man/man3/EVP_aes_256_cbc.3 +#usr/share/man/man3/EVP_aes_256_cbc_hmac_sha1.3 +#usr/share/man/man3/EVP_aes_256_cbc_hmac_sha256.3 +#usr/share/man/man3/EVP_aes_256_ccm.3 +#usr/share/man/man3/EVP_aes_256_cfb.3 +#usr/share/man/man3/EVP_aes_256_ecb.3 +#usr/share/man/man3/EVP_aes_256_gcm.3 +#usr/share/man/man3/EVP_aes_256_ofb.3 +#usr/share/man/man3/EVP_bf_cbc.3 +#usr/share/man/man3/EVP_bf_cfb.3 +#usr/share/man/man3/EVP_bf_ecb.3 +#usr/share/man/man3/EVP_bf_ofb.3 +#usr/share/man/man3/EVP_blake2b512.3 +#usr/share/man/man3/EVP_blake2s256.3 +#usr/share/man/man3/EVP_cast5_cbc.3 +#usr/share/man/man3/EVP_cast5_cfb.3 +#usr/share/man/man3/EVP_cast5_ecb.3 +#usr/share/man/man3/EVP_cast5_ofb.3 +#usr/share/man/man3/EVP_chacha20.3 +#usr/share/man/man3/EVP_chacha20_poly1305.3 +#usr/share/man/man3/EVP_cleanup.3 +#usr/share/man/man3/EVP_des_cbc.3 +#usr/share/man/man3/EVP_des_cfb.3 +#usr/share/man/man3/EVP_des_ecb.3 +#usr/share/man/man3/EVP_des_ede.3 +#usr/share/man/man3/EVP_des_ede3.3 +#usr/share/man/man3/EVP_des_ede3_cbc.3 +#usr/share/man/man3/EVP_des_ede3_cfb.3 +#usr/share/man/man3/EVP_des_ede3_ofb.3 +#usr/share/man/man3/EVP_des_ede_cbc.3 +#usr/share/man/man3/EVP_des_ede_cfb.3 +#usr/share/man/man3/EVP_des_ede_ofb.3 +#usr/share/man/man3/EVP_des_ofb.3 +#usr/share/man/man3/EVP_desx_cbc.3 +#usr/share/man/man3/EVP_enc_null.3 +#usr/share/man/man3/EVP_get_cipherbyname.3 +#usr/share/man/man3/EVP_get_cipherbynid.3 +#usr/share/man/man3/EVP_get_cipherbyobj.3 +#usr/share/man/man3/EVP_get_digestbyname.3 +#usr/share/man/man3/EVP_get_digestbynid.3 +#usr/share/man/man3/EVP_get_digestbyobj.3 +#usr/share/man/man3/EVP_idea_cbc.3 +#usr/share/man/man3/EVP_idea_cfb.3 +#usr/share/man/man3/EVP_idea_ecb.3 +#usr/share/man/man3/EVP_idea_ofb.3 +#usr/share/man/man3/EVP_md2.3 +#usr/share/man/man3/EVP_md5.3 +#usr/share/man/man3/EVP_md_null.3 +#usr/share/man/man3/EVP_mdc2.3 +#usr/share/man/man3/EVP_rc2_40_cbc.3 +#usr/share/man/man3/EVP_rc2_64_cbc.3 +#usr/share/man/man3/EVP_rc2_cbc.3 +#usr/share/man/man3/EVP_rc2_cfb.3 +#usr/share/man/man3/EVP_rc2_ecb.3 +#usr/share/man/man3/EVP_rc2_ofb.3 +#usr/share/man/man3/EVP_rc4.3 +#usr/share/man/man3/EVP_rc4_40.3 +#usr/share/man/man3/EVP_rc4_hmac_md5.3 +#usr/share/man/man3/EVP_rc5_32_12_16_cbc.3 +#usr/share/man/man3/EVP_rc5_32_12_16_cfb.3 +#usr/share/man/man3/EVP_rc5_32_12_16_ecb.3 +#usr/share/man/man3/EVP_rc5_32_12_16_ofb.3 +#usr/share/man/man3/EVP_ripemd160.3 +#usr/share/man/man3/EVP_sha1.3 +#usr/share/man/man3/EVP_sha224.3 +#usr/share/man/man3/EVP_sha256.3 +#usr/share/man/man3/EVP_sha384.3 +#usr/share/man/man3/EVP_sha512.3 +#usr/share/man/man3/EXTENDED_KEY_USAGE_free.3 +#usr/share/man/man3/EXTENDED_KEY_USAGE_new.3 +#usr/share/man/man3/GENERAL_NAMES_free.3 +#usr/share/man/man3/GENERAL_NAMES_new.3 +#usr/share/man/man3/GENERAL_NAME_dup.3 +#usr/share/man/man3/GENERAL_NAME_free.3 +#usr/share/man/man3/GENERAL_NAME_new.3 +#usr/share/man/man3/GENERAL_SUBTREE_free.3 +#usr/share/man/man3/GENERAL_SUBTREE_new.3 +#usr/share/man/man3/GEN_SESSION_CB.3 +#usr/share/man/man3/HMAC.3 +#usr/share/man/man3/HMAC_CTX_copy.3 +#usr/share/man/man3/HMAC_CTX_free.3 +#usr/share/man/man3/HMAC_CTX_get_md.3 +#usr/share/man/man3/HMAC_CTX_new.3 +#usr/share/man/man3/HMAC_CTX_reset.3 +#usr/share/man/man3/HMAC_CTX_set_flags.3 +#usr/share/man/man3/HMAC_Final.3 +#usr/share/man/man3/HMAC_Init.3 +#usr/share/man/man3/HMAC_Init_ex.3 +#usr/share/man/man3/HMAC_Update.3 +#usr/share/man/man3/IMPLEMENT_ASN1_FUNCTIONS.3 +#usr/share/man/man3/IMPLEMENT_LHASH_COMP_FN.3 +#usr/share/man/man3/IMPLEMENT_LHASH_HASH_FN.3 +#usr/share/man/man3/IPAddressChoice_free.3 +#usr/share/man/man3/IPAddressChoice_new.3 +#usr/share/man/man3/IPAddressFamily_free.3 +#usr/share/man/man3/IPAddressFamily_new.3 +#usr/share/man/man3/IPAddressOrRange_free.3 +#usr/share/man/man3/IPAddressOrRange_new.3 +#usr/share/man/man3/IPAddressRange_free.3 +#usr/share/man/man3/IPAddressRange_new.3 +#usr/share/man/man3/ISSUING_DIST_POINT_free.3 +#usr/share/man/man3/ISSUING_DIST_POINT_new.3 +#usr/share/man/man3/LHASH_DOALL_ARG_FN_TYPE.3 +#usr/share/man/man3/MD2.3 +#usr/share/man/man3/MD2_Final.3 +#usr/share/man/man3/MD2_Init.3 +#usr/share/man/man3/MD2_Update.3 +#usr/share/man/man3/MD4.3 +#usr/share/man/man3/MD4_Final.3 +#usr/share/man/man3/MD4_Init.3 +#usr/share/man/man3/MD4_Update.3 +#usr/share/man/man3/MD5.3 +#usr/share/man/man3/MD5_Final.3 +#usr/share/man/man3/MD5_Init.3 +#usr/share/man/man3/MD5_Update.3 +#usr/share/man/man3/MDC2.3 +#usr/share/man/man3/MDC2_Final.3 +#usr/share/man/man3/MDC2_Init.3 +#usr/share/man/man3/MDC2_Update.3 +#usr/share/man/man3/NAME_CONSTRAINTS_free.3 +#usr/share/man/man3/NAME_CONSTRAINTS_new.3 +#usr/share/man/man3/NETSCAPE_CERT_SEQUENCE_free.3 +#usr/share/man/man3/NETSCAPE_CERT_SEQUENCE_new.3 +#usr/share/man/man3/NETSCAPE_SPKAC_free.3 +#usr/share/man/man3/NETSCAPE_SPKAC_new.3 +#usr/share/man/man3/NETSCAPE_SPKI_free.3 +#usr/share/man/man3/NETSCAPE_SPKI_new.3 +#usr/share/man/man3/NOTICEREF_free.3 +#usr/share/man/man3/NOTICEREF_new.3 +#usr/share/man/man3/OBJ_cleanup.3 +#usr/share/man/man3/OBJ_cmp.3 +#usr/share/man/man3/OBJ_create.3 +#usr/share/man/man3/OBJ_dup.3 +#usr/share/man/man3/OBJ_get0_data.3 +#usr/share/man/man3/OBJ_length.3 +#usr/share/man/man3/OBJ_ln2nid.3 +#usr/share/man/man3/OBJ_nid2ln.3 +#usr/share/man/man3/OBJ_nid2obj.3 +#usr/share/man/man3/OBJ_nid2sn.3 +#usr/share/man/man3/OBJ_obj2nid.3 +#usr/share/man/man3/OBJ_obj2txt.3 +#usr/share/man/man3/OBJ_sn2nid.3 +#usr/share/man/man3/OBJ_txt2nid.3 +#usr/share/man/man3/OBJ_txt2obj.3 +#usr/share/man/man3/OCSP_BASICRESP_free.3 +#usr/share/man/man3/OCSP_BASICRESP_new.3 +#usr/share/man/man3/OCSP_CERTID_dup.3 +#usr/share/man/man3/OCSP_CERTID_free.3 +#usr/share/man/man3/OCSP_CERTID_new.3 +#usr/share/man/man3/OCSP_CERTSTATUS_free.3 +#usr/share/man/man3/OCSP_CERTSTATUS_new.3 +#usr/share/man/man3/OCSP_CRLID_free.3 +#usr/share/man/man3/OCSP_CRLID_new.3 +#usr/share/man/man3/OCSP_ONEREQ_free.3 +#usr/share/man/man3/OCSP_ONEREQ_new.3 +#usr/share/man/man3/OCSP_REQINFO_free.3 +#usr/share/man/man3/OCSP_REQINFO_new.3 +#usr/share/man/man3/OCSP_REQUEST_free.3 +#usr/share/man/man3/OCSP_REQUEST_new.3 +#usr/share/man/man3/OCSP_REQ_CTX_add1_header.3 +#usr/share/man/man3/OCSP_REQ_CTX_free.3 +#usr/share/man/man3/OCSP_REQ_CTX_set1_req.3 +#usr/share/man/man3/OCSP_RESPBYTES_free.3 +#usr/share/man/man3/OCSP_RESPBYTES_new.3 +#usr/share/man/man3/OCSP_RESPDATA_free.3 +#usr/share/man/man3/OCSP_RESPDATA_new.3 +#usr/share/man/man3/OCSP_RESPID_free.3 +#usr/share/man/man3/OCSP_RESPID_match.3 +#usr/share/man/man3/OCSP_RESPID_new.3 +#usr/share/man/man3/OCSP_RESPID_set_by_key.3 +#usr/share/man/man3/OCSP_RESPID_set_by_name.3 +#usr/share/man/man3/OCSP_RESPONSE_free.3 +#usr/share/man/man3/OCSP_RESPONSE_new.3 +#usr/share/man/man3/OCSP_REVOKEDINFO_free.3 +#usr/share/man/man3/OCSP_REVOKEDINFO_new.3 +#usr/share/man/man3/OCSP_SERVICELOC_free.3 +#usr/share/man/man3/OCSP_SERVICELOC_new.3 +#usr/share/man/man3/OCSP_SIGNATURE_free.3 +#usr/share/man/man3/OCSP_SIGNATURE_new.3 +#usr/share/man/man3/OCSP_SINGLERESP_free.3 +#usr/share/man/man3/OCSP_SINGLERESP_new.3 +#usr/share/man/man3/OCSP_basic_add1_nonce.3 +#usr/share/man/man3/OCSP_cert_id_new.3 +#usr/share/man/man3/OCSP_cert_to_id.3 +#usr/share/man/man3/OCSP_check_nonce.3 +#usr/share/man/man3/OCSP_check_validity.3 +#usr/share/man/man3/OCSP_copy_nonce.3 +#usr/share/man/man3/OCSP_id_cmp.3 +#usr/share/man/man3/OCSP_id_get0_info.3 +#usr/share/man/man3/OCSP_id_issuer_cmp.3 +#usr/share/man/man3/OCSP_request_add0_id.3 +#usr/share/man/man3/OCSP_request_add1_cert.3 +#usr/share/man/man3/OCSP_request_add1_nonce.3 +#usr/share/man/man3/OCSP_request_onereq_count.3 +#usr/share/man/man3/OCSP_request_onereq_get0.3 +#usr/share/man/man3/OCSP_request_sign.3 +#usr/share/man/man3/OCSP_resp_count.3 +#usr/share/man/man3/OCSP_resp_find.3 +#usr/share/man/man3/OCSP_resp_find_status.3 +#usr/share/man/man3/OCSP_resp_get0.3 +#usr/share/man/man3/OCSP_resp_get0_certs.3 +#usr/share/man/man3/OCSP_resp_get0_id.3 +#usr/share/man/man3/OCSP_resp_get0_produced_at.3 +#usr/share/man/man3/OCSP_response_create.3 +#usr/share/man/man3/OCSP_response_get1_basic.3 +#usr/share/man/man3/OCSP_response_status.3 +#usr/share/man/man3/OCSP_sendreq_bio.3 +#usr/share/man/man3/OCSP_sendreq_nbio.3 +#usr/share/man/man3/OCSP_sendreq_new.3 +#usr/share/man/man3/OCSP_set_max_response_length.3 +#usr/share/man/man3/OCSP_single_get0_status.3 +#usr/share/man/man3/OPENSSL_Applink.3 +#usr/share/man/man3/OPENSSL_INIT_free.3 +#usr/share/man/man3/OPENSSL_INIT_set_config_appname.3 +#usr/share/man/man3/OPENSSL_LH_COMPFUNC.3 +#usr/share/man/man3/OPENSSL_LH_DOALL_FUNC.3 +#usr/share/man/man3/OPENSSL_LH_HASHFUNC.3 +#usr/share/man/man3/OPENSSL_LH_node_stats.3 +#usr/share/man/man3/OPENSSL_LH_node_stats_bio.3 +#usr/share/man/man3/OPENSSL_LH_node_usage_stats.3 +#usr/share/man/man3/OPENSSL_LH_node_usage_stats_bio.3 +#usr/share/man/man3/OPENSSL_LH_stats.3 +#usr/share/man/man3/OPENSSL_LH_stats_bio.3 +#usr/share/man/man3/OPENSSL_VERSION_NUMBER.3 +#usr/share/man/man3/OPENSSL_atexit.3 +#usr/share/man/man3/OPENSSL_buf2hexstr.3 +#usr/share/man/man3/OPENSSL_cleanse.3 +#usr/share/man/man3/OPENSSL_cleanup.3 +#usr/share/man/man3/OPENSSL_clear_free.3 +#usr/share/man/man3/OPENSSL_clear_realloc.3 +#usr/share/man/man3/OPENSSL_config.3 +#usr/share/man/man3/OPENSSL_free.3 +#usr/share/man/man3/OPENSSL_hexchar2int.3 +#usr/share/man/man3/OPENSSL_hexstr2buf.3 +#usr/share/man/man3/OPENSSL_ia32cap.3 +#usr/share/man/man3/OPENSSL_init_crypto.3 +#usr/share/man/man3/OPENSSL_init_new.3 +#usr/share/man/man3/OPENSSL_init_ssl.3 +#usr/share/man/man3/OPENSSL_instrument_bus.3 +#usr/share/man/man3/OPENSSL_instrument_bus2.3 +#usr/share/man/man3/OPENSSL_load_builtin_modules.3 +#usr/share/man/man3/OPENSSL_malloc.3 +#usr/share/man/man3/OPENSSL_malloc_init.3 +#usr/share/man/man3/OPENSSL_mem_debug_pop.3 +#usr/share/man/man3/OPENSSL_mem_debug_push.3 +#usr/share/man/man3/OPENSSL_memdup.3 +#usr/share/man/man3/OPENSSL_no_config.3 +#usr/share/man/man3/OPENSSL_realloc.3 +#usr/share/man/man3/OPENSSL_secure_actual_size.3 +#usr/share/man/man3/OPENSSL_secure_allocated.3 +#usr/share/man/man3/OPENSSL_secure_clear_free.3 +#usr/share/man/man3/OPENSSL_secure_free.3 +#usr/share/man/man3/OPENSSL_secure_malloc.3 +#usr/share/man/man3/OPENSSL_secure_zalloc.3 +#usr/share/man/man3/OPENSSL_sk_deep_copy.3 +#usr/share/man/man3/OPENSSL_sk_delete.3 +#usr/share/man/man3/OPENSSL_sk_delete_ptr.3 +#usr/share/man/man3/OPENSSL_sk_dup.3 +#usr/share/man/man3/OPENSSL_sk_find.3 +#usr/share/man/man3/OPENSSL_sk_find_ex.3 +#usr/share/man/man3/OPENSSL_sk_free.3 +#usr/share/man/man3/OPENSSL_sk_insert.3 +#usr/share/man/man3/OPENSSL_sk_is_sorted.3 +#usr/share/man/man3/OPENSSL_sk_new.3 +#usr/share/man/man3/OPENSSL_sk_new_null.3 +#usr/share/man/man3/OPENSSL_sk_num.3 +#usr/share/man/man3/OPENSSL_sk_pop.3 +#usr/share/man/man3/OPENSSL_sk_pop_free.3 +#usr/share/man/man3/OPENSSL_sk_push.3 +#usr/share/man/man3/OPENSSL_sk_set.3 +#usr/share/man/man3/OPENSSL_sk_set_cmp_func.3 +#usr/share/man/man3/OPENSSL_sk_shift.3 +#usr/share/man/man3/OPENSSL_sk_sort.3 +#usr/share/man/man3/OPENSSL_sk_unshift.3 +#usr/share/man/man3/OPENSSL_sk_value.3 +#usr/share/man/man3/OPENSSL_sk_zero.3 +#usr/share/man/man3/OPENSSL_strdup.3 +#usr/share/man/man3/OPENSSL_strlcat.3 +#usr/share/man/man3/OPENSSL_strlcpy.3 +#usr/share/man/man3/OPENSSL_strndup.3 +#usr/share/man/man3/OPENSSL_thread_stop.3 +#usr/share/man/man3/OPENSSL_zalloc.3 +#usr/share/man/man3/OTHERNAME_free.3 +#usr/share/man/man3/OTHERNAME_new.3 +#usr/share/man/man3/OpenSSL_add_all_algorithms.3 +#usr/share/man/man3/OpenSSL_add_all_ciphers.3 +#usr/share/man/man3/OpenSSL_add_all_digests.3 +#usr/share/man/man3/OpenSSL_add_ssl_algorithms.3 +#usr/share/man/man3/OpenSSL_version.3 +#usr/share/man/man3/OpenSSL_version_num.3 +#usr/share/man/man3/PBE2PARAM_free.3 +#usr/share/man/man3/PBE2PARAM_new.3 +#usr/share/man/man3/PBEPARAM_free.3 +#usr/share/man/man3/PBEPARAM_new.3 +#usr/share/man/man3/PBKDF2PARAM_free.3 +#usr/share/man/man3/PBKDF2PARAM_new.3 +#usr/share/man/man3/PEM_do_header.3 +#usr/share/man/man3/PEM_get_EVP_CIPHER_INFO.3 +#usr/share/man/man3/PEM_read.3 +#usr/share/man/man3/PEM_read_CMS.3 +#usr/share/man/man3/PEM_read_DHparams.3 +#usr/share/man/man3/PEM_read_DSAPrivateKey.3 +#usr/share/man/man3/PEM_read_DSA_PUBKEY.3 +#usr/share/man/man3/PEM_read_DSAparams.3 +#usr/share/man/man3/PEM_read_ECPKParameters.3 +#usr/share/man/man3/PEM_read_ECPrivateKey.3 +#usr/share/man/man3/PEM_read_EC_PUBKEY.3 +#usr/share/man/man3/PEM_read_NETSCAPE_CERT_SEQUENCE.3 +#usr/share/man/man3/PEM_read_PKCS7.3 +#usr/share/man/man3/PEM_read_PKCS8.3 +#usr/share/man/man3/PEM_read_PKCS8_PRIV_KEY_INFO.3 +#usr/share/man/man3/PEM_read_PUBKEY.3 +#usr/share/man/man3/PEM_read_PrivateKey.3 +#usr/share/man/man3/PEM_read_RSAPrivateKey.3 +#usr/share/man/man3/PEM_read_RSAPublicKey.3 +#usr/share/man/man3/PEM_read_RSA_PUBKEY.3 +#usr/share/man/man3/PEM_read_SSL_SESSION.3 +#usr/share/man/man3/PEM_read_X509.3 +#usr/share/man/man3/PEM_read_X509_AUX.3 +#usr/share/man/man3/PEM_read_X509_CRL.3 +#usr/share/man/man3/PEM_read_X509_REQ.3 +#usr/share/man/man3/PEM_read_bio.3 +#usr/share/man/man3/PEM_read_bio_CMS.3 +#usr/share/man/man3/PEM_read_bio_DHparams.3 +#usr/share/man/man3/PEM_read_bio_DSAPrivateKey.3 +#usr/share/man/man3/PEM_read_bio_DSA_PUBKEY.3 +#usr/share/man/man3/PEM_read_bio_DSAparams.3 +#usr/share/man/man3/PEM_read_bio_ECPKParameters.3 +#usr/share/man/man3/PEM_read_bio_EC_PUBKEY.3 +#usr/share/man/man3/PEM_read_bio_NETSCAPE_CERT_SEQUENCE.3 +#usr/share/man/man3/PEM_read_bio_PKCS7.3 +#usr/share/man/man3/PEM_read_bio_PKCS8.3 +#usr/share/man/man3/PEM_read_bio_PKCS8_PRIV_KEY_INFO.3 +#usr/share/man/man3/PEM_read_bio_PUBKEY.3 +#usr/share/man/man3/PEM_read_bio_PrivateKey.3 +#usr/share/man/man3/PEM_read_bio_RSAPrivateKey.3 +#usr/share/man/man3/PEM_read_bio_RSAPublicKey.3 +#usr/share/man/man3/PEM_read_bio_RSA_PUBKEY.3 +#usr/share/man/man3/PEM_read_bio_SSL_SESSION.3 +#usr/share/man/man3/PEM_read_bio_X509.3 +#usr/share/man/man3/PEM_read_bio_X509_AUX.3 +#usr/share/man/man3/PEM_read_bio_X509_CRL.3 +#usr/share/man/man3/PEM_read_bio_X509_REQ.3 +#usr/share/man/man3/PEM_write.3 +#usr/share/man/man3/PEM_write_CMS.3 +#usr/share/man/man3/PEM_write_DHparams.3 +#usr/share/man/man3/PEM_write_DHxparams.3 +#usr/share/man/man3/PEM_write_DSAPrivateKey.3 +#usr/share/man/man3/PEM_write_DSA_PUBKEY.3 +#usr/share/man/man3/PEM_write_DSAparams.3 +#usr/share/man/man3/PEM_write_ECPKParameters.3 +#usr/share/man/man3/PEM_write_ECPrivateKey.3 +#usr/share/man/man3/PEM_write_EC_PUBKEY.3 +#usr/share/man/man3/PEM_write_NETSCAPE_CERT_SEQUENCE.3 +#usr/share/man/man3/PEM_write_PKCS7.3 +#usr/share/man/man3/PEM_write_PKCS8.3 +#usr/share/man/man3/PEM_write_PKCS8PrivateKey.3 +#usr/share/man/man3/PEM_write_PKCS8PrivateKey_nid.3 +#usr/share/man/man3/PEM_write_PKCS8_PRIV_KEY_INFO.3 +#usr/share/man/man3/PEM_write_PUBKEY.3 +#usr/share/man/man3/PEM_write_PrivateKey.3 +#usr/share/man/man3/PEM_write_RSAPrivateKey.3 +#usr/share/man/man3/PEM_write_RSAPublicKey.3 +#usr/share/man/man3/PEM_write_RSA_PUBKEY.3 +#usr/share/man/man3/PEM_write_SSL_SESSION.3 +#usr/share/man/man3/PEM_write_X509.3 +#usr/share/man/man3/PEM_write_X509_AUX.3 +#usr/share/man/man3/PEM_write_X509_CRL.3 +#usr/share/man/man3/PEM_write_X509_REQ.3 +#usr/share/man/man3/PEM_write_X509_REQ_NEW.3 +#usr/share/man/man3/PEM_write_bio.3 +#usr/share/man/man3/PEM_write_bio_CMS.3 +#usr/share/man/man3/PEM_write_bio_CMS_stream.3 +#usr/share/man/man3/PEM_write_bio_DHparams.3 +#usr/share/man/man3/PEM_write_bio_DHxparams.3 +#usr/share/man/man3/PEM_write_bio_DSAPrivateKey.3 +#usr/share/man/man3/PEM_write_bio_DSA_PUBKEY.3 +#usr/share/man/man3/PEM_write_bio_DSAparams.3 +#usr/share/man/man3/PEM_write_bio_ECPKParameters.3 +#usr/share/man/man3/PEM_write_bio_ECPrivateKey.3 +#usr/share/man/man3/PEM_write_bio_EC_PUBKEY.3 +#usr/share/man/man3/PEM_write_bio_NETSCAPE_CERT_SEQUENCE.3 +#usr/share/man/man3/PEM_write_bio_PKCS7.3 +#usr/share/man/man3/PEM_write_bio_PKCS7_stream.3 +#usr/share/man/man3/PEM_write_bio_PKCS8.3 +#usr/share/man/man3/PEM_write_bio_PKCS8PrivateKey.3 +#usr/share/man/man3/PEM_write_bio_PKCS8PrivateKey_nid.3 +#usr/share/man/man3/PEM_write_bio_PKCS8_PRIV_KEY_INFO.3 +#usr/share/man/man3/PEM_write_bio_PUBKEY.3 +#usr/share/man/man3/PEM_write_bio_PrivateKey.3 +#usr/share/man/man3/PEM_write_bio_PrivateKey_traditional.3 +#usr/share/man/man3/PEM_write_bio_RSAPrivateKey.3 +#usr/share/man/man3/PEM_write_bio_RSAPublicKey.3 +#usr/share/man/man3/PEM_write_bio_RSA_PUBKEY.3 +#usr/share/man/man3/PEM_write_bio_SSL_SESSION.3 +#usr/share/man/man3/PEM_write_bio_X509.3 +#usr/share/man/man3/PEM_write_bio_X509_AUX.3 +#usr/share/man/man3/PEM_write_bio_X509_CRL.3 +#usr/share/man/man3/PEM_write_bio_X509_REQ.3 +#usr/share/man/man3/PEM_write_bio_X509_REQ_NEW.3 +#usr/share/man/man3/PKCS12_BAGS_free.3 +#usr/share/man/man3/PKCS12_BAGS_new.3 +#usr/share/man/man3/PKCS12_MAC_DATA_free.3 +#usr/share/man/man3/PKCS12_MAC_DATA_new.3 +#usr/share/man/man3/PKCS12_SAFEBAG_free.3 +#usr/share/man/man3/PKCS12_SAFEBAG_new.3 +#usr/share/man/man3/PKCS12_create.3 +#usr/share/man/man3/PKCS12_free.3 +#usr/share/man/man3/PKCS12_new.3 +#usr/share/man/man3/PKCS12_newpass.3 +#usr/share/man/man3/PKCS12_parse.3 +#usr/share/man/man3/PKCS5_PBKDF2_HMAC.3 +#usr/share/man/man3/PKCS5_PBKDF2_HMAC_SHA1.3 +#usr/share/man/man3/PKCS7_DIGEST_free.3 +#usr/share/man/man3/PKCS7_DIGEST_new.3 +#usr/share/man/man3/PKCS7_ENCRYPT_free.3 +#usr/share/man/man3/PKCS7_ENCRYPT_new.3 +#usr/share/man/man3/PKCS7_ENC_CONTENT_free.3 +#usr/share/man/man3/PKCS7_ENC_CONTENT_new.3 +#usr/share/man/man3/PKCS7_ENVELOPE_free.3 +#usr/share/man/man3/PKCS7_ENVELOPE_new.3 +#usr/share/man/man3/PKCS7_ISSUER_AND_SERIAL_digest.3 +#usr/share/man/man3/PKCS7_ISSUER_AND_SERIAL_free.3 +#usr/share/man/man3/PKCS7_ISSUER_AND_SERIAL_new.3 +#usr/share/man/man3/PKCS7_RECIP_INFO_free.3 +#usr/share/man/man3/PKCS7_RECIP_INFO_new.3 +#usr/share/man/man3/PKCS7_SIGNED_free.3 +#usr/share/man/man3/PKCS7_SIGNED_new.3 +#usr/share/man/man3/PKCS7_SIGNER_INFO_free.3 +#usr/share/man/man3/PKCS7_SIGNER_INFO_new.3 +#usr/share/man/man3/PKCS7_SIGN_ENVELOPE_free.3 +#usr/share/man/man3/PKCS7_SIGN_ENVELOPE_new.3 +#usr/share/man/man3/PKCS7_decrypt.3 +#usr/share/man/man3/PKCS7_dup.3 +#usr/share/man/man3/PKCS7_encrypt.3 +#usr/share/man/man3/PKCS7_free.3 +#usr/share/man/man3/PKCS7_get0_signers.3 +#usr/share/man/man3/PKCS7_new.3 +#usr/share/man/man3/PKCS7_print_ctx.3 +#usr/share/man/man3/PKCS7_sign.3 +#usr/share/man/man3/PKCS7_sign_add_signer.3 +#usr/share/man/man3/PKCS7_verify.3 +#usr/share/man/man3/PKCS8_PRIV_KEY_INFO_free.3 +#usr/share/man/man3/PKCS8_PRIV_KEY_INFO_new.3 +#usr/share/man/man3/PKEY_USAGE_PERIOD_free.3 +#usr/share/man/man3/PKEY_USAGE_PERIOD_new.3 +#usr/share/man/man3/POLICYINFO_free.3 +#usr/share/man/man3/POLICYINFO_new.3 +#usr/share/man/man3/POLICYQUALINFO_free.3 +#usr/share/man/man3/POLICYQUALINFO_new.3 +#usr/share/man/man3/POLICY_CONSTRAINTS_free.3 +#usr/share/man/man3/POLICY_CONSTRAINTS_new.3 +#usr/share/man/man3/POLICY_MAPPING_free.3 +#usr/share/man/man3/POLICY_MAPPING_new.3 +#usr/share/man/man3/PROXY_CERT_INFO_EXTENSION_free.3 +#usr/share/man/man3/PROXY_CERT_INFO_EXTENSION_new.3 +#usr/share/man/man3/PROXY_POLICY_free.3 +#usr/share/man/man3/PROXY_POLICY_new.3 +#usr/share/man/man3/RAND_OpenSSL.3 +#usr/share/man/man3/RAND_add.3 +#usr/share/man/man3/RAND_bytes.3 +#usr/share/man/man3/RAND_cleanup.3 +#usr/share/man/man3/RAND_egd.3 +#usr/share/man/man3/RAND_egd_bytes.3 +#usr/share/man/man3/RAND_event.3 +#usr/share/man/man3/RAND_file_name.3 +#usr/share/man/man3/RAND_get_rand_method.3 +#usr/share/man/man3/RAND_load_file.3 +#usr/share/man/man3/RAND_pseudo_bytes.3 +#usr/share/man/man3/RAND_query_egd_bytes.3 +#usr/share/man/man3/RAND_screen.3 +#usr/share/man/man3/RAND_seed.3 +#usr/share/man/man3/RAND_set_rand_method.3 +#usr/share/man/man3/RAND_status.3 +#usr/share/man/man3/RAND_write_file.3 +#usr/share/man/man3/RC4.3 +#usr/share/man/man3/RC4_set_key.3 +#usr/share/man/man3/RIPEMD160.3 +#usr/share/man/man3/RIPEMD160_Final.3 +#usr/share/man/man3/RIPEMD160_Init.3 +#usr/share/man/man3/RIPEMD160_Update.3 +#usr/share/man/man3/RSAPrivateKey_dup.3 +#usr/share/man/man3/RSAPublicKey_dup.3 +#usr/share/man/man3/RSA_OAEP_PARAMS_free.3 +#usr/share/man/man3/RSA_OAEP_PARAMS_new.3 +#usr/share/man/man3/RSA_PKCS1_OpenSSL.3 +#usr/share/man/man3/RSA_PSS_PARAMS_free.3 +#usr/share/man/man3/RSA_PSS_PARAMS_new.3 +#usr/share/man/man3/RSA_bits.3 +#usr/share/man/man3/RSA_blinding_off.3 +#usr/share/man/man3/RSA_blinding_on.3 +#usr/share/man/man3/RSA_check_key.3 +#usr/share/man/man3/RSA_check_key_ex.3 +#usr/share/man/man3/RSA_clear_flags.3 +#usr/share/man/man3/RSA_flags.3 +#usr/share/man/man3/RSA_free.3 +#usr/share/man/man3/RSA_generate_key.3 +#usr/share/man/man3/RSA_generate_key_ex.3 +#usr/share/man/man3/RSA_get0_crt_params.3 +#usr/share/man/man3/RSA_get0_engine.3 +#usr/share/man/man3/RSA_get0_factors.3 +#usr/share/man/man3/RSA_get0_key.3 +#usr/share/man/man3/RSA_get_default_method.3 +#usr/share/man/man3/RSA_get_ex_data.3 +#usr/share/man/man3/RSA_get_ex_new_index.3 +#usr/share/man/man3/RSA_get_method.3 +#usr/share/man/man3/RSA_meth_dup.3 +#usr/share/man/man3/RSA_meth_free.3 +#usr/share/man/man3/RSA_meth_get0_app_data.3 +#usr/share/man/man3/RSA_meth_get0_name.3 +#usr/share/man/man3/RSA_meth_get_bn_mod_exp.3 +#usr/share/man/man3/RSA_meth_get_finish.3 +#usr/share/man/man3/RSA_meth_get_flags.3 +#usr/share/man/man3/RSA_meth_get_init.3 +#usr/share/man/man3/RSA_meth_get_keygen.3 +#usr/share/man/man3/RSA_meth_get_mod_exp.3 +#usr/share/man/man3/RSA_meth_get_priv_dec.3 +#usr/share/man/man3/RSA_meth_get_priv_enc.3 +#usr/share/man/man3/RSA_meth_get_pub_dec.3 +#usr/share/man/man3/RSA_meth_get_pub_enc.3 +#usr/share/man/man3/RSA_meth_get_sign.3 +#usr/share/man/man3/RSA_meth_get_verify.3 +#usr/share/man/man3/RSA_meth_new.3 +#usr/share/man/man3/RSA_meth_set0_app_data.3 +#usr/share/man/man3/RSA_meth_set1_name.3 +#usr/share/man/man3/RSA_meth_set_bn_mod_exp.3 +#usr/share/man/man3/RSA_meth_set_finish.3 +#usr/share/man/man3/RSA_meth_set_flags.3 +#usr/share/man/man3/RSA_meth_set_init.3 +#usr/share/man/man3/RSA_meth_set_keygen.3 +#usr/share/man/man3/RSA_meth_set_mod_exp.3 +#usr/share/man/man3/RSA_meth_set_priv_dec.3 +#usr/share/man/man3/RSA_meth_set_priv_enc.3 +#usr/share/man/man3/RSA_meth_set_pub_dec.3 +#usr/share/man/man3/RSA_meth_set_pub_enc.3 +#usr/share/man/man3/RSA_meth_set_sign.3 +#usr/share/man/man3/RSA_meth_set_verify.3 +#usr/share/man/man3/RSA_new.3 +#usr/share/man/man3/RSA_new_method.3 +#usr/share/man/man3/RSA_padding_add_PKCS1_OAEP.3 +#usr/share/man/man3/RSA_padding_add_PKCS1_type_1.3 +#usr/share/man/man3/RSA_padding_add_PKCS1_type_2.3 +#usr/share/man/man3/RSA_padding_add_SSLv23.3 +#usr/share/man/man3/RSA_padding_add_none.3 +#usr/share/man/man3/RSA_padding_check_PKCS1_OAEP.3 +#usr/share/man/man3/RSA_padding_check_PKCS1_type_1.3 +#usr/share/man/man3/RSA_padding_check_PKCS1_type_2.3 +#usr/share/man/man3/RSA_padding_check_SSLv23.3 +#usr/share/man/man3/RSA_padding_check_none.3 +#usr/share/man/man3/RSA_print.3 +#usr/share/man/man3/RSA_print_fp.3 +#usr/share/man/man3/RSA_private_decrypt.3 +#usr/share/man/man3/RSA_private_encrypt.3 +#usr/share/man/man3/RSA_public_decrypt.3 +#usr/share/man/man3/RSA_public_encrypt.3 +#usr/share/man/man3/RSA_set0_crt_params.3 +#usr/share/man/man3/RSA_set0_factors.3 +#usr/share/man/man3/RSA_set0_key.3 +#usr/share/man/man3/RSA_set_default_method.3 +#usr/share/man/man3/RSA_set_ex_data.3 +#usr/share/man/man3/RSA_set_flags.3 +#usr/share/man/man3/RSA_set_method.3 +#usr/share/man/man3/RSA_sign.3 +#usr/share/man/man3/RSA_sign_ASN1_OCTET_STRING.3 +#usr/share/man/man3/RSA_size.3 +#usr/share/man/man3/RSA_test_flags.3 +#usr/share/man/man3/RSA_verify.3 +#usr/share/man/man3/RSA_verify_ASN1_OCTET_STRING.3 +#usr/share/man/man3/SCT_LIST_free.3 +#usr/share/man/man3/SCT_LIST_print.3 +#usr/share/man/man3/SCT_LIST_validate.3 +#usr/share/man/man3/SCT_free.3 +#usr/share/man/man3/SCT_get0_extensions.3 +#usr/share/man/man3/SCT_get0_log_id.3 +#usr/share/man/man3/SCT_get0_signature.3 +#usr/share/man/man3/SCT_get_log_entry_type.3 +#usr/share/man/man3/SCT_get_signature_nid.3 +#usr/share/man/man3/SCT_get_source.3 +#usr/share/man/man3/SCT_get_timestamp.3 +#usr/share/man/man3/SCT_get_validation_status.3 +#usr/share/man/man3/SCT_get_version.3 +#usr/share/man/man3/SCT_new.3 +#usr/share/man/man3/SCT_new_from_base64.3 +#usr/share/man/man3/SCT_print.3 +#usr/share/man/man3/SCT_set0_extensions.3 +#usr/share/man/man3/SCT_set0_log_id.3 +#usr/share/man/man3/SCT_set0_signature.3 +#usr/share/man/man3/SCT_set1_extensions.3 +#usr/share/man/man3/SCT_set1_log_id.3 +#usr/share/man/man3/SCT_set1_signature.3 +#usr/share/man/man3/SCT_set_log_entry_type.3 +#usr/share/man/man3/SCT_set_signature_nid.3 +#usr/share/man/man3/SCT_set_source.3 +#usr/share/man/man3/SCT_set_timestamp.3 +#usr/share/man/man3/SCT_set_version.3 +#usr/share/man/man3/SCT_validate.3 +#usr/share/man/man3/SCT_validation_status_string.3 +#usr/share/man/man3/SHA1.3 +#usr/share/man/man3/SHA1_Final.3 +#usr/share/man/man3/SHA1_Init.3 +#usr/share/man/man3/SHA1_Update.3 +#usr/share/man/man3/SHA224.3 +#usr/share/man/man3/SHA224_Final.3 +#usr/share/man/man3/SHA224_Init.3 +#usr/share/man/man3/SHA224_Update.3 +#usr/share/man/man3/SHA256.3 +#usr/share/man/man3/SHA256_Final.3 +#usr/share/man/man3/SHA256_Init.3 +#usr/share/man/man3/SHA256_Update.3 +#usr/share/man/man3/SHA384.3 +#usr/share/man/man3/SHA384_Final.3 +#usr/share/man/man3/SHA384_Init.3 +#usr/share/man/man3/SHA384_Update.3 +#usr/share/man/man3/SHA512.3 +#usr/share/man/man3/SHA512_Final.3 +#usr/share/man/man3/SHA512_Init.3 +#usr/share/man/man3/SHA512_Update.3 +#usr/share/man/man3/SMIME_read_CMS.3 +#usr/share/man/man3/SMIME_read_PKCS7.3 +#usr/share/man/man3/SMIME_write_CMS.3 +#usr/share/man/man3/SMIME_write_PKCS7.3 +#usr/share/man/man3/SSL_CIPHER_description.3 +#usr/share/man/man3/SSL_CIPHER_get_auth_nid.3 +#usr/share/man/man3/SSL_CIPHER_get_bits.3 +#usr/share/man/man3/SSL_CIPHER_get_cipher_nid.3 +#usr/share/man/man3/SSL_CIPHER_get_digest_nid.3 +#usr/share/man/man3/SSL_CIPHER_get_kx_nid.3 +#usr/share/man/man3/SSL_CIPHER_get_name.3 +#usr/share/man/man3/SSL_CIPHER_get_version.3 +#usr/share/man/man3/SSL_CIPHER_is_aead.3 +#usr/share/man/man3/SSL_COMP_add_compression_method.3 +#usr/share/man/man3/SSL_COMP_free_compression_methods.3 +#usr/share/man/man3/SSL_COMP_get0_name.3 +#usr/share/man/man3/SSL_COMP_get_compression_methods.3 +#usr/share/man/man3/SSL_COMP_get_id.3 +#usr/share/man/man3/SSL_CONF_CTX_clear_flags.3 +#usr/share/man/man3/SSL_CONF_CTX_free.3 +#usr/share/man/man3/SSL_CONF_CTX_new.3 +#usr/share/man/man3/SSL_CONF_CTX_set1_prefix.3 +#usr/share/man/man3/SSL_CONF_CTX_set_flags.3 +#usr/share/man/man3/SSL_CONF_CTX_set_ssl.3 +#usr/share/man/man3/SSL_CONF_CTX_set_ssl_ctx.3 +#usr/share/man/man3/SSL_CONF_cmd.3 +#usr/share/man/man3/SSL_CONF_cmd_argv.3 +#usr/share/man/man3/SSL_CONF_cmd_value_type.3 +#usr/share/man/man3/SSL_CONF_finish.3 +#usr/share/man/man3/SSL_CTX_add0_chain_cert.3 +#usr/share/man/man3/SSL_CTX_add1_chain_cert.3 +#usr/share/man/man3/SSL_CTX_add_client_CA.3 +#usr/share/man/man3/SSL_CTX_add_client_custom_ext.3 +#usr/share/man/man3/SSL_CTX_add_extra_chain_cert.3 +#usr/share/man/man3/SSL_CTX_add_server_custom_ext.3 +#usr/share/man/man3/SSL_CTX_add_session.3 +#usr/share/man/man3/SSL_CTX_build_cert_chain.3 +#usr/share/man/man3/SSL_CTX_callback_ctrl.3 +#usr/share/man/man3/SSL_CTX_check_private_key.3 +#usr/share/man/man3/SSL_CTX_clear_chain_certs.3 +#usr/share/man/man3/SSL_CTX_clear_extra_chain_certs.3 +#usr/share/man/man3/SSL_CTX_clear_options.3 +#usr/share/man/man3/SSL_CTX_config.3 +#usr/share/man/man3/SSL_CTX_ct_is_enabled.3 +#usr/share/man/man3/SSL_CTX_ctrl.3 +#usr/share/man/man3/SSL_CTX_dane_clear_flags.3 +#usr/share/man/man3/SSL_CTX_dane_enable.3 +#usr/share/man/man3/SSL_CTX_dane_mtype_set.3 +#usr/share/man/man3/SSL_CTX_dane_set_flags.3 +#usr/share/man/man3/SSL_CTX_disable_ct.3 +#usr/share/man/man3/SSL_CTX_enable_ct.3 +#usr/share/man/man3/SSL_CTX_flush_sessions.3 +#usr/share/man/man3/SSL_CTX_free.3 +#usr/share/man/man3/SSL_CTX_get0_chain_certs.3 +#usr/share/man/man3/SSL_CTX_get0_param.3 +#usr/share/man/man3/SSL_CTX_get0_security_ex_data.3 +#usr/share/man/man3/SSL_CTX_get_cert_store.3 +#usr/share/man/man3/SSL_CTX_get_ciphers.3 +#usr/share/man/man3/SSL_CTX_get_client_CA_list.3 +#usr/share/man/man3/SSL_CTX_get_client_cert_cb.3 +#usr/share/man/man3/SSL_CTX_get_default_passwd_cb.3 +#usr/share/man/man3/SSL_CTX_get_default_passwd_cb_userdata.3 +#usr/share/man/man3/SSL_CTX_get_default_read_ahead.3 +#usr/share/man/man3/SSL_CTX_get_ex_data.3 +#usr/share/man/man3/SSL_CTX_get_info_callback.3 +#usr/share/man/man3/SSL_CTX_get_max_cert_list.3 +#usr/share/man/man3/SSL_CTX_get_max_proto_version.3 +#usr/share/man/man3/SSL_CTX_get_min_proto_version.3 +#usr/share/man/man3/SSL_CTX_get_mode.3 +#usr/share/man/man3/SSL_CTX_get_options.3 +#usr/share/man/man3/SSL_CTX_get_quiet_shutdown.3 +#usr/share/man/man3/SSL_CTX_get_read_ahead.3 +#usr/share/man/man3/SSL_CTX_get_security_callback.3 +#usr/share/man/man3/SSL_CTX_get_security_level.3 +#usr/share/man/man3/SSL_CTX_get_session_cache_mode.3 +#usr/share/man/man3/SSL_CTX_get_timeout.3 +#usr/share/man/man3/SSL_CTX_get_tlsext_status_arg.3 +#usr/share/man/man3/SSL_CTX_get_tlsext_status_cb.3 +#usr/share/man/man3/SSL_CTX_get_tlsext_status_type.3 +#usr/share/man/man3/SSL_CTX_get_verify_callback.3 +#usr/share/man/man3/SSL_CTX_get_verify_depth.3 +#usr/share/man/man3/SSL_CTX_get_verify_mode.3 +#usr/share/man/man3/SSL_CTX_has_client_custom_ext.3 +#usr/share/man/man3/SSL_CTX_load_verify_locations.3 +#usr/share/man/man3/SSL_CTX_new.3 +#usr/share/man/man3/SSL_CTX_remove_session.3 +#usr/share/man/man3/SSL_CTX_select_current_cert.3 +#usr/share/man/man3/SSL_CTX_sess_accept.3 +#usr/share/man/man3/SSL_CTX_sess_accept_good.3 +#usr/share/man/man3/SSL_CTX_sess_accept_renegotiate.3 +#usr/share/man/man3/SSL_CTX_sess_cache_full.3 +#usr/share/man/man3/SSL_CTX_sess_cb_hits.3 +#usr/share/man/man3/SSL_CTX_sess_connect.3 +#usr/share/man/man3/SSL_CTX_sess_connect_good.3 +#usr/share/man/man3/SSL_CTX_sess_connect_renegotiate.3 +#usr/share/man/man3/SSL_CTX_sess_get_cache_size.3 +#usr/share/man/man3/SSL_CTX_sess_get_get_cb.3 +#usr/share/man/man3/SSL_CTX_sess_get_new_cb.3 +#usr/share/man/man3/SSL_CTX_sess_get_remove_cb.3 +#usr/share/man/man3/SSL_CTX_sess_hits.3 +#usr/share/man/man3/SSL_CTX_sess_misses.3 +#usr/share/man/man3/SSL_CTX_sess_number.3 +#usr/share/man/man3/SSL_CTX_sess_set_cache_size.3 +#usr/share/man/man3/SSL_CTX_sess_set_get_cb.3 +#usr/share/man/man3/SSL_CTX_sess_set_new_cb.3 +#usr/share/man/man3/SSL_CTX_sess_set_remove_cb.3 +#usr/share/man/man3/SSL_CTX_sess_timeouts.3 +#usr/share/man/man3/SSL_CTX_sessions.3 +#usr/share/man/man3/SSL_CTX_set0_chain.3 +#usr/share/man/man3/SSL_CTX_set0_chain_cert_store.3 +#usr/share/man/man3/SSL_CTX_set0_security_ex_data.3 +#usr/share/man/man3/SSL_CTX_set0_verify_cert_store.3 +#usr/share/man/man3/SSL_CTX_set1_chain.3 +#usr/share/man/man3/SSL_CTX_set1_chain_cert_store.3 +#usr/share/man/man3/SSL_CTX_set1_client_sigalgs.3 +#usr/share/man/man3/SSL_CTX_set1_client_sigalgs_list.3 +#usr/share/man/man3/SSL_CTX_set1_curves.3 +#usr/share/man/man3/SSL_CTX_set1_curves_list.3 +#usr/share/man/man3/SSL_CTX_set1_param.3 +#usr/share/man/man3/SSL_CTX_set1_sigalgs.3 +#usr/share/man/man3/SSL_CTX_set1_sigalgs_list.3 +#usr/share/man/man3/SSL_CTX_set1_verify_cert_store.3 +#usr/share/man/man3/SSL_CTX_set_alpn_protos.3 +#usr/share/man/man3/SSL_CTX_set_alpn_select_cb.3 +#usr/share/man/man3/SSL_CTX_set_cert_cb.3 +#usr/share/man/man3/SSL_CTX_set_cert_store.3 +#usr/share/man/man3/SSL_CTX_set_cert_verify_callback.3 +#usr/share/man/man3/SSL_CTX_set_cipher_list.3 +#usr/share/man/man3/SSL_CTX_set_client_CA_list.3 +#usr/share/man/man3/SSL_CTX_set_client_cert_cb.3 +#usr/share/man/man3/SSL_CTX_set_ct_validation_callback.3 +#usr/share/man/man3/SSL_CTX_set_ctlog_list_file.3 +#usr/share/man/man3/SSL_CTX_set_current_cert.3 +#usr/share/man/man3/SSL_CTX_set_default_ctlog_list_file.3 +#usr/share/man/man3/SSL_CTX_set_default_passwd_cb.3 +#usr/share/man/man3/SSL_CTX_set_default_passwd_cb_userdata.3 +#usr/share/man/man3/SSL_CTX_set_default_read_buffer_len.3 +#usr/share/man/man3/SSL_CTX_set_default_verify_dir.3 +#usr/share/man/man3/SSL_CTX_set_default_verify_file.3 +#usr/share/man/man3/SSL_CTX_set_default_verify_paths.3 +#usr/share/man/man3/SSL_CTX_set_ex_data.3 +#usr/share/man/man3/SSL_CTX_set_generate_session_id.3 +#usr/share/man/man3/SSL_CTX_set_info_callback.3 +#usr/share/man/man3/SSL_CTX_set_max_cert_list.3 +#usr/share/man/man3/SSL_CTX_set_max_pipelines.3 +#usr/share/man/man3/SSL_CTX_set_max_proto_version.3 +#usr/share/man/man3/SSL_CTX_set_max_send_fragment.3 +#usr/share/man/man3/SSL_CTX_set_min_proto_version.3 +#usr/share/man/man3/SSL_CTX_set_mode.3 +#usr/share/man/man3/SSL_CTX_set_msg_callback.3 +#usr/share/man/man3/SSL_CTX_set_msg_callback_arg.3 +#usr/share/man/man3/SSL_CTX_set_next_proto_select_cb.3 +#usr/share/man/man3/SSL_CTX_set_next_protos_advertised_cb.3 +#usr/share/man/man3/SSL_CTX_set_options.3 +#usr/share/man/man3/SSL_CTX_set_psk_client_callback.3 +#usr/share/man/man3/SSL_CTX_set_psk_server_callback.3 +#usr/share/man/man3/SSL_CTX_set_quiet_shutdown.3 +#usr/share/man/man3/SSL_CTX_set_read_ahead.3 +#usr/share/man/man3/SSL_CTX_set_security_callback.3 +#usr/share/man/man3/SSL_CTX_set_security_level.3 +#usr/share/man/man3/SSL_CTX_set_session_cache_mode.3 +#usr/share/man/man3/SSL_CTX_set_session_id_context.3 +#usr/share/man/man3/SSL_CTX_set_split_send_fragment.3 +#usr/share/man/man3/SSL_CTX_set_ssl_version.3 +#usr/share/man/man3/SSL_CTX_set_timeout.3 +#usr/share/man/man3/SSL_CTX_set_tlsext_status_arg.3 +#usr/share/man/man3/SSL_CTX_set_tlsext_status_cb.3 +#usr/share/man/man3/SSL_CTX_set_tlsext_status_type.3 +#usr/share/man/man3/SSL_CTX_set_tlsext_ticket_key_cb.3 +#usr/share/man/man3/SSL_CTX_set_tlsext_use_srtp.3 +#usr/share/man/man3/SSL_CTX_set_tmp_dh.3 +#usr/share/man/man3/SSL_CTX_set_tmp_dh_callback.3 +#usr/share/man/man3/SSL_CTX_set_verify.3 +#usr/share/man/man3/SSL_CTX_set_verify_depth.3 +#usr/share/man/man3/SSL_CTX_up_ref.3 +#usr/share/man/man3/SSL_CTX_use_PrivateKey.3 +#usr/share/man/man3/SSL_CTX_use_PrivateKey_ASN1.3 +#usr/share/man/man3/SSL_CTX_use_PrivateKey_file.3 +#usr/share/man/man3/SSL_CTX_use_RSAPrivateKey.3 +#usr/share/man/man3/SSL_CTX_use_RSAPrivateKey_ASN1.3 +#usr/share/man/man3/SSL_CTX_use_RSAPrivateKey_file.3 +#usr/share/man/man3/SSL_CTX_use_certificate.3 +#usr/share/man/man3/SSL_CTX_use_certificate_ASN1.3 +#usr/share/man/man3/SSL_CTX_use_certificate_chain_file.3 +#usr/share/man/man3/SSL_CTX_use_certificate_file.3 +#usr/share/man/man3/SSL_CTX_use_psk_identity_hint.3 +#usr/share/man/man3/SSL_CTX_use_serverinfo.3 +#usr/share/man/man3/SSL_CTX_use_serverinfo_file.3 +#usr/share/man/man3/SSL_SESSION_free.3 +#usr/share/man/man3/SSL_SESSION_get0_cipher.3 +#usr/share/man/man3/SSL_SESSION_get0_hostname.3 +#usr/share/man/man3/SSL_SESSION_get0_id_context.3 +#usr/share/man/man3/SSL_SESSION_get0_peer.3 +#usr/share/man/man3/SSL_SESSION_get0_ticket.3 +#usr/share/man/man3/SSL_SESSION_get_compress_id.3 +#usr/share/man/man3/SSL_SESSION_get_ex_data.3 +#usr/share/man/man3/SSL_SESSION_get_id.3 +#usr/share/man/man3/SSL_SESSION_get_master_key.3 +#usr/share/man/man3/SSL_SESSION_get_protocol_version.3 +#usr/share/man/man3/SSL_SESSION_get_ticket_lifetime_hint.3 +#usr/share/man/man3/SSL_SESSION_get_time.3 +#usr/share/man/man3/SSL_SESSION_get_timeout.3 +#usr/share/man/man3/SSL_SESSION_has_ticket.3 +#usr/share/man/man3/SSL_SESSION_new.3 +#usr/share/man/man3/SSL_SESSION_print.3 +#usr/share/man/man3/SSL_SESSION_print_fp.3 +#usr/share/man/man3/SSL_SESSION_print_keylog.3 +#usr/share/man/man3/SSL_SESSION_set1_id.3 +#usr/share/man/man3/SSL_SESSION_set1_id_context.3 +#usr/share/man/man3/SSL_SESSION_set_ex_data.3 +#usr/share/man/man3/SSL_SESSION_set_time.3 +#usr/share/man/man3/SSL_SESSION_set_timeout.3 +#usr/share/man/man3/SSL_SESSION_up_ref.3 +#usr/share/man/man3/SSL_accept.3 +#usr/share/man/man3/SSL_add0_chain_cert.3 +#usr/share/man/man3/SSL_add1_chain_cert.3 +#usr/share/man/man3/SSL_add1_host.3 +#usr/share/man/man3/SSL_add_client_CA.3 +#usr/share/man/man3/SSL_add_session.3 +#usr/share/man/man3/SSL_alert_desc_string.3 +#usr/share/man/man3/SSL_alert_desc_string_long.3 +#usr/share/man/man3/SSL_alert_type_string.3 +#usr/share/man/man3/SSL_alert_type_string_long.3 +#usr/share/man/man3/SSL_build_cert_chain.3 +#usr/share/man/man3/SSL_callback_ctrl.3 +#usr/share/man/man3/SSL_check_chain.3 +#usr/share/man/man3/SSL_check_private_key.3 +#usr/share/man/man3/SSL_clear.3 +#usr/share/man/man3/SSL_clear_chain_certs.3 +#usr/share/man/man3/SSL_clear_options.3 +#usr/share/man/man3/SSL_config.3 +#usr/share/man/man3/SSL_connect.3 +#usr/share/man/man3/SSL_ct_is_enabled.3 +#usr/share/man/man3/SSL_ctrl.3 +#usr/share/man/man3/SSL_dane_clear_flags.3 +#usr/share/man/man3/SSL_dane_enable.3 +#usr/share/man/man3/SSL_dane_set_flags.3 +#usr/share/man/man3/SSL_dane_tlsa_add.3 +#usr/share/man/man3/SSL_disable_ct.3 +#usr/share/man/man3/SSL_do_handshake.3 +#usr/share/man/man3/SSL_enable_ct.3 +#usr/share/man/man3/SSL_export_keying_material.3 +#usr/share/man/man3/SSL_extension_supported.3 +#usr/share/man/man3/SSL_flush_sessions.3 +#usr/share/man/man3/SSL_free.3 +#usr/share/man/man3/SSL_get0_alpn_selected.3 +#usr/share/man/man3/SSL_get0_chain_certs.3 +#usr/share/man/man3/SSL_get0_dane_authority.3 +#usr/share/man/man3/SSL_get0_dane_tlsa.3 +#usr/share/man/man3/SSL_get0_next_proto_negotiated.3 +#usr/share/man/man3/SSL_get0_param.3 +#usr/share/man/man3/SSL_get0_peer_scts.3 +#usr/share/man/man3/SSL_get0_peername.3 +#usr/share/man/man3/SSL_get0_security_ex_data.3 +#usr/share/man/man3/SSL_get0_session.3 +#usr/share/man/man3/SSL_get0_verified_chain.3 +#usr/share/man/man3/SSL_get1_curves.3 +#usr/share/man/man3/SSL_get1_session.3 +#usr/share/man/man3/SSL_get1_supported_ciphers.3 +#usr/share/man/man3/SSL_get_SSL_CTX.3 +#usr/share/man/man3/SSL_get_all_async_fds.3 +#usr/share/man/man3/SSL_get_changed_async_fds.3 +#usr/share/man/man3/SSL_get_cipher.3 +#usr/share/man/man3/SSL_get_cipher_bits.3 +#usr/share/man/man3/SSL_get_cipher_list.3 +#usr/share/man/man3/SSL_get_cipher_name.3 +#usr/share/man/man3/SSL_get_cipher_version.3 +#usr/share/man/man3/SSL_get_ciphers.3 +#usr/share/man/man3/SSL_get_client_CA_list.3 +#usr/share/man/man3/SSL_get_client_ciphers.3 +#usr/share/man/man3/SSL_get_client_random.3 +#usr/share/man/man3/SSL_get_current_cipher.3 +#usr/share/man/man3/SSL_get_default_passwd_cb.3 +#usr/share/man/man3/SSL_get_default_passwd_cb_userdata.3 +#usr/share/man/man3/SSL_get_default_timeout.3 +#usr/share/man/man3/SSL_get_error.3 +#usr/share/man/man3/SSL_get_ex_data.3 +#usr/share/man/man3/SSL_get_ex_data_X509_STORE_CTX_idx.3 +#usr/share/man/man3/SSL_get_extms_support.3 +#usr/share/man/man3/SSL_get_fd.3 +#usr/share/man/man3/SSL_get_info_callback.3 +#usr/share/man/man3/SSL_get_max_cert_list.3 +#usr/share/man/man3/SSL_get_max_proto_version.3 +#usr/share/man/man3/SSL_get_min_proto_version.3 +#usr/share/man/man3/SSL_get_mode.3 +#usr/share/man/man3/SSL_get_options.3 +#usr/share/man/man3/SSL_get_peer_cert_chain.3 +#usr/share/man/man3/SSL_get_peer_certificate.3 +#usr/share/man/man3/SSL_get_psk_identity.3 +#usr/share/man/man3/SSL_get_psk_identity_hint.3 +#usr/share/man/man3/SSL_get_quiet_shutdown.3 +#usr/share/man/man3/SSL_get_rbio.3 +#usr/share/man/man3/SSL_get_read_ahead.3 +#usr/share/man/man3/SSL_get_rfd.3 +#usr/share/man/man3/SSL_get_secure_renegotiation_support.3 +#usr/share/man/man3/SSL_get_security_callback.3 +#usr/share/man/man3/SSL_get_security_level.3 +#usr/share/man/man3/SSL_get_selected_srtp_profile.3 +#usr/share/man/man3/SSL_get_server_random.3 +#usr/share/man/man3/SSL_get_session.3 +#usr/share/man/man3/SSL_get_shared_curve.3 +#usr/share/man/man3/SSL_get_shared_sigalgs.3 +#usr/share/man/man3/SSL_get_shutdown.3 +#usr/share/man/man3/SSL_get_sigalgs.3 +#usr/share/man/man3/SSL_get_srtp_profiles.3 +#usr/share/man/man3/SSL_get_ssl_method.3 +#usr/share/man/man3/SSL_get_time.3 +#usr/share/man/man3/SSL_get_timeout.3 +#usr/share/man/man3/SSL_get_tlsext_status_ocsp_resp.3 +#usr/share/man/man3/SSL_get_tlsext_status_type.3 +#usr/share/man/man3/SSL_get_verify_callback.3 +#usr/share/man/man3/SSL_get_verify_depth.3 +#usr/share/man/man3/SSL_get_verify_mode.3 +#usr/share/man/man3/SSL_get_verify_result.3 +#usr/share/man/man3/SSL_get_version.3 +#usr/share/man/man3/SSL_get_wbio.3 +#usr/share/man/man3/SSL_get_wfd.3 +#usr/share/man/man3/SSL_has_matching_session_id.3 +#usr/share/man/man3/SSL_has_pending.3 +#usr/share/man/man3/SSL_is_dtls.3 +#usr/share/man/man3/SSL_library_init.3 +#usr/share/man/man3/SSL_load_client_CA_file.3 +#usr/share/man/man3/SSL_load_error_strings.3 +#usr/share/man/man3/SSL_new.3 +#usr/share/man/man3/SSL_pending.3 +#usr/share/man/man3/SSL_read.3 +#usr/share/man/man3/SSL_remove_session.3 +#usr/share/man/man3/SSL_rstate_string.3 +#usr/share/man/man3/SSL_rstate_string_long.3 +#usr/share/man/man3/SSL_select_current_cert.3 +#usr/share/man/man3/SSL_select_next_proto.3 +#usr/share/man/man3/SSL_session_reused.3 +#usr/share/man/man3/SSL_set0_chain.3 +#usr/share/man/man3/SSL_set0_chain_cert_store.3 +#usr/share/man/man3/SSL_set0_rbio.3 +#usr/share/man/man3/SSL_set0_security_ex_data.3 +#usr/share/man/man3/SSL_set0_verify_cert_store.3 +#usr/share/man/man3/SSL_set0_wbio.3 +#usr/share/man/man3/SSL_set1_chain.3 +#usr/share/man/man3/SSL_set1_chain_cert_store.3 +#usr/share/man/man3/SSL_set1_client_sigalgs.3 +#usr/share/man/man3/SSL_set1_client_sigalgs_list.3 +#usr/share/man/man3/SSL_set1_curves.3 +#usr/share/man/man3/SSL_set1_curves_list.3 +#usr/share/man/man3/SSL_set1_host.3 +#usr/share/man/man3/SSL_set1_param.3 +#usr/share/man/man3/SSL_set1_sigalgs.3 +#usr/share/man/man3/SSL_set1_sigalgs_list.3 +#usr/share/man/man3/SSL_set1_verify_cert_store.3 +#usr/share/man/man3/SSL_set_accept_state.3 +#usr/share/man/man3/SSL_set_alpn_protos.3 +#usr/share/man/man3/SSL_set_bio.3 +#usr/share/man/man3/SSL_set_cert_cb.3 +#usr/share/man/man3/SSL_set_cipher_list.3 +#usr/share/man/man3/SSL_set_client_CA_list.3 +#usr/share/man/man3/SSL_set_connect_state.3 +#usr/share/man/man3/SSL_set_ct_validation_callback.3 +#usr/share/man/man3/SSL_set_current_cert.3 +#usr/share/man/man3/SSL_set_default_passwd_cb.3 +#usr/share/man/man3/SSL_set_default_passwd_cb_userdata.3 +#usr/share/man/man3/SSL_set_default_read_buffer_len.3 +#usr/share/man/man3/SSL_set_ex_data.3 +#usr/share/man/man3/SSL_set_fd.3 +#usr/share/man/man3/SSL_set_generate_session_id.3 +#usr/share/man/man3/SSL_set_hostflags.3 +#usr/share/man/man3/SSL_set_info_callback.3 +#usr/share/man/man3/SSL_set_max_cert_list.3 +#usr/share/man/man3/SSL_set_max_pipelines.3 +#usr/share/man/man3/SSL_set_max_proto_version.3 +#usr/share/man/man3/SSL_set_max_send_fragment.3 +#usr/share/man/man3/SSL_set_min_proto_version.3 +#usr/share/man/man3/SSL_set_mode.3 +#usr/share/man/man3/SSL_set_msg_callback.3 +#usr/share/man/man3/SSL_set_msg_callback_arg.3 +#usr/share/man/man3/SSL_set_options.3 +#usr/share/man/man3/SSL_set_psk_client_callback.3 +#usr/share/man/man3/SSL_set_psk_server_callback.3 +#usr/share/man/man3/SSL_set_quiet_shutdown.3 +#usr/share/man/man3/SSL_set_read_ahead.3 +#usr/share/man/man3/SSL_set_rfd.3 +#usr/share/man/man3/SSL_set_security_callback.3 +#usr/share/man/man3/SSL_set_security_level.3 +#usr/share/man/man3/SSL_set_session.3 +#usr/share/man/man3/SSL_set_session_id_context.3 +#usr/share/man/man3/SSL_set_shutdown.3 +#usr/share/man/man3/SSL_set_split_send_fragment.3 +#usr/share/man/man3/SSL_set_ssl_method.3 +#usr/share/man/man3/SSL_set_time.3 +#usr/share/man/man3/SSL_set_timeout.3 +#usr/share/man/man3/SSL_set_tlsext_status_ocsp_resp.3 +#usr/share/man/man3/SSL_set_tlsext_status_type.3 +#usr/share/man/man3/SSL_set_tlsext_use_srtp.3 +#usr/share/man/man3/SSL_set_tmp_dh.3 +#usr/share/man/man3/SSL_set_tmp_dh_callback.3 +#usr/share/man/man3/SSL_set_verify.3 +#usr/share/man/man3/SSL_set_verify_depth.3 +#usr/share/man/man3/SSL_set_verify_result.3 +#usr/share/man/man3/SSL_set_wfd.3 +#usr/share/man/man3/SSL_shutdown.3 +#usr/share/man/man3/SSL_state_string.3 +#usr/share/man/man3/SSL_state_string_long.3 +#usr/share/man/man3/SSL_up_ref.3 +#usr/share/man/man3/SSL_use_PrivateKey.3 +#usr/share/man/man3/SSL_use_PrivateKey_ASN1.3 +#usr/share/man/man3/SSL_use_PrivateKey_file.3 +#usr/share/man/man3/SSL_use_RSAPrivateKey.3 +#usr/share/man/man3/SSL_use_RSAPrivateKey_ASN1.3 +#usr/share/man/man3/SSL_use_RSAPrivateKey_file.3 +#usr/share/man/man3/SSL_use_certificate.3 +#usr/share/man/man3/SSL_use_certificate_ASN1.3 +#usr/share/man/man3/SSL_use_certificate_chain_file.3 +#usr/share/man/man3/SSL_use_certificate_file.3 +#usr/share/man/man3/SSL_use_psk_identity_hint.3 +#usr/share/man/man3/SSL_verify_cb.3 +#usr/share/man/man3/SSL_waiting_for_async.3 +#usr/share/man/man3/SSL_want.3 +#usr/share/man/man3/SSL_want_async.3 +#usr/share/man/man3/SSL_want_async_job.3 +#usr/share/man/man3/SSL_want_nothing.3 +#usr/share/man/man3/SSL_want_read.3 +#usr/share/man/man3/SSL_want_write.3 +#usr/share/man/man3/SSL_want_x509_lookup.3 +#usr/share/man/man3/SSL_write.3 +#usr/share/man/man3/SSLv23_client_method.3 +#usr/share/man/man3/SSLv23_method.3 +#usr/share/man/man3/SSLv23_server_method.3 +#usr/share/man/man3/SSLv3_client_method.3 +#usr/share/man/man3/SSLv3_method.3 +#usr/share/man/man3/SSLv3_server_method.3 +#usr/share/man/man3/SXNETID_free.3 +#usr/share/man/man3/SXNETID_new.3 +#usr/share/man/man3/SXNET_free.3 +#usr/share/man/man3/SXNET_new.3 +#usr/share/man/man3/TLS_FEATURE_free.3 +#usr/share/man/man3/TLS_FEATURE_new.3 +#usr/share/man/man3/TLS_client_method.3 +#usr/share/man/man3/TLS_method.3 +#usr/share/man/man3/TLS_server_method.3 +#usr/share/man/man3/TLSv1_1_client_method.3 +#usr/share/man/man3/TLSv1_1_method.3 +#usr/share/man/man3/TLSv1_1_server_method.3 +#usr/share/man/man3/TLSv1_2_client_method.3 +#usr/share/man/man3/TLSv1_2_method.3 +#usr/share/man/man3/TLSv1_2_server_method.3 +#usr/share/man/man3/TLSv1_client_method.3 +#usr/share/man/man3/TLSv1_method.3 +#usr/share/man/man3/TLSv1_server_method.3 +#usr/share/man/man3/TS_ACCURACY_dup.3 +#usr/share/man/man3/TS_ACCURACY_free.3 +#usr/share/man/man3/TS_ACCURACY_new.3 +#usr/share/man/man3/TS_MSG_IMPRINT_dup.3 +#usr/share/man/man3/TS_MSG_IMPRINT_free.3 +#usr/share/man/man3/TS_MSG_IMPRINT_new.3 +#usr/share/man/man3/TS_REQ_dup.3 +#usr/share/man/man3/TS_REQ_free.3 +#usr/share/man/man3/TS_REQ_new.3 +#usr/share/man/man3/TS_RESP_dup.3 +#usr/share/man/man3/TS_RESP_free.3 +#usr/share/man/man3/TS_RESP_new.3 +#usr/share/man/man3/TS_STATUS_INFO_dup.3 +#usr/share/man/man3/TS_STATUS_INFO_free.3 +#usr/share/man/man3/TS_STATUS_INFO_new.3 +#usr/share/man/man3/TS_TST_INFO_dup.3 +#usr/share/man/man3/TS_TST_INFO_free.3 +#usr/share/man/man3/TS_TST_INFO_new.3 +#usr/share/man/man3/UI.3 +#usr/share/man/man3/UI_METHOD.3 +#usr/share/man/man3/UI_OpenSSL.3 +#usr/share/man/man3/UI_STRING.3 +#usr/share/man/man3/UI_add_error_string.3 +#usr/share/man/man3/UI_add_info_string.3 +#usr/share/man/man3/UI_add_input_boolean.3 +#usr/share/man/man3/UI_add_input_string.3 +#usr/share/man/man3/UI_add_user_data.3 +#usr/share/man/man3/UI_add_verify_string.3 +#usr/share/man/man3/UI_construct_prompt.3 +#usr/share/man/man3/UI_create_method.3 +#usr/share/man/man3/UI_ctrl.3 +#usr/share/man/man3/UI_destroy_method.3 +#usr/share/man/man3/UI_dup_error_string.3 +#usr/share/man/man3/UI_dup_info_string.3 +#usr/share/man/man3/UI_dup_input_boolean.3 +#usr/share/man/man3/UI_dup_input_string.3 +#usr/share/man/man3/UI_dup_verify_string.3 +#usr/share/man/man3/UI_free.3 +#usr/share/man/man3/UI_get0_action_string.3 +#usr/share/man/man3/UI_get0_output_string.3 +#usr/share/man/man3/UI_get0_result.3 +#usr/share/man/man3/UI_get0_result_string.3 +#usr/share/man/man3/UI_get0_test_string.3 +#usr/share/man/man3/UI_get0_user_data.3 +#usr/share/man/man3/UI_get_default_method.3 +#usr/share/man/man3/UI_get_ex_data.3 +#usr/share/man/man3/UI_get_ex_new_index.3 +#usr/share/man/man3/UI_get_input_flags.3 +#usr/share/man/man3/UI_get_method.3 +#usr/share/man/man3/UI_get_result_maxsize.3 +#usr/share/man/man3/UI_get_result_minsize.3 +#usr/share/man/man3/UI_get_string_type.3 +#usr/share/man/man3/UI_method_get_closer.3 +#usr/share/man/man3/UI_method_get_ex_data.3 +#usr/share/man/man3/UI_method_get_flusher.3 +#usr/share/man/man3/UI_method_get_opener.3 +#usr/share/man/man3/UI_method_get_prompt_constructor.3 +#usr/share/man/man3/UI_method_get_reader.3 +#usr/share/man/man3/UI_method_get_writer.3 +#usr/share/man/man3/UI_method_set_closer.3 +#usr/share/man/man3/UI_method_set_ex_data.3 +#usr/share/man/man3/UI_method_set_flusher.3 +#usr/share/man/man3/UI_method_set_opener.3 +#usr/share/man/man3/UI_method_set_prompt_constructor.3 +#usr/share/man/man3/UI_method_set_reader.3 +#usr/share/man/man3/UI_method_set_writer.3 +#usr/share/man/man3/UI_new.3 +#usr/share/man/man3/UI_new_method.3 +#usr/share/man/man3/UI_null.3 +#usr/share/man/man3/UI_process.3 +#usr/share/man/man3/UI_set_default_method.3 +#usr/share/man/man3/UI_set_ex_data.3 +#usr/share/man/man3/UI_set_method.3 +#usr/share/man/man3/UI_set_result.3 +#usr/share/man/man3/UI_string_types.3 +#usr/share/man/man3/USERNOTICE_free.3 +#usr/share/man/man3/USERNOTICE_new.3 +#usr/share/man/man3/X509V3_EXT_d2i.3 +#usr/share/man/man3/X509V3_EXT_i2d.3 +#usr/share/man/man3/X509V3_add1_i2d.3 +#usr/share/man/man3/X509V3_get_d2i.3 +#usr/share/man/man3/X509_ALGOR_cmp.3 +#usr/share/man/man3/X509_ALGOR_dup.3 +#usr/share/man/man3/X509_ALGOR_free.3 +#usr/share/man/man3/X509_ALGOR_get0.3 +#usr/share/man/man3/X509_ALGOR_new.3 +#usr/share/man/man3/X509_ALGOR_set0.3 +#usr/share/man/man3/X509_ALGOR_set_md.3 +#usr/share/man/man3/X509_ATTRIBUTE_dup.3 +#usr/share/man/man3/X509_ATTRIBUTE_free.3 +#usr/share/man/man3/X509_ATTRIBUTE_new.3 +#usr/share/man/man3/X509_CERT_AUX_free.3 +#usr/share/man/man3/X509_CERT_AUX_new.3 +#usr/share/man/man3/X509_CINF_free.3 +#usr/share/man/man3/X509_CINF_new.3 +#usr/share/man/man3/X509_CRL_INFO_free.3 +#usr/share/man/man3/X509_CRL_INFO_new.3 +#usr/share/man/man3/X509_CRL_add0_revoked.3 +#usr/share/man/man3/X509_CRL_add1_ext_i2d.3 +#usr/share/man/man3/X509_CRL_add_ext.3 +#usr/share/man/man3/X509_CRL_delete_ext.3 +#usr/share/man/man3/X509_CRL_digest.3 +#usr/share/man/man3/X509_CRL_dup.3 +#usr/share/man/man3/X509_CRL_free.3 +#usr/share/man/man3/X509_CRL_get0_by_cert.3 +#usr/share/man/man3/X509_CRL_get0_by_serial.3 +#usr/share/man/man3/X509_CRL_get0_extensions.3 +#usr/share/man/man3/X509_CRL_get0_lastUpdate.3 +#usr/share/man/man3/X509_CRL_get0_nextUpdate.3 +#usr/share/man/man3/X509_CRL_get0_signature.3 +#usr/share/man/man3/X509_CRL_get_REVOKED.3 +#usr/share/man/man3/X509_CRL_get_ext.3 +#usr/share/man/man3/X509_CRL_get_ext_by_NID.3 +#usr/share/man/man3/X509_CRL_get_ext_by_OBJ.3 +#usr/share/man/man3/X509_CRL_get_ext_by_critical.3 +#usr/share/man/man3/X509_CRL_get_ext_count.3 +#usr/share/man/man3/X509_CRL_get_ext_d2i.3 +#usr/share/man/man3/X509_CRL_get_issuer.3 +#usr/share/man/man3/X509_CRL_get_signature_nid.3 +#usr/share/man/man3/X509_CRL_get_version.3 +#usr/share/man/man3/X509_CRL_new.3 +#usr/share/man/man3/X509_CRL_set1_lastUpdate.3 +#usr/share/man/man3/X509_CRL_set1_nextUpdate.3 +#usr/share/man/man3/X509_CRL_set_issuer_name.3 +#usr/share/man/man3/X509_CRL_set_version.3 +#usr/share/man/man3/X509_CRL_sign.3 +#usr/share/man/man3/X509_CRL_sign_ctx.3 +#usr/share/man/man3/X509_CRL_sort.3 +#usr/share/man/man3/X509_CRL_verify.3 +#usr/share/man/man3/X509_EXTENSION_create_by_NID.3 +#usr/share/man/man3/X509_EXTENSION_create_by_OBJ.3 +#usr/share/man/man3/X509_EXTENSION_dup.3 +#usr/share/man/man3/X509_EXTENSION_free.3 +#usr/share/man/man3/X509_EXTENSION_get_critical.3 +#usr/share/man/man3/X509_EXTENSION_get_data.3 +#usr/share/man/man3/X509_EXTENSION_get_object.3 +#usr/share/man/man3/X509_EXTENSION_new.3 +#usr/share/man/man3/X509_EXTENSION_set_critical.3 +#usr/share/man/man3/X509_EXTENSION_set_data.3 +#usr/share/man/man3/X509_EXTENSION_set_object.3 +#usr/share/man/man3/X509_LOOKUP_file.3 +#usr/share/man/man3/X509_LOOKUP_hash_dir.3 +#usr/share/man/man3/X509_NAME_ENTRY_create_by_NID.3 +#usr/share/man/man3/X509_NAME_ENTRY_create_by_OBJ.3 +#usr/share/man/man3/X509_NAME_ENTRY_create_by_txt.3 +#usr/share/man/man3/X509_NAME_ENTRY_dup.3 +#usr/share/man/man3/X509_NAME_ENTRY_free.3 +#usr/share/man/man3/X509_NAME_ENTRY_get_data.3 +#usr/share/man/man3/X509_NAME_ENTRY_get_object.3 +#usr/share/man/man3/X509_NAME_ENTRY_new.3 +#usr/share/man/man3/X509_NAME_ENTRY_set_data.3 +#usr/share/man/man3/X509_NAME_ENTRY_set_object.3 +#usr/share/man/man3/X509_NAME_add_entry.3 +#usr/share/man/man3/X509_NAME_add_entry_by_NID.3 +#usr/share/man/man3/X509_NAME_add_entry_by_OBJ.3 +#usr/share/man/man3/X509_NAME_add_entry_by_txt.3 +#usr/share/man/man3/X509_NAME_delete_entry.3 +#usr/share/man/man3/X509_NAME_digest.3 +#usr/share/man/man3/X509_NAME_dup.3 +#usr/share/man/man3/X509_NAME_entry_count.3 +#usr/share/man/man3/X509_NAME_free.3 +#usr/share/man/man3/X509_NAME_get0_der.3 +#usr/share/man/man3/X509_NAME_get_entry.3 +#usr/share/man/man3/X509_NAME_get_index_by_NID.3 +#usr/share/man/man3/X509_NAME_get_index_by_OBJ.3 +#usr/share/man/man3/X509_NAME_get_text_by_NID.3 +#usr/share/man/man3/X509_NAME_get_text_by_OBJ.3 +#usr/share/man/man3/X509_NAME_new.3 +#usr/share/man/man3/X509_NAME_oneline.3 +#usr/share/man/man3/X509_NAME_print.3 +#usr/share/man/man3/X509_NAME_print_ex.3 +#usr/share/man/man3/X509_NAME_print_ex_fp.3 +#usr/share/man/man3/X509_PUBKEY_free.3 +#usr/share/man/man3/X509_PUBKEY_get.3 +#usr/share/man/man3/X509_PUBKEY_get0.3 +#usr/share/man/man3/X509_PUBKEY_get0_param.3 +#usr/share/man/man3/X509_PUBKEY_new.3 +#usr/share/man/man3/X509_PUBKEY_set.3 +#usr/share/man/man3/X509_PUBKEY_set0_param.3 +#usr/share/man/man3/X509_REQ_INFO_free.3 +#usr/share/man/man3/X509_REQ_INFO_new.3 +#usr/share/man/man3/X509_REQ_digest.3 +#usr/share/man/man3/X509_REQ_dup.3 +#usr/share/man/man3/X509_REQ_free.3 +#usr/share/man/man3/X509_REQ_get0_pubkey.3 +#usr/share/man/man3/X509_REQ_get0_signature.3 +#usr/share/man/man3/X509_REQ_get_X509_PUBKEY.3 +#usr/share/man/man3/X509_REQ_get_pubkey.3 +#usr/share/man/man3/X509_REQ_get_signature_nid.3 +#usr/share/man/man3/X509_REQ_get_subject_name.3 +#usr/share/man/man3/X509_REQ_get_version.3 +#usr/share/man/man3/X509_REQ_new.3 +#usr/share/man/man3/X509_REQ_set_pubkey.3 +#usr/share/man/man3/X509_REQ_set_subject_name.3 +#usr/share/man/man3/X509_REQ_set_version.3 +#usr/share/man/man3/X509_REQ_sign.3 +#usr/share/man/man3/X509_REQ_sign_ctx.3 +#usr/share/man/man3/X509_REQ_verify.3 +#usr/share/man/man3/X509_REVOKED_add1_ext_i2d.3 +#usr/share/man/man3/X509_REVOKED_add_ext.3 +#usr/share/man/man3/X509_REVOKED_delete_ext.3 +#usr/share/man/man3/X509_REVOKED_dup.3 +#usr/share/man/man3/X509_REVOKED_free.3 +#usr/share/man/man3/X509_REVOKED_get0_extensions.3 +#usr/share/man/man3/X509_REVOKED_get0_revocationDate.3 +#usr/share/man/man3/X509_REVOKED_get0_serialNumber.3 +#usr/share/man/man3/X509_REVOKED_get_ext.3 +#usr/share/man/man3/X509_REVOKED_get_ext_by_NID.3 +#usr/share/man/man3/X509_REVOKED_get_ext_by_OBJ.3 +#usr/share/man/man3/X509_REVOKED_get_ext_by_critical.3 +#usr/share/man/man3/X509_REVOKED_get_ext_count.3 +#usr/share/man/man3/X509_REVOKED_get_ext_d2i.3 +#usr/share/man/man3/X509_REVOKED_new.3 +#usr/share/man/man3/X509_REVOKED_set_revocationDate.3 +#usr/share/man/man3/X509_REVOKED_set_serialNumber.3 +#usr/share/man/man3/X509_SIG_free.3 +#usr/share/man/man3/X509_SIG_get0.3 +#usr/share/man/man3/X509_SIG_getm.3 +#usr/share/man/man3/X509_SIG_new.3 +#usr/share/man/man3/X509_STORE_CTX_cert_crl_fn.3 +#usr/share/man/man3/X509_STORE_CTX_check_crl_fn.3 +#usr/share/man/man3/X509_STORE_CTX_check_issued_fn.3 +#usr/share/man/man3/X509_STORE_CTX_check_policy_fn.3 +#usr/share/man/man3/X509_STORE_CTX_check_revocation_fn.3 +#usr/share/man/man3/X509_STORE_CTX_cleanup.3 +#usr/share/man/man3/X509_STORE_CTX_cleanup_fn.3 +#usr/share/man/man3/X509_STORE_CTX_free.3 +#usr/share/man/man3/X509_STORE_CTX_get0_cert.3 +#usr/share/man/man3/X509_STORE_CTX_get0_chain.3 +#usr/share/man/man3/X509_STORE_CTX_get0_param.3 +#usr/share/man/man3/X509_STORE_CTX_get0_untrusted.3 +#usr/share/man/man3/X509_STORE_CTX_get1_chain.3 +#usr/share/man/man3/X509_STORE_CTX_get_cert_crl.3 +#usr/share/man/man3/X509_STORE_CTX_get_check_crl.3 +#usr/share/man/man3/X509_STORE_CTX_get_check_issued.3 +#usr/share/man/man3/X509_STORE_CTX_get_check_policy.3 +#usr/share/man/man3/X509_STORE_CTX_get_check_revocation.3 +#usr/share/man/man3/X509_STORE_CTX_get_cleanup.3 +#usr/share/man/man3/X509_STORE_CTX_get_crl_fn.3 +#usr/share/man/man3/X509_STORE_CTX_get_current_cert.3 +#usr/share/man/man3/X509_STORE_CTX_get_error.3 +#usr/share/man/man3/X509_STORE_CTX_get_error_depth.3 +#usr/share/man/man3/X509_STORE_CTX_get_ex_data.3 +#usr/share/man/man3/X509_STORE_CTX_get_ex_new_index.3 +#usr/share/man/man3/X509_STORE_CTX_get_get_crl.3 +#usr/share/man/man3/X509_STORE_CTX_get_get_issuer.3 +#usr/share/man/man3/X509_STORE_CTX_get_issuer_fn.3 +#usr/share/man/man3/X509_STORE_CTX_get_lookup_certs.3 +#usr/share/man/man3/X509_STORE_CTX_get_lookup_crls.3 +#usr/share/man/man3/X509_STORE_CTX_get_num_untrusted.3 +#usr/share/man/man3/X509_STORE_CTX_get_verify.3 +#usr/share/man/man3/X509_STORE_CTX_get_verify_cb.3 +#usr/share/man/man3/X509_STORE_CTX_init.3 +#usr/share/man/man3/X509_STORE_CTX_lookup_certs_fn.3 +#usr/share/man/man3/X509_STORE_CTX_lookup_crls_fn.3 +#usr/share/man/man3/X509_STORE_CTX_new.3 +#usr/share/man/man3/X509_STORE_CTX_set0_crls.3 +#usr/share/man/man3/X509_STORE_CTX_set0_param.3 +#usr/share/man/man3/X509_STORE_CTX_set0_trusted_stack.3 +#usr/share/man/man3/X509_STORE_CTX_set0_untrusted.3 +#usr/share/man/man3/X509_STORE_CTX_set0_verified_chain.3 +#usr/share/man/man3/X509_STORE_CTX_set_cert.3 +#usr/share/man/man3/X509_STORE_CTX_set_current_cert.3 +#usr/share/man/man3/X509_STORE_CTX_set_default.3 +#usr/share/man/man3/X509_STORE_CTX_set_error.3 +#usr/share/man/man3/X509_STORE_CTX_set_error_depth.3 +#usr/share/man/man3/X509_STORE_CTX_set_ex_data.3 +#usr/share/man/man3/X509_STORE_CTX_set_verify.3 +#usr/share/man/man3/X509_STORE_CTX_set_verify_cb.3 +#usr/share/man/man3/X509_STORE_CTX_verify_cb.3 +#usr/share/man/man3/X509_STORE_CTX_verify_fn.3 +#usr/share/man/man3/X509_STORE_free.3 +#usr/share/man/man3/X509_STORE_get0_objects.3 +#usr/share/man/man3/X509_STORE_get0_param.3 +#usr/share/man/man3/X509_STORE_get_cert_crl.3 +#usr/share/man/man3/X509_STORE_get_check_crl.3 +#usr/share/man/man3/X509_STORE_get_check_issued.3 +#usr/share/man/man3/X509_STORE_get_check_policy.3 +#usr/share/man/man3/X509_STORE_get_check_revocation.3 +#usr/share/man/man3/X509_STORE_get_cleanup.3 +#usr/share/man/man3/X509_STORE_get_ex_data.3 +#usr/share/man/man3/X509_STORE_get_ex_new_index.3 +#usr/share/man/man3/X509_STORE_get_get_crl.3 +#usr/share/man/man3/X509_STORE_get_get_issuer.3 +#usr/share/man/man3/X509_STORE_get_lookup_certs.3 +#usr/share/man/man3/X509_STORE_get_lookup_crls.3 +#usr/share/man/man3/X509_STORE_get_verify_cb.3 +#usr/share/man/man3/X509_STORE_lock.3 +#usr/share/man/man3/X509_STORE_new.3 +#usr/share/man/man3/X509_STORE_set1_param.3 +#usr/share/man/man3/X509_STORE_set_cert_crl.3 +#usr/share/man/man3/X509_STORE_set_check_crl.3 +#usr/share/man/man3/X509_STORE_set_check_issued.3 +#usr/share/man/man3/X509_STORE_set_check_policy.3 +#usr/share/man/man3/X509_STORE_set_check_revocation.3 +#usr/share/man/man3/X509_STORE_set_cleanup.3 +#usr/share/man/man3/X509_STORE_set_ex_data.3 +#usr/share/man/man3/X509_STORE_set_get_crl.3 +#usr/share/man/man3/X509_STORE_set_get_issuer.3 +#usr/share/man/man3/X509_STORE_set_lookup_certs.3 +#usr/share/man/man3/X509_STORE_set_lookup_crls.3 +#usr/share/man/man3/X509_STORE_set_lookup_crls_cb.3 +#usr/share/man/man3/X509_STORE_set_verify.3 +#usr/share/man/man3/X509_STORE_set_verify_cb.3 +#usr/share/man/man3/X509_STORE_set_verify_cb_func.3 +#usr/share/man/man3/X509_STORE_set_verify_func.3 +#usr/share/man/man3/X509_STORE_unlock.3 +#usr/share/man/man3/X509_STORE_up_ref.3 +#usr/share/man/man3/X509_VAL_free.3 +#usr/share/man/man3/X509_VAL_new.3 +#usr/share/man/man3/X509_VERIFY_PARAM_add0_policy.3 +#usr/share/man/man3/X509_VERIFY_PARAM_add1_host.3 +#usr/share/man/man3/X509_VERIFY_PARAM_clear_flags.3 +#usr/share/man/man3/X509_VERIFY_PARAM_get0_peername.3 +#usr/share/man/man3/X509_VERIFY_PARAM_get_auth_level.3 +#usr/share/man/man3/X509_VERIFY_PARAM_get_depth.3 +#usr/share/man/man3/X509_VERIFY_PARAM_get_flags.3 +#usr/share/man/man3/X509_VERIFY_PARAM_get_inh_flags.3 +#usr/share/man/man3/X509_VERIFY_PARAM_get_time.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set1_email.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set1_host.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set1_ip.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set1_ip_asc.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set1_policies.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_auth_level.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_depth.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_flags.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_hostflags.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_inh_flags.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_purpose.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_time.3 +#usr/share/man/man3/X509_VERIFY_PARAM_set_trust.3 +#usr/share/man/man3/X509_add1_ext_i2d.3 +#usr/share/man/man3/X509_add_ext.3 +#usr/share/man/man3/X509_chain_up_ref.3 +#usr/share/man/man3/X509_check_ca.3 +#usr/share/man/man3/X509_check_email.3 +#usr/share/man/man3/X509_check_host.3 +#usr/share/man/man3/X509_check_ip.3 +#usr/share/man/man3/X509_check_ip_asc.3 +#usr/share/man/man3/X509_check_issued.3 +#usr/share/man/man3/X509_delete_ext.3 +#usr/share/man/man3/X509_digest.3 +#usr/share/man/man3/X509_dup.3 +#usr/share/man/man3/X509_free.3 +#usr/share/man/man3/X509_get0_extensions.3 +#usr/share/man/man3/X509_get0_notAfter.3 +#usr/share/man/man3/X509_get0_notBefore.3 +#usr/share/man/man3/X509_get0_pubkey.3 +#usr/share/man/man3/X509_get0_serialNumber.3 +#usr/share/man/man3/X509_get0_signature.3 +#usr/share/man/man3/X509_get0_subject_key_id.3 +#usr/share/man/man3/X509_get0_tbs_sigalg.3 +#usr/share/man/man3/X509_get0_uids.3 +#usr/share/man/man3/X509_get_X509_PUBKEY.3 +#usr/share/man/man3/X509_get_ex_data.3 +#usr/share/man/man3/X509_get_ex_new_index.3 +#usr/share/man/man3/X509_get_ext.3 +#usr/share/man/man3/X509_get_ext_by_NID.3 +#usr/share/man/man3/X509_get_ext_by_OBJ.3 +#usr/share/man/man3/X509_get_ext_by_critical.3 +#usr/share/man/man3/X509_get_ext_count.3 +#usr/share/man/man3/X509_get_ext_d2i.3 +#usr/share/man/man3/X509_get_extended_key_usage.3 +#usr/share/man/man3/X509_get_extension_flags.3 +#usr/share/man/man3/X509_get_issuer_name.3 +#usr/share/man/man3/X509_get_key_usage.3 +#usr/share/man/man3/X509_get_pathlen.3 +#usr/share/man/man3/X509_get_proxy_pathlen.3 +#usr/share/man/man3/X509_get_pubkey.3 +#usr/share/man/man3/X509_get_serialNumber.3 +#usr/share/man/man3/X509_get_signature_nid.3 +#usr/share/man/man3/X509_get_subject_name.3 +#usr/share/man/man3/X509_get_version.3 +#usr/share/man/man3/X509_getm_notAfter.3 +#usr/share/man/man3/X509_getm_notBefore.3 +#usr/share/man/man3/X509_load_cert_crl_file.3 +#usr/share/man/man3/X509_load_cert_file.3 +#usr/share/man/man3/X509_load_crl_file.3 +#usr/share/man/man3/X509_new.3 +#usr/share/man/man3/X509_pubkey_digest.3 +#usr/share/man/man3/X509_set1_notAfter.3 +#usr/share/man/man3/X509_set1_notBefore.3 +#usr/share/man/man3/X509_set_ex_data.3 +#usr/share/man/man3/X509_set_issuer_name.3 +#usr/share/man/man3/X509_set_proxy_flag.3 +#usr/share/man/man3/X509_set_proxy_pathlen.3 +#usr/share/man/man3/X509_set_pubkey.3 +#usr/share/man/man3/X509_set_serialNumber.3 +#usr/share/man/man3/X509_set_subject_name.3 +#usr/share/man/man3/X509_set_version.3 +#usr/share/man/man3/X509_sign.3 +#usr/share/man/man3/X509_sign_ctx.3 +#usr/share/man/man3/X509_up_ref.3 +#usr/share/man/man3/X509_verify.3 +#usr/share/man/man3/X509_verify_cert.3 +#usr/share/man/man3/X509_verify_cert_error_string.3 +#usr/share/man/man3/X509v3_add_ext.3 +#usr/share/man/man3/X509v3_delete_ext.3 +#usr/share/man/man3/X509v3_get_ext.3 +#usr/share/man/man3/X509v3_get_ext_by_NID.3 +#usr/share/man/man3/X509v3_get_ext_by_OBJ.3 +#usr/share/man/man3/X509v3_get_ext_by_critical.3 +#usr/share/man/man3/X509v3_get_ext_count.3 +#usr/share/man/man3/bio.3 +#usr/share/man/man3/bio_info_cb.3 +#usr/share/man/man3/custom_ext_add_cb.3 +#usr/share/man/man3/custom_ext_free_cb.3 +#usr/share/man/man3/custom_ext_parse_cb.3 +#usr/share/man/man3/d2i_ACCESS_DESCRIPTION.3 +#usr/share/man/man3/d2i_ASIdOrRange.3 +#usr/share/man/man3/d2i_ASIdentifierChoice.3 +#usr/share/man/man3/d2i_ASIdentifiers.3 +#usr/share/man/man3/d2i_ASN1_BIT_STRING.3 +#usr/share/man/man3/d2i_ASN1_BMPSTRING.3 +#usr/share/man/man3/d2i_ASN1_ENUMERATED.3 +#usr/share/man/man3/d2i_ASN1_GENERALIZEDTIME.3 +#usr/share/man/man3/d2i_ASN1_GENERALSTRING.3 +#usr/share/man/man3/d2i_ASN1_IA5STRING.3 +#usr/share/man/man3/d2i_ASN1_INTEGER.3 +#usr/share/man/man3/d2i_ASN1_NULL.3 +#usr/share/man/man3/d2i_ASN1_OBJECT.3 +#usr/share/man/man3/d2i_ASN1_OCTET_STRING.3 +#usr/share/man/man3/d2i_ASN1_PRINTABLE.3 +#usr/share/man/man3/d2i_ASN1_PRINTABLESTRING.3 +#usr/share/man/man3/d2i_ASN1_SEQUENCE_ANY.3 +#usr/share/man/man3/d2i_ASN1_SET_ANY.3 +#usr/share/man/man3/d2i_ASN1_T61STRING.3 +#usr/share/man/man3/d2i_ASN1_TIME.3 +#usr/share/man/man3/d2i_ASN1_TYPE.3 +#usr/share/man/man3/d2i_ASN1_UINTEGER.3 +#usr/share/man/man3/d2i_ASN1_UNIVERSALSTRING.3 +#usr/share/man/man3/d2i_ASN1_UTCTIME.3 +#usr/share/man/man3/d2i_ASN1_UTF8STRING.3 +#usr/share/man/man3/d2i_ASN1_VISIBLESTRING.3 +#usr/share/man/man3/d2i_ASRange.3 +#usr/share/man/man3/d2i_AUTHORITY_INFO_ACCESS.3 +#usr/share/man/man3/d2i_AUTHORITY_KEYID.3 +#usr/share/man/man3/d2i_AutoPrivateKey.3 +#usr/share/man/man3/d2i_BASIC_CONSTRAINTS.3 +#usr/share/man/man3/d2i_CERTIFICATEPOLICIES.3 +#usr/share/man/man3/d2i_CMS_ContentInfo.3 +#usr/share/man/man3/d2i_CMS_ReceiptRequest.3 +#usr/share/man/man3/d2i_CMS_bio.3 +#usr/share/man/man3/d2i_CRL_DIST_POINTS.3 +#usr/share/man/man3/d2i_DHparams.3 +#usr/share/man/man3/d2i_DHxparams.3 +#usr/share/man/man3/d2i_DIRECTORYSTRING.3 +#usr/share/man/man3/d2i_DISPLAYTEXT.3 +#usr/share/man/man3/d2i_DIST_POINT.3 +#usr/share/man/man3/d2i_DIST_POINT_NAME.3 +#usr/share/man/man3/d2i_DSAPrivateKey.3 +#usr/share/man/man3/d2i_DSAPrivateKey_bio.3 +#usr/share/man/man3/d2i_DSAPrivateKey_fp.3 +#usr/share/man/man3/d2i_DSAPublicKey.3 +#usr/share/man/man3/d2i_DSA_PUBKEY.3 +#usr/share/man/man3/d2i_DSA_PUBKEY_bio.3 +#usr/share/man/man3/d2i_DSA_PUBKEY_fp.3 +#usr/share/man/man3/d2i_DSA_SIG.3 +#usr/share/man/man3/d2i_DSAparams.3 +#usr/share/man/man3/d2i_ECDSA_SIG.3 +#usr/share/man/man3/d2i_ECPKParameters.3 +#usr/share/man/man3/d2i_ECParameters.3 +#usr/share/man/man3/d2i_ECPrivateKey.3 +#usr/share/man/man3/d2i_ECPrivateKey_bio.3 +#usr/share/man/man3/d2i_ECPrivateKey_fp.3 +#usr/share/man/man3/d2i_EC_PUBKEY.3 +#usr/share/man/man3/d2i_EC_PUBKEY_bio.3 +#usr/share/man/man3/d2i_EC_PUBKEY_fp.3 +#usr/share/man/man3/d2i_EDIPARTYNAME.3 +#usr/share/man/man3/d2i_ESS_CERT_ID.3 +#usr/share/man/man3/d2i_ESS_ISSUER_SERIAL.3 +#usr/share/man/man3/d2i_ESS_SIGNING_CERT.3 +#usr/share/man/man3/d2i_EXTENDED_KEY_USAGE.3 +#usr/share/man/man3/d2i_GENERAL_NAME.3 +#usr/share/man/man3/d2i_GENERAL_NAMES.3 +#usr/share/man/man3/d2i_IPAddressChoice.3 +#usr/share/man/man3/d2i_IPAddressFamily.3 +#usr/share/man/man3/d2i_IPAddressOrRange.3 +#usr/share/man/man3/d2i_IPAddressRange.3 +#usr/share/man/man3/d2i_ISSUING_DIST_POINT.3 +#usr/share/man/man3/d2i_NETSCAPE_CERT_SEQUENCE.3 +#usr/share/man/man3/d2i_NETSCAPE_SPKAC.3 +#usr/share/man/man3/d2i_NETSCAPE_SPKI.3 +#usr/share/man/man3/d2i_NOTICEREF.3 +#usr/share/man/man3/d2i_Netscape_RSA.3 +#usr/share/man/man3/d2i_OCSP_BASICRESP.3 +#usr/share/man/man3/d2i_OCSP_CERTID.3 +#usr/share/man/man3/d2i_OCSP_CERTSTATUS.3 +#usr/share/man/man3/d2i_OCSP_CRLID.3 +#usr/share/man/man3/d2i_OCSP_ONEREQ.3 +#usr/share/man/man3/d2i_OCSP_REQINFO.3 +#usr/share/man/man3/d2i_OCSP_REQUEST.3 +#usr/share/man/man3/d2i_OCSP_RESPBYTES.3 +#usr/share/man/man3/d2i_OCSP_RESPDATA.3 +#usr/share/man/man3/d2i_OCSP_RESPID.3 +#usr/share/man/man3/d2i_OCSP_RESPONSE.3 +#usr/share/man/man3/d2i_OCSP_REVOKEDINFO.3 +#usr/share/man/man3/d2i_OCSP_SERVICELOC.3 +#usr/share/man/man3/d2i_OCSP_SIGNATURE.3 +#usr/share/man/man3/d2i_OCSP_SINGLERESP.3 +#usr/share/man/man3/d2i_OTHERNAME.3 +#usr/share/man/man3/d2i_PBE2PARAM.3 +#usr/share/man/man3/d2i_PBEPARAM.3 +#usr/share/man/man3/d2i_PBKDF2PARAM.3 +#usr/share/man/man3/d2i_PKCS12.3 +#usr/share/man/man3/d2i_PKCS12_BAGS.3 +#usr/share/man/man3/d2i_PKCS12_MAC_DATA.3 +#usr/share/man/man3/d2i_PKCS12_SAFEBAG.3 +#usr/share/man/man3/d2i_PKCS12_bio.3 +#usr/share/man/man3/d2i_PKCS12_fp.3 +#usr/share/man/man3/d2i_PKCS7.3 +#usr/share/man/man3/d2i_PKCS7_DIGEST.3 +#usr/share/man/man3/d2i_PKCS7_ENCRYPT.3 +#usr/share/man/man3/d2i_PKCS7_ENC_CONTENT.3 +#usr/share/man/man3/d2i_PKCS7_ENVELOPE.3 +#usr/share/man/man3/d2i_PKCS7_ISSUER_AND_SERIAL.3 +#usr/share/man/man3/d2i_PKCS7_RECIP_INFO.3 +#usr/share/man/man3/d2i_PKCS7_SIGNED.3 +#usr/share/man/man3/d2i_PKCS7_SIGNER_INFO.3 +#usr/share/man/man3/d2i_PKCS7_SIGN_ENVELOPE.3 +#usr/share/man/man3/d2i_PKCS7_bio.3 +#usr/share/man/man3/d2i_PKCS7_fp.3 +#usr/share/man/man3/d2i_PKCS8PrivateKey_bio.3 +#usr/share/man/man3/d2i_PKCS8PrivateKey_fp.3 +#usr/share/man/man3/d2i_PKCS8_PRIV_KEY_INFO.3 +#usr/share/man/man3/d2i_PKCS8_PRIV_KEY_INFO_bio.3 +#usr/share/man/man3/d2i_PKCS8_PRIV_KEY_INFO_fp.3 +#usr/share/man/man3/d2i_PKCS8_bio.3 +#usr/share/man/man3/d2i_PKCS8_fp.3 +#usr/share/man/man3/d2i_PKEY_USAGE_PERIOD.3 +#usr/share/man/man3/d2i_POLICYINFO.3 +#usr/share/man/man3/d2i_POLICYQUALINFO.3 +#usr/share/man/man3/d2i_PROXY_CERT_INFO_EXTENSION.3 +#usr/share/man/man3/d2i_PROXY_POLICY.3 +#usr/share/man/man3/d2i_PUBKEY.3 +#usr/share/man/man3/d2i_PUBKEY_bio.3 +#usr/share/man/man3/d2i_PUBKEY_fp.3 +#usr/share/man/man3/d2i_PrivateKey.3 +#usr/share/man/man3/d2i_PrivateKey_bio.3 +#usr/share/man/man3/d2i_PrivateKey_fp.3 +#usr/share/man/man3/d2i_PublicKey.3 +#usr/share/man/man3/d2i_RSAPrivateKey.3 +#usr/share/man/man3/d2i_RSAPrivateKey_bio.3 +#usr/share/man/man3/d2i_RSAPrivateKey_fp.3 +#usr/share/man/man3/d2i_RSAPublicKey.3 +#usr/share/man/man3/d2i_RSAPublicKey_bio.3 +#usr/share/man/man3/d2i_RSAPublicKey_fp.3 +#usr/share/man/man3/d2i_RSA_OAEP_PARAMS.3 +#usr/share/man/man3/d2i_RSA_PSS_PARAMS.3 +#usr/share/man/man3/d2i_RSA_PUBKEY.3 +#usr/share/man/man3/d2i_RSA_PUBKEY_bio.3 +#usr/share/man/man3/d2i_RSA_PUBKEY_fp.3 +#usr/share/man/man3/d2i_SCT_LIST.3 +#usr/share/man/man3/d2i_SSL_SESSION.3 +#usr/share/man/man3/d2i_SXNET.3 +#usr/share/man/man3/d2i_SXNETID.3 +#usr/share/man/man3/d2i_TS_ACCURACY.3 +#usr/share/man/man3/d2i_TS_MSG_IMPRINT.3 +#usr/share/man/man3/d2i_TS_MSG_IMPRINT_bio.3 +#usr/share/man/man3/d2i_TS_MSG_IMPRINT_fp.3 +#usr/share/man/man3/d2i_TS_REQ.3 +#usr/share/man/man3/d2i_TS_REQ_bio.3 +#usr/share/man/man3/d2i_TS_REQ_fp.3 +#usr/share/man/man3/d2i_TS_RESP.3 +#usr/share/man/man3/d2i_TS_RESP_bio.3 +#usr/share/man/man3/d2i_TS_RESP_fp.3 +#usr/share/man/man3/d2i_TS_STATUS_INFO.3 +#usr/share/man/man3/d2i_TS_TST_INFO.3 +#usr/share/man/man3/d2i_TS_TST_INFO_bio.3 +#usr/share/man/man3/d2i_TS_TST_INFO_fp.3 +#usr/share/man/man3/d2i_USERNOTICE.3 +#usr/share/man/man3/d2i_X509.3 +#usr/share/man/man3/d2i_X509_ALGOR.3 +#usr/share/man/man3/d2i_X509_ALGORS.3 +#usr/share/man/man3/d2i_X509_ATTRIBUTE.3 +#usr/share/man/man3/d2i_X509_AUX.3 +#usr/share/man/man3/d2i_X509_CERT_AUX.3 +#usr/share/man/man3/d2i_X509_CINF.3 +#usr/share/man/man3/d2i_X509_CRL.3 +#usr/share/man/man3/d2i_X509_CRL_INFO.3 +#usr/share/man/man3/d2i_X509_CRL_bio.3 +#usr/share/man/man3/d2i_X509_CRL_fp.3 +#usr/share/man/man3/d2i_X509_EXTENSION.3 +#usr/share/man/man3/d2i_X509_EXTENSIONS.3 +#usr/share/man/man3/d2i_X509_NAME.3 +#usr/share/man/man3/d2i_X509_NAME_ENTRY.3 +#usr/share/man/man3/d2i_X509_PUBKEY.3 +#usr/share/man/man3/d2i_X509_REQ.3 +#usr/share/man/man3/d2i_X509_REQ_INFO.3 +#usr/share/man/man3/d2i_X509_REQ_bio.3 +#usr/share/man/man3/d2i_X509_REQ_fp.3 +#usr/share/man/man3/d2i_X509_REVOKED.3 +#usr/share/man/man3/d2i_X509_SIG.3 +#usr/share/man/man3/d2i_X509_VAL.3 +#usr/share/man/man3/i2d_ACCESS_DESCRIPTION.3 +#usr/share/man/man3/i2d_ASIdOrRange.3 +#usr/share/man/man3/i2d_ASIdentifierChoice.3 +#usr/share/man/man3/i2d_ASIdentifiers.3 +#usr/share/man/man3/i2d_ASN1_BIT_STRING.3 +#usr/share/man/man3/i2d_ASN1_BMPSTRING.3 +#usr/share/man/man3/i2d_ASN1_ENUMERATED.3 +#usr/share/man/man3/i2d_ASN1_GENERALIZEDTIME.3 +#usr/share/man/man3/i2d_ASN1_GENERALSTRING.3 +#usr/share/man/man3/i2d_ASN1_IA5STRING.3 +#usr/share/man/man3/i2d_ASN1_INTEGER.3 +#usr/share/man/man3/i2d_ASN1_NULL.3 +#usr/share/man/man3/i2d_ASN1_OBJECT.3 +#usr/share/man/man3/i2d_ASN1_OCTET_STRING.3 +#usr/share/man/man3/i2d_ASN1_PRINTABLE.3 +#usr/share/man/man3/i2d_ASN1_PRINTABLESTRING.3 +#usr/share/man/man3/i2d_ASN1_SEQUENCE_ANY.3 +#usr/share/man/man3/i2d_ASN1_SET_ANY.3 +#usr/share/man/man3/i2d_ASN1_T61STRING.3 +#usr/share/man/man3/i2d_ASN1_TIME.3 +#usr/share/man/man3/i2d_ASN1_TYPE.3 +#usr/share/man/man3/i2d_ASN1_UNIVERSALSTRING.3 +#usr/share/man/man3/i2d_ASN1_UTCTIME.3 +#usr/share/man/man3/i2d_ASN1_UTF8STRING.3 +#usr/share/man/man3/i2d_ASN1_VISIBLESTRING.3 +#usr/share/man/man3/i2d_ASN1_bio_stream.3 +#usr/share/man/man3/i2d_ASRange.3 +#usr/share/man/man3/i2d_AUTHORITY_INFO_ACCESS.3 +#usr/share/man/man3/i2d_AUTHORITY_KEYID.3 +#usr/share/man/man3/i2d_BASIC_CONSTRAINTS.3 +#usr/share/man/man3/i2d_CERTIFICATEPOLICIES.3 +#usr/share/man/man3/i2d_CMS_ContentInfo.3 +#usr/share/man/man3/i2d_CMS_ReceiptRequest.3 +#usr/share/man/man3/i2d_CMS_bio.3 +#usr/share/man/man3/i2d_CMS_bio_stream.3 +#usr/share/man/man3/i2d_CRL_DIST_POINTS.3 +#usr/share/man/man3/i2d_DHparams.3 +#usr/share/man/man3/i2d_DHxparams.3 +#usr/share/man/man3/i2d_DIRECTORYSTRING.3 +#usr/share/man/man3/i2d_DISPLAYTEXT.3 +#usr/share/man/man3/i2d_DIST_POINT.3 +#usr/share/man/man3/i2d_DIST_POINT_NAME.3 +#usr/share/man/man3/i2d_DSAPrivateKey.3 +#usr/share/man/man3/i2d_DSAPrivateKey_bio.3 +#usr/share/man/man3/i2d_DSAPrivateKey_fp.3 +#usr/share/man/man3/i2d_DSAPublicKey.3 +#usr/share/man/man3/i2d_DSA_PUBKEY.3 +#usr/share/man/man3/i2d_DSA_PUBKEY_bio.3 +#usr/share/man/man3/i2d_DSA_PUBKEY_fp.3 +#usr/share/man/man3/i2d_DSA_SIG.3 +#usr/share/man/man3/i2d_DSAparams.3 +#usr/share/man/man3/i2d_ECDSA_SIG.3 +#usr/share/man/man3/i2d_ECPKParameters.3 +#usr/share/man/man3/i2d_ECParameters.3 +#usr/share/man/man3/i2d_ECPrivateKey.3 +#usr/share/man/man3/i2d_ECPrivateKey_bio.3 +#usr/share/man/man3/i2d_ECPrivateKey_fp.3 +#usr/share/man/man3/i2d_EC_PUBKEY.3 +#usr/share/man/man3/i2d_EC_PUBKEY_bio.3 +#usr/share/man/man3/i2d_EC_PUBKEY_fp.3 +#usr/share/man/man3/i2d_EDIPARTYNAME.3 +#usr/share/man/man3/i2d_ESS_CERT_ID.3 +#usr/share/man/man3/i2d_ESS_ISSUER_SERIAL.3 +#usr/share/man/man3/i2d_ESS_SIGNING_CERT.3 +#usr/share/man/man3/i2d_EXTENDED_KEY_USAGE.3 +#usr/share/man/man3/i2d_GENERAL_NAME.3 +#usr/share/man/man3/i2d_GENERAL_NAMES.3 +#usr/share/man/man3/i2d_IPAddressChoice.3 +#usr/share/man/man3/i2d_IPAddressFamily.3 +#usr/share/man/man3/i2d_IPAddressOrRange.3 +#usr/share/man/man3/i2d_IPAddressRange.3 +#usr/share/man/man3/i2d_ISSUING_DIST_POINT.3 +#usr/share/man/man3/i2d_NETSCAPE_CERT_SEQUENCE.3 +#usr/share/man/man3/i2d_NETSCAPE_SPKAC.3 +#usr/share/man/man3/i2d_NETSCAPE_SPKI.3 +#usr/share/man/man3/i2d_NOTICEREF.3 +#usr/share/man/man3/i2d_Netscape_RSA.3 +#usr/share/man/man3/i2d_OCSP_BASICRESP.3 +#usr/share/man/man3/i2d_OCSP_CERTID.3 +#usr/share/man/man3/i2d_OCSP_CERTSTATUS.3 +#usr/share/man/man3/i2d_OCSP_CRLID.3 +#usr/share/man/man3/i2d_OCSP_ONEREQ.3 +#usr/share/man/man3/i2d_OCSP_REQINFO.3 +#usr/share/man/man3/i2d_OCSP_REQUEST.3 +#usr/share/man/man3/i2d_OCSP_RESPBYTES.3 +#usr/share/man/man3/i2d_OCSP_RESPDATA.3 +#usr/share/man/man3/i2d_OCSP_RESPID.3 +#usr/share/man/man3/i2d_OCSP_RESPONSE.3 +#usr/share/man/man3/i2d_OCSP_REVOKEDINFO.3 +#usr/share/man/man3/i2d_OCSP_SERVICELOC.3 +#usr/share/man/man3/i2d_OCSP_SIGNATURE.3 +#usr/share/man/man3/i2d_OCSP_SINGLERESP.3 +#usr/share/man/man3/i2d_OTHERNAME.3 +#usr/share/man/man3/i2d_PBE2PARAM.3 +#usr/share/man/man3/i2d_PBEPARAM.3 +#usr/share/man/man3/i2d_PBKDF2PARAM.3 +#usr/share/man/man3/i2d_PKCS12.3 +#usr/share/man/man3/i2d_PKCS12_BAGS.3 +#usr/share/man/man3/i2d_PKCS12_MAC_DATA.3 +#usr/share/man/man3/i2d_PKCS12_SAFEBAG.3 +#usr/share/man/man3/i2d_PKCS12_bio.3 +#usr/share/man/man3/i2d_PKCS12_fp.3 +#usr/share/man/man3/i2d_PKCS7.3 +#usr/share/man/man3/i2d_PKCS7_DIGEST.3 +#usr/share/man/man3/i2d_PKCS7_ENCRYPT.3 +#usr/share/man/man3/i2d_PKCS7_ENC_CONTENT.3 +#usr/share/man/man3/i2d_PKCS7_ENVELOPE.3 +#usr/share/man/man3/i2d_PKCS7_ISSUER_AND_SERIAL.3 +#usr/share/man/man3/i2d_PKCS7_NDEF.3 +#usr/share/man/man3/i2d_PKCS7_RECIP_INFO.3 +#usr/share/man/man3/i2d_PKCS7_SIGNED.3 +#usr/share/man/man3/i2d_PKCS7_SIGNER_INFO.3 +#usr/share/man/man3/i2d_PKCS7_SIGN_ENVELOPE.3 +#usr/share/man/man3/i2d_PKCS7_bio.3 +#usr/share/man/man3/i2d_PKCS7_bio_stream.3 +#usr/share/man/man3/i2d_PKCS7_fp.3 +#usr/share/man/man3/i2d_PKCS8PrivateKeyInfo_bio.3 +#usr/share/man/man3/i2d_PKCS8PrivateKeyInfo_fp.3 +#usr/share/man/man3/i2d_PKCS8PrivateKey_bio.3 +#usr/share/man/man3/i2d_PKCS8PrivateKey_fp.3 +#usr/share/man/man3/i2d_PKCS8PrivateKey_nid_bio.3 +#usr/share/man/man3/i2d_PKCS8PrivateKey_nid_fp.3 +#usr/share/man/man3/i2d_PKCS8_PRIV_KEY_INFO.3 +#usr/share/man/man3/i2d_PKCS8_PRIV_KEY_INFO_bio.3 +#usr/share/man/man3/i2d_PKCS8_PRIV_KEY_INFO_fp.3 +#usr/share/man/man3/i2d_PKCS8_bio.3 +#usr/share/man/man3/i2d_PKCS8_fp.3 +#usr/share/man/man3/i2d_PKEY_USAGE_PERIOD.3 +#usr/share/man/man3/i2d_POLICYINFO.3 +#usr/share/man/man3/i2d_POLICYQUALINFO.3 +#usr/share/man/man3/i2d_PROXY_CERT_INFO_EXTENSION.3 +#usr/share/man/man3/i2d_PROXY_POLICY.3 +#usr/share/man/man3/i2d_PUBKEY.3 +#usr/share/man/man3/i2d_PUBKEY_bio.3 +#usr/share/man/man3/i2d_PUBKEY_fp.3 +#usr/share/man/man3/i2d_PrivateKey.3 +#usr/share/man/man3/i2d_PublicKey.3 +#usr/share/man/man3/i2d_RSAPrivateKey.3 +#usr/share/man/man3/i2d_RSAPrivateKey_bio.3 +#usr/share/man/man3/i2d_RSAPrivateKey_fp.3 +#usr/share/man/man3/i2d_RSAPublicKey.3 +#usr/share/man/man3/i2d_RSAPublicKey_bio.3 +#usr/share/man/man3/i2d_RSAPublicKey_fp.3 +#usr/share/man/man3/i2d_RSA_OAEP_PARAMS.3 +#usr/share/man/man3/i2d_RSA_PSS_PARAMS.3 +#usr/share/man/man3/i2d_RSA_PUBKEY.3 +#usr/share/man/man3/i2d_RSA_PUBKEY_bio.3 +#usr/share/man/man3/i2d_RSA_PUBKEY_fp.3 +#usr/share/man/man3/i2d_SCT_LIST.3 +#usr/share/man/man3/i2d_SSL_SESSION.3 +#usr/share/man/man3/i2d_SXNET.3 +#usr/share/man/man3/i2d_SXNETID.3 +#usr/share/man/man3/i2d_TS_ACCURACY.3 +#usr/share/man/man3/i2d_TS_MSG_IMPRINT.3 +#usr/share/man/man3/i2d_TS_MSG_IMPRINT_bio.3 +#usr/share/man/man3/i2d_TS_MSG_IMPRINT_fp.3 +#usr/share/man/man3/i2d_TS_REQ.3 +#usr/share/man/man3/i2d_TS_REQ_bio.3 +#usr/share/man/man3/i2d_TS_REQ_fp.3 +#usr/share/man/man3/i2d_TS_RESP.3 +#usr/share/man/man3/i2d_TS_RESP_bio.3 +#usr/share/man/man3/i2d_TS_RESP_fp.3 +#usr/share/man/man3/i2d_TS_STATUS_INFO.3 +#usr/share/man/man3/i2d_TS_TST_INFO.3 +#usr/share/man/man3/i2d_TS_TST_INFO_bio.3 +#usr/share/man/man3/i2d_TS_TST_INFO_fp.3 +#usr/share/man/man3/i2d_USERNOTICE.3 +#usr/share/man/man3/i2d_X509.3 +#usr/share/man/man3/i2d_X509_ALGOR.3 +#usr/share/man/man3/i2d_X509_ALGORS.3 +#usr/share/man/man3/i2d_X509_ATTRIBUTE.3 +#usr/share/man/man3/i2d_X509_AUX.3 +#usr/share/man/man3/i2d_X509_CERT_AUX.3 +#usr/share/man/man3/i2d_X509_CINF.3 +#usr/share/man/man3/i2d_X509_CRL.3 +#usr/share/man/man3/i2d_X509_CRL_INFO.3 +#usr/share/man/man3/i2d_X509_CRL_bio.3 +#usr/share/man/man3/i2d_X509_CRL_fp.3 +#usr/share/man/man3/i2d_X509_EXTENSION.3 +#usr/share/man/man3/i2d_X509_EXTENSIONS.3 +#usr/share/man/man3/i2d_X509_NAME.3 +#usr/share/man/man3/i2d_X509_NAME_ENTRY.3 +#usr/share/man/man3/i2d_X509_PUBKEY.3 +#usr/share/man/man3/i2d_X509_REQ.3 +#usr/share/man/man3/i2d_X509_REQ_INFO.3 +#usr/share/man/man3/i2d_X509_REQ_bio.3 +#usr/share/man/man3/i2d_X509_REQ_fp.3 +#usr/share/man/man3/i2d_X509_REVOKED.3 +#usr/share/man/man3/i2d_X509_SIG.3 +#usr/share/man/man3/i2d_X509_VAL.3 +#usr/share/man/man3/i2d_re_X509_CRL_tbs.3 +#usr/share/man/man3/i2d_re_X509_REQ_tbs.3 +#usr/share/man/man3/i2d_re_X509_tbs.3 +#usr/share/man/man3/i2o_SCT.3 +#usr/share/man/man3/i2o_SCT_LIST.3 +#usr/share/man/man3/i2t_ASN1_OBJECT.3 +#usr/share/man/man3/lh_TYPE_delete.3 +#usr/share/man/man3/lh_TYPE_doall.3 +#usr/share/man/man3/lh_TYPE_doall_arg.3 +#usr/share/man/man3/lh_TYPE_error.3 +#usr/share/man/man3/lh_TYPE_free.3 +#usr/share/man/man3/lh_TYPE_insert.3 +#usr/share/man/man3/lh_TYPE_new.3 +#usr/share/man/man3/lh_TYPE_retrieve.3 +#usr/share/man/man3/o2i_SCT.3 +#usr/share/man/man3/o2i_SCT_LIST.3 +#usr/share/man/man3/pem_password_cb.3 +#usr/share/man/man3/sk_TYPE_deep_copy.3 +#usr/share/man/man3/sk_TYPE_delete.3 +#usr/share/man/man3/sk_TYPE_delete_ptr.3 +#usr/share/man/man3/sk_TYPE_dup.3 +#usr/share/man/man3/sk_TYPE_find.3 +#usr/share/man/man3/sk_TYPE_find_ex.3 +#usr/share/man/man3/sk_TYPE_free.3 +#usr/share/man/man3/sk_TYPE_insert.3 +#usr/share/man/man3/sk_TYPE_is_sorted.3 +#usr/share/man/man3/sk_TYPE_new.3 +#usr/share/man/man3/sk_TYPE_new_null.3 +#usr/share/man/man3/sk_TYPE_num.3 +#usr/share/man/man3/sk_TYPE_pop.3 +#usr/share/man/man3/sk_TYPE_pop_free.3 +#usr/share/man/man3/sk_TYPE_push.3 +#usr/share/man/man3/sk_TYPE_set.3 +#usr/share/man/man3/sk_TYPE_set_cmp_func.3 +#usr/share/man/man3/sk_TYPE_shift.3 +#usr/share/man/man3/sk_TYPE_sort.3 +#usr/share/man/man3/sk_TYPE_unshift.3 +#usr/share/man/man3/sk_TYPE_value.3 +#usr/share/man/man3/sk_TYPE_zero.3 +#usr/share/man/man3/ssl_ct_validation_cb.3 +#usr/share/man/man5/config.5 +#usr/share/man/man5/x509v3_config.5 +#usr/share/man/man7/crypto.7 +#usr/share/man/man7/ct.7 +#usr/share/man/man7/des_modes.7 +#usr/share/man/man7/evp.7 +#usr/share/man/man7/ssl.7 +#usr/share/man/man7/x509.7 diff --git a/lfs/openssl b/lfs/openssl index 7239a98f4..2cc687ebd 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 1.0.2n +VER = 1.1.0g THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -33,15 +33,11 @@ DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP)$(KCFG) -ifneq "$(KCFG)" "-sse2" -CFLAGS += -DPURIFY -else -CFLAGS =-O2 -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fPIC -CFLAGS+= -mindirect-branch=thunk -mfunction-return=thunk -CFLAGS+= -fstack-protector-all --param=ssp-buffer-size=4 -CFLAGS+= -march=i686 -mmmx -msse -msse2 -mfpmath=sse -CFLAGS+= -fomit-frame-pointer -DPURIFY -CXXFLAGS="${CFLAGS}" +CFLAGS += -DPURIFY -Wa,--noexecstack + +# Enable SSE2 for this build +ifeq "$(KCFG)" "-sse2" + CFLAGS+= -march=i686 -mmmx -msse -msse2 -mfpmath=sse endif export RPM_OPT_FLAGS = $(CFLAGS) @@ -49,20 +45,19 @@ export RPM_OPT_FLAGS = $(CFLAGS) CONFIGURE_OPTIONS = \ --prefix=/usr \ --openssldir=/etc/ssl \ - --enginesdir=/usr/lib/openssl/engines \ shared \ zlib-dynamic \ enable-camellia \ enable-md2 \ - disable-ssl2 \ enable-seed \ - enable-tlsext \ enable-rfc3779 \ + enable-ssl3 \ + enable-ssl3-method \ + no-engine \ no-idea \ no-mdc2 \ no-rc5 \ no-srp \ - -DSSL_FORBID_ENULL \ $(OPENSSL_ARCH) ifeq "$(IS_64BIT)" "1" @@ -95,7 +90,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 13bdc1b1d1ff39b6fd42a255e74676a4 +$(DL_FILE)_MD5 = ba5f1b8b835b88cadbce9b35ed9531a6 install : $(TARGET) @@ -125,20 +120,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.0-beta5-enginesdir.patch - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a-rpmbuild.patch - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2h-weak-ciphers.patch - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2g-disable-sslv2v3.patch - - # i586 specific patches -ifeq "$(BUILD_ARCH)" "i586" - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_auto_enable_padlock.patch - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch -endif - - # With openssl 1.0.2e, pod2mantest is missing - echo -e "#!/bin/bash\necho \$$(which pod2man)" > $(DIR_APP)/util/pod2mantest - chmod a+x $(DIR_APP)/util/pod2mantest + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.0-disable-ssl3.patch # Apply our CFLAGS cd $(DIR_APP) && sed -i Configure \ @@ -155,19 +137,11 @@ endif ifeq "$(KCFG)" "-sse2" -mkdir -pv /usr/lib/sse2 cd $(DIR_APP) && install -m 755 \ - libcrypto.so.10 /usr/lib/sse2 + libcrypto.so.1.1 /usr/lib/sse2 else # Install everything. cd $(DIR_APP) && make install install -m 0644 $(DIR_SRC)/config/ssl/openssl.cnf /etc/ssl - - # Remove man pages. - -rm -vfr /etc/ssl/man - - # Move engines to the right place. - -mkdir -pv /usr/lib/openssl - rm -vfr /usr/lib/openssl/engines - mv -v /usr/lib/engines /usr/lib/openssl endif @rm -rf $(DIR_APP) diff --git a/src/patches/openssl-1.0.0-beta5-enginesdir.patch b/src/patches/openssl-1.0.0-beta5-enginesdir.patch deleted file mode 100644 index d942d6e2b..000000000 --- a/src/patches/openssl-1.0.0-beta5-enginesdir.patch +++ /dev/null @@ -1,52 +0,0 @@ -diff -up openssl-1.0.0-beta5/Configure.enginesdir openssl-1.0.0-beta5/Configure ---- openssl-1.0.0-beta5/Configure.enginesdir 2010-01-20 18:07:05.000000000 +0100 -+++ openssl-1.0.0-beta5/Configure 2010-01-20 18:10:48.000000000 +0100 -@@ -622,6 +622,7 @@ my $idx_multilib = $idx++; - my $prefix=""; - my $libdir=""; - my $openssldir=""; -+my $enginesdir=""; - my $exe_ext=""; - my $install_prefix= "$ENV{'INSTALL_PREFIX'}"; - my $cross_compile_prefix=""; -@@ -833,6 +834,10 @@ PROCESS_ARGS: - { - $openssldir=$1; - } -+ elsif (/^--enginesdir=(.*)$/) -+ { -+ $enginesdir=$1; -+ } - elsif (/^--install.prefix=(.*)$/) - { - $install_prefix=$1; -@@ -1053,7 +1058,7 @@ chop $prefix if $prefix =~ /.\/$/; - - $openssldir=$prefix . "/ssl" if $openssldir eq ""; - $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/; -- -+$enginesdir="$prefix/lib/engines" if $enginesdir eq ""; - - print "IsMK1MF=$IsMK1MF\n"; - -@@ -1673,7 +1678,7 @@ while () - } - elsif (/^#define\s+ENGINESDIR/) - { -- my $foo = "$prefix/$libdir/engines"; -+ my $foo = "$enginesdir"; - $foo =~ s/\\/\\\\/g; - print OUT "#define ENGINESDIR \"$foo\"\n"; - } -diff -up openssl-1.0.0-beta5/engines/Makefile.enginesdir openssl-1.0.0-beta5/engines/Makefile ---- openssl-1.0.0-beta5/engines/Makefile.enginesdir 2010-01-16 21:06:09.000000000 +0100 -+++ openssl-1.0.0-beta5/engines/Makefile 2010-01-20 18:07:05.000000000 +0100 -@@ -124,7 +124,7 @@ install: - sfx=".so"; \ - cp cyg$$l.dll $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \ - fi; \ -- chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \ -+ chmod 755 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \ - mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx ); \ - done; \ - fi diff --git a/src/patches/openssl-1.0.2-fix_parallel_build-1.patch b/src/patches/openssl-1.0.2-fix_parallel_build-1.patch deleted file mode 100644 index acfaa72cb..000000000 --- a/src/patches/openssl-1.0.2-fix_parallel_build-1.patch +++ /dev/null @@ -1,340 +0,0 @@ -Submitted By: Armin K. -Date: 2015-01-23 -Initial Package Version: 1.0.1e -Upstream Status: Unknown -Origin: https://github.com/Alexpux/Qt-builds/tree/master/patches/openssl -Description: Fixes build when using more than one make job to build the package. - ---- a/crypto/Makefile 2015-01-22 17:12:09.000000000 +0100 -+++ b/crypto/Makefile 2015-01-23 16:42:13.460175569 +0100 -@@ -85,11 +85,11 @@ - @if [ -z "$(THIS)" ]; then $(MAKE) -f $(TOP)/Makefile reflect THIS=$@; fi - - subdirs: -- @target=all; $(RECURSIVE_MAKE) -+ +@target=all; $(RECURSIVE_MAKE) - - files: - $(PERL) $(TOP)/util/files.pl "CPUID_OBJ=$(CPUID_OBJ)" Makefile >> $(TOP)/MINFO -- @target=files; $(RECURSIVE_MAKE) -+ +@target=files; $(RECURSIVE_MAKE) - - links: - @$(PERL) $(TOP)/util/mklink.pl ../include/openssl $(EXHEADER) -@@ -100,7 +100,7 @@ - # lib: $(LIB): are splitted to avoid end-less loop - lib: $(LIB) - @touch lib --$(LIB): $(LIBOBJ) -+$(LIB): $(LIBOBJ) | subdirs - $(AR) $(LIB) $(LIBOBJ) - test -z "$(FIPSLIBDIR)" || $(AR) $(LIB) $(FIPSLIBDIR)fipscanister.o - $(RANLIB) $(LIB) || echo Never mind. -@@ -111,7 +111,7 @@ - fi - - libs: -- @target=lib; $(RECURSIVE_MAKE) -+ +@target=lib; $(RECURSIVE_MAKE) - - install: - @[ -n "$(INSTALLTOP)" ] # should be set by top Makefile... -@@ -120,7 +120,7 @@ - (cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \ - chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \ - done; -- @target=install; $(RECURSIVE_MAKE) -+ +@target=install; $(RECURSIVE_MAKE) - - lint: - @target=lint; $(RECURSIVE_MAKE) ---- a/engines/Makefile 2015-01-22 17:12:24.000000000 +0100 -+++ b/engines/Makefile 2015-01-23 16:42:13.461175596 +0100 -@@ -72,7 +72,7 @@ - - all: lib subdirs - --lib: $(LIBOBJ) -+lib: $(LIBOBJ) | subdirs - @if [ -n "$(SHARED_LIBS)" ]; then \ - set -e; \ - for l in $(LIBNAMES); do \ -@@ -89,7 +89,7 @@ - - subdirs: - echo $(EDIRS) -- @target=all; $(RECURSIVE_MAKE) -+ +@target=all; $(RECURSIVE_MAKE) - - files: - $(PERL) $(TOP)/util/files.pl Makefile >> $(TOP)/MINFO -@@ -128,7 +128,7 @@ - mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx ); \ - done; \ - fi -- @target=install; $(RECURSIVE_MAKE) -+ +@target=install; $(RECURSIVE_MAKE) - - tags: - ctags $(SRC) ---- a/Makefile.org 2015-01-22 15:58:06.000000000 +0100 -+++ b/Makefile.org 2015-01-23 16:42:13.461175596 +0100 -@@ -274,17 +274,17 @@ - build_libs: build_crypto build_ssl build_engines - - build_crypto: -- @dir=crypto; target=all; $(BUILD_ONE_CMD) --build_ssl: -- @dir=ssl; target=all; $(BUILD_ONE_CMD) --build_engines: -- @dir=engines; target=all; $(BUILD_ONE_CMD) --build_apps: -- @dir=apps; target=all; $(BUILD_ONE_CMD) --build_tests: -- @dir=test; target=all; $(BUILD_ONE_CMD) --build_tools: -- @dir=tools; target=all; $(BUILD_ONE_CMD) -+ +@dir=crypto; target=all; $(BUILD_ONE_CMD) -+build_ssl: build_crypto -+ +@dir=ssl; target=all; $(BUILD_ONE_CMD) -+build_engines: build_crypto -+ +@dir=engines; target=all; $(BUILD_ONE_CMD) -+build_apps: build_libs -+ +@dir=apps; target=all; $(BUILD_ONE_CMD) -+build_tests: build_libs -+ +@dir=test; target=all; $(BUILD_ONE_CMD) -+build_tools: build_libs -+ +@dir=tools; target=all; $(BUILD_ONE_CMD) - - all_testapps: build_libs build_testapps - build_testapps: -@@ -536,9 +536,9 @@ - dist_pem_h: - (cd crypto/pem; $(MAKE) -e $(BUILDENV) pem.h; $(MAKE) clean) - --install: all install_docs install_sw -+install: install_docs install_sw - --install_sw: -+install_dirs: - @$(PERL) $(TOP)/util/mkdir-p.pl $(INSTALL_PREFIX)$(INSTALLTOP)/bin \ - $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR) \ - $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines \ -@@ -547,12 +547,19 @@ - $(INSTALL_PREFIX)$(OPENSSLDIR)/misc \ - $(INSTALL_PREFIX)$(OPENSSLDIR)/certs \ - $(INSTALL_PREFIX)$(OPENSSLDIR)/private -+ @$(PERL) $(TOP)/util/mkdir-p.pl \ -+ $(INSTALL_PREFIX)$(MANDIR)/man1 \ -+ $(INSTALL_PREFIX)$(MANDIR)/man3 \ -+ $(INSTALL_PREFIX)$(MANDIR)/man5 \ -+ $(INSTALL_PREFIX)$(MANDIR)/man7 -+ -+install_sw: install_dirs - @set -e; headerlist="$(EXHEADER)"; for i in $$headerlist;\ - do \ - (cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i; \ - chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/include/openssl/$$i ); \ - done; -- @set -e; target=install; $(RECURSIVE_BUILD_CMD) -+ +@set -e; target=install; $(RECURSIVE_BUILD_CMD) - @set -e; liblist="$(LIBS)"; for i in $$liblist ;\ - do \ - if [ -f "$$i" ]; then \ -@@ -636,12 +643,7 @@ - done; \ - done - --install_docs: -- @$(PERL) $(TOP)/util/mkdir-p.pl \ -- $(INSTALL_PREFIX)$(MANDIR)/man1 \ -- $(INSTALL_PREFIX)$(MANDIR)/man3 \ -- $(INSTALL_PREFIX)$(MANDIR)/man5 \ -- $(INSTALL_PREFIX)$(MANDIR)/man7 -+install_docs: install_dirs - @pod2man="`cd ./util; ./pod2mantest $(PERL)`"; \ - here="`pwd`"; \ - filecase=; \ ---- a/Makefile.shared 2015-01-20 13:33:36.000000000 +0100 -+++ b/Makefile.shared 2015-01-23 16:42:13.461175596 +0100 -@@ -105,6 +105,7 @@ - SHAREDFLAGS="$${SHAREDFLAGS:-$(CFLAGS) $(SHARED_LDFLAGS)}"; \ - LIBPATH=`for x in $$LIBDEPS; do echo $$x; done | sed -e 's/^ *-L//;t' -e d | uniq`; \ - LIBPATH=`echo $$LIBPATH | sed -e 's/ /:/g'`; \ -+ [ -e $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX ] && exit 0; \ - LD_LIBRARY_PATH=$$LIBPATH:$$LD_LIBRARY_PATH \ - $${SHAREDCMD} $${SHAREDFLAGS} \ - -o $$SHLIB$$SHLIB_SOVER$$SHLIB_SUFFIX \ -@@ -122,6 +123,7 @@ - done; \ - fi; \ - if [ -n "$$SHLIB_SOVER" ]; then \ -+ [ -e "$$SHLIB$$SHLIB_SUFFIX" ] || \ - ( $(SET_X); rm -f $$SHLIB$$SHLIB_SUFFIX; \ - ln -s $$prev $$SHLIB$$SHLIB_SUFFIX ); \ - fi; \ ---- a/test/Makefile 2015-01-22 17:12:26.000000000 +0100 -+++ b/test/Makefile 2015-01-23 16:42:13.461175596 +0100 -@@ -132,7 +132,7 @@ - tags: - ctags $(SRC) - --tests: exe apps $(TESTS) -+tests: exe $(TESTS) - - apps: - @(cd ..; $(MAKE) DIRS=apps all) -@@ -398,109 +398,109 @@ - link_app.$${shlib_target} - - $(RSATEST)$(EXE_EXT): $(RSATEST).o $(DLIBCRYPTO) -- @target=$(RSATEST); $(BUILD_CMD) -+ +@target=$(RSATEST); $(BUILD_CMD) - - $(BNTEST)$(EXE_EXT): $(BNTEST).o $(DLIBCRYPTO) -- @target=$(BNTEST); $(BUILD_CMD) -+ +@target=$(BNTEST); $(BUILD_CMD) - - $(ECTEST)$(EXE_EXT): $(ECTEST).o $(DLIBCRYPTO) -- @target=$(ECTEST); $(BUILD_CMD) -+ +@target=$(ECTEST); $(BUILD_CMD) - - $(EXPTEST)$(EXE_EXT): $(EXPTEST).o $(DLIBCRYPTO) -- @target=$(EXPTEST); $(BUILD_CMD) -+ +@target=$(EXPTEST); $(BUILD_CMD) - - $(IDEATEST)$(EXE_EXT): $(IDEATEST).o $(DLIBCRYPTO) -- @target=$(IDEATEST); $(BUILD_CMD) -+ +@target=$(IDEATEST); $(BUILD_CMD) - - $(MD2TEST)$(EXE_EXT): $(MD2TEST).o $(DLIBCRYPTO) -- @target=$(MD2TEST); $(BUILD_CMD) -+ +@target=$(MD2TEST); $(BUILD_CMD) - - $(SHATEST)$(EXE_EXT): $(SHATEST).o $(DLIBCRYPTO) -- @target=$(SHATEST); $(BUILD_CMD) -+ +@target=$(SHATEST); $(BUILD_CMD) - - $(SHA1TEST)$(EXE_EXT): $(SHA1TEST).o $(DLIBCRYPTO) -- @target=$(SHA1TEST); $(BUILD_CMD) -+ +@target=$(SHA1TEST); $(BUILD_CMD) - - $(SHA256TEST)$(EXE_EXT): $(SHA256TEST).o $(DLIBCRYPTO) -- @target=$(SHA256TEST); $(BUILD_CMD) -+ +@target=$(SHA256TEST); $(BUILD_CMD) - - $(SHA512TEST)$(EXE_EXT): $(SHA512TEST).o $(DLIBCRYPTO) -- @target=$(SHA512TEST); $(BUILD_CMD) -+ +@target=$(SHA512TEST); $(BUILD_CMD) - - $(RMDTEST)$(EXE_EXT): $(RMDTEST).o $(DLIBCRYPTO) -- @target=$(RMDTEST); $(BUILD_CMD) -+ +@target=$(RMDTEST); $(BUILD_CMD) - - $(MDC2TEST)$(EXE_EXT): $(MDC2TEST).o $(DLIBCRYPTO) -- @target=$(MDC2TEST); $(BUILD_CMD) -+ +@target=$(MDC2TEST); $(BUILD_CMD) - - $(MD4TEST)$(EXE_EXT): $(MD4TEST).o $(DLIBCRYPTO) -- @target=$(MD4TEST); $(BUILD_CMD) -+ +@target=$(MD4TEST); $(BUILD_CMD) - - $(MD5TEST)$(EXE_EXT): $(MD5TEST).o $(DLIBCRYPTO) -- @target=$(MD5TEST); $(BUILD_CMD) -+ +@target=$(MD5TEST); $(BUILD_CMD) - - $(HMACTEST)$(EXE_EXT): $(HMACTEST).o $(DLIBCRYPTO) -- @target=$(HMACTEST); $(BUILD_CMD) -+ +@target=$(HMACTEST); $(BUILD_CMD) - - $(WPTEST)$(EXE_EXT): $(WPTEST).o $(DLIBCRYPTO) -- @target=$(WPTEST); $(BUILD_CMD) -+ +@target=$(WPTEST); $(BUILD_CMD) - - $(RC2TEST)$(EXE_EXT): $(RC2TEST).o $(DLIBCRYPTO) -- @target=$(RC2TEST); $(BUILD_CMD) -+ +@target=$(RC2TEST); $(BUILD_CMD) - - $(BFTEST)$(EXE_EXT): $(BFTEST).o $(DLIBCRYPTO) -- @target=$(BFTEST); $(BUILD_CMD) -+ +@target=$(BFTEST); $(BUILD_CMD) - - $(CASTTEST)$(EXE_EXT): $(CASTTEST).o $(DLIBCRYPTO) -- @target=$(CASTTEST); $(BUILD_CMD) -+ +@target=$(CASTTEST); $(BUILD_CMD) - - $(RC4TEST)$(EXE_EXT): $(RC4TEST).o $(DLIBCRYPTO) -- @target=$(RC4TEST); $(BUILD_CMD) -+ +@target=$(RC4TEST); $(BUILD_CMD) - - $(RC5TEST)$(EXE_EXT): $(RC5TEST).o $(DLIBCRYPTO) -- @target=$(RC5TEST); $(BUILD_CMD) -+ +@target=$(RC5TEST); $(BUILD_CMD) - - $(DESTEST)$(EXE_EXT): $(DESTEST).o $(DLIBCRYPTO) -- @target=$(DESTEST); $(BUILD_CMD) -+ +@target=$(DESTEST); $(BUILD_CMD) - - $(RANDTEST)$(EXE_EXT): $(RANDTEST).o $(DLIBCRYPTO) -- @target=$(RANDTEST); $(BUILD_CMD) -+ +@target=$(RANDTEST); $(BUILD_CMD) - - $(DHTEST)$(EXE_EXT): $(DHTEST).o $(DLIBCRYPTO) -- @target=$(DHTEST); $(BUILD_CMD) -+ +@target=$(DHTEST); $(BUILD_CMD) - - $(DSATEST)$(EXE_EXT): $(DSATEST).o $(DLIBCRYPTO) -- @target=$(DSATEST); $(BUILD_CMD) -+ +@target=$(DSATEST); $(BUILD_CMD) - - $(METHTEST)$(EXE_EXT): $(METHTEST).o $(DLIBCRYPTO) -- @target=$(METHTEST); $(BUILD_CMD) -+ +@target=$(METHTEST); $(BUILD_CMD) - - $(SSLTEST)$(EXE_EXT): $(SSLTEST).o $(DLIBSSL) $(DLIBCRYPTO) -- @target=$(SSLTEST); $(FIPS_BUILD_CMD) -+ +@target=$(SSLTEST); $(FIPS_BUILD_CMD) - - $(ENGINETEST)$(EXE_EXT): $(ENGINETEST).o $(DLIBCRYPTO) -- @target=$(ENGINETEST); $(BUILD_CMD) -+ +@target=$(ENGINETEST); $(BUILD_CMD) - - $(EVPTEST)$(EXE_EXT): $(EVPTEST).o $(DLIBCRYPTO) -- @target=$(EVPTEST); $(BUILD_CMD) -+ +@target=$(EVPTEST); $(BUILD_CMD) - - $(ECDSATEST)$(EXE_EXT): $(ECDSATEST).o $(DLIBCRYPTO) -- @target=$(ECDSATEST); $(BUILD_CMD) -+ +@target=$(ECDSATEST); $(BUILD_CMD) - - $(ECDHTEST)$(EXE_EXT): $(ECDHTEST).o $(DLIBCRYPTO) -- @target=$(ECDHTEST); $(BUILD_CMD) -+ +@target=$(ECDHTEST); $(BUILD_CMD) - - $(IGETEST)$(EXE_EXT): $(IGETEST).o $(DLIBCRYPTO) -- @target=$(IGETEST); $(BUILD_CMD) -+ +@target=$(IGETEST); $(BUILD_CMD) - - $(JPAKETEST)$(EXE_EXT): $(JPAKETEST).o $(DLIBCRYPTO) -- @target=$(JPAKETEST); $(BUILD_CMD) -+ +@target=$(JPAKETEST); $(BUILD_CMD) - - $(ASN1TEST)$(EXE_EXT): $(ASN1TEST).o $(DLIBCRYPTO) -- @target=$(ASN1TEST); $(BUILD_CMD) -+ +@target=$(ASN1TEST); $(BUILD_CMD) - - $(SRPTEST)$(EXE_EXT): $(SRPTEST).o $(DLIBCRYPTO) -- @target=$(SRPTEST); $(BUILD_CMD) -+ +@target=$(SRPTEST); $(BUILD_CMD) - - $(V3NAMETEST)$(EXE_EXT): $(V3NAMETEST).o $(DLIBCRYPTO) - @target=$(V3NAMETEST); $(BUILD_CMD) -@@ -522,7 +522,7 @@ - # fi - - dummytest$(EXE_EXT): dummytest.o $(DLIBCRYPTO) -- @target=dummytest; $(BUILD_CMD) -+ +@target=dummytest; $(BUILD_CMD) - - # DO NOT DELETE THIS LINE -- make depend depends on it. - diff --git a/src/patches/openssl-1.0.2a-rpmbuild.patch b/src/patches/openssl-1.0.2a-rpmbuild.patch deleted file mode 100644 index db1460cb7..000000000 --- a/src/patches/openssl-1.0.2a-rpmbuild.patch +++ /dev/null @@ -1,115 +0,0 @@ -diff -up openssl-1.0.2e/Configure.rpmbuild openssl-1.0.2e/Configure ---- openssl-1.0.2e/Configure.rpmbuild 2015-12-03 15:04:23.000000000 +0100 -+++ openssl-1.0.2e/Configure 2015-12-04 13:20:22.996835604 +0100 -@@ -365,8 +365,8 @@ my %table=( - #### - # *-generic* is endian-neutral target, but ./config is free to - # throw in -D[BL]_ENDIAN, whichever appropriate... --"linux-generic32","gcc:-O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", --"linux-ppc", "gcc:-DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", -+"linux-generic32","gcc:-Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", -+"linux-ppc", "gcc:-DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", - - ####################################################################### - # Note that -march is not among compiler options in below linux-armv4 -@@ -395,31 +395,31 @@ my %table=( - # - # ./Configure linux-armv4 -march=armv6 -D__ARM_MAX_ARCH__=8 - # --"linux-armv4", "gcc: -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", --"linux-aarch64","gcc: -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", -+"linux-armv4", "gcc:-Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", -+"linux-aarch64","gcc:-DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", - # Configure script adds minimally required -march for assembly support, - # if no -march was specified at command line. mips32 and mips64 below - # refer to contemporary MIPS Architecture specifications, MIPS32 and - # MIPS64, rather than to kernel bitness. --"linux-mips32", "gcc:-mabi=32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", --"linux-mips64", "gcc:-mabi=n32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:n32:dlfcn:linux-shared:-fPIC:-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32", --"linux64-mips64", "gcc:-mabi=64 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:64:dlfcn:linux-shared:-fPIC:-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", -+"linux-mips32", "gcc:-mabi=32 -Wall \$(RPM_OPT_FLAGS) -DBN_DIV3W::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", -+"linux-mips64", "gcc:-mabi=n32 -Wall \$(RPM_OPT_FLAGS) -DBN_DIV3W::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:n32:dlfcn:linux-shared:-fPIC:-mabi=n32 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::32", -+"linux64-mips64", "gcc:-mabi=64 -Wall \$(RPM_OPT_FLAGS) -DBN_DIV3W::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:64:dlfcn:linux-shared:-fPIC:-mabi=64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", - #### IA-32 targets... - "linux-ia32-icc", "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-KPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", --"linux-elf", "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", -+"linux-elf", "gcc:-DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", - "linux-aout", "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out", - #### --"linux-generic64","gcc:-O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", --"linux-ppc64", "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", --"linux-ppc64le","gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:$ppc64_asm:linux64le:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::", --"linux-ia64", "gcc:-DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", -+"linux-generic64","gcc:-Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", -+"linux-ppc64", "gcc:-m64 -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", -+"linux-ppc64le","gcc:-m64 -DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:$ppc64_asm:linux64le:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", -+"linux-ia64", "gcc:-DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", - "linux-ia64-icc","icc:-DL_ENDIAN -O2 -Wall::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", --"linux-x86_64", "gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", -+"linux-x86_64", "gcc:-m64 -DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", - "linux-x86_64-clang", "clang: -m64 -DL_ENDIAN -O3 -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", - "debug-linux-x86_64-clang", "clang: -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", - "linux-x86_64-icc", "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", - "linux-x32", "gcc:-mx32 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-mx32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::x32", --"linux64-s390x", "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", -+"linux64-s390x", "gcc:-m64 -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", - #### So called "highgprs" target for z/Architecture CPUs - # "Highgprs" is kernel feature first implemented in Linux 2.6.32, see - # /proc/cpuinfo. The idea is to preserve most significant bits of -@@ -437,12 +437,12 @@ my %table=( - #### SPARC Linux setups - # Ray Miller has patiently - # assisted with debugging of following two configs. --"linux-sparcv8","gcc:-mcpu=v8 -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", -+"linux-sparcv8","gcc:-mcpu=v8 -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS) -DBN_DIV2W::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", - # it's a real mess with -mcpu=ultrasparc option under Linux, but - # -Wa,-Av8plus should do the trick no matter what. --"linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", -+"linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS) -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", - # GCC 3.1 is a requirement --"linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", -+"linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT:ULTRASPARC:-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", - #### Alpha Linux with GNU C and Compaq C setups - # Special notes: - # - linux-alpha+bwx-gcc is ment to be used from ./config only. If you -@@ -1767,7 +1767,7 @@ while () - elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/) - { - my $sotmp = $1; -- s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/; -+ s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_SONAMEVER) .s$sotmp/; - } - elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/) - { -diff -up openssl-1.0.2e/Makefile.org.rpmbuild openssl-1.0.2e/Makefile.org ---- openssl-1.0.2e/Makefile.org.rpmbuild 2015-12-03 15:04:23.000000000 +0100 -+++ openssl-1.0.2e/Makefile.org 2015-12-04 13:18:44.913538616 +0100 -@@ -10,6 +10,7 @@ SHLIB_VERSION_HISTORY= - SHLIB_MAJOR= - SHLIB_MINOR= - SHLIB_EXT= -+SHLIB_SONAMEVER=10 - PLATFORM=dist - OPTIONS= - CONFIGURE_ARGS= -@@ -341,10 +342,9 @@ clean-shared: - link-shared: - @ set -e; for i in $(SHLIBDIRS); do \ - $(MAKE) -f $(HERE)/Makefile.shared -e $(BUILDENV) \ -- LIBNAME=$$i LIBVERSION=$(SHLIB_MAJOR).$(SHLIB_MINOR) \ -+ LIBNAME=$$i LIBVERSION=$(SHLIB_SONAMEVER) \ - LIBCOMPATVERSIONS=";$(SHLIB_VERSION_HISTORY)" \ - symlink.$(SHLIB_TARGET); \ -- libs="$$libs -l$$i"; \ - done - - build-shared: do_$(SHLIB_TARGET) link-shared -@@ -355,7 +355,7 @@ do_$(SHLIB_TARGET): - libs="$(LIBKRB5) $$libs"; \ - fi; \ - $(CLEARENV) && $(MAKE) -f Makefile.shared -e $(BUILDENV) \ -- LIBNAME=$$i LIBVERSION=$(SHLIB_MAJOR).$(SHLIB_MINOR) \ -+ LIBNAME=$$i LIBVERSION=$(SHLIB_SONAMEVER) \ - LIBCOMPATVERSIONS=";$(SHLIB_VERSION_HISTORY)" \ - LIBDEPS="$$libs $(EX_LIBS)" \ - link_a.$(SHLIB_TARGET); \ diff --git a/src/patches/openssl-1.0.2a_auto_enable_padlock.patch b/src/patches/openssl-1.0.2a_auto_enable_padlock.patch deleted file mode 100644 index b5c0e95a2..000000000 --- a/src/patches/openssl-1.0.2a_auto_enable_padlock.patch +++ /dev/null @@ -1,34 +0,0 @@ -diff -Naur openssl-1.0.2a.org/crypto/engine/eng_all.c openssl-1.0.2a/crypto/engine/eng_all.c ---- openssl-1.0.2a.org/crypto/engine/eng_all.c 2015-03-19 14:30:36.000000000 +0100 -+++ openssl-1.0.2a/crypto/engine/eng_all.c 2015-04-27 12:27:05.063569969 +0200 -@@ -120,6 +120,14 @@ - ENGINE_load_capi(); - # endif - #endif -+#ifdef OPENSSL_NO_STATIC_ENGINE -+ ENGINE *e; -+ e = ENGINE_by_id("padlock"); -+ if (e != NULL) { -+ ENGINE_add(e); -+ ENGINE_free(e); -+ } -+#endif - ENGINE_register_all_complete(); - } - -diff -Naur openssl-1.0.2a.org/ssl/ssl_algs.c openssl-1.0.2a/ssl/ssl_algs.c ---- openssl-1.0.2a.org/ssl/ssl_algs.c 2015-03-19 14:30:36.000000000 +0100 -+++ openssl-1.0.2a/ssl/ssl_algs.c 2015-04-27 11:04:27.893399695 +0200 -@@ -151,5 +151,12 @@ - #endif - /* initialize cipher/digest methods table */ - ssl_load_ciphers(); -+ -+ /* Init available hardware crypto engines */ -+ ENGINE_load_builtin_engines(); -+ ENGINE_register_all_complete(); -+ ENGINE * padlock = ENGINE_by_id("padlock"); -+ if (padlock) ENGINE_set_default_ciphers(padlock); -+ - return (1); - } diff --git a/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch b/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch deleted file mode 100644 index 097cc8071..000000000 --- a/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch +++ /dev/null @@ -1,11 +0,0 @@ -diff -Naur openssl-1.0.2a.org/crypto/x86cpuid.pl openssl-1.0.2a/crypto/x86cpuid.pl ---- openssl-1.0.2a.org/crypto/x86cpuid.pl 2015-03-19 14:30:36.000000000 +0100 -+++ openssl-1.0.2a/crypto/x86cpuid.pl 2015-04-28 13:47:57.853521020 +0200 -@@ -71,6 +71,7 @@ - &mov ("eax",1); - &xor ("ecx","ecx"); - &cpuid (); -+ &and ("ecx",0xfffffdff); # clear SSSE3 because it is incredible slow on AMD's - &bt ("edx",28); - &jnc (&label("generic")); - &shr ("ebx",16); diff --git a/src/patches/openssl-1.0.2g-disable-sslv2v3.patch b/src/patches/openssl-1.0.2g-disable-sslv2v3.patch deleted file mode 100644 index 06f51322b..000000000 --- a/src/patches/openssl-1.0.2g-disable-sslv2v3.patch +++ /dev/null @@ -1,18 +0,0 @@ -diff -up openssl-1.0.2g/ssl/ssl_lib.c.v2v3 openssl-1.0.2g/ssl/ssl_lib.c ---- openssl-1.0.2g/ssl/ssl_lib.c.v2v3 2016-03-01 16:38:26.879142021 +0100 -+++ openssl-1.0.2g/ssl/ssl_lib.c 2016-03-01 16:41:32.977353769 +0100 -@@ -2055,11 +2055,11 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m - ret->options |= SSL_OP_LEGACY_SERVER_CONNECT; - - /* -- * Disable SSLv2 by default, callers that want to enable SSLv2 will have to -- * explicitly clear this option via either of SSL_CTX_clear_options() or -+ * Disable SSLv2 and SSLv3 by default, callers that want to enable these will have to -+ * explicitly clear these options via either of SSL_CTX_clear_options() or - * SSL_clear_options(). - */ -- ret->options |= SSL_OP_NO_SSLv2; -+ ret->options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3; - - return (ret); - err: diff --git a/src/patches/openssl-1.0.2h-weak-ciphers.patch b/src/patches/openssl-1.0.2h-weak-ciphers.patch deleted file mode 100644 index d1ec6a2af..000000000 --- a/src/patches/openssl-1.0.2h-weak-ciphers.patch +++ /dev/null @@ -1,12 +0,0 @@ -diff -Naur openssl-1.0.2h.org/ssl/ssl.h openssl-1.0.2h/ssl/ssl.h ---- openssl-1.0.2h.org/ssl/ssl.h 2016-05-03 15:44:42.000000000 +0200 -+++ openssl-1.0.2h/ssl/ssl.h 2016-05-03 18:49:10.393302264 +0200 -@@ -338,7 +338,7 @@ - * The following cipher list is used by default. It also is substituted when - * an application-defined cipher list string starts with 'DEFAULT'. - */ --# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!LOW:!aNULL:!eNULL:!SSLv2" -+# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!LOW:!aNULL:!eNULL:!SSLv2:!RC2:!DES" - /* - * As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always - * starts with a reasonable order, and all we have to do for DEFAULT is diff --git a/src/patches/openssl-1.1.0-disable-ssl3.patch b/src/patches/openssl-1.1.0-disable-ssl3.patch new file mode 100644 index 000000000..267c02c62 --- /dev/null +++ b/src/patches/openssl-1.1.0-disable-ssl3.patch @@ -0,0 +1,86 @@ +diff -up openssl-1.1.0f/apps/s_client.c.disable-ssl3 openssl-1.1.0f/apps/s_client.c +--- openssl-1.1.0f/apps/s_client.c.disable-ssl3 2017-06-05 15:42:44.838853312 +0200 ++++ openssl-1.1.0f/apps/s_client.c 2017-07-17 14:50:06.468821871 +0200 +@@ -1486,6 +1486,9 @@ int s_client_main(int argc, char **argv) + if (sdebug) + ssl_ctx_security_debug(ctx, sdebug); + ++ if (min_version == SSL3_VERSION && max_version == SSL3_VERSION) ++ SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv3); ++ + if (ssl_config) { + if (SSL_CTX_config(ctx, ssl_config) == 0) { + BIO_printf(bio_err, "Error using configuration \"%s\"\n", +diff -up openssl-1.1.0f/apps/s_server.c.disable-ssl3 openssl-1.1.0f/apps/s_server.c +--- openssl-1.1.0f/apps/s_server.c.disable-ssl3 2017-05-25 14:46:18.000000000 +0200 ++++ openssl-1.1.0f/apps/s_server.c 2017-07-17 14:49:50.434447583 +0200 +@@ -1614,6 +1614,10 @@ int s_server_main(int argc, char *argv[] + } + if (sdebug) + ssl_ctx_security_debug(ctx, sdebug); ++ ++ if (min_version == SSL3_VERSION && max_version == SSL3_VERSION) ++ SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv3); ++ + if (ssl_config) { + if (SSL_CTX_config(ctx, ssl_config) == 0) { + BIO_printf(bio_err, "Error using configuration \"%s\"\n", +diff -up openssl-1.1.0/ssl/ssl_lib.c.disable-ssl3 openssl-1.1.0/ssl/ssl_lib.c +--- openssl-1.1.0/ssl/ssl_lib.c.disable-ssl3 2016-08-25 17:29:22.000000000 +0200 ++++ openssl-1.1.0/ssl/ssl_lib.c 2016-09-08 11:08:05.252082263 +0200 +@@ -2470,6 +2470,13 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m + * or by using the SSL_CONF library. + */ + ret->options |= SSL_OP_NO_COMPRESSION; ++ /* ++ * Disable SSLv3 by default. Applications can ++ * re-enable it by configuring ++ * SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv3); ++ * or by using the SSL_CONF library. ++ */ ++ ret->options |= SSL_OP_NO_SSLv3; + + ret->tlsext_status_type = -1; + +diff -up openssl-1.1.0/test/ssl_test.c.disable-ssl3 openssl-1.1.0/test/ssl_test.c +--- openssl-1.1.0/test/ssl_test.c.disable-ssl3 2016-09-08 11:08:05.252082263 +0200 ++++ openssl-1.1.0/test/ssl_test.c 2016-09-08 11:11:44.802005886 +0200 +@@ -258,6 +258,7 @@ static int execute_test(SSL_TEST_FIXTURE + SSL_TEST_SERVERNAME_CB_NONE) { + server2_ctx = SSL_CTX_new(TLS_server_method()); + TEST_check(server2_ctx != NULL); ++ SSL_CTX_clear_options(server2_ctx, SSL_OP_NO_SSLv3); + } + client_ctx = SSL_CTX_new(TLS_client_method()); + +@@ -266,11 +267,15 @@ static int execute_test(SSL_TEST_FIXTURE + resume_client_ctx = SSL_CTX_new(TLS_client_method()); + TEST_check(resume_server_ctx != NULL); + TEST_check(resume_client_ctx != NULL); ++ SSL_CTX_clear_options(resume_server_ctx, SSL_OP_NO_SSLv3); ++ SSL_CTX_clear_options(resume_client_ctx, SSL_OP_NO_SSLv3); + } + } + + TEST_check(server_ctx != NULL); + TEST_check(client_ctx != NULL); ++ SSL_CTX_clear_options(server_ctx, SSL_OP_NO_SSLv3); ++ SSL_CTX_clear_options(client_ctx, SSL_OP_NO_SSLv3); + + TEST_check(CONF_modules_load(conf, fixture.test_app, 0) > 0); + +diff -up openssl-1.1.0/test/ssltest_old.c.disable-ssl3 openssl-1.1.0/test/ssltest_old.c +--- openssl-1.1.0/test/ssltest_old.c.disable-ssl3 2016-08-25 17:29:23.000000000 +0200 ++++ openssl-1.1.0/test/ssltest_old.c 2016-09-08 11:08:05.253082286 +0200 +@@ -1456,6 +1456,11 @@ int main(int argc, char *argv[]) + ERR_print_errors(bio_err); + goto end; + } ++ ++ SSL_CTX_clear_options(c_ctx, SSL_OP_NO_SSLv3); ++ SSL_CTX_clear_options(s_ctx, SSL_OP_NO_SSLv3); ++ SSL_CTX_clear_options(s_ctx2, SSL_OP_NO_SSLv3); ++ + /* + * Since we will use low security ciphersuites and keys for testing set + * security level to zero by default. Tests can override this by adding From f8ee1cfcfcc5a2fd520a40c66a5747480debb51a Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 27 Nov 2017 12:47:13 +0000 Subject: [PATCH 02/91] cyrus-sasl: Disable OTP to build against OpenSSL 1.1 Signed-off-by: Michael Tremer --- config/rootfiles/common/cyrus-sasl | 6 +----- lfs/cyrus-sasl | 3 ++- 2 files changed, 3 insertions(+), 6 deletions(-) diff --git a/config/rootfiles/common/cyrus-sasl b/config/rootfiles/common/cyrus-sasl index 7934c1cf9..411c68d7a 100644 --- a/config/rootfiles/common/cyrus-sasl +++ b/config/rootfiles/common/cyrus-sasl @@ -1,3 +1,4 @@ +etc/rc.d/init.d/cyrus-sasl #usr/include/sasl #usr/include/sasl/hmac-md5.h #usr/include/sasl/md5.h @@ -24,10 +25,6 @@ usr/lib/sasl2/libcrammd5.so.3.0.0 usr/lib/sasl2/libdigestmd5.so usr/lib/sasl2/libdigestmd5.so.3 usr/lib/sasl2/libdigestmd5.so.3.0.0 -#usr/lib/sasl2/libotp.la -usr/lib/sasl2/libotp.so -usr/lib/sasl2/libotp.so.3 -usr/lib/sasl2/libotp.so.3.0.0 #usr/lib/sasl2/libplain.la usr/lib/sasl2/libplain.so usr/lib/sasl2/libplain.so.3 @@ -94,4 +91,3 @@ usr/sbin/testsaslauthd #usr/share/man/man8/sasldblistusers2.8 #usr/share/man/man8/saslpasswd2.8 var/lib/sasl -etc/rc.d/init.d/cyrus-sasl diff --git a/lfs/cyrus-sasl b/lfs/cyrus-sasl index 757f7426b..35fb8ddcc 100644 --- a/lfs/cyrus-sasl +++ b/lfs/cyrus-sasl @@ -90,7 +90,8 @@ ifeq "$(PASS)" "" cd $(DIR_APP) && ./configure --prefix=/usr --sysconfdir=/etc \ --with-dbpath=/var/lib/sasl/sasldb2 \ --with-saslauthd=/var/run/saslauthd \ - --with-des=no --with-rc4=no + --with-des=no --with-rc4=no \ + --disable-otp cd $(DIR_APP) && make cd $(DIR_APP) && make install install -v -m700 -d /var/lib/sasl From a82d85131b8220c3800c54dec49bd1ce605f0e7a Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 27 Nov 2017 13:19:20 +0000 Subject: [PATCH 03/91] Net-SSLeay: Update to 1.82 Signed-off-by: Michael Tremer --- lfs/Net_SSLeay | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/Net_SSLeay b/lfs/Net_SSLeay index e807e0d29..613c3d9e9 100644 --- a/lfs/Net_SSLeay +++ b/lfs/Net_SSLeay @@ -24,7 +24,7 @@ include Config -VER = 1.55 +VER = 1.82 THISAPP = Net-SSLeay-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 473b8d66ca69d5784bb0e428721f58e0 +$(DL_FILE)_MD5 = 2170469d929d5173bacffd0cb2d7fafa install : $(TARGET) From 07b8dcd0b2287fd316592dd0fe18d103b71b712e Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 13:02:17 +0000 Subject: [PATCH 04/91] openssh: Update to 7.6p1 and patch against OpenSSL 1.1 Signed-off-by: Michael Tremer --- lfs/openssh | 1 + src/patches/openssh-7.6p1-openssl-1.1.0.patch | 1982 +++++++++++++++++ 2 files changed, 1983 insertions(+) create mode 100644 src/patches/openssh-7.6p1-openssl-1.1.0.patch diff --git a/lfs/openssh b/lfs/openssh index 3429a7542..203446370 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -70,6 +70,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssh-7.6p1-openssl-1.1.0.patch cd $(DIR_APP) && sed -i "s/lkrb5 -ldes/lkrb5/" configure cd $(DIR_APP) && ./configure \ --prefix=/usr \ diff --git a/src/patches/openssh-7.6p1-openssl-1.1.0.patch b/src/patches/openssh-7.6p1-openssl-1.1.0.patch new file mode 100644 index 000000000..f5454ac98 --- /dev/null +++ b/src/patches/openssh-7.6p1-openssl-1.1.0.patch @@ -0,0 +1,1982 @@ +diff -Naur old/auth-pam.c new/auth-pam.c +--- old/auth-pam.c 2017-10-03 21:49:05.363829772 -1000 ++++ new/auth-pam.c 2017-10-03 21:55:50.869718862 -1000 +@@ -128,6 +128,10 @@ + typedef pthread_t sp_pthread_t; + #else + typedef pid_t sp_pthread_t; ++# define pthread_create(a, b, c, d) _ssh_compat_pthread_create(a, b, c, d) ++# define pthread_exit(a) _ssh_compat_pthread_exit(a) ++# define pthread_cancel(a) _ssh_compat_pthread_cancel(a) ++# define pthread_join(a, b) _ssh_compat_pthread_join(a, b) + #endif + + struct pam_ctxt { +diff -Naur old/cipher.c new/cipher.c +--- old/cipher.c 2017-10-03 21:49:05.367162904 -1000 ++++ new/cipher.c 2017-10-03 21:55:50.869718862 -1000 +@@ -297,7 +297,10 @@ + goto out; + } + } +- if (EVP_CipherInit(cc->evp, NULL, (u_char *)key, NULL, -1) == 0) { ++ /* in OpenSSL 1.1.0, EVP_CipherInit clears all previous setups; ++ use EVP_CipherInit_ex for augmenting */ ++ if (EVP_CipherInit_ex(cc->evp, NULL, NULL, (u_char *)key, NULL, -1) == 0) ++ { + ret = SSH_ERR_LIBCRYPTO_ERROR; + goto out; + } +@@ -486,7 +489,7 @@ + len, iv)) + return SSH_ERR_LIBCRYPTO_ERROR; + } else +- memcpy(iv, cc->evp->iv, len); ++ memcpy(iv, EVP_CIPHER_CTX_iv(cc->evp), len); + #endif + return 0; + } +@@ -520,14 +523,19 @@ + EVP_CTRL_GCM_SET_IV_FIXED, -1, (void *)iv)) + return SSH_ERR_LIBCRYPTO_ERROR; + } else +- memcpy(cc->evp->iv, iv, evplen); ++ memcpy(EVP_CIPHER_CTX_iv(cc->evp), iv, evplen); + #endif + return 0; + } + + #ifdef WITH_OPENSSL +-#define EVP_X_STATE(evp) (evp)->cipher_data +-#define EVP_X_STATE_LEN(evp) (evp)->cipher->ctx_size ++# if OPENSSL_VERSION_NUMBER >= 0x10100000UL ++#define EVP_X_STATE(evp) EVP_CIPHER_CTX_get_cipher_data(evp) ++#define EVP_X_STATE_LEN(evp) EVP_CIPHER_impl_ctx_size(EVP_CIPHER_CTX_cipher(evp)) ++# else ++#define EVP_X_STATE(evp) (evp).cipher_data ++#define EVP_X_STATE_LEN(evp) (evp).cipher->ctx_size ++# endif + #endif + + int +diff -Naur old/cipher.h new/cipher.h +--- old/cipher.h 2017-10-03 21:49:05.367162904 -1000 ++++ new/cipher.h 2017-10-03 21:55:50.869718862 -1000 +@@ -46,7 +46,18 @@ + #define CIPHER_DECRYPT 0 + + struct sshcipher; ++#if 0 ++struct sshcipher_ctx { ++ int plaintext; ++ int encrypt; ++ EVP_CIPHER_CTX *evp; ++ struct chachapoly_ctx cp_ctx; /* XXX union with evp? */ ++ struct aesctr_ctx ac_ctx; /* XXX union with evp? */ ++ const struct sshcipher *cipher; ++}; ++#else + struct sshcipher_ctx; ++#endif + + const struct sshcipher *cipher_by_name(const char *); + const char *cipher_warning_message(const struct sshcipher_ctx *); +diff -Naur old/configure new/configure +--- old/configure 2017-10-03 21:49:05.410493626 -1000 ++++ new/configure 2017-10-03 22:01:49.159050540 -1000 +@@ -12688,7 +12688,6 @@ + 100*) ;; # 1.0.x + 200*) ;; # LibreSSL + *) +- as_fn_error $? "OpenSSL >= 1.1.0 is not yet supported (have \"$ssl_library_ver\")" "$LINENO" 5 + ;; + esac + { $as_echo "$as_me:${as_lineno-$LINENO}: result: $ssl_library_ver" >&5 +diff -Naur old/dh.c new/dh.c +--- old/dh.c 2017-10-03 21:49:05.370496037 -1000 ++++ new/dh.c 2017-10-03 21:55:50.869718862 -1000 +@@ -212,14 +212,15 @@ + /* diffie-hellman-groupN-sha1 */ + + int +-dh_pub_is_valid(DH *dh, BIGNUM *dh_pub) ++dh_pub_is_valid(const DH *dh, const BIGNUM *dh_pub) + { + int i; + int n = BN_num_bits(dh_pub); + int bits_set = 0; + BIGNUM *tmp; ++ const BIGNUM *p; + +- if (dh_pub->neg) { ++ if (BN_is_negative(dh_pub)) { + logit("invalid public DH value: negative"); + return 0; + } +@@ -232,7 +233,8 @@ + error("%s: BN_new failed", __func__); + return 0; + } +- if (!BN_sub(tmp, dh->p, BN_value_one()) || ++ DH_get0_pqg(dh, &p, NULL, NULL); ++ if (!BN_sub(tmp, p, BN_value_one()) || + BN_cmp(dh_pub, tmp) != -1) { /* pub_exp > p-2 */ + BN_clear_free(tmp); + logit("invalid public DH value: >= p-1"); +@@ -243,14 +245,14 @@ + for (i = 0; i <= n; i++) + if (BN_is_bit_set(dh_pub, i)) + bits_set++; +- debug2("bits set: %d/%d", bits_set, BN_num_bits(dh->p)); ++ debug2("bits set: %d/%d", bits_set, BN_num_bits(p)); + + /* + * if g==2 and bits_set==1 then computing log_g(dh_pub) is trivial + */ + if (bits_set < 4) { + logit("invalid public DH value (%d/%d)", +- bits_set, BN_num_bits(dh->p)); ++ bits_set, BN_num_bits(p)); + return 0; + } + return 1; +@@ -260,9 +262,13 @@ + dh_gen_key(DH *dh, int need) + { + int pbits; ++ const BIGNUM *p, *pub_key; ++ BIGNUM *priv_key; + +- if (need < 0 || dh->p == NULL || +- (pbits = BN_num_bits(dh->p)) <= 0 || ++ DH_get0_pqg(dh, &p, NULL, NULL); ++ ++ if (need < 0 || p == NULL || ++ (pbits = BN_num_bits(p)) <= 0 || + need > INT_MAX / 2 || 2 * need > pbits) + return SSH_ERR_INVALID_ARGUMENT; + if (need < 256) +@@ -271,10 +277,13 @@ + * Pollard Rho, Big step/Little Step attacks are O(sqrt(n)), + * so double requested need here. + */ +- dh->length = MINIMUM(need * 2, pbits - 1); +- if (DH_generate_key(dh) == 0 || +- !dh_pub_is_valid(dh, dh->pub_key)) { +- BN_clear_free(dh->priv_key); ++ DH_set_length(dh, MIN(need * 2, pbits - 1)); ++ if (DH_generate_key(dh) == 0) { ++ return SSH_ERR_LIBCRYPTO_ERROR; ++ } ++ DH_get0_key(dh, &pub_key, &priv_key); ++ if (!dh_pub_is_valid(dh, pub_key)) { ++ BN_clear(priv_key); + return SSH_ERR_LIBCRYPTO_ERROR; + } + return 0; +@@ -283,16 +292,27 @@ + DH * + dh_new_group_asc(const char *gen, const char *modulus) + { +- DH *dh; ++ DH *dh = NULL; ++ BIGNUM *p=NULL, *g=NULL; + +- if ((dh = DH_new()) == NULL) +- return NULL; +- if (BN_hex2bn(&dh->p, modulus) == 0 || +- BN_hex2bn(&dh->g, gen) == 0) { +- DH_free(dh); +- return NULL; ++ if ((dh = DH_new()) == NULL || ++ (p = BN_new()) == NULL || ++ (g = BN_new()) == NULL) ++ goto null; ++ if (BN_hex2bn(&p, modulus) == 0 || ++ BN_hex2bn(&g, gen) == 0) { ++ goto null; + } ++ if (DH_set0_pqg(dh, p, NULL, g) == 0) { ++ goto null; ++ } ++ p = g = NULL; + return (dh); ++null: ++ BN_free(p); ++ BN_free(g); ++ DH_free(dh); ++ return NULL; + } + + /* +@@ -307,8 +327,8 @@ + + if ((dh = DH_new()) == NULL) + return NULL; +- dh->p = modulus; +- dh->g = gen; ++ if (DH_set0_pqg(dh, modulus, NULL, gen) == 0) ++ return NULL; + + return (dh); + } +diff -Naur old/dh.h new/dh.h +--- old/dh.h 2017-10-03 21:49:05.370496037 -1000 ++++ new/dh.h 2017-10-03 21:55:50.869718862 -1000 +@@ -42,7 +42,7 @@ + DH *dh_new_group_fallback(int); + + int dh_gen_key(DH *, int); +-int dh_pub_is_valid(DH *, BIGNUM *); ++int dh_pub_is_valid(const DH *, const BIGNUM *); + + u_int dh_estimate(int); + +diff -Naur old/digest-openssl.c new/digest-openssl.c +--- old/digest-openssl.c 2017-10-03 21:49:05.370496037 -1000 ++++ new/digest-openssl.c 2017-10-03 21:55:50.869718862 -1000 +@@ -43,7 +43,7 @@ + + struct ssh_digest_ctx { + int alg; +- EVP_MD_CTX mdctx; ++ EVP_MD_CTX *mdctx; + }; + + struct ssh_digest { +@@ -106,20 +106,21 @@ + size_t + ssh_digest_blocksize(struct ssh_digest_ctx *ctx) + { +- return EVP_MD_CTX_block_size(&ctx->mdctx); ++ return EVP_MD_CTX_block_size(ctx->mdctx); + } + + struct ssh_digest_ctx * + ssh_digest_start(int alg) + { + const struct ssh_digest *digest = ssh_digest_by_alg(alg); +- struct ssh_digest_ctx *ret; ++ struct ssh_digest_ctx *ret = NULL; + + if (digest == NULL || ((ret = calloc(1, sizeof(*ret))) == NULL)) + return NULL; + ret->alg = alg; +- EVP_MD_CTX_init(&ret->mdctx); +- if (EVP_DigestInit_ex(&ret->mdctx, digest->mdfunc(), NULL) != 1) { ++ if ((ret->mdctx = EVP_MD_CTX_new()) == NULL || ++ EVP_DigestInit_ex(ret->mdctx, digest->mdfunc(), NULL) != 1) { ++ EVP_MD_CTX_free(ret->mdctx); + free(ret); + return NULL; + } +@@ -132,7 +133,7 @@ + if (from->alg != to->alg) + return SSH_ERR_INVALID_ARGUMENT; + /* we have bcopy-style order while openssl has memcpy-style */ +- if (!EVP_MD_CTX_copy_ex(&to->mdctx, &from->mdctx)) ++ if (!EVP_MD_CTX_copy_ex(to->mdctx, from->mdctx)) + return SSH_ERR_LIBCRYPTO_ERROR; + return 0; + } +@@ -140,7 +141,7 @@ + int + ssh_digest_update(struct ssh_digest_ctx *ctx, const void *m, size_t mlen) + { +- if (EVP_DigestUpdate(&ctx->mdctx, m, mlen) != 1) ++ if (EVP_DigestUpdate(ctx->mdctx, m, mlen) != 1) + return SSH_ERR_LIBCRYPTO_ERROR; + return 0; + } +@@ -161,7 +162,7 @@ + return SSH_ERR_INVALID_ARGUMENT; + if (dlen < digest->digest_len) /* No truncation allowed */ + return SSH_ERR_INVALID_ARGUMENT; +- if (EVP_DigestFinal_ex(&ctx->mdctx, d, &l) != 1) ++ if (EVP_DigestFinal_ex(ctx->mdctx, d, &l) != 1) + return SSH_ERR_LIBCRYPTO_ERROR; + if (l != digest->digest_len) /* sanity */ + return SSH_ERR_INTERNAL_ERROR; +@@ -172,7 +173,7 @@ + ssh_digest_free(struct ssh_digest_ctx *ctx) + { + if (ctx != NULL) { +- EVP_MD_CTX_cleanup(&ctx->mdctx); ++ EVP_MD_CTX_free(ctx->mdctx); + explicit_bzero(ctx, sizeof(*ctx)); + free(ctx); + } +diff -Naur old/kexdhc.c new/kexdhc.c +--- old/kexdhc.c 2017-10-03 21:49:05.373829169 -1000 ++++ new/kexdhc.c 2017-10-03 21:55:50.869718862 -1000 +@@ -81,11 +81,16 @@ + goto out; + } + debug("sending SSH2_MSG_KEXDH_INIT"); +- if ((r = dh_gen_key(kex->dh, kex->we_need * 8)) != 0 || +- (r = sshpkt_start(ssh, SSH2_MSG_KEXDH_INIT)) != 0 || +- (r = sshpkt_put_bignum2(ssh, kex->dh->pub_key)) != 0 || ++ { ++ const BIGNUM *pub_key; ++ if ((r = dh_gen_key(kex->dh, kex->we_need * 8)) != 0) ++ goto out; ++ DH_get0_key(kex->dh, &pub_key, NULL); ++ if ((r = sshpkt_start(ssh, SSH2_MSG_KEXDH_INIT)) != 0 || ++ (r = sshpkt_put_bignum2(ssh, pub_key)) != 0 || + (r = sshpkt_send(ssh)) != 0) + goto out; ++ } + #ifdef DEBUG_KEXDH + DHparams_print_fp(stderr, kex->dh); + fprintf(stderr, "pub= "); +@@ -169,6 +174,9 @@ + + /* calc and verify H */ + hashlen = sizeof(hash); ++ { ++ const BIGNUM *pub_key; ++ DH_get0_key(kex->dh, &pub_key, NULL); + if ((r = kex_dh_hash( + kex->hash_alg, + kex->client_version_string, +@@ -176,11 +184,13 @@ + sshbuf_ptr(kex->my), sshbuf_len(kex->my), + sshbuf_ptr(kex->peer), sshbuf_len(kex->peer), + server_host_key_blob, sbloblen, +- kex->dh->pub_key, ++ pub_key, + dh_server_pub, + shared_secret, +- hash, &hashlen)) != 0) ++ hash, &hashlen)) != 0) { + goto out; ++ } ++ } + + if ((r = sshkey_verify(server_host_key, signature, slen, hash, hashlen, + ssh->compat)) != 0) +diff -Naur old/kexdhs.c new/kexdhs.c +--- old/kexdhs.c 2017-10-03 21:49:05.373829169 -1000 ++++ new/kexdhs.c 2017-10-03 21:55:50.869718862 -1000 +@@ -87,6 +87,10 @@ + ssh_dispatch_set(ssh, SSH2_MSG_KEXDH_INIT, &input_kex_dh_init); + r = 0; + out: ++ if (r != 0) { ++ if (kex->dh) DH_free(kex->dh); ++ kex->dh = NULL; ++ } + return r; + } + +@@ -163,6 +167,9 @@ + goto out; + /* calc H */ + hashlen = sizeof(hash); ++ { ++ const BIGNUM *pub_key; ++ DH_get0_key(kex->dh, &pub_key, NULL); + if ((r = kex_dh_hash( + kex->hash_alg, + kex->client_version_string, +@@ -171,10 +178,12 @@ + sshbuf_ptr(kex->my), sshbuf_len(kex->my), + server_host_key_blob, sbloblen, + dh_client_pub, +- kex->dh->pub_key, ++ pub_key, + shared_secret, +- hash, &hashlen)) != 0) ++ hash, &hashlen)) != 0) { + goto out; ++ } ++ } + + /* save session id := H */ + if (kex->session_id == NULL) { +@@ -195,12 +204,17 @@ + /* destroy_sensitive_data(); */ + + /* send server hostkey, DH pubkey 'f' and singed H */ ++ { ++ const BIGNUM *pub_key; ++ DH_get0_key(kex->dh, &pub_key, NULL); + if ((r = sshpkt_start(ssh, SSH2_MSG_KEXDH_REPLY)) != 0 || + (r = sshpkt_put_string(ssh, server_host_key_blob, sbloblen)) != 0 || +- (r = sshpkt_put_bignum2(ssh, kex->dh->pub_key)) != 0 || /* f */ ++ (r = sshpkt_put_bignum2(ssh, pub_key)) != 0 || /* f */ + (r = sshpkt_put_string(ssh, signature, slen)) != 0 || +- (r = sshpkt_send(ssh)) != 0) ++ (r = sshpkt_send(ssh)) != 0) { + goto out; ++ } ++ } + + if ((r = kex_derive_keys_bn(ssh, hash, hashlen, shared_secret)) == 0) + r = kex_send_newkeys(ssh); +diff -Naur old/kexgexc.c new/kexgexc.c +--- old/kexgexc.c 2017-10-03 21:49:05.373829169 -1000 ++++ new/kexgexc.c 2017-10-03 21:55:50.869718862 -1000 +@@ -118,11 +118,17 @@ + p = g = NULL; /* belong to kex->dh now */ + + /* generate and send 'e', client DH public key */ +- if ((r = dh_gen_key(kex->dh, kex->we_need * 8)) != 0 || +- (r = sshpkt_start(ssh, SSH2_MSG_KEX_DH_GEX_INIT)) != 0 || +- (r = sshpkt_put_bignum2(ssh, kex->dh->pub_key)) != 0 || +- (r = sshpkt_send(ssh)) != 0) ++ { ++ const BIGNUM *pub_key; ++ if ((r = dh_gen_key(kex->dh, kex->we_need * 8)) != 0) ++ goto out; ++ DH_get0_key(kex->dh, &pub_key, NULL); ++ if ((r = sshpkt_start(ssh, SSH2_MSG_KEX_DH_GEX_INIT)) != 0 || ++ (r = sshpkt_put_bignum2(ssh, pub_key)) != 0 || ++ (r = sshpkt_send(ssh)) != 0) { + goto out; ++ } ++ } + debug("SSH2_MSG_KEX_DH_GEX_INIT sent"); + #ifdef DEBUG_KEXDH + DHparams_print_fp(stderr, kex->dh); +@@ -134,10 +140,12 @@ + ssh_dispatch_set(ssh, SSH2_MSG_KEX_DH_GEX_REPLY, &input_kex_dh_gex_reply); + r = 0; + out: +- if (p) ++ if (r != 0) { + BN_clear_free(p); +- if (g) + BN_clear_free(g); ++ DH_free(kex->dh); ++ kex->dh = NULL; ++ } + return r; + } + +@@ -214,6 +222,10 @@ + + /* calc and verify H */ + hashlen = sizeof(hash); ++ { ++ const BIGNUM *p, *g, *pub_key; ++ DH_get0_pqg(kex->dh, &p, NULL, &g); ++ DH_get0_key(kex->dh, &pub_key, NULL); + if ((r = kexgex_hash( + kex->hash_alg, + kex->client_version_string, +@@ -222,12 +234,14 @@ + sshbuf_ptr(kex->peer), sshbuf_len(kex->peer), + server_host_key_blob, sbloblen, + kex->min, kex->nbits, kex->max, +- kex->dh->p, kex->dh->g, +- kex->dh->pub_key, ++ p, g, ++ pub_key, + dh_server_pub, + shared_secret, +- hash, &hashlen)) != 0) ++ hash, &hashlen)) != 0) { + goto out; ++ } ++ } + + if ((r = sshkey_verify(server_host_key, signature, slen, hash, + hashlen, ssh->compat)) != 0) +diff -Naur old/kexgexs.c new/kexgexs.c +--- old/kexgexs.c 2017-10-03 21:49:05.373829169 -1000 ++++ new/kexgexs.c 2017-10-03 21:55:50.869718862 -1000 +@@ -101,11 +101,16 @@ + goto out; + } + debug("SSH2_MSG_KEX_DH_GEX_GROUP sent"); ++ { ++ const BIGNUM *p, *g; ++ DH_get0_pqg(kex->dh, &p, NULL, &g); + if ((r = sshpkt_start(ssh, SSH2_MSG_KEX_DH_GEX_GROUP)) != 0 || +- (r = sshpkt_put_bignum2(ssh, kex->dh->p)) != 0 || +- (r = sshpkt_put_bignum2(ssh, kex->dh->g)) != 0 || +- (r = sshpkt_send(ssh)) != 0) ++ (r = sshpkt_put_bignum2(ssh, p)) != 0 || ++ (r = sshpkt_put_bignum2(ssh, g)) != 0 || ++ (r = sshpkt_send(ssh)) != 0) { + goto out; ++ } ++ } + + /* Compute our exchange value in parallel with the client */ + if ((r = dh_gen_key(kex->dh, kex->we_need * 8)) != 0) +@@ -115,6 +120,10 @@ + ssh_dispatch_set(ssh, SSH2_MSG_KEX_DH_GEX_INIT, &input_kex_dh_gex_init); + r = 0; + out: ++ if (r != 0) { ++ DH_free(kex->dh); ++ kex->dh = NULL; ++ } + return r; + } + +@@ -191,6 +200,10 @@ + goto out; + /* calc H */ + hashlen = sizeof(hash); ++ { ++ const BIGNUM *p, *g, *pub_key; ++ DH_get0_pqg(kex->dh, &p, NULL, &g); ++ DH_get0_key(kex->dh, &pub_key, NULL); + if ((r = kexgex_hash( + kex->hash_alg, + kex->client_version_string, +@@ -199,12 +212,14 @@ + sshbuf_ptr(kex->my), sshbuf_len(kex->my), + server_host_key_blob, sbloblen, + kex->min, kex->nbits, kex->max, +- kex->dh->p, kex->dh->g, ++ p, g, + dh_client_pub, +- kex->dh->pub_key, ++ pub_key, + shared_secret, +- hash, &hashlen)) != 0) ++ hash, &hashlen)) != 0) { + goto out; ++ } ++ } + + /* save session id := H */ + if (kex->session_id == NULL) { +@@ -225,12 +240,17 @@ + /* destroy_sensitive_data(); */ + + /* send server hostkey, DH pubkey 'f' and singed H */ ++ { ++ const BIGNUM *pub_key; ++ DH_get0_key(kex->dh, &pub_key, NULL); + if ((r = sshpkt_start(ssh, SSH2_MSG_KEX_DH_GEX_REPLY)) != 0 || + (r = sshpkt_put_string(ssh, server_host_key_blob, sbloblen)) != 0 || +- (r = sshpkt_put_bignum2(ssh, kex->dh->pub_key)) != 0 || /* f */ ++ (r = sshpkt_put_bignum2(ssh, pub_key)) != 0 || /* f */ + (r = sshpkt_put_string(ssh, signature, slen)) != 0 || +- (r = sshpkt_send(ssh)) != 0) ++ (r = sshpkt_send(ssh)) != 0) { + goto out; ++ } ++ } + + if ((r = kex_derive_keys_bn(ssh, hash, hashlen, shared_secret)) == 0) + r = kex_send_newkeys(ssh); +diff -Naur old/monitor.c new/monitor.c +--- old/monitor.c 2017-10-03 21:49:05.377162302 -1000 ++++ new/monitor.c 2017-10-03 21:55:50.869718862 -1000 +@@ -586,10 +586,12 @@ + buffer_put_char(m, 0); + return (0); + } else { ++ const BIGNUM *p, *g; ++ DH_get0_pqg(dh, &p, NULL, &g); + /* Send first bignum */ + buffer_put_char(m, 1); +- buffer_put_bignum2(m, dh->p); +- buffer_put_bignum2(m, dh->g); ++ buffer_put_bignum2(m, p); ++ buffer_put_bignum2(m, g); + + DH_free(dh); + } +diff -Naur old/openbsd-compat/openssl-compat.c new/openbsd-compat/openssl-compat.c +--- old/openbsd-compat/openssl-compat.c 2017-10-03 21:49:05.397161097 -1000 ++++ new/openbsd-compat/openssl-compat.c 2017-10-03 21:55:50.886387486 -1000 +@@ -75,7 +75,6 @@ + /* Enable use of crypto hardware */ + ENGINE_load_builtin_engines(); + ENGINE_register_all_complete(); +- OPENSSL_config(NULL); + } + #endif + +diff -Naur old/regress/unittests/sshkey/test_file.c new/regress/unittests/sshkey/test_file.c +--- old/regress/unittests/sshkey/test_file.c 2017-10-03 21:49:05.387161699 -1000 ++++ new/regress/unittests/sshkey/test_file.c 2017-10-03 21:55:50.883053761 -1000 +@@ -60,9 +60,14 @@ + a = load_bignum("rsa_1.param.n"); + b = load_bignum("rsa_1.param.p"); + c = load_bignum("rsa_1.param.q"); +- ASSERT_BIGNUM_EQ(k1->rsa->n, a); +- ASSERT_BIGNUM_EQ(k1->rsa->p, b); +- ASSERT_BIGNUM_EQ(k1->rsa->q, c); ++ { ++ const BIGNUM *n, *p, *q; ++ RSA_get0_key(k1->rsa, &n, NULL, NULL); ++ RSA_get0_factors(k1->rsa, &p, &q); ++ ASSERT_BIGNUM_EQ(n, a); ++ ASSERT_BIGNUM_EQ(p, b); ++ ASSERT_BIGNUM_EQ(q, c); ++ } + BN_free(a); + BN_free(b); + BN_free(c); +@@ -151,9 +156,14 @@ + a = load_bignum("dsa_1.param.g"); + b = load_bignum("dsa_1.param.priv"); + c = load_bignum("dsa_1.param.pub"); +- ASSERT_BIGNUM_EQ(k1->dsa->g, a); +- ASSERT_BIGNUM_EQ(k1->dsa->priv_key, b); +- ASSERT_BIGNUM_EQ(k1->dsa->pub_key, c); ++ { ++ const BIGNUM *g, *priv_key, *pub_key; ++ DSA_get0_pqg(k1->dsa, NULL, NULL, &g); ++ DSA_get0_key(k1->dsa, &pub_key, &priv_key); ++ ASSERT_BIGNUM_EQ(g, a); ++ ASSERT_BIGNUM_EQ(priv_key, b); ++ ASSERT_BIGNUM_EQ(pub_key, c); ++ } + BN_free(a); + BN_free(b); + BN_free(c); +diff -Naur old/regress/unittests/sshkey/test_sshkey.c new/regress/unittests/sshkey/test_sshkey.c +--- old/regress/unittests/sshkey/test_sshkey.c 2017-10-03 21:49:05.387161699 -1000 ++++ new/regress/unittests/sshkey/test_sshkey.c 2017-10-03 21:55:50.883053761 -1000 +@@ -197,9 +197,14 @@ + k1 = sshkey_new(KEY_RSA); + ASSERT_PTR_NE(k1, NULL); + ASSERT_PTR_NE(k1->rsa, NULL); +- ASSERT_PTR_NE(k1->rsa->n, NULL); +- ASSERT_PTR_NE(k1->rsa->e, NULL); +- ASSERT_PTR_EQ(k1->rsa->p, NULL); ++ { ++ const BIGNUM *n, *e, *p; ++ RSA_get0_key(k1->rsa, &n, &e, NULL); ++ RSA_get0_factors(k1->rsa, &p, NULL); ++ ASSERT_PTR_NE(n, NULL); ++ ASSERT_PTR_NE(e, NULL); ++ ASSERT_PTR_EQ(p, NULL); ++ } + sshkey_free(k1); + TEST_DONE(); + +@@ -207,8 +212,13 @@ + k1 = sshkey_new(KEY_DSA); + ASSERT_PTR_NE(k1, NULL); + ASSERT_PTR_NE(k1->dsa, NULL); +- ASSERT_PTR_NE(k1->dsa->g, NULL); +- ASSERT_PTR_EQ(k1->dsa->priv_key, NULL); ++ { ++ const BIGNUM *g, *priv_key; ++ DSA_get0_pqg(k1->dsa, NULL, NULL, &g); ++ DSA_get0_key(k1->dsa, NULL, &priv_key); ++ ASSERT_PTR_NE(g, NULL); ++ ASSERT_PTR_EQ(priv_key, NULL); ++ } + sshkey_free(k1); + TEST_DONE(); + +@@ -234,9 +244,14 @@ + k1 = sshkey_new_private(KEY_RSA); + ASSERT_PTR_NE(k1, NULL); + ASSERT_PTR_NE(k1->rsa, NULL); +- ASSERT_PTR_NE(k1->rsa->n, NULL); +- ASSERT_PTR_NE(k1->rsa->e, NULL); +- ASSERT_PTR_NE(k1->rsa->p, NULL); ++ { ++ const BIGNUM *n, *e, *p; ++ RSA_get0_key(k1->rsa, &n, &e, NULL); ++ RSA_get0_factors(k1->rsa, &p, NULL); ++ ASSERT_PTR_NE(n, NULL); ++ ASSERT_PTR_NE(e, NULL); ++ ASSERT_PTR_NE(p, NULL); ++ } + ASSERT_INT_EQ(sshkey_add_private(k1), 0); + sshkey_free(k1); + TEST_DONE(); +@@ -245,8 +260,13 @@ + k1 = sshkey_new_private(KEY_DSA); + ASSERT_PTR_NE(k1, NULL); + ASSERT_PTR_NE(k1->dsa, NULL); +- ASSERT_PTR_NE(k1->dsa->g, NULL); +- ASSERT_PTR_NE(k1->dsa->priv_key, NULL); ++ { ++ const BIGNUM *g, *priv_key; ++ DSA_get0_pqg(k1->dsa, NULL, NULL, &g); ++ DSA_get0_key(k1->dsa, NULL, &priv_key); ++ ASSERT_PTR_NE(g, NULL); ++ ASSERT_PTR_NE(priv_key, NULL); ++ } + ASSERT_INT_EQ(sshkey_add_private(k1), 0); + sshkey_free(k1); + TEST_DONE(); +@@ -285,18 +305,28 @@ + ASSERT_INT_EQ(sshkey_generate(KEY_RSA, 1024, &kr), 0); + ASSERT_PTR_NE(kr, NULL); + ASSERT_PTR_NE(kr->rsa, NULL); +- ASSERT_PTR_NE(kr->rsa->n, NULL); +- ASSERT_PTR_NE(kr->rsa->e, NULL); +- ASSERT_PTR_NE(kr->rsa->p, NULL); +- ASSERT_INT_EQ(BN_num_bits(kr->rsa->n), 1024); ++ { ++ const BIGNUM *n, *e, *p; ++ RSA_get0_key(kr->rsa, &n, &e, NULL); ++ RSA_get0_factors(kr->rsa, &p, NULL); ++ ASSERT_PTR_NE(n, NULL); ++ ASSERT_PTR_NE(e, NULL); ++ ASSERT_PTR_NE(p, NULL); ++ ASSERT_INT_EQ(BN_num_bits(n), 1024); ++ } + TEST_DONE(); + + TEST_START("generate KEY_DSA"); + ASSERT_INT_EQ(sshkey_generate(KEY_DSA, 1024, &kd), 0); + ASSERT_PTR_NE(kd, NULL); + ASSERT_PTR_NE(kd->dsa, NULL); +- ASSERT_PTR_NE(kd->dsa->g, NULL); +- ASSERT_PTR_NE(kd->dsa->priv_key, NULL); ++ { ++ const BIGNUM *g, *priv_key; ++ DSA_get0_pqg(kd->dsa, NULL, NULL, &g); ++ DSA_get0_key(kd->dsa, NULL, &priv_key); ++ ASSERT_PTR_NE(g, NULL); ++ ASSERT_PTR_NE(priv_key, NULL); ++ } + TEST_DONE(); + + #ifdef OPENSSL_HAS_ECC +@@ -323,9 +353,14 @@ + ASSERT_PTR_NE(kr, k1); + ASSERT_INT_EQ(k1->type, KEY_RSA); + ASSERT_PTR_NE(k1->rsa, NULL); +- ASSERT_PTR_NE(k1->rsa->n, NULL); +- ASSERT_PTR_NE(k1->rsa->e, NULL); +- ASSERT_PTR_EQ(k1->rsa->p, NULL); ++ { ++ const BIGNUM *n, *e, *p; ++ RSA_get0_key(k1->rsa, &n, &e, NULL); ++ RSA_get0_factors(k1->rsa, &p, NULL); ++ ASSERT_PTR_NE(n, NULL); ++ ASSERT_PTR_NE(e, NULL); ++ ASSERT_PTR_EQ(p, NULL); ++ } + TEST_DONE(); + + TEST_START("equal KEY_RSA/demoted KEY_RSA"); +@@ -339,8 +374,13 @@ + ASSERT_PTR_NE(kd, k1); + ASSERT_INT_EQ(k1->type, KEY_DSA); + ASSERT_PTR_NE(k1->dsa, NULL); +- ASSERT_PTR_NE(k1->dsa->g, NULL); +- ASSERT_PTR_EQ(k1->dsa->priv_key, NULL); ++ { ++ const BIGNUM *g, *priv_key; ++ DSA_get0_pqg(k1->dsa, NULL, NULL, &g); ++ DSA_get0_key(k1->dsa, NULL, &priv_key); ++ ASSERT_PTR_NE(g, NULL); ++ ASSERT_PTR_EQ(priv_key, NULL); ++ } + TEST_DONE(); + + TEST_START("equal KEY_DSA/demoted KEY_DSA"); +diff -Naur old/ssh-dss.c new/ssh-dss.c +--- old/ssh-dss.c 2017-10-03 21:49:05.403827361 -1000 ++++ new/ssh-dss.c 2017-10-03 21:55:50.869718862 -1000 +@@ -53,6 +53,7 @@ + DSA_SIG *sig = NULL; + u_char digest[SSH_DIGEST_MAX_LENGTH], sigblob[SIGBLOB_LEN]; + size_t rlen, slen, len, dlen = ssh_digest_bytes(SSH_DIGEST_SHA1); ++ const BIGNUM *r, *s; + struct sshbuf *b = NULL; + int ret = SSH_ERR_INVALID_ARGUMENT; + +@@ -76,15 +77,16 @@ + goto out; + } + +- rlen = BN_num_bytes(sig->r); +- slen = BN_num_bytes(sig->s); ++ DSA_SIG_get0(sig, &r, &s); ++ rlen = BN_num_bytes(r); ++ slen = BN_num_bytes(s); + if (rlen > INTBLOB_LEN || slen > INTBLOB_LEN) { + ret = SSH_ERR_INTERNAL_ERROR; + goto out; + } + explicit_bzero(sigblob, SIGBLOB_LEN); +- BN_bn2bin(sig->r, sigblob + SIGBLOB_LEN - INTBLOB_LEN - rlen); +- BN_bn2bin(sig->s, sigblob + SIGBLOB_LEN - slen); ++ BN_bn2bin(r, sigblob + SIGBLOB_LEN - INTBLOB_LEN - rlen); ++ BN_bn2bin(s, sigblob + SIGBLOB_LEN - slen); + + if (compat & SSH_BUG_SIGBLOB) { + if (sigp != NULL) { +@@ -176,17 +178,26 @@ + } + + /* parse signature */ ++ { ++ BIGNUM *r=NULL, *s=NULL; + if ((sig = DSA_SIG_new()) == NULL || +- (sig->r = BN_new()) == NULL || +- (sig->s = BN_new()) == NULL) { ++ (r = BN_new()) == NULL || ++ (s = BN_new()) == NULL) { + ret = SSH_ERR_ALLOC_FAIL; ++ BN_free(r); ++ BN_free(s); + goto out; + } +- if ((BN_bin2bn(sigblob, INTBLOB_LEN, sig->r) == NULL) || +- (BN_bin2bn(sigblob+ INTBLOB_LEN, INTBLOB_LEN, sig->s) == NULL)) { ++ if ((BN_bin2bn(sigblob, INTBLOB_LEN, r) == NULL) || ++ (BN_bin2bn(sigblob+ INTBLOB_LEN, INTBLOB_LEN, s) == NULL)) { + ret = SSH_ERR_LIBCRYPTO_ERROR; ++ BN_free(r); ++ BN_free(s); + goto out; + } ++ DSA_SIG_set0(sig, r, s); ++ r = s = NULL; ++ } + + /* sha1 the data */ + if ((ret = ssh_digest_memory(SSH_DIGEST_SHA1, data, datalen, +diff -Naur old/ssh-ecdsa.c new/ssh-ecdsa.c +--- old/ssh-ecdsa.c 2017-10-03 21:49:05.403827361 -1000 ++++ new/ssh-ecdsa.c 2017-10-03 21:55:50.869718862 -1000 +@@ -80,9 +80,14 @@ + ret = SSH_ERR_ALLOC_FAIL; + goto out; + } +- if ((ret = sshbuf_put_bignum2(bb, sig->r)) != 0 || +- (ret = sshbuf_put_bignum2(bb, sig->s)) != 0) ++ { ++ const BIGNUM *r, *s; ++ ECDSA_SIG_get0(sig, &r, &s); ++ if ((ret = sshbuf_put_bignum2(bb, r)) != 0 || ++ (ret = sshbuf_put_bignum2(bb, s)) != 0) { + goto out; ++ } ++ } + if ((ret = sshbuf_put_cstring(b, sshkey_ssh_name_plain(key))) != 0 || + (ret = sshbuf_put_stringb(b, bb)) != 0) + goto out; +@@ -151,11 +156,27 @@ + ret = SSH_ERR_ALLOC_FAIL; + goto out; + } +- if (sshbuf_get_bignum2(sigbuf, sig->r) != 0 || +- sshbuf_get_bignum2(sigbuf, sig->s) != 0) { ++ { ++ BIGNUM *r=NULL, *s=NULL; ++ if ((r = BN_new()) == NULL || ++ (s = BN_new()) == NULL) { ++ ret = SSH_ERR_ALLOC_FAIL; ++ goto out_rs; ++ } ++ if (sshbuf_get_bignum2(sigbuf, r) != 0 || ++ sshbuf_get_bignum2(sigbuf, s) != 0) { + ret = SSH_ERR_INVALID_FORMAT; ++ goto out_rs; ++ } ++ if (ECDSA_SIG_set0(sig, r, s) == 0) { ++ ret = SSH_ERR_LIBCRYPTO_ERROR; ++out_rs: ++ BN_free(r); ++ BN_free(s); + goto out; + } ++ r = s = NULL; ++ } + if (sshbuf_len(sigbuf) != 0) { + ret = SSH_ERR_UNEXPECTED_TRAILING_DATA; + goto out; +diff -Naur old/ssh-keygen.c new/ssh-keygen.c +--- old/ssh-keygen.c 2017-10-03 21:49:05.403827361 -1000 ++++ new/ssh-keygen.c 2017-10-03 21:55:50.869718862 -1000 +@@ -496,11 +496,33 @@ + + switch (key->type) { + case KEY_DSA: +- buffer_get_bignum_bits(b, key->dsa->p); +- buffer_get_bignum_bits(b, key->dsa->g); +- buffer_get_bignum_bits(b, key->dsa->q); +- buffer_get_bignum_bits(b, key->dsa->pub_key); +- buffer_get_bignum_bits(b, key->dsa->priv_key); ++ { ++ BIGNUM *p=NULL, *g=NULL, *q=NULL, *pub_key=NULL, *priv_key=NULL; ++ if ((p=BN_new()) == NULL || ++ (g=BN_new()) == NULL || ++ (q=BN_new()) == NULL || ++ (pub_key=BN_new()) == NULL || ++ (priv_key=BN_new()) == NULL) { ++ BN_free(p); ++ BN_free(g); ++ BN_free(q); ++ BN_free(pub_key); ++ BN_free(priv_key); ++ return NULL; ++ } ++ buffer_get_bignum_bits(b, p); ++ buffer_get_bignum_bits(b, g); ++ buffer_get_bignum_bits(b, q); ++ buffer_get_bignum_bits(b, pub_key); ++ buffer_get_bignum_bits(b, priv_key); ++ if (DSA_set0_pqg(key->dsa, p, q, g) == 0 || ++ DSA_set0_key(key->dsa, pub_key, priv_key) == 0) { ++ fatal("failed to set DSA key"); ++ BN_free(p); BN_free(g); BN_free(q); ++ BN_free(pub_key); BN_free(priv_key); ++ return NULL; ++ } ++ } + break; + case KEY_RSA: + if ((r = sshbuf_get_u8(b, &e1)) != 0 || +@@ -517,16 +539,52 @@ + e += e3; + debug("e %lx", e); + } +- if (!BN_set_word(key->rsa->e, e)) { ++ { ++ BIGNUM *rsa_e = NULL; ++ BIGNUM *d=NULL, *n=NULL, *iqmp=NULL, *q=NULL, *p=NULL; ++ BIGNUM *dmp1=NULL, *dmq1=NULL; /* dummy input to set in RSA_set0_crt_params */ ++ rsa_e = BN_new(); ++ if (!rsa_e || !BN_set_word(rsa_e, e)) { ++ if (rsa_e) BN_free(rsa_e); + sshbuf_free(b); + sshkey_free(key); + return NULL; + } +- buffer_get_bignum_bits(b, key->rsa->d); +- buffer_get_bignum_bits(b, key->rsa->n); +- buffer_get_bignum_bits(b, key->rsa->iqmp); +- buffer_get_bignum_bits(b, key->rsa->q); +- buffer_get_bignum_bits(b, key->rsa->p); ++ if ((d=BN_new()) == NULL || ++ (n=BN_new()) == NULL || ++ (iqmp=BN_new()) == NULL || ++ (q=BN_new()) == NULL || ++ (p=BN_new()) == NULL || ++ (dmp1=BN_new()) == NULL || ++ (dmq1=BN_new()) == NULL) { ++ BN_free(d); BN_free(n); BN_free(iqmp); ++ BN_free(q); BN_free(p); ++ BN_free(dmp1); BN_free(dmq1); ++ return NULL; ++ } ++ BN_clear(dmp1); BN_clear(dmq1); ++ buffer_get_bignum_bits(b, d); ++ buffer_get_bignum_bits(b, n); ++ buffer_get_bignum_bits(b, iqmp); ++ buffer_get_bignum_bits(b, q); ++ buffer_get_bignum_bits(b, p); ++ if (RSA_set0_key(key->rsa, n, rsa_e, d) == 0) ++ goto null; ++ n = d = NULL; ++ if (RSA_set0_factors(key->rsa, p, q) == 0) ++ goto null; ++ p = q = NULL; ++ /* dmp1, dmq1 should not be NULL for initial set0 */ ++ if (RSA_set0_crt_params(key->rsa, dmp1, dmq1, iqmp) == 0) { ++ null: ++ fatal("Failed to set RSA parameters"); ++ BN_free(d); BN_free(n); BN_free(iqmp); ++ BN_free(q); BN_free(p); ++ BN_free(dmp1); BN_free(dmq1); ++ return NULL; ++ } ++ dmp1 = dmq1 = iqmp = NULL; ++ } + if ((r = ssh_rsa_generate_additional_parameters(key)) != 0) + fatal("generate RSA parameters failed: %s", ssh_err(r)); + break; +@@ -636,7 +694,7 @@ + identity_file); + } + fclose(fp); +- switch (EVP_PKEY_type(pubkey->type)) { ++ switch (EVP_PKEY_type(EVP_PKEY_id(pubkey))) { + case EVP_PKEY_RSA: + if ((*k = sshkey_new(KEY_UNSPEC)) == NULL) + fatal("sshkey_new failed"); +@@ -660,7 +718,7 @@ + #endif + default: + fatal("%s: unsupported pubkey type %d", __func__, +- EVP_PKEY_type(pubkey->type)); ++ EVP_PKEY_type(EVP_PKEY_id(pubkey))); + } + EVP_PKEY_free(pubkey); + return; +diff -Naur old/ssh-pkcs11-client.c new/ssh-pkcs11-client.c +--- old/ssh-pkcs11-client.c 2017-10-03 21:49:05.403827361 -1000 ++++ new/ssh-pkcs11-client.c 2017-10-03 21:55:50.869718862 -1000 +@@ -143,12 +143,13 @@ + static int + wrap_key(RSA *rsa) + { +- static RSA_METHOD helper_rsa; ++ static RSA_METHOD *helper_rsa; + +- memcpy(&helper_rsa, RSA_get_default_method(), sizeof(helper_rsa)); +- helper_rsa.name = "ssh-pkcs11-helper"; +- helper_rsa.rsa_priv_enc = pkcs11_rsa_private_encrypt; +- RSA_set_method(rsa, &helper_rsa); ++ if ((helper_rsa = RSA_meth_dup(RSA_get_default_method())) == NULL) ++ return (-1); /* XXX but caller isn't checking */ ++ RSA_meth_set1_name(helper_rsa, "ssh-pkcs11-helper"); ++ RSA_meth_set_priv_enc(helper_rsa, pkcs11_rsa_private_encrypt); ++ RSA_set_method(rsa, helper_rsa); + return (0); + } + +diff -Naur old/ssh-pkcs11.c new/ssh-pkcs11.c +--- old/ssh-pkcs11.c 2017-10-03 21:49:05.403827361 -1000 ++++ new/ssh-pkcs11.c 2017-10-03 21:55:50.869718862 -1000 +@@ -67,7 +67,7 @@ + struct pkcs11_provider *provider; + CK_ULONG slotidx; + int (*orig_finish)(RSA *rsa); +- RSA_METHOD rsa_method; ++ RSA_METHOD *rsa_method; + char *keyid; + int keyid_len; + }; +@@ -326,13 +326,15 @@ + k11->keyid = xmalloc(k11->keyid_len); + memcpy(k11->keyid, keyid_attrib->pValue, k11->keyid_len); + } +- k11->orig_finish = def->finish; +- memcpy(&k11->rsa_method, def, sizeof(k11->rsa_method)); +- k11->rsa_method.name = "pkcs11"; +- k11->rsa_method.rsa_priv_enc = pkcs11_rsa_private_encrypt; +- k11->rsa_method.rsa_priv_dec = pkcs11_rsa_private_decrypt; +- k11->rsa_method.finish = pkcs11_rsa_finish; +- RSA_set_method(rsa, &k11->rsa_method); ++ k11->orig_finish = RSA_meth_get_finish(def); ++ ++ if ((k11->rsa_method = RSA_meth_new("pkcs11", RSA_meth_get_flags(def))) == NULL) ++ return -1; ++ RSA_meth_set_priv_enc(k11->rsa_method, pkcs11_rsa_private_encrypt); ++ RSA_meth_set_priv_dec(k11->rsa_method, pkcs11_rsa_private_decrypt); ++ RSA_meth_set_finish(k11->rsa_method, pkcs11_rsa_finish); ++ ++ RSA_set_method(rsa, k11->rsa_method); + RSA_set_app_data(rsa, k11); + return (0); + } +@@ -512,10 +514,19 @@ + if ((rsa = RSA_new()) == NULL) { + error("RSA_new failed"); + } else { +- rsa->n = BN_bin2bn(attribs[1].pValue, +- attribs[1].ulValueLen, NULL); +- rsa->e = BN_bin2bn(attribs[2].pValue, +- attribs[2].ulValueLen, NULL); ++ BIGNUM *n=NULL, *e=NULL; ++ n = BN_new(); ++ e = BN_new(); ++ if (n == NULL || e == NULL) ++ error("BN_new alloc failed"); ++ if (BN_bin2bn(attribs[1].pValue, ++ attribs[1].ulValueLen, n) == NULL || ++ BN_bin2bn(attribs[2].pValue, ++ attribs[2].ulValueLen, e) == NULL) ++ error("BN_bin2bn failed"); ++ if (RSA_set0_key(rsa, n, e, NULL) == 0) ++ error("RSA_set0_key failed"); ++ n = e = NULL; + } + } else { + cp = attribs[2].pValue; +@@ -525,17 +536,20 @@ + == NULL) { + error("d2i_X509 failed"); + } else if ((evp = X509_get_pubkey(x509)) == NULL || +- evp->type != EVP_PKEY_RSA || +- evp->pkey.rsa == NULL) { ++ EVP_PKEY_id(evp) != EVP_PKEY_RSA || ++ EVP_PKEY_get0_RSA(evp) == NULL) { + debug("X509_get_pubkey failed or no rsa"); +- } else if ((rsa = RSAPublicKey_dup(evp->pkey.rsa)) ++ } else if ((rsa = RSAPublicKey_dup(EVP_PKEY_get0_RSA(evp))) + == NULL) { + error("RSAPublicKey_dup"); + } + if (x509) + X509_free(x509); + } +- if (rsa && rsa->n && rsa->e && ++ { ++ const BIGNUM *n, *e; ++ RSA_get0_key(rsa, &n, &e, NULL); ++ if (rsa && n && e && + pkcs11_rsa_wrap(p, slotidx, &attribs[0], rsa) == 0) { + if ((key = sshkey_new(KEY_UNSPEC)) == NULL) + fatal("sshkey_new failed"); +@@ -555,6 +569,7 @@ + } else if (rsa) { + RSA_free(rsa); + } ++ } + for (i = 0; i < 3; i++) + free(attribs[i].pValue); + } +diff -Naur old/ssh-rsa.c new/ssh-rsa.c +--- old/ssh-rsa.c 2017-10-03 21:49:05.403827361 -1000 ++++ new/ssh-rsa.c 2017-10-03 22:06:32.005937158 -1000 +@@ -99,13 +99,27 @@ + } + rsa = key->rsa; + +- if ((BN_sub(aux, rsa->q, BN_value_one()) == 0) || +- (BN_mod(rsa->dmq1, rsa->d, aux, ctx) == 0) || +- (BN_sub(aux, rsa->p, BN_value_one()) == 0) || +- (BN_mod(rsa->dmp1, rsa->d, aux, ctx) == 0)) { ++ { ++ const BIGNUM *q, *d, *p; ++ BIGNUM *dmq1=NULL, *dmp1=NULL; ++ if ((dmq1 = BN_new()) == NULL || ++ (dmp1 = BN_new()) == NULL ) { ++ r = SSH_ERR_ALLOC_FAIL; ++ goto out; ++ } ++ RSA_get0_key(rsa, NULL, NULL, &d); ++ RSA_get0_factors(rsa, &p, &q); ++ if ((BN_sub(aux, q, BN_value_one()) == 0) || ++ (BN_mod(dmq1, d, aux, ctx) == 0) || ++ (BN_sub(aux, p, BN_value_one()) == 0) || ++ (BN_mod(dmp1, d, aux, ctx) == 0) || ++ RSA_set0_crt_params(rsa, dmp1, dmq1, NULL) == 0) { + r = SSH_ERR_LIBCRYPTO_ERROR; ++ BN_clear_free(dmp1); ++ BN_clear_free(dmq1); + goto out; + } ++ } + r = 0; + out: + BN_clear_free(aux); +@@ -136,7 +150,7 @@ + if (key == NULL || key->rsa == NULL || hash_alg == -1 || + sshkey_type_plain(key->type) != KEY_RSA) + return SSH_ERR_INVALID_ARGUMENT; +- if (BN_num_bits(key->rsa->n) < SSH_RSA_MINIMUM_MODULUS_SIZE) ++ if (RSA_bits(key->rsa) < SSH_RSA_MINIMUM_MODULUS_SIZE) + return SSH_ERR_KEY_LENGTH; + slen = RSA_size(key->rsa); + if (slen <= 0 || slen > SSHBUF_MAX_BIGNUM) +@@ -210,7 +224,7 @@ + sshkey_type_plain(key->type) != KEY_RSA || + sig == NULL || siglen == 0) + return SSH_ERR_INVALID_ARGUMENT; +- if (BN_num_bits(key->rsa->n) < SSH_RSA_MINIMUM_MODULUS_SIZE) ++ if (RSA_bits(key->rsa) < SSH_RSA_MINIMUM_MODULUS_SIZE) + return SSH_ERR_KEY_LENGTH; + + if ((b = sshbuf_from(sig, siglen)) == NULL) +diff -Naur old/sshkey.c new/sshkey.c +--- old/sshkey.c 2017-10-03 21:49:05.407160494 -1000 ++++ new/sshkey.c 2017-10-03 22:16:31.124964276 -1000 +@@ -264,10 +264,18 @@ + #ifdef WITH_OPENSSL + case KEY_RSA: + case KEY_RSA_CERT: +- return BN_num_bits(k->rsa->n); ++#if OPENSSL_VERSION_NUMBER >= 0x10100000UL ++ return RSA_bits(k->rsa); ++#else ++ return RSA_bits(key->rsa); ++#endif + case KEY_DSA: + case KEY_DSA_CERT: ++#if OPENSSL_VERSION_NUMBER >= 0x10100000UL ++ return DSA_bits(k->dsa); ++#else + return BN_num_bits(k->dsa->p); ++#endif + case KEY_ECDSA: + case KEY_ECDSA_CERT: + return sshkey_curve_nid_to_bits(k->ecdsa_nid); +@@ -466,28 +474,55 @@ + #ifdef WITH_OPENSSL + case KEY_RSA: + case KEY_RSA_CERT: ++ { ++ BIGNUM *n=NULL, *e=NULL; /* just allocate */ + if ((rsa = RSA_new()) == NULL || +- (rsa->n = BN_new()) == NULL || +- (rsa->e = BN_new()) == NULL) { ++ (n = BN_new()) == NULL || ++ (e = BN_new()) == NULL) { ++ BN_free(n); ++ BN_free(e); + if (rsa != NULL) + RSA_free(rsa); + free(k); + return NULL; + } ++ BN_clear(n); BN_clear(e); ++ if (RSA_set0_key(rsa, n, e, NULL) == 0) ++ return NULL; ++ n = e = NULL; ++ } + k->rsa = rsa; + break; + case KEY_DSA: + case KEY_DSA_CERT: ++ { ++ BIGNUM *p=NULL, *q=NULL, *g=NULL, *pubkey=NULL; /* just allocate */ + if ((dsa = DSA_new()) == NULL || +- (dsa->p = BN_new()) == NULL || +- (dsa->q = BN_new()) == NULL || +- (dsa->g = BN_new()) == NULL || +- (dsa->pub_key = BN_new()) == NULL) { ++ (p = BN_new()) == NULL || ++ (q = BN_new()) == NULL || ++ (g = BN_new()) == NULL || ++ (pubkey = BN_new()) == NULL) { ++ BN_free(p); ++ BN_free(q); ++ BN_free(g); ++ BN_free(pubkey); + if (dsa != NULL) + DSA_free(dsa); + free(k); + return NULL; + } ++ if (DSA_set0_pqg(dsa, p, q, g) == 0) { ++ BN_free(p); BN_free(q); BN_free(g); ++ BN_free(pubkey); ++ return NULL; ++ } ++ p = q = g = NULL; ++ if (DSA_set0_key(dsa, pubkey, NULL) == 0) { ++ BN_free(pubkey); ++ return NULL; ++ } ++ pubkey = NULL; ++ } + k->dsa = dsa; + break; + case KEY_ECDSA: +@@ -523,6 +558,51 @@ + #ifdef WITH_OPENSSL + case KEY_RSA: + case KEY_RSA_CERT: ++#if OPENSSL_VERSION_NUMBER >= 0x10100000UL ++ /* Allocate BIGNUM. This is a mess. ++ For OpenSSL 1.1.x API these shouldn't be mandatory, ++ but some regression tests for non-NULL pointer of ++ the data. */ ++#define new_or_dup(bn, nbn) \ ++ if (bn == NULL) { \ ++ if ((nbn = BN_new()) == NULL) \ ++ return SSH_ERR_ALLOC_FAIL; \ ++ } else { \ ++ /* otherwise use-after-free will occur */ \ ++ if ((nbn = BN_dup(bn)) == NULL) \ ++ return SSH_ERR_ALLOC_FAIL; \ ++ } ++ { ++ const BIGNUM *d, *iqmp, *q, *p, *dmq1, *dmp1; /* allocate if NULL */ ++ BIGNUM *nd, *niqmp, *nq, *np, *ndmq1, *ndmp1; ++ ++ RSA_get0_key(k->rsa, NULL, NULL, &d); ++ RSA_get0_factors(k->rsa, &p, &q); ++ RSA_get0_crt_params(k->rsa, &dmp1, &dmq1, &iqmp); ++ ++ new_or_dup(d, nd); ++ new_or_dup(iqmp, niqmp); ++ new_or_dup(q, nq); ++ new_or_dup(p, np); ++ new_or_dup(dmq1, ndmq1); ++ new_or_dup(dmp1, ndmp1); ++ ++ if (RSA_set0_key(k->rsa, NULL, NULL, nd) == 0) ++ goto error1; ++ nd = NULL; ++ if (RSA_set0_factors(k->rsa, np, nq) == 0) ++ goto error1; ++ np = nq = NULL; ++ if (RSA_set0_crt_params(k->rsa, ndmp1, ndmq1, niqmp) == 0) { ++error1: ++ BN_free(nd); ++ BN_free(np); BN_free(nq); ++ BN_free(ndmp1); BN_free(ndmq1); BN_free(niqmp); ++ return SSH_ERR_LIBCRYPTO_ERROR; ++ } ++ ndmp1 = ndmq1 = niqmp = NULL; ++ } ++#else + #define bn_maybe_alloc_failed(p) (p == NULL && (p = BN_new()) == NULL) + if (bn_maybe_alloc_failed(k->rsa->d) || + bn_maybe_alloc_failed(k->rsa->iqmp) || +@@ -531,13 +611,28 @@ + bn_maybe_alloc_failed(k->rsa->dmq1) || + bn_maybe_alloc_failed(k->rsa->dmp1)) + return SSH_ERR_ALLOC_FAIL; ++#endif + break; + case KEY_DSA: + case KEY_DSA_CERT: ++#if OPENSSL_VERSION_NUMBER >= 0x10100000UL ++ { ++ const BIGNUM *priv_key; ++ BIGNUM *npriv_key; ++ DSA_get0_key(k->dsa, NULL, &priv_key); ++ new_or_dup(priv_key, npriv_key); ++ if (DSA_set0_key(k->dsa, NULL, npriv_key) == 0) { ++ BN_free(npriv_key); ++ return SSH_ERR_LIBCRYPTO_ERROR; ++ } ++ } ++#else + if (bn_maybe_alloc_failed(k->dsa->priv_key)) + return SSH_ERR_ALLOC_FAIL; ++#endif + break; + #undef bn_maybe_alloc_failed ++#undef new_or_dup + case KEY_ECDSA: + case KEY_ECDSA_CERT: + /* Cannot do anything until we know the group */ +@@ -655,16 +750,34 @@ + #ifdef WITH_OPENSSL + case KEY_RSA_CERT: + case KEY_RSA: +- return a->rsa != NULL && b->rsa != NULL && +- BN_cmp(a->rsa->e, b->rsa->e) == 0 && +- BN_cmp(a->rsa->n, b->rsa->n) == 0; ++ { ++ const BIGNUM *a_e, *b_e, *a_n, *b_n; ++ const BIGNUM *a_d, *b_d; ++ if (a->rsa == NULL) return 0; ++ if (b->rsa == NULL) return 0; ++ RSA_get0_key(a->rsa, &a_n, &a_e, &a_d); ++ RSA_get0_key(b->rsa, &b_n, &b_e, &b_d); ++ return ++ BN_cmp(a_e, b_e) == 0 && ++ BN_cmp(a_n, b_n) == 0; ++ } + case KEY_DSA_CERT: + case KEY_DSA: +- return a->dsa != NULL && b->dsa != NULL && +- BN_cmp(a->dsa->p, b->dsa->p) == 0 && +- BN_cmp(a->dsa->q, b->dsa->q) == 0 && +- BN_cmp(a->dsa->g, b->dsa->g) == 0 && +- BN_cmp(a->dsa->pub_key, b->dsa->pub_key) == 0; ++ { ++ const BIGNUM *a_p, *a_q, *a_g, *a_pub_key; ++ const BIGNUM *b_p, *b_q, *b_g, *b_pub_key; ++ if (a->dsa == NULL) return 0; ++ if (b->dsa == NULL) return 0; ++ DSA_get0_pqg(a->dsa, &a_p, &a_q, &a_g); ++ DSA_get0_pqg(b->dsa, &b_p, &b_q, &b_g); ++ DSA_get0_key(a->dsa, &a_pub_key, NULL); ++ DSA_get0_key(b->dsa, &b_pub_key, NULL); ++ return ++ BN_cmp(a_p, b_p) == 0 && ++ BN_cmp(a_q, b_q) == 0 && ++ BN_cmp(a_g, b_g) == 0 && ++ BN_cmp(a_pub_key, b_pub_key) == 0; ++ } + # ifdef OPENSSL_HAS_ECC + case KEY_ECDSA_CERT: + case KEY_ECDSA: +@@ -742,12 +855,17 @@ + case KEY_DSA: + if (key->dsa == NULL) + return SSH_ERR_INVALID_ARGUMENT; ++ { ++ const BIGNUM *p, *q, *g, *pub_key; ++ DSA_get0_pqg(key->dsa, &p, &q, &g); ++ DSA_get0_key(key->dsa, &pub_key, NULL); + if ((ret = sshbuf_put_cstring(b, typename)) != 0 || +- (ret = sshbuf_put_bignum2(b, key->dsa->p)) != 0 || +- (ret = sshbuf_put_bignum2(b, key->dsa->q)) != 0 || +- (ret = sshbuf_put_bignum2(b, key->dsa->g)) != 0 || +- (ret = sshbuf_put_bignum2(b, key->dsa->pub_key)) != 0) ++ (ret = sshbuf_put_bignum2(b, p)) != 0 || ++ (ret = sshbuf_put_bignum2(b, q)) != 0 || ++ (ret = sshbuf_put_bignum2(b, g)) != 0 || ++ (ret = sshbuf_put_bignum2(b, pub_key)) != 0) + return ret; ++ } + break; + # ifdef OPENSSL_HAS_ECC + case KEY_ECDSA: +@@ -763,10 +881,14 @@ + case KEY_RSA: + if (key->rsa == NULL) + return SSH_ERR_INVALID_ARGUMENT; ++ { ++ const BIGNUM *e, *n; ++ RSA_get0_key(key->rsa, &n, &e, NULL); + if ((ret = sshbuf_put_cstring(b, typename)) != 0 || +- (ret = sshbuf_put_bignum2(b, key->rsa->e)) != 0 || +- (ret = sshbuf_put_bignum2(b, key->rsa->n)) != 0) ++ (ret = sshbuf_put_bignum2(b, e)) != 0 || ++ (ret = sshbuf_put_bignum2(b, n)) != 0) + return ret; ++ } + break; + #endif /* WITH_OPENSSL */ + case KEY_ED25519: +@@ -1643,13 +1765,32 @@ + case KEY_DSA_CERT: + if ((n = sshkey_new(k->type)) == NULL) + return SSH_ERR_ALLOC_FAIL; +- if ((BN_copy(n->dsa->p, k->dsa->p) == NULL) || +- (BN_copy(n->dsa->q, k->dsa->q) == NULL) || +- (BN_copy(n->dsa->g, k->dsa->g) == NULL) || +- (BN_copy(n->dsa->pub_key, k->dsa->pub_key) == NULL)) { ++ { ++ const BIGNUM *p, *q, *g, *pub_key, *priv_key; ++ BIGNUM *cp=NULL, *cq=NULL, *cg=NULL, *cpub_key=NULL; ++ DSA_get0_pqg(k->dsa, &p, &q, &g); ++ DSA_get0_key(k->dsa, &pub_key, &priv_key); ++ if ((cp = BN_dup(p)) == NULL || ++ (cq = BN_dup(q)) == NULL || ++ (cg = BN_dup(g)) == NULL || ++ (cpub_key = BN_dup(pub_key)) == NULL) { ++ BN_free(cp); BN_free(cq); BN_free(cg); ++ BN_free(cpub_key); + sshkey_free(n); + return SSH_ERR_ALLOC_FAIL; + } ++ if (DSA_set0_pqg(n->dsa, cp, cq, cg) == 0) ++ goto error1; ++ cp = cq = cg = NULL; ++ if (DSA_set0_key(n->dsa, cpub_key, NULL) == 0) { ++error1: ++ BN_free(cp); BN_free(cq); BN_free(cg); ++ BN_free(cpub_key); ++ sshkey_free(n); ++ return SSH_ERR_LIBCRYPTO_ERROR; ++ } ++ cpub_key = NULL; ++ } + break; + # ifdef OPENSSL_HAS_ECC + case KEY_ECDSA: +@@ -1673,11 +1814,23 @@ + case KEY_RSA_CERT: + if ((n = sshkey_new(k->type)) == NULL) + return SSH_ERR_ALLOC_FAIL; +- if ((BN_copy(n->rsa->n, k->rsa->n) == NULL) || +- (BN_copy(n->rsa->e, k->rsa->e) == NULL)) { ++ { ++ const BIGNUM *nn, *e, *d; ++ BIGNUM *cn=NULL, *ce=NULL; ++ RSA_get0_key(k->rsa, &nn, &e, &d); ++ if ((cn = BN_dup(nn)) == NULL || ++ (ce = BN_dup(e)) == NULL ) { ++ BN_free(cn); BN_free(ce); + sshkey_free(n); + return SSH_ERR_ALLOC_FAIL; + } ++ if (RSA_set0_key(n->rsa, cn, ce, NULL) == 0) { ++ BN_free(cn); BN_free(ce); ++ sshkey_free(n); ++ return SSH_ERR_LIBCRYPTO_ERROR; ++ } ++ cn = ce = NULL; ++ } + break; + #endif /* WITH_OPENSSL */ + case KEY_ED25519: +@@ -1875,12 +2028,27 @@ + ret = SSH_ERR_ALLOC_FAIL; + goto out; + } +- if (sshbuf_get_bignum2(b, key->rsa->e) != 0 || +- sshbuf_get_bignum2(b, key->rsa->n) != 0) { ++ { ++ BIGNUM *e=NULL, *n=NULL; ++ if ((e = BN_new()) == NULL || ++ (n = BN_new()) == NULL ) { ++ ret = SSH_ERR_ALLOC_FAIL; ++ BN_free(e); BN_free(n); ++ goto out; ++ } ++ if (sshbuf_get_bignum2(b, e) != 0 || ++ sshbuf_get_bignum2(b, n) != 0) { + ret = SSH_ERR_INVALID_FORMAT; ++ BN_free(e); BN_free(n); + goto out; + } +- if (BN_num_bits(key->rsa->n) < SSH_RSA_MINIMUM_MODULUS_SIZE) { ++ if (RSA_set0_key(key->rsa, n, e, NULL) == 0) { ++ BN_free(e); BN_free(n); ++ return SSH_ERR_LIBCRYPTO_ERROR; ++ } ++ n = e = NULL; ++ } ++ if (RSA_bits(key->rsa) < SSH_RSA_MINIMUM_MODULUS_SIZE) { + ret = SSH_ERR_KEY_LENGTH; + goto out; + } +@@ -1900,13 +2068,36 @@ + ret = SSH_ERR_ALLOC_FAIL; + goto out; + } +- if (sshbuf_get_bignum2(b, key->dsa->p) != 0 || +- sshbuf_get_bignum2(b, key->dsa->q) != 0 || +- sshbuf_get_bignum2(b, key->dsa->g) != 0 || +- sshbuf_get_bignum2(b, key->dsa->pub_key) != 0) { ++ { ++ BIGNUM *p=NULL, *q=NULL, *g=NULL, *pub_key=NULL; ++ if ((p = BN_new()) == NULL || ++ (q = BN_new()) == NULL || ++ (g = BN_new()) == NULL || ++ (pub_key = BN_new()) == NULL) { ++ ret = SSH_ERR_ALLOC_FAIL; ++ goto error1; ++ } ++ if (sshbuf_get_bignum2(b, p) != 0 || ++ sshbuf_get_bignum2(b, q) != 0 || ++ sshbuf_get_bignum2(b, g) != 0 || ++ sshbuf_get_bignum2(b, pub_key) != 0) { + ret = SSH_ERR_INVALID_FORMAT; ++ goto error1; ++ } ++ if (DSA_set0_pqg(key->dsa, p, q, g) == 0) { ++ ret = SSH_ERR_LIBCRYPTO_ERROR; ++ goto error1; ++ } ++ p = q = g = NULL; ++ if (DSA_set0_key(key->dsa, pub_key, NULL) == 0) { ++ ret = SSH_ERR_LIBCRYPTO_ERROR; ++error1: ++ BN_free(p); BN_free(q); BN_free(g); ++ BN_free(pub_key); + goto out; + } ++ pub_key = NULL; ++ } + #ifdef DEBUG_PK + DSA_print_fp(stderr, key->dsa, 8); + #endif +@@ -2140,26 +2331,63 @@ + goto fail; + /* FALLTHROUGH */ + case KEY_RSA: +- if ((pk->rsa = RSA_new()) == NULL || +- (pk->rsa->e = BN_dup(k->rsa->e)) == NULL || +- (pk->rsa->n = BN_dup(k->rsa->n)) == NULL) { ++ if ((pk->rsa = RSA_new()) == NULL ){ + ret = SSH_ERR_ALLOC_FAIL; + goto fail; + } ++ { ++ const BIGNUM *ke, *kn; ++ BIGNUM *pke=NULL, *pkn=NULL; ++ RSA_get0_key(k->rsa, &kn, &ke, NULL); ++ if ((pke = BN_dup(ke)) == NULL || ++ (pkn = BN_dup(kn)) == NULL) { ++ ret = SSH_ERR_ALLOC_FAIL; ++ BN_free(pke); BN_free(pkn); ++ goto fail; ++ } ++ if (RSA_set0_key(pk->rsa, pkn, pke, NULL) == 0) { ++ ret = SSH_ERR_LIBCRYPTO_ERROR; ++ BN_free(pke); BN_free(pkn); ++ goto fail; ++ } ++ pkn = pke = NULL; ++ } + break; + case KEY_DSA_CERT: + if ((ret = sshkey_cert_copy(k, pk)) != 0) + goto fail; + /* FALLTHROUGH */ + case KEY_DSA: +- if ((pk->dsa = DSA_new()) == NULL || +- (pk->dsa->p = BN_dup(k->dsa->p)) == NULL || +- (pk->dsa->q = BN_dup(k->dsa->q)) == NULL || +- (pk->dsa->g = BN_dup(k->dsa->g)) == NULL || +- (pk->dsa->pub_key = BN_dup(k->dsa->pub_key)) == NULL) { ++ if ((pk->dsa = DSA_new()) == NULL ) { + ret = SSH_ERR_ALLOC_FAIL; + goto fail; + } ++ { ++ const BIGNUM *kp, *kq, *kg, *kpub_key; ++ BIGNUM *pkp=NULL, *pkq=NULL, *pkg=NULL, *pkpub_key=NULL; ++ DSA_get0_pqg(k->dsa, &kp, &kq, &kg); ++ DSA_get0_key(k->dsa, &kpub_key, NULL); ++ if ((pkp = BN_dup(kp)) == NULL || ++ (pkq = BN_dup(kq)) == NULL || ++ (pkg = BN_dup(kg)) == NULL || ++ (pkpub_key = BN_dup(kpub_key)) == NULL) { ++ ret = SSH_ERR_ALLOC_FAIL; ++ goto error1; ++ } ++ if (DSA_set0_pqg(pk->dsa, pkp, pkq, pkg) == 0) { ++ ret = SSH_ERR_LIBCRYPTO_ERROR; ++ goto error1; ++ } ++ pkp = pkq = pkg = NULL; ++ if (DSA_set0_key(pk->dsa, pkpub_key, NULL) == 0) { ++ ret = SSH_ERR_LIBCRYPTO_ERROR; ++error1: ++ BN_free(pkp); BN_free(pkq); BN_free(pkg); ++ BN_free(pkpub_key); ++ goto fail; ++ } ++ pkpub_key = NULL; ++ } + break; + case KEY_ECDSA_CERT: + if ((ret = sshkey_cert_copy(k, pk)) != 0) +@@ -2281,11 +2509,17 @@ + switch (k->type) { + #ifdef WITH_OPENSSL + case KEY_DSA_CERT: +- if ((ret = sshbuf_put_bignum2(cert, k->dsa->p)) != 0 || +- (ret = sshbuf_put_bignum2(cert, k->dsa->q)) != 0 || +- (ret = sshbuf_put_bignum2(cert, k->dsa->g)) != 0 || +- (ret = sshbuf_put_bignum2(cert, k->dsa->pub_key)) != 0) ++ { ++ const BIGNUM *p, *q, *g, *pub_key; ++ DSA_get0_pqg(k->dsa, &p, &q, &g); ++ DSA_get0_key(k->dsa, &pub_key, NULL); ++ if ((ret = sshbuf_put_bignum2(cert, p)) != 0 || ++ (ret = sshbuf_put_bignum2(cert, q)) != 0 || ++ (ret = sshbuf_put_bignum2(cert, g)) != 0 || ++ (ret = sshbuf_put_bignum2(cert, pub_key)) != 0) { + goto out; ++ } ++ } + break; + # ifdef OPENSSL_HAS_ECC + case KEY_ECDSA_CERT: +@@ -2298,9 +2532,15 @@ + break; + # endif /* OPENSSL_HAS_ECC */ + case KEY_RSA_CERT: +- if ((ret = sshbuf_put_bignum2(cert, k->rsa->e)) != 0 || +- (ret = sshbuf_put_bignum2(cert, k->rsa->n)) != 0) ++ { ++ const BIGNUM *e, *n; ++ RSA_get0_key(k->rsa, &n, &e, NULL); ++ if (n == NULL || e == NULL || ++ (ret = sshbuf_put_bignum2(cert, e)) != 0 || ++ (ret = sshbuf_put_bignum2(cert, n)) != 0) { + goto out; ++ } ++ } + break; + #endif /* WITH_OPENSSL */ + case KEY_ED25519_CERT: +@@ -2474,42 +2714,67 @@ + switch (key->type) { + #ifdef WITH_OPENSSL + case KEY_RSA: +- if ((r = sshbuf_put_bignum2(b, key->rsa->n)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->e)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->d)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->iqmp)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->p)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->q)) != 0) ++ { ++ const BIGNUM *n, *e, *d, *iqmp, *p, *q; ++ RSA_get0_key(key->rsa, &n, &e, &d); ++ RSA_get0_crt_params(key->rsa, NULL, NULL, &iqmp); ++ RSA_get0_factors(key->rsa, &p, &q); ++ if ((r = sshbuf_put_bignum2(b, n)) != 0 || ++ (r = sshbuf_put_bignum2(b, e)) != 0 || ++ (r = sshbuf_put_bignum2(b, d)) != 0 || ++ (r = sshbuf_put_bignum2(b, iqmp)) != 0 || ++ (r = sshbuf_put_bignum2(b, p)) != 0 || ++ (r = sshbuf_put_bignum2(b, q)) != 0) { + goto out; ++ } ++ } + break; + case KEY_RSA_CERT: + if (key->cert == NULL || sshbuf_len(key->cert->certblob) == 0) { + r = SSH_ERR_INVALID_ARGUMENT; + goto out; + } ++ { ++ const BIGNUM *d, *iqmp, *p, *q; ++ RSA_get0_key(key->rsa, NULL, NULL, &d); ++ RSA_get0_crt_params(key->rsa, NULL, NULL, &iqmp); ++ RSA_get0_factors(key->rsa, &p, &q); + if ((r = sshbuf_put_stringb(b, key->cert->certblob)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->d)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->iqmp)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->p)) != 0 || +- (r = sshbuf_put_bignum2(b, key->rsa->q)) != 0) ++ (r = sshbuf_put_bignum2(b, d)) != 0 || ++ (r = sshbuf_put_bignum2(b, iqmp)) != 0 || ++ (r = sshbuf_put_bignum2(b, p)) != 0 || ++ (r = sshbuf_put_bignum2(b, q)) != 0) { + goto out; ++ } ++ } + break; + case KEY_DSA: +- if ((r = sshbuf_put_bignum2(b, key->dsa->p)) != 0 || +- (r = sshbuf_put_bignum2(b, key->dsa->q)) != 0 || +- (r = sshbuf_put_bignum2(b, key->dsa->g)) != 0 || +- (r = sshbuf_put_bignum2(b, key->dsa->pub_key)) != 0 || +- (r = sshbuf_put_bignum2(b, key->dsa->priv_key)) != 0) ++ { ++ const BIGNUM *p, *q, *g, *pub_key, *priv_key; ++ DSA_get0_pqg(key->dsa, &p, &q, &g); ++ DSA_get0_key(key->dsa, &pub_key, &priv_key); ++ if ((r = sshbuf_put_bignum2(b, p)) != 0 || ++ (r = sshbuf_put_bignum2(b, q)) != 0 || ++ (r = sshbuf_put_bignum2(b, g)) != 0 || ++ (r = sshbuf_put_bignum2(b, pub_key)) != 0 || ++ (r = sshbuf_put_bignum2(b, priv_key)) != 0) { + goto out; ++ } ++ } + break; + case KEY_DSA_CERT: + if (key->cert == NULL || sshbuf_len(key->cert->certblob) == 0) { + r = SSH_ERR_INVALID_ARGUMENT; + goto out; + } ++ { ++ const BIGNUM *priv_key; ++ DSA_get0_key(key->dsa, NULL, &priv_key); + if ((r = sshbuf_put_stringb(b, key->cert->certblob)) != 0 || +- (r = sshbuf_put_bignum2(b, key->dsa->priv_key)) != 0) ++ (r = sshbuf_put_bignum2(b, priv_key)) != 0) { + goto out; ++ } ++ } + break; + # ifdef OPENSSL_HAS_ECC + case KEY_ECDSA: +@@ -2585,18 +2850,61 @@ + r = SSH_ERR_ALLOC_FAIL; + goto out; + } +- if ((r = sshbuf_get_bignum2(buf, k->dsa->p)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->dsa->q)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->dsa->g)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->dsa->pub_key)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->dsa->priv_key)) != 0) ++ { ++ BIGNUM *p=NULL, *q=NULL, *g=NULL, *pub_key=NULL, *priv_key=NULL; ++ if ((p = BN_new()) == NULL || ++ (q = BN_new()) == NULL || ++ (g = BN_new()) == NULL || ++ (pub_key = BN_new()) == NULL || ++ (priv_key = BN_new()) == NULL) { ++ r = SSH_ERR_ALLOC_FAIL; ++ goto error1; ++ } ++ if (p == NULL || q == NULL || g == NULL || ++ pub_key == NULL || priv_key == NULL || ++ (r = sshbuf_get_bignum2(buf, p)) != 0 || ++ (r = sshbuf_get_bignum2(buf, q)) != 0 || ++ (r = sshbuf_get_bignum2(buf, g)) != 0 || ++ (r = sshbuf_get_bignum2(buf, pub_key)) != 0 || ++ (r = sshbuf_get_bignum2(buf, priv_key)) != 0) { ++ goto error1; ++ } ++ if (DSA_set0_pqg(k->dsa, p, q, g) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ goto error1; ++ } ++ p = q = g = NULL; ++ if (DSA_set0_key(k->dsa, pub_key, priv_key) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++error1: ++ BN_free(p); BN_free(q); BN_free(g); ++ BN_free(pub_key); BN_free(priv_key); + goto out; ++ } ++ pub_key = priv_key = NULL; ++ } + break; + case KEY_DSA_CERT: +- if ((r = sshkey_froms(buf, &k)) != 0 || ++ { ++ BIGNUM *priv_key=NULL; ++ if ((priv_key = BN_new()) == NULL) { ++ r = SSH_ERR_ALLOC_FAIL; ++ goto out; ++ } ++ if (priv_key == NULL || ++ (r = sshkey_froms(buf, &k)) != 0 || + (r = sshkey_add_private(k)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->dsa->priv_key)) != 0) ++ (r = sshbuf_get_bignum2(buf, priv_key)) != 0) { ++ BN_free(priv_key); ++ goto out; ++ } ++ if (DSA_set0_key(k->dsa, NULL, priv_key) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ BN_free(priv_key); + goto out; ++ } ++ priv_key = NULL; ++ } + break; + # ifdef OPENSSL_HAS_ECC + case KEY_ECDSA: +@@ -2655,29 +2963,104 @@ + r = SSH_ERR_ALLOC_FAIL; + goto out; + } +- if ((r = sshbuf_get_bignum2(buf, k->rsa->n)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->e)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->d)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->iqmp)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->p)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->q)) != 0 || +- (r = ssh_rsa_generate_additional_parameters(k)) != 0) ++ { ++ BIGNUM *n=NULL, *e=NULL, *d=NULL, *iqmp=NULL, *p=NULL, *q=NULL; ++ BIGNUM *dmp1=NULL, *dmq1=NULL; /* dummy for RSA_set0_crt_params */ ++ if ((n = BN_new()) == NULL || ++ (e = BN_new()) == NULL || ++ (d = BN_new()) == NULL || ++ (iqmp = BN_new()) == NULL || ++ (p = BN_new()) == NULL || ++ (q = BN_new()) == NULL || ++ (dmp1 = BN_new()) == NULL || ++ (dmq1 = BN_new()) == NULL) { ++ r = SSH_ERR_ALLOC_FAIL; ++ goto error2; ++ } ++ BN_clear(dmp1); BN_clear(dmq1); ++ if ((r = sshbuf_get_bignum2(buf, n)) != 0 || ++ (r = sshbuf_get_bignum2(buf, e)) != 0 || ++ (r = sshbuf_get_bignum2(buf, d)) != 0 || ++ (r = sshbuf_get_bignum2(buf, iqmp)) != 0 || ++ (r = sshbuf_get_bignum2(buf, p)) != 0 || ++ (r = sshbuf_get_bignum2(buf, q)) != 0) { ++ goto error2; ++ } ++ if (RSA_set0_key(k->rsa, n, e, d) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ goto error2; ++ } ++ n = e = d = NULL; ++ /* dmp1,dmpq1 should be non NULL to set iqmp value */ ++ if (RSA_set0_crt_params(k->rsa, dmp1, dmq1, iqmp) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ goto error2; ++ } ++ dmp1 = dmq1 = iqmp = NULL; ++ if (RSA_set0_factors(k->rsa, p, q) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ error2: ++ BN_free(n); BN_free(e); BN_free(d); ++ BN_free(iqmp); ++ BN_free(p); BN_free(q); ++ BN_free(dmp1); BN_free(dmq1); ++ goto out; ++ } ++ p = q = NULL; ++ if ((r = ssh_rsa_generate_additional_parameters(k)) != 0) { + goto out; +- if (BN_num_bits(k->rsa->n) < SSH_RSA_MINIMUM_MODULUS_SIZE) { ++ } ++ } ++ if (RSA_bits(k->rsa) < SSH_RSA_MINIMUM_MODULUS_SIZE) { + r = SSH_ERR_KEY_LENGTH; + goto out; + } + break; + case KEY_RSA_CERT: ++ { ++ BIGNUM *d=NULL, *iqmp=NULL, *p=NULL, *q=NULL; ++ BIGNUM *dmp1=NULL, *dmq1=NULL; /* dummy for RSA_set0_crt_params */ ++ if ((d = BN_new()) == NULL || ++ (iqmp = BN_new()) == NULL || ++ (p = BN_new()) == NULL || ++ (q = BN_new()) == NULL || ++ (dmp1 = BN_new()) == NULL || ++ (dmq1 = BN_new()) == NULL) { ++ r = SSH_ERR_ALLOC_FAIL; ++ goto error3; ++ } ++ BN_clear(dmp1); BN_clear(dmq1); + if ((r = sshkey_froms(buf, &k)) != 0 || + (r = sshkey_add_private(k)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->d)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->iqmp)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->p)) != 0 || +- (r = sshbuf_get_bignum2(buf, k->rsa->q)) != 0 || +- (r = ssh_rsa_generate_additional_parameters(k)) != 0) ++ (r = sshbuf_get_bignum2(buf, d)) != 0 || ++ (r = sshbuf_get_bignum2(buf, iqmp)) != 0 || ++ (r = sshbuf_get_bignum2(buf, p)) != 0 || ++ (r = sshbuf_get_bignum2(buf, q)) != 0) { ++ goto error3; ++ } ++ if (RSA_set0_key(k->rsa, NULL, NULL, d) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ goto error3; ++ } ++ /* dmp1,dmpq1 should be non NULL to set value */ ++ if (RSA_set0_crt_params(k->rsa, dmp1, dmq1, iqmp) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ goto error3; ++ } ++ dmp1 = dmq1 = iqmp = NULL; ++ if (RSA_set0_factors(k->rsa, p, q) == 0) { ++ r = SSH_ERR_LIBCRYPTO_ERROR; ++ error3: ++ BN_free(d); BN_free(iqmp); ++ BN_free(p); BN_free(q); ++ BN_free(dmp1); BN_free(dmq1); + goto out; +- if (BN_num_bits(k->rsa->n) < SSH_RSA_MINIMUM_MODULUS_SIZE) { ++ } ++ p = q = NULL; ++ if ((r = ssh_rsa_generate_additional_parameters(k)) != 0) ++ goto out; ++ } ++ if (RSA_bits(k->rsa) < SSH_RSA_MINIMUM_MODULUS_SIZE) { + r = SSH_ERR_KEY_LENGTH; + goto out; + } +@@ -3395,7 +3778,6 @@ + switch (pem_reason) { + case EVP_R_BAD_DECRYPT: + return SSH_ERR_KEY_WRONG_PASSPHRASE; +- case EVP_R_BN_DECODE_ERROR: + case EVP_R_DECODE_ERROR: + #ifdef EVP_R_PRIVATE_KEY_DECODE_ERROR + case EVP_R_PRIVATE_KEY_DECODE_ERROR: +@@ -3460,7 +3842,7 @@ + r = convert_libcrypto_error(); + goto out; + } +- if (pk->type == EVP_PKEY_RSA && ++ if (EVP_PKEY_id(pk) == EVP_PKEY_RSA && + (type == KEY_UNSPEC || type == KEY_RSA)) { + if ((prv = sshkey_new(KEY_UNSPEC)) == NULL) { + r = SSH_ERR_ALLOC_FAIL; +@@ -3475,11 +3857,11 @@ + r = SSH_ERR_LIBCRYPTO_ERROR; + goto out; + } +- if (BN_num_bits(prv->rsa->n) < SSH_RSA_MINIMUM_MODULUS_SIZE) { ++ if (RSA_bits(prv->rsa) < SSH_RSA_MINIMUM_MODULUS_SIZE) { + r = SSH_ERR_KEY_LENGTH; + goto out; + } +- } else if (pk->type == EVP_PKEY_DSA && ++ } else if (EVP_PKEY_id(pk) == EVP_PKEY_DSA && + (type == KEY_UNSPEC || type == KEY_DSA)) { + if ((prv = sshkey_new(KEY_UNSPEC)) == NULL) { + r = SSH_ERR_ALLOC_FAIL; +@@ -3491,7 +3873,7 @@ + DSA_print_fp(stderr, prv->dsa, 8); + #endif + #ifdef OPENSSL_HAS_ECC +- } else if (pk->type == EVP_PKEY_EC && ++ } else if (EVP_PKEY_id(pk) == EVP_PKEY_EC && + (type == KEY_UNSPEC || type == KEY_ECDSA)) { + if ((prv = sshkey_new(KEY_UNSPEC)) == NULL) { + r = SSH_ERR_ALLOC_FAIL; From 5809552f2fb1371870b4e111d4ef018730d683b9 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 13:06:26 +0000 Subject: [PATCH 05/91] krb5: Update to 1.15.2 to build against OpenSSL 1.1 Signed-off-by: Michael Tremer --- config/rootfiles/packages/krb5 | 8 ++++---- lfs/krb5 | 6 +++--- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/config/rootfiles/packages/krb5 b/config/rootfiles/packages/krb5 index d73f22bba..0db708f4e 100644 --- a/config/rootfiles/packages/krb5 +++ b/config/rootfiles/packages/krb5 @@ -82,12 +82,12 @@ usr/lib/libk5crypto.so.3 usr/lib/libk5crypto.so.3.1 #usr/lib/libkadm5clnt.so #usr/lib/libkadm5clnt_mit.so -usr/lib/libkadm5clnt_mit.so.10 -usr/lib/libkadm5clnt_mit.so.10.0 +usr/lib/libkadm5clnt_mit.so.11 +usr/lib/libkadm5clnt_mit.so.11.0 #usr/lib/libkadm5srv.so #usr/lib/libkadm5srv_mit.so -usr/lib/libkadm5srv_mit.so.10 -usr/lib/libkadm5srv_mit.so.10.0 +usr/lib/libkadm5srv_mit.so.11 +usr/lib/libkadm5srv_mit.so.11.0 #usr/lib/libkdb5.so usr/lib/libkdb5.so.8 usr/lib/libkdb5.so.8.0 diff --git a/lfs/krb5 b/lfs/krb5 index 7e346920a..9cf3c2bec 100644 --- a/lfs/krb5 +++ b/lfs/krb5 @@ -24,7 +24,7 @@ include Config -VER = 1.14.4 +VER = 1.15.2 THISAPP = krb5-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP)/src TARGET = $(DIR_INFO)/$(THISAPP) PROG = krb5 -PAK_VER = 2 +PAK_VER = 3 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ba90f5701fc2dda76133c1f34ba4ee80 +$(DL_FILE)_MD5 = b160f72161c730897dc7689f876b6e2a install : $(TARGET) From 2ab923bb8ee35327065f4c724b5a10deee22b364 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 13:37:38 +0000 Subject: [PATCH 06/91] ncat: Update to 7.60 Signed-off-by: Michael Tremer --- lfs/ncat | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/ncat b/lfs/ncat index 6f1b70333..92320e967 100644 --- a/lfs/ncat +++ b/lfs/ncat @@ -24,7 +24,7 @@ include Config -VER = 7.12 +VER = 7.60 THISAPP = ncat-$(VER) DL_FILE = nmap-$(VER).tar.bz2 @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/nmap-$(VER) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ncat -PAK_VER = 1 +PAK_VER = 2 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 0764f4dabe7cccda3c49fc3990b62a8a +$(DL_FILE)_MD5 = 4e454266559ddf2c4e2109866c62560c install : $(TARGET) From 3b10b313032fe32e8e611a7c47e6e90259972ce3 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 13:58:29 +0000 Subject: [PATCH 07/91] elinks: Patch to build against OpenSSL 1.1 Signed-off-by: Michael Tremer --- lfs/elinks | 4 +- src/patches/elinks-0.11.0-ssl-noegd.patch | 21 ++++++ src/patches/elinks-0.12pre6-openssl11.patch | 73 +++++++++++++++++++++ 3 files changed, 97 insertions(+), 1 deletion(-) create mode 100644 src/patches/elinks-0.11.0-ssl-noegd.patch create mode 100644 src/patches/elinks-0.12pre6-openssl11.patch diff --git a/lfs/elinks b/lfs/elinks index 2727423f0..8d3926967 100644 --- a/lfs/elinks +++ b/lfs/elinks @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = elinks -PAK_VER = 5 +PAK_VER = 6 DEPS = "" @@ -78,6 +78,8 @@ dist: $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar jxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/elinks-0.12pre6-openssl11.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/elinks-0.11.0-ssl-noegd.patch cd $(DIR_APP) && ./configure cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install diff --git a/src/patches/elinks-0.11.0-ssl-noegd.patch b/src/patches/elinks-0.11.0-ssl-noegd.patch new file mode 100644 index 000000000..581873461 --- /dev/null +++ b/src/patches/elinks-0.11.0-ssl-noegd.patch @@ -0,0 +1,21 @@ +--- elinks-0.11.0/src/network/ssl/ssl.c.noegd 2006-01-10 09:24:50.000000000 +0100 ++++ elinks-0.11.0/src/network/ssl/ssl.c 2006-01-10 09:25:01.000000000 +0100 +@@ -44,18 +44,6 @@ SSL_CTX *context = NULL; + static void + init_openssl(struct module *module) + { +- unsigned char f_randfile[PATH_MAX]; +- +- /* In a nutshell, on OS's without a /dev/urandom, the OpenSSL library +- * cannot initialize the PRNG and so every attempt to use SSL fails. +- * It's actually an OpenSSL FAQ, and according to them, it's up to the +- * application coders to seed the RNG. -- William Yodlowsky */ +- if (RAND_egd(RAND_file_name(f_randfile, sizeof(f_randfile))) < 0) { +- /* Not an EGD, so read and write to it */ +- if (RAND_load_file(f_randfile, -1)) +- RAND_write_file(f_randfile); +- } +- + SSLeay_add_ssl_algorithms(); + context = SSL_CTX_new(SSLv23_client_method()); + SSL_CTX_set_options(context, SSL_OP_ALL); diff --git a/src/patches/elinks-0.12pre6-openssl11.patch b/src/patches/elinks-0.12pre6-openssl11.patch new file mode 100644 index 000000000..210af635e --- /dev/null +++ b/src/patches/elinks-0.12pre6-openssl11.patch @@ -0,0 +1,73 @@ +From d83c0edf4c6ae42359ff856d7a879ecba5769595 Mon Sep 17 00:00:00 2001 +From: Kamil Dudka +Date: Fri, 17 Feb 2017 16:51:41 +0100 +Subject: [PATCH 1/2] fix compatibility with OpenSSL 1.1 + +--- + src/network/ssl/socket.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/src/network/ssl/socket.c b/src/network/ssl/socket.c +index c9e2be4..467fc48 100644 +--- a/src/network/ssl/socket.c ++++ b/src/network/ssl/socket.c +@@ -83,7 +83,7 @@ static void + ssl_set_no_tls(struct socket *socket) + { + #ifdef CONFIG_OPENSSL +- ((ssl_t *) socket->ssl)->options |= SSL_OP_NO_TLSv1; ++ SSL_set_options((ssl_t *) socket->ssl, SSL_OP_NO_TLSv1); + #elif defined(CONFIG_GNUTLS) + { + /* GnuTLS does not support SSLv2 because it is "insecure". +@@ -419,7 +419,7 @@ ssl_connect(struct socket *socket) + } + + if (client_cert) { +- SSL_CTX *ctx = ((SSL *) socket->ssl)->ctx; ++ SSL_CTX *ctx = SSL_get_SSL_CTX((SSL *) socket->ssl); + + SSL_CTX_use_certificate_chain_file(ctx, client_cert); + SSL_CTX_use_PrivateKey_file(ctx, client_cert, +-- +2.7.4 + + +From ec952cc5b79973bee73fcfc813159d40c22b7228 Mon Sep 17 00:00:00 2001 +From: Tomas Mraz +Date: Fri, 17 Feb 2017 16:44:11 +0100 +Subject: [PATCH 2/2] drop disablement of TLS1.0 on second attempt to connect + +It would not work correctly anyway and the code does not build +with OpenSSL-1.1.0. +--- + src/network/ssl/socket.c | 6 ++++++ + 1 file changed, 6 insertions(+) + +diff --git a/src/network/ssl/socket.c b/src/network/ssl/socket.c +index 467fc48..b981c1e 100644 +--- a/src/network/ssl/socket.c ++++ b/src/network/ssl/socket.c +@@ -82,6 +82,11 @@ + static void + ssl_set_no_tls(struct socket *socket) + { ++#if 0 ++/* This implements the insecure renegotiation, which should not be used. ++ * The code also would not work on current Fedora (>= Fedora 23) anyway, ++ * because it would just switch off TLS 1.0 keeping TLS 1.1 and 1.2 enabled. ++ */ + #ifdef CONFIG_OPENSSL + SSL_set_options((ssl_t *) socket->ssl, SSL_OP_NO_TLSv1); + #elif defined(CONFIG_GNUTLS) +@@ -96,6 +101,7 @@ ssl_set_no_tls(struct socket *socket) + gnutls_protocol_set_priority(*(ssl_t *) socket->ssl, protocol_priority); + } + #endif ++#endif + } + + #ifdef USE_OPENSSL +-- +2.7.4 + From 0d0fe16e22499868b38e35e190729f50c6acf1c9 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 15:06:54 +0000 Subject: [PATCH 08/91] net-snmp: Patch to build against OpenSSL 1.1 Signed-off-by: Michael Tremer --- lfs/netsnmpd | 3 +- src/patches/net-snmp-5.7.3-openssl.patch | 303 +++++++++++++++++++++++ 2 files changed, 305 insertions(+), 1 deletion(-) create mode 100644 src/patches/net-snmp-5.7.3-openssl.patch diff --git a/lfs/netsnmpd b/lfs/netsnmpd index 12fb34209..6995ee683 100644 --- a/lfs/netsnmpd +++ b/lfs/netsnmpd @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = netsnmpd -PAK_VER = 5 +PAK_VER = 6 DEPS = "" ############################################################################### @@ -76,6 +76,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/net-snmp-5.7.3-openssl.patch cd $(DIR_APP) && ./configure \ --prefix=/usr \ --with-default-snmp-version="2" \ diff --git a/src/patches/net-snmp-5.7.3-openssl.patch b/src/patches/net-snmp-5.7.3-openssl.patch new file mode 100644 index 000000000..0651a24ec --- /dev/null +++ b/src/patches/net-snmp-5.7.3-openssl.patch @@ -0,0 +1,303 @@ +diff -urNp old/apps/snmpusm.c new/apps/snmpusm.c +--- old/apps/snmpusm.c 2014-12-08 21:23:22.000000000 +0100 ++++ new/apps/snmpusm.c 2017-02-20 15:20:36.994022905 +0100 +@@ -190,7 +190,7 @@ get_USM_DH_key(netsnmp_variable_list *va + oid *keyoid, size_t keyoid_len) { + u_char *dhkeychange; + DH *dh; +- BIGNUM *other_pub; ++ BIGNUM *p, *g, *pub_key, *other_pub; + u_char *key; + size_t key_len; + +@@ -205,25 +205,29 @@ get_USM_DH_key(netsnmp_variable_list *va + dh = d2i_DHparams(NULL, &cp, dhvar->val_len); + } + +- if (!dh || !dh->g || !dh->p) { ++ if (dh) ++ DH_get0_pqg(dh, &p, NULL, &g); ++ ++ if (!dh || !g || !p) { + SNMP_FREE(dhkeychange); + return SNMPERR_GENERR; + } + +- DH_generate_key(dh); +- if (!dh->pub_key) { ++ if (!DH_generate_key(dh)) { + SNMP_FREE(dhkeychange); + return SNMPERR_GENERR; + } + +- if (vars->val_len != (unsigned int)BN_num_bytes(dh->pub_key)) { ++ DH_get0_key(dh, &pub_key, NULL); ++ ++ if (vars->val_len != (unsigned int)BN_num_bytes(pub_key)) { + SNMP_FREE(dhkeychange); + fprintf(stderr,"incorrect diffie-helman lengths (%lu != %d)\n", +- (unsigned long)vars->val_len, BN_num_bytes(dh->pub_key)); ++ (unsigned long)vars->val_len, BN_num_bytes(pub_key)); + return SNMPERR_GENERR; + } + +- BN_bn2bin(dh->pub_key, dhkeychange + vars->val_len); ++ BN_bn2bin(pub_key, dhkeychange + vars->val_len); + + key_len = DH_size(dh); + if (!key_len) { +diff -urNp old/configure new/configure +--- old/configure 2017-02-20 10:08:16.440396223 +0100 ++++ new/configure 2017-02-20 10:57:15.749734281 +0100 +@@ -23176,9 +23176,9 @@ $as_echo "#define HAVE_AES_CFB128_ENCRYP + fi + + +- as_ac_Lib=`$as_echo "ac_cv_lib_${CRYPTO}''_EVP_MD_CTX_create" | $as_tr_sh` +-{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for EVP_MD_CTX_create in -l${CRYPTO}" >&5 +-$as_echo_n "checking for EVP_MD_CTX_create in -l${CRYPTO}... " >&6; } ++ as_ac_Lib=`$as_echo "ac_cv_lib_${CRYPTO}''_EVP_MD_CTX_new" | $as_tr_sh` ++{ $as_echo "$as_me:${as_lineno-$LINENO}: checking for EVP_MD_CTX_new in -l${CRYPTO}" >&5 ++$as_echo_n "checking for EVP_MD_CTX_new in -l${CRYPTO}... " >&6; } + if eval \${$as_ac_Lib+:} false; then : + $as_echo_n "(cached) " >&6 + else +@@ -23193,11 +23193,11 @@ cat confdefs.h - <<_ACEOF >conftest.$ac_ + #ifdef __cplusplus + extern "C" + #endif +-char EVP_MD_CTX_create (); ++char EVP_MD_CTX_new (); + int + main () + { +-return EVP_MD_CTX_create (); ++return EVP_MD_CTX_new (); + ; + return 0; + } +@@ -23216,10 +23216,10 @@ eval ac_res=\$$as_ac_Lib + $as_echo "$ac_res" >&6; } + if eval test \"x\$"$as_ac_Lib"\" = x"yes"; then : + +-$as_echo "#define HAVE_EVP_MD_CTX_CREATE /**/" >>confdefs.h ++$as_echo "#define HAVE_EVP_MD_CTX_NEW /**/" >>confdefs.h + + +-$as_echo "#define HAVE_EVP_MD_CTX_DESTROY /**/" >>confdefs.h ++$as_echo "#define HAVE_EVP_MD_CTX_FREE /**/" >>confdefs.h + + fi + +@@ -23293,7 +23293,7 @@ char SSL_library_init (); + int + main () + { +-return SSL_library_init (); ++return OPENSSL_init_ssl(0, NULL); + ; + return 0; + } +diff -urNp old/configure.d/config_os_libs2 new/configure.d/config_os_libs2 +--- old/configure.d/config_os_libs2 2014-12-08 21:23:22.000000000 +0100 ++++ new/configure.d/config_os_libs2 2017-02-20 10:56:21.041616611 +0100 +@@ -292,11 +292,11 @@ if test "x$tryopenssl" != "xno" -a "x$tr + AC_DEFINE(HAVE_AES_CFB128_ENCRYPT, 1, + [Define to 1 if you have the `AES_cfb128_encrypt' function.])) + +- AC_CHECK_LIB(${CRYPTO}, EVP_MD_CTX_create, +- AC_DEFINE([HAVE_EVP_MD_CTX_CREATE], [], +- [Define to 1 if you have the `EVP_MD_CTX_create' function.]) +- AC_DEFINE([HAVE_EVP_MD_CTX_DESTROY], [], +- [Define to 1 if you have the `EVP_MD_CTX_destroy' function.])) ++ AC_CHECK_LIB(${CRYPTO}, EVP_MD_CTX_new, ++ AC_DEFINE([HAVE_EVP_MD_CTX_NEW], [], ++ [Define to 1 if you have the `EVP_MD_CTX_new' function.]) ++ AC_DEFINE([HAVE_EVP_MD_CTX_FREE], [], ++ [Define to 1 if you have the `EVP_MD_CTX_free' function.])) + fi + if echo " $transport_result_list " | $GREP "DTLS" > /dev/null; then + AC_CHECK_LIB(ssl, DTLSv1_method, +@@ -307,7 +307,7 @@ if test "x$tryopenssl" != "xno" -a "x$tr + TLSPROG=yes + fi + if echo " $transport_result_list " | $GREP "TLS" > /dev/null; then +- AC_CHECK_LIB(ssl, SSL_library_init, ++ AC_CHECK_LIB(ssl, OPENSSL_init_ssl, + AC_DEFINE(HAVE_LIBSSL, 1, + [Define to 1 if you have the `ssl' library (-lssl).]) + LIBCRYPTO=" -lssl $LIBCRYPTO", +diff -urNp old/include/net-snmp/net-snmp-config.h.in new/include/net-snmp/net-snmp-config.h.in +--- old/include/net-snmp/net-snmp-config.h.in 2017-02-20 10:08:16.443522417 +0100 ++++ new/include/net-snmp/net-snmp-config.h.in 2017-02-20 10:24:05.790584283 +0100 +@@ -149,11 +149,11 @@ + /* Define to 1 if you have the `eval_pv' function. */ + #undef HAVE_EVAL_PV + +-/* Define to 1 if you have the `EVP_MD_CTX_create' function. */ +-#undef HAVE_EVP_MD_CTX_CREATE ++/* Define to 1 if you have the `EVP_MD_CTX_new' function. */ ++#undef HAVE_EVP_MD_CTX_NEW + +-/* Define to 1 if you have the `EVP_MD_CTX_destroy' function. */ +-#undef HAVE_EVP_MD_CTX_DESTROY ++/* Define to 1 if you have the `EVP_MD_CTX_free' function. */ ++#undef HAVE_EVP_MD_CTX_FREE + + /* Define if you have EVP_sha224/256 in openssl */ + #undef HAVE_EVP_SHA224 +diff -urNp old/snmplib/keytools.c new/snmplib/keytools.c +--- old/snmplib/keytools.c 2014-12-08 21:23:22.000000000 +0100 ++++ new/snmplib/keytools.c 2017-02-20 10:30:27.412068264 +0100 +@@ -149,8 +149,8 @@ generate_Ku(const oid * hashtype, u_int + */ + #ifdef NETSNMP_USE_OPENSSL + +-#ifdef HAVE_EVP_MD_CTX_CREATE +- ctx = EVP_MD_CTX_create(); ++#ifdef HAVE_EVP_MD_CTX_NEW ++ ctx = EVP_MD_CTX_new(); + #else + ctx = malloc(sizeof(*ctx)); + if (!EVP_MD_CTX_init(ctx)) +@@ -259,8 +259,8 @@ generate_Ku(const oid * hashtype, u_int + memset(buf, 0, sizeof(buf)); + #ifdef NETSNMP_USE_OPENSSL + if (ctx) { +-#ifdef HAVE_EVP_MD_CTX_DESTROY +- EVP_MD_CTX_destroy(ctx); ++#ifdef HAVE_EVP_MD_CTX_FREE ++ EVP_MD_CTX_free(ctx); + #else + EVP_MD_CTX_cleanup(ctx); + free(ctx); +diff -urNp old/snmplib/scapi.c new/snmplib/scapi.c +--- old/snmplib/scapi.c 2014-12-08 21:23:22.000000000 +0100 ++++ new/snmplib/scapi.c 2017-02-20 10:27:34.152379515 +0100 +@@ -486,14 +486,14 @@ sc_hash(const oid * hashtype, size_t has + } + + /** initialize the pointer */ +-#ifdef HAVE_EVP_MD_CTX_CREATE +- cptr = EVP_MD_CTX_create(); ++#ifdef HAVE_EVP_MD_CTX_NEW ++ cptr = EVP_MD_CTX_new(); + #else + cptr = malloc(sizeof(*cptr)); + #if defined(OLD_DES) + memset(cptr, 0, sizeof(*cptr)); + #else +- EVP_MD_CTX_init(cptr); ++ EVP_MD_CTX_init(&cptr); + #endif + #endif + if (!EVP_DigestInit(cptr, hashfn)) { +@@ -507,11 +507,11 @@ sc_hash(const oid * hashtype, size_t has + /** do the final pass */ + EVP_DigestFinal(cptr, MAC, &tmp_len); + *MAC_len = tmp_len; +-#ifdef HAVE_EVP_MD_CTX_DESTROY +- EVP_MD_CTX_destroy(cptr); ++#ifdef HAVE_EVP_MD_CTX_FREE ++ EVP_MD_CTX_free(cptr); + #else + #if !defined(OLD_DES) +- EVP_MD_CTX_cleanup(cptr); ++ EVP_MD_CTX_cleanup(&cptr); + #endif + free(cptr); + #endif +diff -urNp old/snmplib/snmp_openssl.c new/snmplib/snmp_openssl.c +--- old/snmplib/snmp_openssl.c 2014-12-08 21:23:22.000000000 +0100 ++++ new/snmplib/snmp_openssl.c 2017-02-20 12:46:00.059727928 +0100 +@@ -47,7 +47,7 @@ void netsnmp_init_openssl(void) { + DEBUGMSGTL(("snmp_openssl", "initializing\n")); + + /* Initializing OpenSSL */ +- SSL_library_init(); ++ OPENSSL_init_ssl(0, NULL); + SSL_load_error_strings(); + ERR_load_BIO_strings(); + OpenSSL_add_all_algorithms(); +@@ -164,11 +164,11 @@ netsnmp_openssl_cert_dump_names(X509 *oc + oname_entry = X509_NAME_get_entry(osubj_name, i); + netsnmp_assert(NULL != oname_entry); + +- if (oname_entry->value->type != V_ASN1_PRINTABLESTRING) ++ if (X509_NAME_ENTRY_get_data(oname_entry)->type != V_ASN1_PRINTABLESTRING) + continue; + + /** get NID */ +- onid = OBJ_obj2nid(oname_entry->object); ++ onid = OBJ_obj2nid(X509_NAME_ENTRY_get_object(oname_entry)); + if (onid == NID_undef) { + prefix_long = prefix_short = "UNKNOWN"; + } +@@ -179,9 +179,9 @@ netsnmp_openssl_cert_dump_names(X509 *oc + + DEBUGMSGT(("9:cert:dump:names", + "[%02d] NID type %d, ASN type %d\n", i, onid, +- oname_entry->value->type)); ++ X509_NAME_ENTRY_get_data(oname_entry)->type)); + DEBUGMSGT(("9:cert:dump:names", "%s/%s: '%s'\n", prefix_long, +- prefix_short, ASN1_STRING_data(oname_entry->value))); ++ prefix_short, ASN1_STRING_data(X509_NAME_ENTRY_get_data(oname_entry)))); + } + } + #endif /* NETSNMP_FEATURE_REMOVE_CERT_DUMP_NAMES */ +@@ -470,7 +470,7 @@ netsnmp_openssl_cert_get_hash_type(X509 + if (NULL == ocert) + return 0; + +- return _nid2ht(OBJ_obj2nid(ocert->sig_alg->algorithm)); ++ return _nid2ht(X509_get_signature_nid(ocert)); + } + + /** +@@ -487,7 +487,7 @@ netsnmp_openssl_cert_get_fingerprint(X50 + if (NULL == ocert) + return NULL; + +- nid = OBJ_obj2nid(ocert->sig_alg->algorithm); ++ nid = X509_get_signature_nid(ocert); + DEBUGMSGT(("9:openssl:fingerprint", "alg %d, cert nid %d (%d)\n", alg, nid, + _nid2ht(nid))); + +diff -urNp old/win32/net-snmp/net-snmp-config.h new/win32/net-snmp/net-snmp-config.h +--- old/win32/net-snmp/net-snmp-config.h 2014-12-08 21:23:22.000000000 +0100 ++++ new/win32/net-snmp/net-snmp-config.h 2017-02-20 10:23:20.796778512 +0100 +@@ -1366,11 +1366,11 @@ + /* Define to 1 if you have the header file. */ + #define HAVE_OPENSSL_AES_H 1 + +-/* Define to 1 if you have the `EVP_MD_CTX_create' function. */ +-#define HAVE_EVP_MD_CTX_CREATE 1 ++/* Define to 1 if you have the `EVP_MD_CTX_new' function. */ ++#define HAVE_EVP_MD_CTX_NEW 1 + +-/* Define to 1 if you have the `EVP_MD_CTX_destroy' function. */ +-#define HAVE_EVP_MD_CTX_DESTROY 1 ++/* Define to 1 if you have the `EVP_MD_CTX_free' function. */ ++#define HAVE_EVP_MD_CTX_FREE 1 + + /* Define to 1 if you have the `AES_cfb128_encrypt' function. */ + #define HAVE_AES_CFB128_ENCRYPT 1 +diff -urNp old/win32/net-snmp/net-snmp-config.h.in new/win32/net-snmp/net-snmp-config.h.in +--- old/win32/net-snmp/net-snmp-config.h.in 2014-12-08 21:23:22.000000000 +0100 ++++ new/win32/net-snmp/net-snmp-config.h.in 2017-02-20 10:22:51.348367754 +0100 +@@ -1366,11 +1366,11 @@ + /* Define to 1 if you have the header file. */ + #define HAVE_OPENSSL_AES_H 1 + +-/* Define to 1 if you have the `EVP_MD_CTX_create' function. */ +-#define HAVE_EVP_MD_CTX_CREATE 1 ++/* Define to 1 if you have the `EVP_MD_CTX_new' function. */ ++#define HAVE_EVP_MD_CTX_NEW 1 + +-/* Define to 1 if you have the `EVP_MD_CTX_destroy' function. */ +-#define HAVE_EVP_MD_CTX_DESTROY 1 ++/* Define to 1 if you have the `EVP_MD_CTX_free' function. */ ++#define HAVE_EVP_MD_CTX_FREE 1 + + /* Define to 1 if you have the `AES_cfb128_encrypt' function. */ + #define HAVE_AES_CFB128_ENCRYPT 1 From 7e63e4f8069e396296360584db498753490097d6 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 16:39:38 +0000 Subject: [PATCH 09/91] transmission: Patch to build against OpenSSL 1.1 Signed-off-by: Michael Tremer --- lfs/transmission | 3 +- .../transmission-2.92-openssl-1.1.0.patch | 261 ++++++++++++++++++ 2 files changed, 263 insertions(+), 1 deletion(-) create mode 100644 src/patches/transmission-2.92-openssl-1.1.0.patch diff --git a/lfs/transmission b/lfs/transmission index 79ebaa1f9..10ac44daa 100644 --- a/lfs/transmission +++ b/lfs/transmission @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = transmission -PAK_VER = 13 +PAK_VER = 14 DEPS = "" @@ -79,6 +79,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/transmission-2.92-openssl-1.1.0.patch cd $(DIR_APP) && ./configure --prefix=/usr --disable-static cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install diff --git a/src/patches/transmission-2.92-openssl-1.1.0.patch b/src/patches/transmission-2.92-openssl-1.1.0.patch new file mode 100644 index 000000000..29484b833 --- /dev/null +++ b/src/patches/transmission-2.92-openssl-1.1.0.patch @@ -0,0 +1,261 @@ +From f91cf5ad8c677b61ceb0bf5877b87f9e93256dd7 Mon Sep 17 00:00:00 2001 +From: Sebastian Andrzej Siewior +Date: Mon, 5 Sep 2016 21:49:07 +0000 +Subject: [PATCH] transmission: build against openssl 1.1.0 + +Signed-off-by: Sebastian Andrzej Siewior +--- + libtransmission/crypto-utils-openssl.c | 73 ++++++++++++++++++++++++++++++++-- + 1 file changed, 69 insertions(+), 4 deletions(-) + +diff --git a/libtransmission/crypto-utils-openssl.c b/libtransmission/crypto-utils-openssl.c +index c4539dc..972e24a 100644 +--- a/libtransmission/crypto-utils-openssl.c ++++ b/libtransmission/crypto-utils-openssl.c +@@ -229,6 +229,61 @@ tr_rc4_process (tr_rc4_ctx_t handle, + **** + ***/ + ++#if OPENSSL_VERSION_NUMBER < 0x10100000 ++static inline int ++DH_set0_pqg (DH * dh, ++ BIGNUM * p, ++ BIGNUM * q, ++ BIGNUM * g) ++{ ++ /* If the fields p and g in d are NULL, the corresponding input ++ * parameters MUST be non-NULL. q may remain NULL. ++ */ ++ if ((dh->p == NULL && p == NULL) ++ || (dh->g == NULL && g == NULL)) ++ return 0; ++ ++ if (p != NULL) { ++ BN_free (dh->p); ++ dh->p = p; ++ } ++ if (q != NULL) { ++ BN_free (dh->q); ++ dh->q = q; ++ } ++ if (g != NULL) { ++ BN_free (dh->g); ++ dh->g = g; ++ } ++ ++ if (q != NULL) { ++ dh->length = BN_num_bits (q); ++ } ++ ++ return 1; ++} ++ ++static inline int ++DH_set_length (DH * dh, ++ long length) ++{ ++ dh->length = length; ++ return 1; ++} ++ ++static inline void ++DH_get0_key(const DH * dh, ++ const BIGNUM ** pub_key, ++ const BIGNUM ** priv_key) ++{ ++ if (pub_key != NULL) ++ *pub_key = dh->pub_key; ++ if (priv_key != NULL) ++ *priv_key = dh->priv_key; ++} ++ ++#endif ++ + tr_dh_ctx_t + tr_dh_new (const uint8_t * prime_num, + size_t prime_num_length, +@@ -236,13 +291,19 @@ tr_dh_new (const uint8_t * prime_num, + size_t generator_num_length) + { + DH * handle = DH_new (); ++ BIGNUM * p, * g; + + assert (prime_num != NULL); + assert (generator_num != NULL); ++ p = BN_bin2bn (prime_num, prime_num_length, NULL); ++ g = BN_bin2bn (generator_num, generator_num_length, NULL); + +- if (!check_pointer (handle->p = BN_bin2bn (prime_num, prime_num_length, NULL)) || +- !check_pointer (handle->g = BN_bin2bn (generator_num, generator_num_length, NULL))) ++ if (!check_pointer (p) || ++ !check_pointer (g) || ++ !DH_set0_pqg (handle, p, NULL, g)) + { ++ BN_free (p); ++ BN_free (g); + DH_free (handle); + handle = NULL; + } +@@ -267,16 +328,20 @@ tr_dh_make_key (tr_dh_ctx_t raw_handle, + { + DH * handle = raw_handle; + int dh_size, my_public_key_length; ++ const BIGNUM * hand_pub_key; + + assert (handle != NULL); + assert (public_key != NULL); + +- handle->length = private_key_length * 8; ++ ++ DH_set_length(handle, private_key_length * 8); + + if (!check_result (DH_generate_key (handle))) + return false; + +- my_public_key_length = BN_bn2bin (handle->pub_key, public_key); ++ DH_get0_key (handle, &hand_pub_key, NULL); ++ ++ my_public_key_length = BN_bn2bin (hand_pub_key, public_key); + dh_size = DH_size (handle); + + tr_dh_align_key (public_key, my_public_key_length, dh_size); +From 8c8386a7f3f482a9c917f51d28e0042e55f56b3e Mon Sep 17 00:00:00 2001 +From: Mike Gelfand +Date: Wed, 7 Sep 2016 01:09:04 +0300 +Subject: [PATCH] Fix coding style and building with !TR_LIGHTWEIGHT + +--- + libtransmission/crypto-utils-openssl.c | 60 +++++++++++++++++++--------------- + 1 file changed, 33 insertions(+), 27 deletions(-) + +diff --git a/libtransmission/crypto-utils-openssl.c b/libtransmission/crypto-utils-openssl.c +index 972e24a..9fd2c58 100644 +--- a/libtransmission/crypto-utils-openssl.c ++++ b/libtransmission/crypto-utils-openssl.c +@@ -14,6 +14,7 @@ + #include + + #include ++#include + #include + #include + #include +@@ -48,7 +49,12 @@ log_openssl_error (const char * file, + static bool strings_loaded = false; + if (!strings_loaded) + { ++#if OPENSSL_VERSION_NUMBER < 0x10100000 + ERR_load_crypto_strings (); ++#else ++ OPENSSL_init_crypto (OPENSSL_INIT_LOAD_CRYPTO_STRINGS, NULL); ++#endif ++ + strings_loaded = true; + } + #endif +@@ -230,6 +236,7 @@ tr_rc4_process (tr_rc4_ctx_t handle, + ***/ + + #if OPENSSL_VERSION_NUMBER < 0x10100000 ++ + static inline int + DH_set0_pqg (DH * dh, + BIGNUM * p, +@@ -237,28 +244,29 @@ DH_set0_pqg (DH * dh, + BIGNUM * g) + { + /* If the fields p and g in d are NULL, the corresponding input +- * parameters MUST be non-NULL. q may remain NULL. ++ * parameters MUST be non-NULL. q may remain NULL. + */ +- if ((dh->p == NULL && p == NULL) +- || (dh->g == NULL && g == NULL)) ++ if ((dh->p == NULL && p == NULL) || (dh->g == NULL && g == NULL)) + return 0; + +- if (p != NULL) { +- BN_free (dh->p); +- dh->p = p; +- } +- if (q != NULL) { +- BN_free (dh->q); +- dh->q = q; +- } +- if (g != NULL) { +- BN_free (dh->g); +- dh->g = g; +- } +- +- if (q != NULL) { ++ if (p != NULL) ++ { ++ BN_free (dh->p); ++ dh->p = p; ++ } ++ if (q != NULL) ++ { ++ BN_free (dh->q); ++ dh->q = q; ++ } ++ if (g != NULL) ++ { ++ BN_free (dh->g); ++ dh->g = g; ++ } ++ ++ if (q != NULL) + dh->length = BN_num_bits (q); +- } + + return 1; + } +@@ -267,8 +275,8 @@ static inline int + DH_set_length (DH * dh, + long length) + { +- dh->length = length; +- return 1; ++ dh->length = length; ++ return 1; + } + + static inline void +@@ -295,12 +303,11 @@ tr_dh_new (const uint8_t * prime_num, + + assert (prime_num != NULL); + assert (generator_num != NULL); ++ + p = BN_bin2bn (prime_num, prime_num_length, NULL); + g = BN_bin2bn (generator_num, generator_num_length, NULL); + +- if (!check_pointer (p) || +- !check_pointer (g) || +- !DH_set0_pqg (handle, p, NULL, g)) ++ if (!check_pointer (p) || !check_pointer (g) || !DH_set0_pqg (handle, p, NULL, g)) + { + BN_free (p); + BN_free (g); +@@ -328,20 +335,19 @@ tr_dh_make_key (tr_dh_ctx_t raw_handle, + { + DH * handle = raw_handle; + int dh_size, my_public_key_length; +- const BIGNUM * hand_pub_key; ++ const BIGNUM * my_public_key; + + assert (handle != NULL); + assert (public_key != NULL); + +- + DH_set_length(handle, private_key_length * 8); + + if (!check_result (DH_generate_key (handle))) + return false; + +- DH_get0_key (handle, &hand_pub_key, NULL); ++ DH_get0_key (handle, &my_public_key, NULL); + +- my_public_key_length = BN_bn2bin (hand_pub_key, public_key); ++ my_public_key_length = BN_bn2bin (my_public_key, public_key); + dh_size = DH_size (handle); + + tr_dh_align_key (public_key, my_public_key_length, dh_size); From 5c82a9f0409e67dd10aeacf82fdcf3042fea31c7 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 16:48:20 +0000 Subject: [PATCH 10/91] python-typing: Required for m2crypto Signed-off-by: Michael Tremer --- config/rootfiles/common/python-typing | 3 + lfs/python-typing | 79 +++++++++++++++++++++++++++ make.sh | 1 + 3 files changed, 83 insertions(+) create mode 100644 config/rootfiles/common/python-typing create mode 100644 lfs/python-typing diff --git a/config/rootfiles/common/python-typing b/config/rootfiles/common/python-typing new file mode 100644 index 000000000..519796ca4 --- /dev/null +++ b/config/rootfiles/common/python-typing @@ -0,0 +1,3 @@ +#usr/lib/python2.7/site-packages/typing-3.6.1-py2.7.egg-info +#usr/lib/python2.7/site-packages/typing.py +#usr/lib/python2.7/site-packages/typing.pyc diff --git a/lfs/python-typing b/lfs/python-typing new file mode 100644 index 000000000..9f028bed5 --- /dev/null +++ b/lfs/python-typing @@ -0,0 +1,79 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2011 IPFire Team # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see . # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 3.6.1 + +THISAPP = typing-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) +TARGET = $(DIR_INFO)/$(THISAPP) + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_MD5 = 3fec97415bae6f742fb3c3013dedeb89 + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +md5 : $(subst %,%_MD5,$(objects)) + +#dist: +# @$(PAK) + +############################################################################### +# Downloading, checking, md5sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_MD5,$(objects)) : + @$(MD5) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && python setup.py build + cd $(DIR_APP) && python setup.py install --skip-build + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/make.sh b/make.sh index 4fa48f20b..f65cbb69d 100755 --- a/make.sh +++ b/make.sh @@ -1439,6 +1439,7 @@ buildipfire() { lfsmake2 powertop lfsmake2 parted lfsmake2 swig + lfsmake2 python-typing lfsmake2 python-m2crypto lfsmake2 wireless-regdb lfsmake2 crda From fd07dae7a4c6e78761b2005a9785155610adba0d Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 28 Nov 2017 16:51:51 +0000 Subject: [PATCH 11/91] python-m2crypto: Update to 0.27.0 Signed-off-by: Michael Tremer --- lfs/python-m2crypto | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/lfs/python-m2crypto b/lfs/python-m2crypto index 536380c9b..bf29155af 100644 --- a/lfs/python-m2crypto +++ b/lfs/python-m2crypto @@ -24,7 +24,7 @@ include Config -VER = 0.21.1 +VER = 0.27.0 THISAPP = M2Crypto-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = f93d8462ff7646397a9f77a2fe602d17 +$(DL_FILE)_MD5 = 4477bd6b2835560c73982476dba5e515 install : $(TARGET) @@ -77,6 +77,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && python setup.py build cd $(DIR_APP) && python setup.py install @rm -rf $(DIR_APP) @$(POSTBUILD) From a46b159a8dc0d191ee57cf48b66be8a39fd7d9ec Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Thu, 11 Jan 2018 11:49:31 +0000 Subject: [PATCH 12/91] wget: Link against GnuTLS instead of OpenSSL This version does not seem to be compatible with OpenSSL 1.1 and might be changed back to OpenSSL when ever it will compile. Signed-off-by: Michael Tremer --- lfs/wget | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lfs/wget b/lfs/wget index 7a5cdbb11..71b3abc48 100644 --- a/lfs/wget +++ b/lfs/wget @@ -74,7 +74,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && ./configure \ --prefix=/usr \ --sysconfdir=/etc \ - --with-ssl=openssl \ + --with-ssl=gnutls \ --disable-nls \ --disable-ipv6 From 1b7cb0484c0b9ca8bd20d480b8fa8ad6c31dfb12 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Sat, 13 Jan 2018 11:59:37 +0000 Subject: [PATCH 13/91] openssl: Enable engines Some tools that depend on openssl won't compile without it Signed-off-by: Michael Tremer --- config/rootfiles/common/openssl | 2 ++ lfs/openssl | 1 - 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl index 6f65e710b..2d8068a6a 100644 --- a/config/rootfiles/common/openssl +++ b/config/rootfiles/common/openssl @@ -82,6 +82,8 @@ usr/bin/openssl #usr/include/openssl/x509.h #usr/include/openssl/x509_vfy.h #usr/include/openssl/x509v3.h +usr/lib/engines-1.1/capi.so +usr/lib/engines-1.1/padlock.so #usr/lib/libcrypto.a usr/lib/libcrypto.so usr/lib/libcrypto.so.1.1 diff --git a/lfs/openssl b/lfs/openssl index 2cc687ebd..f1dccc76c 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -53,7 +53,6 @@ CONFIGURE_OPTIONS = \ enable-rfc3779 \ enable-ssl3 \ enable-ssl3-method \ - no-engine \ no-idea \ no-mdc2 \ no-rc5 \ From 8b87254a02c275a1e19dcd25cf27d83eb5babd38 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Sat, 13 Jan 2018 12:00:08 +0000 Subject: [PATCH 14/91] python-m2crypto: Install in correct directory Signed-off-by: Michael Tremer --- lfs/python-m2crypto | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lfs/python-m2crypto b/lfs/python-m2crypto index bf29155af..3e69f7090 100644 --- a/lfs/python-m2crypto +++ b/lfs/python-m2crypto @@ -78,6 +78,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && python setup.py build - cd $(DIR_APP) && python setup.py install + cd $(DIR_APP) && python setup.py install --root=/ @rm -rf $(DIR_APP) @$(POSTBUILD) From 3b83dffc1961a3911e8197621c8e59ab44b5c614 Mon Sep 17 00:00:00 2001 From: Erik Kapfer Date: Wed, 31 Jan 2018 10:34:59 +0100 Subject: [PATCH 15/91] OpenVPN: Update to version 2.4.4 Changed LFS and ROOTFILE for OpenVPN 2.4.4 update. Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer --- config/rootfiles/common/openvpn | 4 +++- lfs/openvpn | 6 +++--- 2 files changed, 6 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/openvpn b/config/rootfiles/common/openvpn index b58e30c53..2b63424c3 100644 --- a/config/rootfiles/common/openvpn +++ b/config/rootfiles/common/openvpn @@ -1,3 +1,4 @@ +#usr/include/openvpn-msg.h #usr/include/openvpn-plugin.h #usr/lib/openvpn #usr/lib/openvpn/plugins @@ -10,11 +11,12 @@ usr/sbin/openvpn #usr/share/doc/openvpn #usr/share/doc/openvpn/COPYING #usr/share/doc/openvpn/COPYRIGHT.GPL +#usr/share/doc/openvpn/Changes.rst #usr/share/doc/openvpn/README #usr/share/doc/openvpn/README.IPv6 #usr/share/doc/openvpn/README.auth-pam #usr/share/doc/openvpn/README.down-root -#usr/share/doc/openvpn/README.polarssl +#usr/share/doc/openvpn/README.mbedtls #usr/share/doc/openvpn/management-notes.txt #usr/share/man/man8/openvpn.8 var/ipfire/ovpn/ca diff --git a/lfs/openvpn b/lfs/openvpn index 8307d0147..3913f02bd 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2017 IPFire Team # +# Copyright (C) 2018 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.3.18 +VER = 2.4.4 THISAPP = openvpn-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 844ec9c64aae62051478784b8562f881 +$(DL_FILE)_MD5 = 7a2002aad1671b24457bc9432a0c5c52 install : $(TARGET) From 56f8478e4daaf4028f7332561da4b3418eed6b3a Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 2 Feb 2018 10:59:37 +0000 Subject: [PATCH 16/91] openssl: Rootfile update Signed-off-by: Michael Tremer --- config/rootfiles/common/openssl | 1 + 1 file changed, 1 insertion(+) diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl index 2d8068a6a..87143c5c6 100644 --- a/config/rootfiles/common/openssl +++ b/config/rootfiles/common/openssl @@ -82,6 +82,7 @@ usr/bin/openssl #usr/include/openssl/x509.h #usr/include/openssl/x509_vfy.h #usr/include/openssl/x509v3.h +#usr/lib/engines-1.1 usr/lib/engines-1.1/capi.so usr/lib/engines-1.1/padlock.so #usr/lib/libcrypto.a From 11e78f38b9fe0e5087dd59ef76782cd39bd8f197 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 2 Feb 2018 11:12:19 +0000 Subject: [PATCH 17/91] Package openssl-compat (1.0.2.n) This is provided for compatibility with binaries that have been compiled against this version of OpenSSL. Signed-off-by: Michael Tremer --- config/rootfiles/common/openssl-compat | 2 + lfs/openssl-compat | 149 ++++++++++++++++++ make.sh | 1 + .../openssl-1.0.0-beta5-enginesdir.patch | 52 ++++++ src/patches/openssl-1.0.2a-rpmbuild.patch | 115 ++++++++++++++ ...openssl-1.0.2a_disable_ssse3_for_amd.patch | 11 ++ .../openssl-1.0.2g-disable-sslv2v3.patch | 18 +++ src/patches/openssl-1.0.2h-weak-ciphers.patch | 12 ++ 8 files changed, 360 insertions(+) create mode 100644 config/rootfiles/common/openssl-compat create mode 100644 lfs/openssl-compat create mode 100644 src/patches/openssl-1.0.0-beta5-enginesdir.patch create mode 100644 src/patches/openssl-1.0.2a-rpmbuild.patch create mode 100644 src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch create mode 100644 src/patches/openssl-1.0.2g-disable-sslv2v3.patch create mode 100644 src/patches/openssl-1.0.2h-weak-ciphers.patch diff --git a/config/rootfiles/common/openssl-compat b/config/rootfiles/common/openssl-compat new file mode 100644 index 000000000..7ef11e6b4 --- /dev/null +++ b/config/rootfiles/common/openssl-compat @@ -0,0 +1,2 @@ +usr/lib/libcrypto.so.10 +usr/lib/libssl.so.10 diff --git a/lfs/openssl-compat b/lfs/openssl-compat new file mode 100644 index 000000000..47c481d82 --- /dev/null +++ b/lfs/openssl-compat @@ -0,0 +1,149 @@ +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2007-2016 IPFire Team # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see . # +# # +############################################################################### + +############################################################################### +# Definitions +############################################################################### + +include Config + +VER = 1.0.2n + +THISAPP = openssl-$(VER) +DL_FILE = $(THISAPP).tar.gz +DL_FROM = $(URL_IPFIRE) +DIR_APP = $(DIR_SRC)/$(THISAPP) + +TARGET = $(DIR_INFO)/$(THISAPP)$(KCFG) + +export RPM_OPT_FLAGS = $(CFLAGS) + +CONFIGURE_OPTIONS = \ + --prefix=/usr \ + --openssldir=/etc/ssl \ + --enginesdir=/usr/lib/openssl/engines \ + shared \ + zlib-dynamic \ + enable-camellia \ + enable-md2 \ + disable-ssl2 \ + enable-seed \ + enable-tlsext \ + enable-rfc3779 \ + no-idea \ + no-mdc2 \ + no-rc5 \ + no-srp \ + -DSSL_FORBID_ENULL \ + $(OPENSSL_ARCH) + +ifeq "$(IS_64BIT)" "1" + OPENSSL_ARCH = linux-generic64 +else + OPENSSL_ARCH = linux-generic32 +endif + +ifeq "$(BUILD_ARCH)" "aarch64" + OPENSSL_ARCH = linux-aarch64 +endif + +ifeq "$(BUILD_ARCH)" "x86_64" + OPENSSL_ARCH = linux-x86_64 +endif + +ifeq "$(BUILD_ARCH)" "i586" + OPENSSL_ARCH = linux-elf + + ifneq "$(KCFG)" "-sse2" + OPENSSL_ARCH += no-sse2 + endif +endif + +############################################################################### +# Top-level Rules +############################################################################### + +objects = $(DL_FILE) + +$(DL_FILE) = $(DL_FROM)/$(DL_FILE) + +$(DL_FILE)_MD5 = 13bdc1b1d1ff39b6fd42a255e74676a4 + +install : $(TARGET) + +check : $(patsubst %,$(DIR_CHK)/%,$(objects)) + +download :$(patsubst %,$(DIR_DL)/%,$(objects)) + +md5 : $(subst %,%_MD5,$(objects)) + +############################################################################### +# Downloading, checking, md5sum +############################################################################### + +$(patsubst %,$(DIR_CHK)/%,$(objects)) : + @$(CHECK) + +$(patsubst %,$(DIR_DL)/%,$(objects)) : + @$(LOAD) + +$(subst %,%_MD5,$(objects)) : + @$(MD5) + +############################################################################### +# Installation Details +############################################################################### + +$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) + @$(PREBUILD) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.0-beta5-enginesdir.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a-rpmbuild.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2h-weak-ciphers.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2g-disable-sslv2v3.patch + + # i586 specific patches +ifeq "$(BUILD_ARCH)" "i586" + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_auto_enable_padlock.patch + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch +endif + + # With openssl 1.0.2e, pod2mantest is missing + echo -e "#!/bin/bash\necho \$$(which pod2man)" > $(DIR_APP)/util/pod2mantest + chmod a+x $(DIR_APP)/util/pod2mantest + + # Apply our CFLAGS + cd $(DIR_APP) && sed -i Configure \ + -e "s/-O3 -fomit-frame-pointer/$(CFLAGS)/g" + + cd $(DIR_APP) && find crypto/ -name Makefile -exec \ + sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \; + + cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS) + + cd $(DIR_APP) && make depend + cd $(DIR_APP) && make + + # Install libraries only + cd $(DIR_APP) && install -m 755 \ + libcrypto.so.10 libssl.so.10 + + @rm -rf $(DIR_APP) + @$(POSTBUILD) diff --git a/make.sh b/make.sh index f65cbb69d..0fac40d8b 100755 --- a/make.sh +++ b/make.sh @@ -1124,6 +1124,7 @@ buildipfire() { lfsmake2 xtables-addons USPACE="1" lfsmake2 openssl [ "${BUILD_ARCH}" = "i586" ] && lfsmake2 openssl KCFG='-sse2' + lfsmake2 openssl-compat lfsmake2 libgpg-error lfsmake2 libgcrypt lfsmake2 libassuan diff --git a/src/patches/openssl-1.0.0-beta5-enginesdir.patch b/src/patches/openssl-1.0.0-beta5-enginesdir.patch new file mode 100644 index 000000000..d942d6e2b --- /dev/null +++ b/src/patches/openssl-1.0.0-beta5-enginesdir.patch @@ -0,0 +1,52 @@ +diff -up openssl-1.0.0-beta5/Configure.enginesdir openssl-1.0.0-beta5/Configure +--- openssl-1.0.0-beta5/Configure.enginesdir 2010-01-20 18:07:05.000000000 +0100 ++++ openssl-1.0.0-beta5/Configure 2010-01-20 18:10:48.000000000 +0100 +@@ -622,6 +622,7 @@ my $idx_multilib = $idx++; + my $prefix=""; + my $libdir=""; + my $openssldir=""; ++my $enginesdir=""; + my $exe_ext=""; + my $install_prefix= "$ENV{'INSTALL_PREFIX'}"; + my $cross_compile_prefix=""; +@@ -833,6 +834,10 @@ PROCESS_ARGS: + { + $openssldir=$1; + } ++ elsif (/^--enginesdir=(.*)$/) ++ { ++ $enginesdir=$1; ++ } + elsif (/^--install.prefix=(.*)$/) + { + $install_prefix=$1; +@@ -1053,7 +1058,7 @@ chop $prefix if $prefix =~ /.\/$/; + + $openssldir=$prefix . "/ssl" if $openssldir eq ""; + $openssldir=$prefix . "/" . $openssldir if $openssldir !~ /(^\/|^[a-zA-Z]:[\\\/])/; +- ++$enginesdir="$prefix/lib/engines" if $enginesdir eq ""; + + print "IsMK1MF=$IsMK1MF\n"; + +@@ -1673,7 +1678,7 @@ while () + } + elsif (/^#define\s+ENGINESDIR/) + { +- my $foo = "$prefix/$libdir/engines"; ++ my $foo = "$enginesdir"; + $foo =~ s/\\/\\\\/g; + print OUT "#define ENGINESDIR \"$foo\"\n"; + } +diff -up openssl-1.0.0-beta5/engines/Makefile.enginesdir openssl-1.0.0-beta5/engines/Makefile +--- openssl-1.0.0-beta5/engines/Makefile.enginesdir 2010-01-16 21:06:09.000000000 +0100 ++++ openssl-1.0.0-beta5/engines/Makefile 2010-01-20 18:07:05.000000000 +0100 +@@ -124,7 +124,7 @@ install: + sfx=".so"; \ + cp cyg$$l.dll $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \ + fi; \ +- chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \ ++ chmod 755 $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new; \ + mv -f $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx.new $(INSTALL_PREFIX)$(INSTALLTOP)/$(LIBDIR)/engines/$$pfx$$l$$sfx ); \ + done; \ + fi diff --git a/src/patches/openssl-1.0.2a-rpmbuild.patch b/src/patches/openssl-1.0.2a-rpmbuild.patch new file mode 100644 index 000000000..db1460cb7 --- /dev/null +++ b/src/patches/openssl-1.0.2a-rpmbuild.patch @@ -0,0 +1,115 @@ +diff -up openssl-1.0.2e/Configure.rpmbuild openssl-1.0.2e/Configure +--- openssl-1.0.2e/Configure.rpmbuild 2015-12-03 15:04:23.000000000 +0100 ++++ openssl-1.0.2e/Configure 2015-12-04 13:20:22.996835604 +0100 +@@ -365,8 +365,8 @@ my %table=( + #### + # *-generic* is endian-neutral target, but ./config is free to + # throw in -D[BL]_ENDIAN, whichever appropriate... +-"linux-generic32","gcc:-O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +-"linux-ppc", "gcc:-DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", ++"linux-generic32","gcc:-Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", ++"linux-ppc", "gcc:-DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc32_asm}:linux32:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", + + ####################################################################### + # Note that -march is not among compiler options in below linux-armv4 +@@ -395,31 +395,31 @@ my %table=( + # + # ./Configure linux-armv4 -march=armv6 -D__ARM_MAX_ARCH__=8 + # +-"linux-armv4", "gcc: -O3 -Wall::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +-"linux-aarch64","gcc: -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", ++"linux-armv4", "gcc:-Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${armv4_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", ++"linux-aarch64","gcc:-DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${aarch64_asm}:linux64:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", + # Configure script adds minimally required -march for assembly support, + # if no -march was specified at command line. mips32 and mips64 below + # refer to contemporary MIPS Architecture specifications, MIPS32 and + # MIPS64, rather than to kernel bitness. +-"linux-mips32", "gcc:-mabi=32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +-"linux-mips64", "gcc:-mabi=n32 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:n32:dlfcn:linux-shared:-fPIC:-mabi=n32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::32", +-"linux64-mips64", "gcc:-mabi=64 -O3 -Wall -DBN_DIV3W::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:64:dlfcn:linux-shared:-fPIC:-mabi=64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", ++"linux-mips32", "gcc:-mabi=32 -Wall \$(RPM_OPT_FLAGS) -DBN_DIV3W::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips32_asm}:o32:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", ++"linux-mips64", "gcc:-mabi=n32 -Wall \$(RPM_OPT_FLAGS) -DBN_DIV3W::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:n32:dlfcn:linux-shared:-fPIC:-mabi=n32 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::32", ++"linux64-mips64", "gcc:-mabi=64 -Wall \$(RPM_OPT_FLAGS) -DBN_DIV3W::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${mips64_asm}:64:dlfcn:linux-shared:-fPIC:-mabi=64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", + #### IA-32 targets... + "linux-ia32-icc", "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-KPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +-"linux-elf", "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", ++"linux-elf", "gcc:-DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", + "linux-aout", "gcc:-DL_ENDIAN -O3 -fomit-frame-pointer -march=i486 -Wall::(unknown):::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_asm}:a.out", + #### +-"linux-generic64","gcc:-O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +-"linux-ppc64", "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", +-"linux-ppc64le","gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:$ppc64_asm:linux64le:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::", +-"linux-ia64", "gcc:-DL_ENDIAN -DTERMIO -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", ++"linux-generic64","gcc:-Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL BF_PTR:${no_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", ++"linux-ppc64", "gcc:-m64 -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:${ppc64_asm}:linux64:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", ++"linux-ppc64le","gcc:-m64 -DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_RISC1 DES_UNROLL:$ppc64_asm:linux64le:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", ++"linux-ia64", "gcc:-DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_UNROLL DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", + "linux-ia64-icc","icc:-DL_ENDIAN -O2 -Wall::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_RISC1 DES_INT:${ia64_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +-"linux-x86_64", "gcc:-m64 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", ++"linux-x86_64", "gcc:-m64 -DL_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", + "linux-x86_64-clang", "clang: -m64 -DL_ENDIAN -O3 -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", + "debug-linux-x86_64-clang", "clang: -DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DCRYPTO_MDEBUG -m64 -DL_ENDIAN -g -Wall -Wextra $clang_disabled_warnings -Qunused-arguments::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", + "linux-x86_64-icc", "icc:-DL_ENDIAN -O2::-D_REENTRANT::-ldl -no_cpprt:SIXTY_FOUR_BIT_LONG RC4_CHUNK DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", + "linux-x32", "gcc:-mx32 -DL_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT RC4_CHUNK_LL DES_INT DES_UNROLL:${x86_64_asm}:elf:dlfcn:linux-shared:-fPIC:-mx32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::x32", +-"linux64-s390x", "gcc:-m64 -DB_ENDIAN -O3 -Wall::-D_REENTRANT::-ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", ++"linux64-s390x", "gcc:-m64 -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT::-Wl,-z,relro -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_UNROLL:${s390x_asm}:64:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", + #### So called "highgprs" target for z/Architecture CPUs + # "Highgprs" is kernel feature first implemented in Linux 2.6.32, see + # /proc/cpuinfo. The idea is to preserve most significant bits of +@@ -437,12 +437,12 @@ my %table=( + #### SPARC Linux setups + # Ray Miller has patiently + # assisted with debugging of following two configs. +-"linux-sparcv8","gcc:-mcpu=v8 -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", ++"linux-sparcv8","gcc:-mcpu=v8 -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS) -DBN_DIV2W::-D_REENTRANT::-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv8_asm}:dlfcn:linux-shared:-fPIC:\$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", + # it's a real mess with -mcpu=ultrasparc option under Linux, but + # -Wa,-Av8plus should do the trick no matter what. +-"linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", ++"linux-sparcv9","gcc:-m32 -mcpu=ultrasparc -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS) -Wa,-Av8plus -DBN_DIV2W::-D_REENTRANT:ULTRASPARC:-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m32 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER)", + # GCC 3.1 is a requirement +-"linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -O3 -fomit-frame-pointer -Wall::-D_REENTRANT:ULTRASPARC:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR):::64", ++"linux64-sparcv9","gcc:-m64 -mcpu=ultrasparc -DB_ENDIAN -Wall \$(RPM_OPT_FLAGS)::-D_REENTRANT:ULTRASPARC:-Wl,-z,relro -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR:${sparcv9_asm}:dlfcn:linux-shared:-fPIC:-m64 \$(RPM_OPT_FLAGS):.so.\$(SHLIB_SONAMEVER):::64", + #### Alpha Linux with GNU C and Compaq C setups + # Special notes: + # - linux-alpha+bwx-gcc is ment to be used from ./config only. If you +@@ -1767,7 +1767,7 @@ while () + elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/) + { + my $sotmp = $1; +- s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/; ++ s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_SONAMEVER) .s$sotmp/; + } + elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/) + { +diff -up openssl-1.0.2e/Makefile.org.rpmbuild openssl-1.0.2e/Makefile.org +--- openssl-1.0.2e/Makefile.org.rpmbuild 2015-12-03 15:04:23.000000000 +0100 ++++ openssl-1.0.2e/Makefile.org 2015-12-04 13:18:44.913538616 +0100 +@@ -10,6 +10,7 @@ SHLIB_VERSION_HISTORY= + SHLIB_MAJOR= + SHLIB_MINOR= + SHLIB_EXT= ++SHLIB_SONAMEVER=10 + PLATFORM=dist + OPTIONS= + CONFIGURE_ARGS= +@@ -341,10 +342,9 @@ clean-shared: + link-shared: + @ set -e; for i in $(SHLIBDIRS); do \ + $(MAKE) -f $(HERE)/Makefile.shared -e $(BUILDENV) \ +- LIBNAME=$$i LIBVERSION=$(SHLIB_MAJOR).$(SHLIB_MINOR) \ ++ LIBNAME=$$i LIBVERSION=$(SHLIB_SONAMEVER) \ + LIBCOMPATVERSIONS=";$(SHLIB_VERSION_HISTORY)" \ + symlink.$(SHLIB_TARGET); \ +- libs="$$libs -l$$i"; \ + done + + build-shared: do_$(SHLIB_TARGET) link-shared +@@ -355,7 +355,7 @@ do_$(SHLIB_TARGET): + libs="$(LIBKRB5) $$libs"; \ + fi; \ + $(CLEARENV) && $(MAKE) -f Makefile.shared -e $(BUILDENV) \ +- LIBNAME=$$i LIBVERSION=$(SHLIB_MAJOR).$(SHLIB_MINOR) \ ++ LIBNAME=$$i LIBVERSION=$(SHLIB_SONAMEVER) \ + LIBCOMPATVERSIONS=";$(SHLIB_VERSION_HISTORY)" \ + LIBDEPS="$$libs $(EX_LIBS)" \ + link_a.$(SHLIB_TARGET); \ diff --git a/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch b/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch new file mode 100644 index 000000000..097cc8071 --- /dev/null +++ b/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch @@ -0,0 +1,11 @@ +diff -Naur openssl-1.0.2a.org/crypto/x86cpuid.pl openssl-1.0.2a/crypto/x86cpuid.pl +--- openssl-1.0.2a.org/crypto/x86cpuid.pl 2015-03-19 14:30:36.000000000 +0100 ++++ openssl-1.0.2a/crypto/x86cpuid.pl 2015-04-28 13:47:57.853521020 +0200 +@@ -71,6 +71,7 @@ + &mov ("eax",1); + &xor ("ecx","ecx"); + &cpuid (); ++ &and ("ecx",0xfffffdff); # clear SSSE3 because it is incredible slow on AMD's + &bt ("edx",28); + &jnc (&label("generic")); + &shr ("ebx",16); diff --git a/src/patches/openssl-1.0.2g-disable-sslv2v3.patch b/src/patches/openssl-1.0.2g-disable-sslv2v3.patch new file mode 100644 index 000000000..06f51322b --- /dev/null +++ b/src/patches/openssl-1.0.2g-disable-sslv2v3.patch @@ -0,0 +1,18 @@ +diff -up openssl-1.0.2g/ssl/ssl_lib.c.v2v3 openssl-1.0.2g/ssl/ssl_lib.c +--- openssl-1.0.2g/ssl/ssl_lib.c.v2v3 2016-03-01 16:38:26.879142021 +0100 ++++ openssl-1.0.2g/ssl/ssl_lib.c 2016-03-01 16:41:32.977353769 +0100 +@@ -2055,11 +2055,11 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m + ret->options |= SSL_OP_LEGACY_SERVER_CONNECT; + + /* +- * Disable SSLv2 by default, callers that want to enable SSLv2 will have to +- * explicitly clear this option via either of SSL_CTX_clear_options() or ++ * Disable SSLv2 and SSLv3 by default, callers that want to enable these will have to ++ * explicitly clear these options via either of SSL_CTX_clear_options() or + * SSL_clear_options(). + */ +- ret->options |= SSL_OP_NO_SSLv2; ++ ret->options |= SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3; + + return (ret); + err: diff --git a/src/patches/openssl-1.0.2h-weak-ciphers.patch b/src/patches/openssl-1.0.2h-weak-ciphers.patch new file mode 100644 index 000000000..d1ec6a2af --- /dev/null +++ b/src/patches/openssl-1.0.2h-weak-ciphers.patch @@ -0,0 +1,12 @@ +diff -Naur openssl-1.0.2h.org/ssl/ssl.h openssl-1.0.2h/ssl/ssl.h +--- openssl-1.0.2h.org/ssl/ssl.h 2016-05-03 15:44:42.000000000 +0200 ++++ openssl-1.0.2h/ssl/ssl.h 2016-05-03 18:49:10.393302264 +0200 +@@ -338,7 +338,7 @@ + * The following cipher list is used by default. It also is substituted when + * an application-defined cipher list string starts with 'DEFAULT'. + */ +-# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!LOW:!aNULL:!eNULL:!SSLv2" ++# define SSL_DEFAULT_CIPHER_LIST "ALL:!EXPORT:!LOW:!aNULL:!eNULL:!SSLv2:!RC2:!DES" + /* + * As of OpenSSL 1.0.0, ssl_create_cipher_list() in ssl/ssl_ciph.c always + * starts with a reasonable order, and all we have to do for DEFAULT is From 59d77d2eae265304887408b1d36074269f6075a4 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 7 Feb 2018 12:43:28 +0000 Subject: [PATCH 18/91] openssl: Properly pass CFLAGS and LDFLAGS to build Signed-off-by: Michael Tremer --- lfs/openssl | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/lfs/openssl b/lfs/openssl index f1dccc76c..bd7098039 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -128,7 +128,8 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && find crypto/ -name Makefile -exec \ sed 's/^ASFLAGS=/&-Wa,--noexecstack /' -i {} \; - cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS) + cd $(DIR_APP) && ./Configure $(CONFIGURE_OPTIONS) \ + $(CFLAGS) $(LDFLAGS) cd $(DIR_APP) && make depend cd $(DIR_APP) && make From bd42f9f968112d2f15847c274d0e4c8b7bd9ddf1 Mon Sep 17 00:00:00 2001 From: Erik Kapfer Date: Wed, 7 Feb 2018 18:31:49 +0100 Subject: [PATCH 19/91] CRL updater: Update script for OpenVPNs CRL Update script for OpenVPNs CRL cause OpenVPN refactors the CRL handling since v.2.4.0 . Script checks the next update field from the CRL and executes an update before it expires. Script is placed under fcron.daily for daily checks. Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer --- config/ovpn/openvpn-crl-updater | 90 +++++++++++++++++++++++++++++++++ config/rootfiles/common/openvpn | 1 + lfs/openvpn | 5 ++ 3 files changed, 96 insertions(+) create mode 100644 config/ovpn/openvpn-crl-updater diff --git a/config/ovpn/openvpn-crl-updater b/config/ovpn/openvpn-crl-updater new file mode 100644 index 000000000..5fbe21080 --- /dev/null +++ b/config/ovpn/openvpn-crl-updater @@ -0,0 +1,90 @@ +#!/bin/bash +############################################################################### +# # +# IPFire.org - A linux based firewall # +# Copyright (C) 2018 IPFire Team # +# # +# This program is free software: you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation, either version 3 of the License, or # +# (at your option) any later version. # +# # +# This program is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with this program. If not, see . # +# # +############################################################################### + +############################################################################### +# # +# Script Location/Name: /etc/fcron.daily/openvpn-crl-updater # +# # +# Description: This script checks the "Next Update:" field of the CRL # +# and renews it if needed, which prevents the expiration of OpenVPNs CRL. # +# With OpenVPN 2.4.x the CRL handling has been refactored, # +# whereby the verification logic has been removed # +# from ssl_verify_.c . # +# # +# Run Information: If OpenVPNs CRL is present, # +# this script provides a cronjob which checks daily if an update # +# of the CRL is needed. If the expiring date reaches the value # +# (defined in the 'UPDATE' variable in days) before the CRL expiration, # +# an openssl command will be executed to renew the CRL. # +# Script execution will be logged into /var/log/messages. # +# # +############################################################################### + +## Paths +OVPN="/var/ipfire/ovpn" +CRL="${OVPN}/crls/cacrl.pem" +CAKEY="${OVPN}/ca/cakey.pem" +CACERT="${OVPN}/ca/cacert.pem" +OPENSSLCONF="${OVPN}/openssl/ovpn.cnf" + +# Check if CRL is presant or if OpenVPN is active +if [ ! -e "${CAKEY}" ]; then + exit 0; +fi + +## Values +# Actual time in epoch format +NOW="$(date +%s)" + +# Investigate CRLs 'Next Update' date +EXPIRES_CRL="$(openssl crl -in "${CRL}" -text | grep -oP 'Next Update: *\K.*')" + +# Convert 'Next Update:' date from epoch to seconds +EXPIRES_AT="$(date -d "${EXPIRES_CRL}" "+%s")" + +# Seconds left until CRL expires +EXPIRINGDATEINSEC="$(( EXPIRES_AT - NOW ))" + +# Day in seconds to calculate +DAYINSEC="86400" + +# Convert seconds to days +NEXTUPDATE="$(( EXPIRINGDATEINSEC / DAYINSEC ))" + +# Update of the CRL in days before CRL expiring date +UPDATE="14" + + +## Mainpart +# Check if OpenVPNs CRL needs to be renewed +if [ ${NEXTUPDATE} -le ${UPDATE} ]; then + if openssl ca -gencrl -keyfile "${CAKEY}" -cert "${CACERT}" -out "${CRL}" -config "${OPENSSLCONF}"; then + logger -t openvpn "CRL has been updated" + else + logger -t openvpn "error: Could not update CRL" + fi +fi + +exit 0 + + +# EOF + diff --git a/config/rootfiles/common/openvpn b/config/rootfiles/common/openvpn index 2b63424c3..131d79873 100644 --- a/config/rootfiles/common/openvpn +++ b/config/rootfiles/common/openvpn @@ -1,3 +1,4 @@ +etc/fcron.daily/openvpn-crl-updater #usr/include/openvpn-msg.h #usr/include/openvpn-plugin.h #usr/lib/openvpn diff --git a/lfs/openvpn b/lfs/openvpn index 3913f02bd..ef25c2567 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -96,5 +96,10 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) mv -v /var/ipfire/ovpn/verify /usr/lib/openvpn/verify chown root:root /usr/lib/openvpn/verify chmod 755 /usr/lib/openvpn/verify + # Add crl updater + mv -v /var/ipfire/ovpn/openvpn-crl-updater /etc/fcron.daily + chown root:root /etc/fcron.daily/openvpn-crl-updater + chmod 750 /etc/fcron.daily/openvpn-crl-updater + @rm -rf $(DIR_APP) @$(POSTBUILD) From a4fd232541bf5002eb7e256727d2b10c89b6d1bf Mon Sep 17 00:00:00 2001 From: Erik Kapfer Date: Thu, 15 Feb 2018 05:43:49 +0100 Subject: [PATCH 20/91] OpenVPN: Added needed directive for v2.4 update script-security: The support for the 'system' flag has been removed due to security implications with shell expansions when executing scripts via system() call. For more informations: https://community.openvpn.net/openvpn/wiki/Openvpn24ManPage . ncp-disable: Negotiable crypto parameters has been disabled for the first. Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer --- html/cgi-bin/ovpnmain.cgi | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index 9f5e682bd..424a5c984 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -216,7 +216,7 @@ sub writeserverconf { print CONF "dev tun\n"; print CONF "proto $sovpnsettings{'DPROTOCOL'}\n"; print CONF "port $sovpnsettings{'DDEST_PORT'}\n"; - print CONF "script-security 3 system\n"; + print CONF "script-security 3\n"; print CONF "ifconfig-pool-persist /var/ipfire/ovpn/ovpn-leases.db 3600\n"; print CONF "client-config-dir /var/ipfire/ovpn/ccd\n"; print CONF "tls-server\n"; @@ -289,6 +289,7 @@ sub writeserverconf { } print CONF "status-version 1\n"; print CONF "status /var/run/ovpnserver.log 30\n"; + print CONF "ncp-disable\n"; print CONF "cipher $sovpnsettings{DCIPHER}\n"; if ($sovpnsettings{'DAUTH'} eq '') { print CONF ""; From cb8a6bf5a4a2794638da37b992799e275022c78d Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 21 Feb 2018 12:20:57 +0000 Subject: [PATCH 21/91] Start Core Update 120 Signed-off-by: Michael Tremer --- config/rootfiles/core/{119 => 120}/exclude | 0 config/rootfiles/core/120/filelists/files | 3 + config/rootfiles/core/{119 => 120}/meta | 0 config/rootfiles/core/120/update.sh | 62 +++++++++++++++++++ config/rootfiles/oldcore/119/exclude | 30 +++++++++ .../119/filelists/armv5tel/binutils | 0 .../119/filelists/armv5tel/gcc | 0 .../119/filelists/armv5tel/glibc | 0 .../{core => oldcore}/119/filelists/dma | 0 .../{core => oldcore}/119/filelists/files | 0 .../{core => oldcore}/119/filelists/hostname | 0 .../{core => oldcore}/119/filelists/i2c-tools | 0 .../119/filelists/i586/binutils | 0 .../{core => oldcore}/119/filelists/i586/gcc | 0 .../119/filelists/i586/glibc | 0 .../{core => oldcore}/119/filelists/iproute2 | 0 .../{core => oldcore}/119/filelists/pam | 0 .../{core => oldcore}/119/filelists/setup | 0 .../119/filelists/strongswan | 0 .../119/filelists/x86_64/binutils | 0 .../119/filelists/x86_64/gcc | 0 .../119/filelists/x86_64/glibc | 0 config/rootfiles/oldcore/119/meta | 1 + .../rootfiles/{core => oldcore}/119/update.sh | 0 make.sh | 4 +- 25 files changed, 98 insertions(+), 2 deletions(-) rename config/rootfiles/core/{119 => 120}/exclude (100%) create mode 100644 config/rootfiles/core/120/filelists/files rename config/rootfiles/core/{119 => 120}/meta (100%) create mode 100644 config/rootfiles/core/120/update.sh create mode 100644 config/rootfiles/oldcore/119/exclude rename config/rootfiles/{core => oldcore}/119/filelists/armv5tel/binutils (100%) rename config/rootfiles/{core => oldcore}/119/filelists/armv5tel/gcc (100%) rename config/rootfiles/{core => oldcore}/119/filelists/armv5tel/glibc (100%) rename config/rootfiles/{core => oldcore}/119/filelists/dma (100%) rename config/rootfiles/{core => oldcore}/119/filelists/files (100%) rename config/rootfiles/{core => oldcore}/119/filelists/hostname (100%) rename config/rootfiles/{core => oldcore}/119/filelists/i2c-tools (100%) rename config/rootfiles/{core => oldcore}/119/filelists/i586/binutils (100%) rename config/rootfiles/{core => oldcore}/119/filelists/i586/gcc (100%) rename config/rootfiles/{core => oldcore}/119/filelists/i586/glibc (100%) rename config/rootfiles/{core => oldcore}/119/filelists/iproute2 (100%) rename config/rootfiles/{core => oldcore}/119/filelists/pam (100%) rename config/rootfiles/{core => oldcore}/119/filelists/setup (100%) rename config/rootfiles/{core => oldcore}/119/filelists/strongswan (100%) rename config/rootfiles/{core => oldcore}/119/filelists/x86_64/binutils (100%) rename config/rootfiles/{core => oldcore}/119/filelists/x86_64/gcc (100%) rename config/rootfiles/{core => oldcore}/119/filelists/x86_64/glibc (100%) create mode 100644 config/rootfiles/oldcore/119/meta rename config/rootfiles/{core => oldcore}/119/update.sh (100%) diff --git a/config/rootfiles/core/119/exclude b/config/rootfiles/core/120/exclude similarity index 100% rename from config/rootfiles/core/119/exclude rename to config/rootfiles/core/120/exclude diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files new file mode 100644 index 000000000..168c7d188 --- /dev/null +++ b/config/rootfiles/core/120/filelists/files @@ -0,0 +1,3 @@ +etc/system-release +etc/issue +var/ipfire/langs diff --git a/config/rootfiles/core/119/meta b/config/rootfiles/core/120/meta similarity index 100% rename from config/rootfiles/core/119/meta rename to config/rootfiles/core/120/meta diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh new file mode 100644 index 000000000..9986316e9 --- /dev/null +++ b/config/rootfiles/core/120/update.sh @@ -0,0 +1,62 @@ +#!/bin/bash +############################################################################ +# # +# This file is part of the IPFire Firewall. # +# # +# IPFire is free software; you can redistribute it and/or modify # +# it under the terms of the GNU General Public License as published by # +# the Free Software Foundation; either version 3 of the License, or # +# (at your option) any later version. # +# # +# IPFire is distributed in the hope that it will be useful, # +# but WITHOUT ANY WARRANTY; without even the implied warranty of # +# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # +# GNU General Public License for more details. # +# # +# You should have received a copy of the GNU General Public License # +# along with IPFire; if not, write to the Free Software # +# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA # +# # +# Copyright (C) 2017 IPFire-Team . # +# # +############################################################################ +# +. /opt/pakfire/lib/functions.sh +/usr/local/bin/backupctrl exclude >/dev/null 2>&1 + +core=120 + +# Remove old core updates from pakfire cache to save space... +for (( i=1; i<=$core; i++ )); do + rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire +done + +# Stop services + +# Extract files +extract_files + +# update linker config +ldconfig + +# Update Language cache +/usr/local/bin/update-lang-cache + +# Start services + +# This update needs a reboot... +touch /var/run/need_reboot + +# Finish +/etc/init.d/fireinfo start +sendprofile + +# Update grub config to display new core version +if [ -e /boot/grub/grub.cfg ]; then + grub-mkconfig -o /boot/grub/grub.cfg +fi + +sync + +# Don't report the exitcode last command +exit 0 diff --git a/config/rootfiles/oldcore/119/exclude b/config/rootfiles/oldcore/119/exclude new file mode 100644 index 000000000..d6fd053b6 --- /dev/null +++ b/config/rootfiles/oldcore/119/exclude @@ -0,0 +1,30 @@ +boot/config.txt +boot/grub/grub.cfg +boot/grub/grubenv +etc/alternatives +etc/collectd.custom +etc/default/grub +etc/ipsec.conf +etc/ipsec.secrets +etc/ipsec.user.conf +etc/ipsec.user.secrets +etc/localtime +etc/shadow +etc/snort/snort.conf +etc/ssh/ssh_config +etc/ssh/sshd_config +etc/ssl/openssl.cnf +etc/sudoers +etc/sysconfig/firewall.local +etc/sysconfig/rc.local +etc/udev/rules.d/30-persistent-network.rules +srv/web/ipfire/html/proxy.pac +var/ipfire/dma +var/ipfire/time +var/ipfire/ovpn +var/lib/alternatives +var/log/cache +var/log/dhcpcd.log +var/log/messages +var/state/dhcp/dhcpd.leases +var/updatecache diff --git a/config/rootfiles/core/119/filelists/armv5tel/binutils b/config/rootfiles/oldcore/119/filelists/armv5tel/binutils similarity index 100% rename from config/rootfiles/core/119/filelists/armv5tel/binutils rename to config/rootfiles/oldcore/119/filelists/armv5tel/binutils diff --git a/config/rootfiles/core/119/filelists/armv5tel/gcc b/config/rootfiles/oldcore/119/filelists/armv5tel/gcc similarity index 100% rename from config/rootfiles/core/119/filelists/armv5tel/gcc rename to config/rootfiles/oldcore/119/filelists/armv5tel/gcc diff --git a/config/rootfiles/core/119/filelists/armv5tel/glibc b/config/rootfiles/oldcore/119/filelists/armv5tel/glibc similarity index 100% rename from config/rootfiles/core/119/filelists/armv5tel/glibc rename to config/rootfiles/oldcore/119/filelists/armv5tel/glibc diff --git a/config/rootfiles/core/119/filelists/dma b/config/rootfiles/oldcore/119/filelists/dma similarity index 100% rename from config/rootfiles/core/119/filelists/dma rename to config/rootfiles/oldcore/119/filelists/dma diff --git a/config/rootfiles/core/119/filelists/files b/config/rootfiles/oldcore/119/filelists/files similarity index 100% rename from config/rootfiles/core/119/filelists/files rename to config/rootfiles/oldcore/119/filelists/files diff --git a/config/rootfiles/core/119/filelists/hostname b/config/rootfiles/oldcore/119/filelists/hostname similarity index 100% rename from config/rootfiles/core/119/filelists/hostname rename to config/rootfiles/oldcore/119/filelists/hostname diff --git a/config/rootfiles/core/119/filelists/i2c-tools b/config/rootfiles/oldcore/119/filelists/i2c-tools similarity index 100% rename from config/rootfiles/core/119/filelists/i2c-tools rename to config/rootfiles/oldcore/119/filelists/i2c-tools diff --git a/config/rootfiles/core/119/filelists/i586/binutils b/config/rootfiles/oldcore/119/filelists/i586/binutils similarity index 100% rename from config/rootfiles/core/119/filelists/i586/binutils rename to config/rootfiles/oldcore/119/filelists/i586/binutils diff --git a/config/rootfiles/core/119/filelists/i586/gcc b/config/rootfiles/oldcore/119/filelists/i586/gcc similarity index 100% rename from config/rootfiles/core/119/filelists/i586/gcc rename to config/rootfiles/oldcore/119/filelists/i586/gcc diff --git a/config/rootfiles/core/119/filelists/i586/glibc b/config/rootfiles/oldcore/119/filelists/i586/glibc similarity index 100% rename from config/rootfiles/core/119/filelists/i586/glibc rename to config/rootfiles/oldcore/119/filelists/i586/glibc diff --git a/config/rootfiles/core/119/filelists/iproute2 b/config/rootfiles/oldcore/119/filelists/iproute2 similarity index 100% rename from config/rootfiles/core/119/filelists/iproute2 rename to config/rootfiles/oldcore/119/filelists/iproute2 diff --git a/config/rootfiles/core/119/filelists/pam b/config/rootfiles/oldcore/119/filelists/pam similarity index 100% rename from config/rootfiles/core/119/filelists/pam rename to config/rootfiles/oldcore/119/filelists/pam diff --git a/config/rootfiles/core/119/filelists/setup b/config/rootfiles/oldcore/119/filelists/setup similarity index 100% rename from config/rootfiles/core/119/filelists/setup rename to config/rootfiles/oldcore/119/filelists/setup diff --git a/config/rootfiles/core/119/filelists/strongswan b/config/rootfiles/oldcore/119/filelists/strongswan similarity index 100% rename from config/rootfiles/core/119/filelists/strongswan rename to config/rootfiles/oldcore/119/filelists/strongswan diff --git a/config/rootfiles/core/119/filelists/x86_64/binutils b/config/rootfiles/oldcore/119/filelists/x86_64/binutils similarity index 100% rename from config/rootfiles/core/119/filelists/x86_64/binutils rename to config/rootfiles/oldcore/119/filelists/x86_64/binutils diff --git a/config/rootfiles/core/119/filelists/x86_64/gcc b/config/rootfiles/oldcore/119/filelists/x86_64/gcc similarity index 100% rename from config/rootfiles/core/119/filelists/x86_64/gcc rename to config/rootfiles/oldcore/119/filelists/x86_64/gcc diff --git a/config/rootfiles/core/119/filelists/x86_64/glibc b/config/rootfiles/oldcore/119/filelists/x86_64/glibc similarity index 100% rename from config/rootfiles/core/119/filelists/x86_64/glibc rename to config/rootfiles/oldcore/119/filelists/x86_64/glibc diff --git a/config/rootfiles/oldcore/119/meta b/config/rootfiles/oldcore/119/meta new file mode 100644 index 000000000..d547fa86f --- /dev/null +++ b/config/rootfiles/oldcore/119/meta @@ -0,0 +1 @@ +DEPS="" diff --git a/config/rootfiles/core/119/update.sh b/config/rootfiles/oldcore/119/update.sh similarity index 100% rename from config/rootfiles/core/119/update.sh rename to config/rootfiles/oldcore/119/update.sh diff --git a/make.sh b/make.sh index b85910ad4..44c18fee7 100755 --- a/make.sh +++ b/make.sh @@ -25,8 +25,8 @@ NAME="IPFire" # Software name SNAME="ipfire" # Short name VERSION="2.19" # Version number -CORE="119" # Core Level (Filename) -PAKFIRE_CORE="118" # Core Level (PAKFIRE) +CORE="120" # Core Level (Filename) +PAKFIRE_CORE="119" # Core Level (PAKFIRE) GIT_BRANCH=`git rev-parse --abbrev-ref HEAD` # Git Branch SLOGAN="www.ipfire.org" # Software slogan CONFIG_ROOT=/var/ipfire # Configuration rootdir From 53929f5ae8a2edc8dff4484b4d293fcba5dd50af Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 21 Feb 2018 12:39:55 +0000 Subject: [PATCH 22/91] core120: Ship updated OpenSSL 1.1.0 Signed-off-by: Michael Tremer --- config/rootfiles/core/120/filelists/Net_SSLeay | 1 + config/rootfiles/core/120/filelists/cyrus-sasl | 1 + config/rootfiles/core/120/filelists/files | 2 ++ .../core/120/filelists/i586/openssl-sse2 | 1 + config/rootfiles/core/120/filelists/openssh | 1 + config/rootfiles/core/120/filelists/openssl | 1 + .../core/120/filelists/openssl-compat | 1 + config/rootfiles/core/120/filelists/openvpn | 1 + .../rootfiles/core/120/filelists/python-typing | 1 + config/rootfiles/core/120/filelists/wget | 1 + config/rootfiles/core/120/update.sh | 18 ++++++++++++++++++ 11 files changed, 29 insertions(+) create mode 120000 config/rootfiles/core/120/filelists/Net_SSLeay create mode 120000 config/rootfiles/core/120/filelists/cyrus-sasl create mode 120000 config/rootfiles/core/120/filelists/i586/openssl-sse2 create mode 120000 config/rootfiles/core/120/filelists/openssh create mode 120000 config/rootfiles/core/120/filelists/openssl create mode 120000 config/rootfiles/core/120/filelists/openssl-compat create mode 120000 config/rootfiles/core/120/filelists/openvpn create mode 120000 config/rootfiles/core/120/filelists/python-typing create mode 120000 config/rootfiles/core/120/filelists/wget diff --git a/config/rootfiles/core/120/filelists/Net_SSLeay b/config/rootfiles/core/120/filelists/Net_SSLeay new file mode 120000 index 000000000..13fe0560c --- /dev/null +++ b/config/rootfiles/core/120/filelists/Net_SSLeay @@ -0,0 +1 @@ +../../../common/Net_SSLeay \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/cyrus-sasl b/config/rootfiles/core/120/filelists/cyrus-sasl new file mode 120000 index 000000000..bb51b4c92 --- /dev/null +++ b/config/rootfiles/core/120/filelists/cyrus-sasl @@ -0,0 +1 @@ +../../../common/cyrus-sasl \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index 168c7d188..4baf08ebf 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -1,3 +1,5 @@ etc/system-release etc/issue +etc/fcron.daily/openvpn-crl-updater +srv/web/ipfire/cgi-bin/ovpnmain.cgi var/ipfire/langs diff --git a/config/rootfiles/core/120/filelists/i586/openssl-sse2 b/config/rootfiles/core/120/filelists/i586/openssl-sse2 new file mode 120000 index 000000000..f424713d6 --- /dev/null +++ b/config/rootfiles/core/120/filelists/i586/openssl-sse2 @@ -0,0 +1 @@ +../../../../common/i586/openssl-sse2 \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/openssh b/config/rootfiles/core/120/filelists/openssh new file mode 120000 index 000000000..d8c77fd8e --- /dev/null +++ b/config/rootfiles/core/120/filelists/openssh @@ -0,0 +1 @@ +../../../common/openssh \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/openssl b/config/rootfiles/core/120/filelists/openssl new file mode 120000 index 000000000..e011a9266 --- /dev/null +++ b/config/rootfiles/core/120/filelists/openssl @@ -0,0 +1 @@ +../../../common/openssl \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/openssl-compat b/config/rootfiles/core/120/filelists/openssl-compat new file mode 120000 index 000000000..c9fa42132 --- /dev/null +++ b/config/rootfiles/core/120/filelists/openssl-compat @@ -0,0 +1 @@ +../../../common/openssl-compat \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/openvpn b/config/rootfiles/core/120/filelists/openvpn new file mode 120000 index 000000000..493f3f7a4 --- /dev/null +++ b/config/rootfiles/core/120/filelists/openvpn @@ -0,0 +1 @@ +../../../common/openvpn \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/python-typing b/config/rootfiles/core/120/filelists/python-typing new file mode 120000 index 000000000..fc7f075a0 --- /dev/null +++ b/config/rootfiles/core/120/filelists/python-typing @@ -0,0 +1 @@ +../../../common/python-typing \ No newline at end of file diff --git a/config/rootfiles/core/120/filelists/wget b/config/rootfiles/core/120/filelists/wget new file mode 120000 index 000000000..fcb57dfec --- /dev/null +++ b/config/rootfiles/core/120/filelists/wget @@ -0,0 +1 @@ +../../../common/wget \ No newline at end of file diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index 9986316e9..c9bbd4723 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -42,7 +42,25 @@ ldconfig # Update Language cache /usr/local/bin/update-lang-cache +# Changed and new OpenVPN-2.4 directives will wrote to server.conf and renew CRL while update an core update +if [ -e /var/ipfire/ovpn/server.conf ]; then + openvpnctrl -k + + # Update configuration directives + sed -i -e 's/script-security 3 system/script-security 3/' \ + -e '/status .*/ a ncp-disable' /var/ipfire/ovpn/server.conf + + # Update the OpenVPN CRL + openssl ca -gencrl -keyfile /var/ipfire/ovpn/ca/cakey.pem \ + -cert /var/ipfire/ovpn/ca/cacert.pem \ + -out /var/ipfire/ovpn/crls/cacrl.pem \ + -config /var/ipfire/ovpn/openssl/ovpn.cnf + + openvpnctrl -s +fi + # Start services +/etc/init.d/apache restart # This update needs a reboot... touch /var/run/need_reboot From c8e4391eccf6cff06b7ee17d1a50912fe77faf32 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 21 Feb 2018 12:41:05 +0000 Subject: [PATCH 23/91] core120: Remove forgotten PHP file Signed-off-by: Michael Tremer --- config/rootfiles/core/120/update.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index c9bbd4723..aeff32674 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -31,6 +31,9 @@ for (( i=1; i<=$core; i++ )); do rm -f /var/cache/pakfire/core-upgrade-*-$i.ipfire done +# Remove forgotten PHP file +rm -f /etc/httpd/conf/conf.d/php5.conf + # Stop services # Extract files From c2646dff80ecd43986d4aafcb42d43303f362790 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 21 Feb 2018 12:55:36 +0000 Subject: [PATCH 24/91] Revert "wget: Link against GnuTLS instead of OpenSSL" This reverts commit a46b159a8dc0d191ee57cf48b66be8a39fd7d9ec. wget 1.19.4 supports linking against OpenSSL 1.1.0. Signed-off-by: Michael Tremer --- lfs/wget | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lfs/wget b/lfs/wget index 71b3abc48..7a5cdbb11 100644 --- a/lfs/wget +++ b/lfs/wget @@ -74,7 +74,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && ./configure \ --prefix=/usr \ --sysconfdir=/etc \ - --with-ssl=gnutls \ + --with-ssl=openssl \ --disable-nls \ --disable-ipv6 From 8b080ef12b63e94d82b44c09cc00af40d9e9fe8d Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 21 Feb 2018 13:06:22 +0000 Subject: [PATCH 25/91] core120: Remove deprecated sshd configuration option This just created a warning and is now dropped Signed-off-by: Michael Tremer --- config/rootfiles/core/120/update.sh | 3 +++ 1 file changed, 3 insertions(+) diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index aeff32674..c420152d2 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -65,6 +65,9 @@ fi # Start services /etc/init.d/apache restart +# Remove deprecated SSH configuration option +sed -e "/UsePrivilegeSeparation/d" -i /etc/ssh/sshd_config + # This update needs a reboot... touch /var/run/need_reboot From b9c56c9e9cf261e5d35d060f2f0afce39c633d47 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Thu, 22 Feb 2018 18:50:38 +0000 Subject: [PATCH 26/91] openssl-compat: Add missing library path Signed-off-by: Michael Tremer --- lfs/openssl-compat | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lfs/openssl-compat b/lfs/openssl-compat index 47c481d82..a8ccdf9d0 100644 --- a/lfs/openssl-compat +++ b/lfs/openssl-compat @@ -143,7 +143,7 @@ endif # Install libraries only cd $(DIR_APP) && install -m 755 \ - libcrypto.so.10 libssl.so.10 + libcrypto.so.10 libssl.so.10 /usr/lib @rm -rf $(DIR_APP) @$(POSTBUILD) From 87484f5c784e013229bc6d32430cdc8eb7b8a709 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Thu, 22 Feb 2018 18:52:03 +0000 Subject: [PATCH 27/91] openssl-compat: Do not try to apply missing padlock patch Signed-off-by: Michael Tremer --- lfs/openssl-compat | 1 - 1 file changed, 1 deletion(-) diff --git a/lfs/openssl-compat b/lfs/openssl-compat index a8ccdf9d0..188baa073 100644 --- a/lfs/openssl-compat +++ b/lfs/openssl-compat @@ -121,7 +121,6 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) # i586 specific patches ifeq "$(BUILD_ARCH)" "i586" - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_auto_enable_padlock.patch cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.0.2a_disable_ssse3_for_amd.patch endif From 52f61e496df86f1a70fa9d468d64e756bdb66f4d Mon Sep 17 00:00:00 2001 From: Erik Kapfer via Development Date: Sun, 25 Feb 2018 14:49:49 +0100 Subject: [PATCH 28/91] OpenVPN: New AES-GCM cipher for N2N and RW AES-GCM 128, 196 and 256 bit has been added to Net-to-Net and Roadwarrior section. HMAC selection for N2N will be disabled if AES-GCM is used since GCM provides an own message authentication (GMAC). 'auth *' line in N2N.conf will be deleted appropriately if AES-GCM is used since '--tls-auth' is not available for N2N. HMAC selection menu for Roadwarriors is still available since '--tls-auth' is available for RWs which uses the configuered HMAC even AES-GCM has been applied. Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer --- html/cgi-bin/ovpnmain.cgi | 84 ++++++++++++++++++++++++++++++++------- 1 file changed, 69 insertions(+), 15 deletions(-) diff --git a/html/cgi-bin/ovpnmain.cgi b/html/cgi-bin/ovpnmain.cgi index c52e8bae9..ff3d05509 100644 --- a/html/cgi-bin/ovpnmain.cgi +++ b/html/cgi-bin/ovpnmain.cgi @@ -970,12 +970,18 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NAME'}"){mkdir "${General print SERVERCONF "dh ${General::swroot}/ovpn/ca/$cgiparams{'DH_NAME'}\n"; print SERVERCONF "# Cipher\n"; print SERVERCONF "cipher $cgiparams{'DCIPHER'}\n"; - if ($cgiparams{'DAUTH'} eq '') { - print SERVERCONF "auth SHA1\n"; + + # If GCM cipher is used, do not use --auth + if (($cgiparams{'DCIPHER'} eq 'AES-256-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-192-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-128-GCM')) { + print SERVERCONF unless "# HMAC algorithm\n"; + print SERVERCONF unless "auth $cgiparams{'DAUTH'}\n"; } else { - print SERVERCONF "# HMAC algorithm\n"; - print SERVERCONF "auth $cgiparams{'DAUTH'}\n"; + print SERVERCONF "# HMAC algorithm\n"; + print SERVERCONF "auth $cgiparams{'DAUTH'}\n"; } + if ($cgiparams{'COMPLZO'} eq 'on') { print SERVERCONF "# Enable Compression\n"; print SERVERCONF "comp-lzo\n"; @@ -1076,12 +1082,18 @@ unless(-d "${General::swroot}/ovpn/n2nconf/$cgiparams{'NAME'}"){mkdir "${General print CLIENTCONF "# Cipher\n"; print CLIENTCONF "cipher $cgiparams{'DCIPHER'}\n"; print CLIENTCONF "pkcs12 ${General::swroot}/ovpn/certs/$cgiparams{'NAME'}.p12\r\n"; - if ($cgiparams{'DAUTH'} eq '') { - print CLIENTCONF "auth SHA1\n"; + + # If GCM cipher is used, do not use --auth + if (($cgiparams{'DCIPHER'} eq 'AES-256-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-192-GCM') || + ($cgiparams{'DCIPHER'} eq 'AES-128-GCM')) { + print CLIENTCONF unless "# HMAC algorithm\n"; + print CLIENTCONF unless "auth $cgiparams{'DAUTH'}\n"; } else { - print CLIENTCONF "# HMAC algorithm\n"; - print CLIENTCONF "auth $cgiparams{'DAUTH'}\n"; + print CLIENTCONF "# HMAC algorithm\n"; + print CLIENTCONF "auth $cgiparams{'DAUTH'}\n"; } + if ($cgiparams{'COMPLZO'} eq 'on') { print CLIENTCONF "# Enable Compression\n"; print CLIENTCONF "comp-lzo\n"; @@ -2198,13 +2210,18 @@ if ($confighash{$cgiparams{'KEY'}}[3] eq 'net'){ print CLIENTCONF "pkcs12 ${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12\r\n"; $zip->addFile( "${General::swroot}/ovpn/certs/$confighash{$cgiparams{'KEY'}}[1].p12", "$confighash{$cgiparams{'KEY'}}[1].p12") or die "Can't add file $confighash{$cgiparams{'KEY'}}[1].p12\n"; } - if ($confighash{$cgiparams{'KEY'}}[39] eq '') { - print CLIENTCONF "# HMAC algorithm\n"; - print CLIENTCONF "auth SHA1\n"; + + # If GCM cipher is used, do not use --auth + if (($confighash{$cgiparams{'KEY'}}[40] eq 'AES-256-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-192-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-128-GCM')) { + print CLIENTCONF unless "# HMAC algorithm\n"; + print CLIENTCONF unless "auth $confighash{$cgiparams{'KEY'}}[39]\n"; } else { - print CLIENTCONF "# HMAC algorithm\n"; - print CLIENTCONF "auth $confighash{$cgiparams{'KEY'}}[39]\n"; + print CLIENTCONF "# HMAC algorithm\n"; + print CLIENTCONF "auth $confighash{$cgiparams{'KEY'}}[39]\n"; } + if ($confighash{$cgiparams{'KEY'}}[30] eq 'on') { print CLIENTCONF "# Enable Compression\n"; print CLIENTCONF "comp-lzo\n"; @@ -4544,6 +4561,9 @@ if ($cgiparams{'TYPE'} eq 'net') { } $checked{'PMTU_DISCOVERY'}{$cgiparams{'PMTU_DISCOVERY'}} = 'checked=\'checked\''; + $selected{'DCIPHER'}{'AES-256-GCM'} = ''; + $selected{'DCIPHER'}{'AES-192-GCM'} = ''; + $selected{'DCIPHER'}{'AES-128-GCM'} = ''; $selected{'DCIPHER'}{'CAMELLIA-256-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-192-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-128-CBC'} = ''; @@ -4629,6 +4649,15 @@ if ($cgiparams{'TYPE'} eq 'net') { } else { print ""; } + + # If GCM ciphers are in usage, HMAC menu is disabled + my $hmacdisabled; + if (($confighash{$cgiparams{'KEY'}}[40] eq 'AES-256-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-192-GCM') || + ($confighash{$cgiparams{'KEY'}}[40] eq 'AES-128-GCM')) { + $hmacdisabled = "disabled='disabled'"; + }; + print <    @@ -4707,7 +4736,10 @@ if ($cgiparams{'TYPE'} eq 'net') { $Lang::tr{'cipher'} - + + + @@ -4724,7 +4756,7 @@ if ($cgiparams{'TYPE'} eq 'net') { $Lang::tr{'ovpn ha'}: - @@ -4738,6 +4770,22 @@ if ($cgiparams{'TYPE'} eq 'net') { END ; } + +#### JAVA SCRIPT #### +# Validate N2N cipher. If GCM will be used, HMAC menu will be disabled onchange +print< + var disable_options = false; + document.getElementById('n2ncipher').onchange = function () { + if((this.value == "AES-256-GCM"||this.value == "AES-192-GCM"||this.value == "AES-128-GCM")) { + document.getElementById('n2nhmac').setAttribute('disabled', true); + } else { + document.getElementById('n2nhmac').removeAttribute('disabled'); + } + } + +END + #jumper print "$Lang::tr{'remark title'}"; print ""; @@ -5109,6 +5157,9 @@ END $selected{'DPROTOCOL'}{'tcp'} = ''; $selected{'DPROTOCOL'}{$cgiparams{'DPROTOCOL'}} = 'SELECTED'; + $selected{'DCIPHER'}{'AES-256-GCM'} = ''; + $selected{'DCIPHER'}{'AES-192-GCM'} = ''; + $selected{'DCIPHER'}{'AES-128-GCM'} = ''; $selected{'DCIPHER'}{'CAMELLIA-256-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-192-CBC'} = ''; $selected{'DCIPHER'}{'CAMELLIA-128-CBC'} = ''; @@ -5205,6 +5256,9 @@ END $Lang::tr{'cipher'}   - "; if ( $wiosettings{'SENDEMAIL'} eq 'on' ) { @@ -1062,9 +1107,9 @@ if ( $wiosettings{'ENABLE'} eq 'on') { print" - - - + + +
 $Lang::tr{'wio_wan_con'} 
 $Lang::tr{'wio_wan_con'} 
 
@@ -1137,9 +1182,9 @@ if ( -e "$vpnpid" ) { print" - - - + + +
 $Lang::tr{'wio_vpn_con'} 
 $Lang::tr{'wio_vpn_con'} 
 
@@ -1219,9 +1264,9 @@ if ( -e "$ovpnpid" ) { print" - - - + + +
 $Lang::tr{'wio_ovpn_con'} 
 $Lang::tr{'wio_ovpn_con'} 
 
@@ -1346,9 +1391,9 @@ print" print" - - - + + +
 $Lang::tr{'wio_clients'} 
 $Lang::tr{'wio_clients'} 
 
@@ -1471,29 +1516,12 @@ my $dotip = length($ipaddresses[$a]) - rindex($ipaddresses[$a],'.'); } } - if ($netsettings{"RED_TYPE"} eq 'DHCP' || $netsettings{"RED_TYPE"} eq 'PPPOE') { - my $redipadr = qx'ip addr | grep red0 | grep inet | awk "{print \$2}"'; - my @rednet = split ("/", $redipadr); - chomp ($rednet[1]); - my $red_netmask = General::iporsubtodec($rednet[1]); - my $red_netaddress = Network::get_netaddress("$rednet[0]/$red_netmask"); - - if ( &General::IpInSubnet($ipaddresses[$a], $red_netaddress, $red_netmask) ) { - print"$Lang::tr{"; - last SWITCH; - } - else { - print"$Lang::tr{"; - last SWITCH; - } - } - if ( -e "$vpnpid" ) { foreach $key (keys(%vpnconfighash)) { next unless ($vpnconfighash{$key}[3] eq 'net'); my $convertip = &General::ipcidr2msk($vpnconfighash{$key}[11]); - + my @net = split ("/", $convertip); $vpnn2nip = $net[0]; @@ -1532,6 +1560,23 @@ my $dotip = length($ipaddresses[$a]) - rindex($ipaddresses[$a],'.'); } } + + if ($netsettings{"RED_TYPE"} eq 'DHCP' || $netsettings{"RED_TYPE"} eq 'PPPOE') { + my $redipadr = qx'ip addr | grep red0 | grep inet | awk "{print \$2}"'; + my @rednet = split ("/", $redipadr); + chomp ($rednet[1]); + my $red_netmask = General::iporsubtodec($rednet[1]); + my $red_netaddress = Network::get_netaddress("$rednet[0]/$red_netmask"); + + if ( &General::IpInSubnet($ipaddresses[$a], $red_netaddress, $red_netmask) ) { + print"$Lang::tr{"; + last SWITCH; + } + else { + print"$Lang::tr{"; + last SWITCH; + } + } } if ( $webinterface[$a] eq 'HTTP' ) { @@ -1662,8 +1707,8 @@ if (! defined($errormessage) && $wiosettings{'ACTION'} ne $Lang::tr{'edit'} ) { print" - - + + @@ -1755,13 +1800,17 @@ if ( $wiosettings{'ENABLE'} eq 'on' && !$errormessage && $wiosettings{'ACTION'} print"
 $Lang::tr{'wio_add'}  $Lang::tr{'wio_add'} 
 
- - + + -
 $Lang::tr{'wio_arp_table_entries'}  $Lang::tr{'wio_arp_table_entries'}
 
+"; +if ( $wiosettings{'WIOGUISHOWARPTABLE'} eq 'on' ) { + +print" + @@ -1865,18 +1914,24 @@ $idarp++ print"
 
$Lang::tr{'wio_id'} $Lang::tr{'wio_hwaddress'}
"; +} &hrline(); print" - - + + -
 $Lang::tr{'wio_import_file'}  $Lang::tr{'wio_import_file'}
 
+"; + +if ( $wiosettings{'WIOGUISHOWCLIENTIMPORTTABLE'} eq 'on' ) { + +print" + @@ -1902,16 +1957,22 @@ print"
 
$Lang::tr{'wio_import_csv'} 
"; +} &hrline; print" - - + +
 $Lang::tr{'wio_net_scan'}  $Lang::tr{'wio_net_scan'}
+"; + +if ( $wiosettings{'WIOGUISHOWNETWORKSEARCHTABLE'} eq 'on' ) { + +print" @@ -1944,7 +2005,7 @@ print"
 
"; - +} &Header::closebox(); } diff --git a/src/wio/wiographs.cgi b/src/wio/wiographs.cgi index 06b694645..e1a747513 100644 --- a/src/wio/wiographs.cgi +++ b/src/wio/wiographs.cgi @@ -3,7 +3,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2017 Stephan Feddersen # +# Copyright (C) 2017-2018 Stephan Feddersen # # All Rights Reserved. # # # # This program is free software: you can redistribute it and/or modify # @@ -21,7 +21,7 @@ # # ############################################################################### # -# id: wiographs.cgi, v1.3.2 2017/08/27 14:11:16 sfeddersen +# Version: 2017/08/27 14:07:23 # # This wiographs.cgi is based on the Code from the IPCop WIO Addon # and is extremly adapted to work with IPFire. From cc222a8e62ebaebf140f6287f8e55edd887b36aa Mon Sep 17 00:00:00 2001 From: Stephan Feddersen via Development Date: Tue, 27 Feb 2018 17:18:39 +0100 Subject: [PATCH 53/91] WIO: Fix some typos Signed-off-by: Michael Tremer --- src/wio/lang/wio.de.pl | 3 +-- src/wio/lang/wio.en.pl | 29 ++++++++++++++--------------- 2 files changed, 15 insertions(+), 17 deletions(-) diff --git a/src/wio/lang/wio.de.pl b/src/wio/lang/wio.de.pl index a71aefce0..2544cef82 100644 --- a/src/wio/lang/wio.de.pl +++ b/src/wio/lang/wio.de.pl @@ -55,7 +55,6 @@ 'wio_msg' => 'Zustand (aktiv/inaktiv) des Clients / der Clients wird aktualisiert ...', 'wio_lanname' => 'LAN Hostname', 'wio_wanname' => 'WAN Hostname', -'wio_wancheck' => 'verbunden seit', 'wio_sc_refresh' => 'Client aktualisieren', 'wio_edit_settings' => 'Client hinzufügen:', 'wio_edit_client' => 'Client bearbeiten:', @@ -80,7 +79,7 @@ 'wio_logging' => 'Logging (/var/log/messages) aktivieren?', 'wio_no_image' => 'KEIN STATUS', 'wio_ovpn_con' => 'OpenVPN - Verbindung(en):', -'wio_ovpn_connected' => 'Verbunden seit', +'wio_connected' => 'Verbunden seit', 'wio_wan_up' => 'VERBUNDEN', 'wio_wan_down' => 'GETRENNT', 'wio_n2n' => 'Netz-zu-Netz Verbindung', diff --git a/src/wio/lang/wio.en.pl b/src/wio/lang/wio.en.pl index f981eeec2..be0046fe7 100644 --- a/src/wio/lang/wio.en.pl +++ b/src/wio/lang/wio.en.pl @@ -16,17 +16,17 @@ 'wio_import_data2' => ' import:', 'wio_import' => 'Importing', 'wio_import_info' => 'message:', -'wio_import_file' => 'Import settings from:', +'wio_import_file' => 'Import client(s) from:', 'wio_import_info_csv' => 'There are no new settings to import!', -'wio settings' => 'configuration:', +'wio settings' => 'Configuration:', 'wio enabled' => 'Enable?', 'wio min' => 'Minute(s)', 'wio cron' => 'Time interval for checking:', 'wio_ovpn_cron' => 'Time interval for checking the OpenVPN RW and IPSec Status:', -'wio_save' => 'save', +'wio_save' => 'Save', 'wio_error' => 'errormessage:', 'wio_info' => 'message:', -'wio_back' => 'back', +'wio_back' => 'Back', 'wio_use' => 'Import these settings ?', 'wio_ip_error' => 'Invalid IP Address.', 'wio_host_error' => 'Invalid Hostname.', @@ -45,17 +45,16 @@ 'wio_dyndns_refresh' => 'DynDNS Host IP update', 'wio_dyndns_on' => 'DynDNS Host enabled (click to disable)', 'wio_dyndns_off' => 'DynDNS Host disabled (click to enable)', -'wio_dyndns_info' => 'None IP registered, since apparently no connection exists in Internet. With the next connection in Internet is accomplished an actualization of the IP of the DynDNS Hostes.', +'wio_dyndns_info' => 'No IP registered, since apparently no connection exists in Internet. With the next connection in Internet is accomplished an actualization of the IP of the DynDNS Hostes.', 'wio_no_csv' => 'File has not the extension .csv', 'wio_no_csv_error' => 'Please do not use special characters or blanks in the filename.', 'wio_no_file_selected' => 'No File selected!', 'wio_import_infos' => 'Import settings:', -'wio_import_infos_csv' => 'NOTE: Only Data records with marked "Import these settings ?" are considered by importing! If data records with double IP-Addresses or Hostnames should occur, only the first data record will be imported and the other data records (with the double IP-Addresses or Hostnames) will not be considered!', +'wio_import_infos_csv' => 'NOTE: Only Data records with marked "Import these settings?" are considered by importing! If data records with double IP-Addresses or Hostnames should occur, only the first data record will be imported and the other data records (with the double IP-Addresses or Hostnames) will not be considered!', 'enable disable dyndns' => 'enable or disable DynDNS Host', -'wio_msg' => 'Condition of the examining Client(s) are updated ...', +'wio_msg' => 'Condition of the examining client(s) are updated ...', 'wio_lanname' => 'LAN Hostname', 'wio_wanname' => 'WAN Hostname', -'wio_wancheck' => 'Connected since', 'wio_sc_refresh' => 'Update client now', 'wio_edit_settings' => 'Add client:', 'wio_edit_client' => 'Edit client:', @@ -80,7 +79,7 @@ 'wio_logging' => 'Activate logging (/var/log/messages)?', 'wio_no_image' => 'NO STATUS', 'wio_ovpn_con' => 'OpenVPN - Connection(s):', -'wio_ovpn_connected' => 'Connected since', +'wio_connected' => 'Connected since', 'wio_wan_up' => 'CONNECTED', 'wio_wan_down' => 'NOT CONNECTED', 'wio_n2n' => 'Net-to-Net Connection', @@ -89,7 +88,7 @@ 'wio_mail_online_on' => 'Online email enabled (click to disable)', 'wio_mail_online_off' => 'Online email disabled (click to enable)', 'wio_mail_offline_on' => 'Offline email enabled (click to disable)', -'wio_mail_offline_off' => 'Offline emaildisabled (click to enable)', +'wio_mail_offline_off' => 'Offline email disabled (click to enable)', 'wio_mail_online' => 'Enable or disable online email', 'wio_mail_offline' => 'Enable or disable offline email', 'wio_sendemail' => 'Send email', @@ -108,8 +107,8 @@ 'wio_ip_on' => 'Send ping to IP enabled (click to enable FQDN)', 'wio_fqdn_on' => 'Send ping to FQDN enabled (click to enable IP)', 'wio_client_add' => 'Use settings', -'wio_config' => 'Configurate Client(s):', -'wio_settings_msg' => 'Configurate settings:', +'wio_config' => 'Configure Client(s):', +'wio_settings_msg' => 'Configure settings:', 'wio_settings_msg_hint' => 'Here you have to set some values to get the addon started.', 'wio_sub' => 'WIO Client-Status-Mail', 'wio timeout' => 'Ping Timeout:', @@ -132,7 +131,7 @@ 'wio_remove_client' => 'Remove client', 'wio_remove_client_hint' => 'Are you sure to delete the client?', 'wio_arp_table_entries' => 'Add client from ARP-Table:', -'wio_activ' => 'Activ', +'wio_activ' => 'Active', 'wio_check' => 'Check', 'wio_common_name' => 'Remote Host/IP', 'wio_msg_left' => 'Searching on the', @@ -154,6 +153,6 @@ 'wio_answer' => 'Answer', 'wio_answer_time' => 'Response Time', 'wio_scriptruntime' => 'Script Execution Time', -'wio_show_table_off' => 'Show table', -'wio_show_table_on' => 'Hide table', +'wio_show_table_off' => 'Hide table', +'wio_show_table_on' => 'Show table', ); From c1fc92a9b8e2a049875c02a736087beacb8c6348 Mon Sep 17 00:00:00 2001 From: Stephan Feddersen via Development Date: Tue, 27 Feb 2018 17:20:07 +0100 Subject: [PATCH 54/91] WIO: Fix a problem with the Network-Table-Button Signed-off-by: Michael Tremer --- src/wio/wio.cgi | 69 ++++++++++++++++++++++++------------------------- 1 file changed, 34 insertions(+), 35 deletions(-) diff --git a/src/wio/wio.cgi b/src/wio/wio.cgi index 8c43b0432..c51910f4d 100644 --- a/src/wio/wio.cgi +++ b/src/wio/wio.cgi @@ -21,7 +21,7 @@ # # ############################################################################### # -# Version: 2018/01/05 14:34:23 +# Version: 2018/02/27 16:54:23 # # This wio.cgi is based on the Code from the IPCop WIO Addon # and is extremly adapted to work with IPFire. @@ -106,10 +106,10 @@ my $count = 0; my $showcount = 0; my $arpbuttontext = "$Lang::tr{'wio_show_table_on'}"; -my $clientimportbuttontext = "$Lang::tr{'wio_show_table_on'}"; -my $networksearchbuttontext = "$Lang::tr{'wio_show_table_on'}"; +my $clientimportbuttontext = "$Lang::tr{'wio_show_table_on'}"; +my $networksearchbuttontext = "$Lang::tr{'wio_show_table_on'}"; -my ( $infomessage, $errormessage, $importmessage, $message ) = ''; +my ( $message, $infomessage, $errormessage, $importmessage ) = ''; my ( $buttontext, $host, $timestamp, $ipadr, $on, $remark, $dyndns, $dyndnsip, $sendemailon, $net, $dev, $iprange, $output, $write, $webinterface, $sendemailoff, $pingmethode, $online, $color, $bgcolor, $exitcode, $id, $line, $interface, $counter, $vpnn2nip, $vpnn2nmask, $ddns, $edc, @@ -280,7 +280,7 @@ if ( $wiosettings{'ACTION'} eq $Lang::tr{'wio_client_add'} ) { ## show / hide arptable -if ($wiosettings{'WIOGUISHOWARPTABLE'} eq 'arptable') { +if ( $wiosettings{'WIOGUISHOWARPTABLE'} eq 'arptable' ) { if ( $wiosettings{'ACTION'} eq $Lang::tr{'wio_show_table_off'} ) { $wiosettings{'WIOGUISHOWARPTABLE'} = 'off'; $arpbuttontext = "$Lang::tr{'wio_show_table_on'}"; @@ -309,11 +309,11 @@ if ( $wiosettings{'WIOGUISHOWCLIENTIMPORTTABLE'} eq 'clientimport' ) { if ( $wiosettings{'WIOGUISHOWNETWORKSEARCHTABLE'} eq 'networksearch' ) { if ( $wiosettings{'ACTION'} eq $Lang::tr{'wio_show_table_off'} ) { $wiosettings{'WIOGUISHOWNETWORKSEARCHTABLE'} = 'off'; - $clientimportbuttontext = "$Lang::tr{'wio_show_table_on'}"; + $networksearchbuttontext = "$Lang::tr{'wio_show_table_on'}"; } else { $wiosettings{'WIOGUISHOWNETWORKSEARCHTABLE'} = 'on'; - $clientimportbuttontext = "$Lang::tr{'wio_show_table_off'}"; + $networksearchbuttontext = "$Lang::tr{'wio_show_table_off'}"; } } @@ -348,7 +348,7 @@ if ( $wiosettings{'ACTION'} eq $Lang::tr{'wio_add'} ) { } } -## enable / disabel client || enable / disable dyndns || enable / disable sendemailon || enable / disable sendemailoff || change ip / fqdn +## enable / disable client || enable / disable dyndns || enable / disable sendemailon || enable / disable sendemailoff || change ip / fqdn if ( $wiosettings{'ACTION'} eq $Lang::tr{'enable disable client'} ) { $edc = 'on'; } if ( $wiosettings{'ACTION'} eq $Lang::tr{'enable disable dyndns'} ) { $edd = 'on'; } @@ -983,7 +983,7 @@ for ($i=1; $i<=15; $i++) { print "\n"; } -print" +print"  $Lang::tr{'wio sec'}   @@ -1123,7 +1123,7 @@ print" $Lang::tr{'wio_wanname'} $Lang::tr{'wio_dyndns_hosts'} $Lang::tr{'wio image'} - $Lang::tr{'wio_wancheck'} + $Lang::tr{'wio_connected'} 01 @@ -1196,7 +1196,7 @@ print" $Lang::tr{'type'} $Lang::tr{'wio_common_name'} $Lang::tr{'wio image'} - $Lang::tr{'wio_ovpn_connected'} + $Lang::tr{'wio_connected'} "; @@ -1244,7 +1244,7 @@ $statustxt = "$Lang::tr{'capsclosed'}";   "; - + if ($vpnconfighash{$key}[25] && $wiosettings{'CLIENTREMARK'} eq 'on') { print" $vpnconfighash{$key}[25]"; } @@ -1278,7 +1278,7 @@ print" $Lang::tr{'type'} $Lang::tr{'common name'} $Lang::tr{'wio image'} - $Lang::tr{'wio_ovpn_connected'} + $Lang::tr{'wio_connected'} "; @@ -1310,7 +1310,6 @@ print" $statustxt = "$Lang::tr{'capsclosed'}"; } else { - if ($ovpnconfighash{$key}[3] eq 'net') { if (-e "/var/run/$ovpnconfighash{$key}[1]n2n.pid") { my @output = ""; @@ -1378,7 +1377,7 @@ print" if ($ovpnconfighash{$key}[25] && $wiosettings{'CLIENTREMARK'} eq 'on') { print" $ovpnconfighash{$key}[25]"; } - + print""; $idovpn++ } @@ -1519,7 +1518,7 @@ my $dotip = length($ipaddresses[$a]) - rindex($ipaddresses[$a],'.'); if ( -e "$vpnpid" ) { foreach $key (keys(%vpnconfighash)) { next unless ($vpnconfighash{$key}[3] eq 'net'); - + my $convertip = &General::ipcidr2msk($vpnconfighash{$key}[11]); my @net = split ("/", $convertip); @@ -1538,16 +1537,15 @@ my $dotip = length($ipaddresses[$a]) - rindex($ipaddresses[$a],'.'); @match = split ("/", $ovpnsettings{'DOVPN_SUBNET'}); if ( &General::IpInSubnet($ipaddresses[$a], $match[0], $match[1]) ) { - print"OpenVPN"; - last SWITCH; + print"OpenVPN"; + last SWITCH; } } if ( %ovpnccdconfhash ne '' ) { foreach $key (keys(%ovpnccdconfhash)) { - + my $convertip = &General::ipcidr2msk($ovpnccdconfhash{$key}[1]); - my @net = split ("/", $convertip); $vpnn2nip = $net[0]; @@ -1557,7 +1555,6 @@ my $dotip = length($ipaddresses[$a]) - rindex($ipaddresses[$a],'.'); print"OpenVPN"; last SWITCH; } - } } @@ -1567,7 +1564,7 @@ my $dotip = length($ipaddresses[$a]) - rindex($ipaddresses[$a],'.'); chomp ($rednet[1]); my $red_netmask = General::iporsubtodec($rednet[1]); my $red_netaddress = Network::get_netaddress("$rednet[0]/$red_netmask"); - + if ( &General::IpInSubnet($ipaddresses[$a], $red_netaddress, $red_netmask) ) { print"$Lang::tr{"; last SWITCH; @@ -2165,23 +2162,24 @@ close(FILE); ############################################################################################################################ -sub SortByTunnelName -{ - if ($vpnconfighash{$a}[1] lt $vpnconfighash{$b}[1]) { - return -1; - } - elsif ($vpnconfighash{$a}[1] gt $vpnconfighash{$b}[1]) { - return 1; - } - else { - return 0; - } +sub SortByTunnelName { + + if ($vpnconfighash{$a}[1] lt $vpnconfighash{$b}[1]) { + return -1; + } + elsif ($vpnconfighash{$a}[1] gt $vpnconfighash{$b}[1]) { + return 1; + } + else { + return 0; + } + } ############################################################################################################################ -sub validSave -{ +sub validSave { + if ( $wiosettings{'IPADR'} eq '' && $wiosettings{'PINGMETHODE'} eq 'ip' && $wiosettings{'DYNDNS'} eq '' ) { $errormessage = $Lang::tr{'wio_ip_empty'}; } @@ -2207,4 +2205,5 @@ sub validSave if ( $wiosettings{'ID'} eq '' && ! defined($errormessage) ) { $errormessage = &WIO::checkinto($wiosettings{'IPADR'}, $wiosettings{'HOST'}, @current); } if ( $wiosettings{'REMARK'} ne '' ) { $wiosettings{'REMARK'} =~ s/,/,/g; } + } From f0e9ed78a2ae1b828493c523e5137735c780d833 Mon Sep 17 00:00:00 2001 From: Stephan Feddersen Date: Tue, 6 Mar 2018 20:53:20 +0100 Subject: [PATCH 55/91] WIO: increment PAK_VER Signed-off-by: Michael Tremer --- lfs/wio | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lfs/wio b/lfs/wio index 9ae11b883..bb76c9e56 100644 --- a/lfs/wio +++ b/lfs/wio @@ -15,7 +15,7 @@ THISAPP = wio-$(VER) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = wio -PAK_VER = 1 +PAK_VER = 2 ############################################################################### # Top-level Rules From 5e5c2e541395bc5a2ab4d3304f6358861c594d3d Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 16 Mar 2018 14:23:56 +0000 Subject: [PATCH 56/91] Import new Pakfire Signing Key We will swap the key that we use to sign Pakfire packages since the current one is considered outdated cryptography. Fixes: #11539 Signed-off-by: Michael Tremer --- config/rootfiles/common/pakfire | 1 + src/pakfire/pakfire.key | 29 +++++++++++++++++++++++++++++ 2 files changed, 30 insertions(+) create mode 100644 src/pakfire/pakfire.key diff --git a/config/rootfiles/common/pakfire b/config/rootfiles/common/pakfire index ab439c5bd..6cd531d15 100644 --- a/config/rootfiles/common/pakfire +++ b/config/rootfiles/common/pakfire @@ -6,6 +6,7 @@ opt/pakfire/db/rootfiles #opt/pakfire/etc #opt/pakfire/pakfire.conf opt/pakfire/etc/pakfire.conf +opt/pakfire/pakfire.key #opt/pakfire/lib opt/pakfire/lib/functions.pl opt/pakfire/lib/functions.sh diff --git a/src/pakfire/pakfire.key b/src/pakfire/pakfire.key new file mode 100644 index 000000000..ec6024e11 --- /dev/null +++ b/src/pakfire/pakfire.key @@ -0,0 +1,29 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBFqr0AoBEACeW1ClMLQyZ/67c7u5FTDbOfe3212rdXzjojDOjQepAIKErS06 +2rOGwurGu8cy39RJOBCR2VT6ai6mVejJnLm0j/3FL4df8tEhhtBNE9BhJriS5mIt +qoiR2zjR/ldEyLSiCfUprkAAX75vl7nqua2esHs1XnXykGoj7U/qRbu0jyavUJJx +i0/XSRjbEo6GB9tk7taGFFBNxTpWTaJBR9fhjLN4tUL5rYB5CXwBvgkl1WHQSpYW +sCIdF8l1mMuNLhzaZsq+lt8hMPKBM7TsdQtfOwYzV6mROJYeHDVSsrLYoDoYdW/o +vGV7758alxiMVNv5VI5hENofxriwlhZZOHKie9b9m6rCJ39qSsG1f1HwVa5ab33l +ktVdWmsqsvuF+kZL5K19tFScR4e1tpT+2xM7NT4SLlgsG0YXRVCA3fjis3P2Qft8 +turBMOayyrJqnqQTHTk9eNpWDJ6Tg2ZhJ7uR79vrdsqcfnL71D/CeUgD0xekZIys +MG7sqF6ApZXf1jvubD8Jw00EwrvZFRhIkiP6NxZjP4yA5YeUA1KHohVegIuTZLmT +t74PMqpYh/j/ixa7m0Ja/vyqwXGqJVdAuded+zmCPw0NRvdoGkMPlgYlgKzVDTF6 +gXgsr+yT+hFSfHWwCFrEgrv1JQsac5P7iCRB8PS9FWs6+vnoOlzZrGoI/wARAQAB +tDdJUEZpcmUgUGFrZmlyZSBQYWNrYWdlIFNpZ25pbmcgS2V5IDxwYWtmaXJlQGlw +ZmlyZS5vcmc+iQI5BBMBAgAjBQJaq9AKAhsDBwsJCAcDAgEGFQgCCQoLBBYCAwEC +HgECF4AACgkQb+96jtcTWUsx8BAAmkZ2rg/PQkXgqENhoJuoT93bKmu2Ng4DLKGc +JyGAd+PPan70jX9xAs/QMuEXbPwNnZUZCpMfDvOrf6FRoc651whJvp3h1dluMNBD +gsSwX7CgpLPaPxqthPLaN239b02GLJs/J6IiyTqS3QsBcJqvdWmcGqHZEiCjDTri +e0kQIXyjCEXQnnsTKZL/sa8KQTOAHsF81iYB2DqOWFZsQ9iJKjTCPlo5eOsZTJGt +XKQlmAIeACN6YfSBMGK24t4cyvUOcklVFHri+EVCYPMdxT96Wsfa4rFOnMwD1Ggx +b42KTRMK3awN8b91/gg6Oay+WDEGPJSnUsu04WoMzhQ0jwmu1i0O1OdKPshNE/7n +Eu/YggBqRy/ClyPbX1+9nfOE4ldUnRPSWTwtVpbPoAWDM+WYdo7mFVi7un9y7F8J +YOZRGkhar3KlfrkiXx6pD/rARj5bi3LcWXwEDT/ZdDd+h9lZtfLcCQe9lqqUcxCM +xWUXnH87svNCZMS/AEkVHDmKNtx6hsYFqwXgExExqH3uMmwQwwcL8rv9M2c/LLZQ +RFTSj/vhEzJY4nqS/m5dgWfwPYBleM6UwCHVWxP0uI18et739pMzTxaL+Q/uGXNP +42f4CPSnb3EbtCelUMfO2JQkhNGBL7SqoOmtykSmCykAWaSnGYhI1frQDcBvNao+ +xPvh/8Y= +=y1gn +-----END PGP PUBLIC KEY BLOCK----- From ceed3534e154944651be9659e7f299d077edc439 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 16 Mar 2018 14:28:17 +0000 Subject: [PATCH 57/91] core120: Import new pakfire PGP key Signed-off-by: Michael Tremer --- config/rootfiles/core/120/filelists/files | 1 + config/rootfiles/core/120/update.sh | 3 +++ 2 files changed, 4 insertions(+) diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index aac6528e8..9dbc270fe 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -4,6 +4,7 @@ etc/sysctl.conf etc/fcron.daily/openvpn-crl-updater etc/rc.d/init.d/dhcp etc/rc.d/init.d/unbound +opt/pakfire/pakfire.key srv/web/ipfire/cgi-bin/ovpnmain.cgi srv/web/ipfire/cgi-bin/proxy.cgi srv/web/ipfire/cgi-bin/qos.cgi diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index d2fb326a6..2f1bca02c 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -68,6 +68,9 @@ fi # Remove deprecated SSH configuration option sed -e "/UsePrivilegeSeparation/d" -i /etc/ssh/sshd_config +# Import new Pakfire key +gpg --import /opt/pakfire/pakfire.key + # This update needs a reboot... touch /var/run/need_reboot From 7d995c9f56055f39e559bd6e355a9a1689585c6d Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 16 Mar 2018 14:33:42 +0000 Subject: [PATCH 58/91] installer: Import the Pakfire key at install time Signed-off-by: Michael Tremer --- src/installer/main.c | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/installer/main.c b/src/installer/main.c index a3642551d..e154fb935 100644 --- a/src/installer/main.c +++ b/src/installer/main.c @@ -879,6 +879,13 @@ int main(int argc, char *argv[]) { free(backup_file); } + /* Import Pakfire key */ + snprintf(commandstring, STRING_SIZE, "/usr/sbin/chroot /harddisk /usr/bin/gpg --import /opt/pakfire/pakfire.key"); + if (runcommandwithstatus(commandstring, title, _("Setting up package management system..."), logfile)) { + errorbox(_("Could not import the Pakfire key.")); + goto EXIT; + } + // Download and execute the postinstall script if (*config.postinstall) { snprintf(commandstring, sizeof(commandstring), From 35b892b0dd69c482fb3024f8e1dfbd13679b07d8 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 16 Mar 2018 14:36:05 +0000 Subject: [PATCH 59/91] pakfire: Drop old key import mechanism This was error-prone and allowed to potentially inject another key. Fixes: #11539 Signed-off-by: Michael Tremer --- config/rootfiles/core/120/filelists/files | 1 + src/pakfire/lib/functions.pl | 16 ---------------- src/pakfire/pakfire | 1 - 3 files changed, 1 insertion(+), 17 deletions(-) diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index 9dbc270fe..c8877f528 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -4,6 +4,7 @@ etc/sysctl.conf etc/fcron.daily/openvpn-crl-updater etc/rc.d/init.d/dhcp etc/rc.d/init.d/unbound +opt/pakfire/lib/functions.pl opt/pakfire/pakfire.key srv/web/ipfire/cgi-bin/ovpnmain.cgi srv/web/ipfire/cgi-bin/proxy.cgi diff --git a/src/pakfire/lib/functions.pl b/src/pakfire/lib/functions.pl index 0bf702e5b..c97d4254d 100644 --- a/src/pakfire/lib/functions.pl +++ b/src/pakfire/lib/functions.pl @@ -33,9 +33,6 @@ use Net::Ping; package Pakfire; -# GPG Keys -my $myid = "179740DC4D8C47DC63C099C74BDE364C64D96617"; # Our own gpg-key paks@ipfire.org - # A small color-hash :D my %color; $color{'normal'} = "\033[0m"; @@ -899,19 +896,6 @@ sub senduuid { } } -sub checkcryptodb { - logger("CRYPTO INFO: Checking GnuPG Database"); - system("gpg --fingerprint $myid >/dev/null"); - return if ($? == 0); - - message("CRYPTO WARN: The GnuPG isn't configured correctly. Trying now to fix this."); - message("CRYPTO WARN: It's normal to see this on first execution."); - message("CRYPTO WARN: If this message is being shown repeatedly, check if time and date are set correctly, and if IPFire can connect via port 11371 TCP."); - - my $command = "gpg --keyserver pgp.ipfire.org --always-trust --status-fd 2"; - system("$command --recv-key $myid >> $Conf::logdir/gnupg-database.log 2>&1"); -} - sub callback { my ($data, $response, $protocol) = @_; $final_data .= $data; diff --git a/src/pakfire/pakfire b/src/pakfire/pakfire index da68454dc..202c1e5a1 100644 --- a/src/pakfire/pakfire +++ b/src/pakfire/pakfire @@ -30,7 +30,6 @@ my $force = "noforce"; &Pakfire::logger("PAKFIRE INFO: IPFire Pakfire $Conf::version started!"); - &Pakfire::checkcryptodb; ### Check if we are running as root # From cdc1a0e901c285e84f8cbb6a01248ce6a141b361 Mon Sep 17 00:00:00 2001 From: Erik Kapfer Date: Mon, 12 Mar 2018 13:47:34 +0100 Subject: [PATCH 60/91] OpenVPN: Update to version 2.4.5 This is primarily a maintenance release, with further improved OpenSSL 1.1 integration, several minor bug fixes and other minor improvements. Further information can be found in here https://github.com/OpenVPN/openvpn/blob/release/2.4/Changes.rst#version-245 and here https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24 . Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer --- lfs/openvpn | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openvpn b/lfs/openvpn index ef25c2567..5bd9da7a2 100644 --- a/lfs/openvpn +++ b/lfs/openvpn @@ -24,7 +24,7 @@ include Config -VER = 2.4.4 +VER = 2.4.5 THISAPP = openvpn-$(VER) DL_FILE = $(THISAPP).tar.xz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 7a2002aad1671b24457bc9432a0c5c52 +$(DL_FILE)_MD5 = c510ad3c8fce738c678dbcc54367c945 install : $(TARGET) From e779b6bc7aa470289bde0bf99aa7051dffc4384b Mon Sep 17 00:00:00 2001 From: Erik Kapfer Date: Sun, 18 Mar 2018 13:55:31 +0100 Subject: [PATCH 61/91] PAM: Delete old lib and symlinks Core 119 update delivers an updated PAM whereby the libdir has been changed from /lib to /usr/lib but the old libraries and symlinks are still presant. Since the system searches /lib before /usr/lib , the old libs and symlinks are used which ends up in an `LIBPAM_EXTENSION_1.1' not found. Signed-off-by: Erik Kapfer Signed-off-by: Michael Tremer --- config/rootfiles/core/120/update.sh | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index 2f1bca02c..02f2ad077 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -34,6 +34,11 @@ done # Remove forgotten PHP file rm -f /etc/httpd/conf/conf.d/php5.conf +# Delete old PAM libs and symlinks if presant +if ls /lib | grep -q 'libpam.*'; then + rm -f /lib/libpam* +fi + # Stop services # Extract files From 8aeec0ba89b0179138cec1b5ac079c04ad7db410 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 09:48:04 +0100 Subject: [PATCH 62/91] rsync: Update to 3.1.3 For details see: https://download.samba.org/pub/rsync/src/rsync-3.1.3-NEWS Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/rsync | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/rsync b/lfs/rsync index ce8c65258..18e6d9e1c 100644 --- a/lfs/rsync +++ b/lfs/rsync @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2016 IPFire Team # +# Copyright (C) 2007-2018 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.1.2 +VER = 3.1.3 THISAPP = rsync-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = rsync -PAK_VER = 10 +PAK_VER = 11 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 0f758d7e000c0f7f7d3792610fad70cb +$(DL_FILE)_MD5 = 1581a588fde9d89f6bc6201e8129afaf install : $(TARGET) From 1c1c1ac238d2fd83b2fc17f9206dc9000e9079bc Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 09:53:40 +0100 Subject: [PATCH 63/91] nano: Update to 2.9.4 For details see: https://www.nano-editor.org/news.php Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/nano | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/nano b/lfs/nano index e567d2c09..936b4778b 100644 --- a/lfs/nano +++ b/lfs/nano @@ -24,7 +24,7 @@ include Config -VER = 2.9.2 +VER = 2.9.4 THISAPP = nano-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = nano -PAK_VER = 18 +PAK_VER = 19 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 40ac792d28641969ce0be0a4a37df6a0 +$(DL_FILE)_MD5 = 8c2941cd89a79aea488da9457fa47f37 install : $(TARGET) @@ -54,7 +54,7 @@ download :$(patsubst %,$(DIR_DL)/%,$(objects)) md5 : $(subst %,%_MD5,$(objects)) -dist: +dist: @$(PAK) ############################################################################### From 9051f3c9d71b483198373b5522f47399b68b9572 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 10:00:34 +0100 Subject: [PATCH 64/91] bind: Update to 9.11.3 For details see: http://ftp.isc.org/isc/bind9/9.11.3/RELEASE-NOTES-bind-9.11.3.html Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/bind | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/bind b/lfs/bind index 951e6117d..35f76443e 100644 --- a/lfs/bind +++ b/lfs/bind @@ -25,7 +25,7 @@ include Config -VER = 9.11.2-P1 +VER = 9.11.3 THISAPP = bind-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -43,7 +43,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8877d7bf09abc0d186717e560c29ccfb +$(DL_FILE)_MD5 = 4ed2a3f235595eadbd763b7ecb687ca0 install : $(TARGET) From 4e316ae0a0a63b6f6a4029fa3ba18c757713a49e Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 10:14:07 +0100 Subject: [PATCH 65/91] htop: Update to 2.1.0 For details see: https://hisham.hm/htop/index.php?page=downloads Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/htop | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/htop b/lfs/htop index ee48d658c..6fba6c0bb 100644 --- a/lfs/htop +++ b/lfs/htop @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2016 IPFire Team # +# Copyright (C) 2007-2018 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 2.0.2 +VER = 2.1.0 THISAPP = htop-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = htop -PAK_VER = 9 +PAK_VER = 10 DEPS = "" @@ -44,7 +44,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 7d354d904bad591a931ad57e99fea84a +$(DL_FILE)_MD5 = f262b66ad6c194782f4d3a80627e84c8 install : $(TARGET) From 399c2f9ccc2fa8cac89d27353571f3317b45bde4 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 10:21:17 +0100 Subject: [PATCH 66/91] logrotate: Update to 3.14.0 For details see: https://github.com/logrotate/logrotate/releases Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/logrotate | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/logrotate b/lfs/logrotate index 3749fd7d4..a6b735443 100644 --- a/lfs/logrotate +++ b/lfs/logrotate @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2017 IPFire Team # +# Copyright (C) 2007-2018 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 3.13.0 +VER = 3.14.0 THISAPP = logrotate-$(VER) DL_FILE = logrotate-$(VER).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 72c2c3028d060131b388a9b330215549 +$(DL_FILE)_MD5 = 9d9cf1d0a0b0433f56e152c5117f7b31 install : $(TARGET) From 9e9fdb39e63e521a4771e3e24746edad3c7430b2 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 10:05:33 +0100 Subject: [PATCH 67/91] unbound: Update to 1.7.0 For details see: http://www.unbound.net/download.html Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- config/rootfiles/common/unbound | 3 ++- lfs/unbound | 4 ++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 642812342..d2969bef1 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,8 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.2 -usr/lib/libunbound.so.2.5.7 +usr/lib/libunbound.so.2.5.8 +#usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor usr/sbin/unbound-checkconf diff --git a/lfs/unbound b/lfs/unbound index 64db0761f..4209c7a42 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.6.8 +VER = 1.7.0 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = c9d26cef224b10705229d5072142636c +$(DL_FILE)_MD5 = 49937b5f99a6fc2de8c5f3bb22a54390 install : $(TARGET) From b2318b5e351923632c43e3d5d9e6a2351a1b63cd Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Sun, 18 Mar 2018 13:51:38 +0000 Subject: [PATCH 68/91] core120: Ship updated logrotate and restart unbound Signed-off-by: Michael Tremer --- config/rootfiles/core/120/filelists/logrotate | 1 + config/rootfiles/core/120/update.sh | 1 + 2 files changed, 2 insertions(+) create mode 120000 config/rootfiles/core/120/filelists/logrotate diff --git a/config/rootfiles/core/120/filelists/logrotate b/config/rootfiles/core/120/filelists/logrotate new file mode 120000 index 000000000..bc192c05d --- /dev/null +++ b/config/rootfiles/core/120/filelists/logrotate @@ -0,0 +1 @@ +../../../common/logrotate \ No newline at end of file diff --git a/config/rootfiles/core/120/update.sh b/config/rootfiles/core/120/update.sh index 02f2ad077..22d9d48d4 100644 --- a/config/rootfiles/core/120/update.sh +++ b/config/rootfiles/core/120/update.sh @@ -69,6 +69,7 @@ fi # Start services /etc/init.d/apache restart +/etc/init.d/unbound restart # Remove deprecated SSH configuration option sed -e "/UsePrivilegeSeparation/d" -i /etc/ssh/sshd_config From 35cdaa194ac5d2abfc0a93f60ed99aab07be9ce3 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 19 Mar 2018 11:52:26 +0000 Subject: [PATCH 69/91] Fix python-m2crypto rootfile Signed-off-by: Michael Tremer --- config/rootfiles/common/i586/python-m2crypto | 1 - config/rootfiles/common/{armv5tel => }/python-m2crypto | 0 config/rootfiles/common/x86_64/python-m2crypto | 1 - 3 files changed, 2 deletions(-) delete mode 100644 config/rootfiles/common/i586/python-m2crypto rename config/rootfiles/common/{armv5tel => }/python-m2crypto (100%) delete mode 100644 config/rootfiles/common/x86_64/python-m2crypto diff --git a/config/rootfiles/common/i586/python-m2crypto b/config/rootfiles/common/i586/python-m2crypto deleted file mode 100644 index 73172148e..000000000 --- a/config/rootfiles/common/i586/python-m2crypto +++ /dev/null @@ -1 +0,0 @@ -#usr/lib/python2.7/site-packages/M2Crypto-0.21.1-py2.7-linux-i586.egg diff --git a/config/rootfiles/common/armv5tel/python-m2crypto b/config/rootfiles/common/python-m2crypto similarity index 100% rename from config/rootfiles/common/armv5tel/python-m2crypto rename to config/rootfiles/common/python-m2crypto diff --git a/config/rootfiles/common/x86_64/python-m2crypto b/config/rootfiles/common/x86_64/python-m2crypto deleted file mode 100644 index 6352cab97..000000000 --- a/config/rootfiles/common/x86_64/python-m2crypto +++ /dev/null @@ -1 +0,0 @@ -#usr/lib/python2.7/site-packages/M2Crypto-0.21.1-py2.7-linux-x86_64.egg From 71e5a29c8123014a8b740c3a99a83742a19019fa Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 17:40:47 +0100 Subject: [PATCH 70/91] dmidecode 3.1: Added patch (Fix firmware version of TPM device) For details see: http://git.savannah.gnu.org/cgit/dmidecode.git/commit/?id=174387405e98cd94c627832ae23abcb9be7e5623 "Both the operator (detected by clang, reported by Xorg) and the mask for the minor firmware version field of TPM devices were wrong." Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/dmidecode | 3 +- ...ort_for_structure_type_43_tpm_device.patch | 30 +++++++++++++++++++ 2 files changed, 32 insertions(+), 1 deletion(-) create mode 100644 src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch diff --git a/lfs/dmidecode b/lfs/dmidecode index 8f8a2491c..fa0101594 100644 --- a/lfs/dmidecode +++ b/lfs/dmidecode @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2016 IPFire Team # +# Copyright (C) 2018 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -71,6 +71,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/dmidecode/0005-nothing-should-go-into-usr-local.patch + cd $(DIR_APP) && patch -Np1 -i $(DIR_SRC)/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch cd $(DIR_APP) && make $(MAKETUNING) $(EXTRA_MAKE) cd $(DIR_APP) && make install @rm -rf $(DIR_APP) diff --git a/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch b/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch new file mode 100644 index 000000000..07f4f7ed7 --- /dev/null +++ b/src/patches/dmidecode/add_support_for_structure_type_43_tpm_device.patch @@ -0,0 +1,30 @@ +From 174387405e98cd94c627832ae23abcb9be7e5623 Mon Sep 17 00:00:00 2001 +From: Jean Delvare +Date: Wed, 31 Jan 2018 18:52:47 +0100 +Subject: dmidecode: Fix firmware version of TPM device + +Both the operator (detected by clang, reported by Xorg) and the mask +for the minor firmware version field of TPM devices were wrong. + +Signed-off-by: Jean Delvare +Fixes: 48a8132058a0 ("dmidecode: Add support for structure type 43 (TPM Device)") +--- + dmidecode.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/dmidecode.c b/dmidecode.c +index 87faaa9..a593170 100644 +--- a/dmidecode.c ++++ b/dmidecode.c +@@ -4511,7 +4511,7 @@ static void dmi_decode(const struct dmi_header *h, u16 ver) + case 0x02: + printf("\tFirmware Revision: %u.%u\n", + DWORD(data + 0x0A) >> 16, +- DWORD(data + 0x0A) && 0xFF); ++ DWORD(data + 0x0A) & 0xFFFF); + /* + * We skip the next 4 bytes, as their + * format is not standardized and their +-- +cgit v1.0-41-gc330 + From 27ef66c26c480542f0ea60d85302da5ada0f0648 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Sun, 18 Mar 2018 17:32:43 +0100 Subject: [PATCH 71/91] hdparm: Update to 9.55 Changelogs against 9.53: "hdparm-9.55: - added #include for major()/minor() macros hdparm-9.54: - Partial revert of Jmicron changes, from Jan Friesse." Best, Matthias Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/hdparm | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/lfs/hdparm b/lfs/hdparm index 68620bd6e..87d961d15 100644 --- a/lfs/hdparm +++ b/lfs/hdparm @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2017 IPFire Team # +# Copyright (C) 2007-2018 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 9.53 +VER = 9.55 THISAPP = hdparm-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 1e54b52e0c8cb79389d4d47eacba411d +$(DL_FILE)_MD5 = adae46e9564075ae288af8082d5ad9fd install : $(TARGET) From 5876642d175609919d2f43892deec822d650bdf0 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 19 Mar 2018 18:07:49 +0000 Subject: [PATCH 72/91] ffmpeg: Ship libraries correctly Signed-off-by: Michael Tremer --- config/rootfiles/packages/ffmpeg | 16 ++++++++-------- lfs/ffmpeg | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/config/rootfiles/packages/ffmpeg b/config/rootfiles/packages/ffmpeg index 75187a873..755764666 100644 --- a/config/rootfiles/packages/ffmpeg +++ b/config/rootfiles/packages/ffmpeg @@ -125,19 +125,19 @@ usr/bin/ffserver #usr/include/libswscale/version.h #usr/lib/libavcodec.a #usr/lib/libavcodec.so -#usr/lib/libavcodec.so.57 +usr/lib/libavcodec.so.57 usr/lib/libavcodec.so.57.107.100 #usr/lib/libavdevice.a #usr/lib/libavdevice.so -#usr/lib/libavdevice.so.57 +usr/lib/libavdevice.so.57 usr/lib/libavdevice.so.57.10.100 #usr/lib/libavfilter.a #usr/lib/libavfilter.so -#usr/lib/libavfilter.so.6 +usr/lib/libavfilter.so.6 usr/lib/libavfilter.so.6.107.100 #usr/lib/libavformat.a #usr/lib/libavformat.so -#usr/lib/libavformat.so.57 +usr/lib/libavformat.so.57 usr/lib/libavformat.so.57.83.100 #usr/lib/libavresample.a #usr/lib/libavresample.so @@ -145,19 +145,19 @@ usr/lib/libavresample.so.3 usr/lib/libavresample.so.3.7.0 #usr/lib/libavutil.a #usr/lib/libavutil.so -#usr/lib/libavutil.so.55 +usr/lib/libavutil.so.55 usr/lib/libavutil.so.55.78.100 #usr/lib/libpostproc.a #usr/lib/libpostproc.so -#usr/lib/libpostproc.so.54 +usr/lib/libpostproc.so.54 usr/lib/libpostproc.so.54.7.100 #usr/lib/libswresample.a #usr/lib/libswresample.so -#usr/lib/libswresample.so.2 +usr/lib/libswresample.so.2 usr/lib/libswresample.so.2.9.100 #usr/lib/libswscale.a #usr/lib/libswscale.so -#usr/lib/libswscale.so.4 +usr/lib/libswscale.so.4 usr/lib/libswscale.so.4.8.100 #usr/lib/pkgconfig/libavcodec.pc #usr/lib/pkgconfig/libavdevice.pc diff --git a/lfs/ffmpeg b/lfs/ffmpeg index 258e29b7b..c324cbd0b 100644 --- a/lfs/ffmpeg +++ b/lfs/ffmpeg @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = ffmpeg -PAK_VER = 7 +PAK_VER = 8 DEPS = "sdl lame libvorbis xvid" From eb68e27dd27b538d84c8382389f83f1a57ba59e7 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 19 Mar 2018 19:44:50 +0000 Subject: [PATCH 73/91] pakfire: Import key when system boots up Signed-off-by: Michael Tremer --- config/rootfiles/common/armv5tel/initscripts | 2 ++ config/rootfiles/common/i586/initscripts | 2 ++ config/rootfiles/common/x86_64/initscripts | 2 ++ config/rootfiles/core/120/filelists/files | 2 ++ lfs/initscripts | 1 + 5 files changed, 9 insertions(+) diff --git a/config/rootfiles/common/armv5tel/initscripts b/config/rootfiles/common/armv5tel/initscripts index 43802216d..7b94faf5c 100644 --- a/config/rootfiles/common/armv5tel/initscripts +++ b/config/rootfiles/common/armv5tel/initscripts @@ -63,6 +63,7 @@ etc/rc.d/init.d/networking/red.up/99-geoip-database etc/rc.d/init.d/networking/red.up/99-pakfire-update etc/rc.d/init.d/networking/wpa_supplicant.exe etc/rc.d/init.d/ntp +etc/rc.d/init.d/pakfire etc/rc.d/init.d/partresize etc/rc.d/init.d/random etc/rc.d/init.d/rc @@ -181,6 +182,7 @@ etc/rc.d/rcsysinit.d/S70console etc/rc.d/rcsysinit.d/S73swconfig etc/rc.d/rcsysinit.d/S75firstsetup etc/rc.d/rcsysinit.d/S80localnet +etc/rc.d/rcsysinit.d/S81pakfire etc/rc.d/rcsysinit.d/S85firewall etc/rc.d/rcsysinit.d/S90network-trigger etc/rc.d/rcsysinit.d/S92rngd diff --git a/config/rootfiles/common/i586/initscripts b/config/rootfiles/common/i586/initscripts index 5463f675d..cc0e4580d 100644 --- a/config/rootfiles/common/i586/initscripts +++ b/config/rootfiles/common/i586/initscripts @@ -64,6 +64,7 @@ etc/rc.d/init.d/networking/red.up/99-geoip-database etc/rc.d/init.d/networking/red.up/99-pakfire-update etc/rc.d/init.d/networking/wpa_supplicant.exe etc/rc.d/init.d/ntp +etc/rc.d/init.d/pakfire etc/rc.d/init.d/partresize etc/rc.d/init.d/random etc/rc.d/init.d/rc @@ -183,6 +184,7 @@ etc/rc.d/rcsysinit.d/S60setclock etc/rc.d/rcsysinit.d/S70console etc/rc.d/rcsysinit.d/S75firstsetup etc/rc.d/rcsysinit.d/S80localnet +etc/rc.d/rcsysinit.d/S81pakfire etc/rc.d/rcsysinit.d/S85firewall etc/rc.d/rcsysinit.d/S90network-trigger etc/rc.d/rcsysinit.d/S92rngd diff --git a/config/rootfiles/common/x86_64/initscripts b/config/rootfiles/common/x86_64/initscripts index 5463f675d..cc0e4580d 100644 --- a/config/rootfiles/common/x86_64/initscripts +++ b/config/rootfiles/common/x86_64/initscripts @@ -64,6 +64,7 @@ etc/rc.d/init.d/networking/red.up/99-geoip-database etc/rc.d/init.d/networking/red.up/99-pakfire-update etc/rc.d/init.d/networking/wpa_supplicant.exe etc/rc.d/init.d/ntp +etc/rc.d/init.d/pakfire etc/rc.d/init.d/partresize etc/rc.d/init.d/random etc/rc.d/init.d/rc @@ -183,6 +184,7 @@ etc/rc.d/rcsysinit.d/S60setclock etc/rc.d/rcsysinit.d/S70console etc/rc.d/rcsysinit.d/S75firstsetup etc/rc.d/rcsysinit.d/S80localnet +etc/rc.d/rcsysinit.d/S81pakfire etc/rc.d/rcsysinit.d/S85firewall etc/rc.d/rcsysinit.d/S90network-trigger etc/rc.d/rcsysinit.d/S92rngd diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index c8877f528..679f627de 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -3,7 +3,9 @@ etc/issue etc/sysctl.conf etc/fcron.daily/openvpn-crl-updater etc/rc.d/init.d/dhcp +etc/rc.d/init.d/pakfire etc/rc.d/init.d/unbound +etc/rc.d/rcsysinit.d/S81pakfire opt/pakfire/lib/functions.pl opt/pakfire/pakfire.key srv/web/ipfire/cgi-bin/ovpnmain.cgi diff --git a/lfs/initscripts b/lfs/initscripts index 9d3a52c77..cb3f4e048 100644 --- a/lfs/initscripts +++ b/lfs/initscripts @@ -175,6 +175,7 @@ $(TARGET) : ln -sf ../init.d/console /etc/rc.d/rcsysinit.d/S70console ln -sf ../init.d/firstsetup /etc/rc.d/rcsysinit.d/S75firstsetup ln -sf ../init.d/localnet /etc/rc.d/rcsysinit.d/S80localnet + ln -sf ../init.d/pakfire /etc/rc.d/rcsysinit.d/S81pakfire ln -sf ../init.d/firewall /etc/rc.d/rcsysinit.d/S85firewall ln -sf ../init.d/network-trigger /etc/rc.d/rcsysinit.d/S90network-trigger ln -sf ../init.d/rngd /etc/rc.d/rcsysinit.d/S92rngd From 42deeb3b450c74138dfb76d9d45d4588a5271887 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 19 Mar 2018 19:45:24 +0000 Subject: [PATCH 74/91] Revert "installer: Import the Pakfire key at install time" This reverts commit 7d995c9f56055f39e559bd6e355a9a1689585c6d. Signed-off-by: Michael Tremer --- src/installer/main.c | 7 ------- 1 file changed, 7 deletions(-) diff --git a/src/installer/main.c b/src/installer/main.c index e154fb935..a3642551d 100644 --- a/src/installer/main.c +++ b/src/installer/main.c @@ -879,13 +879,6 @@ int main(int argc, char *argv[]) { free(backup_file); } - /* Import Pakfire key */ - snprintf(commandstring, STRING_SIZE, "/usr/sbin/chroot /harddisk /usr/bin/gpg --import /opt/pakfire/pakfire.key"); - if (runcommandwithstatus(commandstring, title, _("Setting up package management system..."), logfile)) { - errorbox(_("Could not import the Pakfire key.")); - goto EXIT; - } - // Download and execute the postinstall script if (*config.postinstall) { snprintf(commandstring, sizeof(commandstring), From e7ea357cecf5e069dd4fb4e5cd6099d8e5b7d9a4 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 20 Mar 2018 11:08:58 +0000 Subject: [PATCH 75/91] Forgot to "git add" the new pakfire init script Signed-off-by: Michael Tremer --- src/initscripts/system/pakfire | 25 +++++++++++++++++++++++++ 1 file changed, 25 insertions(+) create mode 100644 src/initscripts/system/pakfire diff --git a/src/initscripts/system/pakfire b/src/initscripts/system/pakfire new file mode 100644 index 000000000..1238833d5 --- /dev/null +++ b/src/initscripts/system/pakfire @@ -0,0 +1,25 @@ +#!/bin/sh +######################################################################## +# Begin $rc_base/init.d/pakfire +# +# Description : Imports the keyring to make Pakfire operational +# +######################################################################## + +. /etc/sysconfig/rc +. ${rc_functions} + +case "${1}" in + start) + boot_mesg "Setting up Pakfire Package Manager..." + gpg --import /opt/pakfire/pakfire.key &>/dev/null + evaluate_retval + ;; + + *) + echo "Usage: ${0} {start}" + exit 1 + ;; +esac + +# End $rc_base/init.d/pakfire From a05af852c5f2266151479c9424a9b36243fb1c79 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Tue, 20 Mar 2018 20:46:52 +0100 Subject: [PATCH 76/91] vnstat: Update to 1.18 For details see: https://humdi.net/vnstat/CHANGES Changed "SaveInterval 5" to "SaveInterval 1" in '/etc/vnstat.conf', triggered by https://forum.ipfire.org/viewtopic.php?f=22&t=20448 to avoid data loss with 1Gbit connections and high traffic. Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- lfs/vnstat | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/lfs/vnstat b/lfs/vnstat index 376a1e999..a61bc5ed2 100644 --- a/lfs/vnstat +++ b/lfs/vnstat @@ -1,7 +1,7 @@ ############################################################################### # # # IPFire.org - A linux based firewall # -# Copyright (C) 2007-2017 IPFire Team # +# Copyright (C) 2007-2018 IPFire Team # # # # This program is free software: you can redistribute it and/or modify # # it under the terms of the GNU General Public License as published by # @@ -24,7 +24,7 @@ include Config -VER = 1.17 +VER = 1.18 THISAPP = vnstat-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 8de1c7e40806509943804bb4b26f5409 +$(DL_FILE)_MD5 = c9abaeb0ce758c16f6cdfa247bd8606c install : $(TARGET) @@ -81,6 +81,7 @@ $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) cd $(DIR_APP) && make all $(MAKETUNING) LOCAL_CONFIGURE_OPTIONS="--enable-readline=yes" cd $(DIR_APP) && make install sed -i 's|eth0|green0|g' /etc/vnstat.conf + sed -i 's|SaveInterval 5|SaveInterval 1|g' /etc/vnstat.conf sed -i 's|/var/lib/vnstat|/var/log/vnstat|g' /etc/vnstat.conf sed -i 's|/var/log/vnstat/vnstat.log|/var/log/vnstat.log|g' /etc/vnstat.conf sed -i 's|/var/run/vnstat/vnstat.pid|/var/run/vnstat.pid|g' /etc/vnstat.conf From dfdfafc7af57b5088279680098408df823516703 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 20 Mar 2018 20:36:15 +0000 Subject: [PATCH 77/91] core120: Ship updated vnstat Signed-off-by: Michael Tremer --- config/rootfiles/core/120/filelists/vnstat | 1 + 1 file changed, 1 insertion(+) create mode 120000 config/rootfiles/core/120/filelists/vnstat diff --git a/config/rootfiles/core/120/filelists/vnstat b/config/rootfiles/core/120/filelists/vnstat new file mode 120000 index 000000000..2e2e6100b --- /dev/null +++ b/config/rootfiles/core/120/filelists/vnstat @@ -0,0 +1 @@ +../../../common/vnstat \ No newline at end of file From 689fed340aab91240b51bf4da1daf0a606290ac1 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Peter=20M=C3=BCller?= Date: Sat, 24 Mar 2018 16:32:53 +0100 Subject: [PATCH 78/91] gnupg: update to 1.4.22 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Update GnuPG to 1.4.22, which fixes some security vulnerabilities, such as the memory side channel attack CVE-2017-7526. Signed-off-by: Peter Müller Signed-off-by: Michael Tremer --- lfs/gnupg | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/gnupg b/lfs/gnupg index aa76042e3..f131d2b08 100644 --- a/lfs/gnupg +++ b/lfs/gnupg @@ -24,7 +24,7 @@ include Config -VER = 1.4.21 +VER = 1.4.22 THISAPP = gnupg-$(VER) DL_FILE = $(THISAPP).tar.bz2 @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 9bdeabf3c0f87ff21cb3f9216efdd01d +$(DL_FILE)_MD5 = 082bda3951a94743e76b83fcf3627547 install : $(TARGET) From dd48a7aac8088ef706d2299bc5b473e9389ba2a2 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Peter=20M=C3=BCller?= Date: Sat, 24 Mar 2018 16:45:02 +0100 Subject: [PATCH 79/91] curl: update to 7.59.0 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Update curl to 7.59.0 which fixes a number of bugs and some minor security issues. Signed-off-by: Peter Müller Signed-off-by: Michael Tremer --- lfs/curl | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/lfs/curl b/lfs/curl index eb2354485..ebb093f56 100644 --- a/lfs/curl +++ b/lfs/curl @@ -24,10 +24,10 @@ include Config -VER = 7.49.1 +VER = 7.59.0 THISAPP = curl-$(VER) -DL_FILE = $(THISAPP).tar.lzma +DL_FILE = $(THISAPP).tar.gz DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ae5e5e395da413d1fa0864e1d0a3fa57 +$(DL_FILE)_MD5 = a44f98c25c7506e7103039b542aa5ad8 install : $(TARGET) @@ -69,7 +69,7 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) - @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar axf $(DIR_DL)/$(DL_FILE) + @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar xf $(DIR_DL)/$(DL_FILE) cd $(DIR_APP) && ./configure \ --prefix=/usr \ --disable-ipv6 \ From be7878d5c92600e7d316a86b18a77819734b62a0 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Mon, 26 Mar 2018 19:50:30 +0200 Subject: [PATCH 80/91] Fix typo in 'makeqosscripts.pl' Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- config/qos/makeqosscripts.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/config/qos/makeqosscripts.pl b/config/qos/makeqosscripts.pl index 19809615a..824a9937f 100644 --- a/config/qos/makeqosscripts.pl +++ b/config/qos/makeqosscripts.pl @@ -726,7 +726,7 @@ print < /var/ipfire/qos/bin/qos.sh echo ".Done!" exit 0 From c98304604bfed3b29bb384ab0999596644573f2c Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Mon, 26 Mar 2018 19:04:41 +0100 Subject: [PATCH 81/91] core120: Ship updated QoS script and gnupg Signed-off-by: Michael Tremer --- config/rootfiles/core/120/filelists/files | 1 + config/rootfiles/core/120/filelists/gnupg | 1 + 2 files changed, 2 insertions(+) create mode 120000 config/rootfiles/core/120/filelists/gnupg diff --git a/config/rootfiles/core/120/filelists/files b/config/rootfiles/core/120/filelists/files index 679f627de..88f7d047f 100644 --- a/config/rootfiles/core/120/filelists/files +++ b/config/rootfiles/core/120/filelists/files @@ -16,3 +16,4 @@ usr/lib/python2.7/lib-dynload/_hashlib.so usr/lib/python2.7/lib-dynload/_ssl.so var/ipfire/langs var/ipfire/ovpn/openssl/ovpn.cnf +var/ipfire/qos/bin/makeqosscripts.pl diff --git a/config/rootfiles/core/120/filelists/gnupg b/config/rootfiles/core/120/filelists/gnupg new file mode 120000 index 000000000..a1a156447 --- /dev/null +++ b/config/rootfiles/core/120/filelists/gnupg @@ -0,0 +1 @@ +../../../common/gnupg \ No newline at end of file From 166ceacd6b375bc97eed722012a0f1fffd5a15e1 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 27 Mar 2018 15:59:04 +0100 Subject: [PATCH 82/91] openssl: Update to 1.1.0h CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Reported by OSS-fuzz. This patch also entirely removes support for SSLv3. The patch to disable it didn't apply and since nobody has been using this before, we will not compile it into OpenSSL any more. Signed-off-by: Michael Tremer --- lfs/openssl | 7 +- src/patches/openssl-1.1.0-disable-ssl3.patch | 86 -------------------- 2 files changed, 2 insertions(+), 91 deletions(-) delete mode 100644 src/patches/openssl-1.1.0-disable-ssl3.patch diff --git a/lfs/openssl b/lfs/openssl index 7a39f14de..71f2bc826 100644 --- a/lfs/openssl +++ b/lfs/openssl @@ -24,7 +24,7 @@ include Config -VER = 1.1.0g +VER = 1.1.0h THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -51,8 +51,6 @@ CONFIGURE_OPTIONS = \ enable-md2 \ enable-seed \ enable-rfc3779 \ - enable-ssl3 \ - enable-ssl3-method \ no-idea \ no-mdc2 \ no-rc5 \ @@ -89,7 +87,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = ba5f1b8b835b88cadbce9b35ed9531a6 +$(DL_FILE)_MD5 = 5271477e4d93f4ea032b665ef095ff24 install : $(TARGET) @@ -119,7 +117,6 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE) - cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.0-disable-ssl3.patch cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/openssl-1.1.0g-weak-ciphers.patch # Apply our CFLAGS diff --git a/src/patches/openssl-1.1.0-disable-ssl3.patch b/src/patches/openssl-1.1.0-disable-ssl3.patch deleted file mode 100644 index 267c02c62..000000000 --- a/src/patches/openssl-1.1.0-disable-ssl3.patch +++ /dev/null @@ -1,86 +0,0 @@ -diff -up openssl-1.1.0f/apps/s_client.c.disable-ssl3 openssl-1.1.0f/apps/s_client.c ---- openssl-1.1.0f/apps/s_client.c.disable-ssl3 2017-06-05 15:42:44.838853312 +0200 -+++ openssl-1.1.0f/apps/s_client.c 2017-07-17 14:50:06.468821871 +0200 -@@ -1486,6 +1486,9 @@ int s_client_main(int argc, char **argv) - if (sdebug) - ssl_ctx_security_debug(ctx, sdebug); - -+ if (min_version == SSL3_VERSION && max_version == SSL3_VERSION) -+ SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv3); -+ - if (ssl_config) { - if (SSL_CTX_config(ctx, ssl_config) == 0) { - BIO_printf(bio_err, "Error using configuration \"%s\"\n", -diff -up openssl-1.1.0f/apps/s_server.c.disable-ssl3 openssl-1.1.0f/apps/s_server.c ---- openssl-1.1.0f/apps/s_server.c.disable-ssl3 2017-05-25 14:46:18.000000000 +0200 -+++ openssl-1.1.0f/apps/s_server.c 2017-07-17 14:49:50.434447583 +0200 -@@ -1614,6 +1614,10 @@ int s_server_main(int argc, char *argv[] - } - if (sdebug) - ssl_ctx_security_debug(ctx, sdebug); -+ -+ if (min_version == SSL3_VERSION && max_version == SSL3_VERSION) -+ SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv3); -+ - if (ssl_config) { - if (SSL_CTX_config(ctx, ssl_config) == 0) { - BIO_printf(bio_err, "Error using configuration \"%s\"\n", -diff -up openssl-1.1.0/ssl/ssl_lib.c.disable-ssl3 openssl-1.1.0/ssl/ssl_lib.c ---- openssl-1.1.0/ssl/ssl_lib.c.disable-ssl3 2016-08-25 17:29:22.000000000 +0200 -+++ openssl-1.1.0/ssl/ssl_lib.c 2016-09-08 11:08:05.252082263 +0200 -@@ -2470,6 +2470,13 @@ SSL_CTX *SSL_CTX_new(const SSL_METHOD *m - * or by using the SSL_CONF library. - */ - ret->options |= SSL_OP_NO_COMPRESSION; -+ /* -+ * Disable SSLv3 by default. Applications can -+ * re-enable it by configuring -+ * SSL_CTX_clear_options(ctx, SSL_OP_NO_SSLv3); -+ * or by using the SSL_CONF library. -+ */ -+ ret->options |= SSL_OP_NO_SSLv3; - - ret->tlsext_status_type = -1; - -diff -up openssl-1.1.0/test/ssl_test.c.disable-ssl3 openssl-1.1.0/test/ssl_test.c ---- openssl-1.1.0/test/ssl_test.c.disable-ssl3 2016-09-08 11:08:05.252082263 +0200 -+++ openssl-1.1.0/test/ssl_test.c 2016-09-08 11:11:44.802005886 +0200 -@@ -258,6 +258,7 @@ static int execute_test(SSL_TEST_FIXTURE - SSL_TEST_SERVERNAME_CB_NONE) { - server2_ctx = SSL_CTX_new(TLS_server_method()); - TEST_check(server2_ctx != NULL); -+ SSL_CTX_clear_options(server2_ctx, SSL_OP_NO_SSLv3); - } - client_ctx = SSL_CTX_new(TLS_client_method()); - -@@ -266,11 +267,15 @@ static int execute_test(SSL_TEST_FIXTURE - resume_client_ctx = SSL_CTX_new(TLS_client_method()); - TEST_check(resume_server_ctx != NULL); - TEST_check(resume_client_ctx != NULL); -+ SSL_CTX_clear_options(resume_server_ctx, SSL_OP_NO_SSLv3); -+ SSL_CTX_clear_options(resume_client_ctx, SSL_OP_NO_SSLv3); - } - } - - TEST_check(server_ctx != NULL); - TEST_check(client_ctx != NULL); -+ SSL_CTX_clear_options(server_ctx, SSL_OP_NO_SSLv3); -+ SSL_CTX_clear_options(client_ctx, SSL_OP_NO_SSLv3); - - TEST_check(CONF_modules_load(conf, fixture.test_app, 0) > 0); - -diff -up openssl-1.1.0/test/ssltest_old.c.disable-ssl3 openssl-1.1.0/test/ssltest_old.c ---- openssl-1.1.0/test/ssltest_old.c.disable-ssl3 2016-08-25 17:29:23.000000000 +0200 -+++ openssl-1.1.0/test/ssltest_old.c 2016-09-08 11:08:05.253082286 +0200 -@@ -1456,6 +1456,11 @@ int main(int argc, char *argv[]) - ERR_print_errors(bio_err); - goto end; - } -+ -+ SSL_CTX_clear_options(c_ctx, SSL_OP_NO_SSLv3); -+ SSL_CTX_clear_options(s_ctx, SSL_OP_NO_SSLv3); -+ SSL_CTX_clear_options(s_ctx2, SSL_OP_NO_SSLv3); -+ - /* - * Since we will use low security ciphersuites and keys for testing set - * security level to zero by default. Tests can override this by adding From 76f422025ffe1baed977b5c8e1f072e5981e46ff Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 27 Mar 2018 16:05:07 +0100 Subject: [PATCH 83/91] openssl: Update to 1.0.2o CVE-2018-0739 (OpenSSL advisory) [Moderate severity] 27 March 2018: Constructed ASN.1 types with a recursive definition (such as can be found in PKCS7) could eventually exceed the stack given malicious input with excessive recursion. This could result in a Denial Of Service attack. There are no such structures used within SSL/TLS that come from untrusted sources so this is considered safe. Reported by OSS-fuzz. Signed-off-by: Michael Tremer --- lfs/openssl-compat | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/openssl-compat b/lfs/openssl-compat index 188baa073..9e991b496 100644 --- a/lfs/openssl-compat +++ b/lfs/openssl-compat @@ -24,7 +24,7 @@ include Config -VER = 1.0.2n +VER = 1.0.2o THISAPP = openssl-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -84,7 +84,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_MD5 = 13bdc1b1d1ff39b6fd42a255e74676a4 +$(DL_FILE)_MD5 = 44279b8557c3247cbe324e2322ecd114 install : $(TARGET) From d3cd99830a8554e8f9b4df314210cef82ef69376 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 27 Mar 2018 20:53:31 +0100 Subject: [PATCH 84/91] fetchmail: Permit building without SSLv3 Signed-off-by: Michael Tremer --- lfs/fetchmail | 4 +- ...ail-6.3.26-permit-build-without-ssl3.patch | 62 +++++++++++++++++++ 2 files changed, 65 insertions(+), 1 deletion(-) create mode 100644 src/patches/fetchmail-6.3.26-permit-build-without-ssl3.patch diff --git a/lfs/fetchmail b/lfs/fetchmail index 33a46b6d3..7386e8fee 100644 --- a/lfs/fetchmail +++ b/lfs/fetchmail @@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = fetchmail -PAK_VER = 8 +PAK_VER = 9 DEPS = "" @@ -77,6 +77,8 @@ $(subst %,%_MD5,$(objects)) : $(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects)) @$(PREBUILD) @rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar Jxf $(DIR_DL)/$(DL_FILE) + cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/fetchmail-6.3.26-permit-build-without-ssl3.patch + cd $(DIR_APP) && ./configure \ --prefix=/usr \ --with-ssl \ diff --git a/src/patches/fetchmail-6.3.26-permit-build-without-ssl3.patch b/src/patches/fetchmail-6.3.26-permit-build-without-ssl3.patch new file mode 100644 index 000000000..5f8b2772a --- /dev/null +++ b/src/patches/fetchmail-6.3.26-permit-build-without-ssl3.patch @@ -0,0 +1,62 @@ +From a2ae6f8d15d7caf815d7bdd13df833fd1b2af5cc Mon Sep 17 00:00:00 2001 +From: Matthias Andree +Date: Fri, 16 Jan 2015 20:48:46 +0100 +Subject: [PATCH] Permit build on SSLv3-disabled OpenSSL, + +providing that these also omit the declaration of SSLv3_client_method(). +Related to Debian Bug#775255. +Version report lists -SSLv3 on +SSL builds that omit SSLv3_client_method(). +Version report lists -SSLv2 on +SSL builds that omit SSLv2_client_method(). + +diff --git a/configure.ac b/configure.ac +index bdcbb20..9248b26 100644 +--- a/configure.ac ++++ b/configure.ac +@@ -803,6 +803,7 @@ fi + + case "$LIBS" in *-lssl*) + AC_CHECK_DECLS([SSLv2_client_method],,,[#include ]) ++ AC_CHECK_DECLS([SSLv3_client_method],,,[#include ]) + ;; + esac + +diff --git a/fetchmail.c b/fetchmail.c +index 5f31d6e..be0e9ab 100644 +--- a/fetchmail.c ++++ b/fetchmail.c +@@ -263,6 +263,12 @@ int main(int argc, char **argv) + #ifdef SSL_ENABLE + "+SSL" + #endif ++#if HAVE_DECL_SSLV2_CLIENT_METHOD + 0 == 0 ++ "-SSLv2" ++#endif ++#if HAVE_DECL_SSLV3_CLIENT_METHOD + 0 == 0 ++ "-SSLv3" ++#endif + #ifdef OPIE_ENABLE + "+OPIE" + #endif /* OPIE_ENABLE */ + +diff --git a/socket.c b/socket.c +index 58a8e15..91a21c2 100644 +--- a/socket.c ++++ b/socket.c +@@ -910,11 +910,16 @@ int SSLOpen(int sock, char *mycert, char *mykey, const char *myproto, int certck + #if HAVE_DECL_SSLV2_CLIENT_METHOD + 0 > 0 + _ctx[sock] = SSL_CTX_new(SSLv2_client_method()); + #else +- report(stderr, GT_("Your operating system does not support SSLv2.\n")); ++ report(stderr, GT_("Your OpenSSL version does not support SSLv2.\n")); + return -1; + #endif + } else if(!strcasecmp("ssl3",myproto)) { ++#if HAVE_DECL_SSLV3_CLIENT_METHOD + 0 > 0 + _ctx[sock] = SSL_CTX_new(SSLv3_client_method()); ++#else ++ report(stderr, GT_("Your OpenSSL version does not support SSLv3.\n")); ++ return -1; ++#endif + } else if(!strcasecmp("tls1",myproto)) { + _ctx[sock] = SSL_CTX_new(TLSv1_client_method()); + } else if (!strcasecmp("ssl23",myproto)) { From d9e656bb82542b2ef379563c02d642c3394f1c1c Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 27 Mar 2018 20:56:31 +0100 Subject: [PATCH 85/91] asterisk: Ship documentation Signed-off-by: Michael Tremer --- config/rootfiles/packages/asterisk | 8 ++++---- lfs/asterisk | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/config/rootfiles/packages/asterisk b/config/rootfiles/packages/asterisk index 92712e540..f84bd3539 100644 --- a/config/rootfiles/packages/asterisk +++ b/config/rootfiles/packages/asterisk @@ -591,10 +591,10 @@ var/ipfire/backup/addons/includes/asterisk #var/lib/asterisk var/lib/asterisk/agi-bin #var/lib/asterisk/documentation -#var/lib/asterisk/documentation/appdocsxml.dtd -#var/lib/asterisk/documentation/appdocsxml.xslt -#var/lib/asterisk/documentation/core-en_US.xml -#var/lib/asterisk/documentation/thirdparty +var/lib/asterisk/documentation/appdocsxml.dtd +var/lib/asterisk/documentation/appdocsxml.xslt +var/lib/asterisk/documentation/core-en_US.xml +var/lib/asterisk/documentation/thirdparty #var/lib/asterisk/firmware var/lib/asterisk/firmware/iax #var/lib/asterisk/images diff --git a/lfs/asterisk b/lfs/asterisk index a2a43f863..723639015 100755 --- a/lfs/asterisk +++ b/lfs/asterisk @@ -28,7 +28,7 @@ DL_FROM = $(URL_IPFIRE) DIR_APP = $(DIR_SRC)/$(THISAPP) TARGET = $(DIR_INFO)/$(THISAPP) PROG = asterisk -PAK_VER = 23 +PAK_VER = 24 DEPS = "jansson libsrtp opus" From d97f43b309b7c041498189b231b7507627a194c6 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 28 Mar 2018 11:22:06 +0100 Subject: [PATCH 86/91] Rootfile update for curl Signed-off-by: Michael Tremer --- config/rootfiles/common/curl | 69 +++++++++++++++++++++++++++++++----- 1 file changed, 60 insertions(+), 9 deletions(-) diff --git a/config/rootfiles/common/curl b/config/rootfiles/common/curl index 8208b97ab..b2be73384 100644 --- a/config/rootfiles/common/curl +++ b/config/rootfiles/common/curl @@ -2,20 +2,18 @@ usr/bin/curl #usr/bin/curl-config #usr/include/curl #usr/include/curl/curl.h -#usr/include/curl/curlbuild.h -#usr/include/curl/curlrules.h #usr/include/curl/curlver.h #usr/include/curl/easy.h #usr/include/curl/mprintf.h #usr/include/curl/multi.h #usr/include/curl/stdcheaders.h +#usr/include/curl/system.h #usr/include/curl/typecheck-gcc.h -#usr/lib/libcurl.a #usr/lib/libcurl.la #usr/lib/libcurl.so usr/lib/libcurl.so.3 usr/lib/libcurl.so.4 -usr/lib/libcurl.so.4.4.0 +#usr/lib/libcurl.so.4.5.0 #usr/lib/pkgconfig/libcurl.pc #usr/share/aclocal/libcurl.m4 #usr/share/man/man1/curl-config.1 @@ -26,15 +24,19 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLINFO_CONDITION_UNMET.3 #usr/share/man/man3/CURLINFO_CONNECT_TIME.3 #usr/share/man/man3/CURLINFO_CONTENT_LENGTH_DOWNLOAD.3 +#usr/share/man/man3/CURLINFO_CONTENT_LENGTH_DOWNLOAD_T.3 #usr/share/man/man3/CURLINFO_CONTENT_LENGTH_UPLOAD.3 +#usr/share/man/man3/CURLINFO_CONTENT_LENGTH_UPLOAD_T.3 #usr/share/man/man3/CURLINFO_CONTENT_TYPE.3 #usr/share/man/man3/CURLINFO_COOKIELIST.3 #usr/share/man/man3/CURLINFO_EFFECTIVE_URL.3 #usr/share/man/man3/CURLINFO_FILETIME.3 +#usr/share/man/man3/CURLINFO_FILETIME_T.3 #usr/share/man/man3/CURLINFO_FTP_ENTRY_PATH.3 #usr/share/man/man3/CURLINFO_HEADER_SIZE.3 #usr/share/man/man3/CURLINFO_HTTPAUTH_AVAIL.3 #usr/share/man/man3/CURLINFO_HTTP_CONNECTCODE.3 +#usr/share/man/man3/CURLINFO_HTTP_VERSION.3 #usr/share/man/man3/CURLINFO_LASTSOCKET.3 #usr/share/man/man3/CURLINFO_LOCAL_IP.3 #usr/share/man/man3/CURLINFO_LOCAL_PORT.3 @@ -45,7 +47,9 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLINFO_PRIMARY_IP.3 #usr/share/man/man3/CURLINFO_PRIMARY_PORT.3 #usr/share/man/man3/CURLINFO_PRIVATE.3 +#usr/share/man/man3/CURLINFO_PROTOCOL.3 #usr/share/man/man3/CURLINFO_PROXYAUTH_AVAIL.3 +#usr/share/man/man3/CURLINFO_PROXY_SSL_VERIFYRESULT.3 #usr/share/man/man3/CURLINFO_REDIRECT_COUNT.3 #usr/share/man/man3/CURLINFO_REDIRECT_TIME.3 #usr/share/man/man3/CURLINFO_REDIRECT_URL.3 @@ -55,10 +59,15 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLINFO_RTSP_CSEQ_RECV.3 #usr/share/man/man3/CURLINFO_RTSP_SERVER_CSEQ.3 #usr/share/man/man3/CURLINFO_RTSP_SESSION_ID.3 +#usr/share/man/man3/CURLINFO_SCHEME.3 #usr/share/man/man3/CURLINFO_SIZE_DOWNLOAD.3 +#usr/share/man/man3/CURLINFO_SIZE_DOWNLOAD_T.3 #usr/share/man/man3/CURLINFO_SIZE_UPLOAD.3 +#usr/share/man/man3/CURLINFO_SIZE_UPLOAD_T.3 #usr/share/man/man3/CURLINFO_SPEED_DOWNLOAD.3 +#usr/share/man/man3/CURLINFO_SPEED_DOWNLOAD_T.3 #usr/share/man/man3/CURLINFO_SPEED_UPLOAD.3 +#usr/share/man/man3/CURLINFO_SPEED_UPLOAD_T.3 #usr/share/man/man3/CURLINFO_SSL_ENGINES.3 #usr/share/man/man3/CURLINFO_SSL_VERIFYRESULT.3 #usr/share/man/man3/CURLINFO_STARTTRANSFER_TIME.3 @@ -80,6 +89,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLMOPT_SOCKETFUNCTION.3 #usr/share/man/man3/CURLMOPT_TIMERDATA.3 #usr/share/man/man3/CURLMOPT_TIMERFUNCTION.3 +#usr/share/man/man3/CURLOPT_ABSTRACT_UNIX_SOCKET.3 #usr/share/man/man3/CURLOPT_ACCEPTTIMEOUT_MS.3 #usr/share/man/man3/CURLOPT_ACCEPT_ENCODING.3 #usr/share/man/man3/CURLOPT_ADDRESS_SCOPE.3 @@ -97,6 +107,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_CONNECTTIMEOUT.3 #usr/share/man/man3/CURLOPT_CONNECTTIMEOUT_MS.3 #usr/share/man/man3/CURLOPT_CONNECT_ONLY.3 +#usr/share/man/man3/CURLOPT_CONNECT_TO.3 #usr/share/man/man3/CURLOPT_CONV_FROM_NETWORK_FUNCTION.3 #usr/share/man/man3/CURLOPT_CONV_FROM_UTF8_FUNCTION.3 #usr/share/man/man3/CURLOPT_CONV_TO_NETWORK_FUNCTION.3 @@ -142,6 +153,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_FTP_USE_EPSV.3 #usr/share/man/man3/CURLOPT_FTP_USE_PRET.3 #usr/share/man/man3/CURLOPT_GSSAPI_DELEGATION.3 +#usr/share/man/man3/CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS.3 #usr/share/man/man3/CURLOPT_HEADER.3 #usr/share/man/man3/CURLOPT_HEADERDATA.3 #usr/share/man/man3/CURLOPT_HEADERFUNCTION.3 @@ -165,6 +177,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_IOCTLFUNCTION.3 #usr/share/man/man3/CURLOPT_IPRESOLVE.3 #usr/share/man/man3/CURLOPT_ISSUERCERT.3 +#usr/share/man/man3/CURLOPT_KEEP_SENDING_ON_ERROR.3 #usr/share/man/man3/CURLOPT_KEYPASSWD.3 #usr/share/man/man3/CURLOPT_KRBLEVEL.3 #usr/share/man/man3/CURLOPT_LOCALPORT.3 @@ -181,6 +194,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_MAXREDIRS.3 #usr/share/man/man3/CURLOPT_MAX_RECV_SPEED_LARGE.3 #usr/share/man/man3/CURLOPT_MAX_SEND_SPEED_LARGE.3 +#usr/share/man/man3/CURLOPT_MIMEPOST.3 #usr/share/man/man3/CURLOPT_NETRC.3 #usr/share/man/man3/CURLOPT_NETRC_FILE.3 #usr/share/man/man3/CURLOPT_NEW_DIRECTORY_PERMS.3 @@ -189,7 +203,6 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_NOPROGRESS.3 #usr/share/man/man3/CURLOPT_NOPROXY.3 #usr/share/man/man3/CURLOPT_NOSIGNAL.3 -#usr/share/man/man3/CURLOPT_CONNECT_TO.3 #usr/share/man/man3/CURLOPT_OPENSOCKETDATA.3 #usr/share/man/man3/CURLOPT_OPENSOCKETFUNCTION.3 #usr/share/man/man3/CURLOPT_PASSWORD.3 @@ -204,6 +217,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_POSTQUOTE.3 #usr/share/man/man3/CURLOPT_POSTREDIR.3 #usr/share/man/man3/CURLOPT_PREQUOTE.3 +#usr/share/man/man3/CURLOPT_PRE_PROXY.3 #usr/share/man/man3/CURLOPT_PRIVATE.3 #usr/share/man/man3/CURLOPT_PROGRESSDATA.3 #usr/share/man/man3/CURLOPT_PROGRESSFUNCTION.3 @@ -216,7 +230,24 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_PROXYTYPE.3 #usr/share/man/man3/CURLOPT_PROXYUSERNAME.3 #usr/share/man/man3/CURLOPT_PROXYUSERPWD.3 +#usr/share/man/man3/CURLOPT_PROXY_CAINFO.3 +#usr/share/man/man3/CURLOPT_PROXY_CAPATH.3 +#usr/share/man/man3/CURLOPT_PROXY_CRLFILE.3 +#usr/share/man/man3/CURLOPT_PROXY_KEYPASSWD.3 +#usr/share/man/man3/CURLOPT_PROXY_PINNEDPUBLICKEY.3 #usr/share/man/man3/CURLOPT_PROXY_SERVICE_NAME.3 +#usr/share/man/man3/CURLOPT_PROXY_SSLCERT.3 +#usr/share/man/man3/CURLOPT_PROXY_SSLCERTTYPE.3 +#usr/share/man/man3/CURLOPT_PROXY_SSLKEY.3 +#usr/share/man/man3/CURLOPT_PROXY_SSLKEYTYPE.3 +#usr/share/man/man3/CURLOPT_PROXY_SSLVERSION.3 +#usr/share/man/man3/CURLOPT_PROXY_SSL_CIPHER_LIST.3 +#usr/share/man/man3/CURLOPT_PROXY_SSL_OPTIONS.3 +#usr/share/man/man3/CURLOPT_PROXY_SSL_VERIFYHOST.3 +#usr/share/man/man3/CURLOPT_PROXY_SSL_VERIFYPEER.3 +#usr/share/man/man3/CURLOPT_PROXY_TLSAUTH_PASSWORD.3 +#usr/share/man/man3/CURLOPT_PROXY_TLSAUTH_TYPE.3 +#usr/share/man/man3/CURLOPT_PROXY_TLSAUTH_USERNAME.3 #usr/share/man/man3/CURLOPT_PROXY_TRANSFER_MODE.3 #usr/share/man/man3/CURLOPT_PUT.3 #usr/share/man/man3/CURLOPT_QUOTE.3 @@ -226,7 +257,10 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_READFUNCTION.3 #usr/share/man/man3/CURLOPT_REDIR_PROTOCOLS.3 #usr/share/man/man3/CURLOPT_REFERER.3 +#usr/share/man/man3/CURLOPT_REQUEST_TARGET.3 #usr/share/man/man3/CURLOPT_RESOLVE.3 +#usr/share/man/man3/CURLOPT_RESOLVER_START_DATA.3 +#usr/share/man/man3/CURLOPT_RESOLVER_START_FUNCTION.3 #usr/share/man/man3/CURLOPT_RESUME_FROM.3 #usr/share/man/man3/CURLOPT_RESUME_FROM_LARGE.3 #usr/share/man/man3/CURLOPT_RTSP_CLIENT_CSEQ.3 @@ -242,9 +276,11 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_SHARE.3 #usr/share/man/man3/CURLOPT_SOCKOPTDATA.3 #usr/share/man/man3/CURLOPT_SOCKOPTFUNCTION.3 +#usr/share/man/man3/CURLOPT_SOCKS5_AUTH.3 #usr/share/man/man3/CURLOPT_SOCKS5_GSSAPI_NEC.3 #usr/share/man/man3/CURLOPT_SOCKS5_GSSAPI_SERVICE.3 #usr/share/man/man3/CURLOPT_SSH_AUTH_TYPES.3 +#usr/share/man/man3/CURLOPT_SSH_COMPRESSION.3 #usr/share/man/man3/CURLOPT_SSH_HOST_PUBLIC_KEY_MD5.3 #usr/share/man/man3/CURLOPT_SSH_KEYDATA.3 #usr/share/man/man3/CURLOPT_SSH_KEYFUNCTION.3 @@ -273,6 +309,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_STREAM_DEPENDS.3 #usr/share/man/man3/CURLOPT_STREAM_DEPENDS_E.3 #usr/share/man/man3/CURLOPT_STREAM_WEIGHT.3 +#usr/share/man/man3/CURLOPT_SUPPRESS_CONNECT_HEADERS.3 #usr/share/man/man3/CURLOPT_TCP_FASTOPEN.3 #usr/share/man/man3/CURLOPT_TCP_KEEPALIVE.3 #usr/share/man/man3/CURLOPT_TCP_KEEPIDLE.3 @@ -285,6 +322,7 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/CURLOPT_TIMEOUT.3 #usr/share/man/man3/CURLOPT_TIMEOUT_MS.3 #usr/share/man/man3/CURLOPT_TIMEVALUE.3 +#usr/share/man/man3/CURLOPT_TIMEVALUE_LARGE.3 #usr/share/man/man3/CURLOPT_TLSAUTH_PASSWORD.3 #usr/share/man/man3/CURLOPT_TLSAUTH_TYPE.3 #usr/share/man/man3/CURLOPT_TLSAUTH_USERNAME.3 @@ -328,6 +366,19 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/curl_global_cleanup.3 #usr/share/man/man3/curl_global_init.3 #usr/share/man/man3/curl_global_init_mem.3 +#usr/share/man/man3/curl_global_sslset.3 +#usr/share/man/man3/curl_mime_addpart.3 +#usr/share/man/man3/curl_mime_data.3 +#usr/share/man/man3/curl_mime_data_cb.3 +#usr/share/man/man3/curl_mime_encoder.3 +#usr/share/man/man3/curl_mime_filedata.3 +#usr/share/man/man3/curl_mime_filename.3 +#usr/share/man/man3/curl_mime_free.3 +#usr/share/man/man3/curl_mime_headers.3 +#usr/share/man/man3/curl_mime_init.3 +#usr/share/man/man3/curl_mime_name.3 +#usr/share/man/man3/curl_mime_subparts.3 +#usr/share/man/man3/curl_mime_type.3 #usr/share/man/man3/curl_mprintf.3 #usr/share/man/man3/curl_multi_add_handle.3 #usr/share/man/man3/curl_multi_assign.3 @@ -339,8 +390,8 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/curl_multi_remove_handle.3 #usr/share/man/man3/curl_multi_setopt.3 #usr/share/man/man3/curl_multi_socket.3 -#usr/share/man/man3/curl_multi_socket_all.3 #usr/share/man/man3/curl_multi_socket_action.3 +#usr/share/man/man3/curl_multi_socket_all.3 #usr/share/man/man3/curl_multi_strerror.3 #usr/share/man/man3/curl_multi_timeout.3 #usr/share/man/man3/curl_multi_wait.3 @@ -351,17 +402,17 @@ usr/lib/libcurl.so.4.4.0 #usr/share/man/man3/curl_slist_append.3 #usr/share/man/man3/curl_slist_free_all.3 #usr/share/man/man3/curl_strequal.3 +#usr/share/man/man3/curl_strnequal.3 #usr/share/man/man3/curl_unescape.3 #usr/share/man/man3/curl_version.3 #usr/share/man/man3/curl_version_info.3 #usr/share/man/man3/libcurl-easy.3 +#usr/share/man/man3/libcurl-env.3 #usr/share/man/man3/libcurl-errors.3 #usr/share/man/man3/libcurl-multi.3 +#usr/share/man/man3/libcurl-security.3 #usr/share/man/man3/libcurl-share.3 #usr/share/man/man3/libcurl-symbols.3 #usr/share/man/man3/libcurl-thread.3 #usr/share/man/man3/libcurl-tutorial.3 #usr/share/man/man3/libcurl.3 -#usr/share/zsh -#usr/share/zsh/site-functions -#usr/share/zsh/site-functions/_curl From 9f0999325dec7ffbcf8b18b846fbf6a8a6c5780f Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 28 Mar 2018 16:39:35 +0100 Subject: [PATCH 87/91] unbound: Fix crash on startup Zone names should not be terminated with a dot. Fixes: #11689 Reported-by: Pontus Larsson Signed-off-by: Michael Tremer --- src/initscripts/system/unbound | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/initscripts/system/unbound b/src/initscripts/system/unbound index dcb9653ee..9b6d32207 100644 --- a/src/initscripts/system/unbound +++ b/src/initscripts/system/unbound @@ -214,16 +214,16 @@ write_forward_conf() { case "${zone}" in *.in-addr.arpa) echo "stub-zone:" - echo " name: ${zone}." + echo " name: ${zone}" echo " stub-addr: ${server}" echo echo "server:" - echo " local-zone: \"${zone}.\" transparent" + echo " local-zone: \"${zone}\" transparent" echo ;; *) echo "forward-zone:" - echo " name: ${zone}." + echo " name: ${zone}" echo " forward-addr: ${server}" echo ;; From 66a0f3646ad2b1da568282464b9a63479c8b45d9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Peter=20M=C3=BCller?= Date: Wed, 28 Mar 2018 05:41:50 +0200 Subject: [PATCH 88/91] use protocol defined in server-list.db for mirror communication MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit For each mirror server, a protocol can be specified in the server-list.db database. However, it was not used for the actual URL query to a mirror before. This might be useful for deploy HTTPS pinning for Pakfire. If a mirror is known to support HTTPS, all queries to it will be made with this protocol. This saves some overhead if HTTPS is enforced on a mirror via 301 redirects. To enable this, the server-list.db needs to be adjusted. The second version of this patch only handles protocols HTTP and HTTPS, since we do not expect anything else here at the moment. Partially fixes #11661. Signed-off-by: Peter Müller Cc: Michael Tremer Signed-off-by: Michael Tremer --- src/pakfire/lib/functions.pl | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/src/pakfire/lib/functions.pl b/src/pakfire/lib/functions.pl index c97d4254d..6cc177128 100644 --- a/src/pakfire/lib/functions.pl +++ b/src/pakfire/lib/functions.pl @@ -31,6 +31,8 @@ use HTTP::Message; use HTTP::Request; use Net::Ping; +use Switch; + package Pakfire; # A small color-hash :D @@ -172,7 +174,18 @@ sub fetchfile { } $final_data = undef; - my $url = "http://$host/$file"; + + my $url; + switch ($proto) { + case "HTTP" { $url = "http://$host/$file"; } + case "HTTPS" { $url = "https://$host/$file"; } + else { + # skip all lines with unknown protocols + logger("DOWNLOAD WARNING: Skipping Host: $host due to unknown protocol ($proto) in mirror database"); + next; + } + } + my $response; unless ($bfile =~ /^counter.py\?.*/) { From 4b072d640efde44017aeceb66d816ea59639be46 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Wed, 28 Mar 2018 16:55:18 +0100 Subject: [PATCH 89/91] pakfire: Use upstream proxy for HTTPS, too Signed-off-by: Michael Tremer --- src/pakfire/lib/functions.pl | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/pakfire/lib/functions.pl b/src/pakfire/lib/functions.pl index 6cc177128..78761aef6 100644 --- a/src/pakfire/lib/functions.pl +++ b/src/pakfire/lib/functions.pl @@ -166,10 +166,10 @@ sub fetchfile { if ($proxysettings{'UPSTREAM_PROXY'}) { logger("DOWNLOAD INFO: Upstream proxy: \"$proxysettings{'UPSTREAM_PROXY'}\"") unless ($bfile =~ /^counter.py\?.*/); if ($proxysettings{'UPSTREAM_USER'}) { - $ua->proxy("http","http://$proxysettings{'UPSTREAM_USER'}:$proxysettings{'UPSTREAM_PASSWORD'}@"."$proxysettings{'UPSTREAM_PROXY'}/"); + $ua->proxy([["http", "https"] => "http://$proxysettings{'UPSTREAM_USER'}:$proxysettings{'UPSTREAM_PASSWORD'}@"."$proxysettings{'UPSTREAM_PROXY'}/"]); logger("DOWNLOAD INFO: Logging in with: \"$proxysettings{'UPSTREAM_USER'}\" - \"$proxysettings{'UPSTREAM_PASSWORD'}\"") unless ($bfile =~ /^counter.py\?.*/); } else { - $ua->proxy("http","http://$proxysettings{'UPSTREAM_PROXY'}/"); + $ua->proxy([["http", "https"] => "http://$proxysettings{'UPSTREAM_PROXY'}/"]); } } From f7e9c14842dee00529df1e4a30f46255a1ed37e4 Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Thu, 29 Mar 2018 13:49:44 +0100 Subject: [PATCH 90/91] Rootfile update Signed-off-by: Michael Tremer --- config/rootfiles/common/openssl | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/openssl b/config/rootfiles/common/openssl index 87143c5c6..9d49d298b 100644 --- a/config/rootfiles/common/openssl +++ b/config/rootfiles/common/openssl @@ -371,6 +371,7 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/BIO_get_write_guarantee.html #usr/share/doc/openssl/html/man3/BIO_gets.html #usr/share/doc/openssl/html/man3/BIO_hostserv_priorities.html +#usr/share/doc/openssl/html/man3/BIO_info_cb.html #usr/share/doc/openssl/html/man3/BIO_int_ctrl.html #usr/share/doc/openssl/html/man3/BIO_listen.html #usr/share/doc/openssl/html/man3/BIO_lookup.html @@ -1287,7 +1288,6 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/EVP_MD_CTX_copy_ex.html #usr/share/doc/openssl/html/man3/EVP_MD_CTX_free.html #usr/share/doc/openssl/html/man3/EVP_MD_CTX_md.html -#usr/share/doc/openssl/html/man3/EVP_MD_CTX_md_data.html #usr/share/doc/openssl/html/man3/EVP_MD_CTX_new.html #usr/share/doc/openssl/html/man3/EVP_MD_CTX_reset.html #usr/share/doc/openssl/html/man3/EVP_MD_CTX_size.html @@ -1648,6 +1648,7 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/OCSP_resp_get0_certs.html #usr/share/doc/openssl/html/man3/OCSP_resp_get0_id.html #usr/share/doc/openssl/html/man3/OCSP_resp_get0_produced_at.html +#usr/share/doc/openssl/html/man3/OCSP_resp_get0_signer.html #usr/share/doc/openssl/html/man3/OCSP_response_create.html #usr/share/doc/openssl/html/man3/OCSP_response_get1_basic.html #usr/share/doc/openssl/html/man3/OCSP_response_status.html @@ -2854,6 +2855,7 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/X509_digest.html #usr/share/doc/openssl/html/man3/X509_dup.html #usr/share/doc/openssl/html/man3/X509_free.html +#usr/share/doc/openssl/html/man3/X509_get0_authority_key_id.html #usr/share/doc/openssl/html/man3/X509_get0_extensions.html #usr/share/doc/openssl/html/man3/X509_get0_notAfter.html #usr/share/doc/openssl/html/man3/X509_get0_notBefore.html @@ -2914,7 +2916,6 @@ usr/lib/libssl.so.1.1 #usr/share/doc/openssl/html/man3/X509v3_get_ext_by_critical.html #usr/share/doc/openssl/html/man3/X509v3_get_ext_count.html #usr/share/doc/openssl/html/man3/bio.html -#usr/share/doc/openssl/html/man3/bio_info_cb.html #usr/share/doc/openssl/html/man3/custom_ext_add_cb.html #usr/share/doc/openssl/html/man3/custom_ext_free_cb.html #usr/share/doc/openssl/html/man3/custom_ext_parse_cb.html @@ -3616,6 +3617,7 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/BIO_get_write_guarantee.3 #usr/share/man/man3/BIO_gets.3 #usr/share/man/man3/BIO_hostserv_priorities.3 +#usr/share/man/man3/BIO_info_cb.3 #usr/share/man/man3/BIO_int_ctrl.3 #usr/share/man/man3/BIO_listen.3 #usr/share/man/man3/BIO_lookup.3 @@ -4532,7 +4534,6 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/EVP_MD_CTX_copy_ex.3 #usr/share/man/man3/EVP_MD_CTX_free.3 #usr/share/man/man3/EVP_MD_CTX_md.3 -#usr/share/man/man3/EVP_MD_CTX_md_data.3 #usr/share/man/man3/EVP_MD_CTX_new.3 #usr/share/man/man3/EVP_MD_CTX_reset.3 #usr/share/man/man3/EVP_MD_CTX_size.3 @@ -4893,6 +4894,7 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/OCSP_resp_get0_certs.3 #usr/share/man/man3/OCSP_resp_get0_id.3 #usr/share/man/man3/OCSP_resp_get0_produced_at.3 +#usr/share/man/man3/OCSP_resp_get0_signer.3 #usr/share/man/man3/OCSP_response_create.3 #usr/share/man/man3/OCSP_response_get1_basic.3 #usr/share/man/man3/OCSP_response_status.3 @@ -6099,6 +6101,7 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/X509_digest.3 #usr/share/man/man3/X509_dup.3 #usr/share/man/man3/X509_free.3 +#usr/share/man/man3/X509_get0_authority_key_id.3 #usr/share/man/man3/X509_get0_extensions.3 #usr/share/man/man3/X509_get0_notAfter.3 #usr/share/man/man3/X509_get0_notBefore.3 @@ -6159,7 +6162,6 @@ usr/lib/libssl.so.1.1 #usr/share/man/man3/X509v3_get_ext_by_critical.3 #usr/share/man/man3/X509v3_get_ext_count.3 #usr/share/man/man3/bio.3 -#usr/share/man/man3/bio_info_cb.3 #usr/share/man/man3/custom_ext_add_cb.3 #usr/share/man/man3/custom_ext_free_cb.3 #usr/share/man/man3/custom_ext_parse_cb.3 From 6a8b2ef9772b58406f9e9b073e68dcf71eabb327 Mon Sep 17 00:00:00 2001 From: Arne Fitzenreiter Date: Fri, 30 Mar 2018 09:25:06 +0200 Subject: [PATCH 91/91] core120: set pafire version to 120 Signed-off-by: Arne Fitzenreiter --- make.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/make.sh b/make.sh index ef4bf7a7d..c03e464b5 100755 --- a/make.sh +++ b/make.sh @@ -26,7 +26,7 @@ NAME="IPFire" # Software name SNAME="ipfire" # Short name VERSION="2.19" # Version number CORE="120" # Core Level (Filename) -PAKFIRE_CORE="119" # Core Level (PAKFIRE) +PAKFIRE_CORE="120" # Core Level (PAKFIRE) GIT_BRANCH=`git rev-parse --abbrev-ref HEAD` # Git Branch SLOGAN="www.ipfire.org" # Software slogan CONFIG_ROOT=/var/ipfire # Configuration rootdir