Commit Graph

77 Commits (21e42a5d3b9cff9bfb09e779cdc95703db4ddafe)

Author SHA1 Message Date
Björn Lindqvist 1ca8276df4 basis/,core/,extra/: many new tags 2017-07-06 23:04:18 +02:00
Björn Lindqvist 5903f8f6b6 openssl.test: updating cert for openssl 1.1 (#1843)
The password is "password" as it was
2017-07-05 01:50:39 +02:00
Björn Lindqvist 5156d250b9 checksums,openssl.libcrypto: make it work with openssl 1.1 2017-07-01 22:19:42 +02:00
Björn Lindqvist 97cf96b668 openssl: docs 2017-07-01 13:50:29 +02:00
Björn Lindqvist 2a5f5ca6b9 openssl.*,io.sockets.*: support for openssl 1.1
In the new version, a lot of c function names have changed. So a new
global ssl-new-api? is needed to know if the new or old names should be
used.
2017-07-01 13:41:22 +02:00
Björn Lindqvist 8b6ae235ab openssl.*: adding functions that are different in libbsl 1.1.x 2017-07-01 09:25:09 +02:00
Björn Lindqvist 0d8338ceb8 io.sockets.secure.openssl,openssl.libssl: ENUM: over syntax
The enum does the same thing as the custom syntax did and is a little
easier to understand.
2017-06-24 16:46:00 +02:00
Björn Lindqvist 861b0eacd7 openssl.libssl.tests: removing stupid test that didn't work
you can't know beforehand which of the tls versions openssl supports.
2016-11-19 23:24:51 +01:00
Björn Lindqvist cc6f03f5b5 openssl.libssl: new destructors, to make sure the tests doesnt leak 2016-11-19 18:03:12 +01:00
Björn Lindqvist 317a832a86 openssl.libssl: trying to organize vocab a little better
like all the constants in one block, and functions grouped on their
method object
2016-11-19 17:27:50 +01:00
Björn Lindqvist 1448531b24 openssl.libssl: remove the testing of SSLv2 and SSLv3
It caused spurious test errors on Arch and Ubuntu because they are
removing support for those protocols.
2016-11-19 03:42:03 +01:00
Björn Lindqvist d4528c36da openssl.libssl: fix tc that breaks if sslv2 is disabled 2016-08-16 04:01:08 +02:00
Doug Coleman d9a39ce5e4 openssl.libssl: Use libcrypto on Windows instead of libeay or ssleay and
add a few more functions. Ugh.
2016-03-13 16:11:44 -07:00
Doug Coleman 2398800829 openssl.libssl: Adding some functions to work with certificates. 2016-03-13 01:42:53 -08:00
Doug Coleman a4804621af windows openssl, libtls: Use the libressl dlls for SSL.
http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/
http://downloads.factorcode.org/dlls/
libcrypt-37.dll
libssl-38.dll
libtls-10.dll
2016-03-08 12:48:45 -08:00
Doug Coleman 777528fd40 openssl.libssl: Add more constants. 2016-03-04 10:05:02 -08:00
Doug Coleman 3576c0930c openssl: Prefer tls1.2. Only use secure ciphers. 2016-03-04 09:15:12 -08:00
Benjamin Pollack 62d1425971 Add SNI support to Factor
Fixes #1527
2016-03-03 09:48:20 -08:00
Benjamin Pollack bfd656df17 Dump everything before TLSv1
All versions of SSL are deprecated and have major security issues. Just
kill the whole thing. If you want to deliberately expose yourself to
POODLE, you can do it on your own time.
2016-03-01 19:43:06 -05:00
Doug Coleman 03e8f4bc19 openssl.libssl: Add some more constants. Move things around a little and add SSL_ctrl() binding. 2016-02-23 18:24:41 -08:00
Benjamin Pollack 12af22f3ee openssl: only set RSA keys if required to do so
Modern OpenSSL and LibreSSL both do not require SSL_CTX_set_tmp_rsa to
be called unless SSL_CTX_need_tmp_rsa returns true, and LibreSSL and
OpenSSL compiled with deprecation warnings both will fail if this
happens. This commit resolves that.

With this change, it becomes possible to use LibreSSL in place of
OpenSSL with Factor.
2016-02-23 08:11:04 -05:00
Benjamin Pollack 8073c8a77e Update OpenSSL calls to work with LibreSSL/newer OpenSSL
RSA_generate_key has been deprecated, and is not available in either
LibreSSL or newer OpenSSL that are not compiled with deprecated call
support. This commit switches to the still-supported
RSA_generate_key_ex, which is supported by both libraries.

Note that this is still insufficient for Factor to work under LibreSSL,
though we now get a call further than before.
2016-02-22 14:21:39 -08:00
Björn Lindqvist 0a3b4b4872 io.sockets.secure.debug: use <test-secure-config> in some places
the word can be reused in a few places when setting up ssl. it removes
some duplicated code
2015-10-04 01:25:11 +02:00
Doug Coleman 0176591527 factor: actual patch to remove ; from all c/fortran functions 2015-07-19 16:25:30 -07:00
Doug Coleman cdef03f182 openssl.libssl: Fix FUNCTION: error exposed after parser change. 2015-07-19 15:46:57 -07:00
Doug Coleman 892c62e1dc factor: second stab at [ ] [ ] unit-test -> { } [ ] unit-test 2015-07-03 09:39:59 -07:00
Doug Coleman 59f3b1ea57 Revert "factor: rename [ ] [ ] unit-test -> { } [ ] unit-test using a refactoring tool!"
Needs a bit more work.

This reverts commit 7e54cc2824.
2015-07-02 13:47:06 -07:00
Doug Coleman 7e54cc2824 factor: rename [ ] [ ] unit-test -> { } [ ] unit-test using a refactoring tool! 2015-07-02 11:36:08 -07:00
Doug Coleman 6e60c811ac core: Rename create to create-word, create-in to create-word-in. 2015-06-08 12:47:35 -07:00
John Benediktsson de179243ce basis/extra: cleanup uses of add-library. 2014-11-13 13:05:14 -08:00
Benjamin Pollack 2c3dd8c3c8 Remove executable bit from tons of files that aren't 2014-11-05 20:40:42 -08:00
Björn Lindqvist 8b01a47358 openssl.libcrypto.tests: BIO_free should be called to release connections 2014-10-03 07:12:27 -07:00
John Benediktsson 8c58b99b1d Revert "openssl: define a startup-hook so that openssl initializes automatically"
This reverts commit 981ea313a0.

Conflicts:
	basis/openssl/openssl.factor
2014-08-05 12:14:53 -07:00
John Benediktsson 9b91d78dc4 openssl: less usings. 2014-06-06 14:18:24 -07:00
Björn Lindqvist 981ea313a0 openssl: define a startup-hook so that openssl initializes automatically 2014-06-06 14:12:09 -07:00
Björn Lindqvist 0b15b47743 openssl.libssl: better way to change library dll for windows 2013-10-11 10:23:40 -07:00
Björn Lindqvist ad627a1395 openssl.libssl: on windows the X509_* family of functions is in a
different dll than the other functions in libssl
2013-10-11 10:23:40 -07:00
Björn Lindqvist 968e3e6cf4 openssl.libssl: unit tests and wrappings for more parts of libssl 2013-10-11 10:23:40 -07:00
Björn Lindqvist 98355daba1 openssl.libssl: functions and structs related to general names 2013-09-16 17:17:48 -07:00
Björn Lindqvist 5492b8e46b libcrypto: wrap more parts of the BIO_ api and add unit tests 2013-09-16 17:17:48 -07:00
Björn Lindqvist ed34163e54 openssl.libssl: define the ssl_method_st struct 2013-09-16 17:17:48 -07:00
Björn Lindqvist c850fe90fc openssl.libcrypto: defining structs for some opaque aliens 2013-09-16 17:17:47 -07:00
Björn Lindqvist a3f685bcb0 openssl.libssl: wrapped several more objects from libssl which are needed to lookup the subject alt names 2013-09-16 17:17:47 -07:00
Björn Lindqvist f4f60b8ba3 io.sockets.secure.openssl: support for getting issuer name 2013-09-16 17:17:47 -07:00
Joe Groff 943596575a use radix literals 2011-11-23 19:03:40 -08:00
Joe Groff 8cf18d1a82 remove BSD,solaris,etc. misc platform support code 2011-11-02 17:13:51 -07:00
John Benediktsson 80e1c8e3f2 Eliminate duplicate syntax for stack effects "(" no longer drops and is identical to the old "((", which is now removed. 2011-10-18 13:19:39 -07:00
John Benediktsson 6f1c44b46d Cleanup some lint warnings. 2011-10-15 19:19:44 -07:00
Doug Coleman 671f19d70f Remove all non-core uses of (scan-token)
Add scan-datum
Add scan-number
Document more words
Fixes #225.
2011-10-02 12:00:08 -07:00
Doug Coleman 76580da5d5 Refactor the lexer/parser to expose friendlier words for scanning tokens. The preferred top-level words now throw an exception on EOF.
CREATE -> scan-new
CREATE-CLASS -> scan-new-class
CREATE-WORD -> scan-new-word
CREATE-GENERIC -> scan-new-generic
scan -> (scan-token)
scan-token now throws on eof
(scan-word) returns word/number/f
scan-word now throws on eof
scan-word-name expects a non-number
Fixes #183.
Fixes #209.
2011-09-29 11:28:28 -07:00