Theo Buehler

QUIC transport parameters extension

1

# Bug Report ## System Information | Type | Version/Name | | ------------------------ | ------------ | | Operating System Name | OpenBSD | | Operating System Version | 7.1-current |...

There is an if (c < 0) check a few lines below which is always false for systems that use the unsigned version of char. This is allowed by the...

Needed Ed25519 certificates for something I was testing, so I wrote this diff. Maybe it is useful for someone else.

The -Wstrict-prototype got stricter with clang 15. This causes build failures due to two missing void. ``` /tmp/pobj/liblinphone-5.1.56/liblinphone-5.1.56/console/linphonec.c:968:21: error: a function declaration without a prototype is deprecated in all versions...

Invalid CSR versions set in regress tests

1

It looks like OpenSSL are about to merge [a PR][1] that disallows setting any version but 'version 1' (encoded as `0`) in CSRs, because that's the only version specified, see...

Use X509_ALGOR_get0() accessor for X509_ALGOR

4

While the struct is currently still public in OpenSSL, there has been an accessor since OpenSSL 0.9.8h. It would be nice if this accessor could be used so that the...

While looking at #152, I noticed that the `fib` handling on FreeBSD looks odd. It assigns to `t->fd` only if the `setsockopt` call fails. https://github.com/zehome/MLVPN/blob/2263bab7e5f983e1daa33887b53120c12646398f/src/mlvpn.c#L850-L860 This will likely need a...

cryptoki itself is marked optional and only needed for hsm builds. cryptoki-sys is still compiled unconditionally, also in builds disabling the hsm feature. This causes build failures if cryptoki isn't...

While this initially worked fine, at some point these patches broke because libcairo started calling shmget(2) - a syscall not covered by any pledge promise - and a common pitfall...

https://github.com/libressl/portable/commit/80eb1454604f71fdcbb17c7fb73bade22031ef81 introduced a strange `empty.c`. Why was this needed? The windows compiler is unhappy about this: > D:\a\portable\portable\crypto\empty.c(1,1): warning C4206: nonstandard extension used: translation unit is empty [D:\a\portable\portable\build\crypto\crypto.vcxproj] See #966...