openssl.git
17 years agoApparently, there are still chances we have to deal with buggy pod2man versions.
Richard Levitte [Thu, 30 May 2002 15:19:43 +0000 (15:19 +0000)]
Apparently, there are still chances we have to deal with buggy pod2man versions.
Deal with that by testing any available pod2man and using it if appropriate,
and falling back to util/pod2man.pl if none was found.

17 years agoCorrect AES counter mode, which incorrectly incremented the counter before
Richard Levitte [Thu, 30 May 2002 14:06:06 +0000 (14:06 +0000)]
Correct AES counter mode, which incorrectly incremented the counter before
using it.
PR: 56

17 years agoNew functions EC_POINT_point2bn(), EC_POINT_bn2point(), EC_POINT_point2hex(), EC_POIN...
Bodo Möller [Thu, 30 May 2002 13:16:03 +0000 (13:16 +0000)]
New functions EC_POINT_point2bn(), EC_POINT_bn2point(), EC_POINT_point2hex(), EC_POINT_hex2point()

Submitted by: Nils Larsch

17 years agoCorrect darwin shared library support.
Richard Levitte [Thu, 30 May 2002 12:16:33 +0000 (12:16 +0000)]
Correct darwin shared library support.
PR: 39

17 years agoSome shlib extensions were in the wrong field
Richard Levitte [Thu, 30 May 2002 10:49:52 +0000 (10:49 +0000)]
Some shlib extensions were in the wrong field

17 years agoOur copy of pod2man.pl is old and comparatively broken, so lets remove it.
Richard Levitte [Thu, 30 May 2002 10:18:13 +0000 (10:18 +0000)]
Our copy of pod2man.pl is old and comparatively broken, so lets remove it.
PR: 30

17 years agoAdd more warnings for my debug targets.
Richard Levitte [Thu, 30 May 2002 09:40:46 +0000 (09:40 +0000)]
Add more warnings for my debug targets.

17 years agoRemove the duplicate description of -out.
Richard Levitte [Thu, 30 May 2002 06:24:35 +0000 (06:24 +0000)]
Remove the duplicate description of -out.
PR: 28

17 years agoMake i2c_ASN1_BIT_STRING return the correct length.
Dr. Stephen Henson [Wed, 29 May 2002 23:14:01 +0000 (23:14 +0000)]
Make i2c_ASN1_BIT_STRING return the correct length.

17 years agoSet DLOPEN_FLAG the same way on NetBSD as on OpenBSD.
Richard Levitte [Wed, 29 May 2002 21:00:08 +0000 (21:00 +0000)]
Set DLOPEN_FLAG the same way on NetBSD as on OpenBSD.
PR: 58, submitted by andrew@cis.uoguelph.ca

17 years agoThere is a chance that the input string is larger than size, and on VMS,
Richard Levitte [Wed, 29 May 2002 08:31:39 +0000 (08:31 +0000)]
There is a chance that the input string is larger than size, and on VMS,
this wasn't checked and could possibly be exploitable (slim chance, but still)

17 years agoRemove item listed twice <kromJx@crosswinds.net>.
Lutz Jänicke [Tue, 28 May 2002 17:48:54 +0000 (17:48 +0000)]
Remove item listed twice <kromJx@crosswinds.net>.

17 years agoCygnus correction. (I thought I had tested that...)
Ulf Möller [Mon, 27 May 2002 19:42:30 +0000 (19:42 +0000)]
Cygnus correction. (I thought I had tested that...)

17 years agofix Cygwin (remove extra colons)
Bodo Möller [Fri, 24 May 2002 20:39:31 +0000 (20:39 +0000)]
fix Cygwin (remove extra colons)

17 years agoUse assembler implementations with Cygwin.
Ulf Möller [Fri, 24 May 2002 20:24:38 +0000 (20:24 +0000)]
Use assembler implementations with Cygwin.
This also fixes the bn_sub_part_word problem.

17 years agoRecover from errors
Richard Levitte [Thu, 23 May 2002 23:31:22 +0000 (23:31 +0000)]
Recover from errors

17 years agomake update
Richard Levitte [Thu, 23 May 2002 13:52:57 +0000 (13:52 +0000)]
make update

17 years agoMake sure short aliases are used where required.
Richard Levitte [Thu, 23 May 2002 13:52:36 +0000 (13:52 +0000)]
Make sure short aliases are used where required.

17 years agoDefine a short alias for another long EC symbol.
Richard Levitte [Thu, 23 May 2002 13:34:38 +0000 (13:34 +0000)]
Define a short alias for another long EC symbol.

17 years agoMake sure ECDSA is built and tested on VMS.
Richard Levitte [Thu, 23 May 2002 13:33:55 +0000 (13:33 +0000)]
Make sure ECDSA is built and tested on VMS.
Avoid loops if linking an application fails.

17 years agoMake sure ECDSA is built and tested on VMS.
Richard Levitte [Thu, 23 May 2002 13:33:08 +0000 (13:33 +0000)]
Make sure ECDSA is built and tested on VMS.

17 years agoAllow the use of the TCP/IP stack keyword TCPIP and NONE
Richard Levitte [Wed, 22 May 2002 11:37:20 +0000 (11:37 +0000)]
Allow the use of the TCP/IP stack keyword TCPIP and NONE

17 years agoUse OPENSSL_SYS_VMS instead of just VMS
Richard Levitte [Wed, 22 May 2002 11:35:45 +0000 (11:35 +0000)]
Use OPENSSL_SYS_VMS instead of just VMS

17 years agoaccept NULL in 'free' functions
Bodo Möller [Tue, 21 May 2002 08:59:57 +0000 (08:59 +0000)]
accept NULL in 'free' functions

17 years agoReorganise -subj option code, fix buffer overrun.
Dr. Stephen Henson [Sun, 19 May 2002 16:31:10 +0000 (16:31 +0000)]
Reorganise -subj option code, fix buffer overrun.

17 years agoFix Mingw32 asm build: use the Unix
Dr. Stephen Henson [Sun, 19 May 2002 12:03:05 +0000 (12:03 +0000)]
Fix Mingw32 asm build: use the Unix
bignum assembly method of bn-586.pl
and co-586.pl which (for some reason)
VC++ doesn't use.

17 years agoAdd missing EVP_CIPHER_CTX_init call.
Dr. Stephen Henson [Sat, 18 May 2002 23:43:10 +0000 (23:43 +0000)]
Add missing EVP_CIPHER_CTX_init call.

17 years agoFix incorrect =over 4 location.
Lutz Jänicke [Thu, 16 May 2002 17:45:37 +0000 (17:45 +0000)]
Fix incorrect =over 4 location.
Submitted by: David Waitzman <djw@bbn.com>
Reviewed by: Lutz Jaenicke
PR: [openssl.org #38]

17 years agofix EVP_dsa_sha macro
Bodo Möller [Thu, 16 May 2002 12:51:18 +0000 (12:51 +0000)]
fix EVP_dsa_sha macro

Submitted by: Nils Larsch

17 years agoUse the indirect way to the actual request tracker, so that people
Lutz Jänicke [Thu, 16 May 2002 10:01:53 +0000 (10:01 +0000)]
Use the indirect way to the actual request tracker, so that people
also are informed about the credentials required for guest access
and the operation instructions.

17 years agoupdate
Bodo Möller [Thu, 16 May 2002 09:28:09 +0000 (09:28 +0000)]
update

17 years agoZero cipher_data in EVP_CIPHER_CTX_cleanup
Dr. Stephen Henson [Wed, 15 May 2002 18:49:25 +0000 (18:49 +0000)]
Zero cipher_data in EVP_CIPHER_CTX_cleanup

Add cleanup calls to evp_test.c

Allow reuse of cipher contexts by removing
automatic cleanup in EVP_*Final().

17 years agomake b_print.c consistent with the rest of OpenSSL:
Bodo Möller [Tue, 14 May 2002 19:40:58 +0000 (19:40 +0000)]
make b_print.c consistent with the rest of OpenSSL:
disable assert() except for debug builds

17 years agoAdd missing '"'
Lutz Jänicke [Sun, 12 May 2002 20:37:44 +0000 (20:37 +0000)]
Add missing '"'
Submitted by: Boyd Gerber <gerberb@zenez.com>

17 years agoRecognize PPC64 target.
Lutz Jänicke [Sun, 12 May 2002 19:45:51 +0000 (19:45 +0000)]
Recognize PPC64 target.
Submitted by:
Reviewed by:
PR: 26

17 years agoEVP_SealFinal should return a value.
Dr. Stephen Henson [Sat, 11 May 2002 17:37:08 +0000 (17:37 +0000)]
EVP_SealFinal should return a value.

17 years agovalues were reset for no reason.
Ulf Möller [Sat, 11 May 2002 09:15:42 +0000 (09:15 +0000)]
values were reset for no reason.

17 years agoupdated Mingw32 instructions.
Ulf Möller [Sat, 11 May 2002 09:14:40 +0000 (09:14 +0000)]
updated Mingw32 instructions.

17 years agoAdd config entry debug-steve-linux-pseudo64. This sets the
Dr. Stephen Henson [Fri, 10 May 2002 23:00:43 +0000 (23:00 +0000)]
Add config entry debug-steve-linux-pseudo64.  This sets the
SIXTY_FOUR bignum library option to use 64 bit operations
on the 32 bit linux platform.

This is very inefficient but it can be used to test some
of the 64 bit logic on a 32 bit platform.

17 years agoFallback to normal multiply if n2 == 8 and dna or dnb is not zero
Dr. Stephen Henson [Fri, 10 May 2002 22:18:13 +0000 (22:18 +0000)]
Fallback to normal multiply if n2 == 8 and dna or dnb is not zero
in bn_mul_recursive.

This is (hopefully) what was triggering bignum errors on 64 bit
platforms and causing the BN_mod_mul test to fail.

17 years agoAvoid gcc warning: BN_DEC_CONV when SIXTY_FOUR_BIT is defined is unsigned.
Dr. Stephen Henson [Fri, 10 May 2002 22:07:37 +0000 (22:07 +0000)]
Avoid gcc warning: BN_DEC_CONV when SIXTY_FOUR_BIT is defined is unsigned.

17 years agoUpdating status for 0.9.6d
Richard Levitte [Thu, 9 May 2002 23:54:02 +0000 (23:54 +0000)]
Updating status for 0.9.6d

17 years agoSynchronise the FAQ
Richard Levitte [Thu, 9 May 2002 23:41:40 +0000 (23:41 +0000)]
Synchronise the FAQ

17 years agoMake the huge buffer smaller, so the size becomes reasonable for small-stack environm...
Richard Levitte [Thu, 9 May 2002 20:14:00 +0000 (20:14 +0000)]
Make the huge buffer smaller, so the size becomes reasonable for small-stack environments.
Notified by Verdon Walker <VWalker@novell.com>

17 years agoOne place where VMS wasn't changed to OPENSSL_SYS_VMS...
Richard Levitte [Thu, 9 May 2002 18:27:06 +0000 (18:27 +0000)]
One place where VMS wasn't changed to OPENSSL_SYS_VMS...

17 years agoMove an assert() to avoid core dumps when a static buffer hasn't been given.
Richard Levitte [Thu, 9 May 2002 18:19:21 +0000 (18:19 +0000)]
Move an assert() to avoid core dumps when a static buffer hasn't been given.
Notified by Verdon Walker <VWalker@novell.com>

17 years agoSmall documentation fix for EVP_CipherFinal or EVP_CipherFinal_ex.
Richard Levitte [Wed, 8 May 2002 15:20:38 +0000 (15:20 +0000)]
Small documentation fix for EVP_CipherFinal or EVP_CipherFinal_ex.
Notified by Stella Power <snpower@maths.tcd.ie>.
PR: 24

17 years agoGenerate an error if rewinding wasn't possible.
Richard Levitte [Wed, 8 May 2002 15:12:59 +0000 (15:12 +0000)]
Generate an error if rewinding wasn't possible.
Notified by Ken Hirsch <kenhirsch@myself.com>.
PR: 23

17 years agoChange internals of the EC library so that the functions
Bodo Möller [Wed, 8 May 2002 11:54:24 +0000 (11:54 +0000)]
Change internals of the EC library so that the functions
EC_GROUP_{set_generator,get_generator,get_order,get_cofactor} are
implemented directly in crypto/ec/ec_lib.c and not dispatched to
methods.

Also fix EC_GROUP_copy to copy the NID.

17 years agoAdd missing ";" after fi
Lutz Jänicke [Tue, 7 May 2002 15:35:48 +0000 (15:35 +0000)]
Add missing ";" after fi
Submitted by: bryanh@giraffe-data.com
Reviewed by:
PR: [openssl.org #18]

17 years agoin SignerInfo, use ecdsa-with-SHA1 OID for ECDSA (not ecPublicKey)
Bodo Möller [Tue, 7 May 2002 15:14:12 +0000 (15:14 +0000)]
in SignerInfo, use ecdsa-with-SHA1 OID for ECDSA (not ecPublicKey)

Submitted by: Nils Larsch

17 years agoFix ciphersuite list to enforce low priority for RC4.
Bodo Möller [Tue, 7 May 2002 08:36:26 +0000 (08:36 +0000)]
Fix ciphersuite list to enforce low priority for RC4.

17 years agoensure that, for each strength, RC4 ciphers have least preference
Bodo Möller [Tue, 7 May 2002 07:59:35 +0000 (07:59 +0000)]
ensure that, for each strength, RC4 ciphers have least preference
in the default ciphersuite list

17 years agorefer to latest draft for AES ciphersuites
Bodo Möller [Tue, 7 May 2002 07:55:36 +0000 (07:55 +0000)]
refer to latest draft for AES ciphersuites

17 years agofix warning
Bodo Möller [Mon, 6 May 2002 10:44:59 +0000 (10:44 +0000)]
fix warning

17 years agoupdate
Bodo Möller [Sun, 5 May 2002 23:47:46 +0000 (23:47 +0000)]
update

17 years agoimprove wNAF generation
Bodo Möller [Sun, 5 May 2002 23:45:09 +0000 (23:45 +0000)]
improve wNAF generation

17 years agodisable AES ciphersuites unless explicitly requested
Bodo Möller [Sun, 5 May 2002 23:44:27 +0000 (23:44 +0000)]
disable AES ciphersuites unless explicitly requested

17 years agofix casts
Bodo Möller [Sun, 5 May 2002 23:00:28 +0000 (23:00 +0000)]
fix casts

17 years agoMake sure that date is run under the C locale, so dates are given in the
Richard Levitte [Thu, 2 May 2002 08:05:46 +0000 (08:05 +0000)]
Make sure that date is run under the C locale, so dates are given in the
default format.
PR: 16

17 years agoAdd apps_startup and bio_err init code to smime.c
Dr. Stephen Henson [Wed, 1 May 2002 20:07:46 +0000 (20:07 +0000)]
Add apps_startup and bio_err init code to smime.c

17 years agoFix escaping when using the -subj option of "openssl req", document
Lutz Jänicke [Tue, 30 Apr 2002 12:08:18 +0000 (12:08 +0000)]
Fix escaping when using the -subj option of "openssl req", document
'hidden' -nameopt support. (Robert Joop <joop@fokus.gmd.de>)

17 years agoAdd information about -nameopt option for x509.
Lutz Jänicke [Mon, 29 Apr 2002 16:01:41 +0000 (16:01 +0000)]
Add information about -nameopt option for x509.

17 years agoundo nonsense patch (r *is* signed or we have signedness mismatches elsewhere)
Bodo Möller [Mon, 29 Apr 2002 11:03:06 +0000 (11:03 +0000)]
undo nonsense patch (r *is* signed or we have signedness mismatches elsewhere)

17 years agoFix unsigned vs. signed clash
Richard Levitte [Mon, 29 Apr 2002 10:29:38 +0000 (10:29 +0000)]
Fix unsigned vs. signed clash

17 years agoSynchronise with 0.9.7-stable.
Richard Levitte [Mon, 29 Apr 2002 10:28:29 +0000 (10:28 +0000)]
Synchronise with 0.9.7-stable.

17 years agoSynchronise with 0.9.7-stable.
Richard Levitte [Mon, 29 Apr 2002 10:19:19 +0000 (10:19 +0000)]
Synchronise with 0.9.7-stable.

17 years agoFix crypto/asn1/a_sign.c so that 'parameters' is omitted (not
Bodo Möller [Fri, 26 Apr 2002 08:28:34 +0000 (08:28 +0000)]
Fix crypto/asn1/a_sign.c so that 'parameters' is omitted (not
encoded as NULL) with id-dsa-with-sha1.

Submitted by: Nils Larsch

17 years agoAdd generationQualifier OID (proposed by Fiel Cabral).
Lutz Jänicke [Thu, 25 Apr 2002 18:03:13 +0000 (18:03 +0000)]
Add generationQualifier OID (proposed by Fiel Cabral).

17 years agoPotential memory leak removed. Notified by <threaded@totalise.co.uk>
Richard Levitte [Thu, 25 Apr 2002 10:11:21 +0000 (10:11 +0000)]
Potential memory leak removed.  Notified by <threaded@totalise.co.uk>

17 years agonew items for 0.9.7
Bodo Möller [Thu, 25 Apr 2002 07:52:07 +0000 (07:52 +0000)]
new items for 0.9.7

17 years agooops
Bodo Möller [Thu, 25 Apr 2002 07:46:35 +0000 (07:46 +0000)]
oops

17 years agoAlgorithmIdentifier bugs
Bodo Möller [Thu, 25 Apr 2002 06:29:27 +0000 (06:29 +0000)]
AlgorithmIdentifier bugs

17 years agofix usage (no 'key')
Bodo Möller [Tue, 23 Apr 2002 13:56:14 +0000 (13:56 +0000)]
fix usage (no 'key')

17 years agoUhmmm, if we use && after having tested for the presence of the certificate,
Richard Levitte [Tue, 23 Apr 2002 13:15:08 +0000 (13:15 +0000)]
Uhmmm, if we use && after having tested for the presence of the certificate,
we just *might* stand a certain chance of actually getting it written
to file...

17 years agoERR_file_name is no longer being used.
Lutz Jänicke [Mon, 22 Apr 2002 13:54:50 +0000 (13:54 +0000)]
ERR_file_name is no longer being used.

17 years agoAdd cygwin build script (Corinna Vinschen <vinschen@redhat.com>).
Lutz Jänicke [Sun, 21 Apr 2002 17:54:03 +0000 (17:54 +0000)]
Add cygwin build script (Corinna Vinschen <vinschen@redhat.com>).

17 years agoMake sure ec and ecdsa is properly handled in Windows.
Richard Levitte [Sat, 20 Apr 2002 10:23:56 +0000 (10:23 +0000)]
Make sure ec and ecdsa is properly handled in Windows.
Notified by Bernd Matthes <bernd.matthes@gemplus.com>

17 years agoSignedness mismatch.
Richard Levitte [Sat, 20 Apr 2002 10:23:19 +0000 (10:23 +0000)]
Signedness mismatch.
Notified by Bernd Matthes <bernd.matthes@gemplus.com>

17 years agoThe callback must have (void) as argument list.
Richard Levitte [Sat, 20 Apr 2002 10:22:42 +0000 (10:22 +0000)]
The callback must have (void) as argument list.
Notified by Bernd Matthes <bernd.matthes@gemplus.com>

17 years agoNo point constifying an int.
Richard Levitte [Sat, 20 Apr 2002 10:22:01 +0000 (10:22 +0000)]
No point constifying an int.
Notified by Bernd Matthes <bernd.matthes@gemplus.com>

17 years agoDo not free p if it hasn't been used yet.
Richard Levitte [Sat, 20 Apr 2002 10:19:20 +0000 (10:19 +0000)]
Do not free p if it hasn't been used yet.
Notified by Bernd Matthes <bernd.matthes@gemplus.com>

17 years agoMake sure the opened directory is closed on exit.
Richard Levitte [Thu, 18 Apr 2002 16:20:13 +0000 (16:20 +0000)]
Make sure the opened directory is closed on exit.
Notified by Lorinczy Zsigmond <lzsiga@mail.ahiv.hu>

17 years agoMissing "Configure" entry (Jean-Marc Desperrier <jean-marc.desperrier@certplus.com>).
Lutz Jänicke [Thu, 18 Apr 2002 12:47:50 +0000 (12:47 +0000)]
Missing "Configure" entry (Jean-Marc Desperrier <jean-marc.desperrier@certplus.com>).

17 years agoOptimize: better shortcut evaluation ("Howard Chu" <hyc@highlandsun.com>).
Lutz Jänicke [Thu, 18 Apr 2002 11:54:06 +0000 (11:54 +0000)]
Optimize: better shortcut evaluation ("Howard Chu" <hyc@highlandsun.com>).

17 years agoHandle headings uniformly to allow automatic processing.
Lutz Jänicke [Thu, 18 Apr 2002 08:11:31 +0000 (08:11 +0000)]
Handle headings uniformly to allow automatic processing.

17 years ago'version' is not optional in the encoding
Bodo Möller [Wed, 17 Apr 2002 11:35:52 +0000 (11:35 +0000)]
'version' is not optional in the encoding

Submitted by: Nils Larsch

17 years ago'version' is not optional in the encoding
Bodo Möller [Wed, 17 Apr 2002 11:31:20 +0000 (11:31 +0000)]
'version' is not optional in the encoding

Submitted by: Nils Larsch

17 years agocheck return values
Bodo Möller [Wed, 17 Apr 2002 09:31:34 +0000 (09:31 +0000)]
check return values

Submitted by: Nils Larsch

17 years agoget rid of some assignments that have become obsolete
Bodo Möller [Mon, 15 Apr 2002 15:29:43 +0000 (15:29 +0000)]
get rid of some assignments that have become obsolete

17 years agoDocument OID changes.
Lutz Jänicke [Mon, 15 Apr 2002 14:18:30 +0000 (14:18 +0000)]
Document OID changes.

17 years agoUse the "mail" short name according to RFC2798 (Michael Bell
Lutz Jänicke [Mon, 15 Apr 2002 13:30:41 +0000 (13:30 +0000)]
Use the "mail" short name according to RFC2798 (Michael Bell
<michael.bell@rz.hu-berlin.de>).

17 years agoSome more OID enhancements.
Lutz Jänicke [Mon, 15 Apr 2002 10:41:38 +0000 (10:41 +0000)]
Some more OID enhancements.

17 years agoFix CRLF problem in BASE64 decode.
Lutz Jänicke [Mon, 15 Apr 2002 09:55:40 +0000 (09:55 +0000)]
Fix CRLF problem in BASE64 decode.

17 years agoremove disabled code
Bodo Möller [Sun, 14 Apr 2002 13:28:17 +0000 (13:28 +0000)]
remove disabled code

17 years agofix length field we create when converting SSL 2.0 format into SSL 3.0/TLS 1.0 format
Bodo Möller [Sun, 14 Apr 2002 13:05:15 +0000 (13:05 +0000)]
fix length field we create when converting SSL 2.0 format into SSL 3.0/TLS 1.0 format
(the bug was introduced with message callback support)

17 years agoImplement known-IV countermeasure.
Bodo Möller [Sat, 13 Apr 2002 22:47:20 +0000 (22:47 +0000)]
Implement known-IV countermeasure.

Fix length checks in ssl3_get_client_hello().

Use s->s3->in_read_app_data differently to fix ssl3_read_internal().

17 years agoAvoid emacs backup files when making a snapshot
Richard Levitte [Sat, 13 Apr 2002 12:28:44 +0000 (12:28 +0000)]
Avoid emacs backup files when making a snapshot

17 years agoanother error discovered by Karsten Braaten. The number was not even
Ulf Möller [Sat, 13 Apr 2002 09:58:50 +0000 (09:58 +0000)]
another error discovered by Karsten Braaten. The number was not even
prime!

17 years agolooks like a typo
Bodo Möller [Fri, 12 Apr 2002 13:52:40 +0000 (13:52 +0000)]
looks like a typo