openssl.git
15 years agoFix typo in ./config.
Andy Polyakov [Tue, 31 May 2005 11:34:33 +0000 (11:34 +0000)]
Fix typo in ./config.

15 years agoPlatform update from 8-stable.
Andy Polyakov [Tue, 31 May 2005 11:07:27 +0000 (11:07 +0000)]
Platform update from 8-stable.

15 years agoPlatform update from 8-stable.
Andy Polyakov [Tue, 31 May 2005 09:39:03 +0000 (09:39 +0000)]
Platform update from 8-stable.

15 years agoMerge from 0.9.8-stable.
Richard Levitte [Mon, 30 May 2005 23:26:04 +0000 (23:26 +0000)]
Merge from 0.9.8-stable.

15 years agoMerge in the new news from 0.9.8-stable.
Richard Levitte [Mon, 30 May 2005 22:51:28 +0000 (22:51 +0000)]
Merge in the new news from 0.9.8-stable.

15 years agoDJGPP changes. Contributed by Doug Kaufman <dkaufman@rahul.net>
Richard Levitte [Mon, 30 May 2005 22:37:44 +0000 (22:37 +0000)]
DJGPP changes.  Contributed by Doug Kaufman <dkaufman@rahul.net>

15 years agopqueue and dtls uses 64-bit values. Unfortunately, OpenSSL doesn't
Richard Levitte [Mon, 30 May 2005 22:34:37 +0000 (22:34 +0000)]
pqueue and dtls uses 64-bit values.  Unfortunately, OpenSSL doesn't
have a uniform representation for those over all architectures, so a
little bit of hackery is needed.

Contributed by nagendra modadugu <nagendra@cs.stanford.edu>

15 years agoSynchronise with Unixly build
Richard Levitte [Mon, 30 May 2005 22:26:30 +0000 (22:26 +0000)]
Synchronise with Unixly build

15 years agoChange all relevant occurences of 'ncipher' to 'chil'. That's what nCipher always...
Richard Levitte [Mon, 30 May 2005 05:17:02 +0000 (05:17 +0000)]
Change all relevant occurences of 'ncipher' to 'chil'.  That's what nCipher always wanted...

15 years agoUpdate from stable branch.
Dr. Stephen Henson [Mon, 30 May 2005 00:29:16 +0000 (00:29 +0000)]
Update from stable branch.

15 years agoChange the source and output paths for 'chil' and '4758cca' engines so that
Geoff Thorpe [Sun, 29 May 2005 19:14:21 +0000 (19:14 +0000)]
Change the source and output paths for 'chil' and '4758cca' engines so that
dynamic loading is consistent with respect to engine ids.

15 years agoWe have some source with \r\n as line ends. DEC C informs about that,
Richard Levitte [Sun, 29 May 2005 12:13:51 +0000 (12:13 +0000)]
We have some source with \r\n as line ends.  DEC C informs about that,
and I really can't be bothered...

15 years agoTypo
Richard Levitte [Sun, 29 May 2005 12:11:50 +0000 (12:11 +0000)]
Typo

15 years agoAdd pss/x931 files.
Dr. Stephen Henson [Sat, 28 May 2005 20:44:37 +0000 (20:44 +0000)]
Add pss/x931 files.

15 years agoUpdate from 0.9.7-stable. Also repatch and rebuild error codes.
Dr. Stephen Henson [Sat, 28 May 2005 20:44:02 +0000 (20:44 +0000)]
Update from 0.9.7-stable. Also repatch and rebuild error codes.

15 years agoUse BN_with_flags() in a cleaner way.
Bodo Möller [Fri, 27 May 2005 15:38:53 +0000 (15:38 +0000)]
Use BN_with_flags() in a cleaner way.

15 years agoAssing check_{cert,crl}_time to 'ok' variable so it returns errors on
Dr. Stephen Henson [Fri, 27 May 2005 13:19:25 +0000 (13:19 +0000)]
Assing check_{cert,crl}_time to 'ok' variable so it returns errors on
expiry.

15 years agomake sure DSA signing exponentiations really are constant-time
Bodo Möller [Thu, 26 May 2005 04:40:52 +0000 (04:40 +0000)]
make sure DSA signing exponentiations really are constant-time

15 years agocheck BN_copy() return value
Bodo Möller [Thu, 26 May 2005 04:30:49 +0000 (04:30 +0000)]
check BN_copy() return value

15 years agoHandle differences between engine IDs and their dynamic library names (and
Geoff Thorpe [Wed, 25 May 2005 02:54:28 +0000 (02:54 +0000)]
Handle differences between engine IDs and their dynamic library names (and
source files, for that matter) by tolerating the alternatives. It would be
preferable to also change the generated shared library names, but that will
be taken up separately.

15 years agoIt seems like mkdef.pl couldn't quite understand that #ifdef OPENSSL_NO_SHA512
Richard Levitte [Tue, 24 May 2005 03:39:08 +0000 (03:39 +0000)]
It seems like mkdef.pl couldn't quite understand that #ifdef OPENSSL_NO_SHA512
was still active when it came down to the functions.  mkdef.pl should really
be corrected, but that'll be another day...

15 years agoTypo correction
Richard Levitte [Tue, 24 May 2005 03:27:15 +0000 (03:27 +0000)]
Typo correction

15 years agoDEC C complains about bad subscript, but we know better, so let's shut it up.
Richard Levitte [Tue, 24 May 2005 03:22:53 +0000 (03:22 +0000)]
DEC C complains about bad subscript, but we know better, so let's shut it up.

15 years agoBe more consistent with OPENSSL_NO_SHA256.
Andy Polyakov [Sun, 22 May 2005 10:27:59 +0000 (10:27 +0000)]
Be more consistent with OPENSSL_NO_SHA256.

15 years agoOPENSSL_NO_SHA512 to mask even SHA512_CTX declaration. This is done to
Andy Polyakov [Sun, 22 May 2005 08:55:15 +0000 (08:55 +0000)]
OPENSSL_NO_SHA512 to mask even SHA512_CTX declaration. This is done to
make no-sha512 more effective on platforms, which don't support 64-bit
integer type of *any* kind.

15 years agoStill SEGV trouble in .init segment under Solaris x86...
Andy Polyakov [Sat, 21 May 2005 17:49:10 +0000 (17:49 +0000)]
Still SEGV trouble in .init segment under Solaris x86...

15 years agoWhen _XOPEN_SOURCE is defined, make sure it's defined to 500. Required in
Richard Levitte [Sat, 21 May 2005 17:39:43 +0000 (17:39 +0000)]
When _XOPEN_SOURCE is defined, make sure it's defined to 500.  Required in
http://www.opengroup.org/onlinepubs/007908799/xsh/compilation.html.

Notified by David Wolfe <dwolfe5272@yahoo.com>

15 years agoDefault to no-sse2 on selected platforms.
Andy Polyakov [Sat, 21 May 2005 16:50:27 +0000 (16:50 +0000)]
Default to no-sse2 on selected platforms.

15 years agoPatches for Cygwin, provided by Corinna Vinschen <vinschen@redhat.com>
Richard Levitte [Sat, 21 May 2005 16:41:34 +0000 (16:41 +0000)]
Patches for Cygwin, provided by Corinna Vinschen <vinschen@redhat.com>

15 years agoPropagate BUILDENV into subdirectories.
Ben Laurie [Sat, 21 May 2005 16:13:36 +0000 (16:13 +0000)]
Propagate BUILDENV into subdirectories.

15 years agoMove _WIN32_WINNT definition from command line to e_os.h. The change is
Andy Polyakov [Sat, 21 May 2005 13:19:27 +0000 (13:19 +0000)]
Move _WIN32_WINNT definition from command line to e_os.h. The change is
inspired by VC6 failure report. In addition abstain from taking screen
snapshots when running in NT service context.

15 years agofix typo, add prototype
Nils Larsch [Fri, 20 May 2005 22:55:10 +0000 (22:55 +0000)]
fix typo, add prototype

15 years agofix potential memory leak
Nils Larsch [Thu, 19 May 2005 22:10:40 +0000 (22:10 +0000)]
fix potential memory leak

Submitted by: Goetz Babin-Ebell

15 years agoupdate ecdsa doc
Nils Larsch [Thu, 19 May 2005 20:54:30 +0000 (20:54 +0000)]
update ecdsa doc

15 years agoFAQ to mention no-sse2.
Andy Polyakov [Thu, 19 May 2005 19:54:49 +0000 (19:54 +0000)]
FAQ to mention no-sse2.

15 years agoUpdate status information
Richard Levitte [Thu, 19 May 2005 19:43:28 +0000 (19:43 +0000)]
Update status information

15 years agofix "dereferencing type-punned pointer will break strict-aliasing rules"
Nils Larsch [Thu, 19 May 2005 12:01:51 +0000 (12:01 +0000)]
fix "dereferencing type-punned pointer will break strict-aliasing rules"
warning when using gcc 4.0

15 years agomake the type parameter const when ID2_OF_const() is used
Nils Larsch [Wed, 18 May 2005 22:30:38 +0000 (22:30 +0000)]
make the type parameter const when ID2_OF_const() is used

15 years agoFAQ update to mention Applink.
Andy Polyakov [Wed, 18 May 2005 13:35:54 +0000 (13:35 +0000)]
FAQ update to mention Applink.

15 years agoDon't emit SSE2 instructions unless were asked to.
Andy Polyakov [Wed, 18 May 2005 08:42:08 +0000 (08:42 +0000)]
Don't emit SSE2 instructions unless were asked to.
PR: 1073

15 years agoEngage Applink in mingw. Note that application-side module is not
Andy Polyakov [Wed, 18 May 2005 08:16:46 +0000 (08:16 +0000)]
Engage Applink in mingw. Note that application-side module is not
compiled into *our* aplpications. That's because mingw is always
consistent with itself. Having library-side code linked into .dll
makes it possible to deploy the .dll with user-code compiled with
another compiler [which is pretty much the whole point behind Applink].

15 years agoVersion changes where needed.
Richard Levitte [Wed, 18 May 2005 04:04:12 +0000 (04:04 +0000)]
Version changes where needed.

15 years agoI just branched 0.9.8, so HEAD needs to be bumped to 0.9.9-dev.
Richard Levitte [Wed, 18 May 2005 03:58:34 +0000 (03:58 +0000)]
I just branched 0.9.8, so HEAD needs to be bumped to 0.9.9-dev.

The 0.9.8 branch is called OpenSSL_0_9_8-stable.

15 years agoEngage Applink for VC builds.
Andy Polyakov [Tue, 17 May 2005 16:50:46 +0000 (16:50 +0000)]
Engage Applink for VC builds.

15 years agoKeep disclaming 16-bit support.
Andy Polyakov [Tue, 17 May 2005 13:51:36 +0000 (13:51 +0000)]
Keep disclaming 16-bit support.

15 years agosimplify EC_KEY_dup
Nils Larsch [Tue, 17 May 2005 12:23:16 +0000 (12:23 +0000)]
simplify EC_KEY_dup

15 years agomdc2test is not built by default anymore.
Andy Polyakov [Tue, 17 May 2005 06:57:45 +0000 (06:57 +0000)]
mdc2test is not built by default anymore.

15 years agofix memory leak (BIO_free_all needs pointer to first BIO)
Bodo Möller [Tue, 17 May 2005 05:52:24 +0000 (05:52 +0000)]
fix memory leak (BIO_free_all needs pointer to first BIO)

PR: 1070

15 years agoOPENSSL_Applink update.
Andy Polyakov [Tue, 17 May 2005 00:08:28 +0000 (00:08 +0000)]
OPENSSL_Applink update.

15 years agoDisclaim 16-bit support.
Andy Polyakov [Tue, 17 May 2005 00:07:13 +0000 (00:07 +0000)]
Disclaim 16-bit support.

15 years agoMove cryptlib.h prior bio.h. Actually it makes sense to include cryptlib.h
Andy Polyakov [Tue, 17 May 2005 00:01:48 +0000 (00:01 +0000)]
Move cryptlib.h prior bio.h. Actually it makes sense to include cryptlib.h
first everywhere in crypto and skip stdio.h and string.h [because it
includes them].

15 years agoImprove shell portability of new rules in Makefile.shared.
Andy Polyakov [Mon, 16 May 2005 21:05:09 +0000 (21:05 +0000)]
Improve shell portability of new rules in Makefile.shared.

15 years agoChange wording for BN_mod_exp_mont_consttime() entry
Bodo Möller [Mon, 16 May 2005 19:14:34 +0000 (19:14 +0000)]
Change wording for BN_mod_exp_mont_consttime() entry

15 years agoFurther BUILDENV refinement, further fool-proofing of Makefiles and
Andy Polyakov [Mon, 16 May 2005 16:55:47 +0000 (16:55 +0000)]
Further BUILDENV refinement, further fool-proofing of Makefiles and
[most importantly] put back dependencies accidentaly eliminated in
check-in #13342.

15 years agoFurther BUILDENV clean-up, 'make depend' is operational again.
Andy Polyakov [Mon, 16 May 2005 14:24:45 +0000 (14:24 +0000)]
Further BUILDENV clean-up, 'make depend' is operational again.

15 years agoecc api cleanup; summary:
Nils Larsch [Mon, 16 May 2005 10:11:04 +0000 (10:11 +0000)]
ecc api cleanup; summary:
- hide the EC_KEY structure definition in ec_lcl.c + add
  some functions to use/access the EC_KEY fields
- change the way how method specific data (ecdsa/ecdh) is
  attached to a EC_KEY
- add ECDSA_sign_ex and ECDSA_do_sign_ex functions with
  additional parameters for pre-computed values
- rebuild libeay.num from 0.9.7

15 years agoImplement fixed-window exponentiation to mitigate hyper-threading
Bodo Möller [Mon, 16 May 2005 01:43:31 +0000 (01:43 +0000)]
Implement fixed-window exponentiation to mitigate hyper-threading
timing attacks.

BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for
RSA/DSA/DH private key computations unless
RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/
DH_FLAG_NO_EXP_CONSTTIME is set.

Submitted by: Matthew D Wood
Reviewed by: Bodo Moeller

15 years agorebuild to synchronize with additions to 0.9.7 branch
Bodo Möller [Mon, 16 May 2005 00:29:29 +0000 (00:29 +0000)]
rebuild to synchronize with additions to 0.9.7 branch

15 years agomake update
Bodo Möller [Mon, 16 May 2005 00:27:37 +0000 (00:27 +0000)]
make update

15 years agoMake Makefile.shared quiet again.
Andy Polyakov [Mon, 16 May 2005 00:01:49 +0000 (00:01 +0000)]
Make Makefile.shared quiet again.

15 years agoSimplify shared rules, link run-path into applications only.
Andy Polyakov [Sun, 15 May 2005 23:59:04 +0000 (23:59 +0000)]
Simplify shared rules, link run-path into applications only.

15 years agoConsolidate BUILDENV [idea is to keep all variables in one place].
Andy Polyakov [Sun, 15 May 2005 23:53:34 +0000 (23:53 +0000)]
Consolidate BUILDENV [idea is to keep all variables in one place].

15 years ago+20% performance improvement of P4-specific RC4_CHAR loop.
Andy Polyakov [Sun, 15 May 2005 22:43:00 +0000 (22:43 +0000)]
+20% performance improvement of P4-specific RC4_CHAR loop.

15 years agoFool-proofing Makefiles
Andy Polyakov [Sun, 15 May 2005 22:23:26 +0000 (22:23 +0000)]
Fool-proofing Makefiles

15 years agoMake update.
Dr. Stephen Henson [Sun, 15 May 2005 00:56:47 +0000 (00:56 +0000)]
Make update.

15 years agoMake -CSP option work again in pkcs12 utility by checking for
Dr. Stephen Henson [Sun, 15 May 2005 00:54:45 +0000 (00:54 +0000)]
Make -CSP option work again in pkcs12 utility by checking for
attribute in EVP_PKEY structure.

15 years agoopenssl_fcast should always be defined, not just with DEBUG_SAFESTACK
Dr. Stephen Henson [Sat, 14 May 2005 12:58:20 +0000 (12:58 +0000)]
openssl_fcast should always be defined, not just with DEBUG_SAFESTACK

15 years agoSome C compilers produce warnings or compilation errors if an attempt
Dr. Stephen Henson [Thu, 12 May 2005 23:01:44 +0000 (23:01 +0000)]
Some C compilers produce warnings or compilation errors if an attempt
is made to directly cast a function of one type to what it considers and
incompatible type. In particular gcc 3.4.2.

Add new openssl_fcast macro to place functions into a form where the compiler
will allow them to be cast.

The current version achives this by casting to: void function(void).

15 years agoAvoid warnings.
Dr. Stephen Henson [Thu, 12 May 2005 22:40:19 +0000 (22:40 +0000)]
Avoid warnings.

15 years agoFix from stable branch.
Dr. Stephen Henson [Thu, 12 May 2005 22:39:42 +0000 (22:39 +0000)]
Fix from stable branch.

15 years agoTypo.
Dr. Stephen Henson [Thu, 12 May 2005 17:28:53 +0000 (17:28 +0000)]
Typo.

15 years agofix msg_callback() arguments for SSL 2.0 compatible client hello
Bodo Möller [Thu, 12 May 2005 06:24:25 +0000 (06:24 +0000)]
fix msg_callback() arguments for SSL 2.0 compatible client hello
(previous revision got this wrong)

15 years agoMove another item into ChangeLog.0_9_7-stable_not-in-head_FIPS
Bodo Möller [Wed, 11 May 2005 18:36:47 +0000 (18:36 +0000)]
Move another item into ChangeLog.0_9_7-stable_not-in-head_FIPS

15 years agoDon't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled
Bodo Möller [Wed, 11 May 2005 18:25:49 +0000 (18:25 +0000)]
Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled
with the SSL_OP_NO_SSLv2 option.

15 years agoThere must be an explicit way to build the .o!
Ben Laurie [Wed, 11 May 2005 16:39:05 +0000 (16:39 +0000)]
There must be an explicit way to build the .o!

15 years agoMove some entries from ChangeLog.0_9_7-stable_not-in-head
Bodo Möller [Wed, 11 May 2005 03:54:21 +0000 (03:54 +0000)]
Move some entries from ChangeLog.0_9_7-stable_not-in-head
to ChangeLog.0_9_7-stable_not-in-head_FIPS.

15 years agoFix more error codes.
Bodo Möller [Wed, 11 May 2005 03:45:39 +0000 (03:45 +0000)]
Fix more error codes.

(Also improve util/ck_errf.pl script, and occasionally
fix source code formatting.)

15 years agouse 'p' as conversion specifier for printf to avoid truncation of
Nils Larsch [Tue, 10 May 2005 11:55:28 +0000 (11:55 +0000)]
use 'p' as conversion specifier for printf to avoid truncation of
pointers on 64 bit platforms. Patch supplied by Daniel Gryniewicz
via Mike Frysinger <vapier@gentoo.org>.

PR: 1064

15 years agogive EC_GROUP_new_by_nid a more meanigful name:
Nils Larsch [Tue, 10 May 2005 11:37:47 +0000 (11:37 +0000)]
give EC_GROUP_new_by_nid a more meanigful name:
EC_GROUP_new_by_nid -> EC_GROUP_new_by_curve_name

15 years agoimprove command line argument checking
Nils Larsch [Tue, 10 May 2005 09:51:29 +0000 (09:51 +0000)]
improve command line argument checking

PR: 1061

15 years agoComply with optimization manual (no data should share cache-line with code).
Andy Polyakov [Mon, 9 May 2005 21:48:01 +0000 (21:48 +0000)]
Comply with optimization manual (no data should share cache-line with code).

15 years agoAllow for 64-bit cache-line alignments in code segment.
Andy Polyakov [Mon, 9 May 2005 21:27:40 +0000 (21:27 +0000)]
Allow for 64-bit cache-line alignments in code segment.

15 years agoUpdate util/ck_errf.pl script, and have it run automatically
Bodo Möller [Mon, 9 May 2005 00:27:37 +0000 (00:27 +0000)]
Update util/ck_errf.pl script, and have it run automatically
during "make errors" and thus during "make update".

Fix lots of bugs that util/ck_errf.pl can detect automatically.
Various others of these are still left to fix; that's why
"make update" will complain loudly when run now.

15 years agorebuild (starting with state from 0.9.7-stable branch) to avoid clutter
Bodo Möller [Mon, 9 May 2005 00:22:02 +0000 (00:22 +0000)]
rebuild (starting with state from 0.9.7-stable branch) to avoid clutter

15 years agoimprove comment readability
Bodo Möller [Mon, 9 May 2005 00:06:54 +0000 (00:06 +0000)]
improve comment readability

15 years agogive EC_GROUP_*_nid functions a more meaningful name
Bodo Möller [Mon, 9 May 2005 00:05:17 +0000 (00:05 +0000)]
give EC_GROUP_*_nid functions a more meaningful name
    EC_GROUP_get_nid -> EC_GROUP_get_curve_name
    EC_GROUP_set_nid -> EC_GROUP_set_curve_name

15 years agogive EC_GROUP_*_nid functions a more meaningful name
Nils Larsch [Sun, 8 May 2005 22:09:12 +0000 (22:09 +0000)]
give EC_GROUP_*_nid functions a more meaningful name
EC_GROUP_get_nid -> EC_GROUP_get_curve_name
EC_GROUP_set_nid -> EC_GROUP_set_curve_name

15 years agoEliminate "statement with no effect" warning when OPENSSL_assert macro
Andy Polyakov [Sun, 8 May 2005 19:54:33 +0000 (19:54 +0000)]
Eliminate "statement with no effect" warning when OPENSSL_assert macro
is used with constant assertion.

15 years agoI was incorrect about VMS/Alpha. Defining BN_LLONG with
Richard Levitte [Sat, 7 May 2005 21:21:17 +0000 (21:21 +0000)]
I was incorrect about VMS/Alpha.  Defining BN_LLONG with
SIXTY_FOUR_BIT could cause havoc, so don't (it's lucky bn.h undefines
BN_LLONG when SIXTY_FOUR_BIT is defined).

15 years agox86_64 assembler translator update.
Andy Polyakov [Sat, 7 May 2005 08:13:51 +0000 (08:13 +0000)]
x86_64 assembler translator update.

15 years agoFix constants.
Andy Polyakov [Sat, 7 May 2005 08:11:50 +0000 (08:11 +0000)]
Fix constants.
PR: 1059

15 years agoSince BN_LLONG will only be defined for Alpha/VMS and not VAX/VMS,
Richard Levitte [Fri, 6 May 2005 13:34:35 +0000 (13:34 +0000)]
Since BN_LLONG will only be defined for Alpha/VMS and not VAX/VMS,
there's no need to undefine it here.  Then, let's get a bit paranoid
and not define BN_ULLONG on THIRTY_TWO_BIT machines when BN_LLONG
isn't defined.

15 years agoActually, C on VMS/Alpha knows very well what a long long is, and
Richard Levitte [Fri, 6 May 2005 13:33:16 +0000 (13:33 +0000)]
Actually, C on VMS/Alpha knows very well what a long long is, and
knows how to make use of it.  So let's stop pretending the Alpha
doesn't know long long...

15 years agofix compiler warning; pow10 is also in math.h
Nils Larsch [Thu, 5 May 2005 20:57:37 +0000 (20:57 +0000)]
fix compiler warning; pow10 is also in math.h

15 years agoA few more fingerprints...
Richard Levitte [Thu, 5 May 2005 06:38:55 +0000 (06:38 +0000)]
A few more fingerprints...

15 years agoCommentary update motivating code update in 0.9.7.
Andy Polyakov [Wed, 4 May 2005 14:51:38 +0000 (14:51 +0000)]
Commentary update motivating code update in 0.9.7.

15 years agox86_64 assembler translator update.
Andy Polyakov [Wed, 4 May 2005 08:42:47 +0000 (08:42 +0000)]
x86_64 assembler translator update.

15 years agoCvs missed adapted module itself, here it goes...
Andy Polyakov [Tue, 3 May 2005 23:03:31 +0000 (23:03 +0000)]
Cvs missed adapted module itself, here it goes...

15 years agoEngage md5-x86_64 assembler module.
Andy Polyakov [Tue, 3 May 2005 22:59:17 +0000 (22:59 +0000)]
Engage md5-x86_64 assembler module.

15 years agoThrow in md5-x86_64 assembler.
Andy Polyakov [Tue, 3 May 2005 22:56:15 +0000 (22:56 +0000)]
Throw in md5-x86_64 assembler.