openssl.git
18 years agoMake EVPs allocate context memory, thus making them extensible. Rationalise
Ben Laurie [Mon, 30 Jul 2001 17:46:22 +0000 (17:46 +0000)]
Make EVPs allocate context memory, thus making them extensible. Rationalise
DES's keyschedules.

I know these two should be separate, and I'll back out the DES changes if they
are deemed to be an error.

Note that there is a memory leak lurking in SSL somewhere in this version.

18 years agoOnly set the verify callback if there's one to set!
Ben Laurie [Mon, 30 Jul 2001 17:17:26 +0000 (17:17 +0000)]
Only set the verify callback if there's one to set!

18 years agoJust a "get to know your system" bit.
Andy Polyakov [Mon, 30 Jul 2001 16:46:37 +0000 (16:46 +0000)]
Just a "get to know your system" bit.

18 years agoEnhanced support for IA-64 Linux and HP-UX (as well as better support for
Andy Polyakov [Mon, 30 Jul 2001 16:42:15 +0000 (16:42 +0000)]
Enhanced support for IA-64 Linux and HP-UX (as well as better support for
HP-UX in common in ./config). Note that for the moment of this writing
none of 64-bit platforms pass bntest. I'm committing this anyway as it's
too frustrating to patch snapshots over and over while 0.9.6 is known to
work.

18 years agoSupport for Intel and HP-UXi assemblers.
Andy Polyakov [Mon, 30 Jul 2001 15:54:13 +0000 (15:54 +0000)]
Support for Intel and HP-UXi assemblers.

18 years agoANSIfication.
Ben Laurie [Mon, 30 Jul 2001 15:33:46 +0000 (15:33 +0000)]
ANSIfication.

18 years agoTypo in stty command lines.
Andy Polyakov [Mon, 30 Jul 2001 14:33:58 +0000 (14:33 +0000)]
Typo in stty command lines.

18 years agoDon't miss files...
Lutz Jänicke [Mon, 30 Jul 2001 11:50:37 +0000 (11:50 +0000)]
Don't miss files...

18 years agoFix inconsistent behaviour with respect to verify_callback handling.
Lutz Jänicke [Mon, 30 Jul 2001 11:45:34 +0000 (11:45 +0000)]
Fix inconsistent behaviour with respect to verify_callback handling.

18 years agoForgot to mention second fix.
Lutz Jänicke [Mon, 30 Jul 2001 11:33:53 +0000 (11:33 +0000)]
Forgot to mention second fix.

18 years agolength of secret exponent is needed only when we create one
Bodo Möller [Fri, 27 Jul 2001 22:45:35 +0000 (22:45 +0000)]
length of secret exponent is needed only when we create one

18 years agoUndo DH_generate_key() change: s3_srvr.c was using it correctly
Bodo Möller [Fri, 27 Jul 2001 22:34:25 +0000 (22:34 +0000)]
Undo DH_generate_key() change: s3_srvr.c was using it correctly

18 years agoAnother uninitialized static that may lead to problems on Solaris under some
Lutz Jänicke [Fri, 27 Jul 2001 12:35:27 +0000 (12:35 +0000)]
Another uninitialized static that may lead to problems on Solaris under some
circumstances.

18 years agoAddapt VMS script to the latest changes in the makefiles.
Richard Levitte [Fri, 27 Jul 2001 07:47:51 +0000 (07:47 +0000)]
Addapt VMS script to the latest changes in the makefiles.

18 years agoMake sure *outl is always initialized in EVP_EncryptUpdate().
Dr. Stephen Henson [Fri, 27 Jul 2001 02:24:47 +0000 (02:24 +0000)]
Make sure *outl is always initialized in EVP_EncryptUpdate().

18 years agoMore linker bloat reorganisation:
Dr. Stephen Henson [Fri, 27 Jul 2001 02:22:42 +0000 (02:22 +0000)]
More linker bloat reorganisation:

Split private key PEM and normal PEM handling. Private key
handling needs to link in stuff like PKCS#8.

Relocate the ASN1 *_dup() functions, to the relevant ASN1
modules using new macro IMPLEMENT_ASN1_DUP_FUNCTION. Previously
these were all in crypto/x509/x_all.c along with every ASN1
BIO/fp function which linked in *every* ASN1 function if
a single dup was used.

Move the authority key id ASN1 structure to a separate file.
This is used in the X509 routines and its previous location
linked in all the v3 extension code.

Also move ASN1_tag2bit to avoid linking in a_bytes.c which
is now largely obsolete.

So far under Linux stripped binary with single PEM_read_X509
is now 238K compared to 380K before these changes.

18 years agoFirst of several reorganisations to
Dr. Stephen Henson [Thu, 26 Jul 2001 22:34:45 +0000 (22:34 +0000)]
First of several reorganisations to
reduce linker bloat. For example the
single line:

PEM_read_X509()

results in a binary of around 400K in Linux!

This first step separates some of the PEM functions and
avoids linking in some PKCS#7 and PKCS#12 code.

18 years agoFix problem occuring when used from OpenSSH on Solaris 8.
Lutz Jänicke [Thu, 26 Jul 2001 09:02:44 +0000 (09:02 +0000)]
Fix problem occuring when used from OpenSSH on Solaris 8.

18 years agoDH key generation should not use a do ... while loop,
Bodo Möller [Wed, 25 Jul 2001 17:48:51 +0000 (17:48 +0000)]
DH key generation should not use a do ... while loop,
or bogus DH parameters can be used for launching DOS attacks

18 years agoDon't preserve existing keys in DH_generate_key.
Bodo Möller [Wed, 25 Jul 2001 17:20:34 +0000 (17:20 +0000)]
Don't preserve existing keys in DH_generate_key.

18 years agomd_rand.c thread safety
Bodo Möller [Wed, 25 Jul 2001 17:17:24 +0000 (17:17 +0000)]
md_rand.c thread safety

18 years agoalways reject data >= n
Bodo Möller [Wed, 25 Jul 2001 17:02:58 +0000 (17:02 +0000)]
always reject data >= n

18 years agoSupport for 64-bit Solaris build with GCC 3.0 and later. It should be
Andy Polyakov [Wed, 25 Jul 2001 15:58:57 +0000 (15:58 +0000)]
Support for 64-bit Solaris build with GCC 3.0 and later. It should be
explicitely noted that 64-bit SPARCv9 ABI is not officially supported
by GCC 3.0 (support is scheduled for 3.1 release), but it appears to
work, at the very least 'make test' passes...

18 years agoFix wrong information about SSL_set_connect_state()...
Lutz Jänicke [Wed, 25 Jul 2001 12:12:51 +0000 (12:12 +0000)]
Fix wrong information about SSL_set_connect_state()...

18 years agoadd a comment
Bodo Möller [Wed, 25 Jul 2001 10:04:14 +0000 (10:04 +0000)]
add a comment

18 years agoavoid warnings
Bodo Möller [Tue, 24 Jul 2001 14:20:36 +0000 (14:20 +0000)]
avoid warnings

18 years agoAvoid race condition.
Bodo Möller [Tue, 24 Jul 2001 12:31:14 +0000 (12:31 +0000)]
Avoid race condition.

Submitted by: Travis Vitek <vitek@roguewave.com>

18 years ago- New INSTALL document describing different ways to build "tunala" and
Geoff Thorpe [Mon, 23 Jul 2001 19:03:48 +0000 (19:03 +0000)]
- New INSTALL document describing different ways to build "tunala" and
  possible problems.
- New file breakage.c handles (so far) missing functions.
- Get rid of some signed/unsigned/const warnings thanks to solaris-cc
- Add autoconf/automake input files, and helper scripts to populate missing
  (but auto-generated) files.

This change adds a configure.in and Makefile.am to build everything using
autoconf, automake, and libtool - and adds "gunk" scripts to generate the
various files those things need (and clean then up again after). This means
that "autogunk.sh" needs to be run first on a system with the autotools,
but the resulting directory should be "configure"able and compilable on
systems without those tools.

18 years agoAdditional inline reference.
Lutz Jänicke [Mon, 23 Jul 2001 12:57:37 +0000 (12:57 +0000)]
Additional inline reference.

18 years agoAdd missing reference.
Lutz Jänicke [Mon, 23 Jul 2001 12:52:05 +0000 (12:52 +0000)]
Add missing reference.

18 years agoTidy up "cvs update" output a bit.
Geoff Thorpe [Sun, 22 Jul 2001 23:21:33 +0000 (23:21 +0000)]
Tidy up "cvs update" output a bit.

18 years agoNot all platforms have the OpenBSD crypto device.
Richard Levitte [Sat, 21 Jul 2001 11:54:24 +0000 (11:54 +0000)]
Not all platforms have the OpenBSD crypto device.

18 years agoDocumentation about ephemeral key exchange
Lutz Jänicke [Sat, 21 Jul 2001 11:02:17 +0000 (11:02 +0000)]
Documentation about ephemeral key exchange

18 years agoClean up EVP macros, rename DES EDE3 modes correctly, temporary support for
Ben Laurie [Sat, 21 Jul 2001 10:24:07 +0000 (10:24 +0000)]
Clean up EVP macros, rename DES EDE3 modes correctly, temporary support for
OpenBSD /dev/crypto (this will be revamped later when the appropriate machinery
is available).

18 years agoMore Kerberos SSL patches from Vern Staats <staatsvr@asc.hpc.mil>.
Richard Levitte [Sat, 21 Jul 2001 09:43:43 +0000 (09:43 +0000)]
More Kerberos SSL patches from Vern Staats <staatsvr@asc.hpc.mil>.
His comments are:

This patch fixes the problem of modern Kerberos using "derived keys"
to encrypt the authenticator by disabling the authenticator check
for all derived keys enctypes.

I think I've got all the bugfixes that Jeffrey and I discussed rolled
into this.  There were some problems with Jeffrey's code to convert
the authenticator's Kerberos timestring into struct tm (e.g. Z, -1900;
it helps to have an actual decryptable authenticator to play with).
So I've shamelessly pushed in my code, while stealing some bits from
Jeffrey.

18 years agoUpdated explanation.
Lutz Jänicke [Fri, 20 Jul 2001 19:23:43 +0000 (19:23 +0000)]
Updated explanation.

18 years agoSome more documentation bits.
Lutz Jänicke [Fri, 20 Jul 2001 18:57:15 +0000 (18:57 +0000)]
Some more documentation bits.

18 years agoCurrently, RSA code, when using no padding scheme, simply checks that input
Geoff Thorpe [Fri, 20 Jul 2001 15:16:10 +0000 (15:16 +0000)]
Currently, RSA code, when using no padding scheme, simply checks that input
does not contain more bytes than the RSA modulus 'n' - it does not check
that the input is strictly *less* than 'n'. Whether this should be the
case or not is open to debate - however, due to security problems with
returning miscalculated CRT results, the 'rsa_mod_exp' implementation in
rsa_eay.c now performs a public-key exponentiation to verify the CRT result
and in the event of an error will instead recalculate and return a non-CRT
(more expensive) mod_exp calculation. As the mod_exp of 'I' is equivalent
to the mod_exp of 'I mod n', and the verify result is automatically between
0 and n-1 inclusive, the verify only matches the input if 'I' was less than
'n', otherwise even a correct CRT calculation is only congruent to 'I' (ie.
they differ by a multiple of 'n'). Rather than rejecting correct
calculations and doing redundant and slower ones instead, this changes the
equality check in the verification code to a congruence check.

18 years agoMissing line 0.9.6b release and IA-64 patch advertisement:-)
Andy Polyakov [Tue, 17 Jul 2001 14:39:26 +0000 (14:39 +0000)]
Missing line 0.9.6b release and IA-64 patch advertisement:-)

18 years agoSSL_get_rfc were documented but not implemented.
Richard Levitte [Mon, 16 Jul 2001 10:50:29 +0000 (10:50 +0000)]
SSL_get_rfc were documented but not implemented.

18 years agoSSL_get_[rw]fd were documented but not implemented.
Richard Levitte [Sun, 15 Jul 2001 20:11:57 +0000 (20:11 +0000)]
SSL_get_[rw]fd were documented but not implemented.

18 years agoAllow OCSP server to handle multiple requests.
Dr. Stephen Henson [Fri, 13 Jul 2001 13:13:44 +0000 (13:13 +0000)]
Allow OCSP server to handle multiple requests.

Document new OCSP options.

18 years agoInitial OCSP server support, using index.txt format.
Dr. Stephen Henson [Thu, 12 Jul 2001 20:41:51 +0000 (20:41 +0000)]
Initial OCSP server support, using index.txt format.

This can process internal requests or behave like a
mini responder.

Todo: documentation, update usage info.

18 years agoPrevent KSSL server from requesting a client certificate.
Richard Levitte [Thu, 12 Jul 2001 16:17:33 +0000 (16:17 +0000)]
Prevent KSSL server from requesting a client certificate.
Submitted by Jeffrey Altman <jaltman@columbia.edu>

18 years agopaddr may be NULL. Do not crash if it is.
Richard Levitte [Thu, 12 Jul 2001 15:54:10 +0000 (15:54 +0000)]
paddr may be NULL.  Do not crash if it is.

18 years agoClarify that zlib-dynamic is the default choice.
Richard Levitte [Thu, 12 Jul 2001 09:19:34 +0000 (09:19 +0000)]
Clarify that zlib-dynamic is the default choice.

18 years agoAdd the possibility to specify the use of zlib compression and
Richard Levitte [Thu, 12 Jul 2001 09:11:14 +0000 (09:11 +0000)]
Add the possibility to specify the use of zlib compression and
decompression.  It can be set up to link at link time or to load the
zlib library at run-time.

18 years agoClarify actual state.
Lutz Jänicke [Thu, 12 Jul 2001 08:53:50 +0000 (08:53 +0000)]
Clarify actual state.

18 years agoSome of the Kerberos code had dissapeared. Reapply.
Richard Levitte [Thu, 12 Jul 2001 08:51:47 +0000 (08:51 +0000)]
Some of the Kerberos code had dissapeared.  Reapply.

18 years agoDocument the recent Kerberos SSL changes.
Richard Levitte [Thu, 12 Jul 2001 04:23:57 +0000 (04:23 +0000)]
Document the recent Kerberos SSL changes.

18 years agoDelete extra ;
Dr. Stephen Henson [Wed, 11 Jul 2001 22:54:24 +0000 (22:54 +0000)]
Delete extra ;

18 years agoIn ocsp_match_issuerid() we are passed the CA that signed the responder
Dr. Stephen Henson [Wed, 11 Jul 2001 22:42:20 +0000 (22:42 +0000)]
In ocsp_match_issuerid() we are passed the CA that signed the responder
certificate so need to match its subject with the certificate IDs in the
response.

18 years agomake update
Richard Levitte [Wed, 11 Jul 2001 21:15:03 +0000 (21:15 +0000)]
make update

Note that since some private kssl functions were exported, the
simplest way to rebuild the number table was to toss everything that
was new since OpenSSL 0.9.6b.  This is safe, since those functions
have not yet been exported in an OpenSSL release.  Beware, people who
trust intermediary snapshots!

18 years agoInclude kssl_lcl.h where needed.
Richard Levitte [Wed, 11 Jul 2001 21:11:40 +0000 (21:11 +0000)]
Include kssl_lcl.h where needed.

18 years agoPrivate functions do not belong in an exported header file, so move
Richard Levitte [Wed, 11 Jul 2001 21:09:30 +0000 (21:09 +0000)]
Private functions do not belong in an exported header file, so move
them to one that won't get exported.

18 years agoChanges to the Kerberos SSL code by Jeffrey Altman <jaltman@columbia.edu>
Richard Levitte [Wed, 11 Jul 2001 19:03:58 +0000 (19:03 +0000)]
Changes to the Kerberos SSL code by Jeffrey Altman <jaltman@columbia.edu>
His comments are:

 . adds use of replay cache to protect against replay attacks

 . adds functions kssl_tgt_is_available() and
   kssl_keytab_is_available() which are used within s3_lib.c
   and ssl_lib.c to determine at runtime whether or not
   KRB5 ciphers can be supported during the current session.

18 years agoopenssl speed is quite useful for testing hardware support (among other
Geoff Thorpe [Wed, 11 Jul 2001 18:59:25 +0000 (18:59 +0000)]
openssl speed is quite useful for testing hardware support (among other
things), especially as the RSA keys are fixed. However, DSA only fixes the
DSA parameters and then generates the public and private components on the
fly each time - this commit hard-codes some sampled key values so that this
is no longer the case.

18 years agoCode to avoid the use of non-standard strptime(). By
Richard Levitte [Wed, 11 Jul 2001 16:13:36 +0000 (16:13 +0000)]
Code to avoid the use of non-standard strptime().  By
Jeffrey Altman <jaltman@columbia.edu>

(Really, the time that's being parsed is a GeneralizedTime, so if
ASN1_GENERALIZEDTIME_get() ever gets implemented, it should be used
instead)

18 years agoTypo...
Lutz Jänicke [Wed, 11 Jul 2001 15:49:35 +0000 (15:49 +0000)]
Typo...

18 years agoChanges to the Kerberos SSL code by Jeffrey Altman <jaltman@columbia.edu>
Richard Levitte [Wed, 11 Jul 2001 15:31:45 +0000 (15:31 +0000)]
Changes to the Kerberos SSL code by Jeffrey Altman <jaltman@columbia.edu>
His comments are:

 . Fixed all of the Windows dynamic loading functions, prototypes, etc.

 . Corrected all of the unsigned/signed comparison warnings

 . Replaced the references to krb5_cksumarray[] for two reasons.
   First, it was an internal variable that should not have been
   referenced outside the library; nor could it have been with
   a shared library with restricted exports.  Second, the
   variable is no longer used in current Kerberos implementations.
   I replaced the code with equivalent functionality using functions
   that are exported from the library.

18 years agoWhat is an '-engine' version?
Lutz Jänicke [Wed, 11 Jul 2001 15:31:21 +0000 (15:31 +0000)]
What is an '-engine' version?

18 years agoThe implementation of the TKTBODY ASN.1 functions was missing.
Richard Levitte [Wed, 11 Jul 2001 15:29:33 +0000 (15:29 +0000)]
The implementation of the TKTBODY ASN.1 functions was missing.

18 years agomake update
Richard Levitte [Wed, 11 Jul 2001 15:16:15 +0000 (15:16 +0000)]
make update

18 years agoMake sure crypto/krb5/krb5_asn.h is copied to the directory of
Richard Levitte [Wed, 11 Jul 2001 15:15:31 +0000 (15:15 +0000)]
Make sure crypto/krb5/krb5_asn.h is copied to the directory of
exported header files.

18 years agoMake sure crypto/krb5/krb5_asn.h becomes part of libeay.num.
Richard Levitte [Wed, 11 Jul 2001 15:14:22 +0000 (15:14 +0000)]
Make sure crypto/krb5/krb5_asn.h becomes part of libeay.num.

18 years agoClarify! (based on recent mailing-list discussions)
Lutz Jänicke [Wed, 11 Jul 2001 15:10:28 +0000 (15:10 +0000)]
Clarify! (based on recent mailing-list discussions)

18 years agoOne forgotten function.
Richard Levitte [Wed, 11 Jul 2001 07:10:43 +0000 (07:10 +0000)]
One forgotten function.

18 years agomake update
Richard Levitte [Tue, 10 Jul 2001 21:00:37 +0000 (21:00 +0000)]
make update

18 years agoEVP_Digest() takes one more parameter.
Richard Levitte [Tue, 10 Jul 2001 20:58:13 +0000 (20:58 +0000)]
EVP_Digest() takes one more parameter.

18 years agoFor consistency with the terminology used in my SAC2001 paper, avoid
Bodo Möller [Tue, 10 Jul 2001 11:41:29 +0000 (11:41 +0000)]
For consistency with the terminology used in my SAC2001 paper, avoid
the term "simultaneous multiplication" (which -- acording to the
paper, at least -- applies only to certain methods which we don't use
here)

18 years agocomment change
Bodo Möller [Tue, 10 Jul 2001 11:28:53 +0000 (11:28 +0000)]
comment change

18 years agoFix PRNG.
Bodo Möller [Tue, 10 Jul 2001 10:49:34 +0000 (10:49 +0000)]
Fix PRNG.

18 years agoIn version numbers, there is just one "M" nybble.
Bodo Möller [Tue, 10 Jul 2001 10:04:26 +0000 (10:04 +0000)]
In version numbers, there is just one "M" nybble.

18 years agoPrecomputation will not necessarily be LIm-Lee precomputation.
Bodo Möller [Tue, 10 Jul 2001 10:04:05 +0000 (10:04 +0000)]
Precomputation will not necessarily be LIm-Lee precomputation.

18 years agoIf I define _XOPEN_SOURCE before including *any* system header file,
Richard Levitte [Mon, 9 Jul 2001 21:51:03 +0000 (21:51 +0000)]
If I define _XOPEN_SOURCE before including *any* system header file,
things will work much more smoothly.

18 years agoPatches from Vern Staats <staatsvr@asc.hpc.mil> to get Kerberos 5 in
Richard Levitte [Mon, 9 Jul 2001 21:46:58 +0000 (21:46 +0000)]
Patches from Vern Staats <staatsvr@asc.hpc.mil> to get Kerberos 5 in
SSL according to RFC 2712.  His comment is:

This is a patch to openssl-SNAP-20010702 to support Kerberized SSL
authentication.  I'm expecting to have the full kssl-0.5 kit up on
sourceforge by the end of the week.  The full kit includes patches
for mod-ssl, apache, and a few text clients.  The sourceforge URL
is http://sourceforge.net/projects/kssl/ .

Thanks to a note from Simon Wilkinson I've replaced my KRB5 AP_REQ
message with a real KerberosWrapper struct.  I think this is fully
RFC 2712 compliant now, including support for the optional
authenticator field.  I also added openssl-style ASN.1 macros for
a few Kerberos structs; see crypto/krb5/ if you're interested.

18 years agoA better compromise between encrypt and decrypt (but why isn't it as fast
Ben Laurie [Mon, 9 Jul 2001 21:00:36 +0000 (21:00 +0000)]
A better compromise between encrypt and decrypt (but why isn't it as fast
for encrypt?).

18 years agoHandle the common case first (where input size is a multiple of block size).
Ben Laurie [Sun, 8 Jul 2001 19:42:10 +0000 (19:42 +0000)]
Handle the common case first (where input size is a multiple of block size).
Worth around 5% for encrypt. Slows down decrypt slightly, but I expect to
regain that later.

18 years agoUse & instead of % - worth about 4% for 8 byte blocks.
Ben Laurie [Sun, 8 Jul 2001 17:27:32 +0000 (17:27 +0000)]
Use & instead of % - worth about 4% for 8 byte blocks.

18 years agoDon't update argc, argv for decrypt flag!
Ben Laurie [Sun, 8 Jul 2001 12:58:10 +0000 (12:58 +0000)]
Don't update argc, argv for decrypt flag!

18 years agoSpeed test decrypt EVP operations.
Ben Laurie [Sun, 8 Jul 2001 12:14:41 +0000 (12:14 +0000)]
Speed test decrypt EVP operations.

18 years agoCorrect const-ness.
Ben Laurie [Sun, 8 Jul 2001 11:42:38 +0000 (11:42 +0000)]
Correct const-ness.

18 years agoRemove unnecessary casts.
Ben Laurie [Fri, 6 Jul 2001 22:06:08 +0000 (22:06 +0000)]
Remove unnecessary casts.

18 years agoConstification.
Ben Laurie [Fri, 6 Jul 2001 21:35:00 +0000 (21:35 +0000)]
Constification.

18 years agoUse one address consistently.
Richard Levitte [Thu, 5 Jul 2001 10:20:07 +0000 (10:20 +0000)]
Use one address consistently.

18 years agoChange info to correct values.
Richard Levitte [Thu, 5 Jul 2001 10:19:13 +0000 (10:19 +0000)]
Change info to correct values.

18 years agoAlign with 0.9.6-stable CHANGES file, and make some corrections.
Bodo Möller [Wed, 4 Jul 2001 20:56:47 +0000 (20:56 +0000)]
Align with 0.9.6-stable CHANGES file, and make some corrections.

18 years agoEngine memory leaks have been fixed by now.
Bodo Möller [Wed, 4 Jul 2001 20:56:08 +0000 (20:56 +0000)]
Engine memory leaks have been fixed by now.

18 years agoCall ENGINE_cleanup() to avoid memory leak.
Bodo Möller [Wed, 4 Jul 2001 20:55:36 +0000 (20:55 +0000)]
Call ENGINE_cleanup() to avoid memory leak.

18 years agoEntry for Andy's mips3.s fix.
Bodo Möller [Wed, 4 Jul 2001 20:17:27 +0000 (20:17 +0000)]
Entry for Andy's mips3.s fix.

18 years agoUpdate nCipher header with more liberal licence.
Ben Laurie [Wed, 4 Jul 2001 12:26:39 +0000 (12:26 +0000)]
Update nCipher header with more liberal licence.

18 years agoWhen only the key is given to "enc", the IV is undefined
Lutz Jänicke [Tue, 3 Jul 2001 10:31:11 +0000 (10:31 +0000)]
When only the key is given to "enc", the IV is undefined
(found by Andy Brown <logic@warthog.com>).

18 years agoMake an extra note about shared libraries and backward compatibility.
Richard Levitte [Tue, 3 Jul 2001 01:43:11 +0000 (01:43 +0000)]
Make an extra note about shared libraries and backward compatibility.

18 years agoLet's include cryptlib.h *before* things like NO_SYSLOG are tested or
Richard Levitte [Mon, 2 Jul 2001 20:43:01 +0000 (20:43 +0000)]
Let's include cryptlib.h *before* things like NO_SYSLOG are tested or
used.

18 years ago[Forgotten commits?]
Richard Levitte [Mon, 2 Jul 2001 20:41:05 +0000 (20:41 +0000)]
[Forgotten commits?]
Changes to have OpenSSL compile on OS/2.
Contributed by "Brian Havard" <brianh@kheldar.apana.org.au>

18 years agoFix warning.
Ben Laurie [Mon, 2 Jul 2001 12:50:30 +0000 (12:50 +0000)]
Fix warning.

18 years agoInsuline shot
Richard Levitte [Sun, 1 Jul 2001 23:15:43 +0000 (23:15 +0000)]
Insuline shot

18 years agoChanges to have OpenSSL compile on OS/2.
Richard Levitte [Sun, 1 Jul 2001 22:39:46 +0000 (22:39 +0000)]
Changes to have OpenSSL compile on OS/2.
Contributed by "Brian Havard" <brianh@kheldar.apana.org.au>

18 years agoModify apps to use NCONF code instead of old CONF code.
Dr. Stephen Henson [Thu, 28 Jun 2001 11:41:50 +0000 (11:41 +0000)]
Modify apps to use NCONF code instead of old CONF code.

Add new extension functions which work with NCONF.

Tidy up extension config routines and remove redundant code.

Fix NCONF_get_number().

Todo: more testing of apps to see they still work...

18 years agoMake better use of load_cert, load_certs and load_key.
Richard Levitte [Wed, 27 Jun 2001 09:12:43 +0000 (09:12 +0000)]
Make better use of load_cert, load_certs and load_key.