Dr. Stephen Henson [Tue, 1 Dec 2009 17:32:44 +0000 (17:32 +0000)]
PR: 1432
Submitted by: "Andrzej Chmielowiec" <achmielowiec@enigma.com.pl>, steve@openssl.org
Approved by: steve@openssl.org
Truncate hash if it is too large: as required by FIPS 186-3.
Dr. Stephen Henson [Mon, 30 Nov 2009 13:56:04 +0000 (13:56 +0000)]
PR: 2118
Submitted by: Mounir IDRASSI <mounir.idrassi@idrix.net>
Approved by: steve@openssl.org
Check return value of ECDSA_sign() properly.
Dr. Stephen Henson [Sun, 29 Nov 2009 13:45:42 +0000 (13:45 +0000)]
typo
Andy Polyakov [Thu, 26 Nov 2009 20:52:08 +0000 (20:52 +0000)]
bss_dgram.c: re-fix BIO_CTRL_DGRAM_GET_PEER.
PR: 2110
Dr. Stephen Henson [Thu, 26 Nov 2009 18:57:39 +0000 (18:57 +0000)]
Experimental CMS password based recipient Info support.
Bodo Möller [Thu, 26 Nov 2009 18:43:17 +0000 (18:43 +0000)]
Make CHANGES in CVS head consistent with the CHANGES files in the
branches.
This means that http://www.openssl.org/news/changelog.html will
finally describe 0.9.8l.
Dr. Stephen Henson [Wed, 25 Nov 2009 22:07:49 +0000 (22:07 +0000)]
Add OID for PWRI KEK algorithm.
Dr. Stephen Henson [Wed, 25 Nov 2009 22:07:22 +0000 (22:07 +0000)]
Add PBKFD2 prototype.
Dr. Stephen Henson [Wed, 25 Nov 2009 22:01:06 +0000 (22:01 +0000)]
Split PBES2 into cipher and PBKDF2 versions. This tidies the code somewhat
and is a pre-requisite to adding password based CMS support.
Andy Polyakov [Mon, 23 Nov 2009 20:28:17 +0000 (20:28 +0000)]
cms-test.pl: use EXE_EXT.
PR: 2107
Andy Polyakov [Thu, 19 Nov 2009 22:29:03 +0000 (22:29 +0000)]
util/pl/VC-32.pl: bufferoverflowu.lib only when actually needed and
eliminate duplicate code.
PR: 2086
Dr. Stephen Henson [Wed, 18 Nov 2009 15:09:44 +0000 (15:09 +0000)]
Servers can't end up talking SSLv2 with legacy renegotiation disabled
Dr. Stephen Henson [Wed, 18 Nov 2009 14:45:48 +0000 (14:45 +0000)]
Don't use SSLv2 compatible client hello if we don't tolerate legacy renegotiation
Dr. Stephen Henson [Wed, 18 Nov 2009 14:20:21 +0000 (14:20 +0000)]
Include a more meaningful error message when rejecting legacy renegotiation
Dr. Stephen Henson [Tue, 17 Nov 2009 13:25:53 +0000 (13:25 +0000)]
PR: 2103
Submitted by: Rob Austein <sra@hactrn.net>
Approved by: steve@openssl.org
Initialise atm.flags to 0.
Dr. Stephen Henson [Sun, 15 Nov 2009 19:05:13 +0000 (19:05 +0000)]
PR: 2101 (additional)
Submitted by: Roumen Petrov <openssl@roumenpetrov.info>
Approved by: steve@openssl.org
Another mingw fix.
Andy Polyakov [Sun, 15 Nov 2009 17:34:24 +0000 (17:34 +0000)]
OPENSSL_ia32cap.pod update.
Andy Polyakov [Sun, 15 Nov 2009 17:29:31 +0000 (17:29 +0000)]
Add sha512-parisc.pl.
Andy Polyakov [Sun, 15 Nov 2009 17:26:11 +0000 (17:26 +0000)]
SHA1 assembler show off: minor performance updates and new modules for
forgotten CPUs.
Andy Polyakov [Sun, 15 Nov 2009 17:19:49 +0000 (17:19 +0000)]
sha512.c: there apparently is ILP32 PowerPC platform, where it is safe to
inline 64-bit assembler instructions. Normally it's inappropriate, because
signalling doesn't preserve upper halves of general purpose registers.
Meaning that it's only safe if signals are blocked for the time "wide"
code executes.
PR: 1998
Andy Polyakov [Sun, 15 Nov 2009 17:11:38 +0000 (17:11 +0000)]
x86_64-xlate.pl: new gas requires sign extention in lea instruction.
This resolves md5-x86_64.pl and sha1-x86_64.pl bugs, but without modifying
the code.
PR: 2094,2095
Andy Polyakov [Sun, 15 Nov 2009 17:06:44 +0000 (17:06 +0000)]
x86masm.pl: eliminate linker "multiple sections found with different
attributes" warning.
Andy Polyakov [Sun, 15 Nov 2009 17:03:33 +0000 (17:03 +0000)]
bss_dgram.c: more elegant solution to PR#2069. Use socklen_t heuristic
from b_sock.c, don't assume that caller always passes pointer to buffer
large enough to hold sockaddr_storage.
PR: 2069
Andy Polyakov [Sun, 15 Nov 2009 16:52:11 +0000 (16:52 +0000)]
b_sock.c: fix compiler warning.
Andy Polyakov [Sun, 15 Nov 2009 16:40:22 +0000 (16:40 +0000)]
aesni-x86.pl: eliminate development comments.
Dr. Stephen Henson [Fri, 13 Nov 2009 13:44:25 +0000 (13:44 +0000)]
PR: 2101
Submitted by: Doug Kaufman <dkaufman@rahul.net>
Approved by: steve@openssl.org
Fixes for tests in cms-test.pl
Dr. Stephen Henson [Thu, 12 Nov 2009 19:56:56 +0000 (19:56 +0000)]
PR: 2088
Submitted by: Aleksey Samsonov <s4ms0n0v@gmail.com>
Approved by: steve@openssl.org
Fix memory leak in d2i_PublicKey().
Dr. Stephen Henson [Thu, 12 Nov 2009 19:25:37 +0000 (19:25 +0000)]
set engine to NULL after releasing it
Richard Levitte [Thu, 12 Nov 2009 17:03:10 +0000 (17:03 +0000)]
Update from 1.0.0-stable
Dr. Stephen Henson [Wed, 11 Nov 2009 19:05:20 +0000 (19:05 +0000)]
PR: 2098
Submitted by: Corinna Vinschen <vinschen@redhat.com>
Approved by: steve@openssl.org
For Cygwin enable zlib and mdc2 by default.
Dr. Stephen Henson [Wed, 11 Nov 2009 14:51:19 +0000 (14:51 +0000)]
add missing parts of reneg port, fix apps patch
Dr. Stephen Henson [Wed, 11 Nov 2009 14:10:24 +0000 (14:10 +0000)]
commit missing apps code for reneg fix
Dr. Stephen Henson [Tue, 10 Nov 2009 01:52:41 +0000 (01:52 +0000)]
PR: 1686
Submitted by: Hanno BÃ\83¶ck <hanno@hboeck.de>
Approved by: steve@openssl.org
Create engines dir if it doesn't already exist.
Dr. Stephen Henson [Tue, 10 Nov 2009 01:00:07 +0000 (01:00 +0000)]
PR: 2091
Submitted by: Martin Kaiser <lists@kaiser.cx>, Stephen Henson
Approved by: steve@openssl.org
If an OID has no short name or long name return the numerical representation.
Dr. Stephen Henson [Tue, 10 Nov 2009 00:48:07 +0000 (00:48 +0000)]
PR: 2090
Submitted by: Martin Kaiser <lists@kaiser.cx>, Stephen Henson
Approved by: steve@openssl.org
Improve error checking in asn1_gen.c
Dr. Stephen Henson [Mon, 9 Nov 2009 19:03:34 +0000 (19:03 +0000)]
First cut of renegotiation extension. (port to HEAD)
Dr. Stephen Henson [Mon, 9 Nov 2009 17:33:32 +0000 (17:33 +0000)]
update CHANGES
Dr. Stephen Henson [Mon, 9 Nov 2009 14:56:33 +0000 (14:56 +0000)]
make udpate
Dr. Stephen Henson [Mon, 9 Nov 2009 14:13:23 +0000 (14:13 +0000)]
Remove BF_PTR2 from configuration: it doesn't improve performance any more and causes gcc warnings about arrays out of range
Dr. Stephen Henson [Sun, 8 Nov 2009 14:36:12 +0000 (14:36 +0000)]
If it is a new session don't send the old TLS ticket: send a zero length
ticket to request a new session.
Dr. Stephen Henson [Sat, 7 Nov 2009 22:22:40 +0000 (22:22 +0000)]
Ooops, revert committed conflict.
Dr. Stephen Henson [Mon, 2 Nov 2009 13:38:22 +0000 (13:38 +0000)]
PR: 2089
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
DTLS Fragment size bug fix.
Dr. Stephen Henson [Sat, 31 Oct 2009 19:22:18 +0000 (19:22 +0000)]
Add missing functions to allow access to newer X509_STORE_CTX status
information. Add more informative message to verify callback to indicate
when CRL path validation is taking place.
Dr. Stephen Henson [Sat, 31 Oct 2009 13:33:57 +0000 (13:33 +0000)]
Add option to allow in-band CRL loading in verify utility. Add function
load_crls and tidy up load_certs. Remove useless purpose variable from
verify utility: now done with args_verify.
Dr. Stephen Henson [Fri, 30 Oct 2009 14:06:03 +0000 (14:06 +0000)]
Generate stateless session ID just after the ticket is received instead
of when a session is loaded. This will mean that applications that
just hold onto SSL_SESSION structures and never call d2i_SSL_SESSION()
will still work.
Dr. Stephen Henson [Fri, 30 Oct 2009 13:29:30 +0000 (13:29 +0000)]
Move CHANGES entry to 0.9.8l section
Dr. Stephen Henson [Fri, 30 Oct 2009 13:22:24 +0000 (13:22 +0000)]
Fix statless session resumption so it can coexist with SNI
Dr. Stephen Henson [Wed, 28 Oct 2009 19:52:18 +0000 (19:52 +0000)]
Don't attempt session resumption if no ticket is present and session
ID length is zero.
Dr. Stephen Henson [Wed, 28 Oct 2009 19:50:59 +0000 (19:50 +0000)]
oops!
Dr. Stephen Henson [Wed, 28 Oct 2009 19:48:09 +0000 (19:48 +0000)]
PR: 2085
Submitted by: Mike Frysinger <vapier@gentoo.org>
Approved by: steve@openssl.org
Change domd test to match 1.0.0+ version: check $MAKEDEPEND
ends in "gcc" to support cross compilers.
Dr. Stephen Henson [Wed, 28 Oct 2009 17:49:30 +0000 (17:49 +0000)]
Add -no_cache option to s_server
Dr. Stephen Henson [Wed, 28 Oct 2009 15:33:32 +0000 (15:33 +0000)]
Don't replace whole AR line
Dr. Stephen Henson [Wed, 28 Oct 2009 14:00:29 +0000 (14:00 +0000)]
PR: 2081
Submitted by: Mike Frysinger <vapier@gentoo.org>
Approved by: steve@openssl.org
Respect AR and RANLIB environment variables if set.
Dr. Stephen Henson [Wed, 28 Oct 2009 13:55:44 +0000 (13:55 +0000)]
PR: 2080
Submitted by: Mike Frysinger <vapier@gentoo.org>
Approved by: steve@openssl.org
Respect MAKE environment variable if set.
Dr. Stephen Henson [Wed, 28 Oct 2009 13:52:07 +0000 (13:52 +0000)]
PR: 2078
Submitted by: Dale Anderson <dra@redevised.net>
Approved by: steve@openssl.org
Corrections to bn_internal documentation.
Dr. Stephen Henson [Fri, 23 Oct 2009 12:36:41 +0000 (12:36 +0000)]
Clarification
Dr. Stephen Henson [Fri, 23 Oct 2009 12:22:54 +0000 (12:22 +0000)]
Add an FAQ.
Dr. Stephen Henson [Fri, 23 Oct 2009 12:06:35 +0000 (12:06 +0000)]
If not checking all certificates don't attempt to find a CRL
for the leaf certificate of a CRL path.
Dr. Stephen Henson [Thu, 22 Oct 2009 23:12:05 +0000 (23:12 +0000)]
Need to check <= 0 here.
Dr. Stephen Henson [Mon, 19 Oct 2009 13:16:01 +0000 (13:16 +0000)]
PR: 2070
Submitted by: Alexander Nikitovskiy <Nikitovski@ya.ru>
Approved by: steve@openssl.org
Fix wrong cast.
Dr. Stephen Henson [Sun, 18 Oct 2009 14:53:00 +0000 (14:53 +0000)]
make update
Dr. Stephen Henson [Sun, 18 Oct 2009 14:40:33 +0000 (14:40 +0000)]
Use new X509_STORE_set_verify_cb function instead of old macro.
Dr. Stephen Henson [Sun, 18 Oct 2009 14:27:01 +0000 (14:27 +0000)]
take install prefix from the environment
Dr. Stephen Henson [Sun, 18 Oct 2009 14:01:17 +0000 (14:01 +0000)]
Document more error codes.
Dr. Stephen Henson [Sun, 18 Oct 2009 13:26:08 +0000 (13:26 +0000)]
Verification callback functions.
Dr. Stephen Henson [Sun, 18 Oct 2009 13:24:16 +0000 (13:24 +0000)]
Add "missing" function X509_STORE_set_verify_cb().
Dr. Stephen Henson [Sat, 17 Oct 2009 23:08:32 +0000 (23:08 +0000)]
Clarification.
Dr. Stephen Henson [Sat, 17 Oct 2009 23:00:18 +0000 (23:00 +0000)]
Preliminary documentation for X509_VERIFY_PARAM.
Dr. Stephen Henson [Sat, 17 Oct 2009 18:05:53 +0000 (18:05 +0000)]
Add docs for X509_STORE_CTX_new() and related functions.
Dr. Stephen Henson [Sat, 17 Oct 2009 17:07:17 +0000 (17:07 +0000)]
More X509 verification docs.
Dr. Stephen Henson [Sat, 17 Oct 2009 17:06:19 +0000 (17:06 +0000)]
Typo.
Dr. Stephen Henson [Sat, 17 Oct 2009 12:46:52 +0000 (12:46 +0000)]
Manual page for X509_verify_cert()
Dr. Stephen Henson [Fri, 16 Oct 2009 15:30:13 +0000 (15:30 +0000)]
PR: 2074
Submitted by: Bram Neijt <bneijt@gmail.com>
Approved by: steve@openssl.org
Typo: "contet".
Dr. Stephen Henson [Fri, 16 Oct 2009 15:24:07 +0000 (15:24 +0000)]
PR: 2072
Submitted by: Tomas Mraz <tmraz@redhat.com>
Approved by: steve@openssl.org
Avoid potential doublefree and reuse of freed handshake_buffer.
Dr. Stephen Henson [Fri, 16 Oct 2009 13:41:39 +0000 (13:41 +0000)]
PR: 2073
Submitted by: Tomas Mraz <tmraz@redhat.com>
Approved by: steve@openssl.org
Don't access freed SSL_CTX in SSL_free().
Dr. Stephen Henson [Thu, 15 Oct 2009 23:43:54 +0000 (23:43 +0000)]
Fixes to CROSS_COMPILE, don't override command line option from environment
Dr. Stephen Henson [Thu, 15 Oct 2009 18:49:30 +0000 (18:49 +0000)]
Fix for WIN32 and possibly other platforms which don't define in_port_t.
Dr. Stephen Henson [Thu, 15 Oct 2009 18:08:05 +0000 (18:08 +0000)]
Update ordinals.
Dr. Stephen Henson [Thu, 15 Oct 2009 17:41:31 +0000 (17:41 +0000)]
PR: 2069
Submitted by: Michael Tuexen <tuexen@fh-muenster.de>
Approved by: steve@openssl.org
IPv6 support for DTLS.
Dr. Stephen Henson [Thu, 15 Oct 2009 17:27:34 +0000 (17:27 +0000)]
PR: 1847
Submitted by: Tomas Mraz <tmraz@redhat.com>
Approved by: steve@openssl.org
Integrated patches to CA.sh to bring it into line with CA.pl functionality.
Dr. Stephen Henson [Thu, 15 Oct 2009 17:17:45 +0000 (17:17 +0000)]
Revert extra changes from previous commit.
Dr. Stephen Henson [Thu, 15 Oct 2009 17:13:54 +0000 (17:13 +0000)]
PR: 2066
Submitted by: Guenter <lists@gknw.net>
Approved by: steve@openssl.org
Add -r option to dgst to produce format compatible with core utilities.
Dr. Stephen Henson [Thu, 15 Oct 2009 13:05:04 +0000 (13:05 +0000)]
Rename CROSS_COMPILE_PREFIX to CROSS_COMPILE
Dr. Stephen Henson [Wed, 7 Oct 2009 16:44:03 +0000 (16:44 +0000)]
Allow uname values to be overridden by the environment
Dr. Stephen Henson [Wed, 7 Oct 2009 16:41:14 +0000 (16:41 +0000)]
Allow cross compilation prefix to come from CROSS_COMPILE environment variable
Andy Polyakov [Tue, 6 Oct 2009 07:17:57 +0000 (07:17 +0000)]
Combat gcc 4.4.1 aliasing rules.
Dr. Stephen Henson [Sun, 4 Oct 2009 16:52:51 +0000 (16:52 +0000)]
Fix unitialized warnings
Dr. Stephen Henson [Sun, 4 Oct 2009 16:42:56 +0000 (16:42 +0000)]
Fix warnings about ignoring fgets return value
Dr. Stephen Henson [Sun, 4 Oct 2009 14:04:27 +0000 (14:04 +0000)]
Prevent ignored return value warning
Dr. Stephen Henson [Sun, 4 Oct 2009 14:02:22 +0000 (14:02 +0000)]
Prevent aliasing warning
Dr. Stephen Henson [Fri, 2 Oct 2009 18:20:22 +0000 (18:20 +0000)]
Typo.
Dr. Stephen Henson [Thu, 1 Oct 2009 12:17:44 +0000 (12:17 +0000)]
Yes it is a typo ;-)
Dr. Stephen Henson [Thu, 1 Oct 2009 00:25:24 +0000 (00:25 +0000)]
PR: 2061
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct i2b_PVK_bio error handling in rsa.c, dsa.c
Dr. Stephen Henson [Thu, 1 Oct 2009 00:21:20 +0000 (00:21 +0000)]
PR: 2062
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct BN_rand error handling in bntest.c
Dr. Stephen Henson [Thu, 1 Oct 2009 00:17:59 +0000 (00:17 +0000)]
PR: 2059
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct EVP_SealInit error handling in pem_seal.c
Dr. Stephen Henson [Thu, 1 Oct 2009 00:11:04 +0000 (00:11 +0000)]
PR: 2056
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct BIO_wirte error handling in asn1_par.c
Dr. Stephen Henson [Thu, 1 Oct 2009 00:06:14 +0000 (00:06 +0000)]
PR: 2055
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct BIO_ctrl error handling in s2_srvr.c
Dr. Stephen Henson [Thu, 1 Oct 2009 00:02:52 +0000 (00:02 +0000)]
PR: 2054
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct BIO_ctrl error handling
Dr. Stephen Henson [Wed, 30 Sep 2009 23:58:37 +0000 (23:58 +0000)]
PR: 2063
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct BIO_write error handling in ocsp_prn.c
Dr. Stephen Henson [Wed, 30 Sep 2009 23:55:53 +0000 (23:55 +0000)]
PR: 2057
Submitted by: Julia Lawall <julia@diku.dk>
Approved by: steve@openssl.org
Correct BIO_write, BIO_printf, i2a_ASN1_INTEGER and i2a_ASN1_OBJECT
error handling in OCSP print routines.
projects / openssl.git / log