openssl.git
19 years agoIt's not just VMS that needs some symbols to be hacked. Let's
Richard Levitte [Thu, 7 Sep 2000 08:18:05 +0000 (08:18 +0000)]
It's not just VMS that needs some symbols to be hacked.  Let's
centralise those hacks in crypto/symhacks.h and use it everywhere it's
needed.

19 years agoAnother thing I'm working on.
Richard Levitte [Thu, 7 Sep 2000 08:14:46 +0000 (08:14 +0000)]
Another thing I'm working on.

19 years agoclarification (source/sink BIOs are usually *both* source and sink)
Bodo Möller [Thu, 7 Sep 2000 08:07:55 +0000 (08:07 +0000)]
clarification (source/sink BIOs are usually *both* source and sink)

19 years agoChange the printing mahine used by BIO_printf() and friends so it can
Richard Levitte [Thu, 7 Sep 2000 05:50:14 +0000 (05:50 +0000)]
Change the printing mahine used by BIO_printf() and friends so it can
handle an externally provided "static" buffer as well a a dynamic
buffer.  The "static" buffer is filled first, but if overflowed, the
dynamic buffer is used instead, being allocated somewhere i the heap.

This combines the benefits of putting the output in a preallocated
buffer (on the stack, for example) and in a buffer that grows
somewhere in the heap.

19 years agoSome BIO docs, incomplete, more to follow.
Dr. Stephen Henson [Thu, 7 Sep 2000 00:22:31 +0000 (00:22 +0000)]
Some BIO docs, incomplete, more to follow.

Hmmm I didn't realise BIO_pop() did that:
isn't source wonderful?

19 years agoUse name ...-whatever-solaris2 instead of ...-sun-solaris2
Bodo Möller [Wed, 6 Sep 2000 17:09:58 +0000 (17:09 +0000)]
Use name ...-whatever-solaris2 instead of ...-sun-solaris2
(the middle string describes the architecture).

19 years agoGet rid of ASN1_UTCTIME_get, which cannot work with time_t
Bodo Möller [Wed, 6 Sep 2000 15:40:52 +0000 (15:40 +0000)]
Get rid of ASN1_UTCTIME_get, which cannot work with time_t
return type (on platforms where time_t is a 32 bit value).

New function ASN1_UTCTIME_cmp_time_t as a replacement
for use in apps/x509.c.

19 years agoSee RSA Security's press release at
Bodo Möller [Wed, 6 Sep 2000 14:55:11 +0000 (14:55 +0000)]
See RSA Security's press release at
http://www.rsasecurity.com/news/pr/000906-1.html (September 6, 2000):
"RSA Security Releases RSA Encryption Algorithm into Public Domain"

19 years agoAnother superfluous pair of parentheses.
Bodo Möller [Wed, 6 Sep 2000 14:34:32 +0000 (14:34 +0000)]
Another superfluous pair of parentheses.

19 years agoAnother round of indentation changes: Position braces consistently,
Bodo Möller [Wed, 6 Sep 2000 14:14:20 +0000 (14:14 +0000)]
Another round of indentation changes: Position braces consistently,
add some whitespace for 'if ()', 'for ()', 'while ()' to distinguish
keywords from function names, and finally remove parens around return
values (why be stingy with whitespace but fill the source code
with an abundance of parentheses that are not needed to structure
expressions for readability?).

19 years agoMore indentation consistency: for (), while (), if (), return ()
Bodo Möller [Wed, 6 Sep 2000 13:31:44 +0000 (13:31 +0000)]
More indentation consistency: for (), while (), if (), return ()
usually get a space between keyword and opening paranthesis
so that they don't look like function calls, where no space is
used.

19 years agoFix X509_STORE_CTX_init. Make indentation more consistent. Dump core less often.
Bodo Möller [Wed, 6 Sep 2000 13:24:10 +0000 (13:24 +0000)]
Fix X509_STORE_CTX_init.  Make indentation more consistent.  Dump core less often.

19 years ago'make update'
Bodo Möller [Wed, 6 Sep 2000 12:34:10 +0000 (12:34 +0000)]
'make update'

19 years agoChanges for QNX: there is no thread support, and the previous
Bodo Möller [Wed, 6 Sep 2000 12:25:58 +0000 (12:25 +0000)]
Changes for QNX: there is no thread support, and the previous
configuration only worked with no-asm.

19 years agotypo
Bodo Möller [Wed, 6 Sep 2000 12:18:24 +0000 (12:18 +0000)]
typo

19 years agoAdd OAEP. Seed the PRNG.
Bodo Möller [Wed, 6 Sep 2000 11:49:43 +0000 (11:49 +0000)]
Add OAEP. Seed the PRNG.

19 years agoupdate
Bodo Möller [Wed, 6 Sep 2000 10:50:33 +0000 (10:50 +0000)]
update

19 years agoAdd rsautl.
Bodo Möller [Wed, 6 Sep 2000 07:58:27 +0000 (07:58 +0000)]
Add rsautl.

19 years agoClarification for SSL_ERROR_ZERO_RETURN
Bodo Möller [Wed, 6 Sep 2000 07:56:03 +0000 (07:56 +0000)]
Clarification for SSL_ERROR_ZERO_RETURN

19 years agoFix typo in rsautl.
Dr. Stephen Henson [Tue, 5 Sep 2000 22:30:38 +0000 (22:30 +0000)]
Fix typo in rsautl.

Add support for settable verify time in X509_verify_cert().

Document rsautl utility.

19 years agoIgnore executable.
Ben Laurie [Tue, 5 Sep 2000 18:56:55 +0000 (18:56 +0000)]
Ignore executable.

19 years agoHandle WANT_READ more correctly (thanks to Bodo).
Ben Laurie [Tue, 5 Sep 2000 18:47:57 +0000 (18:47 +0000)]
Handle WANT_READ more correctly (thanks to Bodo).

19 years ago*BIG* verify code reorganisation.
Dr. Stephen Henson [Tue, 5 Sep 2000 17:53:58 +0000 (17:53 +0000)]
*BIG* verify code reorganisation.

The old code was painfully primitive and couldn't handle
distinct certificates using the same subject name.

The new code performs several tests on a candidate issuer
certificate based on certificate extensions.

It also adds several callbacks to X509_VERIFY_CTX so its
behaviour can be customised.

Unfortunately some hackery was needed to persuade X509_STORE
to tolerate this. This should go away when X509_STORE is
replaced, sometime...

This must have broken something though :-(

19 years agoDistinguish between assertions and conditions that should cause death.
Ben Laurie [Tue, 5 Sep 2000 17:06:45 +0000 (17:06 +0000)]
Distinguish between assertions and conditions that should cause death.

19 years agoKeep a not of original encoding in certificate requests.
Dr. Stephen Henson [Tue, 5 Sep 2000 13:27:57 +0000 (13:27 +0000)]
Keep a not of original encoding in certificate requests.

Add new option to PKCS7_sign to exclude S/MIME capabilities.

19 years agoMention fix in bio_lib.c.
Bodo Möller [Tue, 5 Sep 2000 12:46:10 +0000 (12:46 +0000)]
Mention fix in bio_lib.c.

19 years agoIncrease print buffer (10K instead of just 2K).
Bodo Möller [Tue, 5 Sep 2000 12:43:39 +0000 (12:43 +0000)]
Increase print buffer (10K instead of just 2K).

19 years agoIgnore Makefile.save
Bodo Möller [Tue, 5 Sep 2000 12:42:05 +0000 (12:42 +0000)]
Ignore Makefile.save

19 years agoRemove silly test for b->references at the end of BIO_write:
Bodo Möller [Tue, 5 Sep 2000 12:35:00 +0000 (12:35 +0000)]
Remove silly test for b->references at the end of BIO_write:
If some other thread deletes the BIO that one thread needs for
BIO_write, then there's a lot of trouble anyway; there's
nothing special about calling the callback.

19 years agoConsistency
Bodo Möller [Mon, 4 Sep 2000 15:47:17 +0000 (15:47 +0000)]
Consistency

19 years agoUse consistent indentation,
Bodo Möller [Mon, 4 Sep 2000 15:38:02 +0000 (15:38 +0000)]
Use consistent indentation,

19 years agoAvoid abort() throughout the library, except when preprocessor
Bodo Möller [Mon, 4 Sep 2000 15:34:43 +0000 (15:34 +0000)]
Avoid abort() throughout the library, except when preprocessor
symbols for debugging are defined.

19 years agoFix for BN_mul_word(a, 0).
Bodo Möller [Mon, 4 Sep 2000 15:30:14 +0000 (15:30 +0000)]
Fix for BN_mul_word(a, 0).

19 years ago-Wall insists that main return an int.
Bodo Möller [Mon, 4 Sep 2000 15:29:06 +0000 (15:29 +0000)]
-Wall insists that main return an int.

19 years agoInclude MD4 in documentation.
Bodo Möller [Mon, 4 Sep 2000 15:28:21 +0000 (15:28 +0000)]
Include MD4 in documentation.

19 years agoTell CVS to ignore 'lib'.
Bodo Möller [Mon, 4 Sep 2000 15:27:47 +0000 (15:27 +0000)]
Tell CVS to ignore 'lib'.

19 years agoAdd 'rsautl' low level RSA utility.
Dr. Stephen Henson [Sun, 3 Sep 2000 23:13:48 +0000 (23:13 +0000)]
Add 'rsautl' low level RSA utility.

Add DER public key routines.

Add -passin argument to 'ca' utility.

Document sign and verify options to dgst.

19 years agoUndo change from 1.7 to 1.8:
Bodo Möller [Fri, 1 Sep 2000 12:29:14 +0000 (12:29 +0000)]
Undo change from 1.7 to 1.8:

Returning -1 for an attempt to read from an empty buffer is empty is
not an error that should be signalled via the error queue, it's a
'retry read' condition and is signalled as such.

19 years agoUse C syntax, not FORTRAN or whatever that was :-)
Bodo Möller [Fri, 1 Sep 2000 10:40:37 +0000 (10:40 +0000)]
Use C syntax, not FORTRAN or whatever that was :-)

19 years agoQNX 4 support.
Bodo Möller [Fri, 1 Sep 2000 09:54:25 +0000 (09:54 +0000)]
QNX 4 support.

19 years ago-N option to diff is not essential, and mentioning it is unnecessarily
Bodo Möller [Fri, 1 Sep 2000 09:42:17 +0000 (09:42 +0000)]
-N option to diff is not essential, and mentioning it is unnecessarily
confusing to people whose diff doesn't implement it.

19 years agoAdd demo state machine.
Ben Laurie [Wed, 30 Aug 2000 18:14:28 +0000 (18:14 +0000)]
Add demo state machine.

19 years agoFix typo in i2d_ASN1_ENUMERATED
Dr. Stephen Henson [Wed, 30 Aug 2000 16:14:29 +0000 (16:14 +0000)]
Fix typo in i2d_ASN1_ENUMERATED

Fix bug in read only memory BIOs so BIO_reset() works.

Add sign and verify options to dgst utility, need
to update docs.

19 years agoDiagnose EOF on memory BIOs (or you just get mysterious errors with no error
Ben Laurie [Mon, 28 Aug 2000 12:54:18 +0000 (12:54 +0000)]
Diagnose EOF on memory BIOs (or you just get mysterious errors with no error
message).

19 years agoUse the passed buffer in ERR_error_string!
Ben Laurie [Mon, 28 Aug 2000 10:57:01 +0000 (10:57 +0000)]
Use the passed buffer in ERR_error_string!

19 years agoChange PKCS#7 test data to take account of removal of
Dr. Stephen Henson [Fri, 25 Aug 2000 01:29:41 +0000 (01:29 +0000)]
Change PKCS#7 test data to take account of removal of
indefinite length encoding.

19 years agoNew option to CA.pl to sign request using CA extensions.
Dr. Stephen Henson [Thu, 24 Aug 2000 23:24:18 +0000 (23:24 +0000)]
New option to CA.pl to sign request using CA extensions.
This allows intermediate CAs to be created more easily.

PKCS12_create() now checks private key matches certificate.

Fix typo in x509 app.

Update docs.

New function ASN1_STRING_to_UTF8() converts any ASN1_STRING
type to UTF8.

19 years agoAdd support for 'other' PKCS#7 content types.
Dr. Stephen Henson [Tue, 22 Aug 2000 22:20:25 +0000 (22:20 +0000)]
Add support for 'other' PKCS#7 content types.

19 years agomax -> dmax in bn_check_top.
Ben Laurie [Tue, 22 Aug 2000 21:23:09 +0000 (21:23 +0000)]
max -> dmax in bn_check_top.

19 years agoFix ASN1_INTEGER_to_BN properly this time...
Dr. Stephen Henson [Tue, 22 Aug 2000 16:06:24 +0000 (16:06 +0000)]
Fix ASN1_INTEGER_to_BN properly this time...

19 years agoFixes to d2i_ASN1_OBJECT, ASN1_INTEGER_to_BN and a_strex.c
Dr. Stephen Henson [Tue, 22 Aug 2000 12:54:21 +0000 (12:54 +0000)]
Fixes to d2i_ASN1_OBJECT, ASN1_INTEGER_to_BN and a_strex.c

19 years agoVarious fixes...
Dr. Stephen Henson [Mon, 21 Aug 2000 22:02:23 +0000 (22:02 +0000)]
Various fixes...

initialize ex_pathlen to -1 so it isn't checked if pathlen
is not present.

set ucert to NULL in apps/pkcs12.c otherwise it gets freed
twice.

remove extraneous '\r' in MIME encoder.

Allow a NULL to be passed to X509_gmtime_adj()

Make PKCS#7 code use definite length encoding rather then
the indefinite stuff it used previously.

19 years agoAdded OIDs from RFC 2247, 1155, and a few from 1700
Richard Levitte [Sat, 19 Aug 2000 08:47:59 +0000 (08:47 +0000)]
Added OIDs from RFC 2247, 1155, and a few from 1700

19 years agoAssar wanted an address change.
Richard Levitte [Fri, 18 Aug 2000 09:50:41 +0000 (09:50 +0000)]
Assar wanted an address change.

19 years agoAdded BIO_vprintf() and BIO_vsnprintf(). The former because I've
Richard Levitte [Fri, 18 Aug 2000 09:36:59 +0000 (09:36 +0000)]
Added BIO_vprintf() and BIO_vsnprintf().  The former because I've
found myself needing it a number of times, the latter for completeness.

19 years agoNULL is not an integer...
Richard Levitte [Fri, 18 Aug 2000 09:30:31 +0000 (09:30 +0000)]
NULL is not an integer...

19 years agoDocument the added diversity to the possible log levels.
Richard Levitte [Thu, 17 Aug 2000 23:27:03 +0000 (23:27 +0000)]
Document the added diversity to the possible log levels.

19 years agoAdd more diversity to the possible log levels. Now we have full
Richard Levitte [Thu, 17 Aug 2000 23:15:53 +0000 (23:15 +0000)]
Add more diversity to the possible log levels.  Now we have full
coverage for all syslog level.

19 years agoAdded md4 to the VMS compilation
Richard Levitte [Thu, 17 Aug 2000 22:43:31 +0000 (22:43 +0000)]
Added md4 to the VMS compilation

19 years agomake update
Richard Levitte [Thu, 17 Aug 2000 22:39:03 +0000 (22:39 +0000)]
make update

19 years agoNew option 'ctestall' for mkdef.pl, that makes it not only generate
Richard Levitte [Thu, 17 Aug 2000 21:26:22 +0000 (21:26 +0000)]
New option 'ctestall' for mkdef.pl, that makes it not only generate
existing functions, but really all functions that exist in libeay.num
and ssleay.num.  This is a good check on how much we should actually
clean up the number files.

19 years agoDocument the reconfiguratoin option for Configure.
Richard Levitte [Thu, 17 Aug 2000 10:25:46 +0000 (10:25 +0000)]
Document the reconfiguratoin option for Configure.

19 years agoAllow reconfiguration. This can be useful if some source update
Richard Levitte [Thu, 17 Aug 2000 10:23:45 +0000 (10:23 +0000)]
Allow reconfiguration.  This can be useful if some source update
requires that you configure again, but you don't want to reenter all
those configuration arguments again.

19 years agoCorrect the title. This also fooled the automatic documentation builder
Richard Levitte [Tue, 15 Aug 2000 17:35:10 +0000 (17:35 +0000)]
Correct the title.  This also fooled the automatic documentation builder
that this was actually the pkcs7 document...

19 years agoIBMcxx complains that maxmem is as low as 2048 for certain modules
Richard Levitte [Mon, 14 Aug 2000 17:00:36 +0000 (17:00 +0000)]
IBMcxx complains that maxmem is as low as 2048 for certain modules
(like all the digests).  Setting maxmem to 16K seems to give the
compiler enough space to do all the optimization it wants.

19 years agoI forgot this file that Assar provided as well...
Richard Levitte [Mon, 14 Aug 2000 14:20:52 +0000 (14:20 +0000)]
I forgot this file that Assar provided as well...

19 years agoMD4 implemented. Assar Westerlund provided the digest code itself and the test utili...
Richard Levitte [Mon, 14 Aug 2000 14:05:53 +0000 (14:05 +0000)]
MD4 implemented.  Assar Westerlund provided the digest code itself and the test utility, I added the bits to get a EVP interface, the command line utility and the speed test

19 years agoMemory leaks fix. It now looks like all memory leaks, at least around
Richard Levitte [Fri, 11 Aug 2000 22:50:08 +0000 (22:50 +0000)]
Memory leaks fix.  It now looks like all memory leaks, at least around
building complete chains, are gone.

19 years agoMemory leaks fix. There seems to be more in other parts of OpenSSL...
Richard Levitte [Fri, 11 Aug 2000 21:41:08 +0000 (21:41 +0000)]
Memory leaks fix.  There seems to be more in other parts of OpenSSL...

19 years agoThe pkcs12 had no way of getting a CA file or path to be used when
Richard Levitte [Fri, 11 Aug 2000 19:43:20 +0000 (19:43 +0000)]
The pkcs12 had no way of getting a CA file or path to be used when
building a complete chain.  Now added through the -CAfile and -CApath
arguments.

19 years agoAbdelilah Essiari <aes@george.lbl.gov> reports that for very small
Richard Levitte [Fri, 11 Aug 2000 08:36:25 +0000 (08:36 +0000)]
Abdelilah Essiari <aes@george.lbl.gov> reports that for very small
records, EVP_EncodeUpdate() may misbehave.  This happens when there's
a record boundary between the two ending b64 equal signs, which makes
EVP_EncodeUpdate think there has been more than one EOF, and therefore
add an extra NUL at the end of the output buffer.  This fix corrects
that problem.

19 years agoDuplicate names detected...
Richard Levitte [Thu, 10 Aug 2000 01:48:49 +0000 (01:48 +0000)]
Duplicate names detected...

19 years agoMake sure that 'initialized' is zeroed as well when cleaning up.
Richard Levitte [Tue, 8 Aug 2000 15:06:44 +0000 (15:06 +0000)]
Make sure that 'initialized' is zeroed as well when cleaning up.

19 years agoFix for bad sorting of object names.
Dr. Stephen Henson [Sun, 6 Aug 2000 18:43:32 +0000 (18:43 +0000)]
Fix for bad sorting of object names.

Add warning print out if duplicate names found:
should end up as a fatal error but a warning for
now until they problems are fixed...

19 years agoFor n > 7, we might get uninitialized (unzeroed) data.
Richard Levitte [Sun, 6 Aug 2000 01:35:03 +0000 (01:35 +0000)]
For n > 7, we might get uninitialized (unzeroed) data.
Spotted by "Kyoungho Jeon" <k.h.jeon@securesoft.co.kr>.

19 years agoChanges needed for Tandem NSK, supplied by Scott Uroff (scott@xypro.com).
Dr. Stephen Henson [Fri, 4 Aug 2000 00:01:39 +0000 (00:01 +0000)]
Changes needed for Tandem NSK, supplied by Scott Uroff (scott@xypro.com).

Fix warnings with BIO_dump_indent().

19 years agoOn Unicos, shorts are 8 bytes, so instead, use a structure with 2 32-bit ints, just...
Richard Levitte [Thu, 3 Aug 2000 21:58:56 +0000 (21:58 +0000)]
On Unicos, shorts are 8 bytes, so instead, use a structure with 2 32-bit ints, just as in destest.c

19 years agoOn Unicos, openlog() isn't constified, so let's not do that in xopenlog()
Richard Levitte [Thu, 3 Aug 2000 21:56:36 +0000 (21:56 +0000)]
On Unicos, openlog() isn't constified, so let's not do that in xopenlog()

19 years agoUnicos doesn't have sys/timeb.h. Fix it by defining the TIMEB macro unless on Unicos.
Richard Levitte [Thu, 3 Aug 2000 21:54:31 +0000 (21:54 +0000)]
Unicos doesn't have sys/timeb.h.  Fix it by defining the TIMEB macro unless on Unicos.

19 years ago*mumble* unicos 10.0.0.3 with Cray Standard C Version 6.2.0.0 has a syslog.h
Richard Levitte [Wed, 2 Aug 2000 23:05:15 +0000 (23:05 +0000)]
*mumble* unicos 10.0.0.3 with Cray Standard C Version 6.2.0.0 has a syslog.h
where the openlog() is declared like this:

  extern int openlog __((char *_Ident, int _Logopt, int _Facility));

19 years agoInclude SKIP DH parameters with OpenSSL.
Bodo Möller [Wed, 2 Aug 2000 09:04:44 +0000 (09:04 +0000)]
Include SKIP DH parameters with OpenSSL.
These have been created by a SHA.1 based procedure, see
http://www.skip-vpn.org/spec/numbers.html.
(These values are taken from that document, I have not
implemented the prime generator.)

19 years agoAdded and corrected documentation for the 'shared' option
Richard Levitte [Wed, 2 Aug 2000 04:19:50 +0000 (04:19 +0000)]
Added and corrected documentation for the 'shared' option

19 years agoWe've now covered the shared library support for Solaris, so the -shared hack
Richard Levitte [Wed, 2 Aug 2000 04:08:19 +0000 (04:08 +0000)]
We've now covered the shared library support for Solaris, so the -shared hack
in config is no longer needed.

19 years agoIt's probably a good idea to make the shared libraries depend in EX_LIBS.
Richard Levitte [Wed, 2 Aug 2000 03:52:49 +0000 (03:52 +0000)]
It's probably a good idea to make the shared libraries depend in EX_LIBS.

19 years ago"make update"
Richard Levitte [Wed, 2 Aug 2000 03:44:16 +0000 (03:44 +0000)]
"make update"

19 years agoI had completely forgotten that print_table_entry also needed to read the two
Richard Levitte [Wed, 2 Aug 2000 03:43:29 +0000 (03:43 +0000)]
I had completely forgotten that print_table_entry also needed to read the two
"shared" variables on it's own...

19 years agoAdd support for shared libraries on Solaris.
Richard Levitte [Wed, 2 Aug 2000 03:27:12 +0000 (03:27 +0000)]
Add support for shared libraries on Solaris.

19 years agoA few corrections with the shared library support:
Richard Levitte [Wed, 2 Aug 2000 03:03:17 +0000 (03:03 +0000)]
A few corrections with the shared library support:

1. make sure libssl.so becomes dependent on libcrypto.so
2. correct a number of silly bugs in the solaris-shared target, and make
   sure lib*.so also depends on libc.so.

19 years agoMake it so we can dynamically enable memory allocation debugging through the
Richard Levitte [Tue, 1 Aug 2000 17:15:36 +0000 (17:15 +0000)]
Make it so we can dynamically enable memory allocation debugging through the
environment variable OPENSSL_DEBUG_MEMORY (existence is sufficient).  At the
same time, it makes sure that CRYPTO_malloc_debug_init() gets expanded some-
where and thereby tested for compilation.

19 years agoRemove casts that are no longer needed.
Richard Levitte [Tue, 1 Aug 2000 08:41:13 +0000 (08:41 +0000)]
Remove casts that are no longer needed.

19 years agoIf a ip address is successfully parsed, the WSA structure under Win32 wasn't
Richard Levitte [Mon, 31 Jul 2000 22:49:27 +0000 (22:49 +0000)]
If a ip address is successfully parsed, the WSA structure under Win32 wasn't
properly initialised.  Fixed.
Bug reported by DeJuan Jackson <djackson@inverge.com>

19 years agoUpdate 'openssl passwd' documentation on selection of algorithms.
Bodo Möller [Mon, 31 Jul 2000 12:27:44 +0000 (12:27 +0000)]
Update 'openssl passwd' documentation on selection of algorithms.

19 years agoDocument the new DN printing options.
Dr. Stephen Henson [Sun, 30 Jul 2000 01:27:59 +0000 (01:27 +0000)]
Document the new DN printing options.

Change a few names to be more meaningful.

Fix typos in CA.pl docs.

19 years agoDocument rollback issues.
Bodo Möller [Sat, 29 Jul 2000 19:27:20 +0000 (19:27 +0000)]
Document rollback issues.

19 years agoFix SSL 2.0 rollback checking: The previous implementation of the
Bodo Möller [Sat, 29 Jul 2000 18:50:41 +0000 (18:50 +0000)]
Fix SSL 2.0 rollback checking: The previous implementation of the
test was never triggered due to an off-by-one error.

In s23_clnt.c, don't use special rollback-attack detection padding
(RSA_SSLV23_PADDING) if SSL 2.0 is the only protocol enabled in the
client; similarly, in s23_srvr.c, don't do the rollback check if
SSL 2.0 is the only protocol enabled in the server.

19 years agoNew ASN1_STRING_print_ex() and X509_NAME_print_ex()
Dr. Stephen Henson [Fri, 28 Jul 2000 01:58:15 +0000 (01:58 +0000)]
New ASN1_STRING_print_ex() and X509_NAME_print_ex()
functions. These are intended to be replacements
for the ancient ASN1_STRING_print() and X509_NAME_print()
functions.

The new functions support RFC2253 and various pretty
printing options. It is also possible to display
international characters if the terminal properly handles
UTF8 encoding (Linux seems to tolerate this if the
"unicode_start" script is run).

Still needs to be documented, integrated into other
utilities and extensively tested.

19 years agoThere's a slight possibility that a is 0 in BN_sub_word(), and might
Richard Levitte [Thu, 27 Jul 2000 21:32:23 +0000 (21:32 +0000)]
There's a slight possibility that a is 0 in BN_sub_word(), and might
therefore have unallocated parts.  Therefore, a check for the 0 case
is needed, resulting with the same thing as when a is negative.

19 years agoIn the case where a < 0 and |a| < w, the result (assigned to a) from
Richard Levitte [Thu, 27 Jul 2000 21:17:14 +0000 (21:17 +0000)]
In the case where a < 0 and |a| < w, the result (assigned to a) from
BN_add_word becomes wrongly negative...
This was discovered by Darrel Hankerson <dhankers@cacr.math.uwaterloo.ca>

19 years agoLooks like Win32 builds do not define THREADS. However, they're still
Richard Levitte [Thu, 27 Jul 2000 20:14:39 +0000 (20:14 +0000)]
Looks like Win32 builds do not define THREADS.  However, they're still
supporting threads, which means that th assertion is supperbly
dangerous, so make sure it's not compiled under Win32, period.

19 years agoAdd the possibility to get hexdumps of unprintable data when using
Richard Levitte [Thu, 27 Jul 2000 17:28:25 +0000 (17:28 +0000)]
Add the possibility to get hexdumps of unprintable data when using
'openssl asn1parse'.  As a side effect, the functions ASN1_parse_dump
and BIO_dump_indent are added.