23 years agoadd "UnixWare", treated like "unixware"
Bodo Möller [Fri, 7 Jan 2000 00:27:15 +0000 (00:27 +0000)]
add "UnixWare", treated like "unixware"

Submitted by: "Gary E. Miller" <>

23 years agoInitial automation changes to 'req' and X509_ATTRIBUTE functions.
Dr. Stephen Henson [Thu, 6 Jan 2000 01:26:48 +0000 (01:26 +0000)]
Initial automation changes to 'req' and X509_ATTRIBUTE functions.

23 years agoNew functions SSL_get_finished, SSL_get_peer_finished.
Bodo Möller [Thu, 6 Jan 2000 01:19:17 +0000 (01:19 +0000)]
New functions SSL_get_finished, SSL_get_peer_finished.

Add short state string for MS SGC.

23 years agoUse less complicated arrangement for data strutures related to Finished
Bodo Möller [Thu, 6 Jan 2000 00:41:22 +0000 (00:41 +0000)]
Use less complicated arrangement for data strutures related to Finished

23 years agoUse separate arrays for certificate verify and for finished hashes.
Bodo Möller [Thu, 6 Jan 2000 00:24:24 +0000 (00:24 +0000)]
Use separate arrays for certificate verify and for finished hashes.

23 years agoUse prototypes.
Bodo Möller [Wed, 5 Jan 2000 23:31:47 +0000 (23:31 +0000)]
Use prototypes.

23 years agoSlight code cleanup for handling finished labels.
Bodo Möller [Wed, 5 Jan 2000 23:11:51 +0000 (23:11 +0000)]
Slight code cleanup for handling finished labels.

23 years agoFurther work on MacOS port. See INSTALL.MacOS for details.
Andy Polyakov [Wed, 5 Jan 2000 21:06:56 +0000 (21:06 +0000)]
Further work on MacOS port. See INSTALL.MacOS for details.

23 years agoRename to (no actual changes), and let Configure
Bodo Möller [Wed, 5 Jan 2000 01:31:22 +0000 (01:31 +0000)]
Rename to (no actual changes), and let Configure
set the #! line with the path to Perl.

Submitted by: Peter Jones

23 years agoRhapsody 5.5 (a.k.a. MacOS X) compiler bug workaround. At the very least
Andy Polyakov [Tue, 4 Jan 2000 03:33:18 +0000 (03:33 +0000)]
Rhapsody 5.5 (a.k.a. MacOS X) compiler bug workaround. At the very least
passes 'make test' now:-)

23 years agoMetrowerks for Motorola tune-up.
Andy Polyakov [Sun, 2 Jan 2000 22:03:10 +0000 (22:03 +0000)]
Metrowerks for Motorola tune-up.

23 years agoAlpha Linux update companion.
Andy Polyakov [Sun, 2 Jan 2000 21:32:02 +0000 (21:32 +0000)]
Alpha Linux update companion.

23 years agoEnhanced support for Alpha Linux. See CHANGES for details.
Andy Polyakov [Sun, 2 Jan 2000 20:46:58 +0000 (20:46 +0000)]
Enhanced support for Alpha Linux. See CHANGES for details.

23 years agoAdd support for MS "fast SGC".
Dr. Stephen Henson [Sun, 2 Jan 2000 18:52:58 +0000 (18:52 +0000)]
Add support for MS "fast SGC".

23 years agoFix some of the command line password stuff. New function
Dr. Stephen Henson [Sat, 1 Jan 2000 16:42:49 +0000 (16:42 +0000)]
Fix some of the command line password stuff. New function
that can automatically determine the type of a DER encoded
"traditional" format private key and change some of the
d2i functions to use it instead of requiring the application
to work out the key type.

23 years agoDon't request client certificate in anonymous ciphersuites
Bodo Möller [Wed, 29 Dec 1999 17:43:03 +0000 (17:43 +0000)]
Don't request client certificate in anonymous ciphersuites
except when following the specs is bound to fail.

23 years agoFix SSL_CTX_add_session: When two SSL_SESSIONs have the same ID,
Bodo Möller [Wed, 29 Dec 1999 14:29:32 +0000 (14:29 +0000)]
Fix SSL_CTX_add_session: When two SSL_SESSIONs have the same ID,
they can sometimes be different memory structures.

23 years agoDelete NO_PROTO section (which apparently was just a typo for NOPROTO --
Bodo Möller [Wed, 29 Dec 1999 14:27:35 +0000 (14:27 +0000)]
Delete NO_PROTO section (which apparently was just a typo for NOPROTO --
if anyone had actually ever needed that they should have fixed this typo)

23 years agofix comment
Bodo Möller [Wed, 29 Dec 1999 14:25:35 +0000 (14:25 +0000)]
fix comment

23 years agoAdd OIDs for idea and blowfish. Unfortunately these are in
Dr. Stephen Henson [Wed, 29 Dec 1999 02:59:18 +0000 (02:59 +0000)]
Add OIDs for idea and blowfish. Unfortunately these are in
the middle of the OID table so the diff is rather large :-(

23 years agoSimplify the trust structure: basically zap the bit strings and
Dr. Stephen Henson [Wed, 29 Dec 1999 00:40:28 +0000 (00:40 +0000)]
Simplify the trust structure: basically zap the bit strings and
represent everything by OIDs.

23 years agoMacOS updates. Initial support for GUSI (MacOS socket implementation)
Andy Polyakov [Sun, 26 Dec 1999 22:46:49 +0000 (22:46 +0000)]
MacOS updates. Initial support for GUSI (MacOS socket implementation)
is added.

23 years agoNew {i2d,d2i}_PrivateKey_{bio, fp} functions.
Dr. Stephen Henson [Sun, 26 Dec 1999 19:20:03 +0000 (19:20 +0000)]
New {i2d,d2i}_PrivateKey_{bio, fp} functions.

23 years agoMakefile clean-ups, crypto/bn/asm/alpha.s compiles on Alpha Linux.
Andy Polyakov [Sat, 25 Dec 1999 16:08:31 +0000 (16:08 +0000)]
Makefile clean-ups, crypto/bn/asm/alpha.s compiles on Alpha Linux.

23 years agoAllow passwords to be included on command line for a few
Dr. Stephen Henson [Fri, 24 Dec 1999 23:53:57 +0000 (23:53 +0000)]
Allow passwords to be included on command line for a few
more utilities.

23 years agoFixes so NO_RSA works again.
Dr. Stephen Henson [Fri, 24 Dec 1999 17:26:33 +0000 (17:26 +0000)]
Fixes so NO_RSA works again.

23 years agoAdd PKCS#8 utility functions and add PBE options.
Dr. Stephen Henson [Thu, 23 Dec 1999 02:02:42 +0000 (02:02 +0000)]
Add PKCS#8 utility functions and add PBE options.

23 years agoCorrect spelling, and don't abuse grave accent as left quote
Bodo Möller [Wed, 22 Dec 1999 16:10:44 +0000 (16:10 +0000)]
Correct spelling, and don't abuse grave accent as left quote
(which was allowed by old ASCII definitions but is not compatible
with ISO 8859-1, ISO 10646 etc.).

23 years agoSynchronising
Richard Levitte [Wed, 22 Dec 1999 05:57:00 +0000 (05:57 +0000)]

23 years agoSupport for ASN1 NULL type.
Dr. Stephen Henson [Wed, 22 Dec 1999 01:39:23 +0000 (01:39 +0000)]
Support for ASN1 NULL type.

23 years agoMinor documentation update.
Andy Polyakov [Mon, 20 Dec 1999 18:34:56 +0000 (18:34 +0000)]
Minor documentation update.

23 years agoEven more late break-in MacOS tidbits (last for today)...
Andy Polyakov [Sun, 19 Dec 1999 23:50:36 +0000 (23:50 +0000)]
Even more late break-in MacOS tidbits (last for today)...

23 years agoEven more late break-in MacOS tidbits...
Andy Polyakov [Sun, 19 Dec 1999 22:56:23 +0000 (22:56 +0000)]
Even more late break-in MacOS tidbits...

23 years agoLate break-in patch for MacOS support.
Andy Polyakov [Sun, 19 Dec 1999 21:35:29 +0000 (21:35 +0000)]
Late break-in patch for MacOS support.

23 years agoInitial support for MacOS is now available
Andy Polyakov [Sun, 19 Dec 1999 16:17:45 +0000 (16:17 +0000)]
Initial support for MacOS is now available

Submitted by: Roy Woods <>
Reviewed by: Andy Polyakov

23 years agoMacOS updates.
Andy Polyakov [Sun, 19 Dec 1999 16:07:19 +0000 (16:07 +0000)]
MacOS updates.

23 years agoRename
Bodo Möller [Sat, 18 Dec 1999 13:51:47 +0000 (13:51 +0000)]
   CRYPTO_add_info    => CRYPTO_push_info
   CRYPTO_remove_info => CRYPTO_pop_info
in the hope that these names are more descriptive;
and "make update".

23 years agofix typos and other little errors ...
Bodo Möller [Sat, 18 Dec 1999 13:25:45 +0000 (13:25 +0000)]
fix typos and other little errors ...

23 years ago- Don't assume that int and size_t have the same representation
Bodo Möller [Sat, 18 Dec 1999 05:22:50 +0000 (05:22 +0000)]
- Don't assume that int and size_t have the same representation
  (and that malloc can be called with an int argument).
- Use proper prototypes (with argument list) for various function pointers,
  avoid casts  (however there are still many such cases left in these files).
- Avoid collissions in app_info_cmp if sizeof int != sizeof long.
- Use CRYPTO_LOCK_MALLOC in mem_dbg.c.

23 years agoAvoid shadowing p to make the compiler happy.
Bodo Möller [Sat, 18 Dec 1999 05:16:30 +0000 (05:16 +0000)]
Avoid shadowing p to make the compiler happy.

23 years ago - Added more documentation in CHANGES.
Richard Levitte [Sat, 18 Dec 1999 02:34:37 +0000 (02:34 +0000)]
 - Added more documentation in CHANGES.
 - Made CRYPTO_MDEBUG even less used in crypto.h, giving
   MemCheck_start() and MemCheck_stop() only one possible definition.
 - Made the values of the debug function pointers in mem.c dependent
   on the existence of the CRYPTO_MDEBUG macro, and made the rest of
   the code understand the NULL case.

That's it.  With this code, the old behvior of the debug functionality
is restored, but you can still opt to have it on, even when the
library wasn't compiled with a defined CRYPTO_MDEBUG.

23 years ago - Made sure some changed behavior is documented in CHANGES.
Richard Levitte [Sat, 18 Dec 1999 01:14:39 +0000 (01:14 +0000)]
 - Made sure some changed behavior is documented in CHANGES.
 - Moved the handling of compile-time defaults from crypto.h to
   mem_dbg.c, since it doesn't make sense for the library users to try
   to affect this without recompiling libcrypto.
   and constant definitions.
 - Aesthetic correction.

23 years agoPoint out that openssl-bugs is public.
Bodo Möller [Sat, 18 Dec 1999 01:13:30 +0000 (01:13 +0000)]
Point out that openssl-bugs is public.

23 years agoAdd a comment.
Bodo Möller [Sat, 18 Dec 1999 00:30:32 +0000 (00:30 +0000)]
Add a comment.

23 years agoAdd missing semicolon to make compiler happy, and switch back
Bodo Möller [Sat, 18 Dec 1999 00:28:21 +0000 (00:28 +0000)]
Add missing semicolon to make compiler happy, and switch back
from MemCheck_start() to CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON)
because that is what applications should use
(MemCheck_start/stop never really worked for applications
unless CRYPTO_MDEBUG was defined both when compiling the library
and when compiling the application, so probably we should
get rid of it).

23 years agoClear out license confusion.
Richard Levitte [Fri, 17 Dec 1999 16:49:23 +0000 (16:49 +0000)]
Clear out license confusion.

23 years agoRebuild of the OpenSSL memory allocation and deallocation routines.
Richard Levitte [Fri, 17 Dec 1999 12:56:24 +0000 (12:56 +0000)]
Rebuild of the OpenSSL memory allocation and deallocation routines.
With this change, the following is provided and present at all times
(meaning CRYPTO_MDEBUG is no longer required to get this functionality):

  - hooks to provide your own allocation and deallocation routines.
    They have to have the same interface as malloc(), realloc() and
    free().  They are registered by calling CRYPTO_set_mem_functions()
    with the function pointers.

  - hooks to provide your own memory debugging routines.  The have to
    have the same interface as as the CRYPTO_dbg_*() routines.  They
    are registered by calling CRYPTO_set_mem_debug_functions() with
    the function pointers.

I moved everything that was already built into OpenSSL and did memory
debugging to a separate file (mem_dbg.c), to make it clear what is

With this, the relevance of the CRYPTO_MDEBUG has changed.  The only
thing in crypto/crypto.h that it affects is the definition of the
MemCheck_start and MemCheck_stop macros.

23 years agoUse MemCheck_start() instead of CRYPTO_mem_ctrl(), and generate a small leak to test...
Richard Levitte [Fri, 17 Dec 1999 12:50:06 +0000 (12:50 +0000)]
Use MemCheck_start() instead of CRYPTO_mem_ctrl(), and generate a small leak to test (conditional)

23 years agoSynchronise VMS scripts with Unix Makefiles
Richard Levitte [Thu, 16 Dec 1999 19:57:50 +0000 (19:57 +0000)]
Synchronise VMS scripts with Unix Makefiles

23 years agoUpdate contact information (openssl-bugs, openssl-security).
Ulf Möller [Thu, 16 Dec 1999 15:10:29 +0000 (15:10 +0000)]
Update contact information (openssl-bugs, openssl-security).

23 years agoDelete an unused variable and make the PKCS#12 keygen debugging code work
Dr. Stephen Henson [Wed, 15 Dec 1999 02:36:48 +0000 (02:36 +0000)]
Delete an unused variable and make the PKCS#12 keygen debugging code work

23 years agoFix the S/MIME code to use canonical MIME format for
Dr. Stephen Henson [Wed, 15 Dec 1999 01:26:17 +0000 (01:26 +0000)]
Fix the S/MIME code to use canonical MIME format for
encrypted mail. Also update the smime docs.

23 years agoSolaris x86 assembler problem is already addressed in ./config
Ulf Möller [Tue, 14 Dec 1999 15:28:10 +0000 (15:28 +0000)]
Solaris x86 assembler problem is already addressed in ./config
(bug reports keep coming in because that was still missing in 0.9.4)

23 years agoVarious S/MIME fixes. Fix for memory leak, recipient list bug
Dr. Stephen Henson [Tue, 14 Dec 1999 02:44:27 +0000 (02:44 +0000)]
Various S/MIME fixes. Fix for memory leak, recipient list bug
and not excluding parameters with DSA keys.

23 years agoFix a typo in a_enum.c.
Dr. Stephen Henson [Mon, 13 Dec 1999 13:14:14 +0000 (13:14 +0000)]
Fix a typo in a_enum.c.

23 years agoVarious S/MIME fixes.
Dr. Stephen Henson [Sat, 11 Dec 1999 20:04:06 +0000 (20:04 +0000)]
Various S/MIME fixes.

23 years agoFix for crashing INTEGERs, ENUMERATEDs and OBJECT IDENTIFIERs.
Dr. Stephen Henson [Fri, 10 Dec 1999 13:46:48 +0000 (13:46 +0000)]

Also fix a memory leak in PKCS#7 routines.

23 years agoMake the PKCS#7 S/MIME functions check for passed NULL pointers.
Dr. Stephen Henson [Thu, 9 Dec 1999 01:31:32 +0000 (01:31 +0000)]
Make the PKCS#7 S/MIME functions check for passed NULL pointers.

Fix the usage message of smime utility and sanitise the return

Add some documentation.

23 years agoDon't use inline assembler on x86 Solaris (would need a different syntax).
Ulf Möller [Wed, 8 Dec 1999 22:55:06 +0000 (22:55 +0000)]
Don't use inline assembler on x86 Solaris (would need a different syntax).

23 years agoUseless files deleted -- they were just copies of files of the same name
Bodo Möller [Wed, 8 Dec 1999 18:30:39 +0000 (18:30 +0000)]
Useless files deleted -- they were just copies of files of the same name
in the apps/ directory (which were recently changed).

23 years agoAdd i2d_ASN1_PRINTABLESTRING() function, and do 'make update'
Dr. Stephen Henson [Wed, 8 Dec 1999 00:56:15 +0000 (00:56 +0000)]
Add i2d_ASN1_PRINTABLESTRING() function, and do 'make update'

23 years agoModify S/MIME application so the -signer option writes the signer(s)
Dr. Stephen Henson [Tue, 7 Dec 1999 02:35:52 +0000 (02:35 +0000)]
Modify S/MIME application so the -signer option writes the signer(s)
to a file if we are verifying.

23 years agoMerge in my S/MIME library and utility.
Dr. Stephen Henson [Sun, 5 Dec 1999 00:40:59 +0000 (00:40 +0000)]
Merge in my S/MIME library and utility.

23 years agoCORE SDI proposed patch doesn't make any sense. Undo.
Ulf Möller [Sat, 4 Dec 1999 01:19:23 +0000 (01:19 +0000)]
CORE SDI proposed patch doesn't make any sense. Undo.

23 years agoOops!
Ulf Möller [Sat, 4 Dec 1999 00:13:37 +0000 (00:13 +0000)]

23 years agoCircumvent an exploitable buffer overrun error in RSA Security's RSAREF
Ulf Möller [Fri, 3 Dec 1999 23:56:08 +0000 (23:56 +0000)]
Circumvent an exploitable buffer overrun error in RSA Security's RSAREF
library. See: http://www.CORE-SDI.COM/english/ssh/index.html

Submitted by:
Reviewed by:

23 years agoUse des_set_key_unchecked, not des_set_key.
Bodo Möller [Fri, 3 Dec 1999 20:26:20 +0000 (20:26 +0000)]
Use des_set_key_unchecked, not des_set_key.

23 years agoAdd functions des_set_key_checked, des_set_key_unchecked.
Bodo Möller [Fri, 3 Dec 1999 20:24:21 +0000 (20:24 +0000)]
Add functions des_set_key_checked, des_set_key_unchecked.
Never use des_set_key (it depends on the global variable des_check_key),
but usually des_set_key_unchecked.
Only destest.c bothered to look at the return values of des_set_key,
but it did not set des_check_key -- if it had done so,
most checks would have failed because of wrong parity and
because of weak keys.

23 years agoNew function PKC12_newpass()
Dr. Stephen Henson [Fri, 3 Dec 1999 03:46:18 +0000 (03:46 +0000)]
New function PKC12_newpass()

23 years agoFix a bug in the modified purpose code: it wasn't updated to use the
Dr. Stephen Henson [Fri, 3 Dec 1999 00:53:48 +0000 (00:53 +0000)]
Fix a bug in the modified purpose code: it wasn't updated to use the
new purpose getting function.

Update the ca-cert.pem and pca-cert.pem "CA" certificates so they
really are CA certificate: that is they have the appropriate extensions.

23 years agoChange the trust and purpose code so it doesn't need init
Dr. Stephen Henson [Thu, 2 Dec 1999 02:33:56 +0000 (02:33 +0000)]
Change the trust and purpose code so it doesn't need init
either and has a static and dynamic mix.

23 years agoModify the X509 V3 extension lookup code.
Dr. Stephen Henson [Wed, 1 Dec 1999 01:49:46 +0000 (01:49 +0000)]
Modify the X509 V3 extension lookup code.

23 years agoMake salting the default. Fail gracefully if the input is not salted.
Ben Laurie [Tue, 30 Nov 1999 20:15:19 +0000 (20:15 +0000)]
Make salting the default. Fail gracefully if the input is not salted.

23 years agoDocument the extension tests performed by the -purpose test
Dr. Stephen Henson [Tue, 30 Nov 1999 14:39:58 +0000 (14:39 +0000)]
Document the extension tests performed by the -purpose test
in the x509 utility.

23 years agoDocument all possible errors (and some impossible) from the verify program.
Dr. Stephen Henson [Tue, 30 Nov 1999 02:28:42 +0000 (02:28 +0000)]
Document all possible errors (and some impossible) from the verify program.

23 years agoRemainder of SSL purpose and trust code: trust and purpose setting in
Dr. Stephen Henson [Mon, 29 Nov 1999 22:35:00 +0000 (22:35 +0000)]
Remainder of SSL purpose and trust code: trust and purpose setting in
SSL_CTX and SSL, functions to set them and defaults if no values set.

23 years agoAdd part of chain verify SSL support code: not complete or doing anything
Dr. Stephen Henson [Mon, 29 Nov 1999 01:09:25 +0000 (01:09 +0000)]
Add part of chain verify SSL support code: not complete or doing anything

Add a function X509_STORE_CTX_purpose_inherit() which implements the logic
of "inheriting" purpose and trust from a parent structure and using a default:
this will be used in the SSL code and possibly future S/MIME.

Partial documentation of the 'verify' utility. Still need to document how all
the extension checking works and the various error messages.

23 years agoAdd trust setting support to the verify code. It now checks the
Dr. Stephen Henson [Sat, 27 Nov 1999 19:43:10 +0000 (19:43 +0000)]
Add trust setting support to the verify code. It now checks the
trust settings of the root CA.

After a few fixes it seems to work OK.

Still need to add support to SSL and S/MIME code though.

23 years agoAdd compilation of x509_trs
Richard Levitte [Sat, 27 Nov 1999 15:26:48 +0000 (15:26 +0000)]
Add compilation of x509_trs

23 years agoOops! Commit died on me :-(
Dr. Stephen Henson [Sat, 27 Nov 1999 01:18:39 +0000 (01:18 +0000)]
Oops! Commit died on me :-(

23 years agoInitial trust code: allow setting of trust checking functions
Dr. Stephen Henson [Sat, 27 Nov 1999 01:14:04 +0000 (01:14 +0000)]
Initial trust code: allow setting of trust checking functions
in a table. Doesn't do too much yet.

Make the -<digestname> options in 'x509' affect all relevant

Change the name of the 'notrust' options to 'reject' as this
causes less confusion and is a better description of the

A few constification changes.

23 years agoNew options to the -verify program which can be used for chain verification.
Dr. Stephen Henson [Fri, 26 Nov 1999 00:27:07 +0000 (00:27 +0000)]
New options to the -verify program which can be used for chain verification.
Extend the X509_PURPOSE structure to include shortnames for purposed and default
trust ids.

Still need some extendable trust checking code and integration with the SSL and
S/MIME code.

23 years agoInitial chain verify code: not tested probably not working
Dr. Stephen Henson [Wed, 24 Nov 1999 01:31:49 +0000 (01:31 +0000)]
Initial chain verify code: not tested probably not working
at present. However nothing enables it yet so this doesn't
matter :-)

23 years agoSupport for authority information access extension.
Dr. Stephen Henson [Tue, 23 Nov 1999 18:50:28 +0000 (18:50 +0000)]
Support for authority information access extension.

Fix so EVP_PKEY_rset_*() check return codes.

23 years agoTransparent support for PKCS#8 private keys in RSA/DSA.
Dr. Stephen Henson [Sun, 21 Nov 1999 22:28:31 +0000 (22:28 +0000)]
Transparent support for PKCS#8 private keys in RSA/DSA.

New universal public key format.

Fix CRL+cert load problem in by_file.c

Make verify report errors when loading files or dirs

23 years agoSupport for otherName in GeneralName.
Dr. Stephen Henson [Fri, 19 Nov 1999 02:19:58 +0000 (02:19 +0000)]
Support for otherName in GeneralName.

23 years agoUpdate dependencies.
Ben Laurie [Thu, 18 Nov 1999 14:32:54 +0000 (14:32 +0000)]
Update dependencies.

23 years agoFix warning.
Ben Laurie [Thu, 18 Nov 1999 14:10:53 +0000 (14:10 +0000)]
Fix warning.

23 years agoRestore traditional SSL_get_session behaviour so that s_client and s_server
Bodo Möller [Wed, 17 Nov 1999 21:36:13 +0000 (21:36 +0000)]
Restore traditional SSL_get_session behaviour so that s_client and s_server
don't leak tons of memory.

23 years agoMissing #ifdef NO_DES
Ulf Möller [Wed, 17 Nov 1999 13:03:29 +0000 (13:03 +0000)]
Missing #ifdef NO_DES

23 years agoModify verify code to handle self signed certificates.
Dr. Stephen Henson [Wed, 17 Nov 1999 01:20:29 +0000 (01:20 +0000)]
Modify verify code to handle self signed certificates.

23 years agoStore verify_result with sessions to avoid potential security hole.
Bodo Möller [Tue, 16 Nov 1999 23:15:41 +0000 (23:15 +0000)]
Store verify_result with sessions to avoid potential security hole.

23 years agoFix for a bug in PKCS#7 code and non-detached data.
Dr. Stephen Henson [Tue, 16 Nov 1999 14:54:50 +0000 (14:54 +0000)]
Fix for a bug in PKCS#7 code and non-detached data.

Remove rc4-64 from ciphers since it doesn't exist...

23 years agoClarify docs.
Dr. Stephen Henson [Tue, 16 Nov 1999 02:51:41 +0000 (02:51 +0000)]
Clarify docs.

23 years agoAdd a salt to the key derivation using the 'enc' program.
Dr. Stephen Henson [Tue, 16 Nov 1999 02:49:25 +0000 (02:49 +0000)]
Add a salt to the key derivation using the 'enc' program.

23 years agoNew function X509_cmp().
Dr. Stephen Henson [Tue, 16 Nov 1999 00:56:03 +0000 (00:56 +0000)]
New function X509_cmp().

23 years agoThis corrects the reference count handling in SSL_get_session.
Mark J. Cox [Mon, 15 Nov 1999 16:31:31 +0000 (16:31 +0000)]
This corrects the reference count handling in SSL_get_session.
Previously, the returned SSL_SESSION didn't have its reference count
incremented so the SSL_SESSION could be freed at any time causing
seg-faults if the pointer was subsequently used. Code that uses
SSL_get_session must now make a corresponding SSL_SESSION_free() call when
it is done to avoid memory leaks (or blocked up session caches).

Submitted By: Geoff Thorpe <>

23 years ago'req' fixes. Reinstate length check one request fields.
Dr. Stephen Henson [Sun, 14 Nov 1999 23:10:50 +0000 (23:10 +0000)]
'req' fixes. Reinstate length check one request fields.
Fix to stop null being added to attributes.
Modify X509_LOOKUP, X509_INFO to handle auxiliary info.

23 years agoAdd some examples to the enc man page.
Dr. Stephen Henson [Sun, 14 Nov 1999 13:34:34 +0000 (13:34 +0000)]
Add some examples to the enc man page.

23 years agoAdd support for the 40 and 64 bit RC2 and RC4 ciphers in 'enc'
Dr. Stephen Henson [Sun, 14 Nov 1999 03:23:17 +0000 (03:23 +0000)]
Add support for the 40 and 64 bit RC2 and RC4 ciphers in 'enc'
add documentation for 'enc'.