openssl.git
17 years agoOh, there were *two* places where we needed to protect the file
Richard Levitte [Fri, 11 Oct 2002 20:28:23 +0000 (20:28 +0000)]
Oh, there were *two* places where we needed to protect the file
name...

17 years agoFor the platforms where version info is inserted separately into the
Richard Levitte [Fri, 11 Oct 2002 19:56:57 +0000 (19:56 +0000)]
For the platforms where version info is inserted separately into the
shared library, set those flags conditionally.

17 years agoStep 13 of move of engines: Remove old files.
Richard Levitte [Fri, 11 Oct 2002 18:52:42 +0000 (18:52 +0000)]
Step 13 of move of engines:  Remove old files.

17 years agoStep 12 of move of engines: Time to make the changes to support
Richard Levitte [Fri, 11 Oct 2002 18:51:29 +0000 (18:51 +0000)]
Step 12 of move of engines: Time to make the changes to support
automatic load of dynamic engines.  Make the changes in the main
Makefile so the engines are built, but now in the engines/ directory.

Note: The changes in step 12 have all been made by Geoff Thorpe.
Credit where credit is due.

17 years agoStep 11c of move of engines: Time to make the changes to support
Richard Levitte [Fri, 11 Oct 2002 18:49:55 +0000 (18:49 +0000)]
Step 11c of move of engines: Time to make the changes to support
automatic load of dynamic engines.  Change the iterator to try to load
the requested engine dynamically.  The environment variable
OPENSSL_ENGINES can be used to override the internal default directory
where one can expect to find dynamically loadable engines.

Note: The changes in step 11 have all been made by Geoff Thorpe.
Credit where credit is due.

17 years agoStep 11b of move of engines: Time to make the changes to support
Richard Levitte [Fri, 11 Oct 2002 18:47:51 +0000 (18:47 +0000)]
Step 11b of move of engines: Time to make the changes to support
automatic load of dynamic engines.  Add functionality to the dynamic
engine to handle engine directories and loading from those.  This
is currently NOT compatible with the use of LD_LIBRARY_PATH and
similar environment variables.

Note: The changes in step 11 have all been made by Geoff Thorpe.
Credit where credit is due.

17 years agoStep 11a of move of engines: Time to make the changes to support
Richard Levitte [Fri, 11 Oct 2002 18:42:54 +0000 (18:42 +0000)]
Step 11a of move of engines: Time to make the changes to support
automatic load of dynamic engines.  Unless we don't have shared
library support, do not try to load any "built-in" engines except for
cryptodev.

17 years agoStep 10 of move of engines: Change crypto/engine/Makefile.ssl so we
Richard Levitte [Fri, 11 Oct 2002 18:40:47 +0000 (18:40 +0000)]
Step 10 of move of engines: Change crypto/engine/Makefile.ssl so we
don't build any "built-in" engines in that directory any more, except
fo the cryptodev one.

17 years agoStep 9 of move of engines: rename crypto/engine/hw_cryptodev.c to
Richard Levitte [Fri, 11 Oct 2002 18:38:26 +0000 (18:38 +0000)]
Step 9 of move of engines: rename crypto/engine/hw_cryptodev.c to
eng_cryptodev.c.  This is an engine that (at least currently) has
to be built in.

17 years agoTypo
Richard Levitte [Fri, 11 Oct 2002 18:32:32 +0000 (18:32 +0000)]
Typo

17 years agoStep 8 of move of engines: Remove the last little quirks.
Richard Levitte [Fri, 11 Oct 2002 18:21:40 +0000 (18:21 +0000)]
Step 8 of move of engines: Remove the last little quirks.
DECIMAL_SIZE is copied from crypto/cryptlib.h.

17 years agoWe didn't copy the cryptodev engine here, darn it!
Richard Levitte [Fri, 11 Oct 2002 18:20:06 +0000 (18:20 +0000)]
We didn't copy the cryptodev engine here, darn it!

17 years agoStep 7 of move of engines: Engines should not depend on private
Richard Levitte [Fri, 11 Oct 2002 18:17:16 +0000 (18:17 +0000)]
Step 7 of move of engines: Engines should not depend on private
OpenSSL header files.

17 years agoTypo.
Richard Levitte [Fri, 11 Oct 2002 18:10:14 +0000 (18:10 +0000)]
Typo.

17 years agoStep 6 of move of engines: rename the macro ENGINE_DYNAMIC_SUPPORT to
Richard Levitte [Fri, 11 Oct 2002 18:06:08 +0000 (18:06 +0000)]
Step 6 of move of engines: rename the macro ENGINE_DYNAMIC_SUPPORT to
OPENSSL_NO_DYNAMIC_ENGINE and make sure that gets defined unless
shared library support has been specifically requested.

17 years agosynchronize with 0.9.7-stable version of this file
Bodo Möller [Fri, 11 Oct 2002 17:56:34 +0000 (17:56 +0000)]
synchronize with 0.9.7-stable version of this file

17 years agoThat wasn't supposed to be there...
Richard Levitte [Fri, 11 Oct 2002 17:43:53 +0000 (17:43 +0000)]
That wasn't supposed to be there...

17 years agoStep 5 of move of engines: Add a makefile (and a .cvsignore).
Richard Levitte [Fri, 11 Oct 2002 17:42:30 +0000 (17:42 +0000)]
Step 5 of move of engines: Add a makefile (and a .cvsignore).

17 years agoStep 4 of move of engines: Split e.ec into individual files for each
Richard Levitte [Fri, 11 Oct 2002 17:41:40 +0000 (17:41 +0000)]
Step 4 of move of engines: Split e.ec into individual files for each
engine.

17 years agoStep 3 of move of engines: copy the corresponding vendor header files.
Richard Levitte [Fri, 11 Oct 2002 17:10:59 +0000 (17:10 +0000)]
Step 3 of move of engines: copy the corresponding vendor header files.

17 years agoStep 2 of move of engines: copy engines to new directory and rename them
Richard Levitte [Fri, 11 Oct 2002 17:08:27 +0000 (17:08 +0000)]
Step 2 of move of engines: copy engines to new directory and rename them
to be prefixed with e_ instead of hw_.  They aren't necessarely hardware
engines.  The files commited here are exact copies of the corresponding
hw_ files found in crypto/engine/.

17 years agoAdd a configuration target for A/UX.
Richard Levitte [Fri, 11 Oct 2002 14:39:03 +0000 (14:39 +0000)]
Add a configuration target for A/UX.
PR: 271

17 years agomake update
Richard Levitte [Fri, 11 Oct 2002 12:22:47 +0000 (12:22 +0000)]
make update

17 years agoThere may be more than one single quote to fix.
Richard Levitte [Fri, 11 Oct 2002 11:34:20 +0000 (11:34 +0000)]
There may be more than one single quote to fix.
PR: 256

17 years agoMake sure it's properly detected when there's no version information
Richard Levitte [Fri, 11 Oct 2002 11:14:41 +0000 (11:14 +0000)]
Make sure it's properly detected when there's no version information
at all, and in all other cases, make sure foo.so is linked to
foo.so.{soversion}.

17 years agoMake sure $fname will not give us any surprises with any funny characters.
Richard Levitte [Fri, 11 Oct 2002 11:07:28 +0000 (11:07 +0000)]
Make sure $fname will not give us any surprises with any funny characters.
PR: 256

17 years agoBN_bn2hex() returns "0" instead of "00" for zero. This disrputs the
Richard Levitte [Fri, 11 Oct 2002 09:38:56 +0000 (09:38 +0000)]
BN_bn2hex() returns "0" instead of "00" for zero.  This disrputs the
requirement that the serial number always be an even amount of characters.
PR: 248

17 years agoFix inconsistencies in the Darwin targets.
Richard Levitte [Fri, 11 Oct 2002 08:45:42 +0000 (08:45 +0000)]
Fix inconsistencies in the Darwin targets.
Add a variant of SHLIB_SOVER without the preceding period.

17 years agoAdd a suffix for Darwin's sake, since it seems like .dylib comes after
Richard Levitte [Fri, 11 Oct 2002 07:33:38 +0000 (07:33 +0000)]
Add a suffix for Darwin's sake, since it seems like .dylib comes after
the version in the file name.

17 years agoMove the shared library construction stuff to Makefile.shared, a
Richard Levitte [Fri, 11 Oct 2002 00:37:11 +0000 (00:37 +0000)]
Move the shared library construction stuff to Makefile.shared, a
helper makefile that generalises our way of building shared libraries
and is designed to take care of almost anything (I hope).

17 years agoRhapsody had ftime, Darwin doesn't (any longer?)
Richard Levitte [Thu, 10 Oct 2002 13:35:49 +0000 (13:35 +0000)]
Rhapsody had ftime, Darwin doesn't (any longer?)

17 years agoAdd a few more target platforms, to see how well the shared library
Richard Levitte [Thu, 10 Oct 2002 12:46:05 +0000 (12:46 +0000)]
Add a few more target platforms, to see how well the shared library
linking works on them.

17 years agoVMS below version 7 doesn't have strcasecmp, so let's roll our own on VMS.
Richard Levitte [Thu, 10 Oct 2002 09:05:05 +0000 (09:05 +0000)]
VMS below version 7 doesn't have strcasecmp, so let's roll our own on VMS.
PR: 184

17 years agoTypo
Richard Levitte [Thu, 10 Oct 2002 08:32:39 +0000 (08:32 +0000)]
Typo

17 years agoRFC 2712 redefines the codes for use of Kerberos 5 in SSL/TLS.
Richard Levitte [Thu, 10 Oct 2002 07:59:03 +0000 (07:59 +0000)]
RFC 2712 redefines the codes for use of Kerberos 5 in SSL/TLS.
PR: 189

17 years agoMore docs.
Dr. Stephen Henson [Wed, 9 Oct 2002 17:19:59 +0000 (17:19 +0000)]
More docs.

17 years agoTypo.
Dr. Stephen Henson [Wed, 9 Oct 2002 17:15:35 +0000 (17:15 +0000)]
Typo.

17 years agoUpdate docs.
Dr. Stephen Henson [Wed, 9 Oct 2002 17:05:05 +0000 (17:05 +0000)]
Update docs.

17 years agoMake sure that the 'config' variable is correctly defined and declared
Richard Levitte [Wed, 9 Oct 2002 15:36:23 +0000 (15:36 +0000)]
Make sure that the 'config' variable is correctly defined and declared
for monolithic as well as non-monolithic biuld.
More work is probably needed in this area.
PR: 144

17 years agoRemove redundancy and use the main makefile better
Richard Levitte [Wed, 9 Oct 2002 15:12:36 +0000 (15:12 +0000)]
Remove redundancy and use the main makefile better

17 years agoKeep the sub_all symbol so all the algorithm Makefiles won't break.
Richard Levitte [Wed, 9 Oct 2002 15:03:21 +0000 (15:03 +0000)]
Keep the sub_all symbol so all the algorithm Makefiles won't break.

17 years agoChange the main Makefile to have "mini-build" targets.
Richard Levitte [Wed, 9 Oct 2002 14:52:01 +0000 (14:52 +0000)]
Change the main Makefile to have "mini-build" targets.
PR: 253, last part.

17 years agoDon't fuss with the demo binaries
Richard Levitte [Wed, 9 Oct 2002 13:57:55 +0000 (13:57 +0000)]
Don't fuss with the demo binaries

17 years agoAdd a few more VxWorks targets.
Richard Levitte [Wed, 9 Oct 2002 13:40:48 +0000 (13:40 +0000)]
Add a few more VxWorks targets.
Correct misspelled VXWORKS macros.
Add VXWORKS identifying macros to e_os2.h.
Add required inclusions and mappings for VxWorks in e_os.h.
A few small modifications to make OpenSSL build and work on VxWorks.
PR: 253, except for the  change that was handled in an earlier
         commit, and a request for easy build of just parts of OpenSSL.

17 years agoUse double dashes so makedepend doesn't misunderstand the flags we
Richard Levitte [Wed, 9 Oct 2002 13:25:12 +0000 (13:25 +0000)]
Use double dashes so makedepend doesn't misunderstand the flags we
give it.
For 0.9.7 and up, that means util/domd needs to remove those double
dashes from the argument list when gcc is used to find the
dependencies.

17 years agoPKCS12_parse manual page.
Dr. Stephen Henson [Wed, 9 Oct 2002 13:10:23 +0000 (13:10 +0000)]
PKCS12_parse manual page.

17 years agoPKCS12_create manual page
Dr. Stephen Henson [Wed, 9 Oct 2002 12:06:58 +0000 (12:06 +0000)]
PKCS12_create manual page

17 years agoMore man pages.
Dr. Stephen Henson [Wed, 9 Oct 2002 12:06:12 +0000 (12:06 +0000)]
More man pages.

17 years agoAdd missing LF
Richard Levitte [Wed, 9 Oct 2002 06:35:47 +0000 (06:35 +0000)]
Add missing LF

17 years agoPKCS7_verify() docs.
Dr. Stephen Henson [Tue, 8 Oct 2002 00:40:58 +0000 (00:40 +0000)]
PKCS7_verify() docs.

17 years agoMore docs.
Dr. Stephen Henson [Mon, 7 Oct 2002 17:31:00 +0000 (17:31 +0000)]
More docs.

17 years agoMore d2i/i2d manual pages.
Dr. Stephen Henson [Mon, 7 Oct 2002 13:07:00 +0000 (13:07 +0000)]
More d2i/i2d manual pages.

17 years agoDocument "0" and "1" naming convention.
Dr. Stephen Henson [Sun, 6 Oct 2002 12:59:25 +0000 (12:59 +0000)]
Document "0" and "1" naming convention.

17 years agoUpdate docs.
Dr. Stephen Henson [Sun, 6 Oct 2002 12:40:31 +0000 (12:40 +0000)]
Update docs.

17 years agoUpdate docs.
Dr. Stephen Henson [Sun, 6 Oct 2002 12:34:06 +0000 (12:34 +0000)]
Update docs.

17 years agoUpdate DH parameter docs.
Dr. Stephen Henson [Sun, 6 Oct 2002 12:24:09 +0000 (12:24 +0000)]
Update DH parameter docs.

17 years agoVarious Win32 fixes.
Dr. Stephen Henson [Sun, 6 Oct 2002 12:14:55 +0000 (12:14 +0000)]
Various Win32 fixes.

Resolve signed/unsigned conflicts

Make dso_win32.c compile.

17 years agoOops, remove old comment out debugging printf...
Dr. Stephen Henson [Sun, 6 Oct 2002 12:10:35 +0000 (12:10 +0000)]
Oops, remove old comment out debugging printf...

17 years agoSince crypt() isn't defined anywhere, define it locally in destest.c
Richard Levitte [Sun, 6 Oct 2002 00:41:12 +0000 (00:41 +0000)]
Since crypt() isn't defined anywhere, define it locally in destest.c

17 years agoPlease do not use C++ comments in C code.
Richard Levitte [Sun, 6 Oct 2002 00:33:23 +0000 (00:33 +0000)]
Please do not use C++ comments in C code.

17 years agoDo not define crypt(). The supported function is DES_crypt() (an des_crypt()
Richard Levitte [Sun, 6 Oct 2002 00:23:28 +0000 (00:23 +0000)]
Do not define crypt().  The supported function is DES_crypt() (an des_crypt()
when backward compatibility is desired).

17 years agoUpdate RSAPublicKey manual page...
Dr. Stephen Henson [Sun, 6 Oct 2002 00:03:20 +0000 (00:03 +0000)]
Update RSAPublicKey manual page...

17 years agoSome docs relating to X509 ASN1 functions.
Dr. Stephen Henson [Sat, 5 Oct 2002 23:30:10 +0000 (23:30 +0000)]
Some docs relating to X509 ASN1 functions.

Many other ASN1 functions are identical other
than the actual structure being handled.

17 years agoFor some reason, the random number support removed the destructor
Richard Levitte [Sat, 5 Oct 2002 20:54:09 +0000 (20:54 +0000)]
For some reason, the random number support removed the destructor

17 years agoTypo.
Dr. Stephen Henson [Sat, 5 Oct 2002 01:38:58 +0000 (01:38 +0000)]
Typo.

17 years agoAdd version info to Win32 DLLs.
Dr. Stephen Henson [Fri, 4 Oct 2002 21:22:47 +0000 (21:22 +0000)]
Add version info to Win32 DLLs.

We might want to edit the strings a bit...

Maybe add to 0.9.7 too?

17 years agomake update
Dr. Stephen Henson [Fri, 4 Oct 2002 21:16:58 +0000 (21:16 +0000)]
make update

17 years agoAdd declaration got PKCS#7 NDEF.
Dr. Stephen Henson [Fri, 4 Oct 2002 21:08:01 +0000 (21:08 +0000)]
Add declaration got PKCS#7 NDEF.

17 years agoUpdate mkdef.pl to handle new ASN1 macro
Dr. Stephen Henson [Fri, 4 Oct 2002 20:24:50 +0000 (20:24 +0000)]
Update mkdef.pl to handle new ASN1 macro

17 years agoInstalled libraries should not be overwritten, especially shared ones.
Richard Levitte [Fri, 4 Oct 2002 13:43:43 +0000 (13:43 +0000)]
Installed libraries should not be overwritten, especially shared ones.
Use mv to make sure the old copy is unlinked instead of overwritten.
PR: 273, and probably others...

17 years agoAdd random number generation capability to the cswift engine.
Richard Levitte [Fri, 4 Oct 2002 13:30:57 +0000 (13:30 +0000)]
Add random number generation capability to the cswift engine.
Should this be added to 0.9.6-stable as well?
PR: 275

17 years agoIf we're loading libz dynamically, and COMP_zlib() is called more than once,
Richard Levitte [Fri, 4 Oct 2002 13:04:37 +0000 (13:04 +0000)]
If we're loading libz dynamically, and COMP_zlib() is called more than once,
only the first call would provide the correct result.
PR: 277

17 years agoDocument should match reality :-).
Richard Levitte [Fri, 4 Oct 2002 12:59:00 +0000 (12:59 +0000)]
Document should match reality :-).
PR: 255

17 years agoAdd a small note saying the 'debug' option should come before the platform in
Richard Levitte [Fri, 4 Oct 2002 12:58:44 +0000 (12:58 +0000)]
Add a small note saying the 'debug' option should come before the platform in
the arguments to mk1mf.pl.
PR: 298

17 years agoVarious enhancements to PKCS#12 code, new
Dr. Stephen Henson [Thu, 3 Oct 2002 23:53:52 +0000 (23:53 +0000)]
Various enhancements to PKCS#12 code, new
medium level API, improved PKCS12_create
and additional functionality in pkcs12
utility.

17 years agoPreliminary streaming ASN1 encode support.
Dr. Stephen Henson [Thu, 3 Oct 2002 12:38:52 +0000 (12:38 +0000)]
Preliminary streaming ASN1 encode support.

17 years agoRemoval missing
Richard Levitte [Wed, 2 Oct 2002 00:22:44 +0000 (00:22 +0000)]
Removal missing

17 years agoThe OpenBSD project has replaced the first implementation of the /dev/crypto
Richard Levitte [Wed, 2 Oct 2002 00:19:33 +0000 (00:19 +0000)]
The OpenBSD project has replaced the first implementation of the /dev/crypto
engine with something they claim is better.  I have nothing to compare to,
and I assume they know what they're talking about.  The interesting part with
this one is that it's loaded by default on OpenBSD systems.
This change was originally introduced in OpenBSD's tracking of OpenSSL.

17 years agofix more race conditions
Bodo Möller [Thu, 26 Sep 2002 15:52:34 +0000 (15:52 +0000)]
fix more race conditions

Submitted by: "Patrick McCormick" <patrick@tellme.com>
PR: 262

17 years agoAdd missing brackets.
Lutz Jänicke [Wed, 25 Sep 2002 20:19:04 +0000 (20:19 +0000)]
Add missing brackets.
Submitted by: "Chris Brook" <cbrook@v-one.com>

17 years agoreally fix race conditions
Bodo Möller [Wed, 25 Sep 2002 15:38:57 +0000 (15:38 +0000)]
really fix race conditions

Submitted by: "Patrick McCormick" <patrick@tellme.com>

PR: 262
PR: 291

17 years agoMake sure that the signal storage is regarded as volatile.
Richard Levitte [Wed, 25 Sep 2002 14:14:11 +0000 (14:14 +0000)]
Make sure that the signal storage is regarded as volatile.
This correction was originally introduced in OpenBSD's tracking of OpenSSL.

17 years agoIt makes more sense to refer to specific function manuals than the concept
Richard Levitte [Wed, 25 Sep 2002 13:33:28 +0000 (13:33 +0000)]
It makes more sense to refer to specific function manuals than the concept
manual when the specific function is refered to in the current manual text.
This correction was originally introduced in OpenBSD's tracking of OpenSSL.

17 years agoRemove *all* references to RSA_PKCS1_RSAref, since it doesn't exist any more.
Richard Levitte [Wed, 25 Sep 2002 13:26:36 +0000 (13:26 +0000)]
Remove *all* references to RSA_PKCS1_RSAref, since it doesn't exist any more.
This correction was originally introduced in OpenBSD's tracking of OpenSSL.

17 years agoRemove reference to RSA_PKCS1_RSAref, since it doesn't exist any more.
Richard Levitte [Wed, 25 Sep 2002 13:25:44 +0000 (13:25 +0000)]
Remove reference to RSA_PKCS1_RSAref, since it doesn't exist any more.
This correction was originally introduced in OpenBSD's tracking of OpenSSL.

17 years agoIt makes more sense to refer to specific function manuals than the concept
Richard Levitte [Wed, 25 Sep 2002 13:11:12 +0000 (13:11 +0000)]
It makes more sense to refer to specific function manuals than the concept
manual when the specific function is refered to in the current manual text.
This correction was originally introduced in OpenBSD's tracking of OpenSSL.

17 years agoIncorrect argument order to memset()
Richard Levitte [Wed, 25 Sep 2002 12:52:13 +0000 (12:52 +0000)]
Incorrect argument order to memset()

17 years agoMissing ;
Richard Levitte [Wed, 25 Sep 2002 12:49:40 +0000 (12:49 +0000)]
Missing ;

17 years ago-elapsed is also useful when using gettimeofday
Richard Levitte [Wed, 25 Sep 2002 12:41:59 +0000 (12:41 +0000)]
-elapsed is also useful when using gettimeofday

17 years agoreally fix race condition
Bodo Möller [Mon, 23 Sep 2002 14:25:07 +0000 (14:25 +0000)]
really fix race condition

PR: 262

17 years agouse OPENSSL_SYS_MSDOS rather than __DJGPP__ to disable egd, this is not
Ulf Möller [Sun, 22 Sep 2002 08:49:22 +0000 (08:49 +0000)]
use OPENSSL_SYS_MSDOS rather than __DJGPP__ to disable egd, this is not
compiler specific

17 years agomake files didn't work on case insensitive filesystems
Ulf Möller [Sun, 22 Sep 2002 08:44:03 +0000 (08:44 +0000)]
make files didn't work on case insensitive filesystems

17 years agothere is no minimum length for session IDs
Bodo Möller [Thu, 19 Sep 2002 11:44:07 +0000 (11:44 +0000)]
there is no minimum length for session IDs

PR: 274

17 years agofix race condition
Bodo Möller [Thu, 19 Sep 2002 11:26:45 +0000 (11:26 +0000)]
fix race condition

PR: 262

17 years agomake sure 'neg' flag (which does not really matter for GF(2^m), but
Bodo Möller [Mon, 16 Sep 2002 13:52:48 +0000 (13:52 +0000)]
make sure 'neg' flag (which does not really matter for GF(2^m), but
could cause confusion for ECDSA) is set to zero

Submitted by: Sheueling Chang

17 years agoadd URL for Internet Draft
Bodo Möller [Mon, 16 Sep 2002 13:45:14 +0000 (13:45 +0000)]
add URL for Internet Draft

17 years ago1. switch from "-newkey ecdsa:..." to "-newkey ec:..."
Bodo Möller [Tue, 10 Sep 2002 07:36:52 +0000 (07:36 +0000)]
1. switch from "-newkey ecdsa:..." to "-newkey ec:..."
2. automatically create required sub-directories

Submitted by: Vipul Gupta <Vipul.Gupta@sun.com>

17 years agoLet 'openssl req' fail if an argument to '-newkey' is not
Bodo Möller [Tue, 10 Sep 2002 07:34:45 +0000 (07:34 +0000)]
Let 'openssl req' fail if an argument to '-newkey' is not
recognized instead of using RSA as a default.

17 years agoReally fix PKCS7_set_detached this time...
Dr. Stephen Henson [Sun, 8 Sep 2002 16:25:03 +0000 (16:25 +0000)]
Really fix PKCS7_set_detached this time...

17 years agoFix typos in PKCS#12 ASN1 code.
Dr. Stephen Henson [Sat, 7 Sep 2002 22:57:49 +0000 (22:57 +0000)]
Fix typos in PKCS#12 ASN1 code.

Make PKCS7_set_detached work again.