openssl.git
13 years agoclarification regarding libdes files
Bodo Möller [Wed, 21 Mar 2007 10:58:45 +0000 (10:58 +0000)]
clarification regarding libdes files

13 years agolink warnings caused by nasm modules.
Andy Polyakov [Tue, 20 Mar 2007 09:37:06 +0000 (09:37 +0000)]
link warnings caused by nasm modules.

13 years agoTwo extra instructions in RC4 character loop give 80% performance
Andy Polyakov [Tue, 20 Mar 2007 09:13:07 +0000 (09:13 +0000)]
Two extra instructions in RC4 character loop give 80% performance
improvement on Core2. I still need to detect Core2 and choose this
path...

13 years agoRemove obsolete comment.
Andy Polyakov [Tue, 20 Mar 2007 09:07:19 +0000 (09:07 +0000)]
Remove obsolete comment.

13 years agoVarious PowerPC config updates.
Andy Polyakov [Tue, 20 Mar 2007 08:57:18 +0000 (08:57 +0000)]
Various PowerPC config updates.

13 years agonasm fixes.
Andy Polyakov [Tue, 20 Mar 2007 08:55:58 +0000 (08:55 +0000)]
nasm fixes.

13 years agosparcv9a-mont was modified to handle 32-bit aligned input, but check
Andy Polyakov [Tue, 20 Mar 2007 08:54:51 +0000 (08:54 +0000)]
sparcv9a-mont was modified to handle 32-bit aligned input, but check
for 64-bit alignment was not removed.

13 years agoWin32 fixes. Add GOST algorithm to mkdef, update ordinals. Signed/unsigned fixes.
Dr. Stephen Henson [Fri, 16 Mar 2007 22:20:55 +0000 (22:20 +0000)]
Win32 fixes. Add GOST algorithm to mkdef, update ordinals. Signed/unsigned fixes.

13 years agoFix from stable branch.
Dr. Stephen Henson [Mon, 5 Mar 2007 00:09:08 +0000 (00:09 +0000)]
Fix from stable branch.

13 years agosize_t -> int
Nils Larsch [Fri, 2 Mar 2007 19:56:29 +0000 (19:56 +0000)]
size_t -> int

13 years agoremove unused file
Nils Larsch [Fri, 2 Mar 2007 19:42:16 +0000 (19:42 +0000)]
remove unused file

13 years agoInitialize "buf" to 0 to make valgrind happy :-)
Lutz Jänicke [Fri, 2 Mar 2007 17:54:51 +0000 (17:54 +0000)]
Initialize "buf" to 0 to make valgrind happy :-)
Note: the RAND_bytes() manual page says:
 RAND_bytes() puts num cryptographically strong pseudo-random bytes into buf.
It does not talk about using the previous contents of buf so we are working
as documented.

13 years agoDo not use uninitialized memory to seed the PRNG as it may confuse
Lutz Jänicke [Fri, 2 Mar 2007 17:46:25 +0000 (17:46 +0000)]
Do not use uninitialized memory to seed the PRNG as it may confuse
code checking tools.
PR: 1499

13 years agoUpdate from stable branch.
Dr. Stephen Henson [Tue, 27 Feb 2007 18:43:42 +0000 (18:43 +0000)]
Update from stable branch.

13 years agosmall cosmetics: align title with the other similar manual page
Ralf S. Engelschall [Tue, 27 Feb 2007 07:41:54 +0000 (07:41 +0000)]
small cosmetics: align title with the other similar manual page

13 years agoallow EVP_PKEY_CTX_free(NULL)
Nils Larsch [Mon, 26 Feb 2007 18:32:53 +0000 (18:32 +0000)]
allow EVP_PKEY_CTX_free(NULL)

13 years agoremove dead code
Nils Larsch [Mon, 26 Feb 2007 18:21:19 +0000 (18:21 +0000)]
remove dead code

13 years agoinclude complete 0.9.7 history
Bodo Möller [Mon, 26 Feb 2007 10:49:59 +0000 (10:49 +0000)]
include complete 0.9.7 history
include release date of 0.9.8e

13 years agouse 2007 copyright for generated files
Bodo Möller [Mon, 26 Feb 2007 10:48:10 +0000 (10:48 +0000)]
use 2007 copyright for generated files

13 years agoUpdate FAQ,NEWS in HEAD.
Dr. Stephen Henson [Fri, 23 Feb 2007 13:16:38 +0000 (13:16 +0000)]
Update FAQ,NEWS in HEAD.

13 years agoFix incorrect substitution that happened during the recent ciphersuite
Bodo Möller [Thu, 22 Feb 2007 21:31:19 +0000 (21:31 +0000)]
Fix incorrect substitution that happened during the recent ciphersuite
selection remodeling

Submitted by: Victor Duchovni

13 years agoFix problem with multi line responses in -starttls by using a buffering
Lutz Jänicke [Thu, 22 Feb 2007 17:39:47 +0000 (17:39 +0000)]
Fix problem with multi line responses in -starttls by using a buffering
BIO and BIO_gets().

13 years agoExtend SMTP and IMAP protocol handling to perform the required
Lutz Jänicke [Wed, 21 Feb 2007 18:20:41 +0000 (18:20 +0000)]
Extend SMTP and IMAP protocol handling to perform the required
EHLO or CAPABILITY handshake before sending STARTTLS

Submitted by: Goetz Babin-Ebell <goetz@shomitefo.de>

13 years agoAdd automatic detection for Linux on SuperH
Lutz Jänicke [Wed, 21 Feb 2007 18:10:20 +0000 (18:10 +0000)]
Add automatic detection for Linux on SuperH
PR: 1152
Submitted by: Mike Frysinger <vapier@gentoo.org>

13 years agoAdd support for m68k linux
Lutz Jänicke [Wed, 21 Feb 2007 17:58:54 +0000 (17:58 +0000)]
Add support for m68k linux
PR: 1277
Submitted by: Mike Frysinger <vapier@gentoo.org>

13 years agoFix incorrect handling of special characters
Lutz Jänicke [Wed, 21 Feb 2007 17:44:53 +0000 (17:44 +0000)]
Fix incorrect handling of special characters
PR: 1459
Submitted by: tnitschke@innominate.com
Reviewed by: steve@openssl.org

13 years agoUpdate from 0.9.7-stable.
Dr. Stephen Henson [Wed, 21 Feb 2007 13:49:35 +0000 (13:49 +0000)]
Update from 0.9.7-stable.

13 years agoprefer SHA1 over MD5 (this affects the Kerberos ciphersuites)
Bodo Möller [Wed, 21 Feb 2007 09:33:14 +0000 (09:33 +0000)]
prefer SHA1 over MD5 (this affects the Kerberos ciphersuites)

13 years agodelete obsolete comment
Bodo Möller [Wed, 21 Feb 2007 09:32:17 +0000 (09:32 +0000)]
delete obsolete comment

13 years agoSSL_kKRB5 ciphersuites shouldn't be preferred by default
Bodo Möller [Tue, 20 Feb 2007 16:39:58 +0000 (16:39 +0000)]
SSL_kKRB5 ciphersuites shouldn't be preferred by default

13 years agoImprove ciphersuite order stability when disabling ciphersuites.
Bodo Möller [Tue, 20 Feb 2007 16:36:58 +0000 (16:36 +0000)]
Improve ciphersuite order stability when disabling ciphersuites.
Change ssl_create_cipher_list() to prefer ephemeral ECDH over
ephemeral DH.

13 years agofix a typo in the new ciphersuite ordering code
Bodo Möller [Tue, 20 Feb 2007 13:25:36 +0000 (13:25 +0000)]
fix a typo in the new ciphersuite ordering code

13 years agoInclude "!eNULL" in SSL_DEFAULT_CIPHER_LIST to make sure that a
Bodo Möller [Mon, 19 Feb 2007 18:41:41 +0000 (18:41 +0000)]
Include "!eNULL" in SSL_DEFAULT_CIPHER_LIST to make sure that a
ciphersuite string such as "DEFAULT:RSA" cannot enable
authentication-only ciphersuites.

Also, change ssl_create_cipher_list() so that it no longer
starts with an arbitrary ciphersuite ordering, but instead
uses the logic that we previously had in SSL_DEFEAULT_CIPHER_LIST.
SSL_DEFAULT_CIPHER_LIST simplifies into just "ALL:!aNULL:!eNULL".

13 years agofix warnings for CIPHER_DEBUG builds
Bodo Möller [Mon, 19 Feb 2007 16:59:13 +0000 (16:59 +0000)]
fix warnings for CIPHER_DEBUG builds

13 years agofix warnings/inconsistencies caused by the recent changes to the
Bodo Möller [Mon, 19 Feb 2007 14:53:18 +0000 (14:53 +0000)]
fix warnings/inconsistencies caused by the recent changes to the
ciphersuite selection code in HEAD

Submitted by: Victor Duchovni

13 years agofix incorrect strength bit values for certain Kerberos ciphersuites
Bodo Möller [Mon, 19 Feb 2007 14:49:12 +0000 (14:49 +0000)]
fix incorrect strength bit values for certain Kerberos ciphersuites

Submitted by: Victor Duchovni

13 years agoUpdates from 0.9.8-stable branch.
Dr. Stephen Henson [Sun, 18 Feb 2007 18:21:57 +0000 (18:21 +0000)]
Updates from 0.9.8-stable branch.

13 years agoReorganize the data used for SSL ciphersuite pattern matching.
Bodo Möller [Sat, 17 Feb 2007 06:45:38 +0000 (06:45 +0000)]
Reorganize the data used for SSL ciphersuite pattern matching.
This change resolves a number of problems and obviates multiple kludges.
A new feature is that you can now say "AES256" or "AES128" (not just
"AES", which enables both).

In some cases the ciphersuite list generated from a given string is
affected by this change.  I hope this is just in those cases where the
previous behaviour did not make sense.

13 years agoensure that the EVP_CIPHER_CTX object is initialized
Nils Larsch [Fri, 16 Feb 2007 20:34:15 +0000 (20:34 +0000)]
ensure that the EVP_CIPHER_CTX object is initialized

PR: 1490

13 years agoAdd STARTTLS support for IMAP and FTP.
Richard Levitte [Fri, 16 Feb 2007 18:12:16 +0000 (18:12 +0000)]
Add STARTTLS support for IMAP and FTP.
Submitted by Kees Cook <kees@outflux.net>

13 years ago- use OPENSSL_malloc() etc. in zlib
Nils Larsch [Wed, 14 Feb 2007 21:52:01 +0000 (21:52 +0000)]
- use OPENSSL_malloc() etc. in zlib
- move zlib_stateful_ex_idx initialization to COMP_zlib()

PR: 1468

13 years agoavoid shifting input
Nils Larsch [Sun, 11 Feb 2007 19:33:21 +0000 (19:33 +0000)]
avoid shifting input

13 years agouse user-supplied malloc functions for persistent kssl objects
Nils Larsch [Sat, 10 Feb 2007 10:42:48 +0000 (10:42 +0000)]
use user-supplied malloc functions for persistent kssl objects

PR: 1467
Submitted by: Andrei Pelinescu-Onciul <andrei@iptel.org>

13 years agoremove unreachable code
Nils Larsch [Sat, 10 Feb 2007 09:45:07 +0000 (09:45 +0000)]
remove unreachable code

13 years agoPR: 1483
Dr. Stephen Henson [Fri, 9 Feb 2007 19:43:04 +0000 (19:43 +0000)]
PR: 1483

Add support for GOST 28147-89 in Gost ENGINE.

13 years agoAdd -hmac option to dgst from 0.9.7 stable branch.
Dr. Stephen Henson [Thu, 8 Feb 2007 19:07:43 +0000 (19:07 +0000)]
Add -hmac option to dgst from 0.9.7 stable branch.

13 years agoremove unused variable
Nils Larsch [Wed, 7 Feb 2007 20:49:58 +0000 (20:49 +0000)]
remove unused variable

13 years agoensure that a ec key is used
Nils Larsch [Wed, 7 Feb 2007 20:28:19 +0000 (20:28 +0000)]
ensure that a ec key is used

PR: 1476

13 years agoAfter objects have been freed, NULLify the pointers so there will be no double
Richard Levitte [Wed, 7 Feb 2007 01:42:46 +0000 (01:42 +0000)]
After objects have been freed, NULLify the pointers so there will be no double
free of those objects

13 years agofix typo
Nils Larsch [Tue, 6 Feb 2007 19:48:42 +0000 (19:48 +0000)]
fix typo

13 years agoadd note about 56 bit ciphers
Nils Larsch [Tue, 6 Feb 2007 19:41:01 +0000 (19:41 +0000)]
add note about 56 bit ciphers

PR: 1461

13 years agoUpdate from fips2 branch.
Dr. Stephen Henson [Sat, 3 Feb 2007 17:32:49 +0000 (17:32 +0000)]
Update from fips2 branch.

13 years agoadd support for DSA with SHA2
Nils Larsch [Sat, 3 Feb 2007 14:41:12 +0000 (14:41 +0000)]
add support for DSA with SHA2

13 years agofix documentation
Nils Larsch [Sat, 3 Feb 2007 10:28:08 +0000 (10:28 +0000)]
fix documentation

PR: 1466

13 years agofix potential memory leaks
Nils Larsch [Sat, 3 Feb 2007 09:55:42 +0000 (09:55 +0000)]
fix potential memory leaks

PR: 1462

13 years agoMinimize aes_core.c footprint when AES_[en|de]crypt is implemented in
Andy Polyakov [Thu, 25 Jan 2007 20:47:00 +0000 (20:47 +0000)]
Minimize aes_core.c footprint when AES_[en|de]crypt is implemented in
assembler.

13 years agoMinor touch to aes-armv4.pl.
Andy Polyakov [Thu, 25 Jan 2007 11:28:07 +0000 (11:28 +0000)]
Minor touch to aes-armv4.pl.

13 years agoAES for ARMv4.
Andy Polyakov [Thu, 25 Jan 2007 10:44:48 +0000 (10:44 +0000)]
AES for ARMv4.

13 years agoMinor optimization for sha1-armv4 module.
Andy Polyakov [Thu, 25 Jan 2007 10:44:18 +0000 (10:44 +0000)]
Minor optimization for sha1-armv4 module.

13 years agoUpdate from 0.9.7-stable.
Dr. Stephen Henson [Tue, 23 Jan 2007 17:53:48 +0000 (17:53 +0000)]
Update from 0.9.7-stable.

13 years agoSHA1 for ARMv4 and Thumb.
Andy Polyakov [Mon, 22 Jan 2007 20:33:46 +0000 (20:33 +0000)]
SHA1 for ARMv4 and Thumb.

13 years agoConstify version strings is ssl lib.
Dr. Stephen Henson [Sun, 21 Jan 2007 16:06:05 +0000 (16:06 +0000)]
Constify version strings is ssl lib.

13 years agoConstify version strings and some structures.
Dr. Stephen Henson [Sun, 21 Jan 2007 13:07:17 +0000 (13:07 +0000)]
Constify version strings and some structures.

13 years agoAdd AOL an AOLTW root CAs to bundle.
Dr. Stephen Henson [Thu, 18 Jan 2007 21:24:44 +0000 (21:24 +0000)]
Add AOL an AOLTW root CAs to bundle.

13 years agoMake armv4t-mont module backward binary compatible with armv4 and rename it
Andy Polyakov [Wed, 17 Jan 2007 20:12:41 +0000 (20:12 +0000)]
Make armv4t-mont module backward binary compatible with armv4 and rename it
accordingly.

13 years agoUpdate to new home page
Lutz Jänicke [Fri, 12 Jan 2007 18:47:13 +0000 (18:47 +0000)]
Update to new home page

13 years agoMontgomery multiplication for ARMv4.
Andy Polyakov [Thu, 11 Jan 2007 21:43:25 +0000 (21:43 +0000)]
Montgomery multiplication for ARMv4.

13 years agoremove undefined constant
Nils Larsch [Wed, 3 Jan 2007 20:00:32 +0000 (20:00 +0000)]
remove undefined constant

13 years agoopensslwrap.sh to respect $OPENSSL_ENGINES.
Andy Polyakov [Fri, 29 Dec 2006 15:00:36 +0000 (15:00 +0000)]
opensslwrap.sh to respect $OPENSSL_ENGINES.

13 years ago#include <stddef.h> in digest headers.
Andy Polyakov [Fri, 29 Dec 2006 14:51:42 +0000 (14:51 +0000)]
#include <stddef.h> in digest headers.

Submitted by: Kurt Roeckx <kurt@roeckx.be>

13 years agoMontgomery multiplication for MIPS III/IV. Not engaged.
Andy Polyakov [Fri, 29 Dec 2006 11:09:33 +0000 (11:09 +0000)]
Montgomery multiplication for MIPS III/IV. Not engaged.

13 years agoMinor clean-up in crypto/bn/asm.
Andy Polyakov [Fri, 29 Dec 2006 11:05:20 +0000 (11:05 +0000)]
Minor clean-up in crypto/bn/asm.

13 years agoMinor clean-up in crypto/engine.
Andy Polyakov [Fri, 29 Dec 2006 10:55:43 +0000 (10:55 +0000)]
Minor clean-up in crypto/engine.

13 years agoAllow opensslwrap.sh to access engines from build tree.
Andy Polyakov [Fri, 29 Dec 2006 10:53:09 +0000 (10:53 +0000)]
Allow opensslwrap.sh to access engines from build tree.

13 years agoMove eng_padlock.c to ./engines.
Andy Polyakov [Fri, 29 Dec 2006 10:42:24 +0000 (10:42 +0000)]
Move eng_padlock.c to ./engines.

Submitted by: Michal Ludvig <michal@logix.cz>

13 years agoMinor performance improvements to x86-mont.pl.
Andy Polyakov [Thu, 28 Dec 2006 12:43:16 +0000 (12:43 +0000)]
Minor performance improvements to x86-mont.pl.

13 years agoFix for "strange errors" exposed by ccgost engine. The fix is
Andy Polyakov [Wed, 27 Dec 2006 10:59:51 +0000 (10:59 +0000)]
Fix for "strange errors" exposed by ccgost engine. The fix is
two extra insructions in sqradd loop at line #503.

13 years agofix return value of get_cert_chain()
Nils Larsch [Wed, 27 Dec 2006 09:40:52 +0000 (09:40 +0000)]
fix return value of get_cert_chain()

PR: 1441

13 years agoSynchronise a bit more with Unixly build
Richard Levitte [Tue, 26 Dec 2006 21:20:15 +0000 (21:20 +0000)]
Synchronise a bit more with Unixly build

13 years agoNeeded definition of _XOPEN_SOURCE_EXTENDED so DEC C on VMS will see
Richard Levitte [Mon, 25 Dec 2006 10:54:14 +0000 (10:54 +0000)]
Needed definition of _XOPEN_SOURCE_EXTENDED so DEC C on VMS will see
the declarations of fd_set, select() and so on.

13 years agoReplace strdup() with BUF_strdup().
Richard Levitte [Mon, 25 Dec 2006 09:43:46 +0000 (09:43 +0000)]
Replace strdup() with BUF_strdup().

13 years agoSynchronise with Unixly build, again ;-)
Richard Levitte [Sun, 24 Dec 2006 20:25:51 +0000 (20:25 +0000)]
Synchronise with Unixly build, again ;-)

13 years agoAdd bit I missed from PKCS#7 streaming encoder.
Dr. Stephen Henson [Sun, 24 Dec 2006 16:46:47 +0000 (16:46 +0000)]
Add bit I missed from PKCS#7 streaming encoder.

13 years agoExperimental streaming PKCS#7 support.
Dr. Stephen Henson [Sun, 24 Dec 2006 16:22:56 +0000 (16:22 +0000)]
Experimental streaming PKCS#7 support.

I thought it was about time I dusted this off. This stuff had been sitting on
my hard drive for *ages* (2003 in fact). Hasn't been tested well and may not
work properly.

Nothing uses it at present which is just as well.

Think of this as a traditional Christmas present which looks far more
impressive in the adverts and on the box, some of the bits are missing and
falls to bits if you play with it too much.

13 years agoSynchronise with Unixly build
Richard Levitte [Sun, 24 Dec 2006 09:27:23 +0000 (09:27 +0000)]
Synchronise with Unixly build

13 years agoOops! New prototype code creeped through...
Andy Polyakov [Fri, 22 Dec 2006 15:47:01 +0000 (15:47 +0000)]
Oops! New prototype code creeped through...

13 years agoMake sha.h more "portable."
Andy Polyakov [Fri, 22 Dec 2006 15:42:06 +0000 (15:42 +0000)]
Make sha.h more "portable."

13 years agox86-mont.pl sse2 tune-up and integer-only squaring procedure.
Andy Polyakov [Fri, 22 Dec 2006 15:28:07 +0000 (15:28 +0000)]
x86-mont.pl sse2 tune-up and integer-only squaring procedure.

13 years agouse OPENSSL_NO_DYNAMIC_ENGINE macro, disable debug messages
Nils Larsch [Fri, 22 Dec 2006 09:21:29 +0000 (09:21 +0000)]
use OPENSSL_NO_DYNAMIC_ENGINE macro, disable debug messages

PR: 1440
Submitted by: Victor B. Wagner" <vitus@cryptocom.ru>

13 years agofix typos
Nils Larsch [Thu, 21 Dec 2006 21:13:27 +0000 (21:13 +0000)]
fix typos

PR: 1354, 1355, 1398, 1408

13 years agoupdate pkcs12 help message + manpage
Nils Larsch [Thu, 21 Dec 2006 20:36:15 +0000 (20:36 +0000)]
update pkcs12 help message + manpage

PR: 1443
Submitted by: Artem Chuprina <ran@cryptocom.ru>

13 years agofix order
Nils Larsch [Thu, 21 Dec 2006 19:50:48 +0000 (19:50 +0000)]
fix order

PR: 1442

13 years agoupdate
Nils Larsch [Thu, 21 Dec 2006 19:48:47 +0000 (19:48 +0000)]
update

13 years agoadd support for ecdsa-with-sha256 etc.
Nils Larsch [Wed, 20 Dec 2006 08:58:54 +0000 (08:58 +0000)]
add support for ecdsa-with-sha256 etc.

13 years agoremove trailing '\'
Nils Larsch [Tue, 19 Dec 2006 19:49:02 +0000 (19:49 +0000)]
remove trailing '\'

PR: 1438

13 years agoFix the BIT STRING encoding of EC points or parameter seeds
Bodo Möller [Tue, 19 Dec 2006 15:11:37 +0000 (15:11 +0000)]
Fix the BIT STRING encoding of EC points or parameter seeds
(need to prevent the removal of trailing zero bits).

13 years agofix order
Nils Larsch [Mon, 18 Dec 2006 22:20:27 +0000 (22:20 +0000)]
fix order

13 years agoproperly initialize SSL context, check return value
Nils Larsch [Wed, 13 Dec 2006 22:06:37 +0000 (22:06 +0000)]
properly initialize SSL context, check return value

13 years agouse const ASN1_TIME *
Nils Larsch [Mon, 11 Dec 2006 22:35:51 +0000 (22:35 +0000)]
use const ASN1_TIME *

13 years agoEliminate 64-bit alignment limitation in sparcv9a-mont.
Andy Polyakov [Fri, 8 Dec 2006 15:18:41 +0000 (15:18 +0000)]
Eliminate 64-bit alignment limitation in sparcv9a-mont.