openssl.git
14 years agosome updates for the blinding code; summary:
Nils Larsch [Tue, 26 Apr 2005 22:31:48 +0000 (22:31 +0000)]
some updates for the blinding code; summary:
- possibility of re-creation of the blinding parameters after a
  fixed number of uses (suggested by Bodo)
- calculatition of the rsa::e in case it's absent and p and q
  are present (see bug report #785)
- improve the performance when if one rsa structure is shared by
  more than a thread (see bug report #555)
- fix the problem described in bug report #827
- hide the definition ot the BN_BLINDING structure in bn_blind.c

14 years agoRemove more false positives.
Dr. Stephen Henson [Tue, 26 Apr 2005 22:25:10 +0000 (22:25 +0000)]
Remove more false positives.

14 years agoPort from stable branch.
Dr. Stephen Henson [Tue, 26 Apr 2005 22:07:17 +0000 (22:07 +0000)]
Port from stable branch.

14 years agoRemove more false positives.
Dr. Stephen Henson [Tue, 26 Apr 2005 22:05:19 +0000 (22:05 +0000)]
Remove more false positives.

14 years agoFix various incorrect error function codes.
Bodo Möller [Tue, 26 Apr 2005 18:53:22 +0000 (18:53 +0000)]
Fix various incorrect error function codes.

("perl util/ck_errf.pl */*.c */*/*.c" still reports many more.)

14 years agotake OPENSSL_NO_DGRAM into account
Bodo Möller [Tue, 26 Apr 2005 18:48:02 +0000 (18:48 +0000)]
take OPENSSL_NO_DGRAM into account
(via make update)

14 years agolet mkdef.pl know about OPENSSL_NO_DGRAM
Bodo Möller [Tue, 26 Apr 2005 18:21:25 +0000 (18:21 +0000)]
let mkdef.pl know about OPENSSL_NO_DGRAM
(which appears in the new file crypto/bio/bss_dgram.c)

14 years agoremove some functions from exported headers
Bodo Möller [Tue, 26 Apr 2005 18:18:35 +0000 (18:18 +0000)]
remove some functions from exported headers

14 years agomake update
Bodo Möller [Tue, 26 Apr 2005 18:09:21 +0000 (18:09 +0000)]
make update

14 years agofix SSLerr stuff for DTLS1 code;
Bodo Möller [Tue, 26 Apr 2005 18:08:00 +0000 (18:08 +0000)]
fix SSLerr stuff for DTLS1 code;
move some functions from exported header <openssl/dtl1.h> into "ssl_locl.h";
fix silly indentation (a TAB is *not* always 4 spaces)

14 years agoFixes for signed/unsigned warnings and shadows.
Dr. Stephen Henson [Tue, 26 Apr 2005 17:43:53 +0000 (17:43 +0000)]
Fixes for signed/unsigned warnings and shadows.

14 years agoFalse positive removed.
Dr. Stephen Henson [Tue, 26 Apr 2005 17:37:21 +0000 (17:37 +0000)]
False positive removed.

14 years agoAdd DTLS support.
Ben Laurie [Tue, 26 Apr 2005 16:02:40 +0000 (16:02 +0000)]
Add DTLS support.

14 years agomake depend.
Ben Laurie [Tue, 26 Apr 2005 13:56:36 +0000 (13:56 +0000)]
make depend.

14 years agoremove false positive
Nils Larsch [Tue, 26 Apr 2005 08:17:58 +0000 (08:17 +0000)]
remove false positive

14 years agosome more false positives to remove
Bodo Möller [Mon, 25 Apr 2005 23:19:07 +0000 (23:19 +0000)]
some more false positives to remove

14 years agomake update
Bodo Möller [Mon, 25 Apr 2005 23:17:30 +0000 (23:17 +0000)]
make update

14 years agomove some more entries into FIPS file
Bodo Möller [Mon, 25 Apr 2005 23:16:58 +0000 (23:16 +0000)]
move some more entries into FIPS file

14 years agoUse OPENSSL_NO_CAST, not OPENSSL_NO_CAST5 in e_old.c
Bodo Möller [Mon, 25 Apr 2005 23:09:00 +0000 (23:09 +0000)]
Use OPENSSL_NO_CAST, not OPENSSL_NO_CAST5 in e_old.c

PR: 959

14 years agoRemove some more entries that are false positives, or have been
Bodo Möller [Mon, 25 Apr 2005 23:06:15 +0000 (23:06 +0000)]
Remove some more entries that are false positives, or have been
resolved by recent commits.

14 years agoSort out changes in FIPS and other changes, collected in separate files.
Bodo Möller [Mon, 25 Apr 2005 22:55:24 +0000 (22:55 +0000)]
Sort out changes in FIPS and other changes, collected in separate files.
(Also remove another "make update".)

14 years agoremove some more false positives
Bodo Möller [Mon, 25 Apr 2005 22:08:13 +0000 (22:08 +0000)]
remove some more false positives

14 years agoremove some more false positives
Bodo Möller [Mon, 25 Apr 2005 22:02:34 +0000 (22:02 +0000)]
remove some more false positives

14 years agoremove some more changes that came from HEAD
Bodo Möller [Mon, 25 Apr 2005 21:54:14 +0000 (21:54 +0000)]
remove some more changes that came from HEAD

14 years agofix editing error, and remove a false positive
Bodo Möller [Mon, 25 Apr 2005 21:53:08 +0000 (21:53 +0000)]
fix editing error, and remove a false positive

14 years agoupdate
Bodo Möller [Mon, 25 Apr 2005 21:42:14 +0000 (21:42 +0000)]
update

14 years agoremove extra whitespace; fix link
Bodo Möller [Mon, 25 Apr 2005 21:36:56 +0000 (21:36 +0000)]
remove extra whitespace; fix link

14 years agoremove some false positives
Bodo Möller [Mon, 25 Apr 2005 21:32:52 +0000 (21:32 +0000)]
remove some false positives

14 years agoadd recent changes; now this file is up-to-date
Bodo Möller [Mon, 25 Apr 2005 21:25:48 +0000 (21:25 +0000)]
add recent changes; now this file is up-to-date

14 years agobring up-to-date
Bodo Möller [Mon, 25 Apr 2005 21:22:08 +0000 (21:22 +0000)]
bring up-to-date

14 years agofirst step to melt down ChangeLog.0_9_7-stable_not-in-head :-)
Bodo Möller [Mon, 25 Apr 2005 21:06:05 +0000 (21:06 +0000)]
first step to melt down ChangeLog.0_9_7-stable_not-in-head :-)

14 years agoThis is a collection of those CVS change log entries for the 0.9.7
Bodo Möller [Mon, 25 Apr 2005 21:01:31 +0000 (21:01 +0000)]
This is a collection of those CVS change log entries for the 0.9.7
branch (OpenSSL_0_9_7-stable) that do not appear similarly in
0.9.8-dev (CVS head).

Some obvious false positives have been eliminated: e.g., we do not
care about a simple "make update"; and we don't care about changes
identified to the 0.9.7 branch that were explicitly identified as
backports from head.

Eliminating all other entries (and finally this file), either as false
positives or as things that should go into 0.9.8, remains to be done.

14 years agoAvoid L1 cache aliasing even between key and S-boxes.
Andy Polyakov [Sun, 24 Apr 2005 21:09:20 +0000 (21:09 +0000)]
Avoid L1 cache aliasing even between key and S-boxes.

14 years agoFlag changes in Configure and config, too.
Ben Laurie [Sun, 24 Apr 2005 12:02:49 +0000 (12:02 +0000)]
Flag changes in Configure and config, too.

Update dependencies.

14 years agoupdate
Nils Larsch [Sun, 24 Apr 2005 09:17:48 +0000 (09:17 +0000)]
update

14 years agoOops...
Dr. Stephen Henson [Sun, 24 Apr 2005 02:24:53 +0000 (02:24 +0000)]
Oops...

14 years agoRecognize zlib and krb5 options in mk1mf.pl
Dr. Stephen Henson [Sun, 24 Apr 2005 02:21:02 +0000 (02:21 +0000)]
Recognize zlib and krb5 options in mk1mf.pl

14 years agomake asn.1 field names const
Nils Larsch [Sat, 23 Apr 2005 13:45:49 +0000 (13:45 +0000)]
make asn.1 field names const

14 years agochange prototype of the ecdh KDF: make input parameter const and the outlen argument...
Nils Larsch [Sat, 23 Apr 2005 10:11:16 +0000 (10:11 +0000)]
change prototype of the ecdh KDF: make input parameter const and the outlen argument  more flexible

14 years agoAdd debug target, remove cast, note possible bug.
Ben Laurie [Sat, 23 Apr 2005 06:05:24 +0000 (06:05 +0000)]
Add debug target, remove cast, note possible bug.

14 years agoAdd prototypes.
Ben Laurie [Fri, 22 Apr 2005 23:57:46 +0000 (23:57 +0000)]
Add prototypes.

14 years agomore const
Nils Larsch [Fri, 22 Apr 2005 21:57:36 +0000 (21:57 +0000)]
more const

14 years agomake update
Nils Larsch [Fri, 22 Apr 2005 20:17:17 +0000 (20:17 +0000)]
make update

14 years ago- use BN_set_negative and BN_is_negative instead of BN_set_sign
Nils Larsch [Fri, 22 Apr 2005 20:02:44 +0000 (20:02 +0000)]
- use BN_set_negative and BN_is_negative instead of BN_set_sign
  and BN_get_sign
- implement BN_set_negative as a function
- always use "#define BN_is_zero(a) ((a)->top == 0)"

14 years agoAvoid aliasing between stack frames and S-boxes. Compress prefetch code.
Andy Polyakov [Fri, 22 Apr 2005 11:49:32 +0000 (11:49 +0000)]
Avoid aliasing between stack frames and S-boxes. Compress prefetch code.

14 years agothe pointer to the message digest is const
Nils Larsch [Thu, 21 Apr 2005 09:43:09 +0000 (09:43 +0000)]
the pointer to the message digest is const

14 years agoProvide a default OPENSSL_ia32cap_loc for non-Intel platforms where
Richard Levitte [Thu, 21 Apr 2005 09:10:19 +0000 (09:10 +0000)]
Provide a default OPENSSL_ia32cap_loc for non-Intel platforms where
util/libeay.num is important when building shared libraries, like
VMS.

14 years agoDon't use standard kerberos library locations in MK1MF builds.
Dr. Stephen Henson [Thu, 21 Apr 2005 00:46:28 +0000 (00:46 +0000)]
Don't use standard kerberos library locations in MK1MF builds.

Fix typo in mk1mf.pl

14 years agoMake kerberos ciphersuite code compile again.
Dr. Stephen Henson [Wed, 20 Apr 2005 21:48:48 +0000 (21:48 +0000)]
Make kerberos ciphersuite code compile again.

Avoid more shadow warnings.

14 years agoRename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts.
Dr. Stephen Henson [Wed, 20 Apr 2005 21:48:06 +0000 (21:48 +0000)]
Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts.

Remove more bogus shadow warnings.

14 years agoStop compiler warnings about deprecated lvalue casts.
Dr. Stephen Henson [Wed, 20 Apr 2005 21:39:13 +0000 (21:39 +0000)]
Stop compiler warnings about deprecated lvalue casts.

14 years agoStop bogus shadowing warning.
Dr. Stephen Henson [Wed, 20 Apr 2005 21:34:29 +0000 (21:34 +0000)]
Stop bogus shadowing warning.

14 years agoProcess MINFO file earlier in mk1mf.pl so it can modify variables like CFLAGS.
Dr. Stephen Henson [Wed, 20 Apr 2005 16:22:58 +0000 (16:22 +0000)]
Process MINFO file earlier in mk1mf.pl so it can modify variables like CFLAGS.

Process kerberos include and library options.

14 years agoHandle similar mk1mf.pl options with a hash table.
Dr. Stephen Henson [Wed, 20 Apr 2005 16:01:50 +0000 (16:01 +0000)]
Handle similar mk1mf.pl options with a hash table.

14 years agosigned vs. unsigned.
Richard Levitte [Wed, 20 Apr 2005 13:21:10 +0000 (13:21 +0000)]
signed vs. unsigned.

14 years agoMake sure id2_func is properly cast as well...
Richard Levitte [Wed, 20 Apr 2005 13:17:42 +0000 (13:17 +0000)]
Make sure id2_func is properly cast as well...

14 years agosigned vs. unsigned.
Richard Levitte [Wed, 20 Apr 2005 13:12:33 +0000 (13:12 +0000)]
signed vs. unsigned.

14 years agoAvoid compiler complaint about mismatched function signatures
Richard Levitte [Wed, 20 Apr 2005 13:09:46 +0000 (13:09 +0000)]
Avoid compiler complaint about mismatched function signatures
(void * != char *)

14 years agoResolve signed vs. unsigned.
Richard Levitte [Wed, 20 Apr 2005 12:55:15 +0000 (12:55 +0000)]
Resolve signed vs. unsigned.

14 years agoType mismatch detected by DEC C compiler. void* != void**
Richard Levitte [Wed, 20 Apr 2005 12:53:50 +0000 (12:53 +0000)]
Type mismatch detected by DEC C compiler.  void* != void**

14 years agoAvoid compiler complaint about mismatched function signatures
Richard Levitte [Wed, 20 Apr 2005 10:02:16 +0000 (10:02 +0000)]
Avoid compiler complaint about mismatched function signatures
(void * != RSA *)

14 years agoFix logic in mkdef.pl function is_valid.
Dr. Stephen Henson [Tue, 19 Apr 2005 23:54:44 +0000 (23:54 +0000)]
Fix logic in mkdef.pl function is_valid.

Update symbols

14 years agoStop perl warning.
Dr. Stephen Henson [Tue, 19 Apr 2005 18:57:17 +0000 (18:57 +0000)]
Stop perl warning.

14 years agoNew "algorithm define" OPENSSL_NO_GMP. Update mkdef.pl and Configure script
Dr. Stephen Henson [Tue, 19 Apr 2005 13:24:44 +0000 (13:24 +0000)]
New "algorithm define" OPENSSL_NO_GMP. Update mkdef.pl and Configure script
to use it.

14 years agoIgnore TYPEDEF_OF in mkdef.pl
Dr. Stephen Henson [Tue, 19 Apr 2005 11:49:25 +0000 (11:49 +0000)]
Ignore TYPEDEF_OF in mkdef.pl

14 years agoUpdate year.
Dr. Stephen Henson [Tue, 19 Apr 2005 00:15:18 +0000 (00:15 +0000)]
Update year.

14 years agoVarious Win32 and other fixes for warnings and compilation errors.
Dr. Stephen Henson [Tue, 19 Apr 2005 00:12:36 +0000 (00:12 +0000)]
Various Win32 and other fixes for warnings and compilation errors.

Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.

14 years agoThrow in x86_64 AT&T to MASM assembler converter to facilitate development
Andy Polyakov [Sun, 17 Apr 2005 21:05:57 +0000 (21:05 +0000)]
Throw in x86_64 AT&T to MASM assembler converter to facilitate development
of dual-ABI Unix/Win64 modules.

14 years agoFix from stable branch.
Dr. Stephen Henson [Sun, 17 Apr 2005 13:59:36 +0000 (13:59 +0000)]
Fix from stable branch.

14 years agoSynchronise with ec/Makefile.
Richard Levitte [Sun, 17 Apr 2005 09:07:37 +0000 (09:07 +0000)]
Synchronise with ec/Makefile.

14 years agoMitigate cache-timing attack in CBC mode. This is done by implementing
Andy Polyakov [Sat, 16 Apr 2005 15:23:21 +0000 (15:23 +0000)]
Mitigate cache-timing attack in CBC mode. This is done by implementing
compressed tables (2x compression factor) and by pre-fetching them into
processor cache prior every CBC en-/decryption pass. One can argue why
just CBC? Well, it's commonly used mode in real-life applications and
API allows us to amortize the prefetch costs for larger data chunks...

14 years agoconst fixes
Nils Larsch [Fri, 15 Apr 2005 18:29:33 +0000 (18:29 +0000)]
const fixes

14 years agoEVP_CIPHER_CTX_init is a void function + fix typo
Nils Larsch [Fri, 15 Apr 2005 16:01:35 +0000 (16:01 +0000)]
EVP_CIPHER_CTX_init is a void function + fix typo

PR: 1044 + 1045

14 years agoCheck return values of <Digest>_Init functions in low level digest calls.
Dr. Stephen Henson [Thu, 14 Apr 2005 22:58:44 +0000 (22:58 +0000)]
Check return values of <Digest>_Init functions in low level digest calls.

14 years agoPrototype mnemonics in padlock_verify_context for better portability
Andy Polyakov [Thu, 14 Apr 2005 07:47:10 +0000 (07:47 +0000)]
Prototype mnemonics in padlock_verify_context for better portability
[read support for Solaris assembler].

14 years agoFix for bug emerged in openvpn conext.
Andy Polyakov [Thu, 14 Apr 2005 07:41:29 +0000 (07:41 +0000)]
Fix for bug emerged in openvpn conext.

14 years agoFinal touch to mingw shared.
Andy Polyakov [Wed, 13 Apr 2005 23:54:28 +0000 (23:54 +0000)]
Final touch to mingw shared.

14 years agoMore cover-ups, removing OPENSSL_GLOBAL/EXTERNS. We can remove more...
Andy Polyakov [Wed, 13 Apr 2005 21:46:30 +0000 (21:46 +0000)]
More cover-ups, removing OPENSSL_GLOBAL/EXTERNS. We can remove more...

14 years agoAddenum to http://cvs.openssl.org/chngview?cn=13054.
Andy Polyakov [Wed, 13 Apr 2005 21:10:07 +0000 (21:10 +0000)]
Addenum to cvs.openssl.org/chngview?cn=13054.

14 years agoFinal(?) touches to mingw shared support.
Andy Polyakov [Wed, 13 Apr 2005 21:08:39 +0000 (21:08 +0000)]
Final(?) touches to mingw shared support.

14 years agoZap OPENSSL_EXTERN on symbols, which are not meant to be local to DLL.
Andy Polyakov [Wed, 13 Apr 2005 20:51:42 +0000 (20:51 +0000)]
Zap OPENSSL_EXTERN on symbols, which are not meant to be local to DLL.

14 years agoMakefile.ssl -> Makefile
Nils Larsch [Wed, 13 Apr 2005 19:09:43 +0000 (19:09 +0000)]
Makefile.ssl -> Makefile

14 years agoFix typos.
Andy Polyakov [Wed, 13 Apr 2005 15:41:11 +0000 (15:41 +0000)]
Fix typos.

14 years agoIntroduce OPENSSL_NONPIC_relocated to denote relocated DLLs.
Andy Polyakov [Wed, 13 Apr 2005 08:46:35 +0000 (08:46 +0000)]
Introduce OPENSSL_NONPIC_relocated to denote relocated DLLs.

14 years agoParameterize do_solaris rules in Makefile.shared.
Andy Polyakov [Wed, 13 Apr 2005 07:22:41 +0000 (07:22 +0000)]
Parameterize do_solaris rules in Makefile.shared.

14 years agoMinor cryptlib.c update: compiler warnings in OPENSSL_showfatal and
Andy Polyakov [Wed, 13 Apr 2005 06:55:42 +0000 (06:55 +0000)]
Minor cryptlib.c update: compiler warnings in OPENSSL_showfatal and
OPENSSL_stderr stub.

14 years agoUpdate FAQ.
Dr. Stephen Henson [Tue, 12 Apr 2005 16:38:00 +0000 (16:38 +0000)]
Update FAQ.

14 years agoMore overwritten stuff...
Dr. Stephen Henson [Tue, 12 Apr 2005 16:36:36 +0000 (16:36 +0000)]
More overwritten stuff...

14 years agoReplace overwritten lines before error codes.
Dr. Stephen Henson [Tue, 12 Apr 2005 16:17:53 +0000 (16:17 +0000)]
Replace overwritten lines before error codes.

14 years agoRebuild error codes.
Dr. Stephen Henson [Tue, 12 Apr 2005 16:15:22 +0000 (16:15 +0000)]
Rebuild error codes.

14 years agoInclude error library value in C error source files instead of fixing up
Dr. Stephen Henson [Tue, 12 Apr 2005 13:31:14 +0000 (13:31 +0000)]
Include error library value in C error source files instead of fixing up
at runtime.

14 years agoinclude limits.h for UINT_MAX etc.
Nils Larsch [Mon, 11 Apr 2005 20:59:58 +0000 (20:59 +0000)]
include limits.h for UINT_MAX etc.

14 years agoAdd a NEWS item for 0.9.7g.
Richard Levitte [Mon, 11 Apr 2005 15:05:45 +0000 (15:05 +0000)]
Add a NEWS item for 0.9.7g.

14 years agoAdd emacs cache files to .cvsignore.
Richard Levitte [Mon, 11 Apr 2005 14:17:07 +0000 (14:17 +0000)]
Add emacs cache files to .cvsignore.

14 years agoMove allow_proxy_certs declaration to start of function.
Dr. Stephen Henson [Sun, 10 Apr 2005 23:41:09 +0000 (23:41 +0000)]
Move allow_proxy_certs declaration to start of function.

14 years agoMake kerberos ciphersuite code work with newer header files
Dr. Stephen Henson [Sat, 9 Apr 2005 23:55:55 +0000 (23:55 +0000)]
Make kerberos ciphersuite code work with newer header files

14 years agoAdded restrictions on the use of proxy certificates, as they may pose
Richard Levitte [Sat, 9 Apr 2005 16:07:12 +0000 (16:07 +0000)]
Added restrictions on the use of proxy certificates, as they may pose
a security threat on unexpecting applications.  Document and test.

14 years agoadd support for DER encoded private keys to SSL_CTX_use_PrivateKey_file()
Nils Larsch [Fri, 8 Apr 2005 22:52:42 +0000 (22:52 +0000)]
add support for DER encoded private keys to SSL_CTX_use_PrivateKey_file()
and SSL_use_PrivateKey_file()

PR: 1035
Submitted by: Walter Goulet
Reviewed by:  Nils Larsch

14 years agoimprove docu of SSL_CTX_use_PrivateKey()
Nils Larsch [Fri, 8 Apr 2005 22:49:57 +0000 (22:49 +0000)]
improve docu of SSL_CTX_use_PrivateKey()

14 years agoget rid of very buggy and very imcomplete DH cert support
Nils Larsch [Thu, 7 Apr 2005 23:19:17 +0000 (23:19 +0000)]
get rid of very buggy and very imcomplete DH cert support

Reviewed by: Bodo Moeller