openssl.git
6 years agomake depend
Dr. Stephen Henson [Mon, 19 Nov 2012 13:18:09 +0000 (13:18 +0000)]
make depend

6 years agodon't call gethostbyname if OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set
Dr. Stephen Henson [Mon, 19 Nov 2012 12:36:04 +0000 (12:36 +0000)]
don't call gethostbyname if OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set

6 years agoremove obsolete code
Dr. Stephen Henson [Mon, 19 Nov 2012 03:46:49 +0000 (03:46 +0000)]
remove obsolete code

6 years agofix typo and warning
Dr. Stephen Henson [Mon, 19 Nov 2012 02:46:46 +0000 (02:46 +0000)]
fix typo and warning

6 years agoclarify docs
Dr. Stephen Henson [Sun, 18 Nov 2012 18:06:16 +0000 (18:06 +0000)]
clarify docs

6 years agofix manual page file name
Dr. Stephen Henson [Sun, 18 Nov 2012 17:58:45 +0000 (17:58 +0000)]
fix manual page file name

6 years agodocument -naccept option
Dr. Stephen Henson [Sun, 18 Nov 2012 15:51:26 +0000 (15:51 +0000)]
document -naccept option

6 years agoadd -naccept <n> option to s_server to automatically exit after <n> connections
Dr. Stephen Henson [Sun, 18 Nov 2012 15:45:16 +0000 (15:45 +0000)]
add -naccept <n> option to s_server to automatically exit after <n> connections

6 years agoPR: 2880
Dr. Stephen Henson [Sun, 18 Nov 2012 15:24:37 +0000 (15:24 +0000)]
PR: 2880
Submitted by: "Florian Rüchel" <florian.ruechel@ruhr-uni-bochum.de>

Correctly handle local machine keys in the capi ENGINE.

6 years agoPR: 2909
Dr. Stephen Henson [Sun, 18 Nov 2012 15:13:55 +0000 (15:13 +0000)]
PR: 2909
Contributed by: Florian Weimer <fweimer@redhat.com>

Fixes to X509 hostname and email address checking. Wildcard matching support.
New test program and manual page.

6 years agoremove redundant code from demo
Dr. Stephen Henson [Sun, 18 Nov 2012 14:47:25 +0000 (14:47 +0000)]
remove redundant code from demo

6 years agocryptlib.c: revert typo.
Andy Polyakov [Sat, 17 Nov 2012 21:42:57 +0000 (21:42 +0000)]
cryptlib.c: revert typo.

6 years agoExtend OPENSSL_ia32cap_P with extra word to accomodate AVX2 capability.
Andy Polyakov [Sat, 17 Nov 2012 19:04:15 +0000 (19:04 +0000)]
Extend OPENSSL_ia32cap_P with extra word to accomodate AVX2 capability.

6 years agoperlasm/sparcv9_modes.pl: addendum to commit#22966.
Andy Polyakov [Sat, 17 Nov 2012 18:34:17 +0000 (18:34 +0000)]
perlasm/sparcv9_modes.pl: addendum to commit#22966.

6 years agofix error messages
Dr. Stephen Henson [Sat, 17 Nov 2012 15:22:50 +0000 (15:22 +0000)]
fix error messages

6 years agoDelegate command line handling for many common options in s_client/s_server
Dr. Stephen Henson [Sat, 17 Nov 2012 14:42:22 +0000 (14:42 +0000)]
Delegate command line handling for many common options in s_client/s_server
to the SSL_CONF APIs.

This is complicated a little because the SSL_CTX structure is not available
when the command line is processed: so just check syntax of commands initially
and store them, ready to apply later.

6 years agoinitial decription of GCM/CCM usage via EVP
Dr. Stephen Henson [Sat, 17 Nov 2012 14:38:20 +0000 (14:38 +0000)]
initial decription of GCM/CCM usage via EVP

6 years agoSupport for SPARC T4 MONT[MUL|SQR] instructions.
Andy Polyakov [Sat, 17 Nov 2012 10:34:11 +0000 (10:34 +0000)]
Support for SPARC T4 MONT[MUL|SQR] instructions.

Submitted by: David Miller, Andy Polyakov

6 years agofix typos in SSL_CONF documentation
Dr. Stephen Henson [Sat, 17 Nov 2012 00:21:34 +0000 (00:21 +0000)]
fix typos in SSL_CONF documentation

6 years agoadd SSL_CONF functions and documentation
Dr. Stephen Henson [Fri, 16 Nov 2012 19:12:24 +0000 (19:12 +0000)]
add SSL_CONF functions and documentation

6 years agotypo
Dr. Stephen Henson [Fri, 16 Nov 2012 12:49:14 +0000 (12:49 +0000)]
typo

6 years agoupdate ciphers documentation to indicate implemented fixed DH ciphersuites
Dr. Stephen Henson [Fri, 16 Nov 2012 01:15:15 +0000 (01:15 +0000)]
update ciphers documentation to indicate implemented fixed DH ciphersuites

6 years agoinitial update of ciphers doc
Dr. Stephen Henson [Fri, 16 Nov 2012 00:42:38 +0000 (00:42 +0000)]
initial update of ciphers doc

6 years agonew command line option -stdname to ciphers utility
Dr. Stephen Henson [Fri, 16 Nov 2012 00:35:46 +0000 (00:35 +0000)]
new command line option -stdname to ciphers utility

6 years agoadd "missing" TLSv1.2 cipher alias
Dr. Stephen Henson [Thu, 15 Nov 2012 19:14:47 +0000 (19:14 +0000)]
add "missing" TLSv1.2 cipher alias

6 years agoaes-x86_64.pl: Atom-specific optimizations, +10%.
Andy Polyakov [Mon, 12 Nov 2012 17:52:41 +0000 (17:52 +0000)]
aes-x86_64.pl: Atom-specific optimizations, +10%.
vpaes-x86_64.pl: minor performance squeeze.

6 years agoaes-586.pl: Atom-specific optimization, +44/29%, minor improvement on others.
Andy Polyakov [Mon, 12 Nov 2012 17:50:19 +0000 (17:50 +0000)]
aes-586.pl: Atom-specific optimization, +44/29%, minor improvement on others.
vpaes-x86.pl: minor performance squeeze.

6 years agoppccap.c: fix typo.
Andy Polyakov [Sat, 10 Nov 2012 20:27:18 +0000 (20:27 +0000)]
ppccap.c: fix typo.

6 years agoppccap.c: restrict features on AIX 5.
Andy Polyakov [Sat, 10 Nov 2012 20:24:51 +0000 (20:24 +0000)]
ppccap.c: restrict features on AIX 5.

6 years agobn_word.c: fix overflow bug in BN_add_word.
Andy Polyakov [Fri, 9 Nov 2012 13:58:40 +0000 (13:58 +0000)]
bn_word.c: fix overflow bug in BN_add_word.

6 years agonew feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for some opera...
Dr. Stephen Henson [Thu, 8 Nov 2012 14:24:51 +0000 (14:24 +0000)]
new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for some operations (currently curves and signature algorithms)

6 years agocontify
Dr. Stephen Henson [Mon, 5 Nov 2012 19:38:32 +0000 (19:38 +0000)]
contify

6 years agocrypto/modes: even more strict aliasing fixes [and fix bug in cbc128.c from
Andy Polyakov [Mon, 5 Nov 2012 17:03:39 +0000 (17:03 +0000)]
crypto/modes: even more strict aliasing fixes [and fix bug in cbc128.c from
previous cbc128.c commit].

6 years agoMore strict aliasing fix.
Ben Laurie [Mon, 5 Nov 2012 14:23:55 +0000 (14:23 +0000)]
More strict aliasing fix.

6 years agocorrect error function code
Dr. Stephen Henson [Mon, 5 Nov 2012 13:34:29 +0000 (13:34 +0000)]
correct error function code

6 years agocbc128.c: fix strict aliasing warning.
Andy Polyakov [Mon, 5 Nov 2012 10:04:02 +0000 (10:04 +0000)]
cbc128.c: fix strict aliasing warning.

6 years agoe_camillia.c: remove copy-n-paste artifact, EVP_CIPH_FLAG_FIPS, and
Andy Polyakov [Mon, 5 Nov 2012 09:20:41 +0000 (09:20 +0000)]
e_camillia.c: remove copy-n-paste artifact, EVP_CIPH_FLAG_FIPS, and
leave comment about CTR mode.

6 years agoghash-sparcv9.pl: 22% improvement on T4.
Andy Polyakov [Mon, 5 Nov 2012 08:47:26 +0000 (08:47 +0000)]
ghash-sparcv9.pl: 22% improvement on T4.

6 years agoRemove unused static function.
Ben Laurie [Mon, 5 Nov 2012 02:01:07 +0000 (02:01 +0000)]
Remove unused static function.

6 years agoFix gcc 4.8 warning (strict aliasing violation).
Ben Laurie [Mon, 5 Nov 2012 01:59:33 +0000 (01:59 +0000)]
Fix gcc 4.8 warning (strict aliasing violation).

6 years agomk1mf.pl: correct flags.
Andy Polyakov [Mon, 29 Oct 2012 22:23:58 +0000 (22:23 +0000)]
mk1mf.pl: correct flags.

6 years agoe_os.h: keep stdin redifinitions to "normal" Windows.
Andy Polyakov [Mon, 29 Oct 2012 20:55:08 +0000 (20:55 +0000)]
e_os.h: keep stdin redifinitions to "normal" Windows.

6 years agoutil/fipslink.pl: further adjustments.
Andy Polyakov [Sat, 27 Oct 2012 23:36:43 +0000 (23:36 +0000)]
util/fipslink.pl: further adjustments.

6 years agoutil/fipslink.pl: fix typo.
Andy Polyakov [Sat, 27 Oct 2012 21:21:09 +0000 (21:21 +0000)]
util/fipslink.pl: fix typo.

6 years agoe_os.h: skip redundant headers in fipscanister build.
Andy Polyakov [Sat, 27 Oct 2012 21:17:48 +0000 (21:17 +0000)]
e_os.h: skip redundant headers in fipscanister build.

6 years agoutil/fipslink.pl: allow for single-step link.
Andy Polyakov [Sat, 27 Oct 2012 21:16:45 +0000 (21:16 +0000)]
util/fipslink.pl: allow for single-step link.

6 years agoutil/pl/VC-32.pl: make fipscanister.lib universally usable.
Andy Polyakov [Sat, 27 Oct 2012 21:16:00 +0000 (21:16 +0000)]
util/pl/VC-32.pl: make fipscanister.lib universally usable.

6 years agotypo
Dr. Stephen Henson [Sat, 27 Oct 2012 18:05:56 +0000 (18:05 +0000)]
typo

6 years agotest_t4: cover even Camellia.
Andy Polyakov [Thu, 25 Oct 2012 12:10:44 +0000 (12:10 +0000)]
test_t4: cover even Camellia.

6 years agoSPARCv9 assembly pack: harmonize ABI handling (so that it's handled in one
Andy Polyakov [Thu, 25 Oct 2012 12:07:32 +0000 (12:07 +0000)]
SPARCv9 assembly pack: harmonize ABI handling (so that it's handled in one
place at a time, by pre-processor in .S case and perl - in .s).

6 years ago[aes|cmll]t4-sparcv9.pl: unify argument handling.
Andy Polyakov [Thu, 25 Oct 2012 12:03:41 +0000 (12:03 +0000)]
[aes|cmll]t4-sparcv9.pl: unify argument handling.

6 years agoperlasm/sparcv9_modes.pl: fix typo in IV save code and switch to less
Andy Polyakov [Thu, 25 Oct 2012 12:02:37 +0000 (12:02 +0000)]
perlasm/sparcv9_modes.pl: fix typo in IV save code and switch to less
aggressive ASI.

6 years agooops, add missing asn_mstbl.c
Dr. Stephen Henson [Wed, 24 Oct 2012 13:27:46 +0000 (13:27 +0000)]
oops, add missing asn_mstbl.c

6 years agoghash-sparcv9.pl: add VIS3 code path.
Andy Polyakov [Wed, 24 Oct 2012 08:21:10 +0000 (08:21 +0000)]
ghash-sparcv9.pl: add VIS3 code path.

6 years agoNew config module for string tables. This can be used to add new
Dr. Stephen Henson [Mon, 22 Oct 2012 13:05:54 +0000 (13:05 +0000)]
New config module for string tables. This can be used to add new
multi string components (as used in DN fields or request attributes)
or change the values of existing ones.

6 years agouse correct year automatically
Dr. Stephen Henson [Mon, 22 Oct 2012 13:02:42 +0000 (13:02 +0000)]
use correct year automatically

6 years agolinux-pcc: make it more robust and recognize KERNEL_BITS variable.
Andy Polyakov [Sun, 21 Oct 2012 18:19:41 +0000 (18:19 +0000)]
linux-pcc: make it more robust and recognize KERNEL_BITS variable.

6 years agoAdd VIS3-capable sparcv9-gf2m module.
Andy Polyakov [Sat, 20 Oct 2012 15:59:14 +0000 (15:59 +0000)]
Add VIS3-capable sparcv9-gf2m module.

6 years agoAdd VIS3 Montgomery multiplication.
Andy Polyakov [Sat, 20 Oct 2012 09:13:21 +0000 (09:13 +0000)]
Add VIS3 Montgomery multiplication.

6 years agofix ASN1_STRING_TABLE_add so it can override existing string table values
Dr. Stephen Henson [Fri, 19 Oct 2012 15:06:31 +0000 (15:06 +0000)]
fix ASN1_STRING_TABLE_add so it can override existing string table values

6 years agofix error code
Dr. Stephen Henson [Thu, 18 Oct 2012 16:21:39 +0000 (16:21 +0000)]
fix error code

6 years agoadd simple AES GCM code example
Dr. Stephen Henson [Tue, 16 Oct 2012 23:03:45 +0000 (23:03 +0000)]
add simple AES GCM code example

6 years agoDon't require tag before ciphertext in AESGCM mode
Dr. Stephen Henson [Tue, 16 Oct 2012 22:46:08 +0000 (22:46 +0000)]
Don't require tag before ciphertext in AESGCM mode

6 years agoaix[64]-cc: get MT support right (gcc targets are not affected).
Andy Polyakov [Tue, 16 Oct 2012 08:06:51 +0000 (08:06 +0000)]
aix[64]-cc: get MT support right (gcc targets are not affected).

6 years agosparcv9_modes.pl: membars are reported as must-have.
Andy Polyakov [Mon, 15 Oct 2012 14:04:52 +0000 (14:04 +0000)]
sparcv9_modes.pl: membars are reported as must-have.

6 years agomd5-sparcv9.pl: avoid %asi modifications, improve short input performance
Andy Polyakov [Sun, 14 Oct 2012 16:51:27 +0000 (16:51 +0000)]
md5-sparcv9.pl: avoid %asi modifications, improve short input performance
by 30-20%.

6 years ago[md5|sha1|sha512]-sparcv9.pl: "cooperative" optimizations based on
Andy Polyakov [Sun, 14 Oct 2012 14:46:56 +0000 (14:46 +0000)]
[md5|sha1|sha512]-sparcv9.pl: "cooperative" optimizations based on
suggestions from David Miller.

6 years ago[aes|cmll]t4-sparcv9.pl: addendum to previous sparcv9_modes.pl commit.
Andy Polyakov [Sun, 14 Oct 2012 14:42:27 +0000 (14:42 +0000)]
[aes|cmll]t4-sparcv9.pl: addendum to previous sparcv9_modes.pl commit.

6 years agoperlasm/sparcv9_modes.pl: "cooperative" optimizations based on suggestions
Andy Polyakov [Sun, 14 Oct 2012 14:25:00 +0000 (14:25 +0000)]
perlasm/sparcv9_modes.pl: "cooperative" optimizations based on suggestions
from David Miller.

6 years agoAdd SPARC T4 Camellia support.
Andy Polyakov [Thu, 11 Oct 2012 18:35:18 +0000 (18:35 +0000)]
Add SPARC T4 Camellia support.

Submitted by: David Miller

6 years agoaest4-sparcv9.pl: split it to AES-specific and reusable part.
Andy Polyakov [Thu, 11 Oct 2012 18:30:35 +0000 (18:30 +0000)]
aest4-sparcv9.pl: split it to AES-specific and reusable part.

6 years agooops, fix compilation errors in s_server
Dr. Stephen Henson [Thu, 11 Oct 2012 18:03:42 +0000 (18:03 +0000)]
oops, fix compilation errors in s_server

6 years agoNew functions to check a hostname email or IP address against a
Dr. Stephen Henson [Mon, 8 Oct 2012 15:10:07 +0000 (15:10 +0000)]
New functions to check a hostname email or IP address against a
certificate. Add options to s_client, s_server and x509 utilities
to print results of checks.

6 years agoAdd SPARC T4 AES support.
Andy Polyakov [Sat, 6 Oct 2012 18:08:09 +0000 (18:08 +0000)]
Add SPARC T4 AES support.

Submitted by: David Miller

6 years agoFix EC_KEY initialization race.
Bodo Möller [Fri, 5 Oct 2012 20:50:11 +0000 (20:50 +0000)]
Fix EC_KEY initialization race.

Submitted by: Adam Langley

6 years agoIf OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" as
Dr. Stephen Henson [Sun, 30 Sep 2012 12:39:27 +0000 (12:39 +0000)]
If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" as
a ciphersuite to position the SCSV value in different places for testing
purposes.

6 years agosha[1|512]-sparcv9.pl: add hardware SPARC T4 support.
Andy Polyakov [Fri, 28 Sep 2012 09:35:39 +0000 (09:35 +0000)]
sha[1|512]-sparcv9.pl: add hardware SPARC T4 support.

Submitted by: David Miller

6 years agomd5-sparcv9.pl: add hardware SPARC T4 support.
Andy Polyakov [Fri, 28 Sep 2012 09:34:09 +0000 (09:34 +0000)]
md5-sparcv9.pl: add hardware SPARC T4 support.

Submitted by: David Miller

6 years agosparc_arch.h: add assembler helpers (and make it work on Solaris).
Andy Polyakov [Fri, 28 Sep 2012 09:31:40 +0000 (09:31 +0000)]
sparc_arch.h: add assembler helpers (and make it work on Solaris).

Submitted by: David Miller

6 years agomd5-sparcv9.pl: more accurate performance result.
Andy Polyakov [Fri, 28 Sep 2012 09:25:49 +0000 (09:25 +0000)]
md5-sparcv9.pl: more accurate performance result.

6 years agoFix Valgrind warning.
Bodo Möller [Mon, 24 Sep 2012 19:49:16 +0000 (19:49 +0000)]
Fix Valgrind warning.

Submitted by: Adam Langley

6 years ago* Configure: make the debug-levitte-linux{elf,noasm} less extreme.
Richard Levitte [Mon, 24 Sep 2012 18:48:37 +0000 (18:48 +0000)]
* Configure: make the debug-levitte-linux{elf,noasm} less extreme.

6 years agoAdd md5-sparcv9.pl.
Andy Polyakov [Sun, 23 Sep 2012 20:39:53 +0000 (20:39 +0000)]
Add md5-sparcv9.pl.

6 years agosparcv9cap.c: add SPARC-T4 feature detection.
Andy Polyakov [Sun, 23 Sep 2012 20:29:03 +0000 (20:29 +0000)]
sparcv9cap.c: add SPARC-T4 feature detection.

Submitted by: David Miller

7 years ago* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in
Richard Levitte [Fri, 21 Sep 2012 13:08:24 +0000 (13:08 +0000)]
* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug.  Fortunately in
  debugging code that's seldom used.

7 years agoconfig: detect linux-mips* targets.
Andy Polyakov [Wed, 19 Sep 2012 20:58:07 +0000 (20:58 +0000)]
config: detect linux-mips* targets.

7 years agoConfigure: allow for compiler options starting with double dash.
Andy Polyakov [Tue, 18 Sep 2012 12:54:35 +0000 (12:54 +0000)]
Configure: allow for compiler options starting with double dash.

7 years agoMIPS assembly pack: add support for SmartMIPS ASE.
Andy Polyakov [Tue, 18 Sep 2012 12:52:23 +0000 (12:52 +0000)]
MIPS assembly pack: add support for SmartMIPS ASE.

7 years agoFix warning.
Bodo Möller [Mon, 17 Sep 2012 17:21:58 +0000 (17:21 +0000)]
Fix warning.

Submitted by: Chromium Authors

7 years agoConfigure: add MIPS targets.
Andy Polyakov [Sat, 15 Sep 2012 11:21:50 +0000 (11:21 +0000)]
Configure: add MIPS targets.

7 years agoMIPS assembly pack: add MIPS[32|64]R2 code.
Andy Polyakov [Sat, 15 Sep 2012 11:18:20 +0000 (11:18 +0000)]
MIPS assembly pack: add MIPS[32|64]R2 code.

7 years agoaes-mips.pl: interleave load and integer instructions for better performance.
Andy Polyakov [Sat, 15 Sep 2012 11:15:02 +0000 (11:15 +0000)]
aes-mips.pl: interleave load and integer instructions for better performance.

7 years agosha512-sparcv9.pl: fix binutils compilation error.
Andy Polyakov [Sat, 15 Sep 2012 08:53:25 +0000 (08:53 +0000)]
sha512-sparcv9.pl: fix binutils compilation error.

Submitted by: David Miller

7 years agoe_aes.c: uninitialized variable in aes_ccm_init_key.
Andy Polyakov [Sat, 15 Sep 2012 08:45:42 +0000 (08:45 +0000)]
e_aes.c: uninitialized variable in aes_ccm_init_key.

PR: 2874
Submitted by: Tomas Mraz

7 years agoAdd -rev test option to s_server to just reverse order of characters received
Dr. Stephen Henson [Fri, 14 Sep 2012 13:27:05 +0000 (13:27 +0000)]
Add -rev test option to s_server to just reverse order of characters received
by client and send back to server. Also prints an abbreviated summary of
the connection parameters.

7 years agoAdd -brief option to s_client and s_server to summarise connection details.
Dr. Stephen Henson [Wed, 12 Sep 2012 23:14:28 +0000 (23:14 +0000)]
Add -brief option to s_client and s_server to summarise connection details.

New option -verify_quiet to shut up the verify callback unless there is
an error.

7 years agoAdd ctrl and utility functions to retrieve raw cipher list sent by client in
Dr. Stephen Henson [Wed, 12 Sep 2012 13:57:48 +0000 (13:57 +0000)]
Add ctrl and utility functions to retrieve raw cipher list sent by client in
client hello message. Previously this could only be retrieved on an initial
connection and it was impossible to determine the cipher IDs of any uknown
ciphersuites.

7 years agoenhance EC method to support setting curve type when generating keys and add paramete...
Dr. Stephen Henson [Tue, 11 Sep 2012 13:54:09 +0000 (13:54 +0000)]
enhance EC method to support setting curve type when generating keys and add parameter encoding option

7 years agofix memory leak
Dr. Stephen Henson [Tue, 11 Sep 2012 13:43:57 +0000 (13:43 +0000)]
fix memory leak

7 years agoMinor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificate
Dr. Stephen Henson [Tue, 11 Sep 2012 13:34:08 +0000 (13:34 +0000)]
Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificate
change the current certificate (in s->cert->key) to the one used and then
SSL_get_certificate and SSL_get_privatekey will automatically work.