openssl.git
10 years agoHopefully resolve signed vs unsigned issue.
Richard Levitte [Wed, 28 Jan 2009 07:09:23 +0000 (07:09 +0000)]
Hopefully resolve signed vs unsigned issue.

10 years agoDo the Camellia part right
Richard Levitte [Wed, 28 Jan 2009 07:01:29 +0000 (07:01 +0000)]
Do the Camellia part right

10 years agoSynchronise with Unix build
Richard Levitte [Tue, 20 Jan 2009 05:39:24 +0000 (05:39 +0000)]
Synchronise with Unix build

10 years agoAllow CC to be overridden.
Ben Laurie [Sun, 18 Jan 2009 12:06:37 +0000 (12:06 +0000)]
Allow CC to be overridden.

10 years agoUpdate certificate hash line format to handle canonical format
Dr. Stephen Henson [Thu, 15 Jan 2009 13:22:39 +0000 (13:22 +0000)]
Update certificate hash line format to handle canonical format
and avoid MD5 dependency.

10 years agoMake PKCS#8 the standard write format for private keys, replacing the
Dr. Stephen Henson [Thu, 15 Jan 2009 12:52:38 +0000 (12:52 +0000)]
Make PKCS#8 the standard write format for private keys, replacing the
ancient SSLeay format.

10 years agoAdd CRYPTO_MDEBUG_ABORT to abort() is there are any memory leaks. This will
Dr. Stephen Henson [Sun, 11 Jan 2009 20:36:50 +0000 (20:36 +0000)]
Add CRYPTO_MDEBUG_ABORT to abort() is there are any memory leaks. This will
cause "make test" failures and make resource leaks more obvious.

10 years agoFix warnings properly this time ;-)
Dr. Stephen Henson [Sun, 11 Jan 2009 20:34:23 +0000 (20:34 +0000)]
Fix warnings properly this time ;-)

10 years agoFix missing prototype warnings then fix different prototype warnings ;-)
Dr. Stephen Henson [Sun, 11 Jan 2009 16:17:26 +0000 (16:17 +0000)]
Fix missing prototype warnings then fix different prototype warnings ;-)

10 years agoFix sign-compare warnings.
Dr. Stephen Henson [Sun, 11 Jan 2009 15:58:51 +0000 (15:58 +0000)]
Fix sign-compare warnings.

10 years agoAdd a set of standard gcc warning options which are designed to be the
Dr. Stephen Henson [Sun, 11 Jan 2009 15:56:32 +0000 (15:56 +0000)]
Add a set of standard gcc warning options which are designed to be the
minimum requirement for committed code. Added to debug-steve* config targets
for now.

10 years agoAdd missing entry.
Ben Laurie [Fri, 9 Jan 2009 12:48:02 +0000 (12:48 +0000)]
Add missing entry.

10 years agoUpdatde from stable branch.
Dr. Stephen Henson [Wed, 7 Jan 2009 23:44:27 +0000 (23:44 +0000)]
Updatde from stable branch.

10 years agoUpdate FAQ.
Dr. Stephen Henson [Wed, 7 Jan 2009 12:15:15 +0000 (12:15 +0000)]
Update FAQ.

10 years agoAdd UltraSPARC VIS-powered SHA1 block procedure.
Andy Polyakov [Mon, 5 Jan 2009 14:52:31 +0000 (14:52 +0000)]
Add UltraSPARC VIS-powered SHA1 block procedure.

10 years agoFix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP
Lutz Jänicke [Mon, 5 Jan 2009 14:43:05 +0000 (14:43 +0000)]
Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP

Some #include statements were not properly protected. This will go unnoted
on most systems as openssl/comp.h tends to be installed as a system header
file by default but may become visible when cross compiling.

10 years agoVMS stuff I forgot...
Richard Levitte [Sat, 3 Jan 2009 09:25:32 +0000 (09:25 +0000)]
VMS stuff I forgot...

10 years agosrvr_ecdh cannot be NULL at this point (Coverity ID 232).
Ben Laurie [Fri, 2 Jan 2009 12:49:07 +0000 (12:49 +0000)]
srvr_ecdh cannot be NULL at this point (Coverity ID 232).

10 years agoMakefile.shared: improve portability of commit#17753.
Andy Polyakov [Fri, 2 Jan 2009 09:02:27 +0000 (09:02 +0000)]
Makefile.shared: improve portability of commit#17753.

10 years agoCalculate offset correctly. (Coverity ID 233)
Ben Laurie [Thu, 1 Jan 2009 18:30:51 +0000 (18:30 +0000)]
Calculate offset correctly. (Coverity ID 233)

10 years agoStyling update to makefiles: eliminate redundant pipes.
Andy Polyakov [Tue, 30 Dec 2008 13:20:17 +0000 (13:20 +0000)]
Styling update to makefiles: eliminate redundant pipes.

10 years agoDocument dead code.
Ben Laurie [Tue, 30 Dec 2008 13:02:02 +0000 (13:02 +0000)]
Document dead code.

10 years agoStyling update to makefiles: $() to denote make substitutions and $${} -
Andy Polyakov [Mon, 29 Dec 2008 16:17:52 +0000 (16:17 +0000)]
Styling update to makefiles: $() to denote make substitutions and $${} -
shell ones.

10 years agoApparently s->ctx could be NULL. (Coverity ID 147).
Ben Laurie [Mon, 29 Dec 2008 16:15:27 +0000 (16:15 +0000)]
Apparently s->ctx could be NULL. (Coverity ID 147).

10 years agoApparently s->ctx could be NULL at this point (see earlier
Ben Laurie [Mon, 29 Dec 2008 16:13:49 +0000 (16:13 +0000)]
Apparently s->ctx could be NULL at this point (see earlier
test). (Coverity ID 148).

10 years agoIf we're going to return errors (no matter how stupid), then we should
Ben Laurie [Mon, 29 Dec 2008 16:11:58 +0000 (16:11 +0000)]
If we're going to return errors (no matter how stupid), then we should
test for them!

10 years agoMake sure a bad parameter to RSA_verify_PKCS1_PSS() doesn't lead to a crash.
Ben Laurie [Mon, 29 Dec 2008 13:35:08 +0000 (13:35 +0000)]
Make sure a bad parameter to RSA_verify_PKCS1_PSS() doesn't lead to a crash.
(Coverity ID 135).

10 years agobn_lib.c: [re-]fix Win64 compiler warning.
Andy Polyakov [Mon, 29 Dec 2008 12:44:33 +0000 (12:44 +0000)]
bn_lib.c: [re-]fix Win64 compiler warning.

10 years agoFix "possible loss of data" Win64 compiler warnings.
Andy Polyakov [Mon, 29 Dec 2008 12:35:49 +0000 (12:35 +0000)]
Fix "possible loss of data" Win64 compiler warnings.

10 years agoDie earlier if hash is NULL. (Coverity IDs 137 & 138).
Ben Laurie [Mon, 29 Dec 2008 11:54:56 +0000 (11:54 +0000)]
Die earlier if hash is NULL. (Coverity IDs 137 & 138).

10 years agoReverse incorrect earlier fix.
Ben Laurie [Mon, 29 Dec 2008 11:47:08 +0000 (11:47 +0000)]
Reverse incorrect earlier fix.

10 years agoDie earlier if we have no hash function.
Ben Laurie [Mon, 29 Dec 2008 11:46:44 +0000 (11:46 +0000)]
Die earlier if we have no hash function.

10 years agoAdd standard .cvsignore file.
Dr. Stephen Henson [Mon, 29 Dec 2008 00:27:06 +0000 (00:27 +0000)]
Add standard .cvsignore file.

10 years agoUpdate steve-debug* options.
Dr. Stephen Henson [Mon, 29 Dec 2008 00:25:54 +0000 (00:25 +0000)]
Update steve-debug* options.

10 years agox86_64-xlate.pl: support for binary constants, such as 0b1010101.
Andy Polyakov [Sat, 27 Dec 2008 14:00:37 +0000 (14:00 +0000)]
x86_64-xlate.pl: support for binary constants, such as 0b1010101.

10 years agoAdd modes/cts128.c, Ciphertext Stealing implementation.
Andy Polyakov [Sat, 27 Dec 2008 13:40:45 +0000 (13:40 +0000)]
Add modes/cts128.c, Ciphertext Stealing implementation.

10 years agocmll-x86_64.pl: fix bug in cbc tail processing and comply with Win64 ABI spec.
Andy Polyakov [Sat, 27 Dec 2008 13:39:38 +0000 (13:39 +0000)]
cmll-x86_64.pl: fix bug in cbc tail processing and comply with Win64 ABI spec.

10 years agoRevisit RT#1801 and complete fix.
Andy Polyakov [Sat, 27 Dec 2008 13:32:21 +0000 (13:32 +0000)]
Revisit RT#1801 and complete fix.

10 years agoRemove dead code. (Coverity ID 2)
Ben Laurie [Sat, 27 Dec 2008 02:36:24 +0000 (02:36 +0000)]
Remove dead code. (Coverity ID 2)

10 years agoCheck scalar->d before we use it (in BN_num_bits()). (Coverity ID 129)
Ben Laurie [Sat, 27 Dec 2008 02:15:16 +0000 (02:15 +0000)]
Check scalar->d before we use it (in BN_num_bits()). (Coverity ID 129)

10 years agoDeal with the unlikely event that EVP_MD_CTX_size() returns an error.
Ben Laurie [Sat, 27 Dec 2008 02:09:24 +0000 (02:09 +0000)]
Deal with the unlikely event that EVP_MD_CTX_size() returns an error.
(Coverity ID 140).

10 years agoHandle the unlikely event that BIO_get_mem_data() returns -ve.
Ben Laurie [Sat, 27 Dec 2008 02:00:38 +0000 (02:00 +0000)]
Handle the unlikely event that BIO_get_mem_data() returns -ve.

10 years agoMore synchronisation with Unix
Richard Levitte [Fri, 26 Dec 2008 23:52:06 +0000 (23:52 +0000)]
More synchronisation with Unix

10 years agoRemove misleading dead code. Constify. (Coverity ID 142)
Ben Laurie [Fri, 26 Dec 2008 17:17:21 +0000 (17:17 +0000)]
Remove misleading dead code. Constify. (Coverity ID 142)

10 years ago!a && !a->b is clearly wrong! Changed to !a || !a->b (Coverity ID 145).
Ben Laurie [Fri, 26 Dec 2008 15:32:59 +0000 (15:32 +0000)]
!a && !a->b is clearly wrong! Changed to !a || !a->b (Coverity ID 145).

10 years agopval must always be set when pk7_cb() does anything (Coverity ID 146).
Ben Laurie [Fri, 26 Dec 2008 15:29:02 +0000 (15:29 +0000)]
pval must always be set when pk7_cb() does anything (Coverity ID 146).

10 years agoIn BIO_write(), update the write statistics, not the read statistics.
Richard Levitte [Thu, 25 Dec 2008 22:24:17 +0000 (22:24 +0000)]
In BIO_write(), update the write statistics, not the read statistics.
PR: 1803

10 years agoFurther synchronisation with Unix
Richard Levitte [Thu, 25 Dec 2008 22:04:42 +0000 (22:04 +0000)]
Further synchronisation with Unix

10 years agoWindows-specific addenum to "engage crypto/modes" commit #17716.
Andy Polyakov [Tue, 23 Dec 2008 15:15:44 +0000 (15:15 +0000)]
Windows-specific addenum to "engage crypto/modes" commit #17716.

10 years agoPatch the omission from prvious commit #17716.
Andy Polyakov [Tue, 23 Dec 2008 11:38:33 +0000 (11:38 +0000)]
Patch the omission from prvious commit #17716.

10 years agoEngage crypto/modes.
Andy Polyakov [Tue, 23 Dec 2008 11:33:01 +0000 (11:33 +0000)]
Engage crypto/modes.

10 years agocrypto/modes: make modes.h selfsufficient and rename block_f to block128_t.
Andy Polyakov [Tue, 23 Dec 2008 11:18:45 +0000 (11:18 +0000)]
crypto/modes: make modes.h selfsufficient and rename block_f to block128_t.

10 years agoOptimize CAST for size on 64-bit platforms. For reference, CAST_LONG being
Andy Polyakov [Mon, 22 Dec 2008 15:21:59 +0000 (15:21 +0000)]
Optimize CAST for size on 64-bit platforms. For reference, CAST_LONG being
unsigned long must be attributed to 16-bit support. As we don't support
16-bit platoforms anymore, there is no reason to waste twice required
space on CAST S-boxes (16KB vs. 8KB) or key schedule.

10 years agocmll-x86_64.pl: Win64 SEH section to handle pushf/popf in CBC routine.
Andy Polyakov [Mon, 22 Dec 2008 14:15:11 +0000 (14:15 +0000)]
cmll-x86_64.pl: Win64 SEH section to handle pushf/popf in CBC routine.

10 years agoOptimize #undef DES_UNROLL for size.
Andy Polyakov [Mon, 22 Dec 2008 14:10:42 +0000 (14:10 +0000)]
Optimize #undef DES_UNROLL for size.

10 years agoIncidentally http://cvs.openssl.org/chngview?cn=17710 also made it possible
Andy Polyakov [Mon, 22 Dec 2008 14:05:42 +0000 (14:05 +0000)]
Incidentally cvs.openssl.org/chngview?cn=17710 also made it possible
to build the library without -D_CRT_NONSTDC_NO_DEPRECATE. This commit
expands it even to apps catalog and actually omits the macro in question
from Configure.

10 years agoThis _WIN32-specific patch makes it possible to "wrap" OpenSSL in another
Andy Polyakov [Mon, 22 Dec 2008 13:54:12 +0000 (13:54 +0000)]
This _WIN32-specific patch makes it possible to "wrap" OpenSSL in another
.DLL, in particular static build. The issue has been discussed in RT#1230
and later on openssl-dev, and mutually exclusive approaches were suggested.
This completes compromise solution suggested in RT#1230.
PR: 1230

10 years agoMake no-engine work again.
Dr. Stephen Henson [Sat, 20 Dec 2008 17:04:40 +0000 (17:04 +0000)]
Make no-engine work again.

10 years agomake depend to work with cross-gcc, compensate for msys glitch.
Andy Polyakov [Fri, 19 Dec 2008 13:35:09 +0000 (13:35 +0000)]
make depend to work with cross-gcc, compensate for msys glitch.
PR: 1753
Submitted by: Alon Bar-Lev

10 years agocmll-x86_64.pl: bug fix and size optimization of Win64 SEH section.
Andy Polyakov [Fri, 19 Dec 2008 11:19:19 +0000 (11:19 +0000)]
cmll-x86_64.pl: bug fix and size optimization of Win64 SEH section.

10 years agox86_64 assembler pack: add support for Win64 SEH.
Andy Polyakov [Fri, 19 Dec 2008 11:17:29 +0000 (11:17 +0000)]
x86_64 assembler pack: add support for Win64 SEH.

10 years agox86_64-xlate.pl: fix masm hexadecimal constants.
Andy Polyakov [Fri, 19 Dec 2008 11:14:38 +0000 (11:14 +0000)]
x86_64-xlate.pl: fix masm hexadecimal constants.

10 years agoperlasm/x86* update: support for 3 and 4 argument instructions.
Andy Polyakov [Wed, 17 Dec 2008 19:56:48 +0000 (19:56 +0000)]
perlasm/x86* update: support for 3 and 4 argument instructions.

10 years agoSEGV in AES_cbc_encrypt in aes-x86_64 assembler module.
Andy Polyakov [Wed, 17 Dec 2008 14:11:30 +0000 (14:11 +0000)]
SEGV in AES_cbc_encrypt in aes-x86_64 assembler module.
PR: 1801
Submitted by: Huang Ying

10 years agoConstify where needed
Richard Levitte [Tue, 16 Dec 2008 13:41:49 +0000 (13:41 +0000)]
Constify where needed

10 years agoRemove extraneous semicolons
Richard Levitte [Tue, 16 Dec 2008 10:56:05 +0000 (10:56 +0000)]
Remove extraneous semicolons

10 years agoStack changes made dso_vms.c not compile properly.
Richard Levitte [Tue, 16 Dec 2008 10:55:26 +0000 (10:55 +0000)]
Stack changes made dso_vms.c not compile properly.

10 years agoA few more symbols that are a little bit long for VMS
Richard Levitte [Tue, 16 Dec 2008 10:54:53 +0000 (10:54 +0000)]
A few more symbols that are a little bit long for VMS

10 years agoSynchronise VMS build system with the Unixly one
Richard Levitte [Tue, 16 Dec 2008 10:54:28 +0000 (10:54 +0000)]
Synchronise VMS build system with the Unixly one

10 years ago128-bit block cipher modes consolidation. As consolidated functions
Andy Polyakov [Tue, 16 Dec 2008 08:39:21 +0000 (08:39 +0000)]
128-bit block cipher modes consolidation. As consolidated functions
rely on indirect call to block functions, they are not as fast as
non-consolidated routines. However, performance loss(*) is within
measurement error and consolidation advantages are considered to
outweigh it.

(*) actually one can observe performance *improvement* on e.g.
    CBC benchmarks thanks to optimization, which also becomes
    shared among ciphers.

10 years agoSEED to support OPENSSL_SMALL_FOOTPRINT: ~2x size decrease on x86.
Andy Polyakov [Tue, 16 Dec 2008 07:41:21 +0000 (07:41 +0000)]
SEED to support OPENSSL_SMALL_FOOTPRINT: ~2x size decrease on x86.

10 years agoBring C bn_mul_mont template closer to assembler.
Andy Polyakov [Tue, 16 Dec 2008 07:28:38 +0000 (07:28 +0000)]
Bring C bn_mul_mont template closer to assembler.

10 years agono-asm didn't exclude Camellia assembler.
Andy Polyakov [Tue, 16 Dec 2008 07:26:53 +0000 (07:26 +0000)]
no-asm didn't exclude Camellia assembler.

10 years agoBack out pointless change.
Ben Laurie [Sat, 13 Dec 2008 17:45:49 +0000 (17:45 +0000)]
Back out pointless change.

10 years ago*** empty log message ***
Ben Laurie [Sat, 13 Dec 2008 17:45:27 +0000 (17:45 +0000)]
*** empty log message ***

10 years agoReturn error if DH_new() fails (Coverity ID 150).
Ben Laurie [Sat, 13 Dec 2008 17:39:53 +0000 (17:39 +0000)]
Return error if DH_new() fails (Coverity ID 150).

10 years agoCheck for NULL before use (Coverity ID 203).
Ben Laurie [Sat, 13 Dec 2008 17:28:25 +0000 (17:28 +0000)]
Check for NULL before use (Coverity ID 203).

10 years agoMissing return values (Coverity ID 204).
Ben Laurie [Sat, 13 Dec 2008 17:19:40 +0000 (17:19 +0000)]
Missing return values (Coverity ID 204).

10 years agoFix from stable branch.
Dr. Stephen Henson [Wed, 10 Dec 2008 17:35:21 +0000 (17:35 +0000)]
Fix from stable branch.

10 years agoapps/speed.c: children should not inherit buffered I/O
Lutz Jänicke [Wed, 10 Dec 2008 08:03:47 +0000 (08:03 +0000)]
apps/speed.c: children should not inherit buffered I/O
PR: 1787
Submitted by: Artur Klauser <aklauser@google.com>

10 years agoOops should check zero_pos >= 0.
Dr. Stephen Henson [Mon, 8 Dec 2008 19:13:06 +0000 (19:13 +0000)]
Oops should check zero_pos >= 0.

10 years agoHandle case where v6stat.zero_pos == 0 correctly.
Dr. Stephen Henson [Sun, 7 Dec 2008 23:58:44 +0000 (23:58 +0000)]
Handle case where v6stat.zero_pos == 0 correctly.

Reported by: Kurt Roeckx <kurt@roeckx.be>, Tobias Ginzler <ginzler@fgan.de> (Debian bug #506111)

10 years agoAdd Camellia assembler x86 and x86_64 modules.
Andy Polyakov [Wed, 3 Dec 2008 09:22:51 +0000 (09:22 +0000)]
Add Camellia assembler x86 and x86_64 modules.

10 years agoexperimental-foo support for mk1mf.pl.
Bodo Möller [Tue, 2 Dec 2008 23:50:22 +0000 (23:50 +0000)]
experimental-foo support for mk1mf.pl.

10 years agoImplement Configure option pattern "experimental-foo"
Bodo Möller [Tue, 2 Dec 2008 01:21:39 +0000 (01:21 +0000)]
Implement Configure option pattern "experimental-foo"
(specifically, "experimental-jpake").

10 years agoDon't stop -cipher from working.
Dr. Stephen Henson [Sun, 30 Nov 2008 22:01:31 +0000 (22:01 +0000)]
Don't stop -cipher from working.

10 years agoUpdate from stable branch.
Dr. Stephen Henson [Sun, 30 Nov 2008 16:09:04 +0000 (16:09 +0000)]
Update from stable branch.

10 years agoFix compilation with -DOPENSSL_NO_DEPRECATED.
Geoff Thorpe [Fri, 28 Nov 2008 22:06:55 +0000 (22:06 +0000)]
Fix compilation with -DOPENSSL_NO_DEPRECATED.

10 years agoClarify a 'chil' engine param that is a little unintuitive.
Geoff Thorpe [Fri, 28 Nov 2008 22:04:49 +0000 (22:04 +0000)]
Clarify a 'chil' engine param that is a little unintuitive.

Submitted by: Sander Temme <sander@temme.net>

10 years agoUpdate libeay.num
Dr. Stephen Henson [Mon, 24 Nov 2008 17:46:29 +0000 (17:46 +0000)]
Update libeay.num

10 years agoStop warning about different const qualifiers.
Dr. Stephen Henson [Mon, 24 Nov 2008 17:39:42 +0000 (17:39 +0000)]
Stop warning about different const qualifiers.

10 years agoUpdate from stable-branch.
Dr. Stephen Henson [Mon, 24 Nov 2008 17:27:08 +0000 (17:27 +0000)]
Update from stable-branch.

10 years agoSet memory BIOs up properly when stripping text headers from S/MIME messages.
Dr. Stephen Henson [Fri, 21 Nov 2008 18:18:13 +0000 (18:18 +0000)]
Set memory BIOs up properly when stripping text headers from S/MIME messages.

10 years agoAllow the CHIL engine to load even if dynamic locks aren't registered.
Geoff Thorpe [Wed, 19 Nov 2008 14:21:27 +0000 (14:21 +0000)]
Allow the CHIL engine to load even if dynamic locks aren't registered.

Submitted by: Sander Temme

10 years agoIntegrate J-PAKE and TLS-PSK. Increase PSK buffer size. Fix memory leaks.
Ben Laurie [Sun, 16 Nov 2008 12:47:12 +0000 (12:47 +0000)]
Integrate J-PAKE and TLS-PSK. Increase PSK buffer size. Fix memory leaks.

10 years agoIgnore generated ASM.
Ben Laurie [Sun, 16 Nov 2008 12:32:14 +0000 (12:32 +0000)]
Ignore generated ASM.

10 years agoDon't disable JPAKE by default in head...
Dr. Stephen Henson [Sat, 15 Nov 2008 17:36:49 +0000 (17:36 +0000)]
Don't disable JPAKE by default in head...

10 years agoPR: 1574
Dr. Stephen Henson [Sat, 15 Nov 2008 17:18:12 +0000 (17:18 +0000)]
PR: 1574
Submitted by: Jouni Malinen <j@w1.fi>
Approved by: steve@openssl.org

Ticket override support for EAP-FAST.

10 years agox86_64-xlate.pl update, engage x86_64 assembler in mingw64.
Andy Polyakov [Fri, 14 Nov 2008 16:40:37 +0000 (16:40 +0000)]
x86_64-xlate.pl update, engage x86_64 assembler in mingw64.

10 years agowarnings (mostly)
Bodo Möller [Fri, 14 Nov 2008 00:22:02 +0000 (00:22 +0000)]
warnings (mostly)