oweals/openssl.git
17 years agoInstall fipscanister.o and friends. Disable warning halt in VC++ build.
Dr. Stephen Henson [Sat, 21 Jul 2007 12:07:09 +0000 (12:07 +0000)]
Install fipscanister.o and friends. Disable warning halt in VC++ build.

17 years agoDon't install docs by default.
Dr. Stephen Henson [Sat, 21 Jul 2007 00:15:15 +0000 (00:15 +0000)]
Don't install docs by default.

17 years agoChange fips build default install location so it doesn't overwrite any
Dr. Stephen Henson [Sat, 21 Jul 2007 00:14:02 +0000 (00:14 +0000)]
Change fips build default install location so it doesn't overwrite any
existing OpenSSL installation.

17 years agoLink fips utils against fipscanister.lib only except for dso builds.
Dr. Stephen Henson [Fri, 20 Jul 2007 22:23:11 +0000 (22:23 +0000)]
Link fips utils against fipscanister.lib only except for dso builds.

Add --with-fipslibdir option to Configure.

17 years agoTypo. FIPS_098_TEST_2
Dr. Stephen Henson [Thu, 19 Jul 2007 21:44:25 +0000 (21:44 +0000)]
Typo.

17 years agoAdd error checking to script.
Dr. Stephen Henson [Thu, 19 Jul 2007 16:45:31 +0000 (16:45 +0000)]
Add error checking to script.

17 years agoInitial fips WIN32 compilation batch file.
Dr. Stephen Henson [Thu, 19 Jul 2007 16:11:21 +0000 (16:11 +0000)]
Initial fips WIN32 compilation batch file.

17 years agoUse X9.31 keygen for signature test.
Dr. Stephen Henson [Thu, 19 Jul 2007 12:24:01 +0000 (12:24 +0000)]
Use X9.31 keygen for signature test.

17 years agoAdd SSE2 support to VC++ build. Update MASM script.
Dr. Stephen Henson [Thu, 19 Jul 2007 12:17:56 +0000 (12:17 +0000)]
Add SSE2 support to VC++ build. Update MASM script.

17 years agoshlib_wrap.sh update [from HEAD].
Andy Polyakov [Mon, 16 Jul 2007 14:02:52 +0000 (14:02 +0000)]
shlib_wrap.sh update [from HEAD].

17 years agoBourne shell portability fix.
Andy Polyakov [Mon, 16 Jul 2007 12:23:55 +0000 (12:23 +0000)]
Bourne shell portability fix.

17 years agoFramework updates.
Andy Polyakov [Mon, 16 Jul 2007 10:00:36 +0000 (10:00 +0000)]
Framework updates.

17 years agoCheck return code properly in fputs (< 0 is error).
Dr. Stephen Henson [Mon, 16 Jul 2007 00:09:44 +0000 (00:09 +0000)]
Check return code properly in fputs (< 0 is error).

17 years agoUpdate test script generator for Win32.
Dr. Stephen Henson [Sun, 15 Jul 2007 21:27:34 +0000 (21:27 +0000)]
Update test script generator for Win32.

17 years agoinclude openssl/fips.h in sha1dgst.c
Dr. Stephen Henson [Sun, 15 Jul 2007 16:50:34 +0000 (16:50 +0000)]
include openssl/fips.h in sha1dgst.c

17 years agoUpdate .cvsignore
Dr. Stephen Henson [Sun, 15 Jul 2007 16:12:29 +0000 (16:12 +0000)]
Update .cvsignore

17 years agoTolerate DigestInfo with absent parameters in FIPS mode.
Dr. Stephen Henson [Sun, 15 Jul 2007 16:10:46 +0000 (16:10 +0000)]
Tolerate DigestInfo with absent parameters in FIPS mode.

17 years agoAdd selftest check to SHA1 routine.
Dr. Stephen Henson [Sun, 15 Jul 2007 12:06:23 +0000 (12:06 +0000)]
Add selftest check to SHA1 routine.

17 years agoEnhance mkfipsscr.pl to handle different testvector paths and perform
Dr. Stephen Henson [Sun, 15 Jul 2007 12:01:54 +0000 (12:01 +0000)]
Enhance mkfipsscr.pl to handle different testvector paths and perform
sanity checks.

Make AES/TDES algorithm test programs quiet if VERBOSE is zero.

17 years agoUpdate Windows build system to use AES assembler and standard assembly
Dr. Stephen Henson [Thu, 12 Jul 2007 08:20:21 +0000 (08:20 +0000)]
Update Windows build system to use AES assembler and standard assembly
language routines in FIPS mode compiles.

17 years agoUpdates to WIN32 build system to make FIPS build work again.
Dr. Stephen Henson [Wed, 11 Jul 2007 11:53:20 +0000 (11:53 +0000)]
Updates to WIN32 build system to make FIPS build work again.

17 years agoTypo.
Dr. Stephen Henson [Wed, 11 Jul 2007 00:11:09 +0000 (00:11 +0000)]
Typo.

17 years agoDelete old duplicate files.
Dr. Stephen Henson [Tue, 10 Jul 2007 22:02:02 +0000 (22:02 +0000)]
Delete old duplicate files.

17 years agoUpdate dependencies.
Dr. Stephen Henson [Tue, 10 Jul 2007 21:37:24 +0000 (21:37 +0000)]
Update dependencies.

17 years agoUse common source files for FIPS mode and utilize same optimizations.
Dr. Stephen Henson [Tue, 10 Jul 2007 21:24:32 +0000 (21:24 +0000)]
Use common source files for FIPS mode and utilize same optimizations.

17 years agoShut up memory debuggers complaining about AES x86 assembler module
Andy Polyakov [Sun, 8 Jul 2007 19:41:38 +0000 (19:41 +0000)]
Shut up memory debuggers complaining about AES x86 assembler module
[from stable].
PR: 1508,1320

17 years agoEVP_*_cfb1 was broken [from HEAD].
Andy Polyakov [Sun, 8 Jul 2007 19:20:48 +0000 (19:20 +0000)]
EVP_*_cfb1 was broken [from HEAD].
PR: 1318

17 years agobn_mul_recursive doesn't handle all cases correctly, which results in
Andy Polyakov [Sun, 8 Jul 2007 18:55:51 +0000 (18:55 +0000)]
bn_mul_recursive doesn't handle all cases correctly, which results in
BN_mul failures at certain key-length mixes [from HEAD].
PR: 1427

17 years agoTypo in str_lib.c [from HEAD].
Andy Polyakov [Sat, 7 Jul 2007 20:12:12 +0000 (20:12 +0000)]
Typo in str_lib.c [from HEAD].
PR: 1177

17 years agoUpdate ordinals. FIPS_098_TEST_1
Dr. Stephen Henson [Mon, 2 Jul 2007 12:10:06 +0000 (12:10 +0000)]
Update ordinals.

17 years agoCheck selftest in rand too.
Dr. Stephen Henson [Mon, 2 Jul 2007 11:27:52 +0000 (11:27 +0000)]
Check selftest in rand too.

17 years agoCheck selftest status in all crypto operations and abort with
Dr. Stephen Henson [Mon, 2 Jul 2007 11:22:50 +0000 (11:22 +0000)]
Check selftest status in all crypto operations and abort with
a fatal error on failure.

17 years agoModify AES and 3DES selftests to use EVP.
Dr. Stephen Henson [Sun, 1 Jul 2007 23:19:15 +0000 (23:19 +0000)]
Modify AES and 3DES selftests to use EVP.

17 years agoMove 3DES EVP inside FIPS module and modify algorithm tests to use it.
Dr. Stephen Henson [Sun, 1 Jul 2007 17:58:15 +0000 (17:58 +0000)]
Move 3DES EVP inside FIPS module and modify algorithm tests to use it.

17 years agoChanges to make AES algorithm test work via EVP.
Dr. Stephen Henson [Sun, 1 Jul 2007 12:53:10 +0000 (12:53 +0000)]
Changes to make AES algorithm test work via EVP.

17 years agoAdd enc_min.c file.
Dr. Stephen Henson [Sun, 1 Jul 2007 00:08:42 +0000 (00:08 +0000)]
Add enc_min.c file.

17 years agoMove minimal EVP_CIPHER implementation into FIPS library. Not used by
Dr. Stephen Henson [Sun, 1 Jul 2007 00:07:25 +0000 (00:07 +0000)]
Move minimal EVP_CIPHER implementation into FIPS library. Not used by
any FIPS applications yet.

17 years agobn_mont.c fix [from HEAD].
Andy Polyakov [Fri, 29 Jun 2007 13:15:33 +0000 (13:15 +0000)]
bn_mont.c fix [from HEAD].

17 years agoMake fips test suite script halt on errors.
Dr. Stephen Henson [Sat, 23 Jun 2007 00:02:25 +0000 (00:02 +0000)]
Make fips test suite script halt on errors.

17 years agoAvoid warnings. Fix fips_dssvs program.
Dr. Stephen Henson [Fri, 22 Jun 2007 12:17:52 +0000 (12:17 +0000)]
Avoid warnings. Fix fips_dssvs program.

17 years agoFix warnings.
Dr. Stephen Henson [Wed, 20 Jun 2007 17:49:42 +0000 (17:49 +0000)]
Fix warnings.

17 years agoRemove deleted function from headers.
Dr. Stephen Henson [Tue, 19 Jun 2007 16:10:19 +0000 (16:10 +0000)]
Remove deleted function from headers.

17 years agoFix from stable branch.
Dr. Stephen Henson [Tue, 19 Jun 2007 15:44:44 +0000 (15:44 +0000)]
Fix from stable branch.

17 years agoUpdates from stable branch: BN_*_no_branch privatization and elimination of
Andy Polyakov [Mon, 11 Jun 2007 16:43:29 +0000 (16:43 +0000)]
Updates from stable branch: BN_*_no_branch privatization and elimination of
conditional final subtraction in Montgomery multiplication.

17 years agoIncrement counter after use.
Dr. Stephen Henson [Tue, 5 Jun 2007 17:28:00 +0000 (17:28 +0000)]
Increment counter after use.

17 years agoDisable DES in FIPS mode.
Dr. Stephen Henson [Mon, 21 May 2007 12:45:10 +0000 (12:45 +0000)]
Disable DES in FIPS mode.

17 years agoUpdate from stable branch.
Dr. Stephen Henson [Mon, 21 May 2007 12:40:07 +0000 (12:40 +0000)]
Update from stable branch.

17 years agoPadlock engine fails to compile with -O0 -fPIC [from HEAD].
Andy Polyakov [Sun, 20 May 2007 07:14:30 +0000 (07:14 +0000)]
Padlock engine fails to compile with -O0 -fPIC [from HEAD].

17 years agoType cast fixes in aes-586.pl [from 098-stable].
Andy Polyakov [Sat, 19 May 2007 20:12:46 +0000 (20:12 +0000)]
Type cast fixes in aes-586.pl [from 098-stable].

17 years agocygwin shared rules update [from HEAD].
Andy Polyakov [Sat, 19 May 2007 19:41:28 +0000 (19:41 +0000)]
cygwin shared rules update [from HEAD].
PR: 1517

17 years agoTypo in x509_txt.c [from HEAD].
Andy Polyakov [Sat, 19 May 2007 18:05:33 +0000 (18:05 +0000)]
Typo in x509_txt.c [from HEAD].

17 years agoDetect UltraSPARC T1 in ./config [from HEAD].
Andy Polyakov [Fri, 4 May 2007 13:08:00 +0000 (13:08 +0000)]
Detect UltraSPARC T1 in ./config [from HEAD].

17 years agoFix s390x detection in ./config [from 098].
Andy Polyakov [Mon, 30 Apr 2007 12:06:30 +0000 (12:06 +0000)]
Fix s390x detection in ./config [from 098].

17 years agoMake ordinals consistent across branches.
Dr. Stephen Henson [Wed, 25 Apr 2007 13:24:56 +0000 (13:24 +0000)]
Make ordinals consistent across branches.

17 years agoMerge from 0.9.8-stable.
Dr. Stephen Henson [Wed, 25 Apr 2007 13:15:51 +0000 (13:15 +0000)]
Merge from 0.9.8-stable.

17 years agoMerge from stable branch.
Dr. Stephen Henson [Tue, 24 Apr 2007 11:34:19 +0000 (11:34 +0000)]
Merge from stable branch.

17 years agoMerge from 0.9.8 stable branch.
Dr. Stephen Henson [Tue, 24 Apr 2007 11:30:51 +0000 (11:30 +0000)]
Merge from 0.9.8 stable branch.

17 years agoFix from HEAD.
Dr. Stephen Henson [Mon, 9 Apr 2007 23:51:50 +0000 (23:51 +0000)]
Fix from HEAD.

17 years agoUpdate ordinals. Use gap for EVP_add_alg_module to keep values consistent
Dr. Stephen Henson [Mon, 9 Apr 2007 12:15:31 +0000 (12:15 +0000)]
Update ordinals. Use gap for EVP_add_alg_module to keep values consistent
across versions.

17 years agoIf config file tries to enter FIPS mode in a non FIPS capable library
Dr. Stephen Henson [Mon, 9 Apr 2007 12:06:26 +0000 (12:06 +0000)]
If config file tries to enter FIPS mode in a non FIPS capable library
return an error.

17 years agoUpdate from HEAD.
Dr. Stephen Henson [Mon, 9 Apr 2007 11:47:59 +0000 (11:47 +0000)]
Update from HEAD.

17 years agoAdd algorithm configuration module.
Dr. Stephen Henson [Sun, 8 Apr 2007 17:51:02 +0000 (17:51 +0000)]
Add algorithm configuration module.

17 years agoBlock low level public key signature operations in FIPS mode.
Dr. Stephen Henson [Fri, 6 Apr 2007 00:30:24 +0000 (00:30 +0000)]
Block low level public key signature operations in FIPS mode.

Update self tests for all modes and use EVP.

Update pairwise consistency checks.

17 years agoFix Win32 warning. Update ordinals.
Dr. Stephen Henson [Wed, 4 Apr 2007 00:33:23 +0000 (00:33 +0000)]
Fix Win32 warning. Update ordinals.

17 years agoNew EVP sign and verify functionality.
Dr. Stephen Henson [Tue, 3 Apr 2007 21:01:29 +0000 (21:01 +0000)]
New EVP sign and verify functionality.

17 years agoDon't process any of kssl.c if krb5 option not set.
Dr. Stephen Henson [Tue, 3 Apr 2007 18:24:22 +0000 (18:24 +0000)]
Don't process any of kssl.c if krb5 option not set.

17 years agoAdd new file.
Dr. Stephen Henson [Tue, 3 Apr 2007 02:13:20 +0000 (02:13 +0000)]
Add new file.

17 years agoAdd tiny ASN1 code for DSA signatures.
Dr. Stephen Henson [Mon, 2 Apr 2007 23:59:47 +0000 (23:59 +0000)]
Add tiny ASN1 code for DSA signatures.

Make DSA tests, selftests and algorithm tests use EVP.

17 years agoMake ordinals consistent with 0.9.8-stable.
Dr. Stephen Henson [Wed, 28 Mar 2007 22:09:56 +0000 (22:09 +0000)]
Make ordinals consistent with 0.9.8-stable.

17 years agoUpdate from stable branch.
Dr. Stephen Henson [Wed, 28 Mar 2007 22:00:48 +0000 (22:00 +0000)]
Update from stable branch.

17 years agoUpdate from 0.9.8-stable with patches also applied to equivalent FIPS
Dr. Stephen Henson [Wed, 28 Mar 2007 12:38:55 +0000 (12:38 +0000)]
Update from 0.9.8-stable with patches also applied to equivalent FIPS
sources.

17 years agoPerl script to rename sections in MS COFF binaries.
Dr. Stephen Henson [Tue, 27 Mar 2007 00:04:55 +0000 (00:04 +0000)]
Perl script to rename sections in MS COFF binaries.

Submitted by: Andy Polyakov

17 years agoUse perl script instead of editbin to rename object file sections.
Dr. Stephen Henson [Tue, 27 Mar 2007 00:03:42 +0000 (00:03 +0000)]
Use perl script instead of editbin to rename object file sections.

17 years agoModify VC++ build sytem to use fipscanister.lib instead of fipscanister.o
Dr. Stephen Henson [Mon, 26 Mar 2007 12:06:44 +0000 (12:06 +0000)]
Modify VC++ build sytem to use fipscanister.lib instead of fipscanister.o
and avoid the need for ld.exe.

17 years agoOops! Revert to previous version and [re-]apply diff.
Andy Polyakov [Sun, 25 Mar 2007 15:42:13 +0000 (15:42 +0000)]
Oops! Revert to previous version and [re-]apply diff.

17 years agoaix updates from HEAD.
Andy Polyakov [Sun, 25 Mar 2007 15:37:26 +0000 (15:37 +0000)]
aix updates from HEAD.

17 years agoTypos in Makefiles.
Andy Polyakov [Sun, 25 Mar 2007 14:40:33 +0000 (14:40 +0000)]
Typos in Makefiles.

17 years agoMake sure fipscanister.o is built and installed for static WIN32 builds.
Dr. Stephen Henson [Sat, 24 Mar 2007 18:47:54 +0000 (18:47 +0000)]
Make sure fipscanister.o is built and installed for static WIN32 builds.

17 years agoAdd some version info and comments to WIN32 FIPS DLL.
Dr. Stephen Henson [Thu, 22 Mar 2007 19:24:34 +0000 (19:24 +0000)]
Add some version info and comments to WIN32 FIPS DLL.

17 years agoAdd version info to FIPS DLL.
Dr. Stephen Henson [Thu, 22 Mar 2007 19:07:31 +0000 (19:07 +0000)]
Add version info to FIPS DLL.

17 years agoForward FIPS DLL implementations from libcrypto DLL under Win32.
Dr. Stephen Henson [Thu, 22 Mar 2007 18:31:35 +0000 (18:31 +0000)]
Forward FIPS DLL implementations from libcrypto DLL under Win32.

17 years agoAdd missing #ifdef
Dr. Stephen Henson [Thu, 22 Mar 2007 13:42:05 +0000 (13:42 +0000)]
Add missing #ifdef

17 years agoUpdate from stable branch.
Dr. Stephen Henson [Thu, 22 Mar 2007 13:19:46 +0000 (13:19 +0000)]
Update from stable branch.

17 years agoAnd so it begins...
Dr. Stephen Henson [Thu, 22 Mar 2007 00:39:24 +0000 (00:39 +0000)]
And so it begins...

17 years agoThis commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
cvs2svn [Wed, 21 Mar 2007 14:33:02 +0000 (14:33 +0000)]
This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips-
0_9_8-stable'.

17 years agostricter session ID context matching
Bodo Möller [Wed, 21 Mar 2007 14:33:01 +0000 (14:33 +0000)]
stricter session ID context matching

17 years agooops -- this should have been in 0.9.8e
Bodo Möller [Wed, 21 Mar 2007 14:18:27 +0000 (14:18 +0000)]
oops -- this should have been in 0.9.8e

17 years agoclarification regarding libdes files
Bodo Möller [Wed, 21 Mar 2007 10:58:32 +0000 (10:58 +0000)]
clarification regarding libdes files

17 years agoPowerPC config updates from HEAD.
Andy Polyakov [Tue, 20 Mar 2007 09:06:52 +0000 (09:06 +0000)]
PowerPC config updates from HEAD.

17 years agoFix kerberos ciphersuite bugs introduced with PR:1336.
Dr. Stephen Henson [Fri, 9 Mar 2007 14:06:34 +0000 (14:06 +0000)]
Fix kerberos ciphersuite bugs introduced with PR:1336.

17 years agoMake local function static.
Ben Laurie [Thu, 8 Mar 2007 15:52:04 +0000 (15:52 +0000)]
Make local function static.

17 years agoStop memory leak.
Dr. Stephen Henson [Mon, 5 Mar 2007 00:06:47 +0000 (00:06 +0000)]
Stop memory leak.

17 years agoInitialize "buf" to 0 to make valgrind happy :-)
Lutz Jänicke [Fri, 2 Mar 2007 17:54:31 +0000 (17:54 +0000)]
Initialize "buf" to 0 to make valgrind happy :-)
Note: the RAND_bytes() manual page says:
 RAND_bytes() puts num cryptographically strong pseudo-random bytes into buf.
It does not talk about using the previous contents of buf so we are working
as documented.

17 years agoDo not use uninitialized memory to seed the PRNG as it may confuse
Lutz Jänicke [Fri, 2 Mar 2007 17:44:55 +0000 (17:44 +0000)]
Do not use uninitialized memory to seed the PRNG as it may confuse
code checking tools.
PR: 1499

17 years agoEVP_CIPHER_CTX_key_length() should return the set key length in the
Dr. Stephen Henson [Tue, 27 Feb 2007 18:42:52 +0000 (18:42 +0000)]
EVP_CIPHER_CTX_key_length() should return the set key length in the
EVP_CIPHER_CTX structure which may not be the same as the underlying
cipher key length for variable length ciphers.

17 years agoMerge from HEAD
Lutz Jänicke [Tue, 27 Feb 2007 08:26:51 +0000 (08:26 +0000)]
Merge from HEAD

17 years agoinclude complete 0.9.7 history
Bodo Möller [Mon, 26 Feb 2007 10:48:56 +0000 (10:48 +0000)]
include complete 0.9.7 history

17 years agouse 2007 copyright for generated files
Bodo Möller [Mon, 26 Feb 2007 10:47:49 +0000 (10:47 +0000)]
use 2007 copyright for generated files

17 years agoPrepare for next version.
Dr. Stephen Henson [Fri, 23 Feb 2007 12:50:54 +0000 (12:50 +0000)]
Prepare for next version.

17 years agoAdd L to version number OpenSSL_0_9_8e
Dr. Stephen Henson [Fri, 23 Feb 2007 12:38:11 +0000 (12:38 +0000)]
Add L to version number