Dr. Stephen Henson [Sat, 27 Mar 2010 19:31:55 +0000 (19:31 +0000)]
PR: 1904
Submitted by: David Woodhouse <dwmw2@infradead.org>
Pass passphrase minimum length down to UI.
Dr. Stephen Henson [Sat, 27 Mar 2010 18:28:02 +0000 (18:28 +0000)]
PR: 1813
Submitted by: Torsten Hilbrich <torsten.hilbrich@secunet.com>
Fix memory leak when engine name cannot be loaded.
Dr. Stephen Henson [Thu, 25 Mar 2010 12:08:19 +0000 (12:08 +0000)]
update FAQ
Bodo Möller [Thu, 25 Mar 2010 11:25:30 +0000 (11:25 +0000)]
Fix for "Record of death" vulnerability CVE-2010-0740.
Also, add missing CHANGES entry for CVE-2009-3245 (code changes submitted to this branch on 23 Feb 2010),
and further harmonize this version of CHANGES with the versions in the current branches.
Dr. Stephen Henson [Wed, 24 Mar 2010 23:42:05 +0000 (23:42 +0000)]
initialise buf if wrong_info not used
Dr. Stephen Henson [Wed, 24 Mar 2010 23:17:15 +0000 (23:17 +0000)]
PR: 1731 and maybe 2197
Clear error queue in a few places in SSL code where errors are expected
so they don't stay in the queue.
Andy Polyakov [Mon, 22 Mar 2010 22:44:22 +0000 (22:44 +0000)]
rand_win.c: fix logical bug in readscreen.
Andy Polyakov [Mon, 22 Mar 2010 22:38:56 +0000 (22:38 +0000)]
bss_file.c: fix MSC 6.0 warning.
Andy Polyakov [Mon, 22 Mar 2010 17:24:18 +0000 (17:24 +0000)]
GHASH assembler: new ghash-sparcv9.pl module and saner descriptions.
Andy Polyakov [Mon, 15 Mar 2010 22:28:48 +0000 (22:28 +0000)]
e_capi.c: fix typo.
Andy Polyakov [Mon, 15 Mar 2010 22:25:57 +0000 (22:25 +0000)]
Fix UPLINK typo.
Andy Polyakov [Mon, 15 Mar 2010 19:07:52 +0000 (19:07 +0000)]
ghash-ia64.pl: new file, GHASH for Itanium.
ghash-x86_64.pl: minimize stack frame usage.
ghash-x86.pl: modulo-scheduling MMX loop in respect to input vector
results in up to 10% performance improvement.
Dr. Stephen Henson [Mon, 15 Mar 2010 13:10:08 +0000 (13:10 +0000)]
workaround for missing definition in some headers
Dr. Stephen Henson [Sun, 14 Mar 2010 13:10:48 +0000 (13:10 +0000)]
print signature parameters with CRLs too
Dr. Stephen Henson [Sun, 14 Mar 2010 13:09:00 +0000 (13:09 +0000)]
free up sigopts STACK
Dr. Stephen Henson [Sun, 14 Mar 2010 13:07:48 +0000 (13:07 +0000)]
clear bogus errors in ca utility
Dr. Stephen Henson [Sun, 14 Mar 2010 12:55:15 +0000 (12:55 +0000)]
update CHANGES
Dr. Stephen Henson [Sun, 14 Mar 2010 12:54:45 +0000 (12:54 +0000)]
add -sigopt option to ca utility
Dr. Stephen Henson [Sun, 14 Mar 2010 12:52:38 +0000 (12:52 +0000)]
add X509_CRL_sign_ctx function
Dr. Stephen Henson [Fri, 12 Mar 2010 14:41:00 +0000 (14:41 +0000)]
new sigopt and PSS support for req and x509 utilities
Dr. Stephen Henson [Fri, 12 Mar 2010 12:48:32 +0000 (12:48 +0000)]
PR: 2192
Submitted By: Jaroslav Imrich <jaroslav.imrich@disig.sk>
The prompt_info and wrong_info parameters can be empty strings which
can produce confusing prompts. Treat empty string same as NULL.
Dr. Stephen Henson [Fri, 12 Mar 2010 12:06:48 +0000 (12:06 +0000)]
missing goto meant signature was never printed out
Mark J. Cox [Fri, 12 Mar 2010 08:36:44 +0000 (08:36 +0000)]
This entry was in 0.9.8m changelog but missing from here, since it's
security relevent we'd better list it.
Dr. Stephen Henson [Thu, 11 Mar 2010 23:11:36 +0000 (23:11 +0000)]
Submitted by: Martin Kaiser
Reject PSS signatures with unsupported trailer value.
Dr. Stephen Henson [Thu, 11 Mar 2010 19:27:03 +0000 (19:27 +0000)]
alg2 can be NULL
Andy Polyakov [Thu, 11 Mar 2010 16:19:46 +0000 (16:19 +0000)]
Add GHASH x86_64 assembler.
Dr. Stephen Henson [Thu, 11 Mar 2010 14:19:46 +0000 (14:19 +0000)]
typo
Dr. Stephen Henson [Thu, 11 Mar 2010 14:06:46 +0000 (14:06 +0000)]
RSA PSS ASN1 signing method
Dr. Stephen Henson [Thu, 11 Mar 2010 14:04:54 +0000 (14:04 +0000)]
typo
Dr. Stephen Henson [Thu, 11 Mar 2010 13:55:18 +0000 (13:55 +0000)]
ctrl operations to retrieve RSA algorithm settings
Dr. Stephen Henson [Thu, 11 Mar 2010 13:45:42 +0000 (13:45 +0000)]
Add support for new PSS functions in RSA EVP_PKEY_METHOD
Dr. Stephen Henson [Thu, 11 Mar 2010 13:40:42 +0000 (13:40 +0000)]
Extend PSS padding code to support different digests for MGF1 and message.
Dr. Stephen Henson [Thu, 11 Mar 2010 13:32:38 +0000 (13:32 +0000)]
Algorithm specific ASN1 signing functions.
Dr. Stephen Henson [Thu, 11 Mar 2010 13:29:39 +0000 (13:29 +0000)]
update cms code to use X509_ALGOR_set_md instead of internal function
Dr. Stephen Henson [Thu, 11 Mar 2010 13:27:05 +0000 (13:27 +0000)]
New function X509_ALGOR_set_md() to set X509_ALGOR (DigestAlgorithmIdentifier)
from a digest algorithm.
Dr. Stephen Henson [Wed, 10 Mar 2010 13:48:09 +0000 (13:48 +0000)]
don't leave bogus errors in the queue
Andy Polyakov [Tue, 9 Mar 2010 23:03:33 +0000 (23:03 +0000)]
Add GHASH x86 assembler.
Dr. Stephen Henson [Tue, 9 Mar 2010 17:24:33 +0000 (17:24 +0000)]
PR: 2188
Submitted By: Jaroslav Imrich <jaroslav.imrich@disig.sk>
Add "missing" functions to get and set prompt constructor.
Dr. Stephen Henson [Tue, 9 Mar 2010 17:08:48 +0000 (17:08 +0000)]
PR: 2186
Submitted By: "Joel Rabinovitch" <Joel.Rabinovitch@tecsys.com>
Detect aix64-gcc
Dr. Stephen Henson [Mon, 8 Mar 2010 23:48:21 +0000 (23:48 +0000)]
reserve a few more bits for future cipher modes
Andy Polyakov [Mon, 8 Mar 2010 22:44:37 +0000 (22:44 +0000)]
gcm128.c: add option for streamed GHASH, simple benchmark, minor naming
change.
Dr. Stephen Henson [Mon, 8 Mar 2010 18:10:35 +0000 (18:10 +0000)]
RSA PSS verification support including certificates and certificate
requests. Add new ASN1 signature initialisation function to handle this
case.
Dr. Stephen Henson [Mon, 8 Mar 2010 18:07:05 +0000 (18:07 +0000)]
correct error code
Dr. Stephen Henson [Sun, 7 Mar 2010 17:02:47 +0000 (17:02 +0000)]
print outermost signature algorithm parameters too
Dr. Stephen Henson [Sun, 7 Mar 2010 16:41:54 +0000 (16:41 +0000)]
oops
Dr. Stephen Henson [Sun, 7 Mar 2010 16:40:05 +0000 (16:40 +0000)]
The OID sanity check was incorrect. It should only disallow *leading* 0x80
values.
Dr. Stephen Henson [Sun, 7 Mar 2010 15:54:26 +0000 (15:54 +0000)]
although AES is a variable length cipher, AES EVP methods have a fixed key length
Dr. Stephen Henson [Sun, 7 Mar 2010 15:52:41 +0000 (15:52 +0000)]
oops, make EVP ctr mode work again
Dr. Stephen Henson [Sun, 7 Mar 2010 15:37:37 +0000 (15:37 +0000)]
typo
Dr. Stephen Henson [Sun, 7 Mar 2010 13:34:51 +0000 (13:34 +0000)]
add separate PSS decode function, rename PSS parameters to RSA_PSS_PARAMS
Dr. Stephen Henson [Sun, 7 Mar 2010 13:34:15 +0000 (13:34 +0000)]
add MGF1 digest ctrl
Dr. Stephen Henson [Sun, 7 Mar 2010 12:05:45 +0000 (12:05 +0000)]
update ASN1 sign/verify to use EVP_DigestSign and EVP_DigestVerify
Dr. Stephen Henson [Sat, 6 Mar 2010 20:47:30 +0000 (20:47 +0000)]
don't add digest alias if signature algorithm is undefined
Dr. Stephen Henson [Sat, 6 Mar 2010 19:55:25 +0000 (19:55 +0000)]
Add PSS algorithm printing. This is an initial step towards full PSS support.
Uses ASN1 module in Martin Kaiser's PSS patch.
Dr. Stephen Henson [Sat, 6 Mar 2010 18:14:13 +0000 (18:14 +0000)]
fix indent, newline
Dr. Stephen Henson [Sat, 6 Mar 2010 18:05:05 +0000 (18:05 +0000)]
Add algorithm specific signature printing. An individual ASN1 method can
now print out signatures instead of the standard hex dump.
More complex signatures (e.g. PSS) can print out more meaningful information.
Sample DSA version included that prints out the signature parameters r, s.
[Note EVP_PKEY_ASN1_METHOD is an application opaque structure so adding
new fields in the middle has no compatibility issues]
Dr. Stephen Henson [Fri, 5 Mar 2010 13:33:21 +0000 (13:33 +0000)]
Fix memory leak: free up ENGINE functional reference if digest is not
found in an ENGINE.
Dr. Stephen Henson [Fri, 5 Mar 2010 13:28:21 +0000 (13:28 +0000)]
Add -engine_impl option to dgst which will use an implementation of
an algorithm from the supplied engine instead of just the default one.
Dr. Stephen Henson [Wed, 3 Mar 2010 20:13:30 +0000 (20:13 +0000)]
option to replace extensions with new ones: mainly for creating cross-certificates
Dr. Stephen Henson [Wed, 3 Mar 2010 19:56:34 +0000 (19:56 +0000)]
PR: 2183
PR#1999 broke fork detection by assuming HAVE_FORK was set for all platforms.
Include original HAVE_FORK detection logic while allowing it to be
overridden on specific platforms with -DHAVE_FORK=1 or -DHAVE_FORK=0
Dr. Stephen Henson [Wed, 3 Mar 2010 15:41:18 +0000 (15:41 +0000)]
Submitted by: Tomas Hoger <thoger@redhat.com>
Fix for CVE-2010-0433 where some kerberos enabled versions of OpenSSL
could be crashed if the relevant tables were not present (e.g. chrooted).
Dr. Stephen Henson [Wed, 3 Mar 2010 15:30:42 +0000 (15:30 +0000)]
don't mix definitions and code
Andy Polyakov [Tue, 2 Mar 2010 16:33:25 +0000 (16:33 +0000)]
Initial version of Galois Counter Mode implementation. Interface is still
subject to change...
Andy Polyakov [Tue, 2 Mar 2010 16:28:29 +0000 (16:28 +0000)]
ppccap.c: portability fix.
Andy Polyakov [Tue, 2 Mar 2010 16:23:40 +0000 (16:23 +0000)]
Fix s390x-specific HOST_l2c|c2l.
Submitted by: Andreas Krebbel
Dr. Stephen Henson [Mon, 1 Mar 2010 23:54:47 +0000 (23:54 +0000)]
PR: 2178
Submitted by: "Kennedy, Brendan" <brendan.kennedy@intel.com>
Handle error codes correctly: cryptodev returns 0 for success whereas OpenSSL
returns 1.
Dr. Stephen Henson [Mon, 1 Mar 2010 14:22:21 +0000 (14:22 +0000)]
use supplied ENGINE in genrsa
Dr. Stephen Henson [Mon, 1 Mar 2010 03:01:27 +0000 (03:01 +0000)]
oops, reinstate correct prototype
Dr. Stephen Henson [Mon, 1 Mar 2010 01:53:34 +0000 (01:53 +0000)]
'typo'
Dr. Stephen Henson [Mon, 1 Mar 2010 01:19:18 +0000 (01:19 +0000)]
make USE_CRYPTODEV_DIGESTS work
Dr. Stephen Henson [Mon, 1 Mar 2010 00:40:10 +0000 (00:40 +0000)]
load cryptodev if HAVE_CRYPTODEV is set too
Dr. Stephen Henson [Mon, 1 Mar 2010 00:37:58 +0000 (00:37 +0000)]
update cryptodev to match 1.0.0 stable branch version
Ben Laurie [Sun, 28 Feb 2010 14:22:56 +0000 (14:22 +0000)]
Fix warnings (note that gcc 4.2 has a bug that makes one of its
warnings hard to fix without major surgery).
Dr. Stephen Henson [Sun, 28 Feb 2010 00:24:04 +0000 (00:24 +0000)]
algorithms field has changed in 1.0.0 and later: update
Dr. Stephen Henson [Sat, 27 Feb 2010 23:03:26 +0000 (23:03 +0000)]
oops, revert verify.c change
Dr. Stephen Henson [Sat, 27 Feb 2010 23:02:41 +0000 (23:02 +0000)]
Add Kerberos fix which was in 0.9.8-stable but never committed to HEAD and
1.0.0. Original fix was on 2007-Mar-09 and had the log message: "Fix kerberos
ciphersuite bugs introduced with PR:1336."
Dr. Stephen Henson [Fri, 26 Feb 2010 19:38:33 +0000 (19:38 +0000)]
include TVS 1.1 version string
Dr. Stephen Henson [Fri, 26 Feb 2010 14:41:58 +0000 (14:41 +0000)]
Revert CFB block length change. Despite what SP800-38a says the input to
CFB mode does *not* have to be a multiple of the block length and several
other specifications (e.g. PKCS#11) do not require this.
Dr. Stephen Henson [Fri, 26 Feb 2010 12:13:36 +0000 (12:13 +0000)]
oops, use correct date
Dr. Stephen Henson [Thu, 25 Feb 2010 18:20:30 +0000 (18:20 +0000)]
update NEWS
Dr. Stephen Henson [Thu, 25 Feb 2010 18:18:46 +0000 (18:18 +0000)]
update FAQ
Dr. Stephen Henson [Thu, 25 Feb 2010 12:21:48 +0000 (12:21 +0000)]
add -trusted_first option and verify flag
Dr. Stephen Henson [Thu, 25 Feb 2010 11:18:26 +0000 (11:18 +0000)]
tidy verify code. xn not used any more and check for self signed more efficiently
Dr. Stephen Henson [Thu, 25 Feb 2010 00:17:22 +0000 (00:17 +0000)]
Experimental support for partial chain verification: if an intermediate
certificate is explicitly trusted (using -addtrust option to x509 utility
for example) the verification is sucessful even if the chain is not complete.
Dr. Stephen Henson [Thu, 25 Feb 2010 00:11:32 +0000 (00:11 +0000)]
allow setting of verify names in command line utilities and print out verify names in verify utility
Dr. Stephen Henson [Thu, 25 Feb 2010 00:08:23 +0000 (00:08 +0000)]
verify parameter enumeration functions
Dr. Stephen Henson [Thu, 25 Feb 2010 00:01:38 +0000 (00:01 +0000)]
Include self-signed flag in certificates by checking SKID/AKID as well
as issuer and subject names. Although this is an incompatible change
it should have little impact in pratice because self-issued certificates
that are not self-signed are rarely encountered.
Dr. Stephen Henson [Wed, 24 Feb 2010 15:53:58 +0000 (15:53 +0000)]
add anyExtendedKeyUsage OID
Dr. Stephen Henson [Wed, 24 Feb 2010 15:24:19 +0000 (15:24 +0000)]
prevent warning
Andy Polyakov [Tue, 23 Feb 2010 16:51:24 +0000 (16:51 +0000)]
Reserve for option to implement AES counter in assembler.
Andy Polyakov [Tue, 23 Feb 2010 16:48:41 +0000 (16:48 +0000)]
Add AES counter mode to EVP.
Andy Polyakov [Tue, 23 Feb 2010 16:47:17 +0000 (16:47 +0000)]
Add assigned OIDs, as well as "anonymous" ones for AES counter mode.
Dr. Stephen Henson [Tue, 23 Feb 2010 14:09:09 +0000 (14:09 +0000)]
The meaning of the X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY and
X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT error codes were reversed in
the verify application documentation.
Bodo Möller [Tue, 23 Feb 2010 10:36:35 +0000 (10:36 +0000)]
Always check bn_wexpend() return values for failure (CVE-2009-3245).
(The CHANGES entry covers the change from PR #2111 as well, submitted by
Martin Olsson.)
Submitted by: Neel Mehta
Bodo Möller [Fri, 19 Feb 2010 18:27:07 +0000 (18:27 +0000)]
Fix X509_STORE locking
Dr. Stephen Henson [Thu, 18 Feb 2010 12:41:33 +0000 (12:41 +0000)]
clarify documentation
Dr. Stephen Henson [Wed, 17 Feb 2010 19:43:56 +0000 (19:43 +0000)]
OR default SSL_OP_LEGACY_SERVER_CONNECT so existing options are preserved
Dr. Stephen Henson [Wed, 17 Feb 2010 18:38:31 +0000 (18:38 +0000)]
Allow renegotiation if SSL_OP_LEGACY_SERVER_CONNECT is set as well as
initial connection to unpatched servers. There are no additional security
concerns in doing this as clients don't see renegotiation during an
attack anyway.
Dr. Stephen Henson [Wed, 17 Feb 2010 14:32:41 +0000 (14:32 +0000)]
PR: 2100
Submitted by: James Baker <jbaker@tableausoftware.com> et al.
Workaround for slow Heap32Next on some versions of Windows.
Dr. Stephen Henson [Tue, 16 Feb 2010 14:30:29 +0000 (14:30 +0000)]
Submitted by: Dmitry Ivanov <vonami@gmail.com>
Don't leave dangling pointers in GOST engine if calls fail.