Richard Levitte [Thu, 1 Aug 2002 19:31:15 +0000 (19:31 +0000)]
Avoid yet another name clash with libdes, and make the declaration consistent
with the definition.
Richard Levitte [Thu, 1 Aug 2002 16:27:47 +0000 (16:27 +0000)]
Make it possible to load keys from stdin, and restore that
functionality in the programs that had that before.
Part fo PR 164
Richard Levitte [Thu, 1 Aug 2002 14:19:08 +0000 (14:19 +0000)]
OCSP and KRB5 Makefil.ssl should be consistent with all the others
Richard Levitte [Thu, 1 Aug 2002 13:50:24 +0000 (13:50 +0000)]
Linux on s390 really knows about loading dynamically.
PR: 183
Richard Levitte [Thu, 1 Aug 2002 13:39:46 +0000 (13:39 +0000)]
Cut'n'paste error with other reposnder certificates cleared.
PR: 190
Richard Levitte [Thu, 1 Aug 2002 10:08:45 +0000 (10:08 +0000)]
If CRYPTO_realloc() is called with a NULL pointer, have it call
OPENSSL_malloc().
PR: 187
Richard Levitte [Wed, 31 Jul 2002 14:06:09 +0000 (14:06 +0000)]
If the email address is moved from the subject to the subject alternate name,
the subject in the certificate would differ from the subject in the index file,
which has quite bad concequences.
PR: 180
Richard Levitte [Wed, 31 Jul 2002 13:49:58 +0000 (13:49 +0000)]
Make sure to use $(MAKE) everywhere instead of make.
Part of PR 181
Richard Levitte [Wed, 31 Jul 2002 13:38:39 +0000 (13:38 +0000)]
ln -f -s doesn't always work, so do a rm -f followed by a ln -s.
Part of PR 181
Lutz Jänicke [Tue, 30 Jul 2002 13:34:44 +0000 (13:34 +0000)]
Typo.
Submitted by: Jeffrey Altman <jaltman@columbia.edu>
Reviewed by:
PR: 169
Lutz Jänicke [Tue, 30 Jul 2002 11:30:03 +0000 (11:30 +0000)]
Typo.
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Tue, 30 Jul 2002 11:27:18 +0000 (11:27 +0000)]
Release 0.9.7-beta3
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Tue, 30 Jul 2002 11:21:19 +0000 (11:21 +0000)]
OpenSSL Security Advisory [30 July 2002]
Changes marked "(CHATS)" were sponsored by the Defense Advanced
Research Projects Agency (DARPA) and Air Force Research Laboratory,
Air Force Materiel Command, USAF, under agreement number
F30602-01-2-0537.
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Tue, 30 Jul 2002 07:18:03 +0000 (07:18 +0000)]
"make update"
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Mon, 29 Jul 2002 13:28:57 +0000 (13:28 +0000)]
Only use DSA-functions if available.
Submitted by: "Hellan,Kim KHE" <KHE@kmd.dk>
Reviewed by:
PR: 167
Bodo Möller [Mon, 29 Jul 2002 12:34:14 +0000 (12:34 +0000)]
mention SSL_do_handshake()
Bodo Möller [Thu, 25 Jul 2002 12:14:41 +0000 (12:14 +0000)]
Add bn_dup_expand() comment from the main branch explaining that
bn_dup_expand() is broken.
[No need to fix this in 0.9.7-stable, it is just an unused internal
function.]
Bodo Möller [Thu, 25 Jul 2002 11:19:36 +0000 (11:19 +0000)]
more detailed instructions for export from US
Richard Levitte [Wed, 24 Jul 2002 14:42:38 +0000 (14:42 +0000)]
Don't clobber loop variable.
PR: 159
Richard Levitte [Tue, 23 Jul 2002 13:46:05 +0000 (13:46 +0000)]
Document the recent DJGPP-related changes
Richard Levitte [Tue, 23 Jul 2002 13:32:10 +0000 (13:32 +0000)]
Make dummy tests to make it easier to physically remove unwanted algorithms.
This should complete PR 75
cvs2svn [Tue, 23 Jul 2002 13:31:07 +0000 (13:31 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Tue, 23 Jul 2002 13:31:04 +0000 (13:31 +0000)]
Make dummy tests to make it easier to physically remove unwanted algorithms.
This should complete PR 75
Bodo Möller [Tue, 23 Jul 2002 09:51:57 +0000 (09:51 +0000)]
harmonize options with those for 'ecparam',
remove redudant option '-pub'
Submitted by: Nils Larsch
Richard Levitte [Mon, 22 Jul 2002 14:18:11 +0000 (14:18 +0000)]
If DH is disabled, don't define the DH functions.
Notified by Kim Hellan <KHE@kmd.dk>
Richard Levitte [Mon, 22 Jul 2002 14:18:00 +0000 (14:18 +0000)]
If DH is disabled, don't define the DH functions.
Notified by Kim Hellan <KHE@kmd.dk>
Bodo Möller [Mon, 22 Jul 2002 09:05:41 +0000 (09:05 +0000)]
fix a typo and clarify
Bodo Möller [Mon, 22 Jul 2002 09:04:36 +0000 (09:04 +0000)]
fix a typo and clarify
Bodo Möller [Mon, 22 Jul 2002 08:39:44 +0000 (08:39 +0000)]
add an explanation and fix a typo
Bodo Möller [Mon, 22 Jul 2002 08:38:14 +0000 (08:38 +0000)]
add an explanation and fix a typo
Lutz Jänicke [Fri, 19 Jul 2002 19:55:34 +0000 (19:55 +0000)]
New cipher selection options COMPLEMENTOFALL and COMPLEMENTOFDEFAULT.
Submitted by:
Reviewed by:
PR: 127
Lutz Jänicke [Fri, 19 Jul 2002 19:53:02 +0000 (19:53 +0000)]
New cipher selection options COMPLEMENTOFALL and COMPLEMENTOFDEFAULT.
Submitted by:
Reviewed by:
PR: 127
Lutz Jänicke [Fri, 19 Jul 2002 16:32:40 +0000 (16:32 +0000)]
HP-UX shared libraries must be +x and should be -w. It doesn't hurt on
other platforms.
Submitted by:
Reviewed by:
PR: 134
Lutz Jänicke [Fri, 19 Jul 2002 16:31:36 +0000 (16:31 +0000)]
HP-UX shared libraries must be +x and should be -w. It doesn't hurt on
other platforms.
Submitted by:
Reviewed by:
PR: 134
Bodo Möller [Fri, 19 Jul 2002 12:32:52 +0000 (12:32 +0000)]
update
Bodo Möller [Fri, 19 Jul 2002 12:32:42 +0000 (12:32 +0000)]
update
Richard Levitte [Fri, 19 Jul 2002 11:57:17 +0000 (11:57 +0000)]
The first compile of the new merger method for VMS *almost* got
through. That's not enough, is it? :-)
Richard Levitte [Fri, 19 Jul 2002 11:56:02 +0000 (11:56 +0000)]
Two more names that are a little too long for the standard VMS linker.
Lutz Jänicke [Fri, 19 Jul 2002 11:53:54 +0000 (11:53 +0000)]
The behaviour is undefined when calling SSL_write() with num=0.
Submitted by:
Reviewed by:
PR: 141
Lutz Jänicke [Fri, 19 Jul 2002 11:53:11 +0000 (11:53 +0000)]
The behaviour is undefined when calling SSL_write() with num=0.
Submitted by:
Reviewed by:
PR: 141
Lutz Jänicke [Fri, 19 Jul 2002 11:06:53 +0000 (11:06 +0000)]
Manual page for SSL_do_handshake().
Submitted by: Martin Sjögren <martin@strakt.com>
PR: 137
cvs2svn [Fri, 19 Jul 2002 11:05:53 +0000 (11:05 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Lutz Jänicke [Fri, 19 Jul 2002 11:05:50 +0000 (11:05 +0000)]
Manual page for SSL_do_handshake().
Submitted by: Martin Sjögren <martin@strakt.com>
PR: 137
Geoff Thorpe [Thu, 18 Jul 2002 20:59:22 +0000 (20:59 +0000)]
This documentation change was being written at the same time as Richard's
changes. So I'm committing this version to overwrite his changes for now,
and he can always take his turn to overwrite my words if he wants :-)
PR: 86
Geoff Thorpe [Thu, 18 Jul 2002 20:52:47 +0000 (20:52 +0000)]
This documentation change was being written at the same time as Richard's
changes. So I'm committing this version to overwrite his changes for now,
and he can always take his turn to overwrite my words if he wants :-)
PR: 86
Richard Levitte [Thu, 18 Jul 2002 19:11:06 +0000 (19:11 +0000)]
Explain why RSA_check_key() doesn't work with hard keys.
PR: 86
Richard Levitte [Thu, 18 Jul 2002 19:10:57 +0000 (19:10 +0000)]
Explain why RSA_check_key() doesn't work with hard keys.
PR: 86
Richard Levitte [Thu, 18 Jul 2002 18:55:06 +0000 (18:55 +0000)]
Add history for documented new functions.
PR: 59
Richard Levitte [Thu, 18 Jul 2002 18:54:46 +0000 (18:54 +0000)]
Add history for documented new functions.
PR: 59
Richard Levitte [Thu, 18 Jul 2002 17:59:38 +0000 (17:59 +0000)]
Allow subjects with more than 255 characters to be properly printed.
PR: 147
Richard Levitte [Thu, 18 Jul 2002 17:59:21 +0000 (17:59 +0000)]
Allow subjects with more than 255 characters to be properly printed.
PR: 147
Richard Levitte [Thu, 18 Jul 2002 12:38:07 +0000 (12:38 +0000)]
Further enhance assembler support on Cygwin and DJGPP.
Make pod2mantest useable on DOS-based systems.
Part of PR 75, the rest is still under investigation.
Richard Levitte [Thu, 18 Jul 2002 12:37:59 +0000 (12:37 +0000)]
Further enhance assembler support on Cygwin and DJGPP.
Make pod2mantest useable on DOS-based systems.
Part of PR 75, the rest is still under investigation.
Bodo Möller [Thu, 18 Jul 2002 11:23:50 +0000 (11:23 +0000)]
Fix bug introduced with revision 1.95 when this filed was modified to
use the new X509_CRL_set_issuer_name() function:
The CRL issuer should be X509_get_subject_name(x509), not
X509_get_issuer_name(x509).
Submitted by: Juergen Lesny <lesnyj@informatik.tu-muenchen.de>
typo
Bodo Möller [Thu, 18 Jul 2002 11:19:05 +0000 (11:19 +0000)]
Fix bug introduced with revision 1.95 when this filed was modified to
use the new X509_CRL_set_issuer_name() function:
The CRL issuer should be X509_get_subject_name(x509), not
X509_get_issuer_name(x509).
Submitted by: Juergen Lesny <lesnyj@informatik.tu-muenchen.de>
typo
Richard Levitte [Thu, 18 Jul 2002 10:39:49 +0000 (10:39 +0000)]
Reverse the change with the following log, it needs further investigation:
Make S/MIME output conform with the mail and MIME standards.
PR: 151
Richard Levitte [Thu, 18 Jul 2002 10:39:20 +0000 (10:39 +0000)]
Reverse the change with the following log, it needs further investigation:
Make S/MIME output conform with the mail and MIME standards.
PR: 151
Richard Levitte [Thu, 18 Jul 2002 08:47:56 +0000 (08:47 +0000)]
Make S/MIME output conform with the mail and MIME standards.
PR: 151
Richard Levitte [Thu, 18 Jul 2002 08:47:33 +0000 (08:47 +0000)]
Make S/MIME output conform with the mail and MIME standards.
PR: 151
Richard Levitte [Thu, 18 Jul 2002 07:47:49 +0000 (07:47 +0000)]
Unixware doesn't have strings.h, so we need to declare strcasecmp()
differently.
Unixware 2 needs to link with libresolv.
PR: 148
Richard Levitte [Thu, 18 Jul 2002 07:47:30 +0000 (07:47 +0000)]
Unixware doesn't have strings.h, so we need to declare strcasecmp()
differently.
Unixware 2 needs to link with libresolv.
PR: 148
Richard Levitte [Thu, 18 Jul 2002 06:34:39 +0000 (06:34 +0000)]
OPENSSL_SYS_WIN32 is important so util/mkdef.pl can detect it
Richard Levitte [Thu, 18 Jul 2002 06:34:34 +0000 (06:34 +0000)]
OPENSSL_SYS_WIN32 is important so util/mkdef.pl can detect it
Richard Levitte [Wed, 17 Jul 2002 13:33:12 +0000 (13:33 +0000)]
Make mkdir failsafe in case the directories are already present
Richard Levitte [Wed, 17 Jul 2002 13:33:02 +0000 (13:33 +0000)]
Make mkdir failsafe in case the directories are already present
Richard Levitte [Wed, 17 Jul 2002 13:28:29 +0000 (13:28 +0000)]
Add support for shared libraries with OS/2.
PR: 124
Richard Levitte [Wed, 17 Jul 2002 13:27:43 +0000 (13:27 +0000)]
Add support for shared libraries with OS/2.
PR: 124
Richard Levitte [Wed, 17 Jul 2002 11:29:34 +0000 (11:29 +0000)]
Add a few FAQ entries for the various ways building OpenSSL on MacOS X
can fail, and point at the text in the PROBLEMS file
Richard Levitte [Wed, 17 Jul 2002 11:29:15 +0000 (11:29 +0000)]
Add a few FAQ entries for the various ways building OpenSSL on MacOS X
can fail, and point at the text in the PROBLEMS file
Richard Levitte [Wed, 17 Jul 2002 11:16:26 +0000 (11:16 +0000)]
If OpenSSL is built with shared library support on MacOS X,
everything works fine. Note: this is only true for 0.9.7 and on
Richard Levitte [Wed, 17 Jul 2002 11:16:22 +0000 (11:16 +0000)]
If OpenSSL is built with shared library support on MacOS X,
everything works fine. Note: this is only true for 0.9.7 and on
Richard Levitte [Wed, 17 Jul 2002 11:09:59 +0000 (11:09 +0000)]
On MacOS X, the shared library editor uses DYLD_LIBRARY_PATH
Richard Levitte [Wed, 17 Jul 2002 11:09:44 +0000 (11:09 +0000)]
On MacOS X, the shared library editor uses DYLD_LIBRARY_PATH
Richard Levitte [Wed, 17 Jul 2002 08:20:56 +0000 (08:20 +0000)]
On MacOS X, you're not allowed to have common objects in shared libraries
Richard Levitte [Wed, 17 Jul 2002 08:20:27 +0000 (08:20 +0000)]
On MacOS X, you're not allowed to have common objects in shared libraries
Richard Levitte [Wed, 17 Jul 2002 07:48:50 +0000 (07:48 +0000)]
Add the usually recommended solution to the linking problem entry for MacOS X
Richard Levitte [Wed, 17 Jul 2002 07:48:39 +0000 (07:48 +0000)]
Add the usually recommended solution to the linking problem entry for MacOS X
Richard Levitte [Tue, 16 Jul 2002 11:07:49 +0000 (11:07 +0000)]
We had some experimental options in the Darwin entries. They are no longer needed
Richard Levitte [Tue, 16 Jul 2002 11:07:42 +0000 (11:07 +0000)]
We had some experimental options in the Darwin entries. They are no longer needed
Richard Levitte [Tue, 16 Jul 2002 10:46:09 +0000 (10:46 +0000)]
The default C compiler on MacOS X doesn't like empty object files
Richard Levitte [Tue, 16 Jul 2002 10:46:00 +0000 (10:46 +0000)]
The default C compiler on MacOS X doesn't like empty object files
Richard Levitte [Tue, 16 Jul 2002 10:38:53 +0000 (10:38 +0000)]
Add the new PROBLEMS section from HEAD
cvs2svn [Tue, 16 Jul 2002 10:20:08 +0000 (10:20 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Tue, 16 Jul 2002 10:20:06 +0000 (10:20 +0000)]
Actually, the "bug" is really documented in the man-page for ld, so
it's really a misfeature according to the jargon file (4.0.0)
definition:
":misfeature: /mis-fee'chr/ or /mis'fee`chr/ /n./ A feature
that eventually causes lossage, possibly because it is not adequate
for a new situation that has evolved. Since it results from a
deliberate and properly implemented feature, a misfeature is not a
bug."
Richard Levitte [Tue, 16 Jul 2002 10:04:40 +0000 (10:04 +0000)]
There are problems on certain platforms, and possible answers on how to (temporarly) solve them.
Richard Levitte [Tue, 16 Jul 2002 09:19:37 +0000 (09:19 +0000)]
For those wanting to build for several platforms with the same source
directory, making a separate directory tree with lots of symbolic links
seems to be the solution. Unfortunately, Configure doesn't take appropriate
steps to support this solution (as in removing a file that's going to be
rewritten). This change corrects that situation. Now I just have to
find all other places where there's lack of support for this.
Richard Levitte [Tue, 16 Jul 2002 09:18:25 +0000 (09:18 +0000)]
For those wanting to build for several platforms with the same source
directory, making a separate directory tree with lots of symbolic links
seems to be the solution. Unfortunately, Configure doesn't take appropriate
steps to support this solution (as in removing a file that's going to be
rewritten). This change corrects that situation. Now I just have to
find all other places where there's lack of support for this.
Richard Levitte [Tue, 16 Jul 2002 08:53:32 +0000 (08:53 +0000)]
For those wanting to build for several platforms with the same source
directory, making a separate directory tree with lots of symbolic links
seems to be the solution. Unfortunatelt, Configure doesn't take appropriate
steps to support this solution (as in removing a file that's going to be
rewritten). This change corrects that situation. Now I just have to
find all other places where there's lack of support for this.
Richard Levitte [Tue, 16 Jul 2002 08:53:14 +0000 (08:53 +0000)]
For those wanting to build for several platforms with the same source
directory, making a separate directory tree with lots of symbolic links
seems to be the solution. Unfortunatelt, Configure doesn't take appropriate
steps to support this solution (as in removing a file that's going to be
rewritten). This change corrects that situation. Now I just have to
find all other places where there's lack of support for this.
Richard Levitte [Tue, 16 Jul 2002 08:02:31 +0000 (08:02 +0000)]
Some older code (never committed) wasn't converted to the new format.
Corrected.
Richard Levitte [Tue, 16 Jul 2002 07:06:48 +0000 (07:06 +0000)]
Let's not forget the second -Wtraditional
Richard Levitte [Tue, 16 Jul 2002 07:06:18 +0000 (07:06 +0000)]
Let's not forget the second -Wtraditional
Richard Levitte [Tue, 16 Jul 2002 06:53:45 +0000 (06:53 +0000)]
Using -Wtraditional took it a little far. After all, we expect ANSI C, so
we don't need to care about traditional compilers
Richard Levitte [Tue, 16 Jul 2002 06:53:22 +0000 (06:53 +0000)]
Using -Wtraditional took it a little far. After all, we expect ANSI C, so
we don't need to care about traditional compilers
Richard Levitte [Tue, 16 Jul 2002 06:52:03 +0000 (06:52 +0000)]
Set up the engine before doing anything random-related, since engine randomness
is only used for seeding and doing it in the wrong order will mean seeding
is done before the engine randomness is hooked in.
Notified by Frederic DONNAT <frederic.donnat@zencod.com>
Richard Levitte [Tue, 16 Jul 2002 06:51:45 +0000 (06:51 +0000)]
Set up the engine before doing anything random-related, since engine randomness
is only used for seeding and doing it in the wrong order will mean seeding
is done before the engine randomness is hooked in.
Notified by Frederic DONNAT <frederic.donnat@zencod.com>
Richard Levitte [Mon, 15 Jul 2002 15:35:40 +0000 (15:35 +0000)]
There's an ongoing project to bring some kind of path selection
mechanism to the ENGINE framework. This means there there are going
to be new functionality for the DSO part, and ultimately some way of
merging two file specifications together.
This commit places the merging code into the repository. It's
currently not used anywhere, and hasn't been tested at all. It may be
full of errors, including syntactical ones. Those will be fixed as
promptly as possible.
Bodo Möller [Sun, 14 Jul 2002 16:54:31 +0000 (16:54 +0000)]
Replace 'ecdsaparam' commandline utility by 'ecparam'
(the same keys can be used for ECC schemes other than ECDSA)
and add some new options.
Similarly, use string "EC PARAMETERS" instead of "ECDSA PARAMETERS"
in 'PEM' format.
Fix ec_asn1.c (take into account the desired conversion form).
'make update'.
Submitted by: Nils Larsch
Lutz Jänicke [Fri, 12 Jul 2002 15:27:01 +0000 (15:27 +0000)]
Rewording: some algorithms are also patented in Europe, so choose more
defensive phrases...
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Fri, 12 Jul 2002 15:26:37 +0000 (15:26 +0000)]
Rewording: some algorithms are also patented in Europe, so choose more
defensive phrases...