Andy Polyakov [Fri, 3 Jan 2003 10:50:38 +0000 (10:50 +0000)]
pa-risc2.s was not PIC, see RT#426. I strip call to fprintf as it's
never called anyway (it's a debugging assertion). If pa-risc2W.s is
PIC remains to be seen...
Richard Levitte [Fri, 3 Jan 2003 08:51:48 +0000 (08:51 +0000)]
Rijndael should be called AES everywhere
Richard Levitte [Wed, 1 Jan 2003 23:41:50 +0000 (23:41 +0000)]
Adjust the parameter lists in some not commonly used files.
PR: 428
Ben Laurie [Wed, 1 Jan 2003 15:48:38 +0000 (15:48 +0000)]
Fix warnings, use correct -Ds.
Richard Levitte [Wed, 1 Jan 2003 03:41:01 +0000 (03:41 +0000)]
Make sure the last character of the ASN.1 time string (the 'Z') is copied.
PR: 429
Richard Levitte [Tue, 31 Dec 2002 00:59:36 +0000 (00:59 +0000)]
It's rather silly to believe we'd release 0.9.7a in 2002 :-).
Richard Levitte [Tue, 31 Dec 2002 00:02:34 +0000 (00:02 +0000)]
Tagging is done, move on to development of 0.9.7a.
Richard Levitte [Mon, 30 Dec 2002 23:54:11 +0000 (23:54 +0000)]
Time for release of OpenSSL 0.9.7.
The tag will be OpenSSL_0_9_7.
Andy Polyakov [Mon, 30 Dec 2002 20:20:25 +0000 (20:20 +0000)]
My English is definitely not good as my assembly skills:-) And it looks
like titles can't be multi-line (it doesn't look good on the FAQ web-page).
Andy Polyakov [Mon, 30 Dec 2002 11:08:56 +0000 (11:08 +0000)]
It probably belongs in PROBLEMS, but it's more likely to be a FAQ.
Richard Levitte [Sun, 29 Dec 2002 23:03:16 +0000 (23:03 +0000)]
Since we're including Kerberos 5 headers in our exported header files (when
OpenSSL is configured to use Kerberos), we'd better tell pkg-config users
where they can be found.
PR: 421
Lutz Jänicke [Sun, 29 Dec 2002 21:23:43 +0000 (21:23 +0000)]
Add information about AES cipher suites to ciphers manual page.
If no authentication method is mentioned in the cipher suite name (e.g.
AES128-SHA), RSA authentication is used (PR #396).
Lutz Jänicke [Sun, 29 Dec 2002 20:58:55 +0000 (20:58 +0000)]
Fix wrong handling of session ID in SSLv2 client code.
PR: 377
Richard Levitte [Sun, 29 Dec 2002 10:20:01 +0000 (10:20 +0000)]
OS/2 does binary by default, apparently.
Reported by Brian Havard <brianh@kheldar.apana.org.au>.
Richard Levitte [Sat, 28 Dec 2002 02:37:05 +0000 (02:37 +0000)]
Make sure OPENSSL_SYS_ macros are defined.
Richard Levitte [Sat, 28 Dec 2002 02:30:47 +0000 (02:30 +0000)]
make update
Richard Levitte [Sat, 28 Dec 2002 02:30:26 +0000 (02:30 +0000)]
Make sure OPENSSL_SYS_ macros are defined, and in md5_locl.h, switch
back to using OPENSSL_SYS_ULTRASPARC.
Richard Levitte [Sat, 28 Dec 2002 01:35:25 +0000 (01:35 +0000)]
make update
Richard Levitte [Sat, 28 Dec 2002 01:35:11 +0000 (01:35 +0000)]
Hmm, the variables $x96_elf_asm and others contain a number of colons,
so when removing one reference, if should be replaced with the
appropriate number of colons, or chaos will follow...
Andy Polyakov [Fri, 27 Dec 2002 16:49:47 +0000 (16:49 +0000)]
According to Tim Rice <tim@multitalents.net> assembler support in SCO5
never worked anyway. Note this is not going to HEAD as we intend to
provide an alternative solution as soon as 0.9.7 is out.
Andy Polyakov [Fri, 27 Dec 2002 15:06:13 +0000 (15:06 +0000)]
I can't confirm the claim being removed and nobody seems to speak up for it.
Yes, this implies that corresponding targets in beta6 pass the test suite.
Andy Polyakov [Fri, 27 Dec 2002 14:50:13 +0000 (14:50 +0000)]
UltraSPARC performance "tune-up."
Andy Polyakov [Fri, 27 Dec 2002 14:29:18 +0000 (14:29 +0000)]
FAQ addenum as discussed in RT#417.
Richard Levitte [Fri, 27 Dec 2002 14:01:42 +0000 (14:01 +0000)]
Kenneth R. Robinette just told me the latest snapshot works well with
MIT Kerberos.
Richard Levitte [Fri, 27 Dec 2002 08:09:11 +0000 (08:09 +0000)]
Can't find the referense to errors on XP with Kerberos
Richard Levitte [Thu, 26 Dec 2002 22:35:07 +0000 (22:35 +0000)]
Add SPKM among the related stanrds.
Richard Levitte [Thu, 26 Dec 2002 22:25:04 +0000 (22:25 +0000)]
Updates
Richard Levitte [Thu, 26 Dec 2002 00:21:55 +0000 (00:21 +0000)]
Update our list of implemented and related standards.
Richard Levitte [Thu, 26 Dec 2002 00:17:49 +0000 (00:17 +0000)]
Update our list of implemented and related standards.
Richard Levitte [Wed, 25 Dec 2002 22:17:00 +0000 (22:17 +0000)]
Spelling error.
This patch was taken from the OpenBSD copy of OpenSSL 0.9.7 beta3 with patches
Richard Levitte [Tue, 24 Dec 2002 23:53:50 +0000 (23:53 +0000)]
Avoid double definition of config.
PR: 420
Richard Levitte [Tue, 24 Dec 2002 23:52:10 +0000 (23:52 +0000)]
Updates
Lutz Jänicke [Tue, 24 Dec 2002 21:53:34 +0000 (21:53 +0000)]
Some more adjustments
Submitted by: Jeffrey Altman <jaltman@columbia.edu>, "Kenneth R. Robinette" <support@securenetterm.com>
Richard Levitte [Tue, 24 Dec 2002 10:50:18 +0000 (10:50 +0000)]
Cygwin needs the library locatin for .DLLs to be set in PATH. Unfortunately,
the conditional was set to add the library directory to PATH when the
platform is NOT Cygwin. Corrected.
PR: 404
Richard Levitte [Tue, 24 Dec 2002 10:38:08 +0000 (10:38 +0000)]
All VMS-specific problems have been solved.
Confirmed by Mark Daniel <Mark.Daniel@wasd.vsm.com.au>
Richard Levitte [Mon, 23 Dec 2002 11:25:55 +0000 (11:25 +0000)]
Finally, a bn_div_words() in VAX assembler that goes through all tests.
PR: 413
Richard Levitte [Sat, 21 Dec 2002 23:49:25 +0000 (23:49 +0000)]
Stop a possible memory leak.
(I wonder why s2_connect() handles the initial buffer allocation slightly
differently...)
PR: 416
Richard Levitte [Fri, 20 Dec 2002 18:21:38 +0000 (18:21 +0000)]
Make AES_ENCRYPT and AES_DECRYPT macros instead of static constants.
PR: 411
Andy Polyakov [Fri, 20 Dec 2002 18:10:39 +0000 (18:10 +0000)]
Fix for "shift count too large" when compiling for hpux-parisc2 and
irix-mips. The bug was introduced with accelerated support for x86_64.
My fault! Fixed now.
Richard Levitte [Fri, 20 Dec 2002 16:38:40 +0000 (16:38 +0000)]
More accurate comments.
Richard Levitte [Fri, 20 Dec 2002 16:38:09 +0000 (16:38 +0000)]
A little debugging.
Richard Levitte [Fri, 20 Dec 2002 15:28:45 +0000 (15:28 +0000)]
Propagate MAKEDEPPROG to the subdirs under crypto/.
Lutz Jänicke [Fri, 20 Dec 2002 12:47:16 +0000 (12:47 +0000)]
Fix Kerberos5/SSL interaction
Submitted by: "Kenneth R. Robinette" <support@securenetterm.com>
Reviewed by:
PR:
Richard Levitte [Fri, 20 Dec 2002 09:39:42 +0000 (09:39 +0000)]
Keep the internal lowercase 'surname', for programmer's sake.
Richard Levitte [Fri, 20 Dec 2002 09:24:24 +0000 (09:24 +0000)]
Be consistent with capitalisation of object names.
Richard Levitte [Fri, 20 Dec 2002 09:18:21 +0000 (09:18 +0000)]
Be consistent with capitalisation of object names.
Richard Levitte [Fri, 20 Dec 2002 07:51:08 +0000 (07:51 +0000)]
There was a mixup between INSTALLTOP and OPENSSLDIR...
Richard Levitte [Thu, 19 Dec 2002 22:10:20 +0000 (22:10 +0000)]
We stupidly had a separate LIBKRB5 variable for KRB5 library dependencies,
and then didn't support it very well. And that when there already is a
useful variable for exactly this kind of thing; EX_LIBS...
Richard Levitte [Thu, 19 Dec 2002 21:56:42 +0000 (21:56 +0000)]
Because the contents of openssl.pc may have to change when a configuration
has been performed (and possibly changed), have it depend on Makefile.ssl.
Richard Levitte [Thu, 19 Dec 2002 21:55:50 +0000 (21:55 +0000)]
Small tweaks for code consistency.
Richard Levitte [Thu, 19 Dec 2002 19:42:55 +0000 (19:42 +0000)]
I have no idea what possesed me to compile s_socket.c as POSIXly code.
Incidently, it now compiles so much better without _POSIX_C_SOURCE.
Richard Levitte [Thu, 19 Dec 2002 19:38:51 +0000 (19:38 +0000)]
If _XOPEN_SOURCE_EXTENDED or _XOPEN_SOURCE are defined, _POSIX_C_SOURCE gets
defined in DECC$TYPES.H. If _POSIX_C_SOURCE is defined, certain types do
not get defined (u_char, u_int, ...). DECC.H gets included by assert.h
and others. Now, in6.h uses the types u_char, u_int and so on, and gets
included as part of other header inclusions, and will of course fail because
of the missing types.
On the other hand, _XOPEN_SOURCE_EXTENDED is needed to get gethostname()
properly declared...
Solution: define _XOPEN_SOURCE_EXTENDED much later, so DECC$TYPES.H has
a chance to be included *first*, so the otherwise missing types get defined
properly.
Personal: *mumble* *mumble*
Richard Levitte [Thu, 19 Dec 2002 17:44:45 +0000 (17:44 +0000)]
It was pointed out to me that .pc files are normally stored in
${prefix}/lib/pkgconfig, not ${prefix}/lib/pkginfo.
Richard Levitte [Thu, 19 Dec 2002 17:42:25 +0000 (17:42 +0000)]
It was pointed out to me that .pc files are normally stored in
${prefix}/lib/pkgconfig, not ${prefix}/lib/pkginfo.
Richard Levitte [Wed, 18 Dec 2002 10:24:04 +0000 (10:24 +0000)]
Update the current status
Andy Polyakov [Wed, 18 Dec 2002 09:02:07 +0000 (09:02 +0000)]
Fix for RT#405, Solaris refuses to invoke preprocessor if egrep returns 1.
Linux for example doesn't exhibit this behaviour, but I add "exit 0" to all
potentially affected rules, just to be on the safe side.
Richard Levitte [Tue, 17 Dec 2002 14:48:24 +0000 (14:48 +0000)]
Move on to beta7 (hopefully, that will never appear)
Richard Levitte [Tue, 17 Dec 2002 14:24:51 +0000 (14:24 +0000)]
Time to release OpenSSL 0.9.7 beta6.
The tag will be OpenSSL_0_9_7-beta6.
Richard Levitte [Tue, 17 Dec 2002 14:21:55 +0000 (14:21 +0000)]
A few more NEWS items.
Andy Polyakov [Tue, 17 Dec 2002 08:01:28 +0000 (08:01 +0000)]
Make "perl des-586.pl a.out" work, see RT#402
Andy Polyakov [Mon, 16 Dec 2002 18:59:05 +0000 (18:59 +0000)]
Some of Sun compiler drivers (well, one of those I have) collect all
options specified with -Wl in the beginnig of the ld command line which
kind of obsoletes the idea as it's -z defaultextract that will be
closest to lib*.a and not -z allextract:-(
Andy Polyakov [Mon, 16 Dec 2002 18:17:24 +0000 (18:17 +0000)]
This is rollback to 0.9.6h bn_mul.c to address problem reported in RT#272.
Richard Levitte [Mon, 16 Dec 2002 06:06:06 +0000 (06:06 +0000)]
Protect loading routines with a lock.
PR: 373
Geoff Thorpe [Sun, 15 Dec 2002 21:20:25 +0000 (21:20 +0000)]
"=head3" tags only work with recent versions of the pod tools and 0.9.7
should cooperate with older environments. This replaces them with "I<..>"
tags.
Geoff Thorpe [Sun, 15 Dec 2002 16:45:28 +0000 (16:45 +0000)]
The ampersand is not required in these constructs, and was giving AIX
warnings.
Reported by: Bernhard Simon.
Andy Polyakov [Sun, 15 Dec 2002 16:00:26 +0000 (16:00 +0000)]
Always forget this one...
Andy Polyakov [Sun, 15 Dec 2002 15:27:53 +0000 (15:27 +0000)]
Another Solaris shared build clean-up. This is not actually needed if one
uses WorkShop C. It's gcc driver that brings copy of libgcc.a into .so
otherwise. In case you wonder what it's -Wl,-z... and not just -z. Problem
is that gcc driver apparently omits all -z options but -z text. Don't ask
me why. I'm not committing corresponding workaround into the HEAD as
Makefile.shared reportedly needs even more work...
Andy Polyakov [Sun, 15 Dec 2002 10:05:29 +0000 (10:05 +0000)]
DES PIC-ification. "Cygwin" companion. Problem was that preprocessor macro
is not expanded if prepended with a $-sign.
Richard Levitte [Sun, 15 Dec 2002 06:45:46 +0000 (06:45 +0000)]
Make sure manual pages are properly linked to on systems that have case
insensitive file names, as well as those that do not have symlinks.
Incidently, both these cases apply on DOS/Windows...
Richard Levitte [Sun, 15 Dec 2002 06:00:29 +0000 (06:00 +0000)]
Update the make system for installations:
- define a HERE variable to indicate where the source tree is (not
used right now)
- make more use of copying and making attribute changes to {file}.new,
and then move it to {file}
- use 'mv -f' to avoid all those questions to the user when the file
in question doesn't have write attributes for that user.
Richard Levitte [Sun, 15 Dec 2002 05:54:58 +0000 (05:54 +0000)]
Don't define macros in terms of asm() when __STRICT_ANSI is defined.
Andy Polyakov [Sun, 15 Dec 2002 00:44:00 +0000 (00:44 +0000)]
Ooops! No ROTATE on some platforms after x86_64 performance patch...
Andy Polyakov [Sat, 14 Dec 2002 23:13:19 +0000 (23:13 +0000)]
As you might have noticed I tried to change for . prefix, because it's
the one to be used to denote local labels in single function scope.
Problem is that SHA uses same label set across functions, therefore I
have to switch back to $ prefix.
Andy Polyakov [Sat, 14 Dec 2002 21:51:23 +0000 (21:51 +0000)]
Solaris shared build fix-ups. See RT#238,239 for details.
Andy Polyakov [Sat, 14 Dec 2002 20:45:39 +0000 (20:45 +0000)]
x86_64 performance patch.
cvs2svn [Sat, 14 Dec 2002 20:42:08 +0000 (20:42 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Andy Polyakov [Sat, 14 Dec 2002 20:42:05 +0000 (20:42 +0000)]
x86_64 performance patch.
Andy Polyakov [Sat, 14 Dec 2002 17:54:30 +0000 (17:54 +0000)]
DES PIC-ification. Windows companion.
Andy Polyakov [Sat, 14 Dec 2002 17:52:35 +0000 (17:52 +0000)]
DES PIC-ification. Windows companion.
Geoff Thorpe [Fri, 13 Dec 2002 22:01:46 +0000 (22:01 +0000)]
The ampersand is not required in these constructs, and was giving AIX
warnings.
Reported by: Bernhard Simon.
Andy Polyakov [Fri, 13 Dec 2002 17:56:14 +0000 (17:56 +0000)]
IA-32 assembler modules (primarily DES) PIC-ification. Idea is to keep
shared libraries shared.
Andy Polyakov [Fri, 13 Dec 2002 17:31:01 +0000 (17:31 +0000)]
IA-32 assembler modules (primarily DES) PIC-ification. Idea is to keep
shared libraries shared.
Richard Levitte [Fri, 13 Dec 2002 07:30:59 +0000 (07:30 +0000)]
OK, there's at least one application author who has provided dynamic locking
callbacks
Richard Levitte [Fri, 13 Dec 2002 07:30:53 +0000 (07:30 +0000)]
OK, there's at least one application author who has provided dynamic locking
callbacks
Richard Levitte [Thu, 12 Dec 2002 22:12:04 +0000 (22:12 +0000)]
BIO_new_bio_pair() was unnecessarily described in it's own page as well as in
BIO_s_bio.pod. The most logical is to move everything needed from
BIO_new_bio_pair.pod to BIO_s_bio.pod (including the nice example)
and toss BIO_new_bio_pair.pod. I hope I got all the info over properly.
PR: 370
Richard Levitte [Thu, 12 Dec 2002 22:12:02 +0000 (22:12 +0000)]
BIO_new_bio_pair() was unnecessarily described in it's own page as well as in
BIO_s_bio.pod. The most logical is to move everything needed from
BIO_new_bio_pair.pod to BIO_s_bio.pod (including the nice example)
and toss BIO_new_bio_pair.pod. I hope I got all the info over properly.
PR: 370
Richard Levitte [Thu, 12 Dec 2002 22:08:52 +0000 (22:08 +0000)]
BIO_set_nbio() is enumerated, but not explained. Remove it from enumeration
since it's both enumerated and explained in BIO_s_connect.pod.
PR: 370
Richard Levitte [Thu, 12 Dec 2002 22:08:49 +0000 (22:08 +0000)]
BIO_set_nbio() is enumerated, but not explained. Remove it from enumeration
since it's both enumerated and explained in BIO_s_connect.pod.
PR: 370
Richard Levitte [Thu, 12 Dec 2002 19:40:55 +0000 (19:40 +0000)]
I forgot one item I intend to work on.
Richard Levitte [Thu, 12 Dec 2002 18:43:32 +0000 (18:43 +0000)]
Skip DH-specific tests when no-dh has been configured.
PR: 353
Richard Levitte [Thu, 12 Dec 2002 18:43:10 +0000 (18:43 +0000)]
Skip DH-specific tests when no-dh has been configured.
PR: 353
Richard Levitte [Thu, 12 Dec 2002 17:41:36 +0000 (17:41 +0000)]
Add a static lock called HWCRHK, for the case of having an application
that wants to use the hw_ncipher engine without having given any
callbacks for the dynamic type of locks.
Richard Levitte [Thu, 12 Dec 2002 17:40:15 +0000 (17:40 +0000)]
Document the modifications in 0.9.7 that will make the hw_ncipher.c
engine work properly even in bad situations.
Geoff Thorpe [Wed, 11 Dec 2002 19:07:03 +0000 (19:07 +0000)]
Make 'tunala' link with zlib if possible (so it works if openssl was
configured with zlib support).
Richard Levitte [Wed, 11 Dec 2002 08:56:42 +0000 (08:56 +0000)]
In CRYPTO_lock(), check that the application cares about locking (provided
callbacks) before attempting to lock.
Richard Levitte [Wed, 11 Dec 2002 08:56:35 +0000 (08:56 +0000)]
In CRYPTO_lock(), check that the application cares about locking (provided
callbacks) before attempting to lock.
Richard Levitte [Wed, 11 Dec 2002 08:33:37 +0000 (08:33 +0000)]
sk_*_push() returns the number of items on the stack, not the index of the
pushed item. The index is the number of items - 1. And if a NULL item was
found, actually use it.
Finally, provide a little bit of safety in CRYPTO_lock() by asserting the a
requested dynamic lock really must exist, instead of just being silent about it
Richard Levitte [Wed, 11 Dec 2002 08:33:31 +0000 (08:33 +0000)]
sk_*_push() returns the number of items on the stack, not the index of the
pushed item. The index is the number of items - 1. And if a NULL item was
found, actually use it.
Finally, provide a little bit of safety in CRYPTO_lock() by asserting the a
requested dynamic lock really must exist, instead of just being silent about it
Richard Levitte [Wed, 11 Dec 2002 07:37:57 +0000 (07:37 +0000)]
Let's not forget the other places where HEADER_DES_H and HEADER_DES_OLD_H
were defined.
Richard Levitte [Wed, 11 Dec 2002 07:37:54 +0000 (07:37 +0000)]
Let's not forget the other places where HEADER_DES_H and HEADER_DES_OLD_H
were defined.