oweals/openssl.git
24 years agoMerge of main trunk, conflicts resolved.
Richard Levitte [Tue, 12 Sep 2000 08:37:51 +0000 (08:37 +0000)]
Merge of main trunk, conflicts resolved.

24 years agoThis commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.
cvs2svn [Tue, 12 Sep 2000 01:56:57 +0000 (01:56 +0000)]
This commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.

24 years agoMore BIO docs.
Dr. Stephen Henson [Tue, 12 Sep 2000 01:56:56 +0000 (01:56 +0000)]
More BIO docs.

24 years agoDSA_verify() and DSA_sign() might return -1...
Richard Levitte [Mon, 11 Sep 2000 22:21:38 +0000 (22:21 +0000)]
DSA_verify() and DSA_sign() might return -1...

24 years agoActually, that was perfectly correct. The fault is in the checking
Richard Levitte [Mon, 11 Sep 2000 22:17:31 +0000 (22:17 +0000)]
Actually, that was perfectly correct.  The fault is in the checking
elsewhere.

24 years agocswift_dsa_verify() incorrectly return -1 on error.
Richard Levitte [Mon, 11 Sep 2000 22:15:53 +0000 (22:15 +0000)]
cswift_dsa_verify() incorrectly return -1 on error.

24 years agoA couple more HP-UX targets tested.
Richard Levitte [Mon, 11 Sep 2000 22:02:07 +0000 (22:02 +0000)]
A couple more HP-UX targets tested.

24 years agodebug-linux-elf and debug-linux-elf-efence need to be linked with
Richard Levitte [Mon, 11 Sep 2000 21:57:27 +0000 (21:57 +0000)]
debug-linux-elf and debug-linux-elf-efence need to be linked with
libdl just as linux-elf...

24 years agoFailure on Solaris when using the CSwift card.
Richard Levitte [Mon, 11 Sep 2000 20:32:35 +0000 (20:32 +0000)]
Failure on Solaris when using the CSwift card.

24 years agomkdef.pl still needed better logic. Also, the semantics of the
Richard Levitte [Mon, 11 Sep 2000 20:04:58 +0000 (20:04 +0000)]
mkdef.pl still needed better logic.  Also, the semantics of the
platforms list is clarified (it's however not quite followed in the
RSAREF case...).

RSAREF is also checked now.

24 years agoDocument an old change.
Ben Laurie [Mon, 11 Sep 2000 17:58:09 +0000 (17:58 +0000)]
Document an old change.

24 years agomkdef.pl has erroneous conditions to check if a symbol is excluded
Richard Levitte [Mon, 11 Sep 2000 17:31:05 +0000 (17:31 +0000)]
mkdef.pl has erroneous conditions to check if a symbol is excluded
from the given target.  Fixed, I hope.

24 years agolinux-elf passed
Richard Levitte [Mon, 11 Sep 2000 17:10:21 +0000 (17:10 +0000)]
linux-elf passed

24 years agoOpenBSD doesn't support timeb.
Richard Levitte [Mon, 11 Sep 2000 16:46:35 +0000 (16:46 +0000)]
OpenBSD doesn't support timeb.

24 years agoDon't include e_os.h before the system headers
Richard Levitte [Mon, 11 Sep 2000 16:37:36 +0000 (16:37 +0000)]
Don't include e_os.h before the system headers

24 years agoReports for OpenBSD 2.7 and HP-UX 10.20
Richard Levitte [Mon, 11 Sep 2000 16:36:14 +0000 (16:36 +0000)]
Reports for OpenBSD 2.7 and HP-UX 10.20

24 years agoTime to build the beta of the engine branch. Change version number OpenSSL-engine-0_9_6-beta1
Richard Levitte [Mon, 11 Sep 2000 13:28:35 +0000 (13:28 +0000)]
Time to build the beta of the engine branch.  Change version number
texts accordingly.

24 years agoMerge of main trunk, no conflicts this time.
Richard Levitte [Mon, 11 Sep 2000 13:23:47 +0000 (13:23 +0000)]
Merge of main trunk, no conflicts this time.
make update

24 years agoLast minute update, in time to make it to 0.9.6-beta1
Richard Levitte [Mon, 11 Sep 2000 13:06:48 +0000 (13:06 +0000)]
Last minute update, in time to make it to 0.9.6-beta1

24 years agoTime to release a beta. Change the status accordingly.
Richard Levitte [Mon, 11 Sep 2000 12:39:43 +0000 (12:39 +0000)]
Time to release a beta.  Change the status accordingly.

24 years agoTime to release a beta. Change the version numbers and dates
Richard Levitte [Mon, 11 Sep 2000 12:31:36 +0000 (12:31 +0000)]
Time to release a beta.  Change the version numbers and dates
accordingly.

24 years agoI started with a make update, but a rewrite was actually needed.
Richard Levitte [Mon, 11 Sep 2000 11:45:02 +0000 (11:45 +0000)]
I started with a make update, but a rewrite was actually needed.
Perhaps we should make rewrites the default thing to do?

24 years agoA cast is needed or Borland C will complain.
Richard Levitte [Mon, 11 Sep 2000 11:43:35 +0000 (11:43 +0000)]
A cast is needed or Borland C will complain.

24 years agoMerge of main trunk, no conflicts this time
Richard Levitte [Mon, 11 Sep 2000 10:18:56 +0000 (10:18 +0000)]
Merge of main trunk, no conflicts this time

24 years agoThis commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.
cvs2svn [Mon, 11 Sep 2000 01:04:10 +0000 (01:04 +0000)]
This commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.

24 years agoDocs for cipher and base64 BIOs.
Dr. Stephen Henson [Mon, 11 Sep 2000 01:04:09 +0000 (01:04 +0000)]
Docs for cipher and base64 BIOs.

24 years agoMore new BIO docs, correct some old ones.
Dr. Stephen Henson [Sun, 10 Sep 2000 17:36:15 +0000 (17:36 +0000)]
More new BIO docs, correct some old ones.

24 years agoMarin Kraemer <Martin.Kraemer@MchP.Siemens.De> sent us patches to make
Richard Levitte [Sun, 10 Sep 2000 14:45:19 +0000 (14:45 +0000)]
Marin Kraemer <Martin.Kraemer@MchP.Siemens.De> sent us patches to make
the OpenSSL commands x50 and req work better on a EBCDIC system.

24 years agoMore preliminary BIO docs...
Dr. Stephen Henson [Sun, 10 Sep 2000 01:52:26 +0000 (01:52 +0000)]
More preliminary BIO docs...

Incomplete and possibly inaccurate. Hope somone is
checking these :-)

24 years agoMerge of main trunk, no conflicts this time
Richard Levitte [Sat, 9 Sep 2000 18:10:35 +0000 (18:10 +0000)]
Merge of main trunk, no conflicts this time

24 years agoMore VMS synchronisation
Richard Levitte [Sat, 9 Sep 2000 18:05:27 +0000 (18:05 +0000)]
More VMS synchronisation

24 years agoSince C compilers on VMS (perhaps with gcc being the great exception)
Richard Levitte [Sat, 9 Sep 2000 07:14:43 +0000 (07:14 +0000)]
Since C compilers on VMS (perhaps with gcc being the great exception)
do not quite follow the same rules as on Unix, we need to use the
FLAT_INC tweak to include the vendor-specific header files.

24 years agoSynchronise VMS with Unix.
Richard Levitte [Sat, 9 Sep 2000 07:07:54 +0000 (07:07 +0000)]
Synchronise VMS with Unix.

24 years agoMerge of main trunk, no conflicts this time
Richard Levitte [Sat, 9 Sep 2000 07:03:02 +0000 (07:03 +0000)]
Merge of main trunk, no conflicts this time

24 years agoFix some CygWin problems.
Ulf Möller [Sat, 9 Sep 2000 04:45:18 +0000 (04:45 +0000)]
Fix some CygWin problems.

24 years agoThis commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.
cvs2svn [Sat, 9 Sep 2000 01:01:36 +0000 (01:01 +0000)]
This commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.

24 years agoReally add BIO_read this time...
Dr. Stephen Henson [Sat, 9 Sep 2000 01:01:35 +0000 (01:01 +0000)]
Really add BIO_read this time...

24 years agoAdd BIO_read() (etc.) docs.
Dr. Stephen Henson [Sat, 9 Sep 2000 00:59:37 +0000 (00:59 +0000)]
Add BIO_read() (etc.) docs.

Add an ASN1 FAQ because I'm sick of answering it :-)

24 years agoClarify how one should behave when make fails. The fault is not
Richard Levitte [Fri, 8 Sep 2000 22:19:27 +0000 (22:19 +0000)]
Clarify how one should behave when make fails.  The fault is not
necessarely ours.

24 years agoSynchronise the VMS build with the Unix one.
Richard Levitte [Fri, 8 Sep 2000 20:25:49 +0000 (20:25 +0000)]
Synchronise the VMS build with the Unix one.

24 years agoTwo places where I forgot to change vms_idhacks to symhacks.
Richard Levitte [Fri, 8 Sep 2000 06:28:09 +0000 (06:28 +0000)]
Two places where I forgot to change vms_idhacks to symhacks.

24 years agoUpdate verify docs.
Dr. Stephen Henson [Fri, 8 Sep 2000 00:53:58 +0000 (00:53 +0000)]
Update verify docs.

New option to verify program to print out diagnostics.

24 years agoTwo new PKCS#12 demo programs.
Dr. Stephen Henson [Thu, 7 Sep 2000 23:14:26 +0000 (23:14 +0000)]
Two new PKCS#12 demo programs.

Update PKCS12_parse().

Make the keyid in certificate aux info more usable.

24 years agoUgh, BIO_find_type() cannot be passed a NULL.
Dr. Stephen Henson [Thu, 7 Sep 2000 17:42:25 +0000 (17:42 +0000)]
Ugh, BIO_find_type() cannot be passed a NULL.

Fix doc example, and fix BIO_find_type().

Fix PKCS7_verify(). It was using 'i' for both the
loop variable and the verify return value.

24 years agoFix a little glitch before I forget about it. (I noticed it while reading
Geoff Thorpe [Thu, 7 Sep 2000 17:09:05 +0000 (17:09 +0000)]
Fix a little glitch before I forget about it. (I noticed it while reading
through the diff from Richard's last commit.)

24 years agoIntegrate engine in most utilities. Now really tested yet.
Richard Levitte [Thu, 7 Sep 2000 16:19:27 +0000 (16:19 +0000)]
Integrate engine in most utilities.  Now really tested yet.

24 years agoAdd docs for BIO_find_type() and friends.
Dr. Stephen Henson [Thu, 7 Sep 2000 13:04:27 +0000 (13:04 +0000)]
Add docs for BIO_find_type() and friends.

Added function BIO_next() otherwise you can't
traverse a chain without accessing BIO internals.

24 years agoMerge main trunk to engine branch, all conflicts resolved.
Richard Levitte [Thu, 7 Sep 2000 10:59:04 +0000 (10:59 +0000)]
Merge main trunk to engine branch, all conflicts resolved.

24 years ago'make update'
Richard Levitte [Thu, 7 Sep 2000 08:46:51 +0000 (08:46 +0000)]
'make update'

24 years ago*.num rewitten to include the extra information.
Richard Levitte [Thu, 7 Sep 2000 08:44:13 +0000 (08:44 +0000)]
*.num rewitten to include the extra information.

24 years agoMajor hack of mkdef.pl. There should be no more need to redo the
Richard Levitte [Thu, 7 Sep 2000 08:43:08 +0000 (08:43 +0000)]
Major hack of mkdef.pl.  There should be no more need to redo the
process when some symbols are missing.  Instead, all needed info is
saved in the .num files, including what conditions are needed for a
specific symbol to exist.

This was needed for the work I'm doing with shared libraries under
VMS.

24 years agoThis commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.
cvs2svn [Thu, 7 Sep 2000 08:18:06 +0000 (08:18 +0000)]
This commit was manufactured by cvs2svn to create branch 'BRANCH_engine'.

24 years agoIt's not just VMS that needs some symbols to be hacked. Let's
Richard Levitte [Thu, 7 Sep 2000 08:18:05 +0000 (08:18 +0000)]
It's not just VMS that needs some symbols to be hacked.  Let's
centralise those hacks in crypto/symhacks.h and use it everywhere it's
needed.

24 years agoAnother thing I'm working on.
Richard Levitte [Thu, 7 Sep 2000 08:14:46 +0000 (08:14 +0000)]
Another thing I'm working on.

24 years agoclarification (source/sink BIOs are usually *both* source and sink)
Bodo Möller [Thu, 7 Sep 2000 08:07:55 +0000 (08:07 +0000)]
clarification (source/sink BIOs are usually *both* source and sink)

24 years agoChange the printing mahine used by BIO_printf() and friends so it can
Richard Levitte [Thu, 7 Sep 2000 05:50:14 +0000 (05:50 +0000)]
Change the printing mahine used by BIO_printf() and friends so it can
handle an externally provided "static" buffer as well a a dynamic
buffer.  The "static" buffer is filled first, but if overflowed, the
dynamic buffer is used instead, being allocated somewhere i the heap.

This combines the benefits of putting the output in a preallocated
buffer (on the stack, for example) and in a buffer that grows
somewhere in the heap.

24 years agoSome BIO docs, incomplete, more to follow.
Dr. Stephen Henson [Thu, 7 Sep 2000 00:22:31 +0000 (00:22 +0000)]
Some BIO docs, incomplete, more to follow.

Hmmm I didn't realise BIO_pop() did that:
isn't source wonderful?

24 years agoUse name ...-whatever-solaris2 instead of ...-sun-solaris2
Bodo Möller [Wed, 6 Sep 2000 17:09:58 +0000 (17:09 +0000)]
Use name ...-whatever-solaris2 instead of ...-sun-solaris2
(the middle string describes the architecture).

24 years agoGet rid of ASN1_UTCTIME_get, which cannot work with time_t
Bodo Möller [Wed, 6 Sep 2000 15:40:52 +0000 (15:40 +0000)]
Get rid of ASN1_UTCTIME_get, which cannot work with time_t
return type (on platforms where time_t is a 32 bit value).

New function ASN1_UTCTIME_cmp_time_t as a replacement
for use in apps/x509.c.

24 years agoSee RSA Security's press release at
Bodo Möller [Wed, 6 Sep 2000 14:55:11 +0000 (14:55 +0000)]
See RSA Security's press release at
http://www.rsasecurity.com/news/pr/000906-1.html (September 6, 2000):
"RSA Security Releases RSA Encryption Algorithm into Public Domain"

24 years agoAnother superfluous pair of parentheses.
Bodo Möller [Wed, 6 Sep 2000 14:34:32 +0000 (14:34 +0000)]
Another superfluous pair of parentheses.

24 years agoAnother round of indentation changes: Position braces consistently,
Bodo Möller [Wed, 6 Sep 2000 14:14:20 +0000 (14:14 +0000)]
Another round of indentation changes: Position braces consistently,
add some whitespace for 'if ()', 'for ()', 'while ()' to distinguish
keywords from function names, and finally remove parens around return
values (why be stingy with whitespace but fill the source code
with an abundance of parentheses that are not needed to structure
expressions for readability?).

24 years agoMore indentation consistency: for (), while (), if (), return ()
Bodo Möller [Wed, 6 Sep 2000 13:31:44 +0000 (13:31 +0000)]
More indentation consistency: for (), while (), if (), return ()
usually get a space between keyword and opening paranthesis
so that they don't look like function calls, where no space is
used.

24 years agoFix X509_STORE_CTX_init. Make indentation more consistent. Dump core less often.
Bodo Möller [Wed, 6 Sep 2000 13:24:10 +0000 (13:24 +0000)]
Fix X509_STORE_CTX_init.  Make indentation more consistent.  Dump core less often.

24 years ago'make update'
Bodo Möller [Wed, 6 Sep 2000 12:34:10 +0000 (12:34 +0000)]
'make update'

24 years agoChanges for QNX: there is no thread support, and the previous
Bodo Möller [Wed, 6 Sep 2000 12:25:58 +0000 (12:25 +0000)]
Changes for QNX: there is no thread support, and the previous
configuration only worked with no-asm.

24 years agotypo
Bodo Möller [Wed, 6 Sep 2000 12:18:24 +0000 (12:18 +0000)]
typo

24 years agoAdd OAEP. Seed the PRNG.
Bodo Möller [Wed, 6 Sep 2000 11:49:43 +0000 (11:49 +0000)]
Add OAEP. Seed the PRNG.

24 years agoupdate
Bodo Möller [Wed, 6 Sep 2000 10:50:33 +0000 (10:50 +0000)]
update

24 years agoAdd rsautl.
Bodo Möller [Wed, 6 Sep 2000 07:58:27 +0000 (07:58 +0000)]
Add rsautl.

24 years agoClarification for SSL_ERROR_ZERO_RETURN
Bodo Möller [Wed, 6 Sep 2000 07:56:03 +0000 (07:56 +0000)]
Clarification for SSL_ERROR_ZERO_RETURN

24 years agoFix typo in rsautl.
Dr. Stephen Henson [Tue, 5 Sep 2000 22:30:38 +0000 (22:30 +0000)]
Fix typo in rsautl.

Add support for settable verify time in X509_verify_cert().

Document rsautl utility.

24 years agoIgnore executable.
Ben Laurie [Tue, 5 Sep 2000 18:56:55 +0000 (18:56 +0000)]
Ignore executable.

24 years agoHandle WANT_READ more correctly (thanks to Bodo).
Ben Laurie [Tue, 5 Sep 2000 18:47:57 +0000 (18:47 +0000)]
Handle WANT_READ more correctly (thanks to Bodo).

24 years ago*BIG* verify code reorganisation.
Dr. Stephen Henson [Tue, 5 Sep 2000 17:53:58 +0000 (17:53 +0000)]
*BIG* verify code reorganisation.

The old code was painfully primitive and couldn't handle
distinct certificates using the same subject name.

The new code performs several tests on a candidate issuer
certificate based on certificate extensions.

It also adds several callbacks to X509_VERIFY_CTX so its
behaviour can be customised.

Unfortunately some hackery was needed to persuade X509_STORE
to tolerate this. This should go away when X509_STORE is
replaced, sometime...

This must have broken something though :-(

24 years agoDistinguish between assertions and conditions that should cause death.
Ben Laurie [Tue, 5 Sep 2000 17:06:45 +0000 (17:06 +0000)]
Distinguish between assertions and conditions that should cause death.

24 years agoKeep a not of original encoding in certificate requests.
Dr. Stephen Henson [Tue, 5 Sep 2000 13:27:57 +0000 (13:27 +0000)]
Keep a not of original encoding in certificate requests.

Add new option to PKCS7_sign to exclude S/MIME capabilities.

24 years agoMention fix in bio_lib.c.
Bodo Möller [Tue, 5 Sep 2000 12:46:10 +0000 (12:46 +0000)]
Mention fix in bio_lib.c.

24 years agoIncrease print buffer (10K instead of just 2K).
Bodo Möller [Tue, 5 Sep 2000 12:43:39 +0000 (12:43 +0000)]
Increase print buffer (10K instead of just 2K).

24 years agoIgnore Makefile.save
Bodo Möller [Tue, 5 Sep 2000 12:42:05 +0000 (12:42 +0000)]
Ignore Makefile.save

24 years agoRemove silly test for b->references at the end of BIO_write:
Bodo Möller [Tue, 5 Sep 2000 12:35:00 +0000 (12:35 +0000)]
Remove silly test for b->references at the end of BIO_write:
If some other thread deletes the BIO that one thread needs for
BIO_write, then there's a lot of trouble anyway; there's
nothing special about calling the callback.

24 years agoConsistency
Bodo Möller [Mon, 4 Sep 2000 15:47:17 +0000 (15:47 +0000)]
Consistency

24 years agoUse consistent indentation,
Bodo Möller [Mon, 4 Sep 2000 15:38:02 +0000 (15:38 +0000)]
Use consistent indentation,

24 years agoAvoid abort() throughout the library, except when preprocessor
Bodo Möller [Mon, 4 Sep 2000 15:34:43 +0000 (15:34 +0000)]
Avoid abort() throughout the library, except when preprocessor
symbols for debugging are defined.

24 years agoFix for BN_mul_word(a, 0).
Bodo Möller [Mon, 4 Sep 2000 15:30:14 +0000 (15:30 +0000)]
Fix for BN_mul_word(a, 0).

24 years ago-Wall insists that main return an int.
Bodo Möller [Mon, 4 Sep 2000 15:29:06 +0000 (15:29 +0000)]
-Wall insists that main return an int.

24 years agoInclude MD4 in documentation.
Bodo Möller [Mon, 4 Sep 2000 15:28:21 +0000 (15:28 +0000)]
Include MD4 in documentation.

24 years agoTell CVS to ignore 'lib'.
Bodo Möller [Mon, 4 Sep 2000 15:27:47 +0000 (15:27 +0000)]
Tell CVS to ignore 'lib'.

24 years agoAdd 'rsautl' low level RSA utility.
Dr. Stephen Henson [Sun, 3 Sep 2000 23:13:48 +0000 (23:13 +0000)]
Add 'rsautl' low level RSA utility.

Add DER public key routines.

Add -passin argument to 'ca' utility.

Document sign and verify options to dgst.

24 years agoUndo change from 1.7 to 1.8:
Bodo Möller [Fri, 1 Sep 2000 12:29:14 +0000 (12:29 +0000)]
Undo change from 1.7 to 1.8:

Returning -1 for an attempt to read from an empty buffer is empty is
not an error that should be signalled via the error queue, it's a
'retry read' condition and is signalled as such.

24 years agoUse C syntax, not FORTRAN or whatever that was :-)
Bodo Möller [Fri, 1 Sep 2000 10:40:37 +0000 (10:40 +0000)]
Use C syntax, not FORTRAN or whatever that was :-)

24 years agoQNX 4 support.
Bodo Möller [Fri, 1 Sep 2000 09:54:25 +0000 (09:54 +0000)]
QNX 4 support.

24 years ago-N option to diff is not essential, and mentioning it is unnecessarily
Bodo Möller [Fri, 1 Sep 2000 09:42:17 +0000 (09:42 +0000)]
-N option to diff is not essential, and mentioning it is unnecessarily
confusing to people whose diff doesn't implement it.

24 years agoAdd demo state machine.
Ben Laurie [Wed, 30 Aug 2000 18:14:28 +0000 (18:14 +0000)]
Add demo state machine.

24 years agoFix typo in i2d_ASN1_ENUMERATED
Dr. Stephen Henson [Wed, 30 Aug 2000 16:14:29 +0000 (16:14 +0000)]
Fix typo in i2d_ASN1_ENUMERATED

Fix bug in read only memory BIOs so BIO_reset() works.

Add sign and verify options to dgst utility, need
to update docs.

24 years agoDiagnose EOF on memory BIOs (or you just get mysterious errors with no error
Ben Laurie [Mon, 28 Aug 2000 12:54:18 +0000 (12:54 +0000)]
Diagnose EOF on memory BIOs (or you just get mysterious errors with no error
message).

24 years agoUse the passed buffer in ERR_error_string!
Ben Laurie [Mon, 28 Aug 2000 10:57:01 +0000 (10:57 +0000)]
Use the passed buffer in ERR_error_string!

24 years agoChange PKCS#7 test data to take account of removal of
Dr. Stephen Henson [Fri, 25 Aug 2000 01:29:41 +0000 (01:29 +0000)]
Change PKCS#7 test data to take account of removal of
indefinite length encoding.

24 years agoNew option to CA.pl to sign request using CA extensions.
Dr. Stephen Henson [Thu, 24 Aug 2000 23:24:18 +0000 (23:24 +0000)]
New option to CA.pl to sign request using CA extensions.
This allows intermediate CAs to be created more easily.

PKCS12_create() now checks private key matches certificate.

Fix typo in x509 app.

Update docs.

New function ASN1_STRING_to_UTF8() converts any ASN1_STRING
type to UTF8.

24 years agoAdd support for 'other' PKCS#7 content types.
Dr. Stephen Henson [Tue, 22 Aug 2000 22:20:25 +0000 (22:20 +0000)]
Add support for 'other' PKCS#7 content types.