Dr. Stephen Henson [Mon, 29 Nov 2010 18:33:28 +0000 (18:33 +0000)]
apply J-PKAKE fix to HEAD (original by Ben)
Dr. Stephen Henson [Sat, 27 Nov 2010 17:35:56 +0000 (17:35 +0000)]
Some of the MS_STATIC use in crypto/evp is a legacy from the days when
EVP_MD_CTX was much larger: it isn't needed anymore.
Dr. Stephen Henson [Thu, 25 Nov 2010 12:27:39 +0000 (12:27 +0000)]
PR: 2240
Submitted by: Jack Lloyd <lloyd@randombit.net>, "Mounir IDRASSI" <mounir.idrassi@idrix.net>, steve
Reviewed by: steve
As required by RFC4492 an absent supported points format by a server is
not an error: it should be treated as equivalent to an extension only
containing uncompressed.
Dr. Stephen Henson [Thu, 25 Nov 2010 11:51:46 +0000 (11:51 +0000)]
using_ecc doesn't just apply to TLSv1
Dr. Stephen Henson [Wed, 24 Nov 2010 16:07:45 +0000 (16:07 +0000)]
add "missing" functions to copy EVP_PKEY_METHOD and examine info
Dr. Stephen Henson [Wed, 24 Nov 2010 13:17:48 +0000 (13:17 +0000)]
use generalised mac API for SSL key generation
Dr. Stephen Henson [Wed, 24 Nov 2010 13:14:03 +0000 (13:14 +0000)]
constify EVP_PKEY_new_mac_key()
Andy Polyakov [Tue, 23 Nov 2010 23:01:22 +0000 (23:01 +0000)]
INSTALL.W32: document trouble with symlinks under MSYS [from HEAD].
PR: 2377
Richard Levitte [Tue, 23 Nov 2010 02:12:14 +0000 (02:12 +0000)]
Implement bc test strategy as submitted by Steven M. Schweda <sms@antinode.info>.
Make sure we move to '__here' before trying to use it to build local sslroot:
Richard Levitte [Tue, 23 Nov 2010 01:06:13 +0000 (01:06 +0000)]
Print openssl version information at the end of the tests
Richard Levitte [Tue, 23 Nov 2010 01:05:32 +0000 (01:05 +0000)]
Give the architecture dependent directory higher priority
Richard Levitte [Tue, 23 Nov 2010 01:04:07 +0000 (01:04 +0000)]
Don't define an empty CFLAGS, it's much more honest not to defined it at all.
Make sure to remove any [.CRYTO]BUILDINF.H so it doesn't get used instead of
[.CRYPTO._''ARCH'BUILDINF.H
Richard Levitte [Mon, 22 Nov 2010 23:42:48 +0000 (23:42 +0000)]
* tests.com: Add the symbol openssl_conf, so the openssl application
stops complaining about a missing configuration file. Define the logical
name PERL_ENV_TABLES with values to Perl considers the DCL symbol table
as part of the environment (see 'man perlvms' for details), so cms-test.pl
can get the value of EXE_DIR from tests.com, among others.
* cms-test.pl: Make changes to have it work on VMS as well. Upper or mixed
case options need to be quoted and the openssl command needs a VMS-specific
treatment. It all should work properly on Unix, I hope it does on Windows
as well...
Andy Polyakov [Mon, 22 Nov 2010 21:57:29 +0000 (21:57 +0000)]
s390x.S: fix typo in bn_mul_words [from HEAD].
PR: 2380
Dr. Stephen Henson [Fri, 19 Nov 2010 00:11:44 +0000 (00:11 +0000)]
PR: 2376
Submitted by: Guenter <lists@gknw.net>
Reviewed by: steve
Cleanup alloca use, fix Win32 target for OpenWatcom.
Dr. Stephen Henson [Thu, 18 Nov 2010 22:59:53 +0000 (22:59 +0000)]
PR: 2375
Submitted by: Guenter <lists@gknw.net>
Reviewed by: steve
cleanup/fix e_aep.c for OpenWatcom
Dr. Stephen Henson [Thu, 18 Nov 2010 22:56:53 +0000 (22:56 +0000)]
PR: 2374
Submitted by: Guenter <lists@gknw.net>
Reviewed by: steve
Don't compile capi ENGINE on mingw32
Richard Levitte [Thu, 18 Nov 2010 22:46:55 +0000 (22:46 +0000)]
Tell the user what test is being performed.
Richard Levitte [Thu, 18 Nov 2010 22:45:29 +0000 (22:45 +0000)]
Make sure the source directory for ASN1TEST is defined.
Richard Levitte [Thu, 18 Nov 2010 22:31:01 +0000 (22:31 +0000)]
We expect these scripts not to bail on error, so make sure that's what happens.
Richard Levitte [Thu, 18 Nov 2010 22:24:22 +0000 (22:24 +0000)]
Synchronise with Unix tests
Richard Levitte [Thu, 18 Nov 2010 20:02:54 +0000 (20:02 +0000)]
We redid the structure on architecture dependent source files, but
apparently forgot to adapt the copying to the installation directory.
Dr. Stephen Henson [Thu, 18 Nov 2010 17:33:44 +0000 (17:33 +0000)]
remove duplicate statement
Dr. Stephen Henson [Thu, 18 Nov 2010 17:26:51 +0000 (17:26 +0000)]
add ACKNOWLEDGEMENTS file to 1.0.1 branch
Dr. Stephen Henson [Thu, 18 Nov 2010 17:04:37 +0000 (17:04 +0000)]
compile cts128.c on VMS
Dr. Stephen Henson [Thu, 18 Nov 2010 13:22:42 +0000 (13:22 +0000)]
fix no SIGALRM case in speed.c
Dr. Stephen Henson [Thu, 18 Nov 2010 12:29:38 +0000 (12:29 +0000)]
PR: 2372
Submitted by: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl>
Reviewed by: steve
Fix OpenBSD compilation failure.
Dr. Stephen Henson [Wed, 17 Nov 2010 18:16:57 +0000 (18:16 +0000)]
oops, reinstate TLSv1 string
Dr. Stephen Henson [Wed, 17 Nov 2010 17:46:23 +0000 (17:46 +0000)]
backport AES EVP ctr mode changes from HEAD
Dr. Stephen Henson [Wed, 17 Nov 2010 17:36:29 +0000 (17:36 +0000)]
fix CVE-2010-3864
Dr. Stephen Henson [Wed, 17 Nov 2010 17:26:10 +0000 (17:26 +0000)]
sync OIDs with HEAD
Dr. Stephen Henson [Tue, 16 Nov 2010 12:11:31 +0000 (12:11 +0000)]
If EVP_PKEY structure contains an ENGINE the key is ENGINE specific and
we should use its method instead of any generic one.
Dr. Stephen Henson [Sun, 14 Nov 2010 17:47:21 +0000 (17:47 +0000)]
Only use explicit IV if cipher is in CBC mode.
Dr. Stephen Henson [Sun, 14 Nov 2010 13:50:42 +0000 (13:50 +0000)]
Get correct GOST private key instead of just assuming the last one is
correct: this isn't always true if we have more than one certificate.
Dr. Stephen Henson [Sat, 13 Nov 2010 12:44:17 +0000 (12:44 +0000)]
add TLS v1.1 options to s_server
Dr. Stephen Henson [Thu, 11 Nov 2010 15:23:32 +0000 (15:23 +0000)]
Submitted By: Bogdan Harjoc <harjoc@gmail.com>
Add missing debug WIN64 targets.
Dr. Stephen Henson [Thu, 11 Nov 2010 14:42:34 +0000 (14:42 +0000)]
PR: 2366
Submitted by: Damien Miller <djm@mindrot.org>
Reviewed by: steve
Stop pkeyutl crashing if some arguments are missing. Also make str2fmt
tolerate NULL parameter.
Dr. Stephen Henson [Tue, 2 Nov 2010 15:58:05 +0000 (15:58 +0000)]
Submitted by: Jonathan Dixon <joth@chromium.org>
Reviewed by: steve
If store is NULL set flags correctly.
Dr. Stephen Henson [Mon, 11 Oct 2010 23:25:23 +0000 (23:25 +0000)]
PR: 2295
Submitted by: Alexei Khlebnikov <alexei.khlebnikov@opera.com>
Reviewed by: steve
OOM checking. Leak in OOM fix. Fall-through comment. Duplicate code
elimination.
Andy Polyakov [Sun, 10 Oct 2010 21:12:18 +0000 (21:12 +0000)]
x86_64-xlate.pl: fix LNK4078 and LNK4210 link warnings [from HEAD].
PR: 2356
Dr. Stephen Henson [Sun, 10 Oct 2010 12:27:19 +0000 (12:27 +0000)]
PR: 2314
Submitted by: Mounir IDRASSI <mounir.idrassi@idrix.net>
Reviewed by: steve
Fix for double free bug in ssl/s3_clnt.c CVE-2010-2939
Dr. Stephen Henson [Wed, 6 Oct 2010 18:01:14 +0000 (18:01 +0000)]
We can't always read 6 bytes in an OCSP response: fix so error statuses
are read correctly for non-blocking I/O.
Dr. Stephen Henson [Mon, 4 Oct 2010 13:28:27 +0000 (13:28 +0000)]
Minor documentation fixes, PR#2345
Dr. Stephen Henson [Mon, 4 Oct 2010 13:24:07 +0000 (13:24 +0000)]
Minor documentation fixes, PR#2344
Dr. Stephen Henson [Sun, 3 Oct 2010 18:56:25 +0000 (18:56 +0000)]
Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(),
this means that some implementations will be used automatically, e.g. aesni,
we do this for cryptodev anyway.
Setup cpuid in ENGINE_load_builtin_engines() too as some ENGINEs use it.
Andy Polyakov [Mon, 13 Sep 2010 20:32:53 +0000 (20:32 +0000)]
Alpha assembler pack: adapt for Linux [from HEAD].
PR: 2335
Andy Polyakov [Mon, 13 Sep 2010 16:29:00 +0000 (16:29 +0000)]
VC-32.pl: default to nasm if neither nasm or nasmw is is found at the moment [from HEAD].
PR: 2338
Andy Polyakov [Fri, 10 Sep 2010 14:55:34 +0000 (14:55 +0000)]
crypto/bn/asm/s390x.S: drop redundant instructions [from HEAD].
Andy Polyakov [Sun, 5 Sep 2010 19:48:19 +0000 (19:48 +0000)]
sparcv9cap.c: disengange Solaris-specific CPU detection routine in favour
of unified procedure relying on SIGILL [from HEAD].
PR: 2321
Dr. Stephen Henson [Thu, 2 Sep 2010 17:23:58 +0000 (17:23 +0000)]
make no-gost work on Windows
Dr. Stephen Henson [Mon, 30 Aug 2010 23:58:47 +0000 (23:58 +0000)]
fix bug in AES_unwrap()
Bodo Möller [Fri, 27 Aug 2010 13:17:58 +0000 (13:17 +0000)]
More C language police work.
Dr. Stephen Henson [Fri, 27 Aug 2010 12:12:07 +0000 (12:12 +0000)]
PR: 1833
Submitted By: Robin Seggelmann <seggelmann@fh-muenster.de>
Fix other cases not covered by original patch. (correct patch this time!)
Dr. Stephen Henson [Fri, 27 Aug 2010 12:10:12 +0000 (12:10 +0000)]
oops, revert previous patch
Bodo Möller [Fri, 27 Aug 2010 12:07:12 +0000 (12:07 +0000)]
C conformity fixes: Move declarations before statements in all blocks.
Dr. Stephen Henson [Fri, 27 Aug 2010 11:57:42 +0000 (11:57 +0000)]
PR: 1833
Submitted By: Robin Seggelmann <seggelmann@fh-muenster.de>
Fix other cases not covered by original patch.
Bodo Möller [Fri, 27 Aug 2010 11:29:09 +0000 (11:29 +0000)]
C conformity fixes:
- Move declarations before statements in all blocks.
- Where 64-bit type is required, use it explicitly (not 1l).
Bodo Möller [Thu, 26 Aug 2010 18:45:21 +0000 (18:45 +0000)]
Update version numbers
Bodo Möller [Thu, 26 Aug 2010 14:54:18 +0000 (14:54 +0000)]
Patch from PR #1833 was broken: there's no s->s3->new_session
(only s->new_session).
Bodo Möller [Thu, 26 Aug 2010 14:38:49 +0000 (14:38 +0000)]
(formatting error)
Bodo Möller [Thu, 26 Aug 2010 14:29:27 +0000 (14:29 +0000)]
New 64-bit optimized implementation EC_GFp_nistp224_method().
Binary compatibility is not affected as this will only be
compiled in if explicitly requested (#ifdef EC_NISTP224_64_GCC_128).
Submitted by: Emilia Kasper (Google)
Dr. Stephen Henson [Thu, 26 Aug 2010 14:25:53 +0000 (14:25 +0000)]
update ordinals
Dr. Stephen Henson [Thu, 26 Aug 2010 14:22:40 +0000 (14:22 +0000)]
PR: 1833
Submitted By: Robin Seggelmann <seggelmann@fh-muenster.de>
Support for abbreviated handshakes when renegotiating.
Bodo Möller [Thu, 26 Aug 2010 12:10:57 +0000 (12:10 +0000)]
ECC library bugfixes.
Submitted by: Emilia Kapser (Google)
Bodo Möller [Thu, 26 Aug 2010 11:21:49 +0000 (11:21 +0000)]
Harmonize with OpenSSL_1_0_0-stable version of CHANGES.
Andy Polyakov [Tue, 24 Aug 2010 21:52:15 +0000 (21:52 +0000)]
util/cygwin.sh: maintainer's update [from HEAD].
Submitted by: Corinna Vinschen
Andy Polyakov [Tue, 24 Aug 2010 21:46:58 +0000 (21:46 +0000)]
engine/Makefile: harmonize engine install rule for .dylib extension on MacOS X [from HEAD].
PR: 2319
Andy Polyakov [Sat, 21 Aug 2010 11:37:17 +0000 (11:37 +0000)]
Makefile.shared: fix brown-bag typo in link_o.darwin [from HEAD].
PR: 2319
Andy Polyakov [Tue, 3 Aug 2010 15:36:52 +0000 (15:36 +0000)]
sha1-armv4-large.pl: reschedule instructions for dual-issue pipeline [from HEAD]
.
Andy Polyakov [Mon, 2 Aug 2010 21:54:48 +0000 (21:54 +0000)]
Make inline assembler clang-friendly [from HEAD].
Andy Polyakov [Wed, 28 Jul 2010 08:18:46 +0000 (08:18 +0000)]
alphacpuid.pl: fix brown-bag bug [from HEAD].
Andy Polyakov [Mon, 26 Jul 2010 22:11:23 +0000 (22:11 +0000)]
Replace alphacpuid.s with alphacpuid.pl to ensure it makes to release tar-balls [from HEAD].
PR: 2309
Dr. Stephen Henson [Sun, 25 Jul 2010 17:48:35 +0000 (17:48 +0000)]
Add modes.h to mkdef.pl, update ordinals.
Dr. Stephen Henson [Sat, 24 Jul 2010 17:55:47 +0000 (17:55 +0000)]
Fix WIN32 build system to correctly link ENGINE DLLs contained in a
directory: currently the GOST ENGINE is the only case.
Dr. Stephen Henson [Wed, 21 Jul 2010 16:23:59 +0000 (16:23 +0000)]
Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(),
this means that some implementations will be used automatically, e.g. aesni,
we do this for cryptodev anyway.
Setup cpuid in ENGINE_load_builtin_engines() too as some ENGINEs use it.
Dr. Stephen Henson [Sun, 18 Jul 2010 17:39:46 +0000 (17:39 +0000)]
PR: 1830
Submitted By: Robin Seggelmann <seggelmann@fh-muenster.de>, Steve Henson
Support for RFC5705 key extractor.
Andy Polyakov [Fri, 16 Jul 2010 08:14:11 +0000 (08:14 +0000)]
Configure: suppress $multilib with non-system $prefix [from HEAD].
PR: 2307
Andy Polyakov [Fri, 16 Jul 2010 08:11:43 +0000 (08:11 +0000)]
Makefile.shared: update link_o.darwin rule [from HEAD].
PR: 2306
Andy Polyakov [Tue, 13 Jul 2010 14:08:22 +0000 (14:08 +0000)]
ARM assembler pack: reschedule instructions for dual-issue pipeline [from HEAD].
Modest improvement coefficients mean that code already had some
parallelism and there was not very much room for improvement. Special
thanks to Ted Krovetz for benchmarking the code with such patience.
Dr. Stephen Henson [Fri, 9 Jul 2010 17:25:46 +0000 (17:25 +0000)]
PR: 2297
Submitted by: Antony, Benoy <bantony@ebay.com>
Approved by: steve@openssl.org
Fix bug in AES wrap code when t > 0xff.
Andy Polyakov [Fri, 9 Jul 2010 14:32:22 +0000 (14:32 +0000)]
INSTALL.W32: mention _OPENSSL_isservice() [from HEAD].
PR: 2194
Andy Polyakov [Thu, 8 Jul 2010 09:15:49 +0000 (09:15 +0000)]
rand_nw.c: compensate for gcc bug (using %edx instead of %eax at -O3)
[from HEAD].
PR: 2296
Andy Polyakov [Thu, 8 Jul 2010 09:02:22 +0000 (09:02 +0000)]
PROBLEMS: MacOS X is not necessarily a problem anymore [from HEAD].
Andy Polyakov [Thu, 8 Jul 2010 07:52:36 +0000 (07:52 +0000)]
sparcv9cap.c: reiterate CPU detection logic [from HEAD].
Dr. Stephen Henson [Mon, 5 Jul 2010 22:22:22 +0000 (22:22 +0000)]
crypto/sparc*: elininate _sparcv9_rdwrasi [from HEAD], original from Andy.
Dr. Stephen Henson [Mon, 5 Jul 2010 22:20:36 +0000 (22:20 +0000)]
SPARCv9 assembler pack: refine CPU detection on Linux, fix for "unaligned
opcodes detected in executable segment" error [from HEAD], original from Andy.
Dr. Stephen Henson [Mon, 5 Jul 2010 11:03:50 +0000 (11:03 +0000)]
i variable is used on some platforms
Dr. Stephen Henson [Sun, 27 Jun 2010 14:42:43 +0000 (14:42 +0000)]
no need for empty fragments with TLS 1.1 and later due to explicit IV
Dr. Stephen Henson [Sun, 27 Jun 2010 14:22:11 +0000 (14:22 +0000)]
Backport TLS v1.1 support from HEAD, ssl/ changes
Dr. Stephen Henson [Sun, 27 Jun 2010 14:15:02 +0000 (14:15 +0000)]
Backport TLS v1.1 support from HEAD
Dr. Stephen Henson [Wed, 16 Jun 2010 13:48:00 +0000 (13:48 +0000)]
update versions for 1.0.1
cvs2svn [Wed, 16 Jun 2010 13:37:23 +0000 (13:37 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_1_0_1-stable'.
Dr. Stephen Henson [Wed, 16 Jun 2010 13:37:22 +0000 (13:37 +0000)]
update README, fix opensslv.h
Dr. Stephen Henson [Wed, 16 Jun 2010 13:34:33 +0000 (13:34 +0000)]
update for next version
Dr. Stephen Henson [Wed, 16 Jun 2010 13:17:22 +0000 (13:17 +0000)]
clarify comment
Dr. Stephen Henson [Tue, 15 Jun 2010 17:25:15 +0000 (17:25 +0000)]
Fix warnings (From HEAD, original patch by Ben).
Andy Polyakov [Wed, 9 Jun 2010 15:49:09 +0000 (15:49 +0000)]
VC-32.pl: fix /Fd name generation [from HEAD].
PR: 2284
Dr. Stephen Henson [Tue, 1 Jun 2010 13:31:38 +0000 (13:31 +0000)]
prepare for release
Dr. Stephen Henson [Tue, 1 Jun 2010 13:17:06 +0000 (13:17 +0000)]
Fix CVE-2010-1633 and CVE-2010-0742.
Andy Polyakov [Tue, 1 Jun 2010 06:03:20 +0000 (06:03 +0000)]
VC-32.pl: unconditionally generate symbols.pdb [from HEAD].