oweals/openssl.git
21 years agoWe seem to carry some rests of the 0.9.6 [engine] ENGINE framework in form
Richard Levitte [Tue, 8 Apr 2003 06:00:05 +0000 (06:00 +0000)]
We seem to carry some rests of the 0.9.6 [engine] ENGINE framework in form
of unneeded includes of openssl/engine.h.

21 years agoRSA_FLAG_SIGN_VER indicates the special rsa_sign and rsa_verify function
Richard Levitte [Mon, 7 Apr 2003 19:15:25 +0000 (19:15 +0000)]
RSA_FLAG_SIGN_VER indicates the special rsa_sign and rsa_verify function
pointers should be used.  It doesn't necessarely mean it should go through
the ENGINE framework.

21 years agoWhat was I smoking? EVP_PKEY_cmp() should return with 0 if
Richard Levitte [Mon, 7 Apr 2003 10:15:32 +0000 (10:15 +0000)]
What was I smoking?  EVP_PKEY_cmp() should return with 0 if
EVP_PKEY_cmp_parameters() returned 0, otherwise it should
go on processing the public key component.  Thia has nothing
to do with the proper handling of EC parameters or not.

21 years agoCorrect a typo.
Richard Levitte [Mon, 7 Apr 2003 10:09:44 +0000 (10:09 +0000)]
Correct a typo.
Have EVP_PKEY_cmp() call EVP_PKEY_cmp_parameters(), and make a note
about the lack of parameter comparison for EC.

21 years agoConstify
Richard Levitte [Sun, 6 Apr 2003 15:31:18 +0000 (15:31 +0000)]
Constify

21 years agoDo not call ENGINE_setup_bsd_cryptodev() when OPENSSL_NO_ENGINE is defined.
Richard Levitte [Sat, 5 Apr 2003 21:21:26 +0000 (21:21 +0000)]
Do not call ENGINE_setup_bsd_cryptodev() when OPENSSL_NO_ENGINE is defined.
PR: 564

21 years agoConvert save_serial() to work like save_index(), and add a
Richard Levitte [Fri, 4 Apr 2003 15:10:35 +0000 (15:10 +0000)]
Convert save_serial() to work like save_index(), and add a
rotate_serial() that works like rotate_index().

21 years agoAdd documentation on the added functionality in 'openssl ca'.
Richard Levitte [Fri, 4 Apr 2003 14:39:44 +0000 (14:39 +0000)]
Add documentation on the added functionality in 'openssl ca'.

21 years agomake update
Richard Levitte [Fri, 4 Apr 2003 14:19:15 +0000 (14:19 +0000)]
make update

21 years agoThere's no need to check for __attribute__ with ANSI functions, since
Richard Levitte [Fri, 4 Apr 2003 14:19:00 +0000 (14:19 +0000)]
There's no need to check for __attribute__ with ANSI functions, since
we only check to the opening parenthesis anyway...

21 years agoCorrect a lot of printing calls. Remove extra arguments...
Richard Levitte [Thu, 3 Apr 2003 23:39:48 +0000 (23:39 +0000)]
Correct a lot of printing calls.  Remove extra arguments...

21 years agoMake %p and %# work properly, at least with pointers and floats.
Richard Levitte [Thu, 3 Apr 2003 23:35:14 +0000 (23:35 +0000)]
Make %p and %# work properly, at least with pointers and floats.

21 years agoAdd GCC attributes when compiled with gcc. This helps find out if
Richard Levitte [Thu, 3 Apr 2003 23:06:05 +0000 (23:06 +0000)]
Add GCC attributes when compiled with gcc.  This helps find out if
we're using the printing functions correctly or not.

I used the corresponding attributes found in the header files of my
Linux installation.

21 years agoCounter for GCC attributes.
Richard Levitte [Thu, 3 Apr 2003 23:04:48 +0000 (23:04 +0000)]
Counter for GCC attributes.

21 years agoOne more debug line to conditionalise.
Richard Levitte [Thu, 3 Apr 2003 23:01:20 +0000 (23:01 +0000)]
One more debug line to conditionalise.

21 years agoAdd a CA section, to make sure the test will work with the changes in
Richard Levitte [Thu, 3 Apr 2003 22:38:31 +0000 (22:38 +0000)]
Add a CA section, to make sure the test will work with the changes in
CA.sh.

21 years agoImplement self-signing in 'openssl ca'. This makes it easier to have
Richard Levitte [Thu, 3 Apr 2003 22:33:59 +0000 (22:33 +0000)]
Implement self-signing in 'openssl ca'.  This makes it easier to have
the CA certificate part of the CA database, and combined with
'unique_subject=no', it should make operations like CA certificate
roll-over easier.

21 years agoAdd functionality to help making self-signed certificate.
Richard Levitte [Thu, 3 Apr 2003 22:27:24 +0000 (22:27 +0000)]
Add functionality to help making self-signed certificate.

21 years agoIt's recommended to use req rather than x509 to create self-signed certificates
Richard Levitte [Thu, 3 Apr 2003 22:12:48 +0000 (22:12 +0000)]
It's recommended to use req rather than x509 to create self-signed certificates

21 years agoTypo correction
Richard Levitte [Thu, 3 Apr 2003 21:55:55 +0000 (21:55 +0000)]
Typo correction

21 years agoDon't try to free NULL values...
Richard Levitte [Thu, 3 Apr 2003 20:03:23 +0000 (20:03 +0000)]
Don't try to free NULL values...

21 years agoReindent for readability.
Richard Levitte [Thu, 3 Apr 2003 19:10:32 +0000 (19:10 +0000)]
Reindent for readability.

21 years agoRemove unused variable.
Richard Levitte [Thu, 3 Apr 2003 19:07:27 +0000 (19:07 +0000)]
Remove unused variable.

21 years agoReset the version number of the issuer certificate? I believe this
Richard Levitte [Thu, 3 Apr 2003 18:50:15 +0000 (18:50 +0000)]
Reset the version number of the issuer certificate?  I believe this
hasn't been tested in a long while...

21 years agoConditionalise all debug strings.
Richard Levitte [Thu, 3 Apr 2003 18:07:39 +0000 (18:07 +0000)]
Conditionalise all debug strings.

21 years agoMake it possible to have multiple active certificates with the same
Richard Levitte [Thu, 3 Apr 2003 16:33:03 +0000 (16:33 +0000)]
Make it possible to have multiple active certificates with the same
subject.

21 years agomake RSA blinding thread-safe
Bodo Möller [Wed, 2 Apr 2003 09:50:22 +0000 (09:50 +0000)]
make RSA blinding thread-safe

21 years agoIt seems like gcc-drivven shared library building on OpenUnix 8 requires
Richard Levitte [Tue, 1 Apr 2003 10:59:15 +0000 (10:59 +0000)]
It seems like gcc-drivven shared library building on OpenUnix 8 requires
-shared rather than -G.

21 years agoUpdate from stable branch.
Dr. Stephen Henson [Mon, 31 Mar 2003 22:29:25 +0000 (22:29 +0000)]
Update from stable branch.

21 years agoNo need to test -setalias twice.
Richard Levitte [Mon, 31 Mar 2003 13:56:52 +0000 (13:56 +0000)]
No need to test -setalias twice.
PR: 556

21 years agoDon't feil when indent is 0.
Richard Levitte [Mon, 31 Mar 2003 13:24:02 +0000 (13:24 +0000)]
Don't feil when indent is 0.
PR: 559

21 years agoAdd usage string for -fingerprint.
Richard Levitte [Mon, 31 Mar 2003 13:06:24 +0000 (13:06 +0000)]
Add usage string for -fingerprint.
PR: 560

21 years agoMulti valued AVA support.
Dr. Stephen Henson [Sun, 30 Mar 2003 01:51:16 +0000 (01:51 +0000)]
Multi valued AVA support.

21 years agoOpenUNIX 8 has some problems using -G with gcc. Maybe using gnu-shared works better...
Richard Levitte [Fri, 28 Mar 2003 08:57:04 +0000 (08:57 +0000)]
OpenUNIX 8 has some problems using -G with gcc.  Maybe using gnu-shared works better (will be tested tonight).

21 years agoAdd warning about unwanted side effect when calling SSL_CTX_free():
Lutz Jänicke [Thu, 27 Mar 2003 22:04:05 +0000 (22:04 +0000)]
Add warning about unwanted side effect when calling SSL_CTX_free():
sessions in the external session cache might be removed.
Submitted by: "Nadav Har'El" <nyh@math.technion.ac.il>

PR: 547

21 years agoUpdate VMS building system
Richard Levitte [Wed, 26 Mar 2003 14:34:38 +0000 (14:34 +0000)]
Update VMS building system

21 years agoUpdate ocsp usage message and docs.
Dr. Stephen Henson [Wed, 26 Mar 2003 00:46:47 +0000 (00:46 +0000)]
Update ocsp usage message and docs.

21 years agoLet's limit the extent of the definition of _XOPEN_SOURCE.
Richard Levitte [Tue, 25 Mar 2003 21:17:28 +0000 (21:17 +0000)]
Let's limit the extent of the definition of _XOPEN_SOURCE.

21 years agoMissed a few dollars.
Richard Levitte [Tue, 25 Mar 2003 20:56:06 +0000 (20:56 +0000)]
Missed a few dollars.
PR: 528

21 years agomake update
Dr. Stephen Henson [Mon, 24 Mar 2003 17:06:25 +0000 (17:06 +0000)]
make update

21 years agoSupport for name constraints.
Dr. Stephen Henson [Mon, 24 Mar 2003 17:04:44 +0000 (17:04 +0000)]
Support for name constraints.

21 years agoName Constraints OID.
Dr. Stephen Henson [Mon, 24 Mar 2003 00:56:09 +0000 (00:56 +0000)]
Name Constraints OID.

21 years agoAdd SCO5 shared library scripts.
Lutz Jänicke [Sun, 23 Mar 2003 10:18:05 +0000 (10:18 +0000)]
Add SCO5 shared library scripts.
Upate SVR5 scripts for the upcoming 0.9.7b.
Submitted by: Boyd Lynn Gerber <gerberb@zenez.com>

21 years agoTo define OPENSSL_NO_FP_API for all MSDOS type targets was unfair
Richard Levitte [Sat, 22 Mar 2003 22:33:52 +0000 (22:33 +0000)]
To define OPENSSL_NO_FP_API for all MSDOS type targets was unfair
against DJGPP, and much more restricted than previous definitions.

21 years agomake update
Dr. Stephen Henson [Fri, 21 Mar 2003 16:28:29 +0000 (16:28 +0000)]
make update

21 years agoSupport for policy constraints.
Dr. Stephen Henson [Fri, 21 Mar 2003 16:26:20 +0000 (16:26 +0000)]
Support for policy constraints.

21 years agoremove patch ID (which is supposed to appear in patched variants of
Bodo Möller [Fri, 21 Mar 2003 13:11:14 +0000 (13:11 +0000)]
remove patch ID (which is supposed to appear in patched variants of
old OpenSSL releases, but not in new releases)

21 years agoDefine COMP method function prototypes properly.
Richard Levitte [Fri, 21 Mar 2003 00:05:14 +0000 (00:05 +0000)]
Define COMP method function prototypes properly.

21 years agoMake sure to declare mem*() properly.
Richard Levitte [Fri, 21 Mar 2003 00:04:14 +0000 (00:04 +0000)]
Make sure to declare mem*() properly.

21 years agomake update
Richard Levitte [Thu, 20 Mar 2003 23:54:33 +0000 (23:54 +0000)]
make update

21 years agoDon't put configuration macro definitions on the command line, we're
Richard Levitte [Thu, 20 Mar 2003 23:52:41 +0000 (23:52 +0000)]
Don't put configuration macro definitions on the command line, we're
just fooling ourselves and then screwing up for other applications.

21 years agoSometimes, we have partial comments on the same line as other stuff we
Richard Levitte [Thu, 20 Mar 2003 23:51:35 +0000 (23:51 +0000)]
Sometimes, we have partial comments on the same line as other stuff we
parse.  Make sure to read in the whole comment, so it can be entirely
removed.

21 years agoMake sure we get the definition of OPENSSL_NO_RSA.
Richard Levitte [Thu, 20 Mar 2003 23:34:28 +0000 (23:34 +0000)]
Make sure we get the definition of OPENSSL_NO_RSA.

21 years agoMake sure we get the definition of OPENSSL_NO_HMAC and OPENSSL_NO_SHA.
Richard Levitte [Thu, 20 Mar 2003 23:34:08 +0000 (23:34 +0000)]
Make sure we get the definition of OPENSSL_NO_HMAC and OPENSSL_NO_SHA.

21 years agoMake sure we get the definition of OPENSSL_NO_SHA.
Richard Levitte [Thu, 20 Mar 2003 23:32:16 +0000 (23:32 +0000)]
Make sure we get the definition of OPENSSL_NO_SHA.

21 years agoMake sure we get the definition of OPENSSL_NO_RIPEMD.
Richard Levitte [Thu, 20 Mar 2003 23:31:56 +0000 (23:31 +0000)]
Make sure we get the definition of OPENSSL_NO_RIPEMD.

21 years agoMake sure we get the definition of OPENSSL_NO_MDC2.
Richard Levitte [Thu, 20 Mar 2003 23:31:44 +0000 (23:31 +0000)]
Make sure we get the definition of OPENSSL_NO_MDC2.

21 years agoMake sure we get the definition of OPENSSL_NO_MD5.
Richard Levitte [Thu, 20 Mar 2003 23:31:34 +0000 (23:31 +0000)]
Make sure we get the definition of OPENSSL_NO_MD5.

21 years agoMake sure we get the definition of OPENSSL_NO_MD4.
Richard Levitte [Thu, 20 Mar 2003 23:31:24 +0000 (23:31 +0000)]
Make sure we get the definition of OPENSSL_NO_MD4.

21 years agoMake sure we get the definition of OPENSSL_NO_MD2.
Richard Levitte [Thu, 20 Mar 2003 23:30:04 +0000 (23:30 +0000)]
Make sure we get the definition of OPENSSL_NO_MD2.

21 years agoMake sure we get the definition of OPENSSL_NO_DES.
Richard Levitte [Thu, 20 Mar 2003 23:29:38 +0000 (23:29 +0000)]
Make sure we get the definition of OPENSSL_NO_DES.

21 years agoMake sure we get the definition of OPENSSL_NO_RC5.
Richard Levitte [Thu, 20 Mar 2003 23:29:26 +0000 (23:29 +0000)]
Make sure we get the definition of OPENSSL_NO_RC5.

21 years agoMake sure we get the definition of OPENSSL_NO_RC4.
Richard Levitte [Thu, 20 Mar 2003 23:29:17 +0000 (23:29 +0000)]
Make sure we get the definition of OPENSSL_NO_RC4.

21 years agoMake sure we get the definition of OPENSSL_NO_RC2.
Richard Levitte [Thu, 20 Mar 2003 23:29:06 +0000 (23:29 +0000)]
Make sure we get the definition of OPENSSL_NO_RC2.

21 years agoMake sure we get the definition of OPENSSL_NO_IDEA.
Richard Levitte [Thu, 20 Mar 2003 23:28:55 +0000 (23:28 +0000)]
Make sure we get the definition of OPENSSL_NO_IDEA.

21 years agoMake sure we get the definition of OPENSSL_NO_CAST.
Richard Levitte [Thu, 20 Mar 2003 23:28:27 +0000 (23:28 +0000)]
Make sure we get the definition of OPENSSL_NO_CAST.

21 years agoMake sure we get the definition of OPENSSL_NO_BF.
Richard Levitte [Thu, 20 Mar 2003 23:28:16 +0000 (23:28 +0000)]
Make sure we get the definition of OPENSSL_NO_BF.

21 years agoMake sure we get the definition of OPENSSL_NO_AES.
Richard Levitte [Thu, 20 Mar 2003 23:28:03 +0000 (23:28 +0000)]
Make sure we get the definition of OPENSSL_NO_AES.

21 years agoMake sure we get the definition of a number of OPENSSL_NO_* macros.
Richard Levitte [Thu, 20 Mar 2003 23:27:17 +0000 (23:27 +0000)]
Make sure we get the definition of a number of OPENSSL_NO_* macros.

21 years agoMake sure we get the definition of OPENSSL_NO_BIO.
Richard Levitte [Thu, 20 Mar 2003 23:26:46 +0000 (23:26 +0000)]
Make sure we get the definition of OPENSSL_NO_BIO.

21 years agoInclude e_os.h correctly.
Richard Levitte [Thu, 20 Mar 2003 23:26:32 +0000 (23:26 +0000)]
Include e_os.h correctly.

21 years agoMake sure we get the definition of OPENSSL_NO_MD2.
Richard Levitte [Thu, 20 Mar 2003 23:24:59 +0000 (23:24 +0000)]
Make sure we get the definition of OPENSSL_NO_MD2.

21 years agoMake sure we get the definition of OPENSSL_NO_FP_API.
Richard Levitte [Thu, 20 Mar 2003 23:24:47 +0000 (23:24 +0000)]
Make sure we get the definition of OPENSSL_NO_FP_API.

21 years agoMake sure we get the definition of OPENSSL_NO_IDEA and IDEA_INT.
Richard Levitte [Thu, 20 Mar 2003 23:24:32 +0000 (23:24 +0000)]
Make sure we get the definition of OPENSSL_NO_IDEA and IDEA_INT.

21 years agoMake sure we get the definition of OPENSSL_NO_HMAC.
Richard Levitte [Thu, 20 Mar 2003 23:23:43 +0000 (23:23 +0000)]
Make sure we get the definition of OPENSSL_NO_HMAC.

21 years agoMake sure we get the definition of OPENSSL_NO_ECDSA.
Richard Levitte [Thu, 20 Mar 2003 23:22:31 +0000 (23:22 +0000)]
Make sure we get the definition of OPENSSL_NO_ECDSA.

21 years agoMake sure we get the definition of OPENSSL_NO_ECDH.
Richard Levitte [Thu, 20 Mar 2003 23:22:17 +0000 (23:22 +0000)]
Make sure we get the definition of OPENSSL_NO_ECDH.

21 years agoMake sure we get the definition of OPENSSL_NO_EC.
Richard Levitte [Thu, 20 Mar 2003 23:22:06 +0000 (23:22 +0000)]
Make sure we get the definition of OPENSSL_NO_EC.

21 years agoMake sure we get the definition of OPENSSL_NO_DSA and OPENSSL_NO_SHA.
Richard Levitte [Thu, 20 Mar 2003 23:21:51 +0000 (23:21 +0000)]
Make sure we get the definition of OPENSSL_NO_DSA and OPENSSL_NO_SHA.

21 years agoMake sure we get the definition of OPENSSL_NO_DH.
Richard Levitte [Thu, 20 Mar 2003 23:21:27 +0000 (23:21 +0000)]
Make sure we get the definition of OPENSSL_NO_DH.

21 years agoMake sure we get the definition of OPENSSL_EXTERN, OPENSSL_NO_DES,
Richard Levitte [Thu, 20 Mar 2003 23:21:10 +0000 (23:21 +0000)]
Make sure we get the definition of OPENSSL_EXTERN, OPENSSL_NO_DES,
DES_LONG and OPENSSL_NO_DESCBCM.

21 years agoMake sure we get the definition of OPENSSL_NO_CAST.
Richard Levitte [Thu, 20 Mar 2003 23:20:15 +0000 (23:20 +0000)]
Make sure we get the definition of OPENSSL_NO_CAST.

21 years agoMake sure we get the definition of OPENSSL_NO_ERR.
Richard Levitte [Thu, 20 Mar 2003 23:19:41 +0000 (23:19 +0000)]
Make sure we get the definition of OPENSSL_NO_ERR.

21 years agoMake sure we get the definition of OPENSSL_NO_SOCK.
Richard Levitte [Thu, 20 Mar 2003 23:18:32 +0000 (23:18 +0000)]
Make sure we get the definition of OPENSSL_NO_SOCK.

21 years agoMake sure we get the definition of OPENSSL_NO_FP_API.
Richard Levitte [Thu, 20 Mar 2003 23:17:23 +0000 (23:17 +0000)]
Make sure we get the definition of OPENSSL_NO_FP_API.

21 years agoMake sure we get the definition of OPENSSL_NO_BF.
Richard Levitte [Thu, 20 Mar 2003 23:17:04 +0000 (23:17 +0000)]
Make sure we get the definition of OPENSSL_NO_BF.

21 years agoMake sure we get the definition of OPENSSL_NO_BIO and OPENSSL_NO_RSA.
Richard Levitte [Thu, 20 Mar 2003 23:16:45 +0000 (23:16 +0000)]
Make sure we get the definition of OPENSSL_NO_BIO and OPENSSL_NO_RSA.

21 years agoMake sure we get the definition of OPENSSL_NO_AES.
Richard Levitte [Thu, 20 Mar 2003 23:15:51 +0000 (23:15 +0000)]
Make sure we get the definition of OPENSSL_NO_AES.

21 years agoBecause it may be needed in public header files, move the definition
Richard Levitte [Thu, 20 Mar 2003 23:14:49 +0000 (23:14 +0000)]
Because it may be needed in public header files, move the definition
of OPENSSL_NO_FP_API on existence of OPENSSL_SYS_MSDOS to e_os2.h.

21 years agomake update
Dr. Stephen Henson [Thu, 20 Mar 2003 17:59:39 +0000 (17:59 +0000)]
make update

21 years agoNew ASN1 macros to just implement and declare the new and free functions
Dr. Stephen Henson [Thu, 20 Mar 2003 17:58:33 +0000 (17:58 +0000)]
New ASN1 macros to just implement and declare the new and free functions
and changes to mkdef.pl so it recognises them.

Use these in policyMappings extension.

21 years agomake sure RSA blinding works when the PRNG is not properly seeded;
Bodo Möller [Thu, 20 Mar 2003 17:31:30 +0000 (17:31 +0000)]
make sure RSA blinding works when the PRNG is not properly seeded;
enable it automatically for the built-in engine

21 years agoSupport for policyMappings
Dr. Stephen Henson [Thu, 20 Mar 2003 17:26:44 +0000 (17:26 +0000)]
Support for policyMappings

21 years agoTypo: OID should be policyMappings
Dr. Stephen Henson [Thu, 20 Mar 2003 17:14:27 +0000 (17:14 +0000)]
Typo: OID should be policyMappings

21 years agoAvoid warning.
Dr. Stephen Henson [Thu, 20 Mar 2003 17:09:46 +0000 (17:09 +0000)]
Avoid warning.

21 years agoAdd documentation for -starttls (s_client) and -id_prefix (s_server).
Richard Levitte [Thu, 20 Mar 2003 16:34:27 +0000 (16:34 +0000)]
Add documentation for -starttls (s_client) and -id_prefix (s_server).
PR: 542

21 years agomake update
Dr. Stephen Henson [Thu, 20 Mar 2003 14:21:36 +0000 (14:21 +0000)]
make update

21 years agoSome shells (ksh in this case) don't say 'command not found'.
Richard Levitte [Thu, 20 Mar 2003 11:44:28 +0000 (11:44 +0000)]
Some shells (ksh in this case) don't say 'command not found'.
PR: 540

21 years agoSpelling errors.
Richard Levitte [Thu, 20 Mar 2003 11:41:59 +0000 (11:41 +0000)]
Spelling errors.
PR: 538

21 years agoMake sure that all the library paths are modified in prepend mode, not
Richard Levitte [Thu, 20 Mar 2003 11:37:47 +0000 (11:37 +0000)]
Make sure that all the library paths are modified in prepend mode, not
replace mode.
PR: 528