Dr. Stephen Henson [Tue, 12 Apr 2005 11:34:21 +0000 (11:34 +0000)]
Ooops, shoudln't have deleted this line.
Dr. Stephen Henson [Mon, 11 Apr 2005 22:22:51 +0000 (22:22 +0000)]
Not sure what this is doing here...
Richard Levitte [Mon, 11 Apr 2005 15:15:09 +0000 (15:15 +0000)]
Now that things have been tagged properly, make preparations for the
next version in the 0.9.7 branch.
Richard Levitte [Mon, 11 Apr 2005 15:10:07 +0000 (15:10 +0000)]
Prepare to release 0.9.7g.
The tag till be OpenSSL_0_9_7g.
Richard Levitte [Mon, 11 Apr 2005 15:05:54 +0000 (15:05 +0000)]
Add a NEWS item for 0.9.7g.
Richard Levitte [Mon, 11 Apr 2005 15:03:37 +0000 (15:03 +0000)]
Merge RFC3820 source into mainstream 0.9.7-stable.
Richard Levitte [Mon, 11 Apr 2005 14:18:14 +0000 (14:18 +0000)]
Add emacs cache files to .cvsignore.
cvs2svn [Mon, 11 Apr 2005 14:17:08 +0000 (14:17 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Mon, 11 Apr 2005 14:17:07 +0000 (14:17 +0000)]
Add emacs cache files to .cvsignore.
Dr. Stephen Henson [Sun, 10 Apr 2005 23:41:09 +0000 (23:41 +0000)]
Move allow_proxy_certs declaration to start of function.
Dr. Stephen Henson [Sat, 9 Apr 2005 23:55:55 +0000 (23:55 +0000)]
Make kerberos ciphersuite code work with newer header files
Dr. Stephen Henson [Sat, 9 Apr 2005 23:52:53 +0000 (23:52 +0000)]
Typo..
Dr. Stephen Henson [Sat, 9 Apr 2005 23:32:37 +0000 (23:32 +0000)]
Make kerberos ciphersuites work with newer headers.
cvs2svn [Sat, 9 Apr 2005 16:07:13 +0000 (16:07 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Sat, 9 Apr 2005 16:07:12 +0000 (16:07 +0000)]
Added restrictions on the use of proxy certificates, as they may pose
a security threat on unexpecting applications. Document and test.
Nils Larsch [Fri, 8 Apr 2005 22:52:42 +0000 (22:52 +0000)]
add support for DER encoded private keys to SSL_CTX_use_PrivateKey_file()
and SSL_use_PrivateKey_file()
PR: 1035
Submitted by: Walter Goulet
Reviewed by: Nils Larsch
Nils Larsch [Fri, 8 Apr 2005 22:49:57 +0000 (22:49 +0000)]
improve docu of SSL_CTX_use_PrivateKey()
Nils Larsch [Thu, 7 Apr 2005 23:19:17 +0000 (23:19 +0000)]
get rid of very buggy and very imcomplete DH cert support
Reviewed by: Bodo Moeller
Nils Larsch [Thu, 7 Apr 2005 22:53:35 +0000 (22:53 +0000)]
make sure error queue is totally emptied
PR: 359
Nils Larsch [Thu, 7 Apr 2005 22:48:33 +0000 (22:48 +0000)]
const fixes
Andy Polyakov [Thu, 7 Apr 2005 20:26:10 +0000 (20:26 +0000)]
Recognize MSYS/MINGW environment.
Andy Polyakov [Thu, 7 Apr 2005 20:24:29 +0000 (20:24 +0000)]
Recognize MSYS/MINGW environment.
Andy Polyakov [Thu, 7 Apr 2005 18:39:45 +0000 (18:39 +0000)]
Implement OPENSSL_showfatal and make it Win32 GUI and service aware
[meaning that it will detect in which context application is running
and either write message to stderr, post a dialog or log an event].
Andy Polyakov [Thu, 7 Apr 2005 16:06:03 +0000 (16:06 +0000)]
Engage DllMain on Windows. Partial backport from HEAD. Unlike HEAD,
it doesn't get engaged on __CYGWIN__, because I'm not sure is *all*
Cygwin installations are equipped with windows.h...
Andy Polyakov [Thu, 7 Apr 2005 15:51:55 +0000 (15:51 +0000)]
Harmonize cygwin/mingw and VC targets.
Andy Polyakov [Wed, 6 Apr 2005 09:45:42 +0000 (09:45 +0000)]
+45% RC4 performance boost on Intel EM64T core. Unrolled loop providing
further +35% will follow...
Submitted by: Zou Nanhai
Nils Larsch [Tue, 5 Apr 2005 19:11:19 +0000 (19:11 +0000)]
some const fixes
Nils Larsch [Tue, 5 Apr 2005 18:17:13 +0000 (18:17 +0000)]
update progs.pl to reflect changes in progs.h
Nils Larsch [Tue, 5 Apr 2005 11:17:03 +0000 (11:17 +0000)]
fix example in docu
PR: 800
Nils Larsch [Tue, 5 Apr 2005 11:16:34 +0000 (11:16 +0000)]
fix example in docu
PR: 800
Nils Larsch [Tue, 5 Apr 2005 10:29:43 +0000 (10:29 +0000)]
some const fixes and cleanup
Nils Larsch [Mon, 4 Apr 2005 18:15:59 +0000 (18:15 +0000)]
remove unused recp method
Andy Polyakov [Mon, 4 Apr 2005 17:10:53 +0000 (17:10 +0000)]
Extend Solaris x86 support to amd64.
Andy Polyakov [Mon, 4 Apr 2005 17:07:16 +0000 (17:07 +0000)]
Solaris x86 linker erroneously pads .init segment with zeros instead of
nops, which causes SEGV at startup. So I don't align anymore.
Andy Polyakov [Mon, 4 Apr 2005 17:05:06 +0000 (17:05 +0000)]
Some non-GNU compilers (such as Sun C) define __i386.
Bodo Möller [Sun, 3 Apr 2005 23:53:48 +0000 (23:53 +0000)]
HISTORY section: point out change of default digest
Andy Polyakov [Sun, 3 Apr 2005 19:16:58 +0000 (19:16 +0000)]
Extend Solaris x86 support to amd64. Note that if both gcc and Sun C
are installed, it defaults to gcc, because it beats Sun C on every
benchmark. Also note that gcc shared build was verified to work woth
Sun C...
Andy Polyakov [Sun, 3 Apr 2005 18:54:46 +0000 (18:54 +0000)]
Downsync from HEAD.
PR: 1031
Andy Polyakov [Sun, 3 Apr 2005 18:53:29 +0000 (18:53 +0000)]
Make bn/asm/x86_64-gcc.c gcc4 savvy. +r is likely to be initially
introduced for a reason [like bug in initial gcc port], but proposed
=&r is treated correctly by senior 3.2, so we can assume it's safe now.
PR: 1031
Ben Laurie [Sun, 3 Apr 2005 16:38:22 +0000 (16:38 +0000)]
If input is bad, we still need to clear the buffer.
Nils Larsch [Sat, 2 Apr 2005 09:29:15 +0000 (09:29 +0000)]
use SHA-1 as the default digest for the apps/openssl commands
Dr. Stephen Henson [Fri, 1 Apr 2005 21:56:15 +0000 (21:56 +0000)]
Typo
Dr. Stephen Henson [Fri, 1 Apr 2005 21:55:13 +0000 (21:55 +0000)]
Typo.
Nils Larsch [Fri, 1 Apr 2005 17:50:09 +0000 (17:50 +0000)]
really clear the error queue here
PR: 860
Nils Larsch [Fri, 1 Apr 2005 17:49:33 +0000 (17:49 +0000)]
really clear the error queue here
PR: 860
Nils Larsch [Fri, 1 Apr 2005 17:35:32 +0000 (17:35 +0000)]
use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.
PR: 658
Nils Larsch [Fri, 1 Apr 2005 17:33:39 +0000 (17:33 +0000)]
use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.
PR: 658
Ben Laurie [Thu, 31 Mar 2005 13:57:54 +0000 (13:57 +0000)]
Consistency.
Richard Levitte [Thu, 31 Mar 2005 12:26:29 +0000 (12:26 +0000)]
Add a file with fingerprints that have recently been used to sign
OpenSSL distributions, or are about to. This has been requested a
little now and then by users, for years :-/...
cvs2svn [Thu, 31 Mar 2005 11:51:48 +0000 (11:51 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Thu, 31 Mar 2005 11:51:47 +0000 (11:51 +0000)]
Add a file with fingerprints that have recently been used to sign
OpenSSL distributions, or are about to. This has been requested a
little now and then by users, for years :-/...
Ben Laurie [Thu, 31 Mar 2005 10:55:55 +0000 (10:55 +0000)]
Simplicate and add lightness.
Ben Laurie [Thu, 31 Mar 2005 10:34:59 +0000 (10:34 +0000)]
Get rid of irritating noise.
Ben Laurie [Thu, 31 Mar 2005 09:26:39 +0000 (09:26 +0000)]
Give everything prototypes (well, everything that's actually used).
Nils Larsch [Wed, 30 Mar 2005 21:38:29 +0000 (21:38 +0000)]
fix header
Nils Larsch [Wed, 30 Mar 2005 21:37:05 +0000 (21:37 +0000)]
Makefile.ssl doesn't exist anymore
Ben Laurie [Wed, 30 Mar 2005 14:44:50 +0000 (14:44 +0000)]
Take account of Makefile.ssl removal.
Ben Laurie [Wed, 30 Mar 2005 14:19:21 +0000 (14:19 +0000)]
Make tags target useful.
Ben Laurie [Wed, 30 Mar 2005 14:15:14 +0000 (14:15 +0000)]
Don't debug.
Ben Laurie [Wed, 30 Mar 2005 13:05:57 +0000 (13:05 +0000)]
Blow away Makefile.ssl.
Nils Larsch [Wed, 30 Mar 2005 11:50:14 +0000 (11:50 +0000)]
update docs (recent constification)
Ben Laurie [Wed, 30 Mar 2005 10:26:02 +0000 (10:26 +0000)]
Constification.
Nils Larsch [Wed, 30 Mar 2005 09:47:12 +0000 (09:47 +0000)]
update docs (recent constification)
Nils Larsch [Tue, 29 Mar 2005 17:50:08 +0000 (17:50 +0000)]
the second argument of EVP_SealInit is const
Nils Larsch [Tue, 29 Mar 2005 17:48:34 +0000 (17:48 +0000)]
the second argument of EVP_SealInit is const
Nils Larsch [Mon, 28 Mar 2005 15:06:29 +0000 (15:06 +0000)]
when building with OPENSSL_NO_DEPRECATED defined BN_zero is a macro
which cannot be evaluated in an if statement
Dr. Stephen Henson [Sun, 27 Mar 2005 03:36:14 +0000 (03:36 +0000)]
Allow 'null' cipher and appropriate Kerberos ciphersuites in FIPS mode.
Andy Polyakov [Sat, 26 Mar 2005 19:32:31 +0000 (19:32 +0000)]
Resolve "operation size not specified" in NASM modules.
Bodo Möller [Thu, 24 Mar 2005 01:37:07 +0000 (01:37 +0000)]
Harmonize with CHANGES as distributed in OpenSSL 0.9.7f.
Ulf Möller [Thu, 24 Mar 2005 00:14:59 +0000 (00:14 +0000)]
undo Cygwin change
Ulf Möller [Wed, 23 Mar 2005 22:01:57 +0000 (22:01 +0000)]
undo Cygwin change
Richard Levitte [Wed, 23 Mar 2005 21:14:59 +0000 (21:14 +0000)]
Change the memory leak FAQ entry to describe the levels of thread safety in each function
Richard Levitte [Wed, 23 Mar 2005 21:13:35 +0000 (21:13 +0000)]
Change the memory leak FAQ entry to describe the levels of thread safety in each function
Ben Laurie [Wed, 23 Mar 2005 08:21:30 +0000 (08:21 +0000)]
Constification.
Dr. Stephen Henson [Tue, 22 Mar 2005 21:27:36 +0000 (21:27 +0000)]
Update CHANGES, opensslv.h
Dr. Stephen Henson [Tue, 22 Mar 2005 20:10:38 +0000 (20:10 +0000)]
Update FAQ
Dr. Stephen Henson [Tue, 22 Mar 2005 19:15:55 +0000 (19:15 +0000)]
Use right date in FAQ too :-)
Dr. Stephen Henson [Tue, 22 Mar 2005 19:14:42 +0000 (19:14 +0000)]
Oops, use right date!
Dr. Stephen Henson [Tue, 22 Mar 2005 18:43:41 +0000 (18:43 +0000)]
Update README
Dr. Stephen Henson [Tue, 22 Mar 2005 18:17:23 +0000 (18:17 +0000)]
Update files ready for release.
Dr. Stephen Henson [Tue, 22 Mar 2005 18:15:56 +0000 (18:15 +0000)]
make update
Dr. Stephen Henson [Tue, 22 Mar 2005 17:57:43 +0000 (17:57 +0000)]
Docs fix.
Dr. Stephen Henson [Tue, 22 Mar 2005 17:55:33 +0000 (17:55 +0000)]
Doc fixes.
Nils Larsch [Tue, 22 Mar 2005 17:55:18 +0000 (17:55 +0000)]
test, remove unnecessary const cast
Dr. Stephen Henson [Tue, 22 Mar 2005 17:54:13 +0000 (17:54 +0000)]
PR: 931
Dr. Stephen Henson [Tue, 22 Mar 2005 17:29:36 +0000 (17:29 +0000)]
Fix memory leak.
Dr. Stephen Henson [Tue, 22 Mar 2005 14:31:58 +0000 (14:31 +0000)]
Oops...
Dr. Stephen Henson [Tue, 22 Mar 2005 14:11:06 +0000 (14:11 +0000)]
Ensure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server and
client random values.
Dr. Stephen Henson [Tue, 22 Mar 2005 14:10:32 +0000 (14:10 +0000)]
Ensure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server and
client random values.
Richard Levitte [Mon, 21 Mar 2005 13:52:12 +0000 (13:52 +0000)]
There are cases when there are no files left to verify. Make sure to
handle that properly.
Richard Levitte [Mon, 21 Mar 2005 13:49:09 +0000 (13:49 +0000)]
There are cases when there are no files left to verify. Make sure to
handle that properly.
Nils Larsch [Sun, 20 Mar 2005 23:12:13 +0000 (23:12 +0000)]
add new curves to the loop (with some cleanup from me)
Submitted by: Jean-Luc Duval
Reviewed by: Nils Larsch
Nils Larsch [Sun, 20 Mar 2005 22:56:07 +0000 (22:56 +0000)]
some const fixes
Ulf Möller [Sat, 19 Mar 2005 11:40:41 +0000 (11:40 +0000)]
Cygwin randomness
Ulf Möller [Sat, 19 Mar 2005 11:39:17 +0000 (11:39 +0000)]
Use Windows randomness code on Cygwin
Ulf Möller [Sat, 19 Mar 2005 11:13:30 +0000 (11:13 +0000)]
fix breakage for Perl versions that do boolean operations on long words
Ulf Möller [Sat, 19 Mar 2005 10:19:45 +0000 (10:19 +0000)]
typo
Andy Polyakov [Tue, 15 Mar 2005 09:46:14 +0000 (09:46 +0000)]
Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this in
crypto/Makefile and make Makefile.org and fips/Makefile more discreet.
Richard Levitte [Mon, 14 Mar 2005 15:39:25 +0000 (15:39 +0000)]
Added HOWTO about proxy certificates.
Bodo Möller [Sun, 13 Mar 2005 19:49:47 +0000 (19:49 +0000)]
"make depend". This takes into account the algorithms that are now
disabled by default (MDC2 and RC5), which until now were skipped
by "make links" and yet supposedly required by some of the Makefiles,
meaning that the recent snapshots failed to compile.
Problem reported by Nils Larsch.