oweals/openssl.git
12 years agoRemove unused static function.
Ben Laurie [Mon, 5 Nov 2012 02:01:07 +0000 (02:01 +0000)]
Remove unused static function.

12 years agoFix gcc 4.8 warning (strict aliasing violation).
Ben Laurie [Mon, 5 Nov 2012 01:59:33 +0000 (01:59 +0000)]
Fix gcc 4.8 warning (strict aliasing violation).

12 years agomk1mf.pl: correct flags.
Andy Polyakov [Mon, 29 Oct 2012 22:23:58 +0000 (22:23 +0000)]
mk1mf.pl: correct flags.

12 years agoe_os.h: keep stdin redifinitions to "normal" Windows.
Andy Polyakov [Mon, 29 Oct 2012 20:55:08 +0000 (20:55 +0000)]
e_os.h: keep stdin redifinitions to "normal" Windows.

12 years agoutil/fipslink.pl: further adjustments.
Andy Polyakov [Sat, 27 Oct 2012 23:36:43 +0000 (23:36 +0000)]
util/fipslink.pl: further adjustments.

12 years agoutil/fipslink.pl: fix typo.
Andy Polyakov [Sat, 27 Oct 2012 21:21:09 +0000 (21:21 +0000)]
util/fipslink.pl: fix typo.

12 years agoe_os.h: skip redundant headers in fipscanister build.
Andy Polyakov [Sat, 27 Oct 2012 21:17:48 +0000 (21:17 +0000)]
e_os.h: skip redundant headers in fipscanister build.

12 years agoutil/fipslink.pl: allow for single-step link.
Andy Polyakov [Sat, 27 Oct 2012 21:16:45 +0000 (21:16 +0000)]
util/fipslink.pl: allow for single-step link.

12 years agoutil/pl/VC-32.pl: make fipscanister.lib universally usable.
Andy Polyakov [Sat, 27 Oct 2012 21:16:00 +0000 (21:16 +0000)]
util/pl/VC-32.pl: make fipscanister.lib universally usable.

12 years agotypo
Dr. Stephen Henson [Sat, 27 Oct 2012 18:05:56 +0000 (18:05 +0000)]
typo

12 years agotest_t4: cover even Camellia.
Andy Polyakov [Thu, 25 Oct 2012 12:10:44 +0000 (12:10 +0000)]
test_t4: cover even Camellia.

12 years agoSPARCv9 assembly pack: harmonize ABI handling (so that it's handled in one
Andy Polyakov [Thu, 25 Oct 2012 12:07:32 +0000 (12:07 +0000)]
SPARCv9 assembly pack: harmonize ABI handling (so that it's handled in one
place at a time, by pre-processor in .S case and perl - in .s).

12 years ago[aes|cmll]t4-sparcv9.pl: unify argument handling.
Andy Polyakov [Thu, 25 Oct 2012 12:03:41 +0000 (12:03 +0000)]
[aes|cmll]t4-sparcv9.pl: unify argument handling.

12 years agoperlasm/sparcv9_modes.pl: fix typo in IV save code and switch to less
Andy Polyakov [Thu, 25 Oct 2012 12:02:37 +0000 (12:02 +0000)]
perlasm/sparcv9_modes.pl: fix typo in IV save code and switch to less
aggressive ASI.

12 years agooops, add missing asn_mstbl.c
Dr. Stephen Henson [Wed, 24 Oct 2012 13:27:46 +0000 (13:27 +0000)]
oops, add missing asn_mstbl.c

12 years agoghash-sparcv9.pl: add VIS3 code path.
Andy Polyakov [Wed, 24 Oct 2012 08:21:10 +0000 (08:21 +0000)]
ghash-sparcv9.pl: add VIS3 code path.

12 years agoNew config module for string tables. This can be used to add new
Dr. Stephen Henson [Mon, 22 Oct 2012 13:05:54 +0000 (13:05 +0000)]
New config module for string tables. This can be used to add new
multi string components (as used in DN fields or request attributes)
or change the values of existing ones.

12 years agouse correct year automatically
Dr. Stephen Henson [Mon, 22 Oct 2012 13:02:42 +0000 (13:02 +0000)]
use correct year automatically

12 years agolinux-pcc: make it more robust and recognize KERNEL_BITS variable.
Andy Polyakov [Sun, 21 Oct 2012 18:19:41 +0000 (18:19 +0000)]
linux-pcc: make it more robust and recognize KERNEL_BITS variable.

12 years agoAdd VIS3-capable sparcv9-gf2m module.
Andy Polyakov [Sat, 20 Oct 2012 15:59:14 +0000 (15:59 +0000)]
Add VIS3-capable sparcv9-gf2m module.

12 years agoAdd VIS3 Montgomery multiplication.
Andy Polyakov [Sat, 20 Oct 2012 09:13:21 +0000 (09:13 +0000)]
Add VIS3 Montgomery multiplication.

12 years agofix ASN1_STRING_TABLE_add so it can override existing string table values
Dr. Stephen Henson [Fri, 19 Oct 2012 15:06:31 +0000 (15:06 +0000)]
fix ASN1_STRING_TABLE_add so it can override existing string table values

12 years agofix error code
Dr. Stephen Henson [Thu, 18 Oct 2012 16:21:39 +0000 (16:21 +0000)]
fix error code

12 years agoadd simple AES GCM code example
Dr. Stephen Henson [Tue, 16 Oct 2012 23:03:45 +0000 (23:03 +0000)]
add simple AES GCM code example

12 years agoDon't require tag before ciphertext in AESGCM mode
Dr. Stephen Henson [Tue, 16 Oct 2012 22:46:08 +0000 (22:46 +0000)]
Don't require tag before ciphertext in AESGCM mode

12 years agoaix[64]-cc: get MT support right (gcc targets are not affected).
Andy Polyakov [Tue, 16 Oct 2012 08:06:51 +0000 (08:06 +0000)]
aix[64]-cc: get MT support right (gcc targets are not affected).

12 years agosparcv9_modes.pl: membars are reported as must-have.
Andy Polyakov [Mon, 15 Oct 2012 14:04:52 +0000 (14:04 +0000)]
sparcv9_modes.pl: membars are reported as must-have.

12 years agomd5-sparcv9.pl: avoid %asi modifications, improve short input performance
Andy Polyakov [Sun, 14 Oct 2012 16:51:27 +0000 (16:51 +0000)]
md5-sparcv9.pl: avoid %asi modifications, improve short input performance
by 30-20%.

12 years ago[md5|sha1|sha512]-sparcv9.pl: "cooperative" optimizations based on
Andy Polyakov [Sun, 14 Oct 2012 14:46:56 +0000 (14:46 +0000)]
[md5|sha1|sha512]-sparcv9.pl: "cooperative" optimizations based on
suggestions from David Miller.

12 years ago[aes|cmll]t4-sparcv9.pl: addendum to previous sparcv9_modes.pl commit.
Andy Polyakov [Sun, 14 Oct 2012 14:42:27 +0000 (14:42 +0000)]
[aes|cmll]t4-sparcv9.pl: addendum to previous sparcv9_modes.pl commit.

12 years agoperlasm/sparcv9_modes.pl: "cooperative" optimizations based on suggestions
Andy Polyakov [Sun, 14 Oct 2012 14:25:00 +0000 (14:25 +0000)]
perlasm/sparcv9_modes.pl: "cooperative" optimizations based on suggestions
from David Miller.

12 years agoAdd SPARC T4 Camellia support.
Andy Polyakov [Thu, 11 Oct 2012 18:35:18 +0000 (18:35 +0000)]
Add SPARC T4 Camellia support.

Submitted by: David Miller

12 years agoaest4-sparcv9.pl: split it to AES-specific and reusable part.
Andy Polyakov [Thu, 11 Oct 2012 18:30:35 +0000 (18:30 +0000)]
aest4-sparcv9.pl: split it to AES-specific and reusable part.

12 years agooops, fix compilation errors in s_server
Dr. Stephen Henson [Thu, 11 Oct 2012 18:03:42 +0000 (18:03 +0000)]
oops, fix compilation errors in s_server

12 years agoNew functions to check a hostname email or IP address against a
Dr. Stephen Henson [Mon, 8 Oct 2012 15:10:07 +0000 (15:10 +0000)]
New functions to check a hostname email or IP address against a
certificate. Add options to s_client, s_server and x509 utilities
to print results of checks.

12 years agoAdd SPARC T4 AES support.
Andy Polyakov [Sat, 6 Oct 2012 18:08:09 +0000 (18:08 +0000)]
Add SPARC T4 AES support.

Submitted by: David Miller

12 years agoFix EC_KEY initialization race.
Bodo Möller [Fri, 5 Oct 2012 20:50:11 +0000 (20:50 +0000)]
Fix EC_KEY initialization race.

Submitted by: Adam Langley

12 years agoIf OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" as
Dr. Stephen Henson [Sun, 30 Sep 2012 12:39:27 +0000 (12:39 +0000)]
If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" as
a ciphersuite to position the SCSV value in different places for testing
purposes.

12 years agosha[1|512]-sparcv9.pl: add hardware SPARC T4 support.
Andy Polyakov [Fri, 28 Sep 2012 09:35:39 +0000 (09:35 +0000)]
sha[1|512]-sparcv9.pl: add hardware SPARC T4 support.

Submitted by: David Miller

12 years agomd5-sparcv9.pl: add hardware SPARC T4 support.
Andy Polyakov [Fri, 28 Sep 2012 09:34:09 +0000 (09:34 +0000)]
md5-sparcv9.pl: add hardware SPARC T4 support.

Submitted by: David Miller

12 years agosparc_arch.h: add assembler helpers (and make it work on Solaris).
Andy Polyakov [Fri, 28 Sep 2012 09:31:40 +0000 (09:31 +0000)]
sparc_arch.h: add assembler helpers (and make it work on Solaris).

Submitted by: David Miller

12 years agomd5-sparcv9.pl: more accurate performance result.
Andy Polyakov [Fri, 28 Sep 2012 09:25:49 +0000 (09:25 +0000)]
md5-sparcv9.pl: more accurate performance result.

12 years agoFix Valgrind warning.
Bodo Möller [Mon, 24 Sep 2012 19:49:16 +0000 (19:49 +0000)]
Fix Valgrind warning.

Submitted by: Adam Langley

12 years ago* Configure: make the debug-levitte-linux{elf,noasm} less extreme.
Richard Levitte [Mon, 24 Sep 2012 18:48:37 +0000 (18:48 +0000)]
* Configure: make the debug-levitte-linux{elf,noasm} less extreme.

12 years agoAdd md5-sparcv9.pl.
Andy Polyakov [Sun, 23 Sep 2012 20:39:53 +0000 (20:39 +0000)]
Add md5-sparcv9.pl.

12 years agosparcv9cap.c: add SPARC-T4 feature detection.
Andy Polyakov [Sun, 23 Sep 2012 20:29:03 +0000 (20:29 +0000)]
sparcv9cap.c: add SPARC-T4 feature detection.

Submitted by: David Miller

12 years ago* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in
Richard Levitte [Fri, 21 Sep 2012 13:08:24 +0000 (13:08 +0000)]
* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug.  Fortunately in
  debugging code that's seldom used.

12 years agoconfig: detect linux-mips* targets.
Andy Polyakov [Wed, 19 Sep 2012 20:58:07 +0000 (20:58 +0000)]
config: detect linux-mips* targets.

12 years agoConfigure: allow for compiler options starting with double dash.
Andy Polyakov [Tue, 18 Sep 2012 12:54:35 +0000 (12:54 +0000)]
Configure: allow for compiler options starting with double dash.

12 years agoMIPS assembly pack: add support for SmartMIPS ASE.
Andy Polyakov [Tue, 18 Sep 2012 12:52:23 +0000 (12:52 +0000)]
MIPS assembly pack: add support for SmartMIPS ASE.

12 years agoFix warning.
Bodo Möller [Mon, 17 Sep 2012 17:21:58 +0000 (17:21 +0000)]
Fix warning.

Submitted by: Chromium Authors

12 years agoConfigure: add MIPS targets.
Andy Polyakov [Sat, 15 Sep 2012 11:21:50 +0000 (11:21 +0000)]
Configure: add MIPS targets.

12 years agoMIPS assembly pack: add MIPS[32|64]R2 code.
Andy Polyakov [Sat, 15 Sep 2012 11:18:20 +0000 (11:18 +0000)]
MIPS assembly pack: add MIPS[32|64]R2 code.

12 years agoaes-mips.pl: interleave load and integer instructions for better performance.
Andy Polyakov [Sat, 15 Sep 2012 11:15:02 +0000 (11:15 +0000)]
aes-mips.pl: interleave load and integer instructions for better performance.

12 years agosha512-sparcv9.pl: fix binutils compilation error.
Andy Polyakov [Sat, 15 Sep 2012 08:53:25 +0000 (08:53 +0000)]
sha512-sparcv9.pl: fix binutils compilation error.

Submitted by: David Miller

12 years agoe_aes.c: uninitialized variable in aes_ccm_init_key.
Andy Polyakov [Sat, 15 Sep 2012 08:45:42 +0000 (08:45 +0000)]
e_aes.c: uninitialized variable in aes_ccm_init_key.

PR: 2874
Submitted by: Tomas Mraz

12 years agoAdd -rev test option to s_server to just reverse order of characters received
Dr. Stephen Henson [Fri, 14 Sep 2012 13:27:05 +0000 (13:27 +0000)]
Add -rev test option to s_server to just reverse order of characters received
by client and send back to server. Also prints an abbreviated summary of
the connection parameters.

12 years agoAdd -brief option to s_client and s_server to summarise connection details.
Dr. Stephen Henson [Wed, 12 Sep 2012 23:14:28 +0000 (23:14 +0000)]
Add -brief option to s_client and s_server to summarise connection details.

New option -verify_quiet to shut up the verify callback unless there is
an error.

12 years agoAdd ctrl and utility functions to retrieve raw cipher list sent by client in
Dr. Stephen Henson [Wed, 12 Sep 2012 13:57:48 +0000 (13:57 +0000)]
Add ctrl and utility functions to retrieve raw cipher list sent by client in
client hello message. Previously this could only be retrieved on an initial
connection and it was impossible to determine the cipher IDs of any uknown
ciphersuites.

12 years agoenhance EC method to support setting curve type when generating keys and add paramete...
Dr. Stephen Henson [Tue, 11 Sep 2012 13:54:09 +0000 (13:54 +0000)]
enhance EC method to support setting curve type when generating keys and add parameter encoding option

12 years agofix memory leak
Dr. Stephen Henson [Tue, 11 Sep 2012 13:43:57 +0000 (13:43 +0000)]
fix memory leak

12 years agoMinor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificate
Dr. Stephen Henson [Tue, 11 Sep 2012 13:34:08 +0000 (13:34 +0000)]
Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificate
change the current certificate (in s->cert->key) to the one used and then
SSL_get_certificate and SSL_get_privatekey will automatically work.

12 years agoCall OCSP Stapling callback after ciphersuite has been chosen, so the
Ben Laurie [Tue, 11 Sep 2012 12:57:46 +0000 (12:57 +0000)]
Call OCSP Stapling callback after ciphersuite has been chosen, so the
right response is stapled. Also change SSL_get_certificate() so it
returns the certificate actually sent.  See
http://rt.openssl.org/Ticket/Display.html?id=2836.

12 years agofix memory leak
Dr. Stephen Henson [Sun, 9 Sep 2012 21:19:32 +0000 (21:19 +0000)]
fix memory leak

12 years agoupdate README
Dr. Stephen Henson [Sun, 9 Sep 2012 20:47:36 +0000 (20:47 +0000)]
update README

12 years agoExtend certificate creation examples to include CRL generation and sample
Dr. Stephen Henson [Sun, 9 Sep 2012 20:43:49 +0000 (20:43 +0000)]
Extend certificate creation examples to include CRL generation and sample
scripts running the test OCSP responder.

12 years agoNew -valid option to add a certificate to the ca index.txt that is valid and not...
Dr. Stephen Henson [Sun, 9 Sep 2012 12:58:49 +0000 (12:58 +0000)]
New -valid option to add a certificate to the ca index.txt that is valid and not revoked

12 years agonew ctrl to retrive value of received temporary key in server key exchange message...
Dr. Stephen Henson [Sat, 8 Sep 2012 13:59:51 +0000 (13:59 +0000)]
new ctrl to retrive value of received temporary key in server key exchange message, print out details in s_client

12 years agostore and print out message digest peer signed with in TLS 1.2
Dr. Stephen Henson [Fri, 7 Sep 2012 12:53:42 +0000 (12:53 +0000)]
store and print out message digest peer signed with in TLS 1.2

12 years agobsaes-armv7.pl: closest shave. While 0.3 cpb improvement on S4 appears
Andy Polyakov [Fri, 7 Sep 2012 12:29:18 +0000 (12:29 +0000)]
bsaes-armv7.pl: closest shave. While 0.3 cpb improvement on S4 appears
insignificant, it's actually 4 cycles less for 14 instructions sequence!

12 years agobsaes-armv7.pl: even closer shave.
Andy Polyakov [Tue, 4 Sep 2012 14:39:05 +0000 (14:39 +0000)]
bsaes-armv7.pl: even closer shave.

12 years agobsaes-armv7.pl: minor performance squeeze on Snapdragon S4.
Andy Polyakov [Tue, 4 Sep 2012 08:26:50 +0000 (08:26 +0000)]
bsaes-armv7.pl: minor performance squeeze on Snapdragon S4.

12 years agosha512-armv4.pl: optimize for Snapdragon S4.
Andy Polyakov [Tue, 4 Sep 2012 08:25:37 +0000 (08:25 +0000)]
sha512-armv4.pl: optimize for Snapdragon S4.

12 years agobn_lcl.h: gcc removed support for "h" constraint, which broke inline
Andy Polyakov [Sat, 1 Sep 2012 13:17:32 +0000 (13:17 +0000)]
bn_lcl.h: gcc removed support for "h" constraint, which broke inline
assembler.

12 years agoDon't load GOST ENGINE if it is already loaded.
Dr. Stephen Henson [Sat, 1 Sep 2012 11:30:53 +0000 (11:30 +0000)]
Don't load GOST ENGINE if it is already loaded.

Multiple copies of the ENGINE will cause problems when it is cleaned up as
the methods are stored in static structures which will be overwritten and
freed up more than once.

Set static methods to NULL when the ENGINE is freed so it can be reloaded.

12 years agoperform sanity checks on server certificate type as soon as it is received instead...
Dr. Stephen Henson [Fri, 31 Aug 2012 11:18:54 +0000 (11:18 +0000)]
perform sanity checks on server certificate type as soon as it is received instead of waiting until server key exchange

12 years agomake EC test certificates usable for ECDH
Dr. Stephen Henson [Fri, 31 Aug 2012 11:15:44 +0000 (11:15 +0000)]
make EC test certificates usable for ECDH

12 years agogive more meaningful error if presented with wrong certificate type by server
Dr. Stephen Henson [Thu, 30 Aug 2012 12:46:22 +0000 (12:46 +0000)]
give more meaningful error if presented with wrong certificate type by server

12 years agox86cpuid.pl: hide symbols [backport from x86_64].
Andy Polyakov [Wed, 29 Aug 2012 14:19:59 +0000 (14:19 +0000)]
x86cpuid.pl: hide symbols [backport from x86_64].

12 years agoTABLE update addendum to commit#22775.
Andy Polyakov [Wed, 29 Aug 2012 14:15:18 +0000 (14:15 +0000)]
TABLE update addendum to commit#22775.

12 years agoHarmonize CHANGES in HEAD.
Andy Polyakov [Wed, 29 Aug 2012 14:14:05 +0000 (14:14 +0000)]
Harmonize CHANGES in HEAD.

12 years agoAdd linux-x32 target.
Andy Polyakov [Wed, 29 Aug 2012 14:08:46 +0000 (14:08 +0000)]
Add linux-x32 target.

12 years agoAdd compilation flag to disable certain protocol checks and allow use of
Dr. Stephen Henson [Wed, 29 Aug 2012 13:18:34 +0000 (13:18 +0000)]
Add compilation flag to disable certain protocol checks and allow use of
some invalid operations for testing purposes. Currently this can be used
to sign using digests the peer doesn't support, EC curves the peer
doesn't support and use certificates which don't match the type associated
with a ciphersuite.

12 years agooops, typo
Dr. Stephen Henson [Tue, 28 Aug 2012 23:19:25 +0000 (23:19 +0000)]
oops, typo

12 years agoNew compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passes
Dr. Stephen Henson [Tue, 28 Aug 2012 23:17:28 +0000 (23:17 +0000)]
New compile time option OPENSSL_SSL_TRACE_CRYPTO, when set this passes
all derived keys to the message callback.

Add code to SSL_trace to include support for printing out keys.

12 years agoupdate debug-steve* configurations
Dr. Stephen Henson [Tue, 28 Aug 2012 23:06:12 +0000 (23:06 +0000)]
update debug-steve* configurations

12 years agoPR: 2786
Dr. Stephen Henson [Wed, 22 Aug 2012 22:43:23 +0000 (22:43 +0000)]
PR: 2786
Reported by: Tomas Mraz <tmraz@redhat.com>

Treat a NULL value passed to drbg_free_entropy callback as non-op. This
can happen if the call to fips_get_entropy fails.

12 years agosha1-armv4-large.pl: comply with ABI.
Andy Polyakov [Fri, 17 Aug 2012 19:57:04 +0000 (19:57 +0000)]
sha1-armv4-large.pl: comply with ABI.

12 years agoConfigure: add mips-mont to MIPS32 builds.
Andy Polyakov [Fri, 17 Aug 2012 09:38:45 +0000 (09:38 +0000)]
Configure: add mips-mont to MIPS32 builds.

12 years agoMIPS assembly pack: assign default value to $flavour.
Andy Polyakov [Fri, 17 Aug 2012 09:10:31 +0000 (09:10 +0000)]
MIPS assembly pack: assign default value to $flavour.

12 years agoOops - didn't mean to change Makefile on previous submit
Bodo Möller [Thu, 16 Aug 2012 13:49:34 +0000 (13:49 +0000)]
Oops - didn't mean to change Makefile on previous submit

12 years agoEnable message names for TLS 1.1, 1.2 with -msg.
Bodo Möller [Thu, 16 Aug 2012 13:41:40 +0000 (13:41 +0000)]
Enable message names for TLS 1.1, 1.2 with -msg.

12 years agoAdd three Suite B modes to TLS code, supporting RFC6460.
Dr. Stephen Henson [Wed, 15 Aug 2012 15:15:05 +0000 (15:15 +0000)]
Add three Suite B modes to TLS code, supporting RFC6460.

12 years agobss_dgram.c: fix compilation failure and warning on Windows with
Andy Polyakov [Tue, 14 Aug 2012 09:53:24 +0000 (09:53 +0000)]
bss_dgram.c: fix compilation failure and warning on Windows with
contemporary SDK.

12 years agogosthash.c: use memmove in circle_xor8, as input pointers can be equal.
Andy Polyakov [Mon, 13 Aug 2012 16:36:51 +0000 (16:36 +0000)]
gosthash.c: use memmove in circle_xor8, as input pointers can be equal.

PR: 2858

12 years ago./Configure: libcrypto.a can grow to many GB because of ar bug.
Andy Polyakov [Mon, 13 Aug 2012 16:10:08 +0000 (16:10 +0000)]
./Configure: libcrypto.a can grow to many GB because of ar bug.

PR: 2838

12 years agogcm128.c: fix AAD-only case with AAD length not divisible by 16.
Andy Polyakov [Mon, 13 Aug 2012 15:07:37 +0000 (15:07 +0000)]
gcm128.c: fix AAD-only case with AAD length not divisible by 16.

PR: 2859
Submitted by: John Foley

12 years agosha512-x86_64.pl: revert previous change and solve the problem through
Andy Polyakov [Mon, 13 Aug 2012 12:34:36 +0000 (12:34 +0000)]
sha512-x86_64.pl: revert previous change and solve the problem through
perlasm/x86_64-xlate.pl instead.

12 years agosha512-x86_64.pl: minimum gas requirement for AMD XOP.
Andy Polyakov [Mon, 13 Aug 2012 11:01:44 +0000 (11:01 +0000)]
sha512-x86_64.pl: minimum gas requirement for AMD XOP.

12 years agoupdate ordinals
Dr. Stephen Henson [Sun, 5 Aug 2012 18:14:21 +0000 (18:14 +0000)]
update ordinals