Andy Polyakov [Sun, 3 Apr 2005 19:16:58 +0000 (19:16 +0000)]
Extend Solaris x86 support to amd64. Note that if both gcc and Sun C
are installed, it defaults to gcc, because it beats Sun C on every
benchmark. Also note that gcc shared build was verified to work woth
Sun C...
Andy Polyakov [Sun, 3 Apr 2005 18:54:46 +0000 (18:54 +0000)]
Downsync from HEAD.
PR: 1031
Dr. Stephen Henson [Fri, 1 Apr 2005 21:55:13 +0000 (21:55 +0000)]
Typo.
Nils Larsch [Fri, 1 Apr 2005 17:49:33 +0000 (17:49 +0000)]
really clear the error queue here
PR: 860
Nils Larsch [Fri, 1 Apr 2005 17:33:39 +0000 (17:33 +0000)]
use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.
PR: 658
Richard Levitte [Thu, 31 Mar 2005 12:26:29 +0000 (12:26 +0000)]
Add a file with fingerprints that have recently been used to sign
OpenSSL distributions, or are about to. This has been requested a
little now and then by users, for years :-/...
cvs2svn [Thu, 31 Mar 2005 11:51:48 +0000 (11:51 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Thu, 31 Mar 2005 11:51:47 +0000 (11:51 +0000)]
Add a file with fingerprints that have recently been used to sign
OpenSSL distributions, or are about to. This has been requested a
little now and then by users, for years :-/...
Ben Laurie [Thu, 31 Mar 2005 10:55:55 +0000 (10:55 +0000)]
Simplicate and add lightness.
Ben Laurie [Thu, 31 Mar 2005 10:34:59 +0000 (10:34 +0000)]
Get rid of irritating noise.
Ben Laurie [Thu, 31 Mar 2005 09:26:39 +0000 (09:26 +0000)]
Give everything prototypes (well, everything that's actually used).
Nils Larsch [Wed, 30 Mar 2005 21:38:29 +0000 (21:38 +0000)]
fix header
Nils Larsch [Wed, 30 Mar 2005 21:37:05 +0000 (21:37 +0000)]
Makefile.ssl doesn't exist anymore
Ben Laurie [Wed, 30 Mar 2005 14:44:50 +0000 (14:44 +0000)]
Take account of Makefile.ssl removal.
Ben Laurie [Wed, 30 Mar 2005 14:19:21 +0000 (14:19 +0000)]
Make tags target useful.
Ben Laurie [Wed, 30 Mar 2005 14:15:14 +0000 (14:15 +0000)]
Don't debug.
Ben Laurie [Wed, 30 Mar 2005 13:05:57 +0000 (13:05 +0000)]
Blow away Makefile.ssl.
Nils Larsch [Wed, 30 Mar 2005 11:50:14 +0000 (11:50 +0000)]
update docs (recent constification)
Ben Laurie [Wed, 30 Mar 2005 10:26:02 +0000 (10:26 +0000)]
Constification.
Nils Larsch [Wed, 30 Mar 2005 09:47:12 +0000 (09:47 +0000)]
update docs (recent constification)
Nils Larsch [Tue, 29 Mar 2005 17:50:08 +0000 (17:50 +0000)]
the second argument of EVP_SealInit is const
Nils Larsch [Tue, 29 Mar 2005 17:48:34 +0000 (17:48 +0000)]
the second argument of EVP_SealInit is const
Nils Larsch [Mon, 28 Mar 2005 15:06:29 +0000 (15:06 +0000)]
when building with OPENSSL_NO_DEPRECATED defined BN_zero is a macro
which cannot be evaluated in an if statement
Dr. Stephen Henson [Sun, 27 Mar 2005 03:36:14 +0000 (03:36 +0000)]
Allow 'null' cipher and appropriate Kerberos ciphersuites in FIPS mode.
Andy Polyakov [Sat, 26 Mar 2005 19:32:31 +0000 (19:32 +0000)]
Resolve "operation size not specified" in NASM modules.
Bodo Möller [Thu, 24 Mar 2005 01:37:07 +0000 (01:37 +0000)]
Harmonize with CHANGES as distributed in OpenSSL 0.9.7f.
Ulf Möller [Thu, 24 Mar 2005 00:14:59 +0000 (00:14 +0000)]
undo Cygwin change
Ulf Möller [Wed, 23 Mar 2005 22:01:57 +0000 (22:01 +0000)]
undo Cygwin change
Richard Levitte [Wed, 23 Mar 2005 21:14:59 +0000 (21:14 +0000)]
Change the memory leak FAQ entry to describe the levels of thread safety in each function
Richard Levitte [Wed, 23 Mar 2005 21:13:35 +0000 (21:13 +0000)]
Change the memory leak FAQ entry to describe the levels of thread safety in each function
Ben Laurie [Wed, 23 Mar 2005 08:21:30 +0000 (08:21 +0000)]
Constification.
Dr. Stephen Henson [Tue, 22 Mar 2005 21:27:36 +0000 (21:27 +0000)]
Update CHANGES, opensslv.h
Dr. Stephen Henson [Tue, 22 Mar 2005 20:10:38 +0000 (20:10 +0000)]
Update FAQ
Dr. Stephen Henson [Tue, 22 Mar 2005 19:15:55 +0000 (19:15 +0000)]
Use right date in FAQ too :-)
Dr. Stephen Henson [Tue, 22 Mar 2005 19:14:42 +0000 (19:14 +0000)]
Oops, use right date!
Dr. Stephen Henson [Tue, 22 Mar 2005 18:43:41 +0000 (18:43 +0000)]
Update README
Dr. Stephen Henson [Tue, 22 Mar 2005 18:17:23 +0000 (18:17 +0000)]
Update files ready for release.
Dr. Stephen Henson [Tue, 22 Mar 2005 18:15:56 +0000 (18:15 +0000)]
make update
Dr. Stephen Henson [Tue, 22 Mar 2005 17:57:43 +0000 (17:57 +0000)]
Docs fix.
Dr. Stephen Henson [Tue, 22 Mar 2005 17:55:33 +0000 (17:55 +0000)]
Doc fixes.
Nils Larsch [Tue, 22 Mar 2005 17:55:18 +0000 (17:55 +0000)]
test, remove unnecessary const cast
Dr. Stephen Henson [Tue, 22 Mar 2005 17:54:13 +0000 (17:54 +0000)]
PR: 931
Dr. Stephen Henson [Tue, 22 Mar 2005 17:29:36 +0000 (17:29 +0000)]
Fix memory leak.
Dr. Stephen Henson [Tue, 22 Mar 2005 14:31:58 +0000 (14:31 +0000)]
Oops...
Dr. Stephen Henson [Tue, 22 Mar 2005 14:11:06 +0000 (14:11 +0000)]
Ensure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server and
client random values.
Dr. Stephen Henson [Tue, 22 Mar 2005 14:10:32 +0000 (14:10 +0000)]
Ensure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server and
client random values.
Richard Levitte [Mon, 21 Mar 2005 13:52:12 +0000 (13:52 +0000)]
There are cases when there are no files left to verify. Make sure to
handle that properly.
Richard Levitte [Mon, 21 Mar 2005 13:49:09 +0000 (13:49 +0000)]
There are cases when there are no files left to verify. Make sure to
handle that properly.
Nils Larsch [Sun, 20 Mar 2005 23:12:13 +0000 (23:12 +0000)]
add new curves to the loop (with some cleanup from me)
Submitted by: Jean-Luc Duval
Reviewed by: Nils Larsch
Nils Larsch [Sun, 20 Mar 2005 22:56:07 +0000 (22:56 +0000)]
some const fixes
Ulf Möller [Sat, 19 Mar 2005 11:40:41 +0000 (11:40 +0000)]
Cygwin randomness
Ulf Möller [Sat, 19 Mar 2005 11:39:17 +0000 (11:39 +0000)]
Use Windows randomness code on Cygwin
Ulf Möller [Sat, 19 Mar 2005 11:13:30 +0000 (11:13 +0000)]
fix breakage for Perl versions that do boolean operations on long words
Ulf Möller [Sat, 19 Mar 2005 10:19:45 +0000 (10:19 +0000)]
typo
Andy Polyakov [Tue, 15 Mar 2005 09:46:14 +0000 (09:46 +0000)]
Real Bourne shell doesn't accept ! as in "if ! grep ..." Fix this in
crypto/Makefile and make Makefile.org and fips/Makefile more discreet.
Richard Levitte [Mon, 14 Mar 2005 15:39:25 +0000 (15:39 +0000)]
Added HOWTO about proxy certificates.
Bodo Möller [Sun, 13 Mar 2005 19:49:47 +0000 (19:49 +0000)]
"make depend". This takes into account the algorithms that are now
disabled by default (MDC2 and RC5), which until now were skipped
by "make links" and yet supposedly required by some of the Makefiles,
meaning that the recent snapshots failed to compile.
Problem reported by Nils Larsch.
Bodo Möller [Sun, 13 Mar 2005 19:46:58 +0000 (19:46 +0000)]
It seems that Configure revision 1.404 broke "make depend" by hiding
from it which algorithms were disabled. With these new changes,
"make depend" will properly take into account algorithms that are skipped.
Andy Polyakov [Sat, 12 Mar 2005 12:15:20 +0000 (12:15 +0000)]
Fold rules in test/Makefile and provide hooks for updated FIPS build procedures.
Andy Polyakov [Sat, 12 Mar 2005 11:28:41 +0000 (11:28 +0000)]
Cygwin to use DSO_FLFCN and mingw to use DSO_WIN32.
Andy Polyakov [Sat, 12 Mar 2005 11:28:22 +0000 (11:28 +0000)]
Cygwin to use DSO_FLFCN and mingw to use DSO_WIN32 (required for FIPS).
Andy Polyakov [Sat, 12 Mar 2005 09:33:14 +0000 (09:33 +0000)]
Add mingw shared support [backport from HEAD].
Andy Polyakov [Sat, 12 Mar 2005 09:28:18 +0000 (09:28 +0000)]
Move copying of .dll to apps/ and test/ to more appropriate place.
Andy Polyakov [Sat, 12 Mar 2005 09:13:15 +0000 (09:13 +0000)]
Avoid re-build avalanches with HP-UX make.
Andy Polyakov [Sat, 12 Mar 2005 09:12:44 +0000 (09:12 +0000)]
Avoid re-build avalanches with HP-UX make.
Bodo Möller [Fri, 11 Mar 2005 09:01:24 +0000 (09:01 +0000)]
fix potential memory leak when allocation fails
PR: 801
Submitted by: Nils Larsch
Bodo Möller [Fri, 11 Mar 2005 09:00:59 +0000 (09:00 +0000)]
fix potential memory leak when allocation fails
PR: 801
Submitted by: Nils Larsch
Bodo Möller [Wed, 9 Mar 2005 19:08:02 +0000 (19:08 +0000)]
Fix typo
PR: 1017
Submitted by: ciresh@yahoo.com
Reviewed by: Nils Larsch
Bodo Möller [Wed, 2 Mar 2005 20:22:58 +0000 (20:22 +0000)]
Take MDC2 patent into account.
Bodo Möller [Wed, 2 Mar 2005 20:11:31 +0000 (20:11 +0000)]
In addition to RC5, also exclude MDC2 from compilation unless
the algorithm is explicitly requested.
Bodo Möller [Tue, 22 Feb 2005 10:29:51 +0000 (10:29 +0000)]
Change ./Configure so that certain algorithms can be disabled by default.
This is now the case for RC5.
As a side effect, the OPTIONS in the Makefile will usually look a
little different now, but they are essentially only for information
anyway.
Lutz Jänicke [Sat, 19 Feb 2005 10:26:18 +0000 (10:26 +0000)]
Fix typo on blowfish manual page
PR: 1010
Submitted by: Marc Balmer <mbalmer@openbsd.org>
Lutz Jänicke [Sat, 19 Feb 2005 10:25:55 +0000 (10:25 +0000)]
Fix type on blowfish manual page
PR: 1010
Submitted by: Marc Balmer <mbalmer@openbsd.org>
Lutz Jänicke [Sat, 19 Feb 2005 10:19:07 +0000 (10:19 +0000)]
Fix hang in EGD/PRNGD query when communication socket is closed
prematurely by EGD/PRNGD.
PR: 1014
Submitted by: Darren Tucker <dtucker@zip.com.au>
Lutz Jänicke [Sat, 19 Feb 2005 10:17:26 +0000 (10:17 +0000)]
Fix hang in EGD/PRNGD query when communication socket is closed
prematurely by EGD/PRNGD.
PR: 1014
Submitted by: Darren Tucker <dtucker@zip.com.au>
Dr. Stephen Henson [Mon, 14 Feb 2005 21:54:29 +0000 (21:54 +0000)]
Avoid possible memory leak.
Dr. Stephen Henson [Mon, 14 Feb 2005 21:53:24 +0000 (21:53 +0000)]
Fix possible memory leak.
Andy Polyakov [Sun, 6 Feb 2005 13:43:02 +0000 (13:43 +0000)]
Remove unused assembler modules.
Andy Polyakov [Sun, 6 Feb 2005 13:23:34 +0000 (13:23 +0000)]
This patch was "ignited" by OpenBSD 3>=4 support. They've switched to ELF
and GNU binutils, but kept BSD make... And I took the opportunity to
unify other targets to this common least denominator...
Andy Polyakov [Sun, 6 Feb 2005 13:20:23 +0000 (13:20 +0000)]
Reliable BSD-x86-elf detection in ./config.
Andy Polyakov [Sun, 6 Feb 2005 13:18:40 +0000 (13:18 +0000)]
Make Makefile.shared BSD make-friendly, remove more redundant -lc, set up
OBJECT_MODE for AIX.
Andy Polyakov [Sun, 6 Feb 2005 13:16:42 +0000 (13:16 +0000)]
Make util/shlib_wrap.sh [Open]BSD-friendly. [from HEAD].
Andy Polyakov [Sun, 6 Feb 2005 13:15:21 +0000 (13:15 +0000)]
Make util/shlib_wrap.sh [Open]BSD-friendly.
Andy Polyakov [Sun, 6 Feb 2005 13:10:23 +0000 (13:10 +0000)]
Mention no-sse2 option in INSTALL note.
Andy Polyakov [Sun, 6 Feb 2005 13:09:51 +0000 (13:09 +0000)]
"Backport" cvs.openssl.org/chngview?cn=12841 from HEAD. For reference.
In HEAD this approach was taken one step further. There is linux-generic32
target which is used as unified Linux target for ARM, PA-RISC, SPARCv7, S390...
Dr. Stephen Henson [Sat, 5 Feb 2005 18:24:50 +0000 (18:24 +0000)]
In FIPS mode use SHA1 as default digest in x509 and req
utilities.
Dr. Stephen Henson [Sat, 5 Feb 2005 17:22:14 +0000 (17:22 +0000)]
In mkdef.pl ignore trailing whitespace in #ifdef lines
Dr. Stephen Henson [Sat, 5 Feb 2005 17:19:23 +0000 (17:19 +0000)]
In mkdef.pl ignore trailing whitespace in #ifdef lines
Andy Polyakov [Thu, 3 Feb 2005 22:40:40 +0000 (22:40 +0000)]
Drop redundant -lc from a number of rules in Makefile.shared. It's
perfectly safe [compiler driver adds it] and in some situation even
perfectly appropriate [mixing -pthread and -lc on FreeBSD can have
lethal effect on apps/openssl]. I'd say we should get rid of more,
but I remove those I can test myself...
Andy Polyakov [Thu, 3 Feb 2005 11:09:20 +0000 (11:09 +0000)]
Final HP-UX specific touches to "cope with run-time linker on multi-ABI
platforms."
Andy Polyakov [Thu, 3 Feb 2005 10:19:59 +0000 (10:19 +0000)]
Shut whiny make's up.
Andy Polyakov [Thu, 3 Feb 2005 10:19:36 +0000 (10:19 +0000)]
Shut whiny make's up.
Andy Polyakov [Tue, 1 Feb 2005 23:48:37 +0000 (23:48 +0000)]
Address run-time linker problems: LD_PRELOAD issue on multi-ABI platforms
and SafeDllSearchMode in Windows.
Submitted by: Richard Levitte
Andy Polyakov [Tue, 1 Feb 2005 23:45:42 +0000 (23:45 +0000)]
Address run-time linker problems: LD_PRELOAD issue on multi-ABI platforms
and SafeDllSearchMode in Windows.
Dr. Stephen Henson [Mon, 31 Jan 2005 01:46:02 +0000 (01:46 +0000)]
Use SHA1 for test certificates so FIPS SSL/TLS tests work.
Dr. Stephen Henson [Mon, 31 Jan 2005 01:40:39 +0000 (01:40 +0000)]
Avoid memory leak.
Dr. Stephen Henson [Mon, 31 Jan 2005 01:33:36 +0000 (01:33 +0000)]
Only allow TLS is FIPS mode.
Remove old FIPS_allow_md5() calls.
Dr. Stephen Henson [Mon, 31 Jan 2005 01:28:17 +0000 (01:28 +0000)]
Update year.
Dr. Stephen Henson [Fri, 28 Jan 2005 14:03:54 +0000 (14:03 +0000)]
Further FIPS algorithm blocking.
Fixes to cipher blocking and enabling code.
Add option -non-fips-allow to 'enc' and update testenc.
Richard Levitte [Thu, 27 Jan 2005 11:42:28 +0000 (11:42 +0000)]
The first argument to load_iv should really be a char ** instead of an
unsigned char **, since it points at text.
Thanks to Nils Larsch <nils.larsch@cybertrust.com> for pointing out
the inelegance of our code :-)