cvs2svn [Sat, 23 Feb 2002 01:00:45 +0000 (01:00 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Dr. Stephen Henson [Sat, 23 Feb 2002 01:00:44 +0000 (01:00 +0000)]
New OPENSSL_LOAD_CONF define to load openssl.cnf
when OpenSSL_add_all_algorithms() is called.
Dr. Stephen Henson [Fri, 22 Feb 2002 21:27:47 +0000 (21:27 +0000)]
non-Monolith fixes.
Submitted by Andrew W. Gray <agray@iconsinc.com>
Dr. Stephen Henson [Fri, 22 Feb 2002 21:26:25 +0000 (21:26 +0000)]
Fix for AIX.
Submitted by Dawn Whiteside <dwhitesi@tiercel.uwaterloo.ca>
Dr. Stephen Henson [Fri, 22 Feb 2002 21:21:18 +0000 (21:21 +0000)]
non-Monolith fixes.
Submitted by Andrew W. Gray <agray@iconsinc.com>
Dr. Stephen Henson [Fri, 22 Feb 2002 21:17:31 +0000 (21:17 +0000)]
make errors
Dr. Stephen Henson [Fri, 22 Feb 2002 14:07:35 +0000 (14:07 +0000)]
Update from stable branch.
Dr. Stephen Henson [Fri, 22 Feb 2002 14:01:21 +0000 (14:01 +0000)]
Config code updates.
CONF_modules_unload() now calls CONF_modules_finish()
automatically.
Default use of section openssl_conf moved to
CONF_modules_load()
Load config file in several openssl utilities.
Most utilities now load modules from the config file,
though in a few (such as version) this isn't done
because it couldn't be used for anything.
In the case of ca and req the config file used is
the same as the utility itself: that is the -config
command line option can be used to specify an
alternative file.
Dr. Stephen Henson [Fri, 22 Feb 2002 13:58:15 +0000 (13:58 +0000)]
Config code updates.
CONF_modules_unload() now calls CONF_modules_finish()
automatically.
Default use of section openssl_conf moved to
CONF_modules_load()
Load config file in several openssl utilities.
Most utilities now load modules from the config file,
though in a few (such as version) this isn't done
because it couldn't be used for anything.
In the case of ca and req the config file used is
the same as the utility itself: that is the -config
command line option can be used to specify an
alternative file.
Richard Levitte [Thu, 21 Feb 2002 17:23:08 +0000 (17:23 +0000)]
We have AES support in openssl speed
Richard Levitte [Thu, 21 Feb 2002 17:23:04 +0000 (17:23 +0000)]
We have AES support in openssl speed
Bodo Möller [Thu, 21 Feb 2002 14:08:47 +0000 (14:08 +0000)]
disable '#ifdef DEBUG' sections
Bodo Möller [Thu, 21 Feb 2002 13:07:44 +0000 (13:07 +0000)]
disable '#ifdef DEBUG' sections
Bodo Möller [Thu, 21 Feb 2002 13:00:45 +0000 (13:00 +0000)]
disable '#ifdef DEBUG' sections
Dr. Stephen Henson [Thu, 21 Feb 2002 00:54:54 +0000 (00:54 +0000)]
Config file updates from stable branch
Richard Levitte [Wed, 20 Feb 2002 18:04:17 +0000 (18:04 +0000)]
Add AES support in the applications that support -des and -des3.
Richard Levitte [Wed, 20 Feb 2002 18:03:07 +0000 (18:03 +0000)]
Add AES support in the applications that support -des and -des3.
Richard Levitte [Wed, 20 Feb 2002 18:00:23 +0000 (18:00 +0000)]
Add comfy aliases for AES in CBC mode.
Richard Levitte [Wed, 20 Feb 2002 17:59:49 +0000 (17:59 +0000)]
Add comfy aliases for AES in CBC mode.
Richard Levitte [Wed, 20 Feb 2002 17:56:01 +0000 (17:56 +0000)]
Stop assuming the IV is 8 bytes long, use the real size instead.
This is especially important for AES that has a 16 bytes IV.
Richard Levitte [Wed, 20 Feb 2002 17:55:08 +0000 (17:55 +0000)]
Stop assuming the IV is 8 bytes long, use the real size instead.
This is especially important for AES that has a 16 bytes IV.
Richard Levitte [Wed, 20 Feb 2002 17:53:17 +0000 (17:53 +0000)]
Merge in recent changes from the main trunk.
Richard Levitte [Wed, 20 Feb 2002 17:40:33 +0000 (17:40 +0000)]
Including openssl/e_os.h in the OpenSSL 0.9.6 branch is legal, since
it's exported. Changing that is a BIG step, which has been done in
0.9.7-dev.
Richard Levitte [Wed, 20 Feb 2002 14:07:07 +0000 (14:07 +0000)]
Including openssl/e_os.h in the OpenSSL 0.9.6 branch is legal, since
it's exported. Changing that is a BIG step, which has been done in
0.9.7-dev.
Richard Levitte [Wed, 20 Feb 2002 13:50:36 +0000 (13:50 +0000)]
gcc figures that the format specifier %2x means unsigned int, so let's
make n unsigned.
Richard Levitte [Wed, 20 Feb 2002 13:49:17 +0000 (13:49 +0000)]
Instead of casting a lvalue, let's constify meth.
Richard Levitte [Wed, 20 Feb 2002 13:20:32 +0000 (13:20 +0000)]
Merge in recent changes from the main trunk.
Richard Levitte [Wed, 20 Feb 2002 13:19:59 +0000 (13:19 +0000)]
Update the status on 64-bit thingy.
Bodo Möller [Wed, 20 Feb 2002 13:08:17 +0000 (13:08 +0000)]
simplifications
Submitted by: Nils Larsch
Bodo Möller [Wed, 20 Feb 2002 12:38:00 +0000 (12:38 +0000)]
typo
Richard Levitte [Wed, 20 Feb 2002 12:31:23 +0000 (12:31 +0000)]
Add reports on checked 64-bit platforms and make space to add platforms that need to be checked
Richard Levitte [Wed, 20 Feb 2002 12:28:32 +0000 (12:28 +0000)]
Merg in recent changes from the main trunk.
Richard Levitte [Wed, 20 Feb 2002 12:16:17 +0000 (12:16 +0000)]
With Compaq make, it seems like # inside an action becomes part of the command, not a comment at all
Richard Levitte [Wed, 20 Feb 2002 12:01:24 +0000 (12:01 +0000)]
Instead of just checking for OpenVMS, check if DEC C is used, since it's as
picky on all platforms
Bodo Möller [Wed, 20 Feb 2002 11:59:42 +0000 (11:59 +0000)]
bugfix: allocate sufficiently large buffer
Submitted by: Nils Larsch
Bodo Möller [Wed, 20 Feb 2002 11:58:17 +0000 (11:58 +0000)]
bugfix: allocate sufficiently large buffer
Submitted by: Nils Larsch
Richard Levitte [Wed, 20 Feb 2002 11:57:33 +0000 (11:57 +0000)]
Comparing a pointer (data) with 0 using > is incorrect. The changed
comparison doesn't look right, but at least it compiles. It would be nice
if the one who knows what this is supposed to do changed it to do it correctly
Richard Levitte [Wed, 20 Feb 2002 11:43:40 +0000 (11:43 +0000)]
With Compaq make, it seems like # inside an action becomes part of the command, not a comment at all
Richard Levitte [Wed, 20 Feb 2002 11:42:42 +0000 (11:42 +0000)]
Don't shadow already defined variables
Geoff Thorpe [Wed, 20 Feb 2002 08:33:55 +0000 (08:33 +0000)]
make update
Geoff Thorpe [Wed, 20 Feb 2002 05:12:45 +0000 (05:12 +0000)]
A rough little self-test for tunala. This runs through all cipher-suite /
SSL/TLS version combinations looking for mishaps.
Geoff Thorpe [Wed, 20 Feb 2002 05:09:22 +0000 (05:09 +0000)]
Make the "ungunk" logic a little more robust.
Geoff Thorpe [Wed, 20 Feb 2002 05:02:50 +0000 (05:02 +0000)]
- Add support for cipher suites that require a temporary RSA key for
key-agreement.
- Tolerate signal interruptions of select().
Dr. Stephen Henson [Tue, 19 Feb 2002 23:25:18 +0000 (23:25 +0000)]
Use default openssl.cnf if config filename set to NULL and
openssl_conf if appname NULL.
Richard Levitte [Sat, 16 Feb 2002 22:44:30 +0000 (22:44 +0000)]
Merge in Cygwin-related changes from main trunk.
Richard Levitte [Sat, 16 Feb 2002 22:31:16 +0000 (22:31 +0000)]
Oh, and since config figures out that we run Cygwin and what versions,
let's recommend running config instead of a manual Configure.
Richard Levitte [Sat, 16 Feb 2002 22:28:31 +0000 (22:28 +0000)]
Since Cygwin is the proper spelling, let's change to that everywhere.
Also, with the change in Configure, it now knows on it's own if
threads are supported or not.
Ulf Möller [Sat, 16 Feb 2002 16:53:25 +0000 (16:53 +0000)]
Cygwin target name has been changed!
Richard Levitte [Sat, 16 Feb 2002 12:39:58 +0000 (12:39 +0000)]
The AES modes OFB and CFB are defined with 128 feedback bits. This
deviates from the "standard" 64 bits of feedback that all other
algorithms are using. Therefore, let's redo certain EVP macros to
accept different amounts of feedback bits for these modes.
Also, change e_aes.c to provide all usually available modes for AES.
CTR isn't included yet.
Richard Levitte [Sat, 16 Feb 2002 12:39:07 +0000 (12:39 +0000)]
The AES modes OFB and CFB are defined with 128 feedback bits. This
deviates from the "standard" 64 bits of feedback that all other
algorithms are using. Therefore, let's redo certain EVP macros to
accept different amounts of feedback bits for these modes.
Also, change e_aes.c to provide all usually available modes for AES.
CTR isn't included yet.
Richard Levitte [Sat, 16 Feb 2002 12:21:43 +0000 (12:21 +0000)]
Add the modes OFB128, CFB128 and CTR128 to AES.
Submitted by Stephen Sprunk <stephen@sprunk.org>
cvs2svn [Sat, 16 Feb 2002 12:20:35 +0000 (12:20 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Sat, 16 Feb 2002 12:20:34 +0000 (12:20 +0000)]
Add the modes OFB128, CFB128 and CTR128 to AES.
Submitted by Stephen Sprunk <stephen@sprunk.org>
Richard Levitte [Sat, 16 Feb 2002 12:16:43 +0000 (12:16 +0000)]
Adjust the NID names for the AES modes OFB and CFB to contain the number
of feedback bits
Richard Levitte [Sat, 16 Feb 2002 12:15:30 +0000 (12:15 +0000)]
Adjust the NID names for the AES modes OFB and CFB to contain the number
of feedback bits
Richard Levitte [Sat, 16 Feb 2002 12:03:25 +0000 (12:03 +0000)]
The macro IMPLEMENT_ASN1_FUNCTIONS_const already contains an ending ;,
so do not add one after the expansion, since ANSI C doesn't allow ;;
at this level (or at least, so tells me gcc).
Richard Levitte [Sat, 16 Feb 2002 12:01:13 +0000 (12:01 +0000)]
Local `time' shadows the global function `time()'. Rename the local
variable to `tim' (and, as a matter of consequence, `time_d' to `tim_d').
Richard Levitte [Sat, 16 Feb 2002 11:58:16 +0000 (11:58 +0000)]
Missing #endif
Richard Levitte [Sat, 16 Feb 2002 11:57:25 +0000 (11:57 +0000)]
gcc chokes on C++ comments in C code.
Richard Levitte [Fri, 15 Feb 2002 16:23:50 +0000 (16:23 +0000)]
Give the linux-sparv9 target shared capability.
Submitted by Ian Marsh <mushypea@dominion.net.uk>
Richard Levitte [Fri, 15 Feb 2002 16:22:22 +0000 (16:22 +0000)]
Give the linux-sparv9 target shared capability.
Submitted by Ian Marsh <mushypea@dominion.net.uk>
Bodo Möller [Fri, 15 Feb 2002 10:19:22 +0000 (10:19 +0000)]
constify
Bodo Möller [Fri, 15 Feb 2002 10:12:01 +0000 (10:12 +0000)]
mention EC library
Lutz Jänicke [Fri, 15 Feb 2002 07:44:44 +0000 (07:44 +0000)]
Even though it is not really practical people should know about it.
Submitted by:
Reviewed by:
PR:
cvs2svn [Fri, 15 Feb 2002 07:41:46 +0000 (07:41 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Lutz Jänicke [Fri, 15 Feb 2002 07:41:42 +0000 (07:41 +0000)]
Even though it is not really practical people should know about it.
Dr. Stephen Henson [Fri, 15 Feb 2002 02:43:50 +0000 (02:43 +0000)]
Add flag to disable config module DSO loading.
Dr. Stephen Henson [Fri, 15 Feb 2002 01:01:36 +0000 (01:01 +0000)]
Only initialize cipher ctx if cipher is not NULL.
Dr. Stephen Henson [Fri, 15 Feb 2002 00:58:14 +0000 (00:58 +0000)]
Allow a NULL store parameter to X509_STORE_CTX_init().
Dr. Stephen Henson [Fri, 15 Feb 2002 00:33:35 +0000 (00:33 +0000)]
Don't call finish function if it isn't set.
Fix OID module.
Dr. Stephen Henson [Fri, 15 Feb 2002 00:12:44 +0000 (00:12 +0000)]
Update NEWS
Dr. Stephen Henson [Thu, 14 Feb 2002 23:39:36 +0000 (23:39 +0000)]
Add argument to OPENSSL_config() and add flag to
tolerate missing config file.
Dr. Stephen Henson [Thu, 14 Feb 2002 18:52:37 +0000 (18:52 +0000)]
typo (?)
Dr. Stephen Henson [Thu, 14 Feb 2002 18:46:12 +0000 (18:46 +0000)]
Fix warnings:
#if out some unused function.
"index" is a global function on some platforms.
Richard Levitte [Thu, 14 Feb 2002 16:23:55 +0000 (16:23 +0000)]
Add the configuration target VxWorks.
Bodo Möller [Thu, 14 Feb 2002 16:08:55 +0000 (16:08 +0000)]
fix indentation
Richard Levitte [Thu, 14 Feb 2002 15:37:38 +0000 (15:37 +0000)]
Add the configuration target VxWorks.
Bodo Möller [Thu, 14 Feb 2002 14:47:15 +0000 (14:47 +0000)]
fix: make it possible to disable memory debugging even if it is
enabled by default
Bodo Möller [Thu, 14 Feb 2002 14:41:13 +0000 (14:41 +0000)]
make it possible to disable memory checking for timings
Bodo Möller [Thu, 14 Feb 2002 14:30:20 +0000 (14:30 +0000)]
'-C' is still quite broken
Bodo Möller [Thu, 14 Feb 2002 14:25:33 +0000 (14:25 +0000)]
fix '-C'
Bodo Möller [Thu, 14 Feb 2002 14:21:49 +0000 (14:21 +0000)]
fix memory leak
Bodo Möller [Thu, 14 Feb 2002 14:03:32 +0000 (14:03 +0000)]
move ECDSA test right after EC test
Bodo Möller [Thu, 14 Feb 2002 13:52:11 +0000 (13:52 +0000)]
don't call OPENSSL_config(), this does not make any sense during "make test"
Bodo Möller [Thu, 14 Feb 2002 13:51:20 +0000 (13:51 +0000)]
don't call OPENSSL_config(), this does not make any sense during "make test"
Richard Levitte [Thu, 14 Feb 2002 13:51:13 +0000 (13:51 +0000)]
Make sure memset() is defined by including string.h
Notified by Oscar Jacobsson <oscar@jacobsson.org>
Richard Levitte [Thu, 14 Feb 2002 13:51:04 +0000 (13:51 +0000)]
Make sure memset() is defined by including string.h
Notified by Oscar Jacobsson <oscar@jacobsson.org>
Richard Levitte [Thu, 14 Feb 2002 13:45:26 +0000 (13:45 +0000)]
For some reason, getting the topmost error was done the same way as
getting the bottommost one. I hope I understood correctly how this
should be done. It seems to work when running evp_test in an
environment where it can't find openssl.cnf.
Richard Levitte [Thu, 14 Feb 2002 13:43:30 +0000 (13:43 +0000)]
make update, with libeay.num remade to match the 0.9.7-stable one.
Richard Levitte [Thu, 14 Feb 2002 13:42:33 +0000 (13:42 +0000)]
For some reason, getting the topmost error was done the same way as
getting the bottommost one. I hope I understood correctly how this
should be done. It seems to work when running evp_test in an
environment where it can't find openssl.cnf.
Richard Levitte [Thu, 14 Feb 2002 13:37:14 +0000 (13:37 +0000)]
make update
Richard Levitte [Thu, 14 Feb 2002 13:36:28 +0000 (13:36 +0000)]
The Cygwin shared extension was shifted.
Richard Levitte [Thu, 14 Feb 2002 13:36:13 +0000 (13:36 +0000)]
The Cygwin shared extension was shifted.
Richard Levitte [Thu, 14 Feb 2002 12:29:32 +0000 (12:29 +0000)]
At Corinna Vinschen's request, change CygWin32 to Cygwin
Richard Levitte [Thu, 14 Feb 2002 12:28:24 +0000 (12:28 +0000)]
At Corinna Vinschen's request, change CygWin32 to Cygwin
Bodo Möller [Thu, 14 Feb 2002 10:23:20 +0000 (10:23 +0000)]
EC_GROUP_get_group_by_name() is now called EC_GROUP_new_by_name()
Ben Laurie [Thu, 14 Feb 2002 09:59:35 +0000 (09:59 +0000)]
Fix warnings.
Richard Levitte [Thu, 14 Feb 2002 02:43:57 +0000 (02:43 +0000)]
Because making the key strong by xoring the last byte with 0xF0
generates different keys than previous versions of OpenSSL and libdes,
let's make Assar's change experimental for now.
Richard Levitte [Thu, 14 Feb 2002 02:20:48 +0000 (02:20 +0000)]
Correct sh, please
Richard Levitte [Thu, 14 Feb 2002 02:20:34 +0000 (02:20 +0000)]
Correct sh, please