Dr. Stephen Henson [Sun, 18 Nov 2012 15:51:26 +0000 (15:51 +0000)]
document -naccept option
Dr. Stephen Henson [Sun, 18 Nov 2012 15:45:16 +0000 (15:45 +0000)]
add -naccept <n> option to s_server to automatically exit after <n> connections
Dr. Stephen Henson [Sun, 18 Nov 2012 15:24:37 +0000 (15:24 +0000)]
PR: 2880
Submitted by: "Florian Rüchel" <florian.ruechel@ruhr-uni-bochum.de>
Correctly handle local machine keys in the capi ENGINE.
Dr. Stephen Henson [Sun, 18 Nov 2012 15:13:55 +0000 (15:13 +0000)]
PR: 2909
Contributed by: Florian Weimer <fweimer@redhat.com>
Fixes to X509 hostname and email address checking. Wildcard matching support.
New test program and manual page.
Dr. Stephen Henson [Sun, 18 Nov 2012 14:47:25 +0000 (14:47 +0000)]
remove redundant code from demo
Andy Polyakov [Sat, 17 Nov 2012 21:42:57 +0000 (21:42 +0000)]
cryptlib.c: revert typo.
Andy Polyakov [Sat, 17 Nov 2012 19:04:15 +0000 (19:04 +0000)]
Extend OPENSSL_ia32cap_P with extra word to accomodate AVX2 capability.
Andy Polyakov [Sat, 17 Nov 2012 18:34:17 +0000 (18:34 +0000)]
perlasm/sparcv9_modes.pl: addendum to commit#22966.
Dr. Stephen Henson [Sat, 17 Nov 2012 15:22:50 +0000 (15:22 +0000)]
fix error messages
Dr. Stephen Henson [Sat, 17 Nov 2012 14:42:22 +0000 (14:42 +0000)]
Delegate command line handling for many common options in s_client/s_server
to the SSL_CONF APIs.
This is complicated a little because the SSL_CTX structure is not available
when the command line is processed: so just check syntax of commands initially
and store them, ready to apply later.
Dr. Stephen Henson [Sat, 17 Nov 2012 14:38:20 +0000 (14:38 +0000)]
initial decription of GCM/CCM usage via EVP
Andy Polyakov [Sat, 17 Nov 2012 10:34:11 +0000 (10:34 +0000)]
Support for SPARC T4 MONT[MUL|SQR] instructions.
Submitted by: David Miller, Andy Polyakov
Dr. Stephen Henson [Sat, 17 Nov 2012 00:21:34 +0000 (00:21 +0000)]
fix typos in SSL_CONF documentation
Dr. Stephen Henson [Fri, 16 Nov 2012 19:12:24 +0000 (19:12 +0000)]
add SSL_CONF functions and documentation
Dr. Stephen Henson [Fri, 16 Nov 2012 12:49:14 +0000 (12:49 +0000)]
typo
Dr. Stephen Henson [Fri, 16 Nov 2012 01:15:15 +0000 (01:15 +0000)]
update ciphers documentation to indicate implemented fixed DH ciphersuites
Dr. Stephen Henson [Fri, 16 Nov 2012 00:42:38 +0000 (00:42 +0000)]
initial update of ciphers doc
Dr. Stephen Henson [Fri, 16 Nov 2012 00:35:46 +0000 (00:35 +0000)]
new command line option -stdname to ciphers utility
Dr. Stephen Henson [Thu, 15 Nov 2012 19:14:47 +0000 (19:14 +0000)]
add "missing" TLSv1.2 cipher alias
Andy Polyakov [Mon, 12 Nov 2012 17:52:41 +0000 (17:52 +0000)]
aes-x86_64.pl: Atom-specific optimizations, +10%.
vpaes-x86_64.pl: minor performance squeeze.
Andy Polyakov [Mon, 12 Nov 2012 17:50:19 +0000 (17:50 +0000)]
aes-586.pl: Atom-specific optimization, +44/29%, minor improvement on others.
vpaes-x86.pl: minor performance squeeze.
Andy Polyakov [Sat, 10 Nov 2012 20:27:18 +0000 (20:27 +0000)]
ppccap.c: fix typo.
Andy Polyakov [Sat, 10 Nov 2012 20:24:51 +0000 (20:24 +0000)]
ppccap.c: restrict features on AIX 5.
Andy Polyakov [Fri, 9 Nov 2012 13:58:40 +0000 (13:58 +0000)]
bn_word.c: fix overflow bug in BN_add_word.
Dr. Stephen Henson [Thu, 8 Nov 2012 14:24:51 +0000 (14:24 +0000)]
new feature: if ctx==NULL in SSL_CTX_ctrl perform syntax checking only for some operations (currently curves and signature algorithms)
Dr. Stephen Henson [Mon, 5 Nov 2012 19:38:32 +0000 (19:38 +0000)]
contify
Andy Polyakov [Mon, 5 Nov 2012 17:03:39 +0000 (17:03 +0000)]
crypto/modes: even more strict aliasing fixes [and fix bug in cbc128.c from
previous cbc128.c commit].
Ben Laurie [Mon, 5 Nov 2012 14:23:55 +0000 (14:23 +0000)]
More strict aliasing fix.
Dr. Stephen Henson [Mon, 5 Nov 2012 13:34:29 +0000 (13:34 +0000)]
correct error function code
Andy Polyakov [Mon, 5 Nov 2012 10:04:02 +0000 (10:04 +0000)]
cbc128.c: fix strict aliasing warning.
Andy Polyakov [Mon, 5 Nov 2012 09:20:41 +0000 (09:20 +0000)]
e_camillia.c: remove copy-n-paste artifact, EVP_CIPH_FLAG_FIPS, and
leave comment about CTR mode.
Andy Polyakov [Mon, 5 Nov 2012 08:47:26 +0000 (08:47 +0000)]
ghash-sparcv9.pl: 22% improvement on T4.
Ben Laurie [Mon, 5 Nov 2012 02:01:07 +0000 (02:01 +0000)]
Remove unused static function.
Ben Laurie [Mon, 5 Nov 2012 01:59:33 +0000 (01:59 +0000)]
Fix gcc 4.8 warning (strict aliasing violation).
Andy Polyakov [Mon, 29 Oct 2012 22:23:58 +0000 (22:23 +0000)]
mk1mf.pl: correct flags.
Andy Polyakov [Mon, 29 Oct 2012 20:55:08 +0000 (20:55 +0000)]
e_os.h: keep stdin redifinitions to "normal" Windows.
Andy Polyakov [Sat, 27 Oct 2012 23:36:43 +0000 (23:36 +0000)]
util/fipslink.pl: further adjustments.
Andy Polyakov [Sat, 27 Oct 2012 21:21:09 +0000 (21:21 +0000)]
util/fipslink.pl: fix typo.
Andy Polyakov [Sat, 27 Oct 2012 21:17:48 +0000 (21:17 +0000)]
e_os.h: skip redundant headers in fipscanister build.
Andy Polyakov [Sat, 27 Oct 2012 21:16:45 +0000 (21:16 +0000)]
util/fipslink.pl: allow for single-step link.
Andy Polyakov [Sat, 27 Oct 2012 21:16:00 +0000 (21:16 +0000)]
util/pl/VC-32.pl: make fipscanister.lib universally usable.
Dr. Stephen Henson [Sat, 27 Oct 2012 18:05:56 +0000 (18:05 +0000)]
typo
Andy Polyakov [Thu, 25 Oct 2012 12:10:44 +0000 (12:10 +0000)]
test_t4: cover even Camellia.
Andy Polyakov [Thu, 25 Oct 2012 12:07:32 +0000 (12:07 +0000)]
SPARCv9 assembly pack: harmonize ABI handling (so that it's handled in one
place at a time, by pre-processor in .S case and perl - in .s).
Andy Polyakov [Thu, 25 Oct 2012 12:03:41 +0000 (12:03 +0000)]
[aes|cmll]t4-sparcv9.pl: unify argument handling.
Andy Polyakov [Thu, 25 Oct 2012 12:02:37 +0000 (12:02 +0000)]
perlasm/sparcv9_modes.pl: fix typo in IV save code and switch to less
aggressive ASI.
Dr. Stephen Henson [Wed, 24 Oct 2012 13:27:46 +0000 (13:27 +0000)]
oops, add missing asn_mstbl.c
Andy Polyakov [Wed, 24 Oct 2012 08:21:10 +0000 (08:21 +0000)]
ghash-sparcv9.pl: add VIS3 code path.
Dr. Stephen Henson [Mon, 22 Oct 2012 13:05:54 +0000 (13:05 +0000)]
New config module for string tables. This can be used to add new
multi string components (as used in DN fields or request attributes)
or change the values of existing ones.
Dr. Stephen Henson [Mon, 22 Oct 2012 13:02:42 +0000 (13:02 +0000)]
use correct year automatically
Andy Polyakov [Sun, 21 Oct 2012 18:19:41 +0000 (18:19 +0000)]
linux-pcc: make it more robust and recognize KERNEL_BITS variable.
Andy Polyakov [Sat, 20 Oct 2012 15:59:14 +0000 (15:59 +0000)]
Add VIS3-capable sparcv9-gf2m module.
Andy Polyakov [Sat, 20 Oct 2012 09:13:21 +0000 (09:13 +0000)]
Add VIS3 Montgomery multiplication.
Dr. Stephen Henson [Fri, 19 Oct 2012 15:06:31 +0000 (15:06 +0000)]
fix ASN1_STRING_TABLE_add so it can override existing string table values
Dr. Stephen Henson [Thu, 18 Oct 2012 16:21:39 +0000 (16:21 +0000)]
fix error code
Dr. Stephen Henson [Tue, 16 Oct 2012 23:03:45 +0000 (23:03 +0000)]
add simple AES GCM code example
Dr. Stephen Henson [Tue, 16 Oct 2012 22:46:08 +0000 (22:46 +0000)]
Don't require tag before ciphertext in AESGCM mode
Andy Polyakov [Tue, 16 Oct 2012 08:06:51 +0000 (08:06 +0000)]
aix[64]-cc: get MT support right (gcc targets are not affected).
Andy Polyakov [Mon, 15 Oct 2012 14:04:52 +0000 (14:04 +0000)]
sparcv9_modes.pl: membars are reported as must-have.
Andy Polyakov [Sun, 14 Oct 2012 16:51:27 +0000 (16:51 +0000)]
md5-sparcv9.pl: avoid %asi modifications, improve short input performance
by 30-20%.
Andy Polyakov [Sun, 14 Oct 2012 14:46:56 +0000 (14:46 +0000)]
[md5|sha1|sha512]-sparcv9.pl: "cooperative" optimizations based on
suggestions from David Miller.
Andy Polyakov [Sun, 14 Oct 2012 14:42:27 +0000 (14:42 +0000)]
[aes|cmll]t4-sparcv9.pl: addendum to previous sparcv9_modes.pl commit.
Andy Polyakov [Sun, 14 Oct 2012 14:25:00 +0000 (14:25 +0000)]
perlasm/sparcv9_modes.pl: "cooperative" optimizations based on suggestions
from David Miller.
Andy Polyakov [Thu, 11 Oct 2012 18:35:18 +0000 (18:35 +0000)]
Add SPARC T4 Camellia support.
Submitted by: David Miller
Andy Polyakov [Thu, 11 Oct 2012 18:30:35 +0000 (18:30 +0000)]
aest4-sparcv9.pl: split it to AES-specific and reusable part.
Dr. Stephen Henson [Thu, 11 Oct 2012 18:03:42 +0000 (18:03 +0000)]
oops, fix compilation errors in s_server
Dr. Stephen Henson [Mon, 8 Oct 2012 15:10:07 +0000 (15:10 +0000)]
New functions to check a hostname email or IP address against a
certificate. Add options to s_client, s_server and x509 utilities
to print results of checks.
Andy Polyakov [Sat, 6 Oct 2012 18:08:09 +0000 (18:08 +0000)]
Add SPARC T4 AES support.
Submitted by: David Miller
Bodo Möller [Fri, 5 Oct 2012 20:50:11 +0000 (20:50 +0000)]
Fix EC_KEY initialization race.
Submitted by: Adam Langley
Dr. Stephen Henson [Sun, 30 Sep 2012 12:39:27 +0000 (12:39 +0000)]
If OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set allow the use of "SCSV" as
a ciphersuite to position the SCSV value in different places for testing
purposes.
Andy Polyakov [Fri, 28 Sep 2012 09:35:39 +0000 (09:35 +0000)]
sha[1|512]-sparcv9.pl: add hardware SPARC T4 support.
Submitted by: David Miller
Andy Polyakov [Fri, 28 Sep 2012 09:34:09 +0000 (09:34 +0000)]
md5-sparcv9.pl: add hardware SPARC T4 support.
Submitted by: David Miller
Andy Polyakov [Fri, 28 Sep 2012 09:31:40 +0000 (09:31 +0000)]
sparc_arch.h: add assembler helpers (and make it work on Solaris).
Submitted by: David Miller
Andy Polyakov [Fri, 28 Sep 2012 09:25:49 +0000 (09:25 +0000)]
md5-sparcv9.pl: more accurate performance result.
Bodo Möller [Mon, 24 Sep 2012 19:49:16 +0000 (19:49 +0000)]
Fix Valgrind warning.
Submitted by: Adam Langley
Richard Levitte [Mon, 24 Sep 2012 18:48:37 +0000 (18:48 +0000)]
* Configure: make the debug-levitte-linux{elf,noasm} less extreme.
Andy Polyakov [Sun, 23 Sep 2012 20:39:53 +0000 (20:39 +0000)]
Add md5-sparcv9.pl.
Andy Polyakov [Sun, 23 Sep 2012 20:29:03 +0000 (20:29 +0000)]
sparcv9cap.c: add SPARC-T4 feature detection.
Submitted by: David Miller
Richard Levitte [Fri, 21 Sep 2012 13:08:24 +0000 (13:08 +0000)]
* ssl/t1_enc.c (tls1_change_cipher_state): Stupid bug. Fortunately in
debugging code that's seldom used.
Andy Polyakov [Wed, 19 Sep 2012 20:58:07 +0000 (20:58 +0000)]
config: detect linux-mips* targets.
Andy Polyakov [Tue, 18 Sep 2012 12:54:35 +0000 (12:54 +0000)]
Configure: allow for compiler options starting with double dash.
Andy Polyakov [Tue, 18 Sep 2012 12:52:23 +0000 (12:52 +0000)]
MIPS assembly pack: add support for SmartMIPS ASE.
Bodo Möller [Mon, 17 Sep 2012 17:21:58 +0000 (17:21 +0000)]
Fix warning.
Submitted by: Chromium Authors
Andy Polyakov [Sat, 15 Sep 2012 11:21:50 +0000 (11:21 +0000)]
Configure: add MIPS targets.
Andy Polyakov [Sat, 15 Sep 2012 11:18:20 +0000 (11:18 +0000)]
MIPS assembly pack: add MIPS[32|64]R2 code.
Andy Polyakov [Sat, 15 Sep 2012 11:15:02 +0000 (11:15 +0000)]
aes-mips.pl: interleave load and integer instructions for better performance.
Andy Polyakov [Sat, 15 Sep 2012 08:53:25 +0000 (08:53 +0000)]
sha512-sparcv9.pl: fix binutils compilation error.
Submitted by: David Miller
Andy Polyakov [Sat, 15 Sep 2012 08:45:42 +0000 (08:45 +0000)]
e_aes.c: uninitialized variable in aes_ccm_init_key.
PR: 2874
Submitted by: Tomas Mraz
Dr. Stephen Henson [Fri, 14 Sep 2012 13:27:05 +0000 (13:27 +0000)]
Add -rev test option to s_server to just reverse order of characters received
by client and send back to server. Also prints an abbreviated summary of
the connection parameters.
Dr. Stephen Henson [Wed, 12 Sep 2012 23:14:28 +0000 (23:14 +0000)]
Add -brief option to s_client and s_server to summarise connection details.
New option -verify_quiet to shut up the verify callback unless there is
an error.
Dr. Stephen Henson [Wed, 12 Sep 2012 13:57:48 +0000 (13:57 +0000)]
Add ctrl and utility functions to retrieve raw cipher list sent by client in
client hello message. Previously this could only be retrieved on an initial
connection and it was impossible to determine the cipher IDs of any uknown
ciphersuites.
Dr. Stephen Henson [Tue, 11 Sep 2012 13:54:09 +0000 (13:54 +0000)]
enhance EC method to support setting curve type when generating keys and add parameter encoding option
Dr. Stephen Henson [Tue, 11 Sep 2012 13:43:57 +0000 (13:43 +0000)]
fix memory leak
Dr. Stephen Henson [Tue, 11 Sep 2012 13:34:08 +0000 (13:34 +0000)]
Minor enhancement to PR#2836 fix. Instead of modifying SSL_get_certificate
change the current certificate (in s->cert->key) to the one used and then
SSL_get_certificate and SSL_get_privatekey will automatically work.
Ben Laurie [Tue, 11 Sep 2012 12:57:46 +0000 (12:57 +0000)]
Call OCSP Stapling callback after ciphersuite has been chosen, so the
right response is stapled. Also change SSL_get_certificate() so it
returns the certificate actually sent. See
http://rt.openssl.org/Ticket/Display.html?id=2836.
Dr. Stephen Henson [Sun, 9 Sep 2012 21:19:32 +0000 (21:19 +0000)]
fix memory leak
Dr. Stephen Henson [Sun, 9 Sep 2012 20:47:36 +0000 (20:47 +0000)]
update README
Dr. Stephen Henson [Sun, 9 Sep 2012 20:43:49 +0000 (20:43 +0000)]
Extend certificate creation examples to include CRL generation and sample
scripts running the test OCSP responder.
Dr. Stephen Henson [Sun, 9 Sep 2012 12:58:49 +0000 (12:58 +0000)]
New -valid option to add a certificate to the ca index.txt that is valid and not revoked
Dr. Stephen Henson [Sat, 8 Sep 2012 13:59:51 +0000 (13:59 +0000)]
new ctrl to retrive value of received temporary key in server key exchange message, print out details in s_client