Bodo Möller [Tue, 23 Jan 2001 13:55:01 +0000 (13:55 +0000)]
For improved compatibility with 'strange' certificates, add some
digest aliases (as found in OpenSSL_add_all_digests).
Ulf Möller [Sun, 21 Jan 2001 18:51:01 +0000 (18:51 +0000)]
remove newline
Ulf Möller [Sun, 21 Jan 2001 18:48:11 +0000 (18:48 +0000)]
config bug fixes from the main branch.
Bodo Möller [Fri, 19 Jan 2001 07:38:55 +0000 (07:38 +0000)]
Fix openssl passwd -1
Bodo Möller [Thu, 18 Jan 2001 12:41:25 +0000 (12:41 +0000)]
As in the main branch, there's no longer a need to guess the bc
version at compile time.
Bodo Möller [Wed, 17 Jan 2001 10:26:25 +0000 (10:26 +0000)]
Use 'bctest' script to test if bc works (as in the main branch).
Dr. Stephen Henson [Sun, 14 Jan 2001 14:14:45 +0000 (14:14 +0000)]
Fix PKCS#12 PBE routines to cope with passwords
from PEM callbacks which are not null terminated.
Bodo Möller [Fri, 12 Jan 2001 10:35:32 +0000 (10:35 +0000)]
When we are waiting for user action, we should say this explicitly.
Bodo Möller [Wed, 10 Jan 2001 14:27:04 +0000 (14:27 +0000)]
Fix C code generate by 'openssl dsaparam -C'.
Dr. Stephen Henson [Wed, 10 Jan 2001 01:14:23 +0000 (01:14 +0000)]
Fix uni2asc() so it can properly convert zero length
unicode strings. Certain PKCS#12 files contain these
in BMPStrings and it used to crash on them.
Bodo Möller [Wed, 27 Dec 2000 23:41:50 +0000 (23:41 +0000)]
Get rid of unused error code.
Bodo Möller [Tue, 26 Dec 2000 12:06:48 +0000 (12:06 +0000)]
Finish SSL_peek/SSL_pending fixes.
Bodo Möller [Mon, 25 Dec 2000 18:41:37 +0000 (18:41 +0000)]
Fix SSL_peek and SSL_pending.
Bodo Möller [Wed, 20 Dec 2000 10:07:31 +0000 (10:07 +0000)]
Include CRYPTO_mem_leaks deadlock fix.
Bodo Möller [Tue, 19 Dec 2000 12:39:12 +0000 (12:39 +0000)]
fix indentation
Bodo Möller [Tue, 19 Dec 2000 12:19:16 +0000 (12:19 +0000)]
Don't hold CRYPTO_LOCK_RSA during time-consuming operations.
Bodo Möller [Mon, 18 Dec 2000 16:36:07 +0000 (16:36 +0000)]
Obtain lock CRYPTO_LOCK_RSA before creating BN_MONT_CTX
structures and setting rsa->_method_mod_{n,p,q}.
Submitted by: "Reddie, Steven" <Steven.Reddie@ca.com>
Bodo Möller [Mon, 18 Dec 2000 11:32:09 +0000 (11:32 +0000)]
Fix another buffer overrun bug (which is not really a bug because
s->s2->escape is never set when sending data because the escape
bit is just reserved for future use in SSL 2.0)
Bodo Möller [Mon, 18 Dec 2000 11:23:23 +0000 (11:23 +0000)]
Increase wbuf by one byte to fix the bug reported by
Eric Day <eday@concentric.net> to openssl-dev@openssl.org,
Message-ID: <
20001218013437.A5526@concentric.net>
Bodo Möller [Thu, 14 Dec 2000 17:45:36 +0000 (17:45 +0000)]
typo
Bodo Möller [Thu, 14 Dec 2000 17:34:42 +0000 (17:34 +0000)]
The first step towards a SSL_peek fix.
The main thing to verify about these changes is that nothing at all
has changed, as far as behaviour is concerned (except that some
SSLerr() invocations now have a different function code): SSL_read
(ssl2_read, ssl3_read) behaves exactly as before, and SSL_peek refuses
to do any work exactly as before. But now the functions actually
doing the work have a 'peek' flag, so it should be easy to change them
to behave accordingly.
cvs2svn [Mon, 11 Dec 2000 17:28:08 +0000 (17:28 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_6-stable'.
Bodo Möller [Mon, 11 Dec 2000 17:28:07 +0000 (17:28 +0000)]
Change/add comments
Ulf Möller [Sun, 10 Dec 2000 04:25:57 +0000 (04:25 +0000)]
Stop on bntest error.
Ulf Möller [Sun, 10 Dec 2000 04:22:45 +0000 (04:22 +0000)]
*** empty log message ***
Richard Levitte [Sat, 9 Dec 2000 11:11:35 +0000 (11:11 +0000)]
Make TYPE_RSA the default type instead of just setting it when -new is
given. That also allows the arguments to come in any order (-new
last, for example).
Bodo Möller [Sat, 9 Dec 2000 10:07:47 +0000 (10:07 +0000)]
Use continuation lines in test/bctest as far as it is possible
to dermine what the expression should look like.
Apparently CVS does not like lines longer than about 2^10 characters.
Bodo Möller [Sat, 9 Dec 2000 10:05:03 +0000 (10:05 +0000)]
Don't throw away bctest's error messages.
Ulf Möller [Sat, 9 Dec 2000 02:45:59 +0000 (02:45 +0000)]
Test for SCO bc bug
Geoff Thorpe [Fri, 8 Dec 2000 20:02:01 +0000 (20:02 +0000)]
Next step in tidying up the LHASH code.
DECLARE/IMPLEMENT macros now exist to create type (and prototype) safe
wrapper functions that avoid the use of function pointer casting yet retain
type-safety for type-specific callbacks. However, most of the usage within
OpenSSL itself doesn't really require the extra function because the hash
and compare callbacks are internal functions declared only for use by the
hash table. So this change catches all those cases and reimplements the
functions using the base-level LHASH prototypes and does per-variable
casting inside those functions to convert to the appropriate item type.
The exception so far is in ssl_lib.c where the hash and compare callbacks
are not static - they're exposed in ssl.h so their prototypes should not be
changed. In this last case, the IMPLEMENT_LHASH_*** macros have been left
intact.
Ulf Möller [Fri, 8 Dec 2000 19:10:33 +0000 (19:10 +0000)]
bn_part_sub_word prototype.
Dr. Stephen Henson [Fri, 8 Dec 2000 19:09:35 +0000 (19:09 +0000)]
Merge from the ASN1 branch of new ASN1 code
to main trunk.
Lets see if the makes it to openssl-cvs :-)
Lutz Jänicke [Fri, 8 Dec 2000 14:29:13 +0000 (14:29 +0000)]
Add manual pages for certficate/key loading and friends.
Bodo Möller [Fri, 8 Dec 2000 08:30:38 +0000 (08:30 +0000)]
Placeholder for SCO bc bug detection
Bodo Möller [Thu, 7 Dec 2000 22:06:09 +0000 (22:06 +0000)]
Fix some things that look like bugs.
One problem that looked like a problem in bn_recp.c at first turned
out to be a BN_mul bug. An example is given in bn_recp.c; finding
the bug responsible for this is left as an exercise.
Bodo Möller [Thu, 7 Dec 2000 11:11:10 +0000 (11:11 +0000)]
TEST_MUL and TEST_SQR added.
Bodo Möller [Thu, 7 Dec 2000 08:48:58 +0000 (08:48 +0000)]
Sign-related fixes (and tests).
BN_mod_exp_mont does not work properly yet if modulus m
is negative (we want computations to be carried out
modulo |m|).
Bodo Möller [Thu, 7 Dec 2000 07:55:26 +0000 (07:55 +0000)]
Move 'q->neg = 0' to those places where it is needed
(just in cases someone uses a negative modulus)
Bodo Möller [Wed, 6 Dec 2000 21:33:58 +0000 (21:33 +0000)]
BN_mod_sqrt documentation/comment
Ulf Möller [Wed, 6 Dec 2000 16:39:09 +0000 (16:39 +0000)]
Don't check for bc at all. We can now run a meaningful test even if
it is missing.
Ulf Möller [Wed, 6 Dec 2000 16:30:23 +0000 (16:30 +0000)]
remove a comment that shouldn't have been there any more
Bodo Möller [Wed, 6 Dec 2000 12:25:33 +0000 (12:25 +0000)]
Faster BN_mod_sqrt algorithm for p == 5 (8).
Bodo Möller [Wed, 6 Dec 2000 12:24:27 +0000 (12:24 +0000)]
Printing "verify ..." should not be counted as a test for the
"xxx tests passed" message.
Richard Levitte [Wed, 6 Dec 2000 10:58:13 +0000 (10:58 +0000)]
During the self test, we only want to know what bctest says on
stderr...
Richard Levitte [Wed, 6 Dec 2000 10:54:31 +0000 (10:54 +0000)]
Have the self test use bctest to check that bc is sane.
Bodo Möller [Wed, 6 Dec 2000 10:32:55 +0000 (10:32 +0000)]
Use bc's "print" feature whenever it is available,
not just on certain platforms.
Bodo Möller [Wed, 6 Dec 2000 09:53:29 +0000 (09:53 +0000)]
Add a comment.
Bodo Möller [Wed, 6 Dec 2000 09:48:57 +0000 (09:48 +0000)]
Workaround for broken (or missing) bc.
Ulf Möller [Wed, 6 Dec 2000 04:48:50 +0000 (04:48 +0000)]
remove useless instruction
Ulf Möller [Wed, 6 Dec 2000 04:16:38 +0000 (04:16 +0000)]
Intel assembler version for bn_sub_part_words(). I haven't got
reliable timings yet, please try it out!
Ulf Möller [Wed, 6 Dec 2000 04:14:37 +0000 (04:14 +0000)]
another fix for the debug print
Ulf Möller [Wed, 6 Dec 2000 04:14:30 +0000 (04:14 +0000)]
test_mod_mul is useful, let's run it more often.
Ulf Möller [Wed, 6 Dec 2000 00:19:09 +0000 (00:19 +0000)]
move constants for debug functions to end of file
Richard Levitte [Tue, 5 Dec 2000 19:18:51 +0000 (19:18 +0000)]
Update the internal docs.
Lutz Jänicke [Tue, 5 Dec 2000 16:47:22 +0000 (16:47 +0000)]
Typo and additional information about cert-chain building.
Lutz Jänicke [Tue, 5 Dec 2000 16:45:26 +0000 (16:45 +0000)]
Add EXAMPLES for SSL_CIPHER_description() output.
Bodo Möller [Tue, 5 Dec 2000 10:30:21 +0000 (10:30 +0000)]
Discuss http://www.shoup.net/papers/oaep.ps.Z
Richard Levitte [Tue, 5 Dec 2000 08:16:25 +0000 (08:16 +0000)]
On Windows, Rainbow uses _stdcall convention under Windows.
Spotted by plin <plin@rainbow.com>
Ulf Möller [Tue, 5 Dec 2000 06:38:45 +0000 (06:38 +0000)]
push the flags too
Ulf Möller [Tue, 5 Dec 2000 05:39:43 +0000 (05:39 +0000)]
looks like it works now
Ulf Möller [Tue, 5 Dec 2000 05:10:05 +0000 (05:10 +0000)]
save registers in the debug output code (return value is overwritten too)
Ulf Möller [Tue, 5 Dec 2000 04:39:39 +0000 (04:39 +0000)]
more of the same: add printf() for perlasm.
Ulf Möller [Tue, 5 Dec 2000 03:57:58 +0000 (03:57 +0000)]
minor modification to the previous change
Ulf Möller [Tue, 5 Dec 2000 03:51:46 +0000 (03:51 +0000)]
PERLASM - the wierdest programming language since Intercal.
add debug output facilities.
Ulf Möller [Tue, 5 Dec 2000 02:00:40 +0000 (02:00 +0000)]
Use assert as in the rest of the BN library.
Bodo Möller [Mon, 4 Dec 2000 19:04:55 +0000 (19:04 +0000)]
Improve formatting.
Richard Levitte [Mon, 4 Dec 2000 17:17:03 +0000 (17:17 +0000)]
It's completely unnecessary to add a compression algorithm that is
really undefined.
Spotted by Jeffrey Altman <jaltman@columbia.edu>
Richard Levitte [Mon, 4 Dec 2000 17:11:59 +0000 (17:11 +0000)]
Remove the last bn_wexpand()s that made us break constness. Of
course, that means we need to handle the cases where the two arrays to
bn_mul_recursive() and bn_mul_part_recursive() differ in size.
I haven't yet changed the comments that describe bn_mul_recursive()
and bn_mul_part_recursive(). I want this to be tested by more people
before I consider this change final. Please test away!
Bodo Möller [Mon, 4 Dec 2000 09:32:26 +0000 (09:32 +0000)]
Change error message to "bignum too long"
Bodo Möller [Mon, 4 Dec 2000 09:24:54 +0000 (09:24 +0000)]
Change error message to "bignum too long"
Geoff Thorpe [Mon, 4 Dec 2000 04:54:59 +0000 (04:54 +0000)]
Sync up with a minor change in lhash.h
Geoff Thorpe [Mon, 4 Dec 2000 04:52:38 +0000 (04:52 +0000)]
ANSI C doesn't allow trailing semi-colons after a function's closing brace
so these macros probably shouldn't be used like that at all. So, this
change removes the misleading comment and also adds an implicit trailing
semi-colon to the DECLARE macros so they too don't require one.
Geoff Thorpe [Mon, 4 Dec 2000 04:35:04 +0000 (04:35 +0000)]
Update the documentation to the current state of the LHASH changes. There
will probably be more when the lh_doall[_arg] callbacks are similarly
tidied up, but this 'pod' should now be current.
Geoff Thorpe [Mon, 4 Dec 2000 03:35:35 +0000 (03:35 +0000)]
Make a note of the LHASH changes.
Geoff Thorpe [Mon, 4 Dec 2000 03:02:44 +0000 (03:02 +0000)]
Make the remaining LHASH macro changes. This should leave no remaining
cases of function pointer casting in lh_new() calls - and leave only the
lh_doall and lh_doall_arg cases to be finished.
Ben Laurie [Sun, 3 Dec 2000 10:04:22 +0000 (10:04 +0000)]
Fix warnings.
Bodo Möller [Sun, 3 Dec 2000 09:55:08 +0000 (09:55 +0000)]
include <limits.h>
Bodo Möller [Sun, 3 Dec 2000 09:55:01 +0000 (09:55 +0000)]
include <limits.h>
Bodo Möller [Sun, 3 Dec 2000 09:39:04 +0000 (09:39 +0000)]
Don't allow BIGNUMs to become so large that computations with dmax
might overflow.
Bodo Möller [Sun, 3 Dec 2000 09:37:15 +0000 (09:37 +0000)]
Don't allow BIGNUMs to become so large that computations with dmax
might overflow.
Geoff Thorpe [Sat, 2 Dec 2000 23:16:54 +0000 (23:16 +0000)]
Use the new LHASH macros to declare type-safe wrapper functions that can
be used as the hash/compare callbacks without function pointer casting.
For now, this is just happening in the apps/ directory whilst a few people
check the approach. The rest of the library will be moved across to the
same idea if there's no problems with this.
Geoff Thorpe [Sat, 2 Dec 2000 23:08:59 +0000 (23:08 +0000)]
Next step in tidying up the LHASH code. This commit defines DECLARE and
IMPLEMENT macros for defining wrapper functions for "hash" and "cmp" callbacks
that are specific to the underlying item type in a hash-table. This prevents
function pointer casting altogether, and also provides some type-safety
because the macro does per-variable casting from the (void *) type used in
LHASH itself to the type declared in the macro - and if that doesn't match the
prototype expected by the "hash" or "cmp" function then a compiler error will
result.
NB: IMPLEMENT macros are not required unless predeclared forms are required
(either in a header file, or further up in a C file than the implementation
needs to be). The DECLARE macros must occur after the type-specific hash/cmp
callbacks are declared. Also, the IMPLEMENT and DECLARE macros are such that
they can be prefixed with "static" if desired and a trailing semi-colon should
be appended (making it look more like a regular declaration and easier on
auto-formatting text-editors too).
Now that these macros are defined, I will next be commiting changes to a
number of places in the library where the casting was doing bad things. After
that, the final step will be to make the analogous changes for the lh_doall
and lh_doall_arg functions (more specifically, their callback parameters).
Richard Levitte [Sat, 2 Dec 2000 21:16:13 +0000 (21:16 +0000)]
Add a comment to explain the purpose of bn_cmp_part_words().
Ulf Möller [Sat, 2 Dec 2000 20:51:47 +0000 (20:51 +0000)]
last commit was wrong. Now it works. :)
Ulf Möller [Sat, 2 Dec 2000 19:34:42 +0000 (19:34 +0000)]
argl
Ulf Möller [Sat, 2 Dec 2000 18:50:31 +0000 (18:50 +0000)]
remember the problem with ftime()
Ulf Möller [Sat, 2 Dec 2000 16:20:04 +0000 (16:20 +0000)]
forgot to remove the loop variable
Ulf Möller [Sat, 2 Dec 2000 16:13:27 +0000 (16:13 +0000)]
Loops like this one:
if (bp == NULL)
for (j=0; j<10000; j++)
BN_add(&c,&a,&b);
seem to be pretty useless, and bp never is NULL anyway.
Ulf Möller [Sat, 2 Dec 2000 08:11:55 +0000 (08:11 +0000)]
Move the rijndael "test" to the bf and cast tests.
Ulf Möller [Sat, 2 Dec 2000 07:50:30 +0000 (07:50 +0000)]
Note the bntest change.
The *_part_words functions are not static.
Ulf Möller [Sat, 2 Dec 2000 07:32:57 +0000 (07:32 +0000)]
New function BN_bntest_rand() to detect more BN library bugs.
The bn_cmp_part_words bug was only caught in the BN_mod_mul() test,
not in the BN_mul() test, so apparently the choice of parameters in
some cases is bad.
Ulf Möller [Sat, 2 Dec 2000 07:28:43 +0000 (07:28 +0000)]
Fix bn_cmp_part_words() and move it to bn_lib.c.
Ulf Möller [Sat, 2 Dec 2000 07:20:47 +0000 (07:20 +0000)]
remove unused static function
Geoff Thorpe [Fri, 1 Dec 2000 20:31:52 +0000 (20:31 +0000)]
First step in tidying up the LHASH code. The callback prototypes (and
casts) used in the lhash code are about as horrible and evil as they can
be. For starters, the callback prototypes contain empty parameter lists.
Yuck.
This first change defines clearer prototypes - including "typedef"'d
function pointer types to use as "hash" and "compare" callbacks, as well as
the callbacks passed to the lh_doall and lh_doall_arg iteration functions.
Now at least more explicit (and clear) casting is required in all of the
dependant code - and that should be included in this commit.
The next step will be to hunt down and obliterate some of the function
pointer casting being used when it's not necessary - a particularly evil
variant exists in the implementation of lh_doall.
Richard Levitte [Fri, 1 Dec 2000 17:44:33 +0000 (17:44 +0000)]
Write a first HOWTO on how to create certificates. This is currently
a draft.
Richard Levitte [Fri, 1 Dec 2000 16:49:53 +0000 (16:49 +0000)]
Correct a mail address...
Richard Levitte [Fri, 1 Dec 2000 14:40:45 +0000 (14:40 +0000)]
Document the addition of Kerberos stuff.
Richard Levitte [Fri, 1 Dec 2000 14:33:19 +0000 (14:33 +0000)]
Typo corrected.
Bodo Möller [Fri, 1 Dec 2000 09:41:21 +0000 (09:41 +0000)]
functionality for BN_mod_sqrt timings
Bodo Möller [Fri, 1 Dec 2000 08:48:42 +0000 (08:48 +0000)]
"make depend"