Richard Levitte [Thu, 18 Nov 2010 22:36:16 +0000 (22:36 +0000)]
Synchronise with Unix tests
Richard Levitte [Thu, 18 Nov 2010 20:03:07 +0000 (20:03 +0000)]
We redid the structure on architecture dependent source files, but
apparently forgot to adapt the copying to the installation directory.
Dr. Stephen Henson [Thu, 18 Nov 2010 17:33:17 +0000 (17:33 +0000)]
remove duplicate statement
Dr. Stephen Henson [Thu, 18 Nov 2010 17:04:18 +0000 (17:04 +0000)]
compile cts128.c on VMS
Dr. Stephen Henson [Thu, 18 Nov 2010 13:22:53 +0000 (13:22 +0000)]
fix no SIGALRM case in speed.c
Dr. Stephen Henson [Thu, 18 Nov 2010 12:30:01 +0000 (12:30 +0000)]
PR: 2372
Submitted by: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl>
Reviewed by: steve
Fix OpenBSD compilation failure.
Dr. Stephen Henson [Wed, 17 Nov 2010 18:17:08 +0000 (18:17 +0000)]
oops, reinstate TLSv1 string
Dr. Stephen Henson [Wed, 17 Nov 2010 17:37:23 +0000 (17:37 +0000)]
Don't assume a decode error if session tlsext_ecpointformatlist is not NULL: it can be legitimately set elsewhere.
Dr. Stephen Henson [Tue, 16 Nov 2010 14:18:51 +0000 (14:18 +0000)]
bring HEAD up to date, add CVE-2010-3864 fix, update NEWS files
Dr. Stephen Henson [Tue, 16 Nov 2010 14:16:00 +0000 (14:16 +0000)]
add TLS v1.1 options to s_server
Dr. Stephen Henson [Tue, 16 Nov 2010 12:11:46 +0000 (12:11 +0000)]
If EVP_PKEY structure contains an ENGINE the key is ENGINE specific and
we should use its method instead of any generic one.
Dr. Stephen Henson [Sun, 14 Nov 2010 17:47:45 +0000 (17:47 +0000)]
Only use explicit IV if cipher is in CBC mode.
Dr. Stephen Henson [Sun, 14 Nov 2010 13:50:55 +0000 (13:50 +0000)]
Get correct GOST private key instead of just assuming the last one is
correct: this isn't always true if we have more than one certificate.
Dr. Stephen Henson [Fri, 12 Nov 2010 20:06:05 +0000 (20:06 +0000)]
preliminary acknowledgments file
Dr. Stephen Henson [Thu, 11 Nov 2010 15:21:45 +0000 (15:21 +0000)]
Submitted By: Bogdan Harjoc <harjoc@gmail.com>
Add missing debug WIN64 targets.
Dr. Stephen Henson [Thu, 11 Nov 2010 14:42:50 +0000 (14:42 +0000)]
PR: 2366
Submitted by: Damien Miller <djm@mindrot.org>
Reviewed by: steve
Stop pkeyutl crashing if some arguments are missing. Also make str2fmt
tolerate NULL parameter.
Dr. Stephen Henson [Tue, 2 Nov 2010 15:58:58 +0000 (15:58 +0000)]
Submitted by: Jonathan Dixon <joth@chromium.org>
Reviewed by: steve
If store is NULL set flags correctly.
Andy Polyakov [Fri, 22 Oct 2010 20:18:15 +0000 (20:18 +0000)]
Configure: update mips[32|64]_asm lines.
Andy Polyakov [Fri, 22 Oct 2010 20:16:22 +0000 (20:16 +0000)]
sha512-mips.pl: add missing 64-bit byte swap.
Andy Polyakov [Thu, 21 Oct 2010 15:56:55 +0000 (15:56 +0000)]
Add aes-mips.pl assembler module.
Andy Polyakov [Thu, 21 Oct 2010 15:56:24 +0000 (15:56 +0000)]
sha512-mips.pl: fix "little-endian" typos.
Dr. Stephen Henson [Mon, 11 Oct 2010 23:49:22 +0000 (23:49 +0000)]
PR: 2295
Submitted by: Alexei Khlebnikov <alexei.khlebnikov@opera.com>
Reviewed by: steve
OOM checking. Leak in OOM fix. Fall-through comment. Duplicate code
elimination.
Andy Polyakov [Sun, 10 Oct 2010 21:07:55 +0000 (21:07 +0000)]
x86_64-xlate.pl: fix LNK4078 and LNK4210 link warnings.
PR 2356
Dr. Stephen Henson [Sun, 10 Oct 2010 12:24:13 +0000 (12:24 +0000)]
move CHANGES entry to correct place
Dr. Stephen Henson [Sun, 10 Oct 2010 12:15:47 +0000 (12:15 +0000)]
PR: 2314
Submitted by: Mounir IDRASSI <mounir.idrassi@idrix.net>
Reviewed by: steve
Fix for double free bug in ssl/s3_clnt.c CVE-2010-2939
Dr. Stephen Henson [Wed, 6 Oct 2010 18:00:59 +0000 (18:00 +0000)]
We can't always read 6 bytes in an OCSP response: fix so error statuses
are read correctly for non-blocking I/O.
Dr. Stephen Henson [Mon, 4 Oct 2010 13:58:41 +0000 (13:58 +0000)]
fix signature printing routines
Dr. Stephen Henson [Mon, 4 Oct 2010 13:45:15 +0000 (13:45 +0000)]
fix warnings
Dr. Stephen Henson [Mon, 4 Oct 2010 13:28:46 +0000 (13:28 +0000)]
Minor documentation fixes, PR#2345
Dr. Stephen Henson [Mon, 4 Oct 2010 13:23:53 +0000 (13:23 +0000)]
Minor documentation fixes, PR#2344
Dr. Stephen Henson [Mon, 4 Oct 2010 13:19:28 +0000 (13:19 +0000)]
Typo, PR#2346
Dr. Stephen Henson [Sun, 3 Oct 2010 18:58:09 +0000 (18:58 +0000)]
Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(),
this means that some implementations will be used automatically, e.g. aesni,
we do this for cryptodev anyway.
Setup cpuid in ENGINE_load_builtin_engines() too as some ENGINEs use it.
Andy Polyakov [Sat, 2 Oct 2010 12:43:04 +0000 (12:43 +0000)]
sha512-mips.pl: add missing byte swap for little-endians.
Andy Polyakov [Sat, 2 Oct 2010 11:47:17 +0000 (11:47 +0000)]
MIPS assembler pack: enable it in Configure, add SHA2 module, fix make rules,
update commentary...
Andy Polyakov [Mon, 27 Sep 2010 21:19:43 +0000 (21:19 +0000)]
Add unified mips.pl, which will replace mips3.s.
Andy Polyakov [Wed, 22 Sep 2010 08:43:09 +0000 (08:43 +0000)]
sha1-mips.pl, mips-mont.pl: unify MIPS assembler modules in respect to
ABI and binutils.
Andy Polyakov [Tue, 21 Sep 2010 11:37:00 +0000 (11:37 +0000)]
ghash-s390x.pl: reschedule instructions for better performance.
Andy Polyakov [Sat, 18 Sep 2010 08:46:53 +0000 (08:46 +0000)]
s390x assembler pack: extend OPENSSL_s390xcap_P to 128 bits.
Andy Polyakov [Mon, 13 Sep 2010 16:15:17 +0000 (16:15 +0000)]
VC-32.pl: default to nasm if neither nasm or nasmw is is found at the moment.
PR: 2338
Andy Polyakov [Mon, 13 Sep 2010 13:28:52 +0000 (13:28 +0000)]
Alpha assembler pack: adapt for Linux.
PR: 2335
Andy Polyakov [Fri, 10 Sep 2010 15:41:08 +0000 (15:41 +0000)]
sha1-armv4-large.pl: more readable input pickup.
Andy Polyakov [Fri, 10 Sep 2010 15:37:50 +0000 (15:37 +0000)]
Configure: remove redundant -DMD32_REG_T=int.
Andy Polyakov [Fri, 10 Sep 2010 15:00:51 +0000 (15:00 +0000)]
crypto/ppc[cpuid|cap]: call CPU detection once and detect AltiVec.
Andy Polyakov [Fri, 10 Sep 2010 14:53:36 +0000 (14:53 +0000)]
crypto/bn/asm/s390x.S: drop redundant instructions.
Andy Polyakov [Fri, 10 Sep 2010 14:50:17 +0000 (14:50 +0000)]
Add ghash-s390x.pl.
Andy Polyakov [Sun, 5 Sep 2010 19:52:14 +0000 (19:52 +0000)]
modes/asm/ghash-*.pl: switch to [more reproducible] performance results
collected with 'apps/openssl speed ghash'.
Andy Polyakov [Sun, 5 Sep 2010 19:49:54 +0000 (19:49 +0000)]
ghash-ia64.pl: 50% performance improvement of gcm_ghash_4bit.
Andy Polyakov [Sun, 5 Sep 2010 19:41:41 +0000 (19:41 +0000)]
sparcv9cap.c: disengange Solaris-specific CPU detection routine in favour
of unified procedure relying on SIGILL.
PR: 2321
Ben Laurie [Sun, 5 Sep 2010 17:14:01 +0000 (17:14 +0000)]
Fixes to NPN from Adam Langley.
Ben Laurie [Sun, 5 Sep 2010 16:35:10 +0000 (16:35 +0000)]
NPN tests.
Ben Laurie [Sun, 5 Sep 2010 16:34:49 +0000 (16:34 +0000)]
Fix warnings.
Dr. Stephen Henson [Thu, 2 Sep 2010 17:45:23 +0000 (17:45 +0000)]
make no-gost work on Windows
Dr. Stephen Henson [Mon, 30 Aug 2010 23:59:14 +0000 (23:59 +0000)]
fix bug in AES_unwrap()
Bodo Möller [Fri, 27 Aug 2010 13:17:59 +0000 (13:17 +0000)]
More C language police work.
Bodo Möller [Fri, 27 Aug 2010 12:07:35 +0000 (12:07 +0000)]
C conformity fixes: Move declarations before statements in all blocks.
Bodo Möller [Fri, 27 Aug 2010 11:29:30 +0000 (11:29 +0000)]
C conformity fixes:
- Move declarations before statements in all blocks.
- Where 64-bit type is required, use it explicitly (not 1l).
Dr. Stephen Henson [Fri, 27 Aug 2010 11:29:15 +0000 (11:29 +0000)]
PR: 1833
Submitted By: Robin Seggelmann <seggelmann@fh-muenster.de>
Fix other cases not covered by original patch.
Bodo Möller [Thu, 26 Aug 2010 18:45:45 +0000 (18:45 +0000)]
Update version numbers
Bodo Möller [Thu, 26 Aug 2010 15:15:47 +0000 (15:15 +0000)]
For better forward-security support, add functions
SSL_[CTX_]set_not_resumable_session_callback.
Submitted by: Emilia Kasper (Google)
[A part of this change affecting ssl/s3_lib.c was accidentally commited
separately, together with a compilation fix for that file;
see s3_lib.c CVS revision 1.133 (http://cvs.openssl.org/chngview?cn=19855).]
Bodo Möller [Thu, 26 Aug 2010 14:54:16 +0000 (14:54 +0000)]
Patch from PR #1833 was broken: there's no s->s3->new_session
(only s->new_session).
Bodo Möller [Thu, 26 Aug 2010 14:40:11 +0000 (14:40 +0000)]
(formatting error)
Bodo Möller [Thu, 26 Aug 2010 14:29:55 +0000 (14:29 +0000)]
New 64-bit optimized implementation EC_GFp_nistp224_method().
This will only be compiled in if explicitly requested
(#ifdef EC_NISTP224_64_GCC_128).
Submitted by: Emilia Kasper (Google)
Dr. Stephen Henson [Thu, 26 Aug 2010 14:27:17 +0000 (14:27 +0000)]
sync and update ordinals
Dr. Stephen Henson [Thu, 26 Aug 2010 14:23:52 +0000 (14:23 +0000)]
PR: 1833
Submitted By: Robin Seggelmann <seggelmann@fh-muenster.de>
Support for abbreviated handshakes when renegotiating.
Bodo Möller [Thu, 26 Aug 2010 12:11:01 +0000 (12:11 +0000)]
ECC library bugfixes.
Submitted by: Emilia Kasper (Google)
Bodo Möller [Thu, 26 Aug 2010 11:22:33 +0000 (11:22 +0000)]
Harmonize with OpenSSL_1_0_1-stable version of CHANGES.
Andy Polyakov [Tue, 24 Aug 2010 21:51:08 +0000 (21:51 +0000)]
util/cygwin.sh: maintainer's update.
Submitted by: Corinna Vinschen
Andy Polyakov [Tue, 24 Aug 2010 21:45:41 +0000 (21:45 +0000)]
engine/Makefile: harmonize engine install rule for .dylib extension on MacOS X.
PR: 2319
Andy Polyakov [Mon, 23 Aug 2010 14:32:20 +0000 (14:32 +0000)]
gcm128.c: fix typo in CRYPTO_gcm128_encrypt_ctr32 name.
Andy Polyakov [Sat, 21 Aug 2010 11:34:46 +0000 (11:34 +0000)]
Makefile.share: fix brown-bag typo in link_o.darwin.
Andy Polyakov [Sat, 21 Aug 2010 11:20:25 +0000 (11:20 +0000)]
crypto/modes/Makefile: fix typo in ghash-parisc.s rule.
Dr. Stephen Henson [Tue, 10 Aug 2010 13:01:49 +0000 (13:01 +0000)]
PR: 2315
Use consistent calculation for PSS salt length.
Andy Polyakov [Tue, 3 Aug 2010 15:34:57 +0000 (15:34 +0000)]
sha1-armv4-large.pl: reschedule instructions for dual-issue pipeline.
Andy Polyakov [Mon, 2 Aug 2010 21:51:07 +0000 (21:51 +0000)]
rc5_locl.h: make inline assembler clang-friendly.
Andy Polyakov [Mon, 2 Aug 2010 21:39:51 +0000 (21:39 +0000)]
gcm128.c: add CRYPTO_gcm128_[en|de]crypt_ctr32.
Andy Polyakov [Mon, 2 Aug 2010 09:32:26 +0000 (09:32 +0000)]
md32_common.h: modify MD32_REG_T pre-processing logic [triggered by clang].
Dr. Stephen Henson [Wed, 28 Jul 2010 16:53:28 +0000 (16:53 +0000)]
Fix ctr mode properly this time....
Dr. Stephen Henson [Wed, 28 Jul 2010 11:03:09 +0000 (11:03 +0000)]
Make ctr mode behaviour consistent with other modes.
Ben Laurie [Wed, 28 Jul 2010 10:06:55 +0000 (10:06 +0000)]
Add Next Protocol Negotiation.
Andy Polyakov [Wed, 28 Jul 2010 08:17:15 +0000 (08:17 +0000)]
alphacpuid.pl: fix brown-bag bug.
Ben Laurie [Tue, 27 Jul 2010 16:57:05 +0000 (16:57 +0000)]
Sign mismatch.
Ben Laurie [Tue, 27 Jul 2010 16:34:29 +0000 (16:34 +0000)]
Missing prototype.
Andy Polyakov [Mon, 26 Jul 2010 22:56:07 +0000 (22:56 +0000)]
aes-x86_64.pl: commit#19797 was overzealous, partially reverse.
Andy Polyakov [Mon, 26 Jul 2010 22:04:31 +0000 (22:04 +0000)]
Replace alphacpuid.s with alphacpuid.pl to ensure it makes to release tar-balls.
PR: 2309
Andy Polyakov [Mon, 26 Jul 2010 21:58:23 +0000 (21:58 +0000)]
ms/: update do_win64*.bat and remove redundant mingw32.bat.
Andy Polyakov [Mon, 26 Jul 2010 21:57:10 +0000 (21:57 +0000)]
sha1-alpha.pl: commentary update.
Andy Polyakov [Mon, 26 Jul 2010 21:56:16 +0000 (21:56 +0000)]
rc4-s390x.pl: harmonize build rule with other similar rules.
Andy Polyakov [Mon, 26 Jul 2010 21:54:21 +0000 (21:54 +0000)]
ghash-ia64.pl: excuse myself from implementing "528B" variant.
Andy Polyakov [Mon, 26 Jul 2010 21:53:01 +0000 (21:53 +0000)]
modes/Makefile: update clean rule.
Andy Polyakov [Mon, 26 Jul 2010 21:50:39 +0000 (21:50 +0000)]
eng_aesni.c: switch to CRYPTO_ctr128_encrypt_ctr32.
Andy Polyakov [Mon, 26 Jul 2010 21:48:39 +0000 (21:48 +0000)]
aes-x86_64.pl: remove redundant instructions.
Andy Polyakov [Mon, 26 Jul 2010 21:45:38 +0000 (21:45 +0000)]
perlasm/x86_64-xlate.pl: extend SSE>2 to ml64.
Andy Polyakov [Mon, 26 Jul 2010 21:44:03 +0000 (21:44 +0000)]
aesni-x86_64.pl: fix typos.
Andy Polyakov [Mon, 26 Jul 2010 21:42:07 +0000 (21:42 +0000)]
perlasm/x86asm.pl: move aesni and pclmulqdq opcodes to aesni-x86.pl and
ghash-x86.pl.
Dr. Stephen Henson [Mon, 26 Jul 2010 18:15:59 +0000 (18:15 +0000)]
Add new type ossl_ssize_t instead of ssize_t and move definitions to
e_os2.h, this should fix WIN32 compilation issues and hopefully avoid
conflicts with other headers which may workaround ssize_t in different ways.
Dr. Stephen Henson [Mon, 26 Jul 2010 18:15:13 +0000 (18:15 +0000)]
#if out deleted function from headers so it isn't picked up by WIN32 build
system.
Dr. Stephen Henson [Mon, 26 Jul 2010 13:17:17 +0000 (13:17 +0000)]
WIN32 build fix.
Dr. Stephen Henson [Sun, 25 Jul 2010 19:13:30 +0000 (19:13 +0000)]
Sync ordinals and update.
Dr. Stephen Henson [Sun, 25 Jul 2010 19:12:45 +0000 (19:12 +0000)]
Update symhacks.
Dr. Stephen Henson [Sun, 25 Jul 2010 18:12:44 +0000 (18:12 +0000)]
Add modes.h and cmac to WIN32 build system.