Dr. Stephen Henson [Sat, 16 May 2009 16:23:35 +0000 (16:23 +0000)]
Fix from 1.0.0-stable.
Dr. Stephen Henson [Sat, 16 May 2009 16:18:45 +0000 (16:18 +0000)]
Update from 1.0.0-stable.
Dr. Stephen Henson [Sat, 16 May 2009 15:51:59 +0000 (15:51 +0000)]
Updates from 1.0.0-stable.
Dr. Stephen Henson [Fri, 15 May 2009 23:07:59 +0000 (23:07 +0000)]
Update from HEAD.
Richard Levitte [Fri, 15 May 2009 16:37:29 +0000 (16:37 +0000)]
Functional VMS changes submitted by sms@antinode.info (Steven M. Schweda).
Thank you\!
(note: not tested for now, a few nightly builds should give indications though)
Richard Levitte [Fri, 15 May 2009 16:15:03 +0000 (16:15 +0000)]
make update
Richard Levitte [Fri, 15 May 2009 16:05:43 +0000 (16:05 +0000)]
make update
Richard Levitte [Fri, 15 May 2009 16:01:45 +0000 (16:01 +0000)]
Have mkdef.pl also handle VAX and Non-VAX differences for VMS
Richard Levitte [Fri, 15 May 2009 16:00:11 +0000 (16:00 +0000)]
Add a comment about libeay.num and ssleay.num
Dr. Stephen Henson [Wed, 13 May 2009 11:52:29 +0000 (11:52 +0000)]
Update from 1.0.0-stable.
Andy Polyakov [Tue, 5 May 2009 19:18:26 +0000 (19:18 +0000)]
e_capi.c: update from HEAD.
Richard Levitte [Tue, 5 May 2009 08:48:02 +0000 (08:48 +0000)]
Update from HEAD
Dr. Stephen Henson [Tue, 28 Apr 2009 22:02:16 +0000 (22:02 +0000)]
Update from 1.0.0-stable.
Richard Levitte [Tue, 28 Apr 2009 13:11:05 +0000 (13:11 +0000)]
Update from HEAD
Dr. Stephen Henson [Sun, 26 Apr 2009 15:51:44 +0000 (15:51 +0000)]
Fix to escape backslashes in prefix
Dr. Stephen Henson [Wed, 22 Apr 2009 17:37:47 +0000 (17:37 +0000)]
Update from 1.0.0-stable.
Dr. Stephen Henson [Sun, 19 Apr 2009 18:08:12 +0000 (18:08 +0000)]
PR: 1751
Submitted by: David Woodhouse <dwmw2@infradead.org>
Approved by: steve@openssl.org
Compatibility patches for Cisco VPN client DTLS.
Dr. Stephen Henson [Sun, 19 Apr 2009 15:17:49 +0000 (15:17 +0000)]
Update .cvsignore
Dr. Stephen Henson [Sun, 19 Apr 2009 15:16:21 +0000 (15:16 +0000)]
Typo.
Dr. Stephen Henson [Sun, 19 Apr 2009 14:04:55 +0000 (14:04 +0000)]
PQGVer support.
Dr. Stephen Henson [Sun, 19 Apr 2009 13:44:43 +0000 (13:44 +0000)]
Minor format change to match expected PQGVer format.
Dr. Stephen Henson [Sat, 18 Apr 2009 22:41:46 +0000 (22:41 +0000)]
Add DES3 CFB1 mode tests.
Dr. Stephen Henson [Sat, 18 Apr 2009 22:41:17 +0000 (22:41 +0000)]
Fixes to make DES3 cfb1 work.
Dr. Stephen Henson [Thu, 16 Apr 2009 16:43:18 +0000 (16:43 +0000)]
Update from 1.0.0-stable.
Dr. Stephen Henson [Tue, 14 Apr 2009 15:20:48 +0000 (15:20 +0000)]
PR: 1829
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
DTLS timer bug fix from 1.0.0-stable with fixes.
Dr. Stephen Henson [Tue, 14 Apr 2009 14:28:33 +0000 (14:28 +0000)]
PR: 1647
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
DTLS Renogotiation bug fix.
Dr. Stephen Henson [Wed, 8 Apr 2009 15:58:26 +0000 (15:58 +0000)]
Fix from 1.0.0-stable.
Dr. Stephen Henson [Tue, 7 Apr 2009 16:28:30 +0000 (16:28 +0000)]
Submitted by: Darryl Miles <darryl-mailinglists@netbauds.net>
Approved by: steve@openssl.org
Handle non-blocking I/O properly in SSL_shutdown() call.
Dr. Stephen Henson [Tue, 7 Apr 2009 12:10:12 +0000 (12:10 +0000)]
PR: 1795
Submitted by: Peter Edwards <peter.edwards@vordel.com>
Approved by: steve@openssl.org
Avoid race condition by sorting cipher list straight away.
Dr. Stephen Henson [Fri, 3 Apr 2009 16:54:04 +0000 (16:54 +0000)]
PR: 1700
Submitted by: "Robbins, Aharon" <aharon.robbins@intel.com>
Approved by: steve@openssl.org
#undef X509_EXTENSIONS for WIN32 too.
Dr. Stephen Henson [Fri, 3 Apr 2009 16:28:20 +0000 (16:28 +0000)]
Update from 1.0.0-stable
Dr. Stephen Henson [Fri, 3 Apr 2009 11:36:49 +0000 (11:36 +0000)]
PR: 1616
Submitted by: Dequin_Eric@emc.com
Approved by: steve@openssl.org
Check tree->levels to ensure malloc worked.
Dr. Stephen Henson [Thu, 2 Apr 2009 22:34:59 +0000 (22:34 +0000)]
PR: 1827
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
Fix application data in handshake bug.
Dr. Stephen Henson [Thu, 2 Apr 2009 22:32:16 +0000 (22:32 +0000)]
PR: 1828
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
Fix DTLS retransmission bug.
Dr. Stephen Henson [Thu, 2 Apr 2009 22:28:35 +0000 (22:28 +0000)]
PR: 1826
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
Client random bug fix.
Dr. Stephen Henson [Thu, 2 Apr 2009 22:19:07 +0000 (22:19 +0000)]
Ooops, revert patch... due to non-portable gettimeofday call.
Dr. Stephen Henson [Thu, 2 Apr 2009 22:16:02 +0000 (22:16 +0000)]
PR: 1829
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
DTLS timer bug fix.
Dr. Stephen Henson [Thu, 2 Apr 2009 22:12:13 +0000 (22:12 +0000)]
PR: 1838
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org
DTLS fragment bug.
Dr. Stephen Henson [Wed, 25 Mar 2009 22:22:42 +0000 (22:22 +0000)]
Typo.
Dr. Stephen Henson [Wed, 25 Mar 2009 19:01:03 +0000 (19:01 +0000)]
Submitted by: Ilya O. <vrghost@gmail.com>
Approved by: steve@openssl.org
Add 2.5.4.* OIDs.
Dr. Stephen Henson [Wed, 25 Mar 2009 13:02:49 +0000 (13:02 +0000)]
Prepare for next version.
Dr. Stephen Henson [Wed, 25 Mar 2009 12:08:14 +0000 (12:08 +0000)]
Aaargh.... wrong version number....
Dr. Stephen Henson [Wed, 25 Mar 2009 10:59:22 +0000 (10:59 +0000)]
Make update.
Dr. Stephen Henson [Wed, 25 Mar 2009 10:46:56 +0000 (10:46 +0000)]
Prepare for 0.9.8k release.
Dr. Stephen Henson [Wed, 25 Mar 2009 10:42:34 +0000 (10:42 +0000)]
PR: 1868
Submitted by: Paolo Ganci <Paolo.Ganci@AdNovum.CH>
Approved by: steve@openssl.org
Don't set fields to NULL when freeing them up in ASN1 code. On some platforms
with sizeof(long) < sizeof(char *) this can cause a crash.
Dr. Stephen Henson [Wed, 25 Mar 2009 10:40:32 +0000 (10:40 +0000)]
Submitted by: Ivan Nestlerode <inestlerode@us.ibm.com>
Approved by: steve@openssl.org
Check return code properly in CMS_SignerInfo_verify_content().
Dr. Stephen Henson [Wed, 25 Mar 2009 10:35:57 +0000 (10:35 +0000)]
Reject BMPStrings and UniversalStrings of invalid length. This prevents
a crash in ASN1_STRING_print_ex() which assumes they are valid.
Dr. Stephen Henson [Mon, 23 Mar 2009 21:11:50 +0000 (21:11 +0000)]
Update from HEAD.
Andy Polyakov [Mon, 16 Mar 2009 13:43:43 +0000 (13:43 +0000)]
des_enc.m4, SPARC DES assembler, update from HEAD: make it Purify-friendly.
As side effect it introduces duplicate of 2KB DES_SPtrans table.
Dr. Stephen Henson [Sun, 15 Mar 2009 14:03:29 +0000 (14:03 +0000)]
Oops.
Dr. Stephen Henson [Sun, 15 Mar 2009 13:36:01 +0000 (13:36 +0000)]
Don't force S/MIME signing purpose: allow it to be overridden by store
settings.
Don't set default values in X509_VERIFY_PARAM_new(): it stops parameters
being inherited properly.
Dr. Stephen Henson [Sat, 14 Mar 2009 18:33:25 +0000 (18:33 +0000)]
Permit nested ASN1 string encoding but with a maximum depth to avoid
stack overflow.
Dr. Stephen Henson [Sat, 14 Mar 2009 12:40:46 +0000 (12:40 +0000)]
Update from HEAD.
Dr. Stephen Henson [Sat, 14 Mar 2009 12:26:03 +0000 (12:26 +0000)]
PR: 1863
Submitted by: Ger Hobbelt <ger@hobbelt.com>
Reviewed by: steve@openssl.org
Check return value, use OPENSSL_assert and unsigned int.
Dr. Stephen Henson [Sat, 14 Mar 2009 12:07:42 +0000 (12:07 +0000)]
PR: 1846
Submitted by: Andrea Schoenberg <asg@ftpproxy.org>
Reviewed by: steve@openssl.org
Fix for HP Nonstop(Tandem) systems.
Dr. Stephen Henson [Thu, 12 Mar 2009 17:31:18 +0000 (17:31 +0000)]
Fix from HEAD.
Dr. Stephen Henson [Thu, 12 Mar 2009 17:13:44 +0000 (17:13 +0000)]
Update from head.
Dr. Stephen Henson [Thu, 12 Mar 2009 17:09:46 +0000 (17:09 +0000)]
PR: 1861
l must be > 0 or array will be accessed out of bounds.
Dr. Stephen Henson [Mon, 9 Mar 2009 13:07:16 +0000 (13:07 +0000)]
PR: 1856
Check return value of PKCS12_add_safes()
Dr. Stephen Henson [Mon, 9 Mar 2009 12:17:56 +0000 (12:17 +0000)]
PR: 1859
Submitted by: Jurko Gospodneti <jurko.gospodnetic@docte.hr>
Reviewed by: steve@openssl.org
Don't affect echo on/off state for calling scripts.
Dr. Stephen Henson [Mon, 9 Mar 2009 12:14:08 +0000 (12:14 +0000)]
PR: 1860
Submitted by: Jurko Gospodneti <jurko.gospodnetic@docte.hr>
Reviewed by: steve@openss.org
Make Windows build more silent.
Dr. Stephen Henson [Mon, 9 Mar 2009 12:09:03 +0000 (12:09 +0000)]
PR: 1858
Submitted by: Jurko Gospodneti <jurko.gospodnetic@docte.hr>
Reviewed by: steve@openssl.org
Make OPENSSL_NO_SOCK work.
Dr. Stephen Henson [Mon, 9 Mar 2009 12:06:23 +0000 (12:06 +0000)]
PR: 1857
Submitted by: Jurko GospodnetiÄ\87 <jurko.gospodnetic@docte.hr>
Reviewed by: steve@openssl.org
Make OPENSSL_NO_FP_API work again.
Dr. Stephen Henson [Sun, 8 Mar 2009 23:05:34 +0000 (23:05 +0000)]
PR: 1841
Submitted by: Martin Kaiser <lists@kaiser.cx>
Reviewed by: steve@openssl.org
Remove unused code.
Ben Laurie [Sun, 8 Mar 2009 10:48:03 +0000 (10:48 +0000)]
Fix display of all 0 IPv6 address (from Rob Austein).
Dr. Stephen Henson [Sat, 7 Mar 2009 16:58:43 +0000 (16:58 +0000)]
Submitted by: Jeremy Shapiro <jnshapir@us.ibm.com>
Reviewed by: steve@openssl.org
Improve efficientcy of mem_gets().
Dr. Stephen Henson [Tue, 3 Mar 2009 22:40:29 +0000 (22:40 +0000)]
Ooops @ should be for the if command not set.
Ben Laurie [Tue, 3 Mar 2009 15:07:35 +0000 (15:07 +0000)]
Only require -iv for ciphers that use an IV!
Ben Laurie [Tue, 3 Mar 2009 15:06:49 +0000 (15:06 +0000)]
Use the correct length (reported by Quanhong Wang).
Dr. Stephen Henson [Wed, 25 Feb 2009 23:29:20 +0000 (23:29 +0000)]
Do a "make links" in fips directory even if not compiling for fips.
Ben Laurie [Mon, 23 Feb 2009 16:02:47 +0000 (16:02 +0000)]
Fix memory leak.
Ben Laurie [Wed, 18 Feb 2009 10:43:10 +0000 (10:43 +0000)]
Do not link nonexistent file.
Ben Laurie [Wed, 18 Feb 2009 10:27:23 +0000 (10:27 +0000)]
Fix FIPS typo.
Dr. Stephen Henson [Mon, 16 Feb 2009 23:24:06 +0000 (23:24 +0000)]
Update from HEAD.
Richard Levitte [Mon, 16 Feb 2009 15:17:26 +0000 (15:17 +0000)]
Data not initialised.
Notified by Gerardo Ganis <gerardo.ganis@cern.ch>
Ben Laurie [Mon, 16 Feb 2009 08:44:23 +0000 (08:44 +0000)]
Use shared dev team flags, fix resulting warning.
Ben Laurie [Mon, 16 Feb 2009 08:43:41 +0000 (08:43 +0000)]
Don't eat the whole word for -d. This allows -debug to be passed to
the compiler.
Dr. Stephen Henson [Sun, 15 Feb 2009 15:46:46 +0000 (15:46 +0000)]
Include common warning options in 0.9.8, fix warnings in debug-steve64.
Dr. Stephen Henson [Sun, 15 Feb 2009 12:10:39 +0000 (12:10 +0000)]
PR: 1422
Fix return value of X509_NAME_cmp() so it works with qsort/bsearch again.
Dr. Stephen Henson [Sat, 14 Feb 2009 23:08:31 +0000 (23:08 +0000)]
Skip engines directory if no-engine
Dr. Stephen Henson [Sat, 14 Feb 2009 22:19:31 +0000 (22:19 +0000)]
PR: 1840
Submitted by: Martin Kaiser <lists@kaiser.cx>
Approved by: steve@openssl.org
Handle NULL passing in parameter and BN_CTX_new() error correctly.
Dr. Stephen Henson [Sat, 14 Feb 2009 21:50:14 +0000 (21:50 +0000)]
PR: 1835
Submitted by: Damien Miller <djm@mindrot.org>
Approved by: steve@openssl.org
Fix various typos.
Dr. Stephen Henson [Fri, 13 Feb 2009 18:37:31 +0000 (18:37 +0000)]
Install the fipsld link script.
Bodo Möller [Mon, 2 Feb 2009 00:51:49 +0000 (00:51 +0000)]
oops
Bodo Möller [Mon, 2 Feb 2009 00:40:59 +0000 (00:40 +0000)]
For -hex, print just one \n
Richard Levitte [Mon, 2 Feb 2009 00:27:57 +0000 (00:27 +0000)]
Updated symbol for VMS
Bodo Möller [Mon, 2 Feb 2009 00:27:56 +0000 (00:27 +0000)]
-hex option for openssl rand
PR: 1831
Submitted by: Damien Miller
Bodo Möller [Mon, 2 Feb 2009 00:25:00 +0000 (00:25 +0000)]
Make sure we have a library to link dummytest.o with.
Richard Levitte [Mon, 2 Feb 2009 00:18:09 +0000 (00:18 +0000)]
Add the CAPI engine
Dr. Stephen Henson [Wed, 28 Jan 2009 12:55:36 +0000 (12:55 +0000)]
Update from HEAD.
Dr. Stephen Henson [Wed, 28 Jan 2009 12:35:10 +0000 (12:35 +0000)]
Support NumericString for name components.
Richard Levitte [Wed, 28 Jan 2009 07:54:16 +0000 (07:54 +0000)]
Add missing modules
Dr. Stephen Henson [Wed, 21 Jan 2009 21:44:52 +0000 (21:44 +0000)]
PR: 1806
Submitted by: philipp_subx@redfish-solutions.com
Approved by: steve
Use ${CC:-gcc} instead of just gcc in domd, to support cross compilation.
Dr. Stephen Henson [Mon, 19 Jan 2009 16:42:18 +0000 (16:42 +0000)]
No need to add fips to @skip
Dr. Stephen Henson [Mon, 19 Jan 2009 16:40:44 +0000 (16:40 +0000)]
If not compiling for fips don't do anything in fips directory.
Install fipscanister.o and friends from FIPSLIBDIR location.
Ben Laurie [Sat, 17 Jan 2009 14:36:17 +0000 (14:36 +0000)]
Make it possible to override CC.
Richard Levitte [Sat, 17 Jan 2009 12:33:43 +0000 (12:33 +0000)]
Another symbol that's longer than 31 characters.
Richard Levitte [Sat, 17 Jan 2009 12:33:11 +0000 (12:33 +0000)]
A forgotten module...
Dr. Stephen Henson [Thu, 15 Jan 2009 12:34:54 +0000 (12:34 +0000)]
Stop warnings on WIN64
Dr. Stephen Henson [Wed, 14 Jan 2009 11:10:33 +0000 (11:10 +0000)]
Some platforms need $(EX_LIBS) when building fips_standalone_sha1 from
an external fipscanister.o