Dr. Stephen Henson [Thu, 28 Apr 2005 00:22:00 +0000 (00:22 +0000)]
Fix from HEAD.
Nils Larsch [Wed, 27 Apr 2005 07:59:17 +0000 (07:59 +0000)]
add missing parentheses
Bodo Möller [Mon, 25 Apr 2005 21:42:26 +0000 (21:42 +0000)]
update
Bodo Möller [Mon, 25 Apr 2005 21:36:21 +0000 (21:36 +0000)]
remove extra whitespace; mention MDC2 patent
Andy Polyakov [Sun, 24 Apr 2005 21:17:53 +0000 (21:17 +0000)]
Avoid L1 cache aliasing even between key and S-boxes. From HEAD.
Dr. Stephen Henson [Sun, 24 Apr 2005 02:14:25 +0000 (02:14 +0000)]
Recognize zlib and krb5 options in mk1mf.pl
Nils Larsch [Sat, 23 Apr 2005 12:46:24 +0000 (12:46 +0000)]
fix typo
Dr. Stephen Henson [Fri, 22 Apr 2005 13:21:37 +0000 (13:21 +0000)]
Update libeay.num
Dr. Stephen Henson [Fri, 22 Apr 2005 13:17:49 +0000 (13:17 +0000)]
New function BN_MONT_CTX_set_locked, to set montgomery parameters in a
threadsafe manner.
Modify or add calls to use it in rsa, dsa and dh algorithms.
Andy Polyakov [Fri, 22 Apr 2005 12:15:38 +0000 (12:15 +0000)]
Move some variables to .bss.
Andy Polyakov [Fri, 22 Apr 2005 11:53:30 +0000 (11:53 +0000)]
Avoid aliasing between stack frames and S-boxes. Compress prefetch code.
From HEAD.
Dr. Stephen Henson [Fri, 22 Apr 2005 01:06:59 +0000 (01:06 +0000)]
Remove defunct FIPS_allow_md5() and related functions.
Dr. Stephen Henson [Thu, 21 Apr 2005 00:42:55 +0000 (00:42 +0000)]
Don't use kerberos library locations on windows.
Dr. Stephen Henson [Wed, 20 Apr 2005 17:06:20 +0000 (17:06 +0000)]
Fix from HEAD.
Dr. Stephen Henson [Wed, 20 Apr 2005 16:27:57 +0000 (16:27 +0000)]
Ignore zlib related options in mk1mf.pl
Dr. Stephen Henson [Wed, 20 Apr 2005 00:00:23 +0000 (00:00 +0000)]
Fix from HEAD.
Andy Polyakov [Tue, 19 Apr 2005 22:21:28 +0000 (22:21 +0000)]
Enable shared link on HP-UX.
Andy Polyakov [Tue, 19 Apr 2005 15:17:30 +0000 (15:17 +0000)]
Complete the transition C-code hashes.
Andy Polyakov [Tue, 19 Apr 2005 15:11:59 +0000 (15:11 +0000)]
Maintain fingerprint hashes as C source.
Dr. Stephen Henson [Mon, 18 Apr 2005 16:34:21 +0000 (16:34 +0000)]
Remove obsolete fingerprint.sha1 files and associated scripts. Delete test
in fips/sha1/Makefile: the top level test checks the same files.
Dr. Stephen Henson [Mon, 18 Apr 2005 13:02:19 +0000 (13:02 +0000)]
Pick up definition of FIPS_mode() in fips.h to avoid warnings.
Andy Polyakov [Mon, 18 Apr 2005 00:22:40 +0000 (00:22 +0000)]
Minor fips const-ification.
Andy Polyakov [Sun, 17 Apr 2005 23:26:40 +0000 (23:26 +0000)]
Resolve minor binary compatibility issues in fips.
Andy Polyakov [Sun, 17 Apr 2005 22:54:16 +0000 (22:54 +0000)]
Throw in fips/aes/asm/fips-ax86-elf.s.
Andy Polyakov [Sun, 17 Apr 2005 22:35:34 +0000 (22:35 +0000)]
Regenerate fips/des/asm/fips-dx86-elf.s with -fPIC flag.
Dr. Stephen Henson [Sun, 17 Apr 2005 22:21:10 +0000 (22:21 +0000)]
Return 0 for successful hash check.
Andy Polyakov [Sun, 17 Apr 2005 22:17:51 +0000 (22:17 +0000)]
Rename fips/sha1/sx86-elf.s to fips/sha1/fips-sx86-elf.s.
Andy Polyakov [Sun, 17 Apr 2005 22:00:35 +0000 (22:00 +0000)]
Bring back fips_standalone_sha1.
Dr. Stephen Henson [Sun, 17 Apr 2005 12:37:08 +0000 (12:37 +0000)]
Modify checkhash.pl so it can be run standalone or included as a funtion
in another perl script.
Dr. Stephen Henson [Sun, 17 Apr 2005 12:35:57 +0000 (12:35 +0000)]
Include user32.lib to import MessageBoxIndirect
Richard Levitte [Sun, 17 Apr 2005 09:15:33 +0000 (09:15 +0000)]
Apparently, isascii() is an X/Open function, so to get it properly
declared, we need to define _XOPEN_SOURCE before including ctype.h.
Ported from HEAD.
Nils Larsch [Fri, 15 Apr 2005 16:00:29 +0000 (16:00 +0000)]
EVP_CIPHER_CTX_init is a void function + fix typo
PR: 1044 + 1045
Dr. Stephen Henson [Fri, 15 Apr 2005 11:27:29 +0000 (11:27 +0000)]
Update hash checking in makefiles to use new perl script.
Dr. Stephen Henson [Thu, 14 Apr 2005 22:59:17 +0000 (22:59 +0000)]
Fix from HEAD.
Dr. Stephen Henson [Thu, 14 Apr 2005 20:44:06 +0000 (20:44 +0000)]
Perl script that checks or rebuilds FIPS hash files. This works on
both Unix and Windows.
Merge all FIPS hash files into a single hash file fips/fips.sha1
Andy Polyakov [Wed, 13 Apr 2005 23:53:19 +0000 (23:53 +0000)]
Final touch to mingw shared.
Andy Polyakov [Wed, 13 Apr 2005 22:47:50 +0000 (22:47 +0000)]
Move cygcrypto.dll above cygwin.dll.
Andy Polyakov [Wed, 13 Apr 2005 21:48:12 +0000 (21:48 +0000)]
More cover-ups, removing OPENSSL_GLOBAL/EXTERNS.
Andy Polyakov [Wed, 13 Apr 2005 21:07:21 +0000 (21:07 +0000)]
Final(?) touches to mingw shared support. .dll.a as shared lib extention might
appear controversial, but that's the only way to avoid relinks...
Andy Polyakov [Wed, 13 Apr 2005 20:54:07 +0000 (20:54 +0000)]
Zap OPENSSL_EXTERN on symbols, which are meant to remain local to DLL.
Comment in HEAD commit was wrong!
Andy Polyakov [Wed, 13 Apr 2005 15:41:56 +0000 (15:41 +0000)]
Fix typos.
Andy Polyakov [Wed, 13 Apr 2005 08:49:51 +0000 (08:49 +0000)]
Backport OPENSSL_NONPIC_relocated from HEAD.
Andy Polyakov [Wed, 13 Apr 2005 07:40:22 +0000 (07:40 +0000)]
Shared support update, rather backport from HEAD.
Andy Polyakov [Wed, 13 Apr 2005 07:02:59 +0000 (07:02 +0000)]
OPENSSL_showfatal, backport from HEAD.
Dr. Stephen Henson [Tue, 12 Apr 2005 13:47:58 +0000 (13:47 +0000)]
Rebuild error codes.
Dr. Stephen Henson [Tue, 12 Apr 2005 13:30:45 +0000 (13:30 +0000)]
Include error library value in C error source files instead of fixing up
at runtime.
Dr. Stephen Henson [Tue, 12 Apr 2005 11:34:21 +0000 (11:34 +0000)]
Ooops, shoudln't have deleted this line.
Dr. Stephen Henson [Mon, 11 Apr 2005 22:22:51 +0000 (22:22 +0000)]
Not sure what this is doing here...
Richard Levitte [Mon, 11 Apr 2005 15:15:09 +0000 (15:15 +0000)]
Now that things have been tagged properly, make preparations for the
next version in the 0.9.7 branch.
Richard Levitte [Mon, 11 Apr 2005 15:10:07 +0000 (15:10 +0000)]
Prepare to release 0.9.7g.
The tag till be OpenSSL_0_9_7g.
Richard Levitte [Mon, 11 Apr 2005 15:05:54 +0000 (15:05 +0000)]
Add a NEWS item for 0.9.7g.
Richard Levitte [Mon, 11 Apr 2005 15:03:37 +0000 (15:03 +0000)]
Merge RFC3820 source into mainstream 0.9.7-stable.
Richard Levitte [Mon, 11 Apr 2005 14:18:14 +0000 (14:18 +0000)]
Add emacs cache files to .cvsignore.
cvs2svn [Mon, 11 Apr 2005 14:17:08 +0000 (14:17 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Mon, 11 Apr 2005 14:17:07 +0000 (14:17 +0000)]
Add emacs cache files to .cvsignore.
Dr. Stephen Henson [Sun, 10 Apr 2005 23:41:09 +0000 (23:41 +0000)]
Move allow_proxy_certs declaration to start of function.
Dr. Stephen Henson [Sat, 9 Apr 2005 23:55:55 +0000 (23:55 +0000)]
Make kerberos ciphersuite code work with newer header files
Dr. Stephen Henson [Sat, 9 Apr 2005 23:52:53 +0000 (23:52 +0000)]
Typo..
Dr. Stephen Henson [Sat, 9 Apr 2005 23:32:37 +0000 (23:32 +0000)]
Make kerberos ciphersuites work with newer headers.
cvs2svn [Sat, 9 Apr 2005 16:07:13 +0000 (16:07 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Sat, 9 Apr 2005 16:07:12 +0000 (16:07 +0000)]
Added restrictions on the use of proxy certificates, as they may pose
a security threat on unexpecting applications. Document and test.
Nils Larsch [Fri, 8 Apr 2005 22:52:42 +0000 (22:52 +0000)]
add support for DER encoded private keys to SSL_CTX_use_PrivateKey_file()
and SSL_use_PrivateKey_file()
PR: 1035
Submitted by: Walter Goulet
Reviewed by: Nils Larsch
Nils Larsch [Fri, 8 Apr 2005 22:49:57 +0000 (22:49 +0000)]
improve docu of SSL_CTX_use_PrivateKey()
Nils Larsch [Thu, 7 Apr 2005 23:19:17 +0000 (23:19 +0000)]
get rid of very buggy and very imcomplete DH cert support
Reviewed by: Bodo Moeller
Nils Larsch [Thu, 7 Apr 2005 22:53:35 +0000 (22:53 +0000)]
make sure error queue is totally emptied
PR: 359
Nils Larsch [Thu, 7 Apr 2005 22:48:33 +0000 (22:48 +0000)]
const fixes
Andy Polyakov [Thu, 7 Apr 2005 20:26:10 +0000 (20:26 +0000)]
Recognize MSYS/MINGW environment.
Andy Polyakov [Thu, 7 Apr 2005 20:24:29 +0000 (20:24 +0000)]
Recognize MSYS/MINGW environment.
Andy Polyakov [Thu, 7 Apr 2005 18:39:45 +0000 (18:39 +0000)]
Implement OPENSSL_showfatal and make it Win32 GUI and service aware
[meaning that it will detect in which context application is running
and either write message to stderr, post a dialog or log an event].
Andy Polyakov [Thu, 7 Apr 2005 16:06:03 +0000 (16:06 +0000)]
Engage DllMain on Windows. Partial backport from HEAD. Unlike HEAD,
it doesn't get engaged on __CYGWIN__, because I'm not sure is *all*
Cygwin installations are equipped with windows.h...
Andy Polyakov [Thu, 7 Apr 2005 15:51:55 +0000 (15:51 +0000)]
Harmonize cygwin/mingw and VC targets.
Andy Polyakov [Wed, 6 Apr 2005 09:45:42 +0000 (09:45 +0000)]
+45% RC4 performance boost on Intel EM64T core. Unrolled loop providing
further +35% will follow...
Submitted by: Zou Nanhai
Nils Larsch [Tue, 5 Apr 2005 19:11:19 +0000 (19:11 +0000)]
some const fixes
Nils Larsch [Tue, 5 Apr 2005 18:17:13 +0000 (18:17 +0000)]
update progs.pl to reflect changes in progs.h
Nils Larsch [Tue, 5 Apr 2005 11:17:03 +0000 (11:17 +0000)]
fix example in docu
PR: 800
Nils Larsch [Tue, 5 Apr 2005 11:16:34 +0000 (11:16 +0000)]
fix example in docu
PR: 800
Nils Larsch [Tue, 5 Apr 2005 10:29:43 +0000 (10:29 +0000)]
some const fixes and cleanup
Nils Larsch [Mon, 4 Apr 2005 18:15:59 +0000 (18:15 +0000)]
remove unused recp method
Andy Polyakov [Mon, 4 Apr 2005 17:10:53 +0000 (17:10 +0000)]
Extend Solaris x86 support to amd64.
Andy Polyakov [Mon, 4 Apr 2005 17:07:16 +0000 (17:07 +0000)]
Solaris x86 linker erroneously pads .init segment with zeros instead of
nops, which causes SEGV at startup. So I don't align anymore.
Andy Polyakov [Mon, 4 Apr 2005 17:05:06 +0000 (17:05 +0000)]
Some non-GNU compilers (such as Sun C) define __i386.
Bodo Möller [Sun, 3 Apr 2005 23:53:48 +0000 (23:53 +0000)]
HISTORY section: point out change of default digest
Andy Polyakov [Sun, 3 Apr 2005 19:16:58 +0000 (19:16 +0000)]
Extend Solaris x86 support to amd64. Note that if both gcc and Sun C
are installed, it defaults to gcc, because it beats Sun C on every
benchmark. Also note that gcc shared build was verified to work woth
Sun C...
Andy Polyakov [Sun, 3 Apr 2005 18:54:46 +0000 (18:54 +0000)]
Downsync from HEAD.
PR: 1031
Andy Polyakov [Sun, 3 Apr 2005 18:53:29 +0000 (18:53 +0000)]
Make bn/asm/x86_64-gcc.c gcc4 savvy. +r is likely to be initially
introduced for a reason [like bug in initial gcc port], but proposed
=&r is treated correctly by senior 3.2, so we can assume it's safe now.
PR: 1031
Ben Laurie [Sun, 3 Apr 2005 16:38:22 +0000 (16:38 +0000)]
If input is bad, we still need to clear the buffer.
Nils Larsch [Sat, 2 Apr 2005 09:29:15 +0000 (09:29 +0000)]
use SHA-1 as the default digest for the apps/openssl commands
Dr. Stephen Henson [Fri, 1 Apr 2005 21:56:15 +0000 (21:56 +0000)]
Typo
Dr. Stephen Henson [Fri, 1 Apr 2005 21:55:13 +0000 (21:55 +0000)]
Typo.
Nils Larsch [Fri, 1 Apr 2005 17:50:09 +0000 (17:50 +0000)]
really clear the error queue here
PR: 860
Nils Larsch [Fri, 1 Apr 2005 17:49:33 +0000 (17:49 +0000)]
really clear the error queue here
PR: 860
Nils Larsch [Fri, 1 Apr 2005 17:35:32 +0000 (17:35 +0000)]
use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.
PR: 658
Nils Larsch [Fri, 1 Apr 2005 17:33:39 +0000 (17:33 +0000)]
use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.
PR: 658
Ben Laurie [Thu, 31 Mar 2005 13:57:54 +0000 (13:57 +0000)]
Consistency.
Richard Levitte [Thu, 31 Mar 2005 12:26:29 +0000 (12:26 +0000)]
Add a file with fingerprints that have recently been used to sign
OpenSSL distributions, or are about to. This has been requested a
little now and then by users, for years :-/...
cvs2svn [Thu, 31 Mar 2005 11:51:48 +0000 (11:51 +0000)]
This commit was manufactured by cvs2svn to create branch
'OpenSSL_0_9_7-stable'.
Richard Levitte [Thu, 31 Mar 2005 11:51:47 +0000 (11:51 +0000)]
Add a file with fingerprints that have recently been used to sign
OpenSSL distributions, or are about to. This has been requested a
little now and then by users, for years :-/...
Ben Laurie [Thu, 31 Mar 2005 10:55:55 +0000 (10:55 +0000)]
Simplicate and add lightness.
Ben Laurie [Thu, 31 Mar 2005 10:34:59 +0000 (10:34 +0000)]
Get rid of irritating noise.
Ben Laurie [Thu, 31 Mar 2005 09:26:39 +0000 (09:26 +0000)]
Give everything prototypes (well, everything that's actually used).