oweals/openssl.git
19 years agoMinor cryptlib.c update: compiler warnings in OPENSSL_showfatal and
Andy Polyakov [Wed, 13 Apr 2005 06:55:42 +0000 (06:55 +0000)]
Minor cryptlib.c update: compiler warnings in OPENSSL_showfatal and
OPENSSL_stderr stub.

19 years agoUpdate FAQ.
Dr. Stephen Henson [Tue, 12 Apr 2005 16:38:00 +0000 (16:38 +0000)]
Update FAQ.

19 years agoMore overwritten stuff...
Dr. Stephen Henson [Tue, 12 Apr 2005 16:36:36 +0000 (16:36 +0000)]
More overwritten stuff...

19 years agoReplace overwritten lines before error codes.
Dr. Stephen Henson [Tue, 12 Apr 2005 16:17:53 +0000 (16:17 +0000)]
Replace overwritten lines before error codes.

19 years agoRebuild error codes.
Dr. Stephen Henson [Tue, 12 Apr 2005 16:15:22 +0000 (16:15 +0000)]
Rebuild error codes.

19 years agoInclude error library value in C error source files instead of fixing up
Dr. Stephen Henson [Tue, 12 Apr 2005 13:31:14 +0000 (13:31 +0000)]
Include error library value in C error source files instead of fixing up
at runtime.

19 years agoinclude limits.h for UINT_MAX etc.
Nils Larsch [Mon, 11 Apr 2005 20:59:58 +0000 (20:59 +0000)]
include limits.h for UINT_MAX etc.

19 years agoAdd a NEWS item for 0.9.7g.
Richard Levitte [Mon, 11 Apr 2005 15:05:45 +0000 (15:05 +0000)]
Add a NEWS item for 0.9.7g.

19 years agoAdd emacs cache files to .cvsignore.
Richard Levitte [Mon, 11 Apr 2005 14:17:07 +0000 (14:17 +0000)]
Add emacs cache files to .cvsignore.

19 years agoMove allow_proxy_certs declaration to start of function.
Dr. Stephen Henson [Sun, 10 Apr 2005 23:41:09 +0000 (23:41 +0000)]
Move allow_proxy_certs declaration to start of function.

19 years agoMake kerberos ciphersuite code work with newer header files
Dr. Stephen Henson [Sat, 9 Apr 2005 23:55:55 +0000 (23:55 +0000)]
Make kerberos ciphersuite code work with newer header files

19 years agoAdded restrictions on the use of proxy certificates, as they may pose
Richard Levitte [Sat, 9 Apr 2005 16:07:12 +0000 (16:07 +0000)]
Added restrictions on the use of proxy certificates, as they may pose
a security threat on unexpecting applications.  Document and test.

19 years agoadd support for DER encoded private keys to SSL_CTX_use_PrivateKey_file()
Nils Larsch [Fri, 8 Apr 2005 22:52:42 +0000 (22:52 +0000)]
add support for DER encoded private keys to SSL_CTX_use_PrivateKey_file()
and SSL_use_PrivateKey_file()

PR: 1035
Submitted by: Walter Goulet
Reviewed by:  Nils Larsch

19 years agoimprove docu of SSL_CTX_use_PrivateKey()
Nils Larsch [Fri, 8 Apr 2005 22:49:57 +0000 (22:49 +0000)]
improve docu of SSL_CTX_use_PrivateKey()

19 years agoget rid of very buggy and very imcomplete DH cert support
Nils Larsch [Thu, 7 Apr 2005 23:19:17 +0000 (23:19 +0000)]
get rid of very buggy and very imcomplete DH cert support

Reviewed by: Bodo Moeller

19 years agomake sure error queue is totally emptied
Nils Larsch [Thu, 7 Apr 2005 22:53:35 +0000 (22:53 +0000)]
make sure error queue is totally emptied

PR: 359

19 years agoconst fixes
Nils Larsch [Thu, 7 Apr 2005 22:48:33 +0000 (22:48 +0000)]
const fixes

19 years agoRecognize MSYS/MINGW environment.
Andy Polyakov [Thu, 7 Apr 2005 20:24:29 +0000 (20:24 +0000)]
Recognize MSYS/MINGW environment.

19 years agoImplement OPENSSL_showfatal and make it Win32 GUI and service aware
Andy Polyakov [Thu, 7 Apr 2005 18:39:45 +0000 (18:39 +0000)]
Implement OPENSSL_showfatal and make it Win32 GUI and service aware
[meaning that it will detect in which context application is running
and either write message to stderr, post a dialog or log an event].

19 years agoHarmonize cygwin/mingw and VC targets.
Andy Polyakov [Thu, 7 Apr 2005 15:51:55 +0000 (15:51 +0000)]
Harmonize cygwin/mingw and VC targets.

19 years ago+45% RC4 performance boost on Intel EM64T core. Unrolled loop providing
Andy Polyakov [Wed, 6 Apr 2005 09:45:42 +0000 (09:45 +0000)]
+45% RC4 performance boost on Intel EM64T core. Unrolled loop providing
further +35% will follow...

Submitted by: Zou Nanhai

19 years agosome const fixes
Nils Larsch [Tue, 5 Apr 2005 19:11:19 +0000 (19:11 +0000)]
some const fixes

19 years agoupdate progs.pl to reflect changes in progs.h
Nils Larsch [Tue, 5 Apr 2005 18:17:13 +0000 (18:17 +0000)]
update progs.pl to reflect changes in progs.h

19 years agofix example in docu
Nils Larsch [Tue, 5 Apr 2005 11:17:03 +0000 (11:17 +0000)]
fix example in docu

PR: 800

19 years agosome const fixes and cleanup
Nils Larsch [Tue, 5 Apr 2005 10:29:43 +0000 (10:29 +0000)]
some const fixes and cleanup

19 years agoremove unused recp method
Nils Larsch [Mon, 4 Apr 2005 18:15:59 +0000 (18:15 +0000)]
remove unused recp method

19 years agoExtend Solaris x86 support to amd64.
Andy Polyakov [Mon, 4 Apr 2005 17:10:53 +0000 (17:10 +0000)]
Extend Solaris x86 support to amd64.

19 years agoSolaris x86 linker erroneously pads .init segment with zeros instead of
Andy Polyakov [Mon, 4 Apr 2005 17:07:16 +0000 (17:07 +0000)]
Solaris x86 linker erroneously pads .init segment with zeros instead of
nops, which causes SEGV at startup. So I don't align anymore.

19 years agoSome non-GNU compilers (such as Sun C) define __i386.
Andy Polyakov [Mon, 4 Apr 2005 17:05:06 +0000 (17:05 +0000)]
Some non-GNU compilers (such as Sun C) define __i386.

19 years agoHISTORY section: point out change of default digest
Bodo Möller [Sun, 3 Apr 2005 23:53:48 +0000 (23:53 +0000)]
HISTORY section: point out change of default digest

19 years agoMake bn/asm/x86_64-gcc.c gcc4 savvy. +r is likely to be initially
Andy Polyakov [Sun, 3 Apr 2005 18:53:29 +0000 (18:53 +0000)]
Make bn/asm/x86_64-gcc.c gcc4 savvy. +r is likely to be initially
introduced for a reason [like bug in initial gcc port], but proposed
=&r is treated correctly by senior 3.2, so we can assume it's safe now.
PR: 1031

19 years agoIf input is bad, we still need to clear the buffer.
Ben Laurie [Sun, 3 Apr 2005 16:38:22 +0000 (16:38 +0000)]
If input is bad, we still need to clear the buffer.

19 years agouse SHA-1 as the default digest for the apps/openssl commands
Nils Larsch [Sat, 2 Apr 2005 09:29:15 +0000 (09:29 +0000)]
use SHA-1 as the default digest for the apps/openssl commands

19 years agoTypo
Dr. Stephen Henson [Fri, 1 Apr 2005 21:56:15 +0000 (21:56 +0000)]
Typo

19 years agoreally clear the error queue here
Nils Larsch [Fri, 1 Apr 2005 17:50:09 +0000 (17:50 +0000)]
really clear the error queue here

PR: 860

19 years agouse SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.
Nils Larsch [Fri, 1 Apr 2005 17:35:32 +0000 (17:35 +0000)]
use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.

PR: 658

19 years agoConsistency.
Ben Laurie [Thu, 31 Mar 2005 13:57:54 +0000 (13:57 +0000)]
Consistency.

19 years agoAdd a file with fingerprints that have recently been used to sign
Richard Levitte [Thu, 31 Mar 2005 11:51:47 +0000 (11:51 +0000)]
Add a file with fingerprints that have recently been used to sign
OpenSSL distributions, or are about to.  This has been requested a
little now and then by users, for years :-/...

19 years agoSimplicate and add lightness.
Ben Laurie [Thu, 31 Mar 2005 10:55:55 +0000 (10:55 +0000)]
Simplicate and add lightness.

19 years agoGet rid of irritating noise.
Ben Laurie [Thu, 31 Mar 2005 10:34:59 +0000 (10:34 +0000)]
Get rid of irritating noise.

19 years agoGive everything prototypes (well, everything that's actually used).
Ben Laurie [Thu, 31 Mar 2005 09:26:39 +0000 (09:26 +0000)]
Give everything prototypes (well, everything that's actually used).

19 years agofix header
Nils Larsch [Wed, 30 Mar 2005 21:38:29 +0000 (21:38 +0000)]
fix header

19 years agoMakefile.ssl doesn't exist anymore
Nils Larsch [Wed, 30 Mar 2005 21:37:05 +0000 (21:37 +0000)]
Makefile.ssl doesn't exist anymore

19 years agoTake account of Makefile.ssl removal.
Ben Laurie [Wed, 30 Mar 2005 14:44:50 +0000 (14:44 +0000)]
Take account of Makefile.ssl removal.

19 years agoMake tags target useful.
Ben Laurie [Wed, 30 Mar 2005 14:19:21 +0000 (14:19 +0000)]
Make tags target useful.

19 years agoDon't debug.
Ben Laurie [Wed, 30 Mar 2005 14:15:14 +0000 (14:15 +0000)]
Don't debug.

19 years agoBlow away Makefile.ssl.
Ben Laurie [Wed, 30 Mar 2005 13:05:57 +0000 (13:05 +0000)]
Blow away Makefile.ssl.

19 years agoupdate docs (recent constification)
Nils Larsch [Wed, 30 Mar 2005 11:50:14 +0000 (11:50 +0000)]
update docs (recent constification)

19 years agoConstification.
Ben Laurie [Wed, 30 Mar 2005 10:26:02 +0000 (10:26 +0000)]
Constification.

19 years agothe second argument of EVP_SealInit is const
Nils Larsch [Tue, 29 Mar 2005 17:50:08 +0000 (17:50 +0000)]
the second argument of EVP_SealInit is const

19 years agowhen building with OPENSSL_NO_DEPRECATED defined BN_zero is a macro
Nils Larsch [Mon, 28 Mar 2005 15:06:29 +0000 (15:06 +0000)]
when building with OPENSSL_NO_DEPRECATED defined BN_zero is a macro
which cannot be evaluated in an if statement

19 years agoHarmonize with CHANGES as distributed in OpenSSL 0.9.7f.
Bodo Möller [Thu, 24 Mar 2005 01:37:07 +0000 (01:37 +0000)]
Harmonize with CHANGES as distributed in OpenSSL 0.9.7f.

19 years agoundo Cygwin change
Ulf Möller [Thu, 24 Mar 2005 00:14:59 +0000 (00:14 +0000)]
undo Cygwin change

19 years agoChange the memory leak FAQ entry to describe the levels of thread safety in each...
Richard Levitte [Wed, 23 Mar 2005 21:14:59 +0000 (21:14 +0000)]
Change the memory leak FAQ entry to describe the levels of thread safety in each function

19 years agoUpdate FAQ
Dr. Stephen Henson [Tue, 22 Mar 2005 20:10:38 +0000 (20:10 +0000)]
Update FAQ

19 years agoDoc fixes.
Dr. Stephen Henson [Tue, 22 Mar 2005 17:55:33 +0000 (17:55 +0000)]
Doc fixes.

19 years agotest, remove unnecessary const cast
Nils Larsch [Tue, 22 Mar 2005 17:55:18 +0000 (17:55 +0000)]
test, remove unnecessary const cast

19 years agoEnsure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server and
Dr. Stephen Henson [Tue, 22 Mar 2005 14:11:06 +0000 (14:11 +0000)]
Ensure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server and
client random values.

19 years agoThere are cases when there are no files left to verify. Make sure to
Richard Levitte [Mon, 21 Mar 2005 13:52:12 +0000 (13:52 +0000)]
There are cases when there are no files left to verify.  Make sure to
handle that properly.

19 years agoadd new curves to the loop (with some cleanup from me)
Nils Larsch [Sun, 20 Mar 2005 23:12:13 +0000 (23:12 +0000)]
add new curves to the loop (with some cleanup from me)

Submitted by: Jean-Luc Duval
Reviewed by:  Nils Larsch

19 years agosome const fixes
Nils Larsch [Sun, 20 Mar 2005 22:56:07 +0000 (22:56 +0000)]
some const fixes

19 years agoUse Windows randomness code on Cygwin
Ulf Möller [Sat, 19 Mar 2005 11:39:17 +0000 (11:39 +0000)]
Use Windows randomness code on Cygwin

19 years agofix breakage for Perl versions that do boolean operations on long words
Ulf Möller [Sat, 19 Mar 2005 11:13:30 +0000 (11:13 +0000)]
fix breakage for Perl versions that do boolean operations on long words

19 years agotypo
Ulf Möller [Sat, 19 Mar 2005 10:19:45 +0000 (10:19 +0000)]
typo

19 years agoAdded HOWTO about proxy certificates.
Richard Levitte [Mon, 14 Mar 2005 15:39:25 +0000 (15:39 +0000)]
Added HOWTO about proxy certificates.

19 years ago"make depend". This takes into account the algorithms that are now
Bodo Möller [Sun, 13 Mar 2005 19:49:47 +0000 (19:49 +0000)]
"make depend".  This takes into account the algorithms that are now
disabled by default (MDC2 and RC5), which until now were skipped
by "make links" and yet supposedly required by some of the Makefiles,
meaning that the recent snapshots failed to compile.

Problem reported by Nils Larsch.

19 years agoIt seems that Configure revision 1.404 broke "make depend" by hiding
Bodo Möller [Sun, 13 Mar 2005 19:46:58 +0000 (19:46 +0000)]
It seems that Configure revision 1.404 broke "make depend" by hiding
from it which algorithms were disabled.  With these new changes,
"make depend" will properly take into account algorithms that are skipped.

19 years agoCygwin to use DSO_FLFCN and mingw to use DSO_WIN32.
Andy Polyakov [Sat, 12 Mar 2005 11:28:41 +0000 (11:28 +0000)]
Cygwin to use DSO_FLFCN and mingw to use DSO_WIN32.

19 years agoAvoid re-build avalanches with HP-UX make.
Andy Polyakov [Sat, 12 Mar 2005 09:12:44 +0000 (09:12 +0000)]
Avoid re-build avalanches with HP-UX make.

19 years agofix potential memory leak when allocation fails
Bodo Möller [Fri, 11 Mar 2005 09:01:24 +0000 (09:01 +0000)]
fix potential memory leak when allocation fails

PR: 801
Submitted by: Nils Larsch

19 years agoFix typo
Bodo Möller [Wed, 9 Mar 2005 19:08:02 +0000 (19:08 +0000)]
Fix typo

PR: 1017
Submitted by: ciresh@yahoo.com
Reviewed by: Nils Larsch

19 years agoTake MDC2 patent into account.
Bodo Möller [Wed, 2 Mar 2005 20:22:58 +0000 (20:22 +0000)]
Take MDC2 patent into account.

19 years agoIn addition to RC5, also exclude MDC2 from compilation unless
Bodo Möller [Wed, 2 Mar 2005 20:11:31 +0000 (20:11 +0000)]
In addition to RC5, also exclude MDC2 from compilation unless
the algorithm is explicitly requested.

19 years agoChange ./Configure so that certain algorithms can be disabled by default.
Bodo Möller [Tue, 22 Feb 2005 10:29:51 +0000 (10:29 +0000)]
Change ./Configure so that certain algorithms can be disabled by default.
This is now the case for RC5.

As a side effect, the OPTIONS in the Makefile will usually look a
little different now, but they are essentially only for information
anyway.

19 years agoFix typo on blowfish manual page
Lutz Jänicke [Sat, 19 Feb 2005 10:26:18 +0000 (10:26 +0000)]
Fix typo on blowfish manual page
PR: 1010
Submitted by: Marc Balmer <mbalmer@openbsd.org>

19 years agoFix hang in EGD/PRNGD query when communication socket is closed
Lutz Jänicke [Sat, 19 Feb 2005 10:19:07 +0000 (10:19 +0000)]
Fix hang in EGD/PRNGD query when communication socket is closed
prematurely by EGD/PRNGD.
PR: 1014
Submitted by: Darren Tucker <dtucker@zip.com.au>

19 years agoFix possible memory leak.
Dr. Stephen Henson [Mon, 14 Feb 2005 21:53:24 +0000 (21:53 +0000)]
Fix possible memory leak.

19 years agoRemove unused assembler modules.
Andy Polyakov [Sun, 6 Feb 2005 13:43:02 +0000 (13:43 +0000)]
Remove unused assembler modules.

19 years agoThis patch was "ignited" by OpenBSD 3>=4 support. They've switched to ELF
Andy Polyakov [Sun, 6 Feb 2005 13:23:34 +0000 (13:23 +0000)]
This patch was "ignited" by OpenBSD 3>=4 support. They've switched to ELF
and GNU binutils, but kept BSD make... And I took the opportunity to
unify other targets to this common least denominator...

19 years agoReliable BSD-x86-elf detection in ./config.
Andy Polyakov [Sun, 6 Feb 2005 13:20:23 +0000 (13:20 +0000)]
Reliable BSD-x86-elf detection in ./config.

19 years agoMake Makefile.shared BSD make-friendly, remove more redundant -lc, set up
Andy Polyakov [Sun, 6 Feb 2005 13:18:40 +0000 (13:18 +0000)]
Make Makefile.shared BSD make-friendly, remove more redundant -lc, set up
OBJECT_MODE for AIX.

19 years agoMake util/shlib_wrap.sh [Open]BSD-friendly.
Andy Polyakov [Sun, 6 Feb 2005 13:15:21 +0000 (13:15 +0000)]
Make util/shlib_wrap.sh [Open]BSD-friendly.

19 years agoMention no-sse2 option in INSTALL note.
Andy Polyakov [Sun, 6 Feb 2005 13:10:23 +0000 (13:10 +0000)]
Mention no-sse2 option in INSTALL note.

19 years agoIn mkdef.pl ignore trailing whitespace in #ifdef lines
Dr. Stephen Henson [Sat, 5 Feb 2005 17:22:14 +0000 (17:22 +0000)]
In mkdef.pl ignore trailing whitespace in #ifdef lines

19 years agoDrop redundant -lc from a number of rules in Makefile.shared. It's
Andy Polyakov [Thu, 3 Feb 2005 22:40:40 +0000 (22:40 +0000)]
Drop redundant -lc from a number of rules in Makefile.shared. It's
perfectly safe [compiler driver adds it] and in some situation even
perfectly appropriate [mixing -pthread and -lc on FreeBSD can have
lethal effect on apps/openssl]. I'd say we should get rid of more,
but I remove those I can test myself...

19 years agoShut whiny make's up.
Andy Polyakov [Thu, 3 Feb 2005 10:19:59 +0000 (10:19 +0000)]
Shut whiny make's up.

19 years agoAddress run-time linker problems: LD_PRELOAD issue on multi-ABI platforms
Andy Polyakov [Tue, 1 Feb 2005 23:48:37 +0000 (23:48 +0000)]
Address run-time linker problems: LD_PRELOAD issue on multi-ABI platforms
and SafeDllSearchMode in Windows.

Submitted by: Richard Levitte

19 years agoThe first argument to load_iv should really be a char ** instead of an
Richard Levitte [Thu, 27 Jan 2005 11:42:28 +0000 (11:42 +0000)]
The first argument to load_iv should really be a char ** instead of an
unsigned char **, since it points at text.

Thanks to Nils Larsch <nils.larsch@cybertrust.com> for pointing out
the inelegance of our code :-)

19 years agoOops, == should really be = when used with test ([ and ]).
Richard Levitte [Thu, 27 Jan 2005 10:59:36 +0000 (10:59 +0000)]
Oops, == should really be = when used with test ([ and ]).

I guess I use bash too much...

Thanks to Peter Sylvester <Peter.Sylvester@edelweb.fr> for pointing it
out to me.

19 years agoCheck for errors from EVP_VerifyInit_ex(), or EVP_VerifyUpdate might
Richard Levitte [Thu, 27 Jan 2005 01:49:25 +0000 (01:49 +0000)]
Check for errors from EVP_VerifyInit_ex(), or EVP_VerifyUpdate might
cause a segfault...  This was uncovered because EVP_VerifyInit() may fail
in FIPS mode if the wrong algorithm is chosen...

19 years agoGet rid if the annoying warning
Richard Levitte [Thu, 27 Jan 2005 01:47:31 +0000 (01:47 +0000)]
Get rid if the annoying warning

19 years agoThe mix of CFLAGS and LDFLAGS is a bit confusing in my opinion, and
Richard Levitte [Wed, 26 Jan 2005 23:51:20 +0000 (23:51 +0000)]
The mix of CFLAGS and LDFLAGS is a bit confusing in my opinion, and
Makefile.shared was a bit overcomplicated.

Make the shell variables LDFLAGS and SHAREDFLAGS in Makefile.shared
get the values of $(CFLAGS) or $(LDFLAGS) as appropriate depending on
the value the shell variables LDCMD and SHAREDCMD get.  That leaves
much less chance of confusion, since those pairs of shell variables
always are defined together.

19 years agoRespect the fact that most interactive shells don't restore stty settings
Andy Polyakov [Wed, 26 Jan 2005 19:58:15 +0000 (19:58 +0000)]
Respect the fact that most interactive shells don't restore stty settings
and make it work in non-interactive mode...

19 years agoPlease BSD make...
Andy Polyakov [Tue, 25 Jan 2005 22:09:11 +0000 (22:09 +0000)]
Please BSD make...

19 years agoFreeBSD 5 refuses to #include <malloc.h>. Fix compiler warning after
Andy Polyakov [Tue, 25 Jan 2005 22:07:22 +0000 (22:07 +0000)]
FreeBSD 5 refuses to #include <malloc.h>. Fix compiler warning after
http://cvs.openssl.org/chngview?cn=12843.

19 years ago./Configure to respect $thread_cflag variable.
Andy Polyakov [Mon, 24 Jan 2005 15:58:25 +0000 (15:58 +0000)]
./Configure to respect $thread_cflag variable.

19 years agoFold a bunch of linux and *BSD targets into [linux|BSD]-generic[32|64].
Andy Polyakov [Mon, 24 Jan 2005 14:38:14 +0000 (14:38 +0000)]
Fold a bunch of linux and *BSD targets into [linux|BSD]-generic[32|64].
Idea is to provide unified "fall-down" case for all rare platforms out
there. ./config is free to enable some optimizations, such as endianness
specification, specific -mcpu flags...

19 years agoDefault to AES u32 being unsinged int and not long. This improves cache
Andy Polyakov [Mon, 24 Jan 2005 14:22:05 +0000 (14:22 +0000)]
Default to AES u32 being unsinged int and not long. This improves cache
locality on 64-bit platforms (and fixes IA64 assembler-empowered build:-).
The choice is guarded by newly introduced AES_LONG macro, which needs
to be defined only on 16-bit platforms which we don't support (not that
I know of). Meaning that one could as well skip long option altogether.

19 years agoImprove ECB performance (48+14*rounds -> 18+13*rounds) and reserve for
Andy Polyakov [Mon, 24 Jan 2005 14:14:53 +0000 (14:14 +0000)]
Improve ECB performance (48+14*rounds -> 18+13*rounds) and reserve for
hand-coded zero-copy AES_cbc_encrypt.

19 years agolinux-arm target update.
Andy Polyakov [Fri, 21 Jan 2005 10:32:57 +0000 (10:32 +0000)]
linux-arm target update.
PR: 991