oweals/openssl.git
24 years agoRedo and enhance the support for building shared libraries. Currently
Richard Levitte [Fri, 21 Jul 2000 15:08:53 +0000 (15:08 +0000)]
Redo and enhance the support for building shared libraries.  Currently
there's support for building under Linux and True64 (using examples
from the programming manuals), including versioning that is currently
the same as OpenSSL versions but should really be a different series.

With this change, it's up to the users to decide if they want shared
libraries as well as the static ones.  This decision now has to be
done at configuration time (well, not really, those who know what they
do can still do it the same way as before).

The OpenSSL programs (openssl and the test programs) are currently
always linked statically, but this may change in the future in a
configurable manner.  The necessary makefile variables to enable this
are in place.

Also note that I have done absolutely nothing about the Windows target
to get something similar.  On the other hand, DLLs are already the
default there, but without versioning, and I've no idea what the
possibilities for such a thing are there...

24 years agoBugfix: use write locks, not just read locks
Bodo Möller [Fri, 21 Jul 2000 15:07:56 +0000 (15:07 +0000)]
Bugfix: use write locks, not just read locks

24 years agoWe do PKCS8 as well
Richard Levitte [Fri, 21 Jul 2000 12:50:06 +0000 (12:50 +0000)]
We do PKCS8 as well

24 years agooops.
Ulf Möller [Fri, 21 Jul 2000 02:14:15 +0000 (02:14 +0000)]
oops.

24 years agodon't print debug output
Ulf Möller [Fri, 21 Jul 2000 01:13:26 +0000 (01:13 +0000)]
don't print debug output

24 years agoMove RNG initialization to RAND_poll(), and shared definitions to
Ulf Möller [Wed, 19 Jul 2000 21:43:23 +0000 (21:43 +0000)]
Move RNG initialization to RAND_poll(), and shared definitions to
rand_lcl.h

24 years agoRandomness polling function for Win9x.
Ulf Möller [Wed, 19 Jul 2000 21:35:35 +0000 (21:35 +0000)]
Randomness polling function for Win9x.

24 years agoDocument -purpose option in usage string.
Bodo Möller [Sat, 15 Jul 2000 18:10:35 +0000 (18:10 +0000)]
Document -purpose option in usage string.

24 years agoMake req seed the PRNG if signing with
Dr. Stephen Henson [Wed, 12 Jul 2000 23:55:30 +0000 (23:55 +0000)]
Make req seed the PRNG if signing with
an already existing DSA key.

Document the new smime options.

24 years agoFAQ about ar "missing" on Solaris.
Richard Levitte [Tue, 11 Jul 2000 21:44:53 +0000 (21:44 +0000)]
FAQ about ar "missing" on Solaris.

24 years agoAdd an early reference to BN_CTX_new so that the usage of BN_CTX_start
Bodo Möller [Tue, 11 Jul 2000 20:35:45 +0000 (20:35 +0000)]
Add an early reference to BN_CTX_new so that the usage of BN_CTX_start
is easier to grasp.

24 years agoFix some typose in the i2d/d2i functions that
Dr. Stephen Henson [Mon, 10 Jul 2000 18:33:05 +0000 (18:33 +0000)]
Fix some typose in the i2d/d2i functions that
call the i2c/c2i (they were not using the
content length for the headers).

Fix ASN1 long form tag encoding. This never
worked but it was never tested since it is
only used for tags > 30.

New options to smime program to allow the
PKCS#7 format to be specified and the content
supplied externally.

24 years agoCorrected small bug that could add ',L' when it shouldn't
Richard Levitte [Sat, 8 Jul 2000 07:56:12 +0000 (07:56 +0000)]
Corrected small bug that could add ',L' when it shouldn't

24 years agoNew ASN1 functions that just deal with
Dr. Stephen Henson [Fri, 7 Jul 2000 13:24:36 +0000 (13:24 +0000)]
New ASN1 functions that just deal with
content octets, not tag+length.

24 years agoMore experiments show that you can set your data segment size soft
Richard Levitte [Wed, 5 Jul 2000 17:46:58 +0000 (17:46 +0000)]
More experiments show that you can set your data segment size soft
limit higher and thereby get through compilation of sha_dgst.c.

24 years agoChange the FAQ entry a bit, giving the details as I observed them.
Richard Levitte [Wed, 5 Jul 2000 16:39:04 +0000 (16:39 +0000)]
Change the FAQ entry a bit, giving the details as I observed them.

24 years agoDocument the change.
Richard Levitte [Wed, 5 Jul 2000 02:52:47 +0000 (02:52 +0000)]
Document the change.

24 years agoI got sick and tired of having to keep track of NIDs when such a thing
Richard Levitte [Wed, 5 Jul 2000 02:45:36 +0000 (02:45 +0000)]
I got sick and tired of having to keep track of NIDs when such a thing
could be done automagically, much like the numbering in libeay.num and
ssleay.num.  The solution works as follows:

  - New object identifiers are inserted in objects.txt, following the
    syntax given in objects.README.
  - objects.pl is used to process obj_mac.num and create a new
    obj_mac.h.
  - obj_dat.pl is used to create a new obj_dat.h, using the data in
    obj_mac.h.

This is currently kind of a hack, and the perl code in objects.pl
isn't very elegant, but it works as I intended.  The simplest way to
check that it worked correctly is to look in obj_dat.h and check the
array nid_objs and make sure the objects haven't moved around (this is
important!).  Additions are OK, as well as consistent name changes.

24 years agoBeautification
Richard Levitte [Wed, 5 Jul 2000 02:23:55 +0000 (02:23 +0000)]
Beautification

24 years agoAdd a blurb on how to solve the problem with failing compiltaion of sha_dgst.c on...
Richard Levitte [Tue, 4 Jul 2000 14:02:36 +0000 (14:02 +0000)]
Add a blurb on how to solve the problem with failing compiltaion of sha_dgst.c on Alpha True64 Unix

24 years agoAdd PRNGD link.
Ulf Möller [Mon, 3 Jul 2000 17:26:51 +0000 (17:26 +0000)]
Add PRNGD link.

24 years agoUpdate STATUS.
Dr. Stephen Henson [Sun, 2 Jul 2000 21:11:11 +0000 (21:11 +0000)]
Update STATUS.

24 years agoReturn bignum '0' when BN_rand is asked for a 0 bit random number.
Bodo Möller [Sun, 2 Jul 2000 19:42:19 +0000 (19:42 +0000)]
Return bignum '0' when BN_rand is asked for a 0 bit random number.

24 years agoFix code structure (if ... else if ... where both parts
Bodo Möller [Sun, 2 Jul 2000 19:40:44 +0000 (19:40 +0000)]
Fix code structure (if ... else if ... where both parts
may be disabled by preprocessor symbols)

24 years agoDon't dereference NULL pointers.
Bodo Möller [Sun, 2 Jul 2000 18:16:38 +0000 (18:16 +0000)]
Don't dereference NULL pointers.
Submitted by: bowe@chip.ma.certco.com

24 years agoDon't let top go below zero!
Ben Laurie [Sat, 1 Jul 2000 16:30:27 +0000 (16:30 +0000)]
Don't let top go below zero!

24 years agoUse up-to-date functions.
Ben Laurie [Sat, 1 Jul 2000 16:25:20 +0000 (16:25 +0000)]
Use up-to-date functions.

24 years agoGive the user the option to measure real time instead of user CPU time.
Richard Levitte [Fri, 30 Jun 2000 17:16:46 +0000 (17:16 +0000)]
Give the user the option to measure real time instead of user CPU time.

24 years agoUndo the changes I just made. I'm not sure what I was thinking of.
Richard Levitte [Wed, 28 Jun 2000 16:47:45 +0000 (16:47 +0000)]
Undo the changes I just made.  I'm not sure what I was thinking of.
The message to everyone is "Do not hack OpenSSL when stressed"...

24 years agoDocument my latest changes.
Richard Levitte [Wed, 28 Jun 2000 16:24:29 +0000 (16:24 +0000)]
Document my latest changes.

24 years agoMake it possible for users of the openssl applications to specify the
Richard Levitte [Wed, 28 Jun 2000 16:10:56 +0000 (16:10 +0000)]
Make it possible for users of the openssl applications to specify the
EGD should be used as seeding input, and where the named socket is.

24 years agoMake it possible for people to tell where the EGD socket is through
Richard Levitte [Wed, 28 Jun 2000 16:09:54 +0000 (16:09 +0000)]
Make it possible for people to tell where the EGD socket is through
the RANDEGD environment variable.

24 years agoThat's it, I've seen questions about this one time too many for
Richard Levitte [Wed, 28 Jun 2000 14:32:12 +0000 (14:32 +0000)]
That's it, I've seen questions about this one time too many for
today.  Time to add extra info so the poor users know where to
go with their troubles.

24 years agoMake sure we use /usr/sbin/sysctl, especially since /usr/sbin is not
Richard Levitte [Wed, 28 Jun 2000 10:33:37 +0000 (10:33 +0000)]
Make sure we use /usr/sbin/sysctl, especially since /usr/sbin is not
always in the users $PATH...

24 years agoAdded references to RFCs 1421 to 1424, that describe PEM.
Richard Levitte [Mon, 26 Jun 2000 16:12:01 +0000 (16:12 +0000)]
Added references to RFCs 1421 to 1424, that describe PEM.
Suggested by Randolph Bentson <bentson@grieg.holmsjoen.com>

24 years agoBSD-style MD5-based password algorithm in 'openssl passwd'.
Bodo Möller [Fri, 23 Jun 2000 18:00:16 +0000 (18:00 +0000)]
BSD-style MD5-based password algorithm in 'openssl passwd'.
(Still needs to be tested against the original using sample passwords
of different length.)

24 years agoSteve fixed up some strange errors introduced into dso_win32.c, and I'm
Geoff Thorpe [Fri, 23 Jun 2000 17:29:05 +0000 (17:29 +0000)]
Steve fixed up some strange errors introduced into dso_win32.c, and I'm
just converting some spaces to tabs from his fix. :-)

24 years agoActually comment out the parts of BN_MOD_MUL_WORD that I inteded to
Bodo Möller [Fri, 23 Jun 2000 08:10:28 +0000 (08:10 +0000)]
Actually comment out the parts of BN_MOD_MUL_WORD that I inteded to
comment out in the previous commit

24 years agoIn BN_mod_exp_mont_word, avoid one application of BN_MOD_MUL_WORD,
Bodo Möller [Fri, 23 Jun 2000 05:51:37 +0000 (05:51 +0000)]
In BN_mod_exp_mont_word, avoid one application of BN_MOD_MUL_WORD,
and for small 'a' also a couple of calls to
BN_mod_mul_montgomery(r, r, r, ...).

24 years agoMove add_oid_section to apps.c, so it can be shared by several
Richard Levitte [Thu, 22 Jun 2000 22:07:27 +0000 (22:07 +0000)]
Move add_oid_section to apps.c, so it can be shared by several
applications.  Also, have it and the certificate and key loading
functions take a BIO argument for error output.

24 years agoDocument the change in req.
Richard Levitte [Thu, 22 Jun 2000 21:17:46 +0000 (21:17 +0000)]
Document the change in req.

24 years agoChange req so the new parameter '-rand file' uses the given file in
Richard Levitte [Thu, 22 Jun 2000 21:16:01 +0000 (21:16 +0000)]
Change req so the new parameter '-rand file' uses the given file in
addition to the file given through the RANDFILE option or environment
variable.

24 years agoOn case-insensitive systems, the 'install' target gets matched against
Richard Levitte [Thu, 22 Jun 2000 18:02:23 +0000 (18:02 +0000)]
On case-insensitive systems, the 'install' target gets matched against
the 'INSTALL' file, which means that 9 times of 10, the BlowFish
headers won't get installed.  Avoid this in the same way it's done in
crypto/des/Makefile.ssl, where someone apparently has thought of this...

24 years agoMove the certificate and key loading functions to apps.c, so they can
Richard Levitte [Thu, 22 Jun 2000 17:42:50 +0000 (17:42 +0000)]
Move the certificate and key loading functions to apps.c, so they can
be shared by several applications.

24 years agoForgot the self-documentation within req.
Richard Levitte [Thu, 22 Jun 2000 09:59:21 +0000 (09:59 +0000)]
Forgot the self-documentation within req.

24 years agoDocument the change in req.
Richard Levitte [Thu, 22 Jun 2000 09:19:59 +0000 (09:19 +0000)]
Document the change in req.

24 years agoSmall change to accept the command line parameter '-rand file'. This
Richard Levitte [Thu, 22 Jun 2000 09:13:43 +0000 (09:13 +0000)]
Small change to accept the command line parameter '-rand file'.  This
parameter takes precedence over the RANDFILE option in the
configuration file.

24 years agoChange mkstack.pl so it now sorts each group
Dr. Stephen Henson [Thu, 22 Jun 2000 00:34:27 +0000 (00:34 +0000)]
Change mkstack.pl so it now sorts each group
into lexical order. Previously it depended on
the order of files in the directory.

This should now mean that all systems will
agree on the order of safestack.h and will
not change it needlessly and avoid massive
needless commits to safestack.h in future.

It wont however avoid this one :-(

24 years agouse faster version
Ulf Möller [Wed, 21 Jun 2000 21:20:46 +0000 (21:20 +0000)]
use faster version

24 years ago* This adds some checking to the 'dlfcn' DSO_METHOD that at least lets
Geoff Thorpe [Wed, 21 Jun 2000 14:12:25 +0000 (14:12 +0000)]
* This adds some checking to the 'dlfcn' DSO_METHOD that at least lets
  it cope with OpenBSD which doesn't understand "RTLD_NOW".
* Added the dso_scheme config string entry for OpenBSD-x86 to give it
  DSO support.
* 'make update' that has also absorbed some of Steve's mkstack changes
  for the ASN-related macros.

24 years agoFixes for Win32 build.
Dr. Stephen Henson [Wed, 21 Jun 2000 02:25:30 +0000 (02:25 +0000)]
Fixes for Win32 build.

This is mostly a work around for the old VC++ problem
that it treats func() as func(void).

Various prototypes had been added to 'compare' function
pointers that triggered this. This could be fixed by removing
the prototype, adding function pointer casts to every call or
changing the passed function to use the expected arguments.
I mostly did the latter.

The mkdef.pl script was modified to remove the typesafe
functions which no longer exist.

Oh and some functions called OPENSSL_freeLibrary() were
changed back to FreeLibrary(), wonder how that happened :-)

24 years agoHandle ASN1_SET_OF and PKCS12_STACK_OF using function
Dr. Stephen Henson [Tue, 20 Jun 2000 18:45:28 +0000 (18:45 +0000)]
Handle ASN1_SET_OF and PKCS12_STACK_OF using function
casts in the same way as STACK_OF.

24 years ago'make update'
Geoff Thorpe [Tue, 20 Jun 2000 14:06:06 +0000 (14:06 +0000)]
'make update'

24 years agoAvoid unnecessary links and incomplete program file in apps/.
Bodo Möller [Mon, 19 Jun 2000 17:38:22 +0000 (17:38 +0000)]
Avoid unnecessary links and incomplete program file in apps/.

24 years ago'make update'
Richard Levitte [Mon, 19 Jun 2000 16:51:41 +0000 (16:51 +0000)]
'make update'

24 years agoAdd the missing callback pointer handling functions.
Richard Levitte [Mon, 19 Jun 2000 16:38:27 +0000 (16:38 +0000)]
Add the missing callback pointer handling functions.
Also, make sure empty slots of the dynamic lock stack are used.
Actually, I'm not really sure this is the right thing to do, and may
remove it, with an endlessly growing stack as result...

24 years agoThe dynamic thread API changed, and so does the documentation.
Richard Levitte [Mon, 19 Jun 2000 15:28:36 +0000 (15:28 +0000)]
The dynamic thread API changed, and so does the documentation.

24 years agoAdd OPENSSL_free at the end of CRYPTO_destroy_dynlockid.
Bodo Möller [Mon, 19 Jun 2000 13:53:15 +0000 (13:53 +0000)]
Add OPENSSL_free at the end of CRYPTO_destroy_dynlockid.

24 years agoRedo the support for dynamic locks. First of all, it was terribly
Richard Levitte [Mon, 19 Jun 2000 13:38:09 +0000 (13:38 +0000)]
Redo the support for dynamic locks.  First of all, it was terribly
insecure, so a static lock is added to isolate the sensitive parts.
Also, to avoid one thread freeing a lock that is used by another, a
reference counter is added.

24 years agoWith the new stack hack macros, there's no need to shorten the names
Richard Levitte [Sun, 18 Jun 2000 16:07:41 +0000 (16:07 +0000)]
With the new stack hack macros, there's no need to shorten the names
any more.

24 years agoModifications for VMS.
Richard Levitte [Sun, 18 Jun 2000 16:06:44 +0000 (16:06 +0000)]
Modifications for VMS.

24 years agoAdd support for dynamically created and destroyed mutexes. This will
Richard Levitte [Sun, 18 Jun 2000 15:59:04 +0000 (15:59 +0000)]
Add support for dynamically created and destroyed mutexes.  This will
be needed in some ENGINE code, and might serve elsewhere as well.
Note that it's implemented in such a way that the locking itself is
done through the same CRYPTO_lock function as the static locks.

WARNING: This is currently experimental and untested code (it will get
tested soon, though :-)).

24 years agoFirst of all, with the current macros, we should never get any
Richard Levitte [Sun, 18 Jun 2000 14:06:40 +0000 (14:06 +0000)]
First of all, with the current macros, we should never get any
type-specific stack function.  Second, even when we don't build any of
those functions, DECLARE_STACK_OF lines should not find themselves
into $def.

24 years agoUsing speaking "variable" names in macros so that e.g. grepping for
Bodo Möller [Sat, 17 Jun 2000 23:41:44 +0000 (23:41 +0000)]
Using speaking "variable" names in macros so that e.g. grepping for
sk_whatever_insert and sk_whatever_set immediately reveals the subtle
difference in parameter order.

Change mkstack.pl so that safestack.h is not rewritten when
nothing has changed.

24 years agoSafe stack reorganisation in terms of function casts.
Dr. Stephen Henson [Fri, 16 Jun 2000 23:29:26 +0000 (23:29 +0000)]
Safe stack reorganisation in terms of function casts.

After some messing around this seems to work but needs
a few more tests. Working out the syntax for sk_set_cmp_func()
(cast it to a function that itself returns a function pointer)
was painful :-(

Needs some testing to see what other compilers think of this
syntax.

Also needs similar stuff for ASN1_SET_OF etc etc.

24 years agoChange to have a single library that works on both Win9x and WinNT.
Richard Levitte [Fri, 16 Jun 2000 15:25:41 +0000 (15:25 +0000)]
Change to have a single library that works on both Win9x and WinNT.
As far as I understand, it still needs to be compiled on NT...
Contributed by Arne Ansper <arne@ats.cyber.ee>

24 years agotypo
Bodo Möller [Fri, 16 Jun 2000 14:35:05 +0000 (14:35 +0000)]
typo

24 years agoIn EVP_BytesToKey, replace explicit "8" by "PKCS5_SALT_LEN".
Bodo Möller [Fri, 16 Jun 2000 14:29:51 +0000 (14:29 +0000)]
In EVP_BytesToKey, replace explicit "8" by "PKCS5_SALT_LEN".

24 years agoThere are compilers that complain if a variable has the same name as a
Bodo Möller [Fri, 16 Jun 2000 14:24:37 +0000 (14:24 +0000)]
There are compilers that complain if a variable has the same name as a
label. (Reported by Alexei Bakharevski.)

24 years agoCurrently the DSO_METHOD interface has one entry point to bind all
Geoff Thorpe [Fri, 16 Jun 2000 10:45:36 +0000 (10:45 +0000)]
Currently the DSO_METHOD interface has one entry point to bind all
"symbols" including functions (of all prototypes( and variables. Whilst
casting any function type to another violates ANSI C (I believe), it is
a necessary evil in shared-library APIs. However, it is quite
conceivable that functions in general and data symbols could very well
be represented differently to each other on some systems, as Bodo said;

> Since the function/object distinction is a lot more likely to be
> important on real-life platforms supporting DSO *and* it can be quite
> easily done *and* it will silence compilers that don't like
> assignments from void pointers to function pointer variables, why
> not do it?

I agree. So this change splits the "dso_bind" handler in DSO_METHOD
into "dso_bind_var" and "dso_bind_func". Similarly the exported
function DSO_bind() has been split in two. I've also put together
changes for the various DSO_METHOD implementations, but so far only
DSO_dlfcn() has been tested. BTW: The prototype for dso_bind had been
a bit strange so I've taken the opportunity to change its shape (in
both variations).

Also, the README has been updated - particularly with a note about
using customised native name-translation for shared libraries (and that
you can't do it yet).

24 years agoAdd support for the modified SGC key format used in IIS.
Dr. Stephen Henson [Thu, 15 Jun 2000 23:48:05 +0000 (23:48 +0000)]
Add support for the modified SGC key format used in IIS.

24 years agoThis seems to work better with enums...
Richard Levitte [Thu, 15 Jun 2000 20:57:25 +0000 (20:57 +0000)]
This seems to work better with enums...

24 years agoMake sure that bs is not getting free'd again.
Richard Levitte [Thu, 15 Jun 2000 11:10:15 +0000 (11:10 +0000)]
Make sure that bs is not getting free'd again.
Reported by Robert Eiglmaier <robert.eiglmaier@ixos.de>

24 years agoAdd info on what some other people are currently working on.
Richard Levitte [Wed, 14 Jun 2000 17:27:02 +0000 (17:27 +0000)]
Add info on what some other people are currently working on.

24 years agoReport "error" (usually just "File exists", which is harmless)
Bodo Möller [Wed, 14 Jun 2000 10:09:46 +0000 (10:09 +0000)]
Report "error" (usually just "File exists", which is harmless)
when symlink() fails.

24 years agoThis probably fixes a BN_rshift bug.
Bodo Möller [Tue, 13 Jun 2000 15:07:39 +0000 (15:07 +0000)]
This probably fixes a BN_rshift bug.

24 years agoUse BN_CTX_end when exiting early from BN_mod_exp_mont_word because
Bodo Möller [Tue, 13 Jun 2000 13:50:42 +0000 (13:50 +0000)]
Use BN_CTX_end when exiting early from BN_mod_exp_mont_word because
BN_mod_exp_atalla could be used.

24 years agoThe atalla functionality doesn't work with the "word" version of
Geoff Thorpe [Tue, 13 Jun 2000 13:18:51 +0000 (13:18 +0000)]
The atalla functionality doesn't work with the "word" version of
BN_mod_exp. Call the regular atalla mod_exp operation instead.

24 years agoEnable DSO support on alpha (OSF1), cc and gcc.
Geoff Thorpe [Tue, 13 Jun 2000 12:59:38 +0000 (12:59 +0000)]
Enable DSO support on alpha (OSF1), cc and gcc.

Also, "make update" has added some missing functions to libeay.num,
updated the TABLE for the alpha changes, and updated thousands of
dependancies that have changed from recent commits.

24 years agoprotoypes
Ulf Möller [Mon, 12 Jun 2000 19:45:38 +0000 (19:45 +0000)]
protoypes

24 years agotypo
Ulf Möller [Mon, 12 Jun 2000 18:50:59 +0000 (18:50 +0000)]
typo

24 years agoFix evp_locl.h macros.
Dr. Stephen Henson [Sun, 11 Jun 2000 15:43:17 +0000 (15:43 +0000)]
Fix evp_locl.h macros.

Documentation correction.

24 years agoMake EVP_SealInit() and EVP_OpenInit() check EVP_EncryptInit() and
Dr. Stephen Henson [Sun, 11 Jun 2000 12:27:58 +0000 (12:27 +0000)]
Make EVP_SealInit() and EVP_OpenInit() check EVP_EncryptInit() and
EVP_DecryptInit() return values.

Update docs.

24 years agoDocument EVP routines. Change EVP_SealInit() and EVP_OpenInit()
Dr. Stephen Henson [Sun, 11 Jun 2000 12:18:15 +0000 (12:18 +0000)]
Document EVP routines. Change EVP_SealInit() and EVP_OpenInit()
to support multiple calls.

New function to retrieve email address from certificates and
requests.

24 years agoIn longer tests with g=2, DH exchange does not become quite as fast
Bodo Möller [Sat, 10 Jun 2000 12:05:52 +0000 (12:05 +0000)]
In longer tests with g=2, DH exchange does not become quite as fast
as expected -- maybe it's the different processor, maybe my
previous timings were too inaccurate.

24 years agoBN_mod_exp_mont_word entry:
Bodo Möller [Sat, 10 Jun 2000 10:08:31 +0000 (10:08 +0000)]
BN_mod_exp_mont_word entry:
Don't give performance gain estimates that appear to be more precise
than they really are, especially when they are wrong
(2/(1/1.15 + 1) = ca. 1.0698).

24 years agoComment about bcopy on SunOS 4.x.
Bodo Möller [Fri, 9 Jun 2000 16:43:49 +0000 (16:43 +0000)]
Comment about bcopy on SunOS 4.x.

24 years agoUsing checks of the existence of HEADER_{foo}_H in other header files
Richard Levitte [Fri, 9 Jun 2000 10:41:35 +0000 (10:41 +0000)]
Using checks of the existence of HEADER_{foo}_H in other header files
was a really bad idea.  For example, the following:

#include <x509.h>
#include <bio.h>
#include <asn1.h>

would make sure that things like ASN1_UTCTIME_print() wasn't defined
unless you moved the inclusion of bio.h to above the inclusion of
x509.h.  The reason is that x509.h includes asn1.h, and the
declaration of ASN1_UTCTIME_print() depended on the definition of
HEADER_BIO_H.  That's what I call an obscure bug.

Instead, this change makes sure that whatever header files are needed
for the correct process of one header file are included automagically,
and that the definitions of, for example, BIO-related things are
dependent on the absence of the NO_{foo} macros.  This is also
consistent with the way parts of OpenSSL can be excluded at will.

24 years agoComment for increased code clarity.
Bodo Möller [Fri, 9 Jun 2000 09:11:30 +0000 (09:11 +0000)]
Comment for increased code clarity.

24 years agoAnother attempt to allow compiling on SunOS 4.*.
Bodo Möller [Thu, 8 Jun 2000 22:47:09 +0000 (22:47 +0000)]
Another attempt to allow compiling on SunOS 4.*.

24 years agoHarmonize indentation.
Bodo Möller [Thu, 8 Jun 2000 22:41:03 +0000 (22:41 +0000)]
Harmonize indentation.

24 years agoAccept -F4 option in lower case, which is what the usage information
Bodo Möller [Thu, 8 Jun 2000 22:40:09 +0000 (22:40 +0000)]
Accept -F4 option in lower case, which is what the usage information
says one should use.

24 years agoSlightly faster DSA verification (BN_mod_exp2_mont),
Bodo Möller [Thu, 8 Jun 2000 20:26:03 +0000 (20:26 +0000)]
Slightly faster DSA verification (BN_mod_exp2_mont),
marginally faster BN_mod_exp for 1024 bit exponents.

24 years agoAdd entry that Richard forgot.
Bodo Möller [Thu, 8 Jun 2000 15:01:14 +0000 (15:01 +0000)]
Add entry that Richard forgot.

24 years agoUse the equivalent of a sliding window (without precomputation
Bodo Möller [Thu, 8 Jun 2000 09:39:28 +0000 (09:39 +0000)]
Use the equivalent of a sliding window (without precomputation
because we're only handling words anyway) in BN_mod_exp_mont_word
making it a little faster for very small exponents,
and adjust the performance gain estimate in CHANGES according
to slightly more thorough measurements.
(15% faster than BN_mod_exp_mont for "large" base,
20% faster than BN_mod_exp_mont for small base.)

24 years agoSpeed up DH with small generator.
Bodo Möller [Wed, 7 Jun 2000 21:29:25 +0000 (21:29 +0000)]
Speed up DH with small generator.

24 years agoNo need to abort if c_rehash fails here (e.g. because Perl is not where
Bodo Möller [Wed, 7 Jun 2000 21:28:15 +0000 (21:28 +0000)]
No need to abort if c_rehash fails here (e.g. because Perl is not where
it is expected).

24 years agouse consistent indentation
Bodo Möller [Wed, 7 Jun 2000 19:43:44 +0000 (19:43 +0000)]
use consistent indentation

24 years agoOption "no-symlinks" to configure without creating the links (e.g.
Ulf Möller [Tue, 6 Jun 2000 20:52:42 +0000 (20:52 +0000)]
Option "no-symlinks" to configure without creating the links (e.g.
for use with makefile.one)

24 years agoCompaq C warns that "the expression 'p=scan_esc(p)' modifies the variable
Andy Polyakov [Tue, 6 Jun 2000 15:21:12 +0000 (15:21 +0000)]
Compaq C warns that "the expression 'p=scan_esc(p)' modifies the variable
'p' more than once without an intervening sequence point.  This behavior
is undefined." What it essentially complains about is 'p=p+=1'. Now it's
changed to 'p=p+1'...