oweals/openssl.git
15 years agoReserve for "multilib" suffix, the one allowing to perform multi-ABI
Andy Polyakov [Mon, 9 Feb 2009 15:11:22 +0000 (15:11 +0000)]
Reserve for "multilib" suffix, the one allowing to perform multi-ABI
installations. It's not enabled in Makefiles yet.

15 years agoJust to be awkward Ubuntu 8.10 doesn't like _XOPEN_SOURCE_EXTENDED...
Dr. Stephen Henson [Fri, 6 Feb 2009 16:43:52 +0000 (16:43 +0000)]
Just to be awkward Ubuntu 8.10 doesn't like _XOPEN_SOURCE_EXTENDED...

15 years agoFor -hex, print just one \n
Bodo Möller [Mon, 2 Feb 2009 00:40:29 +0000 (00:40 +0000)]
For -hex, print just one \n

15 years ago-hex option for openssl rand
Bodo Möller [Mon, 2 Feb 2009 00:01:28 +0000 (00:01 +0000)]
-hex option for openssl rand

PR: 1831
Submitted by: Damien Miller

15 years agoPut back a variable deleted by the previous revision,
Bodo Möller [Sun, 1 Feb 2009 01:08:13 +0000 (01:08 +0000)]
Put back a variable deleted by the previous revision,
but used in the code.

15 years agoPrint out UTF8 and NumericString types in ASN1 parsing utility.
Dr. Stephen Henson [Wed, 28 Jan 2009 12:54:52 +0000 (12:54 +0000)]
Print out UTF8 and NumericString types in ASN1 parsing utility.

15 years agoUpdate from stable branch.
Dr. Stephen Henson [Wed, 28 Jan 2009 12:36:14 +0000 (12:36 +0000)]
Update from stable branch.

15 years agoTypo: just copy across an unknown type.
Dr. Stephen Henson [Wed, 28 Jan 2009 12:32:03 +0000 (12:32 +0000)]
Typo: just copy across an unknown type.

15 years agoBecause DEC C - sorry, HP C - is picky about features, we need to
Richard Levitte [Wed, 28 Jan 2009 07:38:14 +0000 (07:38 +0000)]
Because DEC C - sorry, HP C - is picky about features, we need to
define _XOPEN_SOURCE_EXTENDED to reach fd_set and timeval types and
functionality.

15 years agoHopefully resolve signed vs unsigned issue.
Richard Levitte [Wed, 28 Jan 2009 07:09:23 +0000 (07:09 +0000)]
Hopefully resolve signed vs unsigned issue.

15 years agoDo the Camellia part right
Richard Levitte [Wed, 28 Jan 2009 07:01:29 +0000 (07:01 +0000)]
Do the Camellia part right

15 years agoSynchronise with Unix build
Richard Levitte [Tue, 20 Jan 2009 05:39:24 +0000 (05:39 +0000)]
Synchronise with Unix build

15 years agoAllow CC to be overridden.
Ben Laurie [Sun, 18 Jan 2009 12:06:37 +0000 (12:06 +0000)]
Allow CC to be overridden.

15 years agoUpdate certificate hash line format to handle canonical format
Dr. Stephen Henson [Thu, 15 Jan 2009 13:22:39 +0000 (13:22 +0000)]
Update certificate hash line format to handle canonical format
and avoid MD5 dependency.

15 years agoMake PKCS#8 the standard write format for private keys, replacing the
Dr. Stephen Henson [Thu, 15 Jan 2009 12:52:38 +0000 (12:52 +0000)]
Make PKCS#8 the standard write format for private keys, replacing the
ancient SSLeay format.

15 years agoAdd CRYPTO_MDEBUG_ABORT to abort() is there are any memory leaks. This will
Dr. Stephen Henson [Sun, 11 Jan 2009 20:36:50 +0000 (20:36 +0000)]
Add CRYPTO_MDEBUG_ABORT to abort() is there are any memory leaks. This will
cause "make test" failures and make resource leaks more obvious.

15 years agoFix warnings properly this time ;-)
Dr. Stephen Henson [Sun, 11 Jan 2009 20:34:23 +0000 (20:34 +0000)]
Fix warnings properly this time ;-)

15 years agoFix missing prototype warnings then fix different prototype warnings ;-)
Dr. Stephen Henson [Sun, 11 Jan 2009 16:17:26 +0000 (16:17 +0000)]
Fix missing prototype warnings then fix different prototype warnings ;-)

15 years agoFix sign-compare warnings.
Dr. Stephen Henson [Sun, 11 Jan 2009 15:58:51 +0000 (15:58 +0000)]
Fix sign-compare warnings.

15 years agoAdd a set of standard gcc warning options which are designed to be the
Dr. Stephen Henson [Sun, 11 Jan 2009 15:56:32 +0000 (15:56 +0000)]
Add a set of standard gcc warning options which are designed to be the
minimum requirement for committed code. Added to debug-steve* config targets
for now.

15 years agoAdd missing entry.
Ben Laurie [Fri, 9 Jan 2009 12:48:02 +0000 (12:48 +0000)]
Add missing entry.

15 years agoUpdatde from stable branch.
Dr. Stephen Henson [Wed, 7 Jan 2009 23:44:27 +0000 (23:44 +0000)]
Updatde from stable branch.

15 years agoUpdate FAQ.
Dr. Stephen Henson [Wed, 7 Jan 2009 12:15:15 +0000 (12:15 +0000)]
Update FAQ.

15 years agoAdd UltraSPARC VIS-powered SHA1 block procedure.
Andy Polyakov [Mon, 5 Jan 2009 14:52:31 +0000 (14:52 +0000)]
Add UltraSPARC VIS-powered SHA1 block procedure.

15 years agoFix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP
Lutz Jänicke [Mon, 5 Jan 2009 14:43:05 +0000 (14:43 +0000)]
Fix compilation with -no-comp by adding some more #ifndef OPENSSL_NO_COMP

Some #include statements were not properly protected. This will go unnoted
on most systems as openssl/comp.h tends to be installed as a system header
file by default but may become visible when cross compiling.

15 years agoVMS stuff I forgot...
Richard Levitte [Sat, 3 Jan 2009 09:25:32 +0000 (09:25 +0000)]
VMS stuff I forgot...

15 years agosrvr_ecdh cannot be NULL at this point (Coverity ID 232).
Ben Laurie [Fri, 2 Jan 2009 12:49:07 +0000 (12:49 +0000)]
srvr_ecdh cannot be NULL at this point (Coverity ID 232).

15 years agoMakefile.shared: improve portability of commit#17753.
Andy Polyakov [Fri, 2 Jan 2009 09:02:27 +0000 (09:02 +0000)]
Makefile.shared: improve portability of commit#17753.

15 years agoCalculate offset correctly. (Coverity ID 233)
Ben Laurie [Thu, 1 Jan 2009 18:30:51 +0000 (18:30 +0000)]
Calculate offset correctly. (Coverity ID 233)

15 years agoStyling update to makefiles: eliminate redundant pipes.
Andy Polyakov [Tue, 30 Dec 2008 13:20:17 +0000 (13:20 +0000)]
Styling update to makefiles: eliminate redundant pipes.

15 years agoDocument dead code.
Ben Laurie [Tue, 30 Dec 2008 13:02:02 +0000 (13:02 +0000)]
Document dead code.

15 years agoStyling update to makefiles: $() to denote make substitutions and $${} -
Andy Polyakov [Mon, 29 Dec 2008 16:17:52 +0000 (16:17 +0000)]
Styling update to makefiles: $() to denote make substitutions and $${} -
shell ones.

15 years agoApparently s->ctx could be NULL. (Coverity ID 147).
Ben Laurie [Mon, 29 Dec 2008 16:15:27 +0000 (16:15 +0000)]
Apparently s->ctx could be NULL. (Coverity ID 147).

15 years agoApparently s->ctx could be NULL at this point (see earlier
Ben Laurie [Mon, 29 Dec 2008 16:13:49 +0000 (16:13 +0000)]
Apparently s->ctx could be NULL at this point (see earlier
test). (Coverity ID 148).

15 years agoIf we're going to return errors (no matter how stupid), then we should
Ben Laurie [Mon, 29 Dec 2008 16:11:58 +0000 (16:11 +0000)]
If we're going to return errors (no matter how stupid), then we should
test for them!

15 years agoMake sure a bad parameter to RSA_verify_PKCS1_PSS() doesn't lead to a crash.
Ben Laurie [Mon, 29 Dec 2008 13:35:08 +0000 (13:35 +0000)]
Make sure a bad parameter to RSA_verify_PKCS1_PSS() doesn't lead to a crash.
(Coverity ID 135).

15 years agobn_lib.c: [re-]fix Win64 compiler warning.
Andy Polyakov [Mon, 29 Dec 2008 12:44:33 +0000 (12:44 +0000)]
bn_lib.c: [re-]fix Win64 compiler warning.

15 years agoFix "possible loss of data" Win64 compiler warnings.
Andy Polyakov [Mon, 29 Dec 2008 12:35:49 +0000 (12:35 +0000)]
Fix "possible loss of data" Win64 compiler warnings.

15 years agoDie earlier if hash is NULL. (Coverity IDs 137 & 138).
Ben Laurie [Mon, 29 Dec 2008 11:54:56 +0000 (11:54 +0000)]
Die earlier if hash is NULL. (Coverity IDs 137 & 138).

15 years agoReverse incorrect earlier fix.
Ben Laurie [Mon, 29 Dec 2008 11:47:08 +0000 (11:47 +0000)]
Reverse incorrect earlier fix.

15 years agoDie earlier if we have no hash function.
Ben Laurie [Mon, 29 Dec 2008 11:46:44 +0000 (11:46 +0000)]
Die earlier if we have no hash function.

15 years agoAdd standard .cvsignore file.
Dr. Stephen Henson [Mon, 29 Dec 2008 00:27:06 +0000 (00:27 +0000)]
Add standard .cvsignore file.

15 years agoUpdate steve-debug* options.
Dr. Stephen Henson [Mon, 29 Dec 2008 00:25:54 +0000 (00:25 +0000)]
Update steve-debug* options.

15 years agox86_64-xlate.pl: support for binary constants, such as 0b1010101.
Andy Polyakov [Sat, 27 Dec 2008 14:00:37 +0000 (14:00 +0000)]
x86_64-xlate.pl: support for binary constants, such as 0b1010101.

15 years agoAdd modes/cts128.c, Ciphertext Stealing implementation.
Andy Polyakov [Sat, 27 Dec 2008 13:40:45 +0000 (13:40 +0000)]
Add modes/cts128.c, Ciphertext Stealing implementation.

15 years agocmll-x86_64.pl: fix bug in cbc tail processing and comply with Win64 ABI spec.
Andy Polyakov [Sat, 27 Dec 2008 13:39:38 +0000 (13:39 +0000)]
cmll-x86_64.pl: fix bug in cbc tail processing and comply with Win64 ABI spec.

15 years agoRevisit RT#1801 and complete fix.
Andy Polyakov [Sat, 27 Dec 2008 13:32:21 +0000 (13:32 +0000)]
Revisit RT#1801 and complete fix.

15 years agoRemove dead code. (Coverity ID 2)
Ben Laurie [Sat, 27 Dec 2008 02:36:24 +0000 (02:36 +0000)]
Remove dead code. (Coverity ID 2)

15 years agoCheck scalar->d before we use it (in BN_num_bits()). (Coverity ID 129)
Ben Laurie [Sat, 27 Dec 2008 02:15:16 +0000 (02:15 +0000)]
Check scalar->d before we use it (in BN_num_bits()). (Coverity ID 129)

15 years agoDeal with the unlikely event that EVP_MD_CTX_size() returns an error.
Ben Laurie [Sat, 27 Dec 2008 02:09:24 +0000 (02:09 +0000)]
Deal with the unlikely event that EVP_MD_CTX_size() returns an error.
(Coverity ID 140).

15 years agoHandle the unlikely event that BIO_get_mem_data() returns -ve.
Ben Laurie [Sat, 27 Dec 2008 02:00:38 +0000 (02:00 +0000)]
Handle the unlikely event that BIO_get_mem_data() returns -ve.

15 years agoMore synchronisation with Unix
Richard Levitte [Fri, 26 Dec 2008 23:52:06 +0000 (23:52 +0000)]
More synchronisation with Unix

15 years agoRemove misleading dead code. Constify. (Coverity ID 142)
Ben Laurie [Fri, 26 Dec 2008 17:17:21 +0000 (17:17 +0000)]
Remove misleading dead code. Constify. (Coverity ID 142)

15 years ago!a && !a->b is clearly wrong! Changed to !a || !a->b (Coverity ID 145).
Ben Laurie [Fri, 26 Dec 2008 15:32:59 +0000 (15:32 +0000)]
!a && !a->b is clearly wrong! Changed to !a || !a->b (Coverity ID 145).

15 years agopval must always be set when pk7_cb() does anything (Coverity ID 146).
Ben Laurie [Fri, 26 Dec 2008 15:29:02 +0000 (15:29 +0000)]
pval must always be set when pk7_cb() does anything (Coverity ID 146).

15 years agoIn BIO_write(), update the write statistics, not the read statistics.
Richard Levitte [Thu, 25 Dec 2008 22:24:17 +0000 (22:24 +0000)]
In BIO_write(), update the write statistics, not the read statistics.
PR: 1803

15 years agoFurther synchronisation with Unix
Richard Levitte [Thu, 25 Dec 2008 22:04:42 +0000 (22:04 +0000)]
Further synchronisation with Unix

15 years agoWindows-specific addenum to "engage crypto/modes" commit #17716.
Andy Polyakov [Tue, 23 Dec 2008 15:15:44 +0000 (15:15 +0000)]
Windows-specific addenum to "engage crypto/modes" commit #17716.

15 years agoPatch the omission from prvious commit #17716.
Andy Polyakov [Tue, 23 Dec 2008 11:38:33 +0000 (11:38 +0000)]
Patch the omission from prvious commit #17716.

15 years agoEngage crypto/modes.
Andy Polyakov [Tue, 23 Dec 2008 11:33:01 +0000 (11:33 +0000)]
Engage crypto/modes.

15 years agocrypto/modes: make modes.h selfsufficient and rename block_f to block128_t.
Andy Polyakov [Tue, 23 Dec 2008 11:18:45 +0000 (11:18 +0000)]
crypto/modes: make modes.h selfsufficient and rename block_f to block128_t.

15 years agoOptimize CAST for size on 64-bit platforms. For reference, CAST_LONG being
Andy Polyakov [Mon, 22 Dec 2008 15:21:59 +0000 (15:21 +0000)]
Optimize CAST for size on 64-bit platforms. For reference, CAST_LONG being
unsigned long must be attributed to 16-bit support. As we don't support
16-bit platoforms anymore, there is no reason to waste twice required
space on CAST S-boxes (16KB vs. 8KB) or key schedule.

15 years agocmll-x86_64.pl: Win64 SEH section to handle pushf/popf in CBC routine.
Andy Polyakov [Mon, 22 Dec 2008 14:15:11 +0000 (14:15 +0000)]
cmll-x86_64.pl: Win64 SEH section to handle pushf/popf in CBC routine.

15 years agoOptimize #undef DES_UNROLL for size.
Andy Polyakov [Mon, 22 Dec 2008 14:10:42 +0000 (14:10 +0000)]
Optimize #undef DES_UNROLL for size.

15 years agoIncidentally http://cvs.openssl.org/chngview?cn=17710 also made it possible
Andy Polyakov [Mon, 22 Dec 2008 14:05:42 +0000 (14:05 +0000)]
Incidentally cvs.openssl.org/chngview?cn=17710 also made it possible
to build the library without -D_CRT_NONSTDC_NO_DEPRECATE. This commit
expands it even to apps catalog and actually omits the macro in question
from Configure.

15 years agoThis _WIN32-specific patch makes it possible to "wrap" OpenSSL in another
Andy Polyakov [Mon, 22 Dec 2008 13:54:12 +0000 (13:54 +0000)]
This _WIN32-specific patch makes it possible to "wrap" OpenSSL in another
.DLL, in particular static build. The issue has been discussed in RT#1230
and later on openssl-dev, and mutually exclusive approaches were suggested.
This completes compromise solution suggested in RT#1230.
PR: 1230

15 years agoMake no-engine work again.
Dr. Stephen Henson [Sat, 20 Dec 2008 17:04:40 +0000 (17:04 +0000)]
Make no-engine work again.

15 years agomake depend to work with cross-gcc, compensate for msys glitch.
Andy Polyakov [Fri, 19 Dec 2008 13:35:09 +0000 (13:35 +0000)]
make depend to work with cross-gcc, compensate for msys glitch.
PR: 1753
Submitted by: Alon Bar-Lev

15 years agocmll-x86_64.pl: bug fix and size optimization of Win64 SEH section.
Andy Polyakov [Fri, 19 Dec 2008 11:19:19 +0000 (11:19 +0000)]
cmll-x86_64.pl: bug fix and size optimization of Win64 SEH section.

15 years agox86_64 assembler pack: add support for Win64 SEH.
Andy Polyakov [Fri, 19 Dec 2008 11:17:29 +0000 (11:17 +0000)]
x86_64 assembler pack: add support for Win64 SEH.

15 years agox86_64-xlate.pl: fix masm hexadecimal constants.
Andy Polyakov [Fri, 19 Dec 2008 11:14:38 +0000 (11:14 +0000)]
x86_64-xlate.pl: fix masm hexadecimal constants.

15 years agoperlasm/x86* update: support for 3 and 4 argument instructions.
Andy Polyakov [Wed, 17 Dec 2008 19:56:48 +0000 (19:56 +0000)]
perlasm/x86* update: support for 3 and 4 argument instructions.

15 years agoSEGV in AES_cbc_encrypt in aes-x86_64 assembler module.
Andy Polyakov [Wed, 17 Dec 2008 14:11:30 +0000 (14:11 +0000)]
SEGV in AES_cbc_encrypt in aes-x86_64 assembler module.
PR: 1801
Submitted by: Huang Ying

15 years agoConstify where needed
Richard Levitte [Tue, 16 Dec 2008 13:41:49 +0000 (13:41 +0000)]
Constify where needed

15 years agoRemove extraneous semicolons
Richard Levitte [Tue, 16 Dec 2008 10:56:05 +0000 (10:56 +0000)]
Remove extraneous semicolons

15 years agoStack changes made dso_vms.c not compile properly.
Richard Levitte [Tue, 16 Dec 2008 10:55:26 +0000 (10:55 +0000)]
Stack changes made dso_vms.c not compile properly.

15 years agoA few more symbols that are a little bit long for VMS
Richard Levitte [Tue, 16 Dec 2008 10:54:53 +0000 (10:54 +0000)]
A few more symbols that are a little bit long for VMS

15 years agoSynchronise VMS build system with the Unixly one
Richard Levitte [Tue, 16 Dec 2008 10:54:28 +0000 (10:54 +0000)]
Synchronise VMS build system with the Unixly one

15 years ago128-bit block cipher modes consolidation. As consolidated functions
Andy Polyakov [Tue, 16 Dec 2008 08:39:21 +0000 (08:39 +0000)]
128-bit block cipher modes consolidation. As consolidated functions
rely on indirect call to block functions, they are not as fast as
non-consolidated routines. However, performance loss(*) is within
measurement error and consolidation advantages are considered to
outweigh it.

(*) actually one can observe performance *improvement* on e.g.
    CBC benchmarks thanks to optimization, which also becomes
    shared among ciphers.

15 years agoSEED to support OPENSSL_SMALL_FOOTPRINT: ~2x size decrease on x86.
Andy Polyakov [Tue, 16 Dec 2008 07:41:21 +0000 (07:41 +0000)]
SEED to support OPENSSL_SMALL_FOOTPRINT: ~2x size decrease on x86.

15 years agoBring C bn_mul_mont template closer to assembler.
Andy Polyakov [Tue, 16 Dec 2008 07:28:38 +0000 (07:28 +0000)]
Bring C bn_mul_mont template closer to assembler.

15 years agono-asm didn't exclude Camellia assembler.
Andy Polyakov [Tue, 16 Dec 2008 07:26:53 +0000 (07:26 +0000)]
no-asm didn't exclude Camellia assembler.

15 years agoBack out pointless change.
Ben Laurie [Sat, 13 Dec 2008 17:45:49 +0000 (17:45 +0000)]
Back out pointless change.

15 years ago*** empty log message ***
Ben Laurie [Sat, 13 Dec 2008 17:45:27 +0000 (17:45 +0000)]
*** empty log message ***

15 years agoReturn error if DH_new() fails (Coverity ID 150).
Ben Laurie [Sat, 13 Dec 2008 17:39:53 +0000 (17:39 +0000)]
Return error if DH_new() fails (Coverity ID 150).

15 years agoCheck for NULL before use (Coverity ID 203).
Ben Laurie [Sat, 13 Dec 2008 17:28:25 +0000 (17:28 +0000)]
Check for NULL before use (Coverity ID 203).

15 years agoMissing return values (Coverity ID 204).
Ben Laurie [Sat, 13 Dec 2008 17:19:40 +0000 (17:19 +0000)]
Missing return values (Coverity ID 204).

15 years agoFix from stable branch.
Dr. Stephen Henson [Wed, 10 Dec 2008 17:35:21 +0000 (17:35 +0000)]
Fix from stable branch.

15 years agoapps/speed.c: children should not inherit buffered I/O
Lutz Jänicke [Wed, 10 Dec 2008 08:03:47 +0000 (08:03 +0000)]
apps/speed.c: children should not inherit buffered I/O
PR: 1787
Submitted by: Artur Klauser <aklauser@google.com>

15 years agoOops should check zero_pos >= 0.
Dr. Stephen Henson [Mon, 8 Dec 2008 19:13:06 +0000 (19:13 +0000)]
Oops should check zero_pos >= 0.

15 years agoHandle case where v6stat.zero_pos == 0 correctly.
Dr. Stephen Henson [Sun, 7 Dec 2008 23:58:44 +0000 (23:58 +0000)]
Handle case where v6stat.zero_pos == 0 correctly.

Reported by: Kurt Roeckx <kurt@roeckx.be>, Tobias Ginzler <ginzler@fgan.de> (Debian bug #506111)

15 years agoAdd Camellia assembler x86 and x86_64 modules.
Andy Polyakov [Wed, 3 Dec 2008 09:22:51 +0000 (09:22 +0000)]
Add Camellia assembler x86 and x86_64 modules.

15 years agoexperimental-foo support for mk1mf.pl.
Bodo Möller [Tue, 2 Dec 2008 23:50:22 +0000 (23:50 +0000)]
experimental-foo support for mk1mf.pl.

15 years agoImplement Configure option pattern "experimental-foo"
Bodo Möller [Tue, 2 Dec 2008 01:21:39 +0000 (01:21 +0000)]
Implement Configure option pattern "experimental-foo"
(specifically, "experimental-jpake").

15 years agoDon't stop -cipher from working.
Dr. Stephen Henson [Sun, 30 Nov 2008 22:01:31 +0000 (22:01 +0000)]
Don't stop -cipher from working.

15 years agoUpdate from stable branch.
Dr. Stephen Henson [Sun, 30 Nov 2008 16:09:04 +0000 (16:09 +0000)]
Update from stable branch.

15 years agoFix compilation with -DOPENSSL_NO_DEPRECATED.
Geoff Thorpe [Fri, 28 Nov 2008 22:06:55 +0000 (22:06 +0000)]
Fix compilation with -DOPENSSL_NO_DEPRECATED.

15 years agoClarify a 'chil' engine param that is a little unintuitive.
Geoff Thorpe [Fri, 28 Nov 2008 22:04:49 +0000 (22:04 +0000)]
Clarify a 'chil' engine param that is a little unintuitive.

Submitted by: Sander Temme <sander@temme.net>

15 years agoUpdate libeay.num
Dr. Stephen Henson [Mon, 24 Nov 2008 17:46:29 +0000 (17:46 +0000)]
Update libeay.num

15 years agoStop warning about different const qualifiers.
Dr. Stephen Henson [Mon, 24 Nov 2008 17:39:42 +0000 (17:39 +0000)]
Stop warning about different const qualifiers.