oweals/openssl.git
19 years agoFix bug in SMALL_FOOTPRINT path and clarify comment.
Andy Polyakov [Fri, 14 Oct 2005 15:22:27 +0000 (15:22 +0000)]
Fix bug in SMALL_FOOTPRINT path and clarify comment.

19 years agoBroaden compatibility amount Win32 headers even further [some don't have
Andy Polyakov [Thu, 13 Oct 2005 19:06:43 +0000 (19:06 +0000)]
Broaden compatibility amount Win32 headers even further [some don't have
SIZE_T].

19 years agoMake sure head CHANGES is up to date, we refer to this in announce.txt
Mark J. Cox [Tue, 11 Oct 2005 11:10:19 +0000 (11:10 +0000)]
Make sure head CHANGES is up to date, we refer to this in announce.txt

19 years agoRenumber to follow what happens with 0.9.8.
Richard Levitte [Tue, 11 Oct 2005 10:14:44 +0000 (10:14 +0000)]
Renumber to follow what happens with 0.9.8.

19 years agoAdd timestamp to x86-mont.pl.
Andy Polyakov [Sun, 9 Oct 2005 10:26:56 +0000 (10:26 +0000)]
Add timestamp to x86-mont.pl.

19 years agoThrow in bn/asm/x86-mont.pl Montgomery multiplication "teaser".
Andy Polyakov [Sun, 9 Oct 2005 09:53:58 +0000 (09:53 +0000)]
Throw in bn/asm/x86-mont.pl Montgomery multiplication "teaser".

19 years agoAdd PVK support to dsa utility.
Dr. Stephen Henson [Sat, 8 Oct 2005 17:32:07 +0000 (17:32 +0000)]
Add PVK support to dsa utility.

19 years agoAvoid warning on Win32.
Dr. Stephen Henson [Sat, 8 Oct 2005 17:31:18 +0000 (17:31 +0000)]
Avoid warning on Win32.

19 years agoNew option SSL_OP_NO_COMP to disable compression. New ctrls to set
Dr. Stephen Henson [Sat, 8 Oct 2005 00:18:53 +0000 (00:18 +0000)]
New option SSL_OP_NO_COMP to disable compression. New ctrls to set
maximum send fragment size. Allocate I/O buffers accordingly.

19 years agox86_64-mont.pl readability improvement.
Andy Polyakov [Fri, 7 Oct 2005 15:18:16 +0000 (15:18 +0000)]
x86_64-mont.pl readability improvement.

19 years agoThrow in Montgomery multiplication assembler for x86_64.
Andy Polyakov [Fri, 7 Oct 2005 14:18:06 +0000 (14:18 +0000)]
Throw in Montgomery multiplication assembler for x86_64.

19 years agoRefine logic in bn_mont.c and eliminate redundant BN_CTX pulls.
Andy Polyakov [Thu, 6 Oct 2005 13:12:28 +0000 (13:12 +0000)]
Refine logic in bn_mont.c and eliminate redundant BN_CTX pulls.

19 years agoLeave the decision to call/implement bn_sqr_mont to assembler developer.
Andy Polyakov [Thu, 6 Oct 2005 09:12:39 +0000 (09:12 +0000)]
Leave the decision to call/implement bn_sqr_mont to assembler developer.

19 years agoInitialize bignum constants using BN_bin2bn() instead of BN_hex2bn(). This
Dr. Stephen Henson [Wed, 5 Oct 2005 17:51:43 +0000 (17:51 +0000)]
Initialize bignum constants using BN_bin2bn() instead of BN_hex2bn(). This
saves a bit of space and avoids a compiler warning about string length.

19 years agoMention "no-dso doesn't remove -ldl" in PROBLEMS.
Andy Polyakov [Tue, 4 Oct 2005 06:30:52 +0000 (06:30 +0000)]
Mention "no-dso doesn't remove -ldl" in PROBLEMS.
PR: 1160

19 years agoFix typo in INSTALL.WCE.
Andy Polyakov [Tue, 4 Oct 2005 06:26:09 +0000 (06:26 +0000)]
Fix typo in INSTALL.WCE.

19 years agoZap DES_UNROLL when SMALL_FOOTPRINT is in effect.
Andy Polyakov [Tue, 4 Oct 2005 06:25:39 +0000 (06:25 +0000)]
Zap DES_UNROLL when SMALL_FOOTPRINT is in effect.

19 years agoFix typo in exptest.c.
Andy Polyakov [Tue, 4 Oct 2005 06:23:15 +0000 (06:23 +0000)]
Fix typo in exptest.c.

19 years agoReserve for SMALL_FOOTPRINT bn_asm.c. Currently OPENSSL_SMALL_FOOTPRINT
Andy Polyakov [Tue, 4 Oct 2005 06:22:11 +0000 (06:22 +0000)]
Reserve for SMALL_FOOTPRINT bn_asm.c. Currently OPENSSL_SMALL_FOOTPRINT
is defined on Windows CE targets.

19 years agoAdd reference implementation for bn_[mul|sqr]_mont, new candidates for
Andy Polyakov [Tue, 4 Oct 2005 06:19:29 +0000 (06:19 +0000)]
Add reference implementation for bn_[mul|sqr]_mont, new candidates for
assembler implementation.

19 years agoOops :-)
Dr. Stephen Henson [Sun, 2 Oct 2005 12:41:11 +0000 (12:41 +0000)]
Oops :-)

19 years agoMake OPENSSL_NO_COMP work under Win32.
Dr. Stephen Henson [Sun, 2 Oct 2005 12:28:40 +0000 (12:28 +0000)]
Make OPENSSL_NO_COMP work under Win32.

19 years agonew option "openssl ciphers -V"
Bodo Möller [Sat, 1 Oct 2005 04:08:48 +0000 (04:08 +0000)]
new option "openssl ciphers -V"

19 years agoFix compilation without OPENSSL_NO_COMP :-)
Dr. Stephen Henson [Sat, 1 Oct 2005 00:40:34 +0000 (00:40 +0000)]
Fix compilation without OPENSSL_NO_COMP :-)

19 years agoMake OPENSSL_NO_COMP compile again.
Dr. Stephen Henson [Fri, 30 Sep 2005 23:35:33 +0000 (23:35 +0000)]
Make OPENSSL_NO_COMP compile again.

19 years agosuccessfully updating the db shouldn't result in an error message
Nils Larsch [Fri, 30 Sep 2005 16:47:38 +0000 (16:47 +0000)]
successfully updating the db shouldn't result in an error message

19 years agoFix typo.
Andy Polyakov [Thu, 29 Sep 2005 20:16:04 +0000 (20:16 +0000)]
Fix typo.

19 years agoFix missing applink call.
Andy Polyakov [Thu, 29 Sep 2005 16:56:21 +0000 (16:56 +0000)]
Fix missing applink call.

19 years agoChange a comment so it corresponds to reality. Put back a character that
Richard Levitte [Wed, 28 Sep 2005 18:02:41 +0000 (18:02 +0000)]
Change a comment so it corresponds to reality.  Put back a character that
was previously replaced with a NUL for parsing purposes.  This seems to
fix a very weird parsing bug involving two variable references in the same
value.

19 years agoUpdate from stable branch.
Dr. Stephen Henson [Mon, 26 Sep 2005 11:18:04 +0000 (11:18 +0000)]
Update from stable branch.

19 years agoprotect BN_BLINDING_invert with a write lock and BN_BLINDING_convert
Nils Larsch [Thu, 22 Sep 2005 23:37:37 +0000 (23:37 +0000)]
protect BN_BLINDING_invert with a write lock and BN_BLINDING_convert
with a read lock

Submitted by: Leandro Santi <lesanti@fiuba7504.com.ar>

19 years agoFix SunOS 4 building issue.
Andy Polyakov [Thu, 22 Sep 2005 20:37:50 +0000 (20:37 +0000)]
Fix SunOS 4 building issue.
PR: 1196

19 years agoBroaden compatibility among Windows SDK versions. Elder versions don't have
Andy Polyakov [Thu, 22 Sep 2005 20:28:30 +0000 (20:28 +0000)]
Broaden compatibility among Windows SDK versions. Elder versions don't have
ULONG_PTR, so we replace it with equally wide SIZE_T.

19 years ago128 bit AES ciphersuites should be classified as HIGH.
Dr. Stephen Henson [Wed, 21 Sep 2005 00:55:42 +0000 (00:55 +0000)]
128 bit AES ciphersuites should be classified as HIGH.

19 years agoLatest MSVCR80 doesn't tolerate unsupported signal numbers, throwing
Andy Polyakov [Tue, 20 Sep 2005 20:30:15 +0000 (20:30 +0000)]
Latest MSVCR80 doesn't tolerate unsupported signal numbers, throwing
fatal exceptions.

19 years ago"Overload" SunOS 4.x memcmp, which ruins ASN1_OBJECT table lookups.
Andy Polyakov [Tue, 20 Sep 2005 20:19:07 +0000 (20:19 +0000)]
"Overload" SunOS 4.x memcmp, which ruins ASN1_OBJECT table lookups.
PR: 1196
Submitted by: Russel Ruby

19 years agoIA-32 BN tune-up. Performance imrpovement varies with platform and
Andy Polyakov [Tue, 20 Sep 2005 12:26:54 +0000 (12:26 +0000)]
IA-32 BN tune-up. Performance imrpovement varies with platform and
keylength, this time larger improvement for shorter keys, and reaches
15%. Both SSE2 and IALU code pathes are improved.

19 years agoFix typo: "powepc" vs "powerpc." G-r-r-r-r.
Andy Polyakov [Tue, 20 Sep 2005 12:15:31 +0000 (12:15 +0000)]
Fix typo: "powepc" vs "powerpc." G-r-r-r-r.
PR: 1198

19 years agoMD5 x86_64 assembler update.
Andy Polyakov [Tue, 20 Sep 2005 07:56:03 +0000 (07:56 +0000)]
MD5 x86_64 assembler update.

Submitted by: Marc Bevand and Charles Liu

19 years agoRefine AIX support.
Andy Polyakov [Tue, 20 Sep 2005 07:43:27 +0000 (07:43 +0000)]
Refine AIX support.
PR: 1198

19 years agoBC-32.pl updates.
Andy Polyakov [Tue, 20 Sep 2005 07:05:32 +0000 (07:05 +0000)]
BC-32.pl updates.

Submitted by: Old Wolf, Jon Bright

19 years agoProper solution to nasm compilation problems in Borland context.
Andy Polyakov [Tue, 20 Sep 2005 06:13:06 +0000 (06:13 +0000)]
Proper solution to nasm compilation problems in Borland context.

19 years agoMention BN_sqr failure on x86 platforms in ./RPOBLEMS.
Andy Polyakov [Mon, 19 Sep 2005 14:57:44 +0000 (14:57 +0000)]
Mention BN_sqr failure on x86 platforms in ./RPOBLEMS.
PR: 1176 [and others]

19 years agoAnother missing space in VC-32.pl [from 0.9.8].
Andy Polyakov [Mon, 19 Sep 2005 14:44:17 +0000 (14:44 +0000)]
Another missing space in VC-32.pl [from 0.9.8].

19 years agoMissing space in VC-32.pl.
Andy Polyakov [Mon, 19 Sep 2005 14:42:09 +0000 (14:42 +0000)]
Missing space in VC-32.pl.

19 years agoOops-type typo.
Andy Polyakov [Mon, 19 Sep 2005 13:12:00 +0000 (13:12 +0000)]
Oops-type typo.
PR: 1195

19 years agobswapl usage should be masked by I386_ONLY.
Andy Polyakov [Mon, 19 Sep 2005 13:06:46 +0000 (13:06 +0000)]
bswapl usage should be masked by I386_ONLY.
PR: 1195

19 years agocleanup doxygen comments
Nils Larsch [Mon, 19 Sep 2005 08:32:56 +0000 (08:32 +0000)]
cleanup doxygen comments

19 years agoadd some doxygen comments
Nils Larsch [Mon, 19 Sep 2005 08:10:10 +0000 (08:10 +0000)]
add some doxygen comments

19 years agoChange openssl.cnf to use UTF8Strings by default and not always include issuer
Dr. Stephen Henson [Fri, 16 Sep 2005 11:58:28 +0000 (11:58 +0000)]
Change openssl.cnf to use UTF8Strings by default and not always include issuer
and serial versions of AKID.

19 years agoFix for Win32.
Dr. Stephen Henson [Fri, 16 Sep 2005 11:45:55 +0000 (11:45 +0000)]
Fix for Win32.

19 years agofix typos
Nils Larsch [Thu, 15 Sep 2005 19:00:55 +0000 (19:00 +0000)]
fix typos

PR: 1201

19 years agocorrect+extend publication info
Bodo Möller [Mon, 12 Sep 2005 01:39:46 +0000 (01:39 +0000)]
correct+extend publication info

19 years agobugfix: register engine as default engine in ENGINE_set_default_DSA
Nils Larsch [Fri, 9 Sep 2005 07:50:09 +0000 (07:50 +0000)]
bugfix: register engine as default engine in ENGINE_set_default_DSA

Submitted by: Jonathon Green

19 years agoRemove warnings about signed vs. unsigned...
Richard Levitte [Mon, 5 Sep 2005 07:04:40 +0000 (07:04 +0000)]
Remove warnings about signed vs. unsigned...

19 years agoSynchronise VMS build with Unixly build.
Richard Levitte [Mon, 5 Sep 2005 04:20:26 +0000 (04:20 +0000)]
Synchronise VMS build with Unixly build.

19 years agofix function name in error
Nils Larsch [Sat, 3 Sep 2005 08:01:08 +0000 (08:01 +0000)]
fix function name in error

19 years agoUpdate print macro properly this time...
Dr. Stephen Henson [Sat, 3 Sep 2005 00:49:26 +0000 (00:49 +0000)]
Update print macro properly this time...

19 years agoUpdate ASN1 print implement macro.
Dr. Stephen Henson [Sat, 3 Sep 2005 00:48:13 +0000 (00:48 +0000)]
Update ASN1 print implement macro.

19 years agoUpdate asn1t.h too for ASN1 print.
Dr. Stephen Henson [Sat, 3 Sep 2005 00:44:08 +0000 (00:44 +0000)]
Update asn1t.h too for ASN1 print.

19 years agoUpdate to ASN1 printing code.
Dr. Stephen Henson [Sat, 3 Sep 2005 00:40:40 +0000 (00:40 +0000)]
Update to ASN1 printing code.

19 years agoTwo new verify flags functions.
Dr. Stephen Henson [Fri, 2 Sep 2005 22:49:54 +0000 (22:49 +0000)]
Two new verify flags functions.

19 years agofix typo in sbgp names
Nils Larsch [Fri, 2 Sep 2005 21:23:25 +0000 (21:23 +0000)]
fix typo in sbgp names

PR: 1194

19 years agodon't try to load cert/key when the "-nocert" option is set
Nils Larsch [Fri, 2 Sep 2005 12:44:59 +0000 (12:44 +0000)]
don't try to load cert/key when the "-nocert" option is set

19 years agoExtend callback function to support print customization.
Dr. Stephen Henson [Thu, 1 Sep 2005 20:42:52 +0000 (20:42 +0000)]
Extend callback function to support print customization.

19 years agoReturn 2 from X509_NAME printing routine to add newline.
Dr. Stephen Henson [Thu, 1 Sep 2005 18:02:51 +0000 (18:02 +0000)]
Return 2 from X509_NAME printing routine to add newline.

19 years agoUpdate ASN1 printing code and add a -print option to 'pkcs7' utility for
Dr. Stephen Henson [Thu, 1 Sep 2005 18:00:56 +0000 (18:00 +0000)]
Update ASN1 printing code and add a -print option to 'pkcs7' utility for
initial testing.

19 years agoSynchronise with Unixly build.
Richard Levitte [Thu, 1 Sep 2005 14:24:43 +0000 (14:24 +0000)]
Synchronise with Unixly build.

19 years agoInitial support for ASN1 print code.
Dr. Stephen Henson [Thu, 1 Sep 2005 13:59:16 +0000 (13:59 +0000)]
Initial support for ASN1 print code.

WARNING WARNING WARNING, experimental code, handle with care, use at
your own risk, may contain nuts.

19 years agoIntegrated support for PVK files.
Dr. Stephen Henson [Wed, 31 Aug 2005 16:37:54 +0000 (16:37 +0000)]
Integrated support for PVK files.

19 years agoLast synchronisationn with Unixly build. I hope...
Richard Levitte [Tue, 30 Aug 2005 06:00:32 +0000 (06:00 +0000)]
Last synchronisationn with Unixly build.  I hope...

19 years agofix warnings when building openssl with the following compiler options:
Nils Larsch [Sun, 28 Aug 2005 22:49:57 +0000 (22:49 +0000)]
fix warnings when building openssl with the following compiler options:
        -Wmissing-prototypes -Wcomment -Wformat -Wimplicit -Wmain -Wmultichar
        -Wswitch -Wshadow -Wtrigraphs -Werror -Wchar-subscripts
        -Wstrict-prototypes -Wreturn-type -Wpointer-arith  -W -Wunused
        -Wno-unused-parameter -Wuninitialized

19 years agoMore synchronisation with the Unixly build.
Richard Levitte [Sun, 28 Aug 2005 11:28:48 +0000 (11:28 +0000)]
More synchronisation with the Unixly build.

19 years agoFix warnings.
Ben Laurie [Sat, 27 Aug 2005 12:10:34 +0000 (12:10 +0000)]
Fix warnings.

19 years agoSynchronise with Unix changes.
Richard Levitte [Sat, 27 Aug 2005 04:31:57 +0000 (04:31 +0000)]
Synchronise with Unix changes.

19 years agoKeep cipher lists sorted in the source instead of sorting them at
Nils Larsch [Thu, 25 Aug 2005 07:29:54 +0000 (07:29 +0000)]
Keep cipher lists sorted in the source instead of sorting them at
runtime, thus removing the need for a lock. Add a test to ssltest
to verify that the cipher lists are sorted.

19 years agoGenerate primes, too.
Ben Laurie [Tue, 23 Aug 2005 13:48:17 +0000 (13:48 +0000)]
Generate primes, too.

19 years agorecent DH change does not avoid *all* possible small-subgroup attacks;
Bodo Möller [Tue, 23 Aug 2005 06:54:33 +0000 (06:54 +0000)]
recent DH change does not avoid *all* possible small-subgroup attacks;
let's be clear about that

19 years agoavoid potential spurious BN_free()
Bodo Möller [Tue, 23 Aug 2005 04:14:40 +0000 (04:14 +0000)]
avoid potential spurious BN_free()

Submitted by: David Heine <dlheine@suif.Stanford.EDU>

19 years agoinitialize cipher/digest methods table in SSL_library_init() and hence remove the...
Nils Larsch [Sun, 21 Aug 2005 23:06:23 +0000 (23:06 +0000)]
initialize cipher/digest methods table in SSL_library_init() and hence remove the need for a lock

19 years agoadd missing file
Nils Larsch [Sun, 21 Aug 2005 23:02:05 +0000 (23:02 +0000)]
add missing file

19 years agoMake D-H safer, include well-known primes.
Ben Laurie [Sun, 21 Aug 2005 16:00:17 +0000 (16:00 +0000)]
Make D-H safer, include well-known primes.

19 years agoFix warning.
Ben Laurie [Sun, 21 Aug 2005 15:59:10 +0000 (15:59 +0000)]
Fix warning.

19 years agoUse correct date and filename.
Dr. Stephen Henson [Sun, 21 Aug 2005 12:25:52 +0000 (12:25 +0000)]
Use correct date and filename.

19 years agoCommand line support for RSAPublicKey format.
Dr. Stephen Henson [Sun, 21 Aug 2005 00:18:26 +0000 (00:18 +0000)]
Command line support for RSAPublicKey format.

19 years agoDelete old ASN1_METHOD files.
Dr. Stephen Henson [Sat, 20 Aug 2005 19:48:58 +0000 (19:48 +0000)]
Delete old ASN1_METHOD files.

19 years agoAdd file which includes new ASN1 NETSCAPE format for certificates.
Dr. Stephen Henson [Sat, 20 Aug 2005 19:46:52 +0000 (19:46 +0000)]
Add file which includes new ASN1 NETSCAPE format for certificates.

19 years agoUpdate from stable branch.
Dr. Stephen Henson [Sat, 20 Aug 2005 19:34:49 +0000 (19:34 +0000)]
Update from stable branch.

19 years agoRemove ASN1_METHOD code replace with new ASN1 alternative.
Dr. Stephen Henson [Sat, 20 Aug 2005 18:12:45 +0000 (18:12 +0000)]
Remove ASN1_METHOD code replace with new ASN1 alternative.

19 years agoNew version of ASN1 print code, still not compiled in though.
Dr. Stephen Henson [Sat, 20 Aug 2005 00:08:29 +0000 (00:08 +0000)]
New version of ASN1 print code, still not compiled in though.

19 years agoLet the TLSv1_method() etc. functions return a const SSL_METHOD
Nils Larsch [Sun, 14 Aug 2005 21:48:33 +0000 (21:48 +0000)]
Let the TLSv1_method() etc. functions return a const SSL_METHOD
pointer and make the SSL_METHOD parameter in SSL_CTX_new,
SSL_CTX_set_ssl_version and SSL_set_ssl_method const.

19 years agoEliminate reference to removed platform line.
Andy Polyakov [Thu, 11 Aug 2005 09:38:59 +0000 (09:38 +0000)]
Eliminate reference to removed platform line.

19 years agoPedantic polish to WCE-specific #if clause in ectest.c
Andy Polyakov [Thu, 11 Aug 2005 08:42:46 +0000 (08:42 +0000)]
Pedantic polish to WCE-specific #if clause in ectest.c

19 years agoFix typo in WCE section in VC-32.pl
Andy Polyakov [Thu, 11 Aug 2005 08:18:42 +0000 (08:18 +0000)]
Fix typo in WCE section in VC-32.pl

19 years agoMention wcecompat update INSTALL.WCE.
Andy Polyakov [Wed, 10 Aug 2005 08:39:10 +0000 (08:39 +0000)]
Mention wcecompat update INSTALL.WCE.

19 years agoFix Intel assembler warnings.
Andy Polyakov [Wed, 10 Aug 2005 08:28:36 +0000 (08:28 +0000)]
Fix Intel assembler warnings.

19 years agoSuppress "deprecated" warnings introduced in VC8.
Andy Polyakov [Tue, 9 Aug 2005 22:44:54 +0000 (22:44 +0000)]
Suppress "deprecated" warnings introduced in VC8.

19 years agoAdd support for more recent WCE SDK.
Andy Polyakov [Tue, 9 Aug 2005 22:19:35 +0000 (22:19 +0000)]
Add support for more recent WCE SDK.

19 years agoa ssl object needs it's own instance of a ecdh key; remove obsolete comment
Nils Larsch [Mon, 8 Aug 2005 20:02:18 +0000 (20:02 +0000)]
a ssl object needs it's own instance of a ecdh key; remove obsolete comment

19 years agoremove unused internal foo_base_method functions
Nils Larsch [Mon, 8 Aug 2005 19:04:37 +0000 (19:04 +0000)]
remove unused internal foo_base_method functions