Dr. Stephen Henson [Sat, 30 Apr 2005 13:06:45 +0000 (13:06 +0000)]
Use more efficient way to locate end of an ASN1 structure.
Nils Larsch [Fri, 29 Apr 2005 21:20:31 +0000 (21:20 +0000)]
don't let BN_CTX_free(NULL) segfault
Nils Larsch [Fri, 29 Apr 2005 20:41:38 +0000 (20:41 +0000)]
remove false positive
Nils Larsch [Fri, 29 Apr 2005 20:10:06 +0000 (20:10 +0000)]
check return value of RAND_pseudo_bytes; backport from the stable branch
Nils Larsch [Fri, 29 Apr 2005 19:24:50 +0000 (19:24 +0000)]
remove some false positive
Nils Larsch [Fri, 29 Apr 2005 15:56:06 +0000 (15:56 +0000)]
hide the definition of ECDSA_METHOD and ECDSA_DATA (and mutatis mutandis
for ecdh)
Nils Larsch [Fri, 29 Apr 2005 15:21:09 +0000 (15:21 +0000)]
add 192 bit prime curve to the command line options
Nils Larsch [Fri, 29 Apr 2005 15:07:34 +0000 (15:07 +0000)]
add reference to BN_BLINDING_new.pod
Nils Larsch [Fri, 29 Apr 2005 14:26:59 +0000 (14:26 +0000)]
avoid warnings when building on systems where sizeof(void *) > sizeof(int)
Andy Polyakov [Thu, 28 Apr 2005 08:49:01 +0000 (08:49 +0000)]
Pointer to BN_MONT_CTX could be used uninitialized.
Richard Levitte [Thu, 28 Apr 2005 04:55:28 +0000 (04:55 +0000)]
Synchronise with Unix build system.
Dr. Stephen Henson [Thu, 28 Apr 2005 00:21:29 +0000 (00:21 +0000)]
Increase offset for BIO_f_enc() to avoid problems with overlapping buffers
when decrypting data.
Dr. Stephen Henson [Wed, 27 Apr 2005 16:32:30 +0000 (16:32 +0000)]
Update default dependency flags.
Dr. Stephen Henson [Wed, 27 Apr 2005 16:27:14 +0000 (16:27 +0000)]
Lots of Win32 fixes for DTLS.
1. "unsigned long long" isn't portable changed: to BN_ULLONG.
2. The LL prefix isn't allowed in VC++ but it isn't needed where it is used.
2. Avoid lots of compiler warnings about signed/unsigned mismatches.
3. Include new library directory pqueue in mk1mf build system.
4. Update symbols.
Nils Larsch [Wed, 27 Apr 2005 08:56:15 +0000 (08:56 +0000)]
get rid of Makefile.ssl in util/
Nils Larsch [Wed, 27 Apr 2005 08:48:55 +0000 (08:48 +0000)]
no Makefile.ssl anymore
Nils Larsch [Wed, 27 Apr 2005 07:57:50 +0000 (07:57 +0000)]
add missing parentheses
Dr. Stephen Henson [Wed, 27 Apr 2005 00:04:59 +0000 (00:04 +0000)]
Change method_mont_p from (char *) to (BN_MONT_CTX *) and remove several
casts.
Dr. Stephen Henson [Tue, 26 Apr 2005 23:58:54 +0000 (23:58 +0000)]
Port BN_MONT_CTX_set_locked() from stable branch.
The function rsa_eay_mont_helper() has been removed because it is no longer
needed after this change.
Dr. Stephen Henson [Tue, 26 Apr 2005 23:45:49 +0000 (23:45 +0000)]
Stop unused variable warning.
Dr. Stephen Henson [Tue, 26 Apr 2005 23:33:47 +0000 (23:33 +0000)]
Remove more false positives.
Bodo Möller [Tue, 26 Apr 2005 23:22:49 +0000 (23:22 +0000)]
there's no such thing as Makefile.ssl anymore
Bodo Möller [Tue, 26 Apr 2005 23:22:25 +0000 (23:22 +0000)]
util/mk1mf.pl issues have been resolved
Dr. Stephen Henson [Tue, 26 Apr 2005 23:21:49 +0000 (23:21 +0000)]
Port from stable branch.
Dr. Stephen Henson [Tue, 26 Apr 2005 23:19:21 +0000 (23:19 +0000)]
More false positives and cases covered by port of prime.c
Bodo Möller [Tue, 26 Apr 2005 23:11:05 +0000 (23:11 +0000)]
"PS" to Steve's commit (Port prime utility across from stable branch).
Dr. Stephen Henson [Tue, 26 Apr 2005 23:02:52 +0000 (23:02 +0000)]
Port prime utility across from stable branch.
Nils Larsch [Tue, 26 Apr 2005 22:33:36 +0000 (22:33 +0000)]
add docu for BN_BLINDING functions
Nils Larsch [Tue, 26 Apr 2005 22:31:48 +0000 (22:31 +0000)]
some updates for the blinding code; summary:
- possibility of re-creation of the blinding parameters after a
fixed number of uses (suggested by Bodo)
- calculatition of the rsa::e in case it's absent and p and q
are present (see bug report #785)
- improve the performance when if one rsa structure is shared by
more than a thread (see bug report #555)
- fix the problem described in bug report #827
- hide the definition ot the BN_BLINDING structure in bn_blind.c
Dr. Stephen Henson [Tue, 26 Apr 2005 22:25:10 +0000 (22:25 +0000)]
Remove more false positives.
Dr. Stephen Henson [Tue, 26 Apr 2005 22:07:17 +0000 (22:07 +0000)]
Port from stable branch.
Dr. Stephen Henson [Tue, 26 Apr 2005 22:05:19 +0000 (22:05 +0000)]
Remove more false positives.
Bodo Möller [Tue, 26 Apr 2005 18:53:22 +0000 (18:53 +0000)]
Fix various incorrect error function codes.
("perl util/ck_errf.pl */*.c */*/*.c" still reports many more.)
Bodo Möller [Tue, 26 Apr 2005 18:48:02 +0000 (18:48 +0000)]
take OPENSSL_NO_DGRAM into account
(via make update)
Bodo Möller [Tue, 26 Apr 2005 18:21:25 +0000 (18:21 +0000)]
let mkdef.pl know about OPENSSL_NO_DGRAM
(which appears in the new file crypto/bio/bss_dgram.c)
Bodo Möller [Tue, 26 Apr 2005 18:18:35 +0000 (18:18 +0000)]
remove some functions from exported headers
Bodo Möller [Tue, 26 Apr 2005 18:09:21 +0000 (18:09 +0000)]
make update
Bodo Möller [Tue, 26 Apr 2005 18:08:00 +0000 (18:08 +0000)]
fix SSLerr stuff for DTLS1 code;
move some functions from exported header <openssl/dtl1.h> into "ssl_locl.h";
fix silly indentation (a TAB is *not* always 4 spaces)
Dr. Stephen Henson [Tue, 26 Apr 2005 17:43:53 +0000 (17:43 +0000)]
Fixes for signed/unsigned warnings and shadows.
Dr. Stephen Henson [Tue, 26 Apr 2005 17:37:21 +0000 (17:37 +0000)]
False positive removed.
Ben Laurie [Tue, 26 Apr 2005 16:02:40 +0000 (16:02 +0000)]
Add DTLS support.
Ben Laurie [Tue, 26 Apr 2005 13:56:36 +0000 (13:56 +0000)]
make depend.
Nils Larsch [Tue, 26 Apr 2005 08:17:58 +0000 (08:17 +0000)]
remove false positive
Bodo Möller [Mon, 25 Apr 2005 23:19:07 +0000 (23:19 +0000)]
some more false positives to remove
Bodo Möller [Mon, 25 Apr 2005 23:17:30 +0000 (23:17 +0000)]
make update
Bodo Möller [Mon, 25 Apr 2005 23:16:58 +0000 (23:16 +0000)]
move some more entries into FIPS file
Bodo Möller [Mon, 25 Apr 2005 23:09:00 +0000 (23:09 +0000)]
Use OPENSSL_NO_CAST, not OPENSSL_NO_CAST5 in e_old.c
PR: 959
Bodo Möller [Mon, 25 Apr 2005 23:06:15 +0000 (23:06 +0000)]
Remove some more entries that are false positives, or have been
resolved by recent commits.
Bodo Möller [Mon, 25 Apr 2005 22:55:24 +0000 (22:55 +0000)]
Sort out changes in FIPS and other changes, collected in separate files.
(Also remove another "make update".)
Bodo Möller [Mon, 25 Apr 2005 22:08:13 +0000 (22:08 +0000)]
remove some more false positives
Bodo Möller [Mon, 25 Apr 2005 22:02:34 +0000 (22:02 +0000)]
remove some more false positives
Bodo Möller [Mon, 25 Apr 2005 21:54:14 +0000 (21:54 +0000)]
remove some more changes that came from HEAD
Bodo Möller [Mon, 25 Apr 2005 21:53:08 +0000 (21:53 +0000)]
fix editing error, and remove a false positive
Bodo Möller [Mon, 25 Apr 2005 21:42:14 +0000 (21:42 +0000)]
update
Bodo Möller [Mon, 25 Apr 2005 21:36:56 +0000 (21:36 +0000)]
remove extra whitespace; fix link
Bodo Möller [Mon, 25 Apr 2005 21:32:52 +0000 (21:32 +0000)]
remove some false positives
Bodo Möller [Mon, 25 Apr 2005 21:25:48 +0000 (21:25 +0000)]
add recent changes; now this file is up-to-date
Bodo Möller [Mon, 25 Apr 2005 21:22:08 +0000 (21:22 +0000)]
bring up-to-date
Bodo Möller [Mon, 25 Apr 2005 21:06:05 +0000 (21:06 +0000)]
first step to melt down ChangeLog.0_9_7-stable_not-in-head :-)
Bodo Möller [Mon, 25 Apr 2005 21:01:31 +0000 (21:01 +0000)]
This is a collection of those CVS change log entries for the 0.9.7
branch (OpenSSL_0_9_7-stable) that do not appear similarly in
0.9.8-dev (CVS head).
Some obvious false positives have been eliminated: e.g., we do not
care about a simple "make update"; and we don't care about changes
identified to the 0.9.7 branch that were explicitly identified as
backports from head.
Eliminating all other entries (and finally this file), either as false
positives or as things that should go into 0.9.8, remains to be done.
Andy Polyakov [Sun, 24 Apr 2005 21:09:20 +0000 (21:09 +0000)]
Avoid L1 cache aliasing even between key and S-boxes.
Ben Laurie [Sun, 24 Apr 2005 12:02:49 +0000 (12:02 +0000)]
Flag changes in Configure and config, too.
Update dependencies.
Nils Larsch [Sun, 24 Apr 2005 09:17:48 +0000 (09:17 +0000)]
update
Dr. Stephen Henson [Sun, 24 Apr 2005 02:24:53 +0000 (02:24 +0000)]
Oops...
Dr. Stephen Henson [Sun, 24 Apr 2005 02:21:02 +0000 (02:21 +0000)]
Recognize zlib and krb5 options in mk1mf.pl
Nils Larsch [Sat, 23 Apr 2005 13:45:49 +0000 (13:45 +0000)]
make asn.1 field names const
Nils Larsch [Sat, 23 Apr 2005 10:11:16 +0000 (10:11 +0000)]
change prototype of the ecdh KDF: make input parameter const and the outlen argument more flexible
Ben Laurie [Sat, 23 Apr 2005 06:05:24 +0000 (06:05 +0000)]
Add debug target, remove cast, note possible bug.
Ben Laurie [Fri, 22 Apr 2005 23:57:46 +0000 (23:57 +0000)]
Add prototypes.
Nils Larsch [Fri, 22 Apr 2005 21:57:36 +0000 (21:57 +0000)]
more const
Nils Larsch [Fri, 22 Apr 2005 20:17:17 +0000 (20:17 +0000)]
make update
Nils Larsch [Fri, 22 Apr 2005 20:02:44 +0000 (20:02 +0000)]
- use BN_set_negative and BN_is_negative instead of BN_set_sign
and BN_get_sign
- implement BN_set_negative as a function
- always use "#define BN_is_zero(a) ((a)->top == 0)"
Andy Polyakov [Fri, 22 Apr 2005 11:49:32 +0000 (11:49 +0000)]
Avoid aliasing between stack frames and S-boxes. Compress prefetch code.
Nils Larsch [Thu, 21 Apr 2005 09:43:09 +0000 (09:43 +0000)]
the pointer to the message digest is const
Richard Levitte [Thu, 21 Apr 2005 09:10:19 +0000 (09:10 +0000)]
Provide a default OPENSSL_ia32cap_loc for non-Intel platforms where
util/libeay.num is important when building shared libraries, like
VMS.
Dr. Stephen Henson [Thu, 21 Apr 2005 00:46:28 +0000 (00:46 +0000)]
Don't use standard kerberos library locations in MK1MF builds.
Fix typo in mk1mf.pl
Dr. Stephen Henson [Wed, 20 Apr 2005 21:48:48 +0000 (21:48 +0000)]
Make kerberos ciphersuite code compile again.
Avoid more shadow warnings.
Dr. Stephen Henson [Wed, 20 Apr 2005 21:48:06 +0000 (21:48 +0000)]
Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts.
Remove more bogus shadow warnings.
Dr. Stephen Henson [Wed, 20 Apr 2005 21:39:13 +0000 (21:39 +0000)]
Stop compiler warnings about deprecated lvalue casts.
Dr. Stephen Henson [Wed, 20 Apr 2005 21:34:29 +0000 (21:34 +0000)]
Stop bogus shadowing warning.
Dr. Stephen Henson [Wed, 20 Apr 2005 16:22:58 +0000 (16:22 +0000)]
Process MINFO file earlier in mk1mf.pl so it can modify variables like CFLAGS.
Process kerberos include and library options.
Dr. Stephen Henson [Wed, 20 Apr 2005 16:01:50 +0000 (16:01 +0000)]
Handle similar mk1mf.pl options with a hash table.
Richard Levitte [Wed, 20 Apr 2005 13:21:10 +0000 (13:21 +0000)]
signed vs. unsigned.
Richard Levitte [Wed, 20 Apr 2005 13:17:42 +0000 (13:17 +0000)]
Make sure id2_func is properly cast as well...
Richard Levitte [Wed, 20 Apr 2005 13:12:33 +0000 (13:12 +0000)]
signed vs. unsigned.
Richard Levitte [Wed, 20 Apr 2005 13:09:46 +0000 (13:09 +0000)]
Avoid compiler complaint about mismatched function signatures
(void * != char *)
Richard Levitte [Wed, 20 Apr 2005 12:55:15 +0000 (12:55 +0000)]
Resolve signed vs. unsigned.
Richard Levitte [Wed, 20 Apr 2005 12:53:50 +0000 (12:53 +0000)]
Type mismatch detected by DEC C compiler. void* != void**
Richard Levitte [Wed, 20 Apr 2005 10:02:16 +0000 (10:02 +0000)]
Avoid compiler complaint about mismatched function signatures
(void * != RSA *)
Dr. Stephen Henson [Tue, 19 Apr 2005 23:54:44 +0000 (23:54 +0000)]
Fix logic in mkdef.pl function is_valid.
Update symbols
Dr. Stephen Henson [Tue, 19 Apr 2005 18:57:17 +0000 (18:57 +0000)]
Stop perl warning.
Dr. Stephen Henson [Tue, 19 Apr 2005 13:24:44 +0000 (13:24 +0000)]
New "algorithm define" OPENSSL_NO_GMP. Update mkdef.pl and Configure script
to use it.
Dr. Stephen Henson [Tue, 19 Apr 2005 11:49:25 +0000 (11:49 +0000)]
Ignore TYPEDEF_OF in mkdef.pl
Dr. Stephen Henson [Tue, 19 Apr 2005 00:15:18 +0000 (00:15 +0000)]
Update year.
Dr. Stephen Henson [Tue, 19 Apr 2005 00:12:36 +0000 (00:12 +0000)]
Various Win32 and other fixes for warnings and compilation errors.
Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.
Andy Polyakov [Sun, 17 Apr 2005 21:05:57 +0000 (21:05 +0000)]
Throw in x86_64 AT&T to MASM assembler converter to facilitate development
of dual-ABI Unix/Win64 modules.
Dr. Stephen Henson [Sun, 17 Apr 2005 13:59:36 +0000 (13:59 +0000)]
Fix from stable branch.
Richard Levitte [Sun, 17 Apr 2005 09:07:37 +0000 (09:07 +0000)]
Synchronise with ec/Makefile.
Andy Polyakov [Sat, 16 Apr 2005 15:23:21 +0000 (15:23 +0000)]
Mitigate cache-timing attack in CBC mode. This is done by implementing
compressed tables (2x compression factor) and by pre-fetching them into
processor cache prior every CBC en-/decryption pass. One can argue why
just CBC? Well, it's commonly used mode in real-life applications and
API allows us to amortize the prefetch costs for larger data chunks...
Nils Larsch [Fri, 15 Apr 2005 18:29:33 +0000 (18:29 +0000)]
const fixes