Lutz Jänicke [Mon, 15 Apr 2002 13:28:53 +0000 (13:28 +0000)]
Use the "mail" short name according to RFC2798 (Michael Bell
<michael.bell@rz.hu-berlin.de>).
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Mon, 15 Apr 2002 10:38:37 +0000 (10:38 +0000)]
Some more OID enhancements.
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Mon, 15 Apr 2002 09:53:47 +0000 (09:53 +0000)]
Fix CRLF problem in BASE64 decode.
Submitted by:
Reviewed by:
PR:
Bodo Möller [Sun, 14 Apr 2002 13:28:41 +0000 (13:28 +0000)]
remove disabled code
Bodo Möller [Sun, 14 Apr 2002 13:04:58 +0000 (13:04 +0000)]
fix length field we create when converting SSL 2.0 format into SSL 3.0/TLS 1.0 format
(the bug was introduced with message callback support)
Bodo Möller [Sat, 13 Apr 2002 22:51:26 +0000 (22:51 +0000)]
Implement known-IV countermeasure.
Fix length checks in ssl3_get_client_hello().
Use s->s3->in_read_app_data differently to fix ssl3_read_internal().
Bodo Möller [Sat, 13 Apr 2002 22:06:25 +0000 (22:06 +0000)]
error reported by Karsten Braaten
Richard Levitte [Sat, 13 Apr 2002 12:28:49 +0000 (12:28 +0000)]
Avoid emacs backup files when making a snapshot
Bodo Möller [Fri, 12 Apr 2002 13:51:42 +0000 (13:51 +0000)]
looks like a typo
Bodo Möller [Fri, 12 Apr 2002 13:46:46 +0000 (13:46 +0000)]
synchronize with main branch
Richard Levitte [Thu, 11 Apr 2002 22:14:10 +0000 (22:14 +0000)]
Check error code from a2d_ASN1_OBJECT().
Richard Levitte [Thu, 11 Apr 2002 21:53:57 +0000 (21:53 +0000)]
Change the date to XX xxx XXXX in development versions.
Lutz Jänicke [Thu, 11 Apr 2002 18:43:01 +0000 (18:43 +0000)]
Compile NEWS from CHANGES.
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Wed, 10 Apr 2002 19:50:23 +0000 (19:50 +0000)]
In preparation of 0.9.7: re-order changelog, so that the changes
are listed as of ... -> 0.9.6c -> 0.9.6d -> 0.9.7
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Wed, 10 Apr 2002 12:34:32 +0000 (12:34 +0000)]
Keep my own specially optimized HP-UX shared library building up to date.
Submitted by:
Reviewed by:
PR:
Bodo Möller [Tue, 9 Apr 2002 13:04:00 +0000 (13:04 +0000)]
error reported by Karsten Braaten
Bodo Möller [Tue, 9 Apr 2002 12:42:15 +0000 (12:42 +0000)]
harmonize capitalization
Bodo Möller [Tue, 9 Apr 2002 11:53:51 +0000 (11:53 +0000)]
add usage examples
Richard Levitte [Sat, 6 Apr 2002 20:22:40 +0000 (20:22 +0000)]
Allow longer program names (VMS allows up to 39 characters).
Submitted by Compaq.
Richard Levitte [Sat, 6 Apr 2002 19:15:27 +0000 (19:15 +0000)]
make update
Richard Levitte [Sat, 6 Apr 2002 18:59:57 +0000 (18:59 +0000)]
Allow longer program names (VMS allows up to 39 characters).
Submitted by Compaq.
Richard Levitte [Sat, 6 Apr 2002 11:57:58 +0000 (11:57 +0000)]
Oops, the system macro for VMS is OPENSSL_SYS_VMS, not VMS
Richard Levitte [Sat, 6 Apr 2002 11:37:13 +0000 (11:37 +0000)]
Recognise DEC C++ as equivalent to DEC C for the definitions of OPENSSL_EXTERN and OPENSSL_GLOBAL.
Submitted by Compaq.
Richard Levitte [Sat, 6 Apr 2002 11:35:45 +0000 (11:35 +0000)]
Use recv() and send() for socket communication on VMS instead of read()
and write(). The reason is that read() and write() make additional record
level locking which causes hangs of Compaq Secure Web Server (Apache) with
SSL.
Submitted by Compaq.
Richard Levitte [Sat, 6 Apr 2002 09:42:25 +0000 (09:42 +0000)]
Make shared libraries resolve global symbols within themselves first.
Currently only on GNUish linkers...
Submitted by Steven Bade <sbade@austin.ibm.com>
Lutz Jänicke [Thu, 4 Apr 2002 17:49:39 +0000 (17:49 +0000)]
Fix buggy object definitions (Svenning Sorensen <sss@sss.dnsalias.net>).
Submitted by:
Reviewed by:
PR:
Richard Levitte [Wed, 3 Apr 2002 15:02:00 +0000 (15:02 +0000)]
Forgot one of the casts
Richard Levitte [Wed, 3 Apr 2002 14:47:50 +0000 (14:47 +0000)]
Cast the pointers to the BIGNUM data to unsigned long *. This would be
harmful if we didn't also pass the exact number of bytes of that data
Richard Levitte [Fri, 29 Mar 2002 23:48:43 +0000 (23:48 +0000)]
Fix of mixup bwtween SOMAXCONN and SO_MAXCONN.
Furthermore, make SO_MAXCONN the first choice, since that's the standard
(as far as I know).
Lutz Jänicke [Tue, 26 Mar 2002 17:15:32 +0000 (17:15 +0000)]
Make short names of objects RFC2256-compliant.
Submitted by:
Reviewed by:
PR:
Richard Levitte [Tue, 26 Mar 2002 14:26:08 +0000 (14:26 +0000)]
Add the possibility to enable olde des support, not just disable it, for future support. Redocument
Richard Levitte [Tue, 26 Mar 2002 13:58:30 +0000 (13:58 +0000)]
Add the mapping of des_random_seed() for 0.9.6 compatibility.
Make sure DES_cblock is defined at all times (meaning one shouldn't include
openssl/des_old.h directly any more).
Richard Levitte [Tue, 26 Mar 2002 13:54:04 +0000 (13:54 +0000)]
Correct the mapping for des_read_pw()
Bodo Möller [Mon, 25 Mar 2002 23:17:35 +0000 (23:17 +0000)]
fix memory leak
Submitted by: Nils Larsch
Bodo Möller [Mon, 25 Mar 2002 23:14:50 +0000 (23:14 +0000)]
add missing declaration
Submitted by: Nils Larsch
Lutz Jänicke [Mon, 25 Mar 2002 17:11:25 +0000 (17:11 +0000)]
Fix typo (Craig Davison <cd@securityfocus.com>).
Submitted by:
Reviewed by:
PR:
Bodo Möller [Fri, 22 Mar 2002 11:02:45 +0000 (11:02 +0000)]
fix conditational compilation for OPENSSL_NO_...
Richard Levitte [Fri, 22 Mar 2002 10:46:13 +0000 (10:46 +0000)]
Key schedules are given as arguments a bit differently in 0.9.6 and
earlier. Also, it was an error to define crypt() at all times.
Richard Levitte [Fri, 22 Mar 2002 10:29:56 +0000 (10:29 +0000)]
Key schedules are given as arguments a bit differently in 0.9.6 and
earlier. Also, a few 0.9.6 functions were missing their mappings.
Richard Levitte [Fri, 22 Mar 2002 02:36:58 +0000 (02:36 +0000)]
Use the more modern DES API in the openssl subcommands.
Richard Levitte [Fri, 22 Mar 2002 02:33:24 +0000 (02:33 +0000)]
Change des_old.h so OpenSSL 0.9.6 compatibility is default. One must
define OPENSSL_DES_LIBDES_COMPATIBILITY to get libdes compatibility.
At the same time, correct a couple of argument errors for the cfb
encryption routines.
Make destest use as much of the old API as possible, to make sure it
works properly. Other tests will use the new API...
Lutz Jänicke [Thu, 21 Mar 2002 19:17:06 +0000 (19:17 +0000)]
Fix buggy if-condition (thomas poindessous <poinde_t@epita.fr>).
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Thu, 21 Mar 2002 19:10:07 +0000 (19:10 +0000)]
Remove superflous statement <justin.fletcher@ntlworld.com>.
Submitted by:
Reviewed by:
PR:
Bodo Möller [Wed, 20 Mar 2002 16:02:46 +0000 (16:02 +0000)]
fix DH_generate_parameters for general 'generator'
Lutz Jänicke [Tue, 19 Mar 2002 16:44:26 +0000 (16:44 +0000)]
Map new X509 verification errors to alert codes (Tom Wu <tom@arcot.com>).
Submitted by:
Reviewed by:
PR:
Dr. Stephen Henson [Tue, 19 Mar 2002 01:27:10 +0000 (01:27 +0000)]
Initialize ciph_ctx in kssl.c
Dr. Stephen Henson [Sat, 16 Mar 2002 23:19:25 +0000 (23:19 +0000)]
Ensure EVP_CipherInit() uses the correct encode/decode parameter if
enc == -1
[Reported by Markus Friedl <markus@openbsd.org>]
Fix typo in dh_lib.c (use of DSAerr instead of DHerr).
Bodo Möller [Fri, 15 Mar 2002 16:47:51 +0000 (16:47 +0000)]
Rename 'cray-t90-cc' into 'cray-j90'.
Add to 'config'.
Bodo Möller [Fri, 15 Mar 2002 10:52:03 +0000 (10:52 +0000)]
fix ssl3_pending
Lutz Jänicke [Thu, 14 Mar 2002 18:47:51 +0000 (18:47 +0000)]
Add missing strength classification.
Submitted by:
Reviewed by:
PR:
Dr. Stephen Henson [Thu, 14 Mar 2002 18:16:49 +0000 (18:16 +0000)]
Initialize cipher context in KRB5
("D. Russell" <russelld@aol.net>)
Allow HMAC functions to use an alternative ENGINE.
Bodo Möller [Thu, 14 Mar 2002 09:53:30 +0000 (09:53 +0000)]
Fixes for 'no-hw' combined with 'no-SOME_CIPHER'.
Fix dsaparam usage output.
Submitted by: Nils Larsch (for 0.9.8-dev; backported to 0.9.7-dev)
Bodo Möller [Thu, 14 Mar 2002 09:48:32 +0000 (09:48 +0000)]
use BIO_nwrite() more properly
Bodo Möller [Thu, 14 Mar 2002 09:35:15 +0000 (09:35 +0000)]
disable '#ifdef DEBUG' code
Dr. Stephen Henson [Wed, 13 Mar 2002 13:58:33 +0000 (13:58 +0000)]
Undo previous patch: avoid warnings by #undef'ing
duplicate definitions.
Suggested by "Kenneth R. Robinette" <support@securenetterm.com>
Dr. Stephen Henson [Tue, 12 Mar 2002 19:38:16 +0000 (19:38 +0000)]
Fix Kerberos warnings with VC++.
Dr. Stephen Henson [Tue, 12 Mar 2002 13:33:20 +0000 (13:33 +0000)]
Fix ASN1 additions for KRB5
Dr. Stephen Henson [Tue, 12 Mar 2002 03:00:59 +0000 (03:00 +0000)]
Fix various warnings when compiling with KRB5 code.
Bodo Möller [Mon, 11 Mar 2002 09:35:33 +0000 (09:35 +0000)]
asm/mips3.o problems
Dr. Stephen Henson [Sat, 9 Mar 2002 18:56:38 +0000 (18:56 +0000)]
Make ciphers and digests obtain an ENGINE functional reference
if impl is explicitly supplied.
Dr. Stephen Henson [Sat, 9 Mar 2002 18:24:14 +0000 (18:24 +0000)]
Make {RSA,DSA,DH}_new_method obtain and release an ENGINE
functional reference.
Dr. Stephen Henson [Fri, 8 Mar 2002 19:12:38 +0000 (19:12 +0000)]
typo
Dr. Stephen Henson [Fri, 8 Mar 2002 19:06:36 +0000 (19:06 +0000)]
Fix the Win32_rename() function so it correctly
returns an error code. Use the same code in Win9X
and NT.
Fix some ca.c options so they work under Win32:
unlink/rename wont work under Win32 unless the file
is closed.
Richard Levitte [Thu, 7 Mar 2002 19:39:19 +0000 (19:39 +0000)]
Synchronise the AEP engine in all branches. For 0.9.6-stable [engine], implement software fallback
Richard Levitte [Thu, 7 Mar 2002 17:13:49 +0000 (17:13 +0000)]
When closing, do not use close(). Also, if the closing call fails, do
not return immediately since that leaves a locked lock.
Richard Levitte [Thu, 7 Mar 2002 15:38:40 +0000 (15:38 +0000)]
Change des_old.c to use types prefixed with _ossl_old_des_.
Ben Laurie [Wed, 6 Mar 2002 16:59:12 +0000 (16:59 +0000)]
ADH-DES-CBC-SHA should be LOW.
Dr. Stephen Henson [Wed, 6 Mar 2002 14:09:46 +0000 (14:09 +0000)]
ENGINE module additions.
Add "init" command to control ENGINE
initialization.
Call ENGINE_finish on initialized ENGINEs on exit.
Reorder shutdown in apps.c: modules should be shut
down first.
Add test private key loader to openssl ENGINE: this
just loads a private key in PEM format.
Fix print format for dh length parameter.
Richard Levitte [Wed, 6 Mar 2002 06:25:21 +0000 (06:25 +0000)]
OpenSSL currently fails on certain pure 64-bit architectures. This is a showstopper
Bodo Möller [Tue, 5 Mar 2002 15:30:13 +0000 (15:30 +0000)]
Rephrase statement on the security of two-key 3DES.
[Chosen plaintext attack: R. Merkle, M. Hellman: "On the Security of
Multiple Encryption", CACM 24 (1981) pp. 465-467, p. 776.
Known plaintext angriff: P.C. van Oorschot, M. Wiener: "A
known-plaintext attack on two-key triple encryption", EUROCRYPT '90.]
Bodo Möller [Tue, 5 Mar 2002 15:05:17 +0000 (15:05 +0000)]
fix printf call
Bodo Möller [Tue, 5 Mar 2002 15:03:16 +0000 (15:03 +0000)]
typo
Dr. Stephen Henson [Tue, 5 Mar 2002 13:49:27 +0000 (13:49 +0000)]
Make sure the type accessed by the LONG and ZLONG ASN1 type
is really a long, to avoid problems on platforms where
sizeof(int) != sizeof(long).
Richard Levitte [Tue, 5 Mar 2002 11:25:46 +0000 (11:25 +0000)]
Provide a pre 0.9.7 compatibility mapping if
OPENSSL_DES_PRE_0_9_7_COMPATIBILITY is defined. NOT AT ALL TESTED YET!
Add a comment as to the libdes compatibility.
Richard Levitte [Tue, 5 Mar 2002 09:43:09 +0000 (09:43 +0000)]
New configuration targets for OpenBSD, handed to me by Bob Beck <beck@openbsd.org>
Bodo Möller [Tue, 5 Mar 2002 09:06:57 +0000 (09:06 +0000)]
'#if OPENSSL_VERSION_NUMBER >= ...' to document the recent change
Richard Levitte [Mon, 4 Mar 2002 18:09:10 +0000 (18:09 +0000)]
A dash was missing in this branch as well.
Richard Levitte [Mon, 4 Mar 2002 16:08:53 +0000 (16:08 +0000)]
Rename des_SPtrans to DES_SPtrans to differentiate from libdes and avoid certain linkage clashes.
Richard Levitte [Mon, 4 Mar 2002 15:59:05 +0000 (15:59 +0000)]
Make it so one can select tests from within the test directory
Dr. Stephen Henson [Sun, 3 Mar 2002 17:07:27 +0000 (17:07 +0000)]
Fix warnings about signed/unsigned mismatch and global
shadowing (random, index) in hw_4758.c
Ben Laurie [Fri, 1 Mar 2002 15:39:29 +0000 (15:39 +0000)]
OpenBSD variant.
Richard Levitte [Thu, 28 Feb 2002 22:06:26 +0000 (22:06 +0000)]
Remove the perl/ subdirectory. It hasn't been worked on for ages, is
very broken, and there are working modules in CPAN, which makes our
module even more moot.
Richard Levitte [Thu, 28 Feb 2002 20:28:23 +0000 (20:28 +0000)]
make update
Bodo Möller [Thu, 28 Feb 2002 14:10:13 +0000 (14:10 +0000)]
use ERR_peek_last_error() instead of ERR_peek_error()
Bodo Möller [Thu, 28 Feb 2002 14:03:41 +0000 (14:03 +0000)]
use ERR_peek_last_error() instead of ERR_peek_error() to ignore
any other errors that may be left in the error queue
Submitted by: Jeffrey Altman
Richard Levitte [Thu, 28 Feb 2002 13:18:47 +0000 (13:18 +0000)]
VMS addaptation, including a few more long names that needed hacking.
Richard Levitte [Thu, 28 Feb 2002 12:59:03 +0000 (12:59 +0000)]
Make sure aep_close_connection() is declared and has a prototype that's
consistent with the rest of the AEP functions
Richard Levitte [Thu, 28 Feb 2002 12:44:05 +0000 (12:44 +0000)]
Increase internal security when using strncpy, by making sure the resulting string is NUL-terminated
Richard Levitte [Thu, 28 Feb 2002 11:37:35 +0000 (11:37 +0000)]
Updated AEP engine, submitted by Diarmuid O'Neill <Diarmuid.ONeill@aep.ie>
Richard Levitte [Thu, 28 Feb 2002 11:30:42 +0000 (11:30 +0000)]
Document the added modes for AES
Bodo Möller [Thu, 28 Feb 2002 10:55:52 +0000 (10:55 +0000)]
Add 'void *' argument to app_verify_callback.
Submitted by: D. K. Smetters <smetters@parc.xerox.com>
Reviewed by: Bodo Moeller
Geoff Thorpe [Wed, 27 Feb 2002 22:45:48 +0000 (22:45 +0000)]
This adds a new ENGINE to support IBM 4758 cards, contributed by Maurice
Gittens.
Lutz Jänicke [Wed, 27 Feb 2002 11:24:39 +0000 (11:24 +0000)]
Fix the fix (Yoram Zahavi)...
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Wed, 27 Feb 2002 08:10:12 +0000 (08:10 +0000)]
SSL_clear != SSL_free/SSL_new
Submitted by:
Reviewed by:
PR:
Lutz Jänicke [Tue, 26 Feb 2002 21:44:07 +0000 (21:44 +0000)]
Make sure that bad sessions are removed in SSL_clear() (found by
Yoram Zahavi).
Submitted by:
Reviewed by:
PR:
Dr. Stephen Henson [Tue, 26 Feb 2002 19:32:16 +0000 (19:32 +0000)]
Always init ctx_tmp in PKCS7_dataFinal since it is always cleaned up.
Richard Levitte [Tue, 26 Feb 2002 14:37:25 +0000 (14:37 +0000)]
make update
Dr. Stephen Henson [Tue, 26 Feb 2002 13:45:19 +0000 (13:45 +0000)]
Fix new -aes command argument handling
Dr. Stephen Henson [Sun, 24 Feb 2002 16:22:20 +0000 (16:22 +0000)]
Make the engine config module always add dynamic ENGINEs
to the list using dynamic_path. This stops ENGINEs which
don't supply any default algorithms being automatically
freed (because they have no references) and allows them
to be accessed by id.
Alternative dynamic loading behaviour can be achieved by
issuing the dynamic ENGINE ctrls separately in the config file.
Dr. Stephen Henson [Sat, 23 Feb 2002 13:43:07 +0000 (13:43 +0000)]
Remove old comment