]>
granicus.if.org Git - openssl/log
Nils Larsch [Mon, 13 Jun 2005 08:38:29 +0000 (08:38 +0000)]
update FAQ
Richard Levitte [Mon, 13 Jun 2005 02:38:07 +0000 (02:38 +0000)]
Show what the offending target was.
PR: 1108
Ben Laurie [Fri, 10 Jun 2005 20:49:10 +0000 (20:49 +0000)]
Default sensibly when in FIPS mode.
Nils Larsch [Fri, 10 Jun 2005 20:00:39 +0000 (20:00 +0000)]
- let SSL_CTX_set_cipher_list and SSL_set_cipher_list return an
error if the cipher list is empty
- fix last commit in ssl_create_cipher_list
- clean up ssl_create_cipher_list
Dr. Stephen Henson [Fri, 10 Jun 2005 00:41:25 +0000 (00:41 +0000)]
Remove CRs from files.
Andy Polyakov [Thu, 9 Jun 2005 21:37:30 +0000 (21:37 +0000)]
Eliminate gcc -pedantic warnings.
Andy Polyakov [Thu, 9 Jun 2005 20:47:41 +0000 (20:47 +0000)]
Allow for dso load by explicit path on HP-UX.
Nils Larsch [Wed, 8 Jun 2005 22:24:27 +0000 (22:24 +0000)]
use "=" instead of "|=", fix typo
Richard Levitte [Wed, 8 Jun 2005 21:59:51 +0000 (21:59 +0000)]
Avoid endless loops. Really, we were using the same variable for two
different conditions...
Andy Polyakov [Wed, 8 Jun 2005 21:27:34 +0000 (21:27 +0000)]
Fix couple gcc 4 warnings, reformat comment.
Nils Larsch [Wed, 8 Jun 2005 21:16:32 +0000 (21:16 +0000)]
ssl_create_cipher_list should return an error if no cipher could be
collected (see SSL_CTX_set_cipher_list manpage). Fix handling of
"cipher1+cipher2" expressions in ssl_cipher_process_rulestr.
PR: 836 + 1005
Andy Polyakov [Tue, 7 Jun 2005 19:56:52 +0000 (19:56 +0000)]
Mask new fips_*vs test programs in non-fips builds.
Andy Polyakov [Tue, 7 Jun 2005 16:36:52 +0000 (16:36 +0000)]
Simplify ssltest compile rule.
Andy Polyakov [Tue, 7 Jun 2005 16:36:21 +0000 (16:36 +0000)]
Simplified shortcut from FIPS_mode_set.
Andy Polyakov [Tue, 7 Jun 2005 14:08:54 +0000 (14:08 +0000)]
Fix typos and add missing lines in Makefile.
Andy Polyakov [Tue, 7 Jun 2005 12:39:27 +0000 (12:39 +0000)]
Initial support for DSO FIPS fingerprinting.
Andy Polyakov [Tue, 7 Jun 2005 10:49:35 +0000 (10:49 +0000)]
Ad-hoc DSO_pathbyaddr for selected platforms from HEAD in FIPS context.
Andy Polyakov [Tue, 7 Jun 2005 10:48:24 +0000 (10:48 +0000)]
Set OPENSSL_PIC flags for shared builds [from HEAD].
Dr. Stephen Henson [Mon, 6 Jun 2005 22:42:35 +0000 (22:42 +0000)]
Update from head.
Dr. Stephen Henson [Mon, 6 Jun 2005 18:05:00 +0000 (18:05 +0000)]
Delete test error print.
Richard Levitte [Mon, 6 Jun 2005 08:38:13 +0000 (08:38 +0000)]
Skipping all tests just because one algorithm is disabled seems a bit harsch.
PR: 1089
Andy Polyakov [Mon, 6 Jun 2005 08:38:03 +0000 (08:38 +0000)]
Don't mention Makefile.ssl and don't mention Solaris x86 ld bug, as it's
not relevant in 0.9.7 context.
Richard Levitte [Sun, 5 Jun 2005 23:17:53 +0000 (23:17 +0000)]
Document the change.
Richard Levitte [Sun, 5 Jun 2005 23:15:18 +0000 (23:15 +0000)]
Remove the incorrect installation of '%{openssldir}/lib'.
PR: 1074
Richard Levitte [Sun, 5 Jun 2005 21:54:59 +0000 (21:54 +0000)]
Old typo...
PR: 1097
Andy Polyakov [Sun, 5 Jun 2005 18:09:24 +0000 (18:09 +0000)]
./PROBLEMS update from HEAD.
Richard Levitte [Sat, 4 Jun 2005 08:44:05 +0000 (08:44 +0000)]
The macro THREADS was changed to OPENSSL_THREADS a long time ago.
PR: 1096
Dr. Stephen Henson [Thu, 2 Jun 2005 23:16:33 +0000 (23:16 +0000)]
Use correct config file environment variable.
Dr. Stephen Henson [Thu, 2 Jun 2005 20:30:03 +0000 (20:30 +0000)]
Typo.
Dr. Stephen Henson [Thu, 2 Jun 2005 20:08:30 +0000 (20:08 +0000)]
Add CHANGES entry for PSS and X9.31 padding.
Andy Polyakov [Thu, 2 Jun 2005 19:15:15 +0000 (19:15 +0000)]
fips/*/Makefile updates to accomodate new VSes.
Richard Levitte [Thu, 2 Jun 2005 19:08:41 +0000 (19:08 +0000)]
Synchronise some more with the Unix build.
Andy Polyakov [Thu, 2 Jun 2005 18:07:16 +0000 (18:07 +0000)]
Make PSS more flexible, most notably assign special meaning to negative
sLen values: -1 -> sLen = hLen, -2 -> sLen autochosen/autorecovered.
Andy Polyakov [Thu, 2 Jun 2005 18:01:09 +0000 (18:01 +0000)]
Comply with .sam[ple].
Dr. Stephen Henson [Thu, 2 Jun 2005 01:18:25 +0000 (01:18 +0000)]
Remove redundant reference, which produces a warning (??) in gcc 3.4.2.
Dr. Stephen Henson [Thu, 2 Jun 2005 00:09:25 +0000 (00:09 +0000)]
Update symbols. Add #ifdef OPENSSL_FIPS in various places.
Dr. Stephen Henson [Wed, 1 Jun 2005 22:06:46 +0000 (22:06 +0000)]
Fixes for unusual key lengths an PSS.
Nils Larsch [Wed, 1 Jun 2005 08:36:38 +0000 (08:36 +0000)]
clear error queue on success and return NULL if cert could be read
PR: 1088
Nils Larsch [Tue, 31 May 2005 20:39:54 +0000 (20:39 +0000)]
fix assertion
Richard Levitte [Tue, 31 May 2005 20:29:23 +0000 (20:29 +0000)]
Synchronise with the Unix build...
Dr. Stephen Henson [Tue, 31 May 2005 12:38:03 +0000 (12:38 +0000)]
Preliminary support for X9.31 RSA key generation for FIPS.
Included prime derivation, random prime generation, test program and
new option to genrsa.
Richard Levitte [Mon, 30 May 2005 22:26:22 +0000 (22:26 +0000)]
Synchronise with Unixly build
Dr. Stephen Henson [Sun, 29 May 2005 12:30:21 +0000 (12:30 +0000)]
make update
Dr. Stephen Henson [Sun, 29 May 2005 12:22:05 +0000 (12:22 +0000)]
Stop warnings.
Richard Levitte [Sun, 29 May 2005 12:13:05 +0000 (12:13 +0000)]
We have some source with \r\n as line ends. DEC C informs about that,
and I really can't be bothered...
Dr. Stephen Henson [Sat, 28 May 2005 20:15:48 +0000 (20:15 +0000)]
Add X9.31 signature support, mainly for FIPS140. Add new option to rsautl and
include options to use X9.31 in tests.
Dr. Stephen Henson [Sat, 28 May 2005 11:18:44 +0000 (11:18 +0000)]
Add PSS support to tests.
Dr. Stephen Henson [Fri, 27 May 2005 21:59:52 +0000 (21:59 +0000)]
Add PSS support. Minimal at this stage for FIPS140.
Dr. Stephen Henson [Fri, 27 May 2005 21:22:48 +0000 (21:22 +0000)]
Error checking.
Bodo Möller [Fri, 27 May 2005 15:39:15 +0000 (15:39 +0000)]
Use BN_with_flags() in a cleaner way.
Complete previous change:
Constant time DSA [sync with mainstream].
Andy Polyakov [Fri, 27 May 2005 08:12:44 +0000 (08:12 +0000)]
Constant-time RSA [sync with mainstream].
Submitted by: bodo
Andy Polyakov [Fri, 27 May 2005 08:11:16 +0000 (08:11 +0000)]
Constant time DH [sync with mainstream].
Submitted by: bodo
Andy Polyakov [Fri, 27 May 2005 06:42:11 +0000 (06:42 +0000)]
Constant-time DSA signing [sync with mainstream].
Submitted by: bodo
Andy Polyakov [Thu, 26 May 2005 23:09:02 +0000 (23:09 +0000)]
fips/sha1 -> fips/sha remains.
Andy Polyakov [Thu, 26 May 2005 23:01:20 +0000 (23:01 +0000)]
Remove fips/sha1/*.
Andy Polyakov [Thu, 26 May 2005 22:17:55 +0000 (22:17 +0000)]
Throw in SHAmix test vectors.
Andy Polyakov [Thu, 26 May 2005 21:29:10 +0000 (21:29 +0000)]
Rename fips/sha1 to fips/sha.
Dr. Stephen Henson [Thu, 26 May 2005 18:48:24 +0000 (18:48 +0000)]
Allow zero length messages and make format look more like samples.
Dr. Stephen Henson [Thu, 26 May 2005 18:31:53 +0000 (18:31 +0000)]
FIPS SHA* test for new format.
Bodo Möller [Thu, 26 May 2005 04:40:42 +0000 (04:40 +0000)]
make sure DSA signing exponentiations really are constant-time
Richard Levitte [Tue, 24 May 2005 03:50:47 +0000 (03:50 +0000)]
Synchronise with Unix build.
Richard Levitte [Tue, 24 May 2005 03:27:18 +0000 (03:27 +0000)]
Typo correction
Richard Levitte [Sat, 21 May 2005 17:39:48 +0000 (17:39 +0000)]
When _XOPEN_SOURCE is defined, make sure it's defined to 500. Required in
http://www.opengroup.org/onlinepubs/
007908799 /xsh/compilation.html.
Notified by David Wolfe <dwolfe5272@yahoo.com>
Andy Polyakov [Thu, 19 May 2005 22:29:55 +0000 (22:29 +0000)]
fips_check_rsa update.
Dr. Stephen Henson [Tue, 17 May 2005 19:48:42 +0000 (19:48 +0000)]
Place #ifdef OPENSSL_FIPS round the SHA-XXX functions in evp.h so mkdef.pl
knows about it.
Andy Polyakov [Tue, 17 May 2005 06:57:14 +0000 (06:57 +0000)]
SHA-XXX are available in FIPS context only in 0.9.7.
Bodo Möller [Tue, 17 May 2005 05:52:18 +0000 (05:52 +0000)]
fix memory leak (BIO_free_all needs pointer to first BIO)
PR: 1070
Bodo Möller [Mon, 16 May 2005 19:14:38 +0000 (19:14 +0000)]
Change wording for BN_mod_exp_mont_consttime() entry
Dr. Stephen Henson [Mon, 16 May 2005 17:52:32 +0000 (17:52 +0000)]
Remove redundant test. Add new SHAXXX algorithms to mkdef.pl, update
symbol info.
Bodo Möller [Mon, 16 May 2005 01:26:08 +0000 (01:26 +0000)]
Implement fixed-window exponentiation to mitigate hyper-threading
timing attacks.
BN_FLG_EXP_CONSTTIME requests this algorithm, and this done by default for
RSA/DSA/DH private key computations unless
RSA_FLAG_NO_EXP_CONSTTIME/DSA_FLAG_NO_EXP_CONSTTIME/
DH_FLAG_NO_EXP_CONSTTIME is set.
Submitted by: Matthew D Wood
Reviewed by: Bodo Moeller
Richard Levitte [Sun, 15 May 2005 09:20:15 +0000 (09:20 +0000)]
Synchronise with the Unixly build.
Dr. Stephen Henson [Sat, 14 May 2005 12:59:05 +0000 (12:59 +0000)]
Fix from HEAD.
Dr. Stephen Henson [Fri, 13 May 2005 00:23:02 +0000 (00:23 +0000)]
Fixes from HEAD.
Dr. Stephen Henson [Thu, 12 May 2005 23:13:40 +0000 (23:13 +0000)]
Fix from HEAD.
Dr. Stephen Henson [Thu, 12 May 2005 17:27:48 +0000 (17:27 +0000)]
Typo.
Bodo Möller [Thu, 12 May 2005 06:24:26 +0000 (06:24 +0000)]
fix msg_callback() arguments for SSL 2.0 compatible client hello
(previous revision got this wrong)
Bodo Möller [Wed, 11 May 2005 18:26:08 +0000 (18:26 +0000)]
PR:Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabled
with the SSL_OP_NO_SSLv2 option.
Bodo Möller [Wed, 11 May 2005 17:49:50 +0000 (17:49 +0000)]
make update
Dr. Stephen Henson [Wed, 11 May 2005 16:28:33 +0000 (16:28 +0000)]
Allow AES CFB1 ciphers in FIPS mode.
Dr. Stephen Henson [Wed, 11 May 2005 00:35:55 +0000 (00:35 +0000)]
Stop warnings.
Andy Polyakov [Tue, 10 May 2005 22:57:21 +0000 (22:57 +0000)]
Tidy up an error code.
Andy Polyakov [Tue, 10 May 2005 22:54:44 +0000 (22:54 +0000)]
Fix fips_hmactest.c.
Nils Larsch [Tue, 10 May 2005 11:57:19 +0000 (11:57 +0000)]
use 'p' as conversion specifier for printf to avoid truncation of
pointers on 64 bit platforms. Patch supplied by Daniel Gryniewicz
via Mike Frysinger <vapier@gentoo.org>.
PR: 1064
Nils Larsch [Tue, 10 May 2005 09:52:39 +0000 (09:52 +0000)]
improve command line argument checking
PR: 1061
Andy Polyakov [Mon, 9 May 2005 22:35:35 +0000 (22:35 +0000)]
Add algorithm selection command-line option to fips_hmactest
[and fix typo in fips.h].
Andy Polyakov [Mon, 9 May 2005 21:41:47 +0000 (21:41 +0000)]
Comply with optimization manual (no data should share cache-line with code).
Andy Polyakov [Mon, 9 May 2005 20:47:42 +0000 (20:47 +0000)]
Missing declaration.
Andy Polyakov [Mon, 9 May 2005 19:34:34 +0000 (19:34 +0000)]
Void new FIPS tests if configured without FIPS.
Andy Polyakov [Mon, 9 May 2005 19:22:14 +0000 (19:22 +0000)]
Add FIPS HMAC power-up test.
Dr. Stephen Henson [Sun, 8 May 2005 23:48:18 +0000 (23:48 +0000)]
Stop warnings in asserts.
Add support for SHA-XXX in RSA tests.
Make fips_check_rsa work for key lengths > 2048 bits.
Andy Polyakov [Sun, 8 May 2005 19:52:13 +0000 (19:52 +0000)]
Eliminate "statement with no effect" warning when OPENSSL_assert macro
is used with constant assertion.
Andy Polyakov [Sun, 8 May 2005 08:25:14 +0000 (08:25 +0000)]
Remove SSE2 option from fips sha512 [for now].
Andy Polyakov [Sat, 7 May 2005 22:33:29 +0000 (22:33 +0000)]
Move SHA1 selftest input vectors to writable segment.
Andy Polyakov [Sat, 7 May 2005 22:06:40 +0000 (22:06 +0000)]
Add FIPS RNG tests.
Submitted by: Steve Marquess
Andy Polyakov [Sat, 7 May 2005 17:21:34 +0000 (17:21 +0000)]
Backport SHA-[224|256|384|512] from HEAD to FIPS.
Dr. Stephen Henson [Sat, 7 May 2005 12:50:28 +0000 (12:50 +0000)]
Add FIPS rsa sign test program.
Dr. Stephen Henson [Sat, 7 May 2005 12:11:37 +0000 (12:11 +0000)]
FIPS RSA sign test.
Andy Polyakov [Sat, 7 May 2005 08:53:06 +0000 (08:53 +0000)]
Downsync from HEAD.
PR: 1059
Dr. Stephen Henson [Thu, 5 May 2005 21:46:30 +0000 (21:46 +0000)]
FIPS RSA verify test.
Richard Levitte [Thu, 5 May 2005 06:39:10 +0000 (06:39 +0000)]
A few more fingerprints...