]>
granicus.if.org Git - openssl/log
Andy Polyakov [Mon, 19 Sep 2005 14:45:20 +0000 (14:45 +0000)]
Visual Studio 2005 workaround from HEAD.
PR: 1183
Nils Larsch [Thu, 15 Sep 2005 19:11:41 +0000 (19:11 +0000)]
fix typos
PR: 1201
Nils Larsch [Fri, 9 Sep 2005 07:53:39 +0000 (07:53 +0000)]
bugfix: register engine as default engine in ENGINE_set_default_DSA
Submitted by: Jonathon Green
Nils Larsch [Fri, 2 Sep 2005 21:22:08 +0000 (21:22 +0000)]
fix typo in sbgp names
PR: 1194
Nils Larsch [Fri, 5 Aug 2005 14:39:11 +0000 (14:39 +0000)]
fix potential memory leak + improved error checking
PR: 1182
Dr. Stephen Henson [Wed, 6 Jul 2005 18:29:00 +0000 (18:29 +0000)]
Enable dss1 for FIPS mode.
Richard Levitte [Mon, 4 Jul 2005 21:44:19 +0000 (21:44 +0000)]
The private key should never have ended up in newreq.pem.
Now, it ends up in newkey.pem instead.
Andy Polyakov [Sun, 3 Jul 2005 13:18:47 +0000 (13:18 +0000)]
Fix bugs in bug-fix to x509/by_dir.c [from HEAD].
PR: 1131
Andy Polyakov [Sun, 3 Jul 2005 09:24:35 +0000 (09:24 +0000)]
Bugfix for bn_div_words PPC assembler implementation [from HEAD].
Nils Larsch [Fri, 1 Jul 2005 16:13:06 +0000 (16:13 +0000)]
initialize newly allocated data
PR: 1145
Dr. Stephen Henson [Thu, 30 Jun 2005 11:37:36 +0000 (11:37 +0000)]
Check PKCS7 structures in PKCS#12 files are of type data.
Richard Levitte [Tue, 28 Jun 2005 15:44:15 +0000 (15:44 +0000)]
asn1parse doesn't support any TXT format, so let's stop pretending
it does.
Andy Polyakov [Mon, 27 Jun 2005 22:08:58 +0000 (22:08 +0000)]
Move fips_test_suite rules from fips/Makefile to test/Makefile.
Andy Polyakov [Mon, 27 Jun 2005 21:14:15 +0000 (21:14 +0000)]
Eliminate dependency on UNICODE macro.
Andy Polyakov [Mon, 27 Jun 2005 16:00:57 +0000 (16:00 +0000)]
Fix typos in apps/apps.c.
Andy Polyakov [Sun, 26 Jun 2005 21:48:19 +0000 (21:48 +0000)]
Update fips_test_suite make rule.
Andy Polyakov [Sun, 26 Jun 2005 17:24:48 +0000 (17:24 +0000)]
Revert RC4 parameters on IA64 from back-ported ones to original to preserve
binary compatibility.
PR: 1114
Andy Polyakov [Sun, 26 Jun 2005 16:25:25 +0000 (16:25 +0000)]
IA64 RC4 update from HEAD [see commentary in HEAD for details].
PR: 1114
Dr. Stephen Henson [Fri, 24 Jun 2005 10:52:18 +0000 (10:52 +0000)]
Add Argen root CAs.
Richard Levitte [Fri, 24 Jun 2005 05:13:13 +0000 (05:13 +0000)]
Someone did some cutting and pasting and didn't quite finish the job :-).
Notified by Steffen Pankratz <kratz00@gmx.de>
Richard Levitte [Thu, 23 Jun 2005 21:15:06 +0000 (21:15 +0000)]
Change dir_ctrl to check for the environment variable before using the default
directory instead of the other way around.
PR: 1131
Dr. Stephen Henson [Wed, 22 Jun 2005 17:24:32 +0000 (17:24 +0000)]
OID database had a NULL entry for NID 666. Add a real OID in its place.
Richard Levitte [Mon, 20 Jun 2005 22:11:21 +0000 (22:11 +0000)]
Do no try to pretend we're at the end of anything unless we're at the end
of a 4-character block.
Richard Levitte [Mon, 20 Jun 2005 20:45:44 +0000 (20:45 +0000)]
Check for 'usage' and 'Usage'.
Submitted by Tim Rice <tim@multitalents.net>. His comment is:
I noticed "make report" didn't show the cc version on most of
my System V platforms. This patch corrects this.
Richard Levitte [Mon, 20 Jun 2005 04:29:54 +0000 (04:29 +0000)]
Add crypto/bn/bn_prime.h to the collection of generated files. In the
update target, place the dependency on depend last, so all necessary files
are generated *before* the dependencies are figured out.
PR: 1121
Richard Levitte [Sun, 19 Jun 2005 20:31:22 +0000 (20:31 +0000)]
With DJGPP, it seems like the return code from grep, even when in the
middle of a pipe, is noted. Counter that by forcing a true return code
when the return code has no importance.
PR: 1085
Richard Levitte [Sun, 19 Jun 2005 20:20:29 +0000 (20:20 +0000)]
Undefine DECRANDOM before redefining it.
PR: 1110
Richard Levitte [Sun, 19 Jun 2005 20:00:47 +0000 (20:00 +0000)]
Don't put C++ comments in a C file.
Richard Levitte [Sat, 18 Jun 2005 05:52:20 +0000 (05:52 +0000)]
Add better documentation on how id_function() should be defined and what
issues there are.
PR: 1096
Richard Levitte [Sat, 18 Jun 2005 04:42:29 +0000 (04:42 +0000)]
Move the definition of DEVRANDOM for DJGPP from Configure to e_os.h.
That should solve the issues with propagating it through the Makefiles.
PR: 1110
Richard Levitte [Sat, 18 Jun 2005 04:32:18 +0000 (04:32 +0000)]
Only define ZLIB_SHARED if it hasn't already been defined (on the command
line, for example).
PR: 1112
Richard Levitte [Sat, 18 Jun 2005 04:27:11 +0000 (04:27 +0000)]
Have pod2man.pl accept '=for comment ...' before the '=head1 NAME' line.
PR: 1113
Nils Larsch [Fri, 17 Jun 2005 21:14:35 +0000 (21:14 +0000)]
clear dso pointer in case of an error
PR: 816
Nils Larsch [Fri, 17 Jun 2005 20:26:07 +0000 (20:26 +0000)]
update for the cswift engine:
- fix the problem described in bug report 825
- fix a segfault when the engine fails to initialize
- let the engine switch to software when keysize > 2048
PR: 825, 826
Submitted by: Frédéric Giudicelli
Richard Levitte [Thu, 16 Jun 2005 22:21:39 +0000 (22:21 +0000)]
Do not undefine _XOPEN_SOURCE. This is currently experimental, and
will be firmed up as soon as it's been verified not to break anything.
Andy Polyakov [Tue, 14 Jun 2005 12:29:34 +0000 (12:29 +0000)]
Make sure detached fingerprints are installed [as well as minor cygwin
and hpux updates].
Andy Polyakov [Tue, 14 Jun 2005 12:18:47 +0000 (12:18 +0000)]
Make human-readable error messages more human-friendly.
Nils Larsch [Mon, 13 Jun 2005 08:38:29 +0000 (08:38 +0000)]
update FAQ
Richard Levitte [Mon, 13 Jun 2005 02:38:07 +0000 (02:38 +0000)]
Show what the offending target was.
PR: 1108
Ben Laurie [Fri, 10 Jun 2005 20:49:10 +0000 (20:49 +0000)]
Default sensibly when in FIPS mode.
Nils Larsch [Fri, 10 Jun 2005 20:00:39 +0000 (20:00 +0000)]
- let SSL_CTX_set_cipher_list and SSL_set_cipher_list return an
error if the cipher list is empty
- fix last commit in ssl_create_cipher_list
- clean up ssl_create_cipher_list
Dr. Stephen Henson [Fri, 10 Jun 2005 00:41:25 +0000 (00:41 +0000)]
Remove CRs from files.
Andy Polyakov [Thu, 9 Jun 2005 21:37:30 +0000 (21:37 +0000)]
Eliminate gcc -pedantic warnings.
Andy Polyakov [Thu, 9 Jun 2005 20:47:41 +0000 (20:47 +0000)]
Allow for dso load by explicit path on HP-UX.
Nils Larsch [Wed, 8 Jun 2005 22:24:27 +0000 (22:24 +0000)]
use "=" instead of "|=", fix typo
Richard Levitte [Wed, 8 Jun 2005 21:59:51 +0000 (21:59 +0000)]
Avoid endless loops. Really, we were using the same variable for two
different conditions...
Andy Polyakov [Wed, 8 Jun 2005 21:27:34 +0000 (21:27 +0000)]
Fix couple gcc 4 warnings, reformat comment.
Nils Larsch [Wed, 8 Jun 2005 21:16:32 +0000 (21:16 +0000)]
ssl_create_cipher_list should return an error if no cipher could be
collected (see SSL_CTX_set_cipher_list manpage). Fix handling of
"cipher1+cipher2" expressions in ssl_cipher_process_rulestr.
PR: 836 + 1005
Andy Polyakov [Tue, 7 Jun 2005 19:56:52 +0000 (19:56 +0000)]
Mask new fips_*vs test programs in non-fips builds.
Andy Polyakov [Tue, 7 Jun 2005 16:36:52 +0000 (16:36 +0000)]
Simplify ssltest compile rule.
Andy Polyakov [Tue, 7 Jun 2005 16:36:21 +0000 (16:36 +0000)]
Simplified shortcut from FIPS_mode_set.
Andy Polyakov [Tue, 7 Jun 2005 14:08:54 +0000 (14:08 +0000)]
Fix typos and add missing lines in Makefile.
Andy Polyakov [Tue, 7 Jun 2005 12:39:27 +0000 (12:39 +0000)]
Initial support for DSO FIPS fingerprinting.
Andy Polyakov [Tue, 7 Jun 2005 10:49:35 +0000 (10:49 +0000)]
Ad-hoc DSO_pathbyaddr for selected platforms from HEAD in FIPS context.
Andy Polyakov [Tue, 7 Jun 2005 10:48:24 +0000 (10:48 +0000)]
Set OPENSSL_PIC flags for shared builds [from HEAD].
Dr. Stephen Henson [Mon, 6 Jun 2005 22:42:35 +0000 (22:42 +0000)]
Update from head.
Dr. Stephen Henson [Mon, 6 Jun 2005 18:05:00 +0000 (18:05 +0000)]
Delete test error print.
Richard Levitte [Mon, 6 Jun 2005 08:38:13 +0000 (08:38 +0000)]
Skipping all tests just because one algorithm is disabled seems a bit harsch.
PR: 1089
Andy Polyakov [Mon, 6 Jun 2005 08:38:03 +0000 (08:38 +0000)]
Don't mention Makefile.ssl and don't mention Solaris x86 ld bug, as it's
not relevant in 0.9.7 context.
Richard Levitte [Sun, 5 Jun 2005 23:17:53 +0000 (23:17 +0000)]
Document the change.
Richard Levitte [Sun, 5 Jun 2005 23:15:18 +0000 (23:15 +0000)]
Remove the incorrect installation of '%{openssldir}/lib'.
PR: 1074
Richard Levitte [Sun, 5 Jun 2005 21:54:59 +0000 (21:54 +0000)]
Old typo...
PR: 1097
Andy Polyakov [Sun, 5 Jun 2005 18:09:24 +0000 (18:09 +0000)]
./PROBLEMS update from HEAD.
Richard Levitte [Sat, 4 Jun 2005 08:44:05 +0000 (08:44 +0000)]
The macro THREADS was changed to OPENSSL_THREADS a long time ago.
PR: 1096
Dr. Stephen Henson [Thu, 2 Jun 2005 23:16:33 +0000 (23:16 +0000)]
Use correct config file environment variable.
Dr. Stephen Henson [Thu, 2 Jun 2005 20:30:03 +0000 (20:30 +0000)]
Typo.
Dr. Stephen Henson [Thu, 2 Jun 2005 20:08:30 +0000 (20:08 +0000)]
Add CHANGES entry for PSS and X9.31 padding.
Andy Polyakov [Thu, 2 Jun 2005 19:15:15 +0000 (19:15 +0000)]
fips/*/Makefile updates to accomodate new VSes.
Richard Levitte [Thu, 2 Jun 2005 19:08:41 +0000 (19:08 +0000)]
Synchronise some more with the Unix build.
Andy Polyakov [Thu, 2 Jun 2005 18:07:16 +0000 (18:07 +0000)]
Make PSS more flexible, most notably assign special meaning to negative
sLen values: -1 -> sLen = hLen, -2 -> sLen autochosen/autorecovered.
Andy Polyakov [Thu, 2 Jun 2005 18:01:09 +0000 (18:01 +0000)]
Comply with .sam[ple].
Dr. Stephen Henson [Thu, 2 Jun 2005 01:18:25 +0000 (01:18 +0000)]
Remove redundant reference, which produces a warning (??) in gcc 3.4.2.
Dr. Stephen Henson [Thu, 2 Jun 2005 00:09:25 +0000 (00:09 +0000)]
Update symbols. Add #ifdef OPENSSL_FIPS in various places.
Dr. Stephen Henson [Wed, 1 Jun 2005 22:06:46 +0000 (22:06 +0000)]
Fixes for unusual key lengths an PSS.
Nils Larsch [Wed, 1 Jun 2005 08:36:38 +0000 (08:36 +0000)]
clear error queue on success and return NULL if cert could be read
PR: 1088
Nils Larsch [Tue, 31 May 2005 20:39:54 +0000 (20:39 +0000)]
fix assertion
Richard Levitte [Tue, 31 May 2005 20:29:23 +0000 (20:29 +0000)]
Synchronise with the Unix build...
Dr. Stephen Henson [Tue, 31 May 2005 12:38:03 +0000 (12:38 +0000)]
Preliminary support for X9.31 RSA key generation for FIPS.
Included prime derivation, random prime generation, test program and
new option to genrsa.
Richard Levitte [Mon, 30 May 2005 22:26:22 +0000 (22:26 +0000)]
Synchronise with Unixly build
Dr. Stephen Henson [Sun, 29 May 2005 12:30:21 +0000 (12:30 +0000)]
make update
Dr. Stephen Henson [Sun, 29 May 2005 12:22:05 +0000 (12:22 +0000)]
Stop warnings.
Richard Levitte [Sun, 29 May 2005 12:13:05 +0000 (12:13 +0000)]
We have some source with \r\n as line ends. DEC C informs about that,
and I really can't be bothered...
Dr. Stephen Henson [Sat, 28 May 2005 20:15:48 +0000 (20:15 +0000)]
Add X9.31 signature support, mainly for FIPS140. Add new option to rsautl and
include options to use X9.31 in tests.
Dr. Stephen Henson [Sat, 28 May 2005 11:18:44 +0000 (11:18 +0000)]
Add PSS support to tests.
Dr. Stephen Henson [Fri, 27 May 2005 21:59:52 +0000 (21:59 +0000)]
Add PSS support. Minimal at this stage for FIPS140.
Dr. Stephen Henson [Fri, 27 May 2005 21:22:48 +0000 (21:22 +0000)]
Error checking.
Bodo Möller [Fri, 27 May 2005 15:39:15 +0000 (15:39 +0000)]
Use BN_with_flags() in a cleaner way.
Complete previous change:
Constant time DSA [sync with mainstream].
Andy Polyakov [Fri, 27 May 2005 08:12:44 +0000 (08:12 +0000)]
Constant-time RSA [sync with mainstream].
Submitted by: bodo
Andy Polyakov [Fri, 27 May 2005 08:11:16 +0000 (08:11 +0000)]
Constant time DH [sync with mainstream].
Submitted by: bodo
Andy Polyakov [Fri, 27 May 2005 06:42:11 +0000 (06:42 +0000)]
Constant-time DSA signing [sync with mainstream].
Submitted by: bodo
Andy Polyakov [Thu, 26 May 2005 23:09:02 +0000 (23:09 +0000)]
fips/sha1 -> fips/sha remains.
Andy Polyakov [Thu, 26 May 2005 23:01:20 +0000 (23:01 +0000)]
Remove fips/sha1/*.
Andy Polyakov [Thu, 26 May 2005 22:17:55 +0000 (22:17 +0000)]
Throw in SHAmix test vectors.
Andy Polyakov [Thu, 26 May 2005 21:29:10 +0000 (21:29 +0000)]
Rename fips/sha1 to fips/sha.
Dr. Stephen Henson [Thu, 26 May 2005 18:48:24 +0000 (18:48 +0000)]
Allow zero length messages and make format look more like samples.
Dr. Stephen Henson [Thu, 26 May 2005 18:31:53 +0000 (18:31 +0000)]
FIPS SHA* test for new format.
Bodo Möller [Thu, 26 May 2005 04:40:42 +0000 (04:40 +0000)]
make sure DSA signing exponentiations really are constant-time
Richard Levitte [Tue, 24 May 2005 03:50:47 +0000 (03:50 +0000)]
Synchronise with Unix build.
Richard Levitte [Tue, 24 May 2005 03:27:18 +0000 (03:27 +0000)]
Typo correction
Richard Levitte [Sat, 21 May 2005 17:39:48 +0000 (17:39 +0000)]
When _XOPEN_SOURCE is defined, make sure it's defined to 500. Required in
http://www.opengroup.org/onlinepubs/
007908799 /xsh/compilation.html.
Notified by David Wolfe <dwolfe5272@yahoo.com>