Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						a523276786 
					 
					
						
						
							
							Backport certificate status request TLS extension support to 0.9.8.  
						
						 
						
						
						
						
					 
					
						2007-10-12 00:00:36 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						294f03a812 
					 
					
						
						
							
							Reimplement safestack to avoid function pointer casts.  
						
						 
						
						
						
						
					 
					
						2007-09-06 21:07:43 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						82877ea449 
					 
					
						
						
							
							Make update.  
						
						 
						
						
						
						
					 
					
						2007-02-23 01:01:08 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						4a0d3530e0 
					 
					
						
						
							
							Update from HEAD.  
						
						 
						
						
						
						
					 
					
						2007-01-21 13:16:49 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						9b945233b1 
					 
					
						
						
							
							Update from HEAD.  
						
						 
						
						
						
						
					 
					
						2006-12-06 13:38:59 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						4636341b05 
					 
					
						
						
							
							Add RFC 3779 support, contributed by ARIN.  
						
						 
						
						
						
						
					 
					
						2006-11-27 13:36:55 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						9f85fcefdc 
					 
					
						
						
							
							Update filenames in makefiles  
						
						 
						
						
						
						
					 
					
						2006-02-04 01:49:36 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						ce92b6eb9c 
					 
					
						
						
							
							Further BUILDENV refinement, further fool-proofing of Makefiles and  
						
						 
						
						... 
						
						
						
						[most importantly] put back dependencies accidentaly eliminated in
check-in #13342 . 
						
						
					 
					
						2005-05-16 16:55:47 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						10cde5010d 
					 
					
						
						
							
							make update  
						
						 
						
						
						
						
					 
					
						2005-05-16 00:27:37 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Andy Polyakov 
							
						 
					 
					
						
						
							
						
						81a86fcf17 
					 
					
						
						
							
							Fool-proofing Makefiles  
						
						 
						
						
						
						
					 
					
						2005-05-15 22:23:26 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						8ccd06c66c 
					 
					
						
						
							
							openssl_fcast should always be defined, not just with DEBUG_SAFESTACK  
						
						 
						
						
						
						
					 
					
						2005-05-14 12:58:20 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						fe86616c72 
					 
					
						
						
							
							Some C compilers produce warnings or compilation errors if an attempt  
						
						 
						
						... 
						
						
						
						is made to directly cast a function of one type to what it considers and
incompatible type. In particular gcc 3.4.2.
Add new openssl_fcast macro to place functions into a form where the compiler
will allow them to be cast.
The current version achives this by casting to: void function(void). 
						
						
					 
					
						2005-05-12 23:01:44 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						a74286d636 
					 
					
						
						
							
							Make sure id2_func is properly cast as well...  
						
						 
						
						
						
						
					 
					
						2005-04-20 13:17:42 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						ed824195a1 
					 
					
						
						
							
							Avoid compiler complaint about mismatched function signatures  
						
						 
						
						... 
						
						
						
						(void * != char *) 
						
						
					 
					
						2005-04-20 13:09:46 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						49f386578e 
					 
					
						
						
							
							Type mismatch detected by DEC C compiler.  void* != void**  
						
						 
						
						
						
						
					 
					
						2005-04-20 12:53:50 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						f68854b4c3 
					 
					
						
						
							
							Various Win32 and other fixes for warnings and compilation errors.  
						
						 
						
						... 
						
						
						
						Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'. 
						
						
					 
					
						2005-04-19 00:12:36 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						4bb61becbb 
					 
					
						
						
							
							Add emacs cache files to .cvsignore.  
						
						 
						
						
						
						
					 
					
						2005-04-11 14:17:07 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						41a15c4f0f 
					 
					
						
						
							
							Give everything prototypes (well, everything that's actually used).  
						
						 
						
						
						
						
					 
					
						2005-03-31 09:26:39 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						42ba5d2329 
					 
					
						
						
							
							Blow away Makefile.ssl.  
						
						 
						
						
						
						
					 
					
						2005-03-30 13:05:57 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						a2ac429da2 
					 
					
						
						
							
							Don't use $(EXHEADER) directly in for loops, as most shells will break  
						
						 
						
						... 
						
						
						
						if $(EXHEADER) is empty.
Notified by many, solution suggested by Carson Gaspar <carson@taltos.org > 
						
						
					 
					
						2004-11-02 23:55:01 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						785e827323 
					 
					
						
						
							
							Oops!  
						
						 
						
						
						
						
					 
					
						2004-10-04 17:28:31 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						2f605e8d24 
					 
					
						
						
							
							Fix race condition when CRL checking is enabled.  
						
						 
						
						
						
						
					 
					
						2004-10-04 16:30:12 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						5d7c222db8 
					 
					
						
						
							
							New X509_VERIFY_PARAM structure and associated functionality.  
						
						 
						
						... 
						
						
						
						This tidies up verify parameters and adds support for integrated policy
checking.
Add support for policy related command line options. Currently only in smime
application.
WARNING: experimental code subject to change. 
						
						
					 
					
						2004-09-06 18:43:01 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Geoff Thorpe 
							
						 
					 
					
						
						
							
						
						9c52d2cc75 
					 
					
						
						
							
							After the latest round of header-hacking, regenerate the dependencies in  
						
						 
						
						... 
						
						
						
						the Makefiles. NB: this commit is probably going to generate a huge posting
and it is highly uninteresting to read. 
						
						
					 
					
						2004-05-17 19:26:06 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Geoff Thorpe 
							
						 
					 
					
						
						
							
						
						8c521c7a34 
					 
					
						
						
							
							Extend the index parameter checking from sk_value to sk_set(). Also tidy up  
						
						 
						
						... 
						
						
						
						some similar code elsewhere.
Thanks to Francesco Petruzzi for bringing this to my attention. 
						
						
					 
					
						2004-04-21 15:08:56 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Geoff Thorpe 
							
						 
					 
					
						
						
							
						
						2749276b95 
					 
					
						
						
							
							Avoid undefined results when the parameter is out of range.  
						
						 
						
						
						
						
					 
					
						2004-04-02 06:25:11 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						69d1d5e6ce 
					 
					
						
						
							
							Fix ASN1 warnings.  
						
						 
						
						
						
						
					 
					
						2004-03-25 13:37:02 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						4acc3e907d 
					 
					
						
						
							
							Initial support for certificate policy checking and evaluation.  
						
						 
						
						... 
						
						
						
						This is currently *very* experimental and needs to be more fully integrated
with the main verification code. 
						
						
					 
					
						2004-03-23 14:14:35 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						79b42e7654 
					 
					
						
						
							
							Use sh explicitely to run point.sh  
						
						 
						
						... 
						
						
						
						This is part of a large change submitted by Markus Friedl <markus@openbsd.org > 
						
						
					 
					
						2003-12-27 14:59:07 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						d1465bac90 
					 
					
						
						
							
							make update  
						
						 
						
						
						
						
					 
					
						2003-05-01 04:10:32 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						7ae46c6761 
					 
					
						
						
							
							make update  
						
						 
						
						
						
						
					 
					
						2003-04-29 21:35:28 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						d584fd6b66 
					 
					
						
						
							
							Include objects.h to get a correct declaration of OBJ_bsearch_ex(),  
						
						 
						
						... 
						
						
						
						not to mention the OBJ_BSEARCH_* macros. 
						
						
					 
					
						2003-04-29 20:46:32 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						26851b6b42 
					 
					
						
						
							
							Add an extended variant of sk_find() which returns a non-NULL pointer  
						
						 
						
						... 
						
						
						
						even if an exact match wasn't found. 
						
						
					 
					
						2003-04-29 20:30:55 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						520b76ffd9 
					 
					
						
						
							
							Support for name constraints.  
						
						 
						
						
						
						
					 
					
						2003-03-24 17:04:44 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						a1d12daed2 
					 
					
						
						
							
							Support for policyMappings  
						
						 
						
						
						
						
					 
					
						2003-03-20 17:26:44 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						001ab3abad 
					 
					
						
						
							
							Use double dashes so makedepend doesn't misunderstand the flags we  
						
						 
						
						... 
						
						
						
						give it.
For 0.9.7 and up, that means util/domd needs to remove those double
dashes from the argument list when gcc is used to find the
dependencies. 
						
						
					 
					
						2002-10-09 13:25:12 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						17085b022c 
					 
					
						
						
							
							Pass CFLAG to dependency makers, so non-standard system include paths are  
						
						 
						
						... 
						
						
						
						handled properly.
Part of PR 75 
						
						
					 
					
						2002-06-27 16:39:25 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						0b4c91c0fc 
					 
					
						
						
							
							Fix various warnings when compiling with KRB5 code.  
						
						 
						
						
						
						
					 
					
						2002-03-12 02:59:37 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Dr. Stephen Henson 
							
						 
					 
					
						
						
							
						
						bc37d996fc 
					 
					
						
						
							
							Experimental configuration code.  
						
						 
						
						... 
						
						
						
						Incomplete, largely untested and subject to change/deletion. 
						
						
					 
					
						2002-01-05 01:37:16 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Geoff Thorpe 
							
						 
					 
					
						
						
							
						
						0b0f08dbc7 
					 
					
						
						
							
							The cleanup stack in ENGINE changed slightly, so this "make update" is  
						
						 
						
						... 
						
						
						
						needed. 
						
						
					 
					
						2001-10-01 16:39:58 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Geoff Thorpe 
							
						 
					 
					
						
						
							
						
						9c9aa4f145 
					 
					
						
						
							
							This commits the changes to STACK macros forced by recent ENGINE surgery.  
						
						 
						
						
						
						
					 
					
						2001-09-25 20:17:15 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						354c3ace73 
					 
					
						
						
							
							Add first cut symmetric crypto support.  
						
						 
						
						
						
						
					 
					
						2001-08-18 10:22:54 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						710e5d5639 
					 
					
						
						
							
							make update  
						
						 
						
						
						
						
					 
					
						2001-07-31 17:07:24 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Ben Laurie 
							
						 
					 
					
						
						
							
						
						dbad169019 
					 
					
						
						
							
							Really add the EVP and all of the DES changes.  
						
						 
						
						
						
						
					 
					
						2001-07-30 23:57:25 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						567671e291 
					 
					
						
						
							
							make update  
						
						 
						
						
						
						
					 
					
						2001-07-10 21:00:37 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Geoff Thorpe 
							
						 
					 
					
						
						
							
						
						d918f85146 
					 
					
						
						
							
							Fix a memory leak in 'sk_dup' in the case a realloc() fails. Also, tidy up  
						
						 
						
						... 
						
						
						
						a bit of weird code in sk_new. 
						
						
					 
					
						2001-05-31 19:01:08 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						a63d5eaab2 
					 
					
						
						
							
							Add a general user interface API.  This is designed to replace things  
						
						 
						
						... 
						
						
						
						like des_read_password and friends (backward compatibility functions
using this new API are provided).  The purpose is to remove prompting
functions from the DES code section as well as provide for prompting
through dialog boxes in a window system and the like. 
						
						
					 
					
						2001-05-06 23:19:37 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Bodo Möller 
							
						 
					 
					
						
						
							
						
						4e20b1a656 
					 
					
						
						
							
							Instead of telling both 'make' and the user that ranlib  
						
						 
						
						... 
						
						
						
						errors can be tolerated, hide the error from 'make'.
This gives shorter output both if ranlib fails and if
it works. 
						
						
					 
					
						2001-03-09 14:01:42 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						41d2a336ee 
					 
					
						
						
							
							e_os.h does not belong with the exported headers.  Do not put it there  
						
						 
						
						... 
						
						
						
						and make all files the depend on it include it without prefixing it
with openssl/.
This means that all Makefiles will have $(TOP) as one of the include
directories. 
						
						
					 
					
						2001-02-22 14:45:02 +00:00  
					
					
						 
						
						
							
							
							 
							
							
							
							
							 
						
					 
				 
			
				
					
						
							
							
								 
								Richard Levitte 
							
						 
					 
					
						
						
							
						
						cf1b7d9664 
					 
					
						
						
							
							Make all configuration macros available for application by making  
						
						 
						
						... 
						
						
						
						sure they are available in opensslconf.h, by giving them names starting
with "OPENSSL_" to avoid conflicts with other packages and by making
sure e_os2.h will cover all platform-specific cases together with
opensslconf.h.
I've checked fairly well that nothing breaks with this (apart from
external software that will adapt if they have used something like
NO_KRB5), but I can't guarantee it completely, so a review of this
change would be a good thing. 
						
						
					 
					
						2001-02-19 16:06:34 +00:00