Dr. Stephen Henson
78d3b819f0
Replace the old ASN1_dup() with ASN1_item_dup() and
...
zap some evil function pointers casts along the way...
2000-12-29 18:23:55 +00:00
Richard Levitte
3f07fe09b5
Enhancements to mkdef.pl:
...
* detect "unknown" algorithms (any C macro starting with NO_ that is
not explicitely mentioned in mkdef.pl as a known algorithm) and
report.
* add a number of algorithms that can be deselected.
* look in ssl/kssl.h as well.
* accept multiple whitespace (not just one SPC) in preprocessor lines.
2000-12-29 00:05:14 +00:00
Dr. Stephen Henson
73e92de577
Add NO_ASN1_OLD to remove some old style functions:
...
currently OpenSSL itself wont compile with this set
because some old style stuff remains.
Change old functions X509_sign(), X509_verify() etc
to use new item based functions.
Replace OCSP function declarations with DECLARE macros.
2000-12-28 22:24:50 +00:00
Dr. Stephen Henson
09ab755c55
ASN1_ITEM versions of sign, verify, pack and unpack.
...
The old function pointer versions will eventually go
away.
2000-12-28 19:18:48 +00:00
Dr. Stephen Henson
ec558b6548
New OCSP extension functions.
2000-12-28 01:05:05 +00:00
Bodo Möller
725c88879c
Finish SSL_peek/SSL_pending fixes.
2000-12-26 12:07:23 +00:00
Bodo Möller
a0aae68cf6
Fix SSL_peek and SSL_pending.
2000-12-25 18:40:46 +00:00
Dr. Stephen Henson
57d2f21782
New function X509V3_add_i2d() this is used for
...
encoding, replacing and deleting extensions.
Fix X509V3_get_d2i() so it uses takes note of
new critical behaviour.
2000-12-24 18:02:33 +00:00
Bodo Möller
1456d1860e
Split a CHANGES entry so that one of the halves matches the
...
corresponding new entry in the OpenSSL_0_9_6-stable branch.
2000-12-20 10:09:08 +00:00
Dr. Stephen Henson
5755cab49d
Fixes to OCSP print code.
...
Don't try to print request certificates if signature is not present.
Remove unnecessary test for certificates being NULL.
Fix typos in printed output.
Tidy up output.
Fix for typo in OCSP_SERVICELOC ASN1 template.
Also give a bit more info in CHANGES about the ASN1 revision.
2000-12-20 00:46:44 +00:00
Bodo Möller
126fe085db
Don't hold CRYPTO_LOCK_RSA during time-consuming operations.
2000-12-19 12:31:41 +00:00
Bodo Möller
3880cd35ad
Import s2_pkt.c wbuf fixes from OpenSSL_0_9_6-stable branch.
2000-12-18 11:35:32 +00:00
Bodo Möller
f640ee90c3
Obtain lock CRYPTO_LOCK_RSA before creating BN_MONT_CTX
...
structures and setting rsa->_method_mod_{n,p,q}.
Submitted by: "Reddie, Steven" <Steven.Reddie@ca.com>
2000-12-18 09:00:48 +00:00
Dr. Stephen Henson
9c67ab2f26
Make mkdef.pl parse some ASN1 IMPLEMENT macros.
...
Initial support for variables in DEF files.
2000-12-16 01:19:24 +00:00
Bodo Möller
3ac82faae5
Locking issues.
2000-12-15 16:40:35 +00:00
Dr. Stephen Henson
c08523d862
Implement some standard OCSP extensions in the v3 code. These
...
are all raw print only extensions at present.
2000-12-15 13:42:00 +00:00
Geoff Thorpe
2a86064f95
Make a note of the new engine.
2000-12-14 21:49:48 +00:00
Dr. Stephen Henson
2c15d426b9
New function X509V3_extensions_print() this removes extension duplication
...
from the print routines.
Reorganisation of OCSP code: initial print routines in ocsp_prn.c. Doesn't
work fully because OCSP extensions aren't reimplemented yet.
Implement some ASN1 functions needed to compile OCSP code.
2000-12-14 18:42:28 +00:00
Bodo Möller
5a4fbc69c3
First step towards SSL_peek fix.
2000-12-14 17:36:59 +00:00
Dr. Stephen Henson
de487514ae
New function X509_signature_print() to remove some duplicate
...
code from certificate, CRL and request printing routines.
2000-12-14 00:53:10 +00:00
Dr. Stephen Henson
06db4253e2
Change the PKCS7 structure to use SEQUENCE OF for the
...
authenticated attributes: this is used to retain the
original encoding and not break signatures.
Support for a SET OF which reorders the STACK when
encoding a structure. This will be used with the
PKCS7 code.
2000-12-13 23:54:30 +00:00
Dr. Stephen Henson
36f554d43c
Replace the old style OCSP ASN1 module.
2000-12-13 18:21:51 +00:00
Dr. Stephen Henson
2aff7727f7
Rewrite the extension code to use an ASN1_ITEM structure
...
for its ASN1 operations as well as the old style function
pointers (i2d, d2i, new, free). Change standard extensions
to support this.
Fix a warning in BN_mul(), bn_mul.c about uninitialised 'j'.
2000-12-13 13:47:33 +00:00
Dr. Stephen Henson
9d6b1ce644
Merge from the ASN1 branch of new ASN1 code
...
to main trunk.
Lets see if the makes it to openssl-cvs :-)
2000-12-08 19:09:35 +00:00
Bodo Möller
8dea52fa42
Fix some things that look like bugs.
...
One problem that looked like a problem in bn_recp.c at first turned
out to be a BN_mul bug. An example is given in bn_recp.c; finding
the bug responsible for this is left as an exercise.
2000-12-07 22:06:09 +00:00
Bodo Möller
80d89e6a6a
Sign-related fixes (and tests).
...
BN_mod_exp_mont does not work properly yet if modulus m
is negative (we want computations to be carried out
modulo |m|).
2000-12-07 08:48:58 +00:00
Bodo Möller
aa66eba7c8
BN_mod_sqrt documentation/comment
2000-12-06 21:33:58 +00:00
Bodo Möller
bac685417a
Faster BN_mod_sqrt algorithm for p == 5 (8).
2000-12-06 12:25:33 +00:00
Bodo Möller
a47b505e37
Improve formatting.
2000-12-04 19:04:55 +00:00
Geoff Thorpe
f1919c3df9
Make a note of the LHASH changes.
2000-12-04 03:35:35 +00:00
Ulf Möller
1946cd8bc2
Note the bntest change.
...
The *_part_words functions are not static.
2000-12-02 07:50:30 +00:00
Richard Levitte
2efff10cfa
Correct a mail address...
2000-12-01 16:49:53 +00:00
Richard Levitte
33479d275a
Document the addition of Kerberos stuff.
2000-12-01 14:40:45 +00:00
Ulf Möller
a023052580
Borland C fix.
2000-12-01 01:53:08 +00:00
Ulf Möller
4b757c830d
typo
2000-12-01 01:51:04 +00:00
Bodo Möller
fc2e05c2d5
Fix BN_rshift, which caused lots of trouble.
2000-11-30 22:34:57 +00:00
Richard Levitte
0ae485dc07
New format for the FAQ. We now have different sections for different
...
types of questions. Hopefully, that'll make them easier to spot, and
specially, easier to refer to.
2000-11-30 13:04:14 +00:00
Richard Levitte
20f88b9bd4
Changes to c_zlib.c to make ZLIB.DLL dynamically loadable under
...
Windows. Really, this should probably be done on Unix as well, but
that will be a later story...
2000-11-30 10:25:45 +00:00
Bodo Möller
6b5d39e82d
BN_mod_sqrt
2000-11-30 00:20:20 +00:00
Geoff Thorpe
ef8b601789
Amend the original CHANGES log entry. The ex_data handling has been
...
similarly modified now on DH and DSA.
2000-11-29 20:02:00 +00:00
Lutz Jänicke
c6a926d9e2
Log security relevant change.
2000-11-29 18:06:18 +00:00
Bodo Möller
9161672950
BN_bin2bn did *not* contain an off-by-one error;
...
I'm still investigating what caused the segementation fault
(maybe "make clean; make" will cure it ...).
But BN_bin2bn should always reset ret->neg.
2000-11-29 12:53:41 +00:00
Bodo Möller
a08bcccc67
Expand expspeed.c to make BN_kronecker timings.
...
This caused a segmentation fault in calls to malloc, so I cleaned up
bn_lib.c a little so that it is easier to see what is going on.
The bug turned out to be an off-by-one error in BN_bin2bn.
2000-11-29 12:32:10 +00:00
Bodo Möller
bdec3c5323
Implement BN_kronecker test.
...
Modify "CHANGES" entry for BN_mod_inverse (it's not just avoiding BN_div
that increases performance, avoiding BN_mul also helps)
2000-11-29 11:06:50 +00:00
Bodo Möller
499e167fda
Improve BN_mod_inverse performance.
...
Get the BN_mod_exp_mont bugfix (for handling negative inputs) correct
this time.
2000-11-29 09:41:19 +00:00
Bodo Möller
000e21779c
Note that SSL_peek has been disabled.
2000-11-28 11:13:06 +00:00
Bodo Möller
dcbd0d74d5
Fix BN_is_... macros.
...
Fix BN_gcd.
Analyze BN_mod_inverse.
Add BN_kronecker.
"make update".
2000-11-27 21:17:20 +00:00
Geoff Thorpe
0ac87024e3
It was a small change, but it *could* conceivably affect people - so I'm
...
making a note in the CHANGES file.
2000-11-26 18:39:27 +00:00
Bodo Möller
5acaa49504
More BN_mod_... functions.
2000-11-26 18:31:32 +00:00
Bodo Möller
78a0c1f18d
modular arithmetics
...
"make update"
2000-11-26 16:42:38 +00:00