463dc742ffThis is now generated, it seems.
Ben Laurie
1999-03-12 20:19:45 +00:00
cadf126b99Use the right compiler for ctx_size.
Ben Laurie
1999-03-12 19:58:43 +00:00
bc420ac592Delete NULL ciphers from 'ALL' in the cipher list aliases. This means that NULL ciphers specifically have to be enabled with e.g. "DEFAULT:eNULL". This prevents cipher lists from inadvertantly having NULL ciphers at the top of their list (e.g. the default ones) because they didn't have to be taken into account before.
Dr. Stephen Henson
1999-03-12 01:43:28 +00:00
abd4c91527Fix for RSA private key encryption if p < q. This took ***ages*** to track down.
Dr. Stephen Henson
1999-03-11 02:42:13 +00:00
47c389e7ccJust cosmetics: replace a tab with a normal space because the tab always looked too estoeric to my eyes while building... ;)
Ralf S. Engelschall
1999-03-10 20:09:29 +00:00
7e37e72a3dBe less restrictive and allow also perl util/perlpath.pl /path/to/bin/perl' in addition to perl util/perlpath.pl /path/to/bin', because this way one can also use an interpreter named perl5' (which is usually the name of Perl 5.xxx on platforms where an Perl 4.x is still installed as perl').
Ralf S. Engelschall
1999-03-10 19:57:05 +00:00
637691e6b4Let util/clean-depend.pl work also with older Perl 5.00x versions.
Ralf S. Engelschall
1999-03-10 19:51:43 +00:00
381380206bFix couple of ANSI declarations and prototypes
Dr. Stephen Henson
1999-03-10 18:30:48 +00:00
035eb85d2fUpdate
Ralf S. Engelschall
1999-03-10 16:17:31 +00:00
f11f8d580eUpdate platform test list
Ralf S. Engelschall
1999-03-10 14:53:54 +00:00
defba77f39Two more things we should look at before release
Ralf S. Engelschall
1999-03-10 14:50:28 +00:00
83ec54b40dMake CC,CFLAG etc get passed to make links and various Win32 fixes.
Dr. Stephen Henson
1999-03-10 01:37:33 +00:00
e476f4256aRemove some hard coded paths from Win32 test stuff.
Dr. Stephen Henson
1999-03-09 23:54:31 +00:00
047f1a4466Remake cert links when the app is built.
Ben Laurie
1999-03-09 20:06:39 +00:00
38ef9a0c70Update to current state...
Ralf S. Engelschall
1999-03-09 15:36:53 +00:00
15542b2847Make it more clear what option -WWW to s_server does.
Ralf S. Engelschall
1999-03-09 13:09:07 +00:00
b241fefd98Fix quad checksum bug.
Ben Laurie
1999-03-09 11:37:23 +00:00
cbb7792613Go faster.
Ben Laurie
1999-03-09 10:10:03 +00:00
5d11adc8afCorrect English.
Ben Laurie
1999-03-09 10:08:17 +00:00
d4d2f98c59Comment out two unimplemented functions from bio.h. Attempt to get the Win32 test batch file going again.
Dr. Stephen Henson
1999-03-09 03:01:48 +00:00
0cc395796bAdd missing funtions from non ANSI section of header files and add missing ordinals to libeay.num.
Dr. Stephen Henson
1999-03-08 22:46:56 +00:00
6420b77fectest.
Ben Laurie
1999-03-08 21:56:46 +00:00
6e0642407dVarious fixes to Win32, update ssleay.num, libeay.num, shuffle various #ifdefs around so more options appear in e_os.h
Dr. Stephen Henson
1999-03-08 18:41:15 +00:00
86fd166eebMake links no longer needed.
Ben Laurie
1999-03-08 13:32:44 +00:00
cdb8115660Solaris 2.6 makes still problems. Details were posted.
Ralf S. Engelschall
1999-03-08 12:56:07 +00:00
6b50354041typo
Ralf S. Engelschall
1999-03-08 12:39:41 +00:00
5a0611297bStart with some more tarball rolling preparation to make sure it's not overlooed next Monday: - rmlinks is no longer existing - use openssl as the name and not rse - don't roll the STATUS file into the tarball
Ralf S. Engelschall
1999-03-08 12:17:53 +00:00
54d9976c79Let us start with some platform test list...
Ralf S. Engelschall
1999-03-08 12:13:35 +00:00
c0e538e117Fix Win32 symbol export lists for BIO functions: Added BIO_get_ex_new_index, BIO_get_ex_num, BIO_get_ex_data and BIO_set_ex_data to ms/libeay{16,32}.def. I'm not a Win32 hacker, but I think I've done it correctly.
Ralf S. Engelschall
1999-03-08 11:41:26 +00:00
84107e6ca8Second round of fixing the OpenSSL perl/ stuff. It now at least compiled fine under Unix and passes some trivial tests I've now added. But the whole stuff is horribly incomplete, so a README.1ST with a disclaimer was added to make sure no one expects that this stuff really works in the OpenSSL 0.9.2 release. Additionally I've started to clean the XS sources up and fixed a few little bugs and inconsistencies in OpenSSL.{pm,xs} and openssl_bio.xs.
Ralf S. Engelschall
1999-03-08 11:25:49 +00:00
9ea0e64de7Two more .cvsignore files for the assembler stuff
Ralf S. Engelschall
1999-03-08 09:47:30 +00:00
a5e035b54aNotice freeze state and update my entry
Ralf S. Engelschall
1999-03-08 09:43:53 +00:00
1f0f37b0a4Delete obsolete old X509V3 files.
Dr. Stephen Henson
1999-03-07 16:25:59 +00:00
dd56626eccDon't make links in INSTALL doc - also, work first time!
Ben Laurie
1999-03-07 15:22:59 +00:00
efadf60f9cDon't make links on Windoze.
Ben Laurie
1999-03-07 15:21:08 +00:00
26a0846fc1Fix perl assembler.
Ben Laurie
1999-03-07 15:08:38 +00:00
05dc84b82bFix DWP when only given three parameters.
Ben Laurie
1999-03-07 15:08:04 +00:00
7d3ce7ba37Linux MIPS support.
Ben Laurie
1999-03-07 14:17:32 +00:00
cba5068d10Always make links.
Ben Laurie
1999-03-07 14:05:36 +00:00
f2595f5402Fix a typo.
Ben Laurie
1999-03-07 14:01:55 +00:00
1756d405ccAdded support for adding extensions to CRLs, also fix a memory leak and make 'req' check the config file syntax before it adds extensions. Added info in the documentation as well.
Dr. Stephen Henson
1999-03-06 19:33:29 +00:00
116e315303Add a useful kludge to allow package maintainers to specify compiler and other platforms details on the command line without having to patch the Configure script everytime: One now can use `perl Configure <id>:<details>'', i.e. platform ids are allowed to have details appended to them (seperated by colons). This is treated as there would be a static pre-configured entry in Configure's %table under key <id> with value <details> and perl Configure <id>'' is called. So, when you want to perform a quick test-compile under FreeBSD 3.1 with pgcc and without assembler stuff you can use `perl Configure "FreeBSD-elf:pgcc:-O6:::"'' now, which overrides the FreeBSD-elf entry on-the-fly.
Ralf S. Engelschall
1999-03-06 16:07:47 +00:00
bc3482442aDisable new TLS1 ciphersuites.
Ben Laurie
1999-03-06 15:21:02 +00:00
a49034aba9Fix names of cert stack functions.
Ben Laurie
1999-03-06 14:49:11 +00:00
03e20a1a44Typo :-)
Ralf S. Engelschall
1999-03-06 14:41:24 +00:00
3eb0ed6d91Allow DSO flags like -fpic, -fPIC, -KPIC etc. to be specified on the `perl Configure ...' command line. This way one can compile OpenSSL libraries with Position Independent Code (PIC) which is needed for linking it into DSOs.
Ralf S. Engelschall
1999-03-06 14:35:03 +00:00
6242bb9c63Put the dependencies back.
Ben Laurie
1999-03-06 14:32:48 +00:00
63493c7b06Move the SSL_CTX_xxx defines at the top of ssl.h to the location of other SSL_CTX_xxx defines. What was the reason to move them to the top, even before the copyright and #ifdef HEADER_SSL_H? Hmmm... when there was and still is a good reason feel free to reverse this patch, but please document why it is needed this way.
Ralf S. Engelschall
1999-03-06 14:24:54 +00:00
f415fa3243Fix export ciphersuites, again.
Ben Laurie
1999-03-06 14:09:36 +00:00
dfca822f79Reshape the README file out of the existing README stuff into a single file. Need more cleanup for final release IMHO.
Ralf S. Engelschall
1999-03-06 14:04:40 +00:00
2c6ccde1f7just a little typo
Ralf S. Engelschall
1999-03-06 14:01:29 +00:00
3b52c2e715Add a first cut for a NEWS document similar to what other packages (mostly GNU packages) provide. The idea is that because of the large number of CHANGES entries, this file summarizes the major changes for a brief overview.
Ralf S. Engelschall
1999-03-06 13:53:17 +00:00
1c308226feBring the README file in sync and shape a little bit more...
Ralf S. Engelschall
1999-03-06 13:35:14 +00:00
0b903ec018Cleaned up the LICENSE document: The official contact for any license questions now is the OpenSSL core team under openssl-core@openssl.org. And add a paragraph about the dual-license situation to make sure people recognize that _BOTH_ the OpenSSL license _AND_ the SSLeay license apply to the OpenSSL toolkit.
Ralf S. Engelschall
1999-03-06 13:29:09 +00:00
0de6fd7361Ralf is now using FreeBSD 3.1 which runs ELF instead of a.out...
Ralf S. Engelschall
1999-03-06 13:15:15 +00:00
bb8f3c5879General source tree makefile cleanups: Made making xxx in yyy...' display consistent in the source tree and replaced /bin/rm' by rm'. Additonally cleaned up the make links' target: Remove unnecessary semicolons, subsequent redundant removes, inline point.sh into mklink.sh to speed processing and no longer clutter the display with confusing stuff. Instead only the actually done links are displayed.
Ralf S. Engelschall
1999-03-06 12:32:06 +00:00
988788f697Permit null ciphers.
Ben Laurie
1999-03-06 12:09:36 +00:00
f9b2e53052Fix GCC warning... t_req.c: In function X509_REQ_print': t_req.c:181: warning: suggest explicit braces to avoid ambiguous else'
Ralf S. Engelschall
1999-03-06 11:58:03 +00:00
79a474e8f2Add an extra 'raw' function r2i to the extension code. Nothing uses this yet and it is just a place holder for functionality to be added later. Its been added now so the X509V3_EXT_METHOD structure shouldn't (hopefully) have to change after the release.
Dr. Stephen Henson
1999-03-06 02:34:07 +00:00
924acc5451Fix the PKCS#7 stuff: signature verify could fail if attributes reordered, the detached data encoding was wrong and free up public keys.
Dr. Stephen Henson
1999-03-05 02:05:15 +00:00
d00b7aad5aWorkaround for a Win95 console bug triggered by the password read stuff.
Dr. Stephen Henson
1999-03-05 01:07:04 +00:00
9985bed331Deleted my str_dup() function from X509V3: the same functionality is provided by BUF_MEM_strdup(). Added text documentation to the BUF_MEM stuff.
Dr. Stephen Henson
1999-03-04 23:29:51 +00:00
789285aa96Added the new `Includes OpenSSL Cryptography Software' button as doc/openssl_button.{gif,html} which is similar in style to the old SSLeay button and can be used by applications based on OpenSSL to show the relationship to the OpenSSL project.
Ralf S. Engelschall
1999-03-04 12:55:42 +00:00
a06c602e6fRemove confusing variables in function signatures in files ssl/ssl_lib.c and ssl/ssl.h. At least the double ctx-variable confused some compilers.
Ralf S. Engelschall
1999-03-04 07:54:01 +00:00
8d697db1d0Don't install bss_file.c under PREFIX/include/. It was introduced by Eric between SSLeay 0.8 and 0.9 and just looks useless and confusing.
Ralf S. Engelschall
1999-03-04 07:47:27 +00:00
06c6849124Fix the Win32 compile environment and add various changes so it will now compile under Win32 (9X and NT) again. Note: some signed/unsigned changes recently checked in were killing the Win32 compile.
Dr. Stephen Henson
1999-03-03 02:01:26 +00:00
726bae3f0fSupper's cooking.
Ben Laurie
1999-02-28 20:51:38 +00:00
eb90a483adAdd functions to add certs to stacks, used for CA file/path stuff in servers.
Ben Laurie
1999-02-28 17:41:55 +00:00
49bc262459More truth in declarations.
Ben Laurie
1999-02-28 14:39:18 +00:00
b4f10a7e92doxygen configuration file.
Ben Laurie
1999-02-28 12:42:50 +00:00
4f43d0e71fExperiment with doxygen documentation.
Ben Laurie
1999-02-28 12:41:50 +00:00
1efa9c33c0Update dependencies.
Ben Laurie
1999-02-27 18:41:04 +00:00
74d7abc2abGet rid of remaining C++-style comments which strict C compilers hate. (Pointed out by Carlos Amengual).
Ralf S. Engelschall
1999-02-27 12:17:40 +00:00
c707fb2741Ops, the logic of the second argument has to be coupled with the != test to work correctly for the SSL_CTX_xxx situations, too. Now "make test" passes again fine.
Ralf S. Engelschall
1999-02-26 22:31:54 +00:00
aa2b6baf4fUse consistent and existing addresses
Ralf S. Engelschall
1999-02-26 21:44:17 +00:00
7283ecea22BN_RECURSION causes the stuff in bn_mont.c to fall over for large keys. For now change it to BN_RECURSION_MONT so it isn't compiled in.
Dr. Stephen Henson
1999-02-26 01:37:34 +00:00
754048577bPerhaps if I do a tiny bit of docco, others may follow?
Ben Laurie
1999-02-25 17:39:04 +00:00
090db4f475Remember one more wish from the users
Ralf S. Engelschall
1999-02-25 14:44:55 +00:00
15d21c2df4Add a bunch of SSL_xxx() functions for configuring the temporary RSA and DH private keys and/or callback functions which directly correspond to their SSL_CTX_xxx() counterparts but work on a per-connection basis. This is needed for applications which have to configure certificates on a per-connection basis (e.g. Apache+mod_ssl) instead of a per-context basis (e.g. s_server).
Ralf S. Engelschall
1999-02-25 14:40:29 +00:00
ea14a91f64Move s_server -dcert and -dkey options out of the undocumented feature area because they are useful for the DSA situation and should be recognized by the users. Thanks to Steve for the original hint.
Ralf S. Engelschall
1999-02-25 11:26:26 +00:00
4b8f2ce648Typo
Ralf S. Engelschall
1999-02-25 11:06:52 +00:00
90a52cecafFix the cipher decision scheme for export ciphers: the export bits are *not* within SSL_MKEY_MASK or SSL_AUTH_MASK, they are within SSL_EXP_MASK. So, the original variable has to be used instead of the already masked variable.
Ralf S. Engelschall
1999-02-25 11:03:18 +00:00
def9f43151Fix 'port' variable from int' to unsigned int' in crypto/bio/b_sock.c
Ralf S. Engelschall
1999-02-25 10:54:27 +00:00
8aef252bf4Change type of another md_len variable in pk7_doit.c:PKCS7_dataFinal() from int' to unsigned int' because it's a length and initialized by EVP_DigestFinal() which expects an `unsigned int *'.
Ralf S. Engelschall
1999-02-25 10:47:24 +00:00
4f9b306ca7Fix clearly untested "clever" hack.
Ben Laurie
1999-02-25 09:43:26 +00:00
74cc3698bdMore CVS ignore stuff...
Ralf S. Engelschall
1999-02-25 09:06:30 +00:00
a4ed5532a8Don't hard-code path to Perl interpreter on shebang line of Configure script. Instead use the usual Shell->Perl transition trick.
Ralf S. Engelschall
1999-02-25 08:48:52 +00:00
1b3b0a54d1Remember good pointers to Montgomery multiplication algorithm descriptions as pointed out by Dave Carman <carman@erols.com>
Ralf S. Engelschall
1999-02-25 08:00:57 +00:00
7be304acdbMake openssl x509 -noout -modulus' functional also for DSA certificates (in addition to RSA certificates) to match the behaviour of openssl dsa -noout -modulus' as it's already the case for openssl rsa -noout -modulus'. For RSA the -modulus is the real "modulus" while for DSA currently the public key is printed (a decision which was already done by openssl dsa -modulus' in the past) which serves a similar purpose. Additionally the NO_RSA no longer completely removes the whole -modulus option; it now only avoids using the RSA stuff. Same applies to NO_DSA now, too.
Ralf S. Engelschall
1999-02-24 17:17:31 +00:00
6b313a7365Remove debugging fprintf from req.c and fix the code so it properly skips over the first leading XXX. in the DN.
Dr. Stephen Henson
1999-02-24 00:14:21 +00:00
1745a3fb9fCode for reliable BIO.
Ben Laurie
1999-02-23 21:45:23 +00:00
55ab3bf7f9Add reliable BIO.
Ben Laurie
1999-02-23 21:44:34 +00:00
15799403adFix more warnings.
Ben Laurie
1999-02-23 12:53:49 +00:00
3a1daca9efGet rid of a nasty debugging message which was forgotten here...
Ralf S. Engelschall
1999-02-23 08:53:04 +00:00
f2f351ce9cFix usage message on gendsa: 1. The dsaparam argument is mandatory and not optional 2. Add a little text what this actually is: a filename
Ralf S. Engelschall
1999-02-23 08:52:20 +00:00
04fa4cb721Make gcc -Wall happy ("might be used uninitialized...")
Ralf S. Engelschall
1999-02-23 07:47:30 +00:00
a43aa73e3bRedo the way 'req' and 'ca' add objects: add support for oid_section.
Dr. Stephen Henson
1999-02-23 00:07:46 +00:00
0849d13811Add syslogging BIO.
Ben Laurie
1999-02-22 21:21:08 +00:00
e527ba09a6Various changes to make this stuff compile under Win32 and VC++ with and without -debug option to mk1mf.pl. Change _export to is_export (_export is a reserved word under VC++). Add yucky function prototype function pointer casts. Sanitise the included files in crypto/x509v3.
Dr. Stephen Henson
1999-02-22 01:26:40 +00:00