generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
openssl/apps
History
Rich Salz 3b061a00e3 RT2547: Tighten perms on generated privkey files 
When generating a private key, try to make the output file be readable
only by the owner.  Put it in CHANGES file since it might be noticeable.

Add "int private" flag to apps that write private keys, and check that it's
set whenever we do write a private key.  Checked via assert so that this
bug (security-related) gets fixed.  Thanks to Viktor for help in tracing
the code-paths where private keys are written.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2015-06-15 18:26:56 -04:00
..
demoCA
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
demoSRP
Missing SRP files.
2011-03-16 11:50:33 +00:00
app_rand.c
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
apps.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
apps.h
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
asn1pars.c
fix asn1parse -inform
2015-05-29 12:09:25 +01:00
ca-cert.srl
Update test server certificate in apps/server.pem (it was expired).
2000-10-16 22:56:10 +00:00
ca-key.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
ca-req.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
ca.c
Fix argument processing error from the option parsing change over.
2015-06-15 11:36:32 +10:00
CA.com
Corrections to the VMS build system.
2011-03-25 16:20:35 +00:00
CA.pl.in
GH271: Warning on </dev/null to CA.pl
2015-05-04 15:07:52 -04:00
cert.pem
Import of old SSLeay release: SSLeay 0.9.0b
1998-12-21 10:56:39 +00:00
ciphers.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
client.pem
Replace expired test server and client certificates with new ones.
2011-12-08 14:44:05 +00:00
cms.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
crl2p7.c
Restore module loading
2015-05-29 12:41:50 +02:00
crl.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
dgst.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
dh1024.pem
Include SKIP DH parameters with OpenSSL.
2000-08-02 09:04:44 +00:00
dh2048.pem
Include SKIP DH parameters with OpenSSL.
2000-08-02 09:04:44 +00:00
dh4096.pem
Include SKIP DH parameters with OpenSSL.
2000-08-02 09:04:44 +00:00
dhparam.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
dsa512.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
dsa1024.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
dsa-ca.pem
Fix the gendsa program and add it to the app list. The progs.h file is
1999-01-09 17:29:34 +00:00
dsa-pca.pem
Fix the gendsa program and add it to the app list. The progs.h file is
1999-01-09 17:29:34 +00:00
dsa.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
dsap.pem
Import of old SSLeay release: SSLeay 0.9.0b
1998-12-21 10:56:39 +00:00
dsaparam.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
ec.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
ecparam.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
enc.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
engine.c
Restore module loading
2015-05-29 12:41:50 +02:00
errstr.c
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
gendsa.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
genpkey.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
genrsa.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
install-apps.com
After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS
2011-03-19 10:58:14 +00:00
makeapps.com
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
Makefile
When making libcrypto from apps or test, make sure to include engines
2015-06-10 02:01:49 +02:00
nseq.c
Restore module loading
2015-05-29 12:41:50 +02:00
ocsp.c
RT832: Use REUSEADDR in ocsp responder
2015-06-02 12:22:38 -04:00
openssl-vms.cnf
RT3067: simplify patch
2014-09-24 15:35:02 +02:00
openssl.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
openssl.cnf
RT2626: Change default_bits from 1K to 2K
2014-09-08 17:21:04 -04:00
opt.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
passwd.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
pca-cert.srl
Update test server certificate in apps/server.pem (it was expired).
2000-10-16 22:56:10 +00:00
pca-key.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
pca-req.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
pkcs7.c
Restore module loading
2015-05-29 12:41:50 +02:00
pkcs8.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
pkcs12.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
pkey.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
pkeyparam.c
Restore module loading
2015-05-29 12:41:50 +02:00
pkeyutl.c
Restore module loading
2015-05-29 12:41:50 +02:00
prime.c
Restore module loading
2015-05-29 12:41:50 +02:00
privkey.pem
PR: 1644
2009-09-06 15:49:46 +00:00
progs.h
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
progs.pl
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
rand.c
Restore module loading
2015-05-29 12:41:50 +02:00
req.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
req.pem
Import of old SSLeay release: SSLeay 0.9.0b
1998-12-21 10:56:39 +00:00
rsa8192.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
rsa.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
rsautl.c
Restore module loading
2015-05-29 12:41:50 +02:00
s512-key.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
s512-req.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
s1024key.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
s1024req.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
s_apps.h
memset, memcpy, sizeof consistency fixes
2015-05-05 22:18:59 -04:00
s_cb.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
s_client.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
s_server.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00
s_socket.c
Use bio_err not stderr in apps.
2015-06-09 12:48:55 -04:00
s_time.c
Use bio_err not stderr in apps.
2015-06-09 12:48:55 -04:00
server2.pem
Replace expired test server and client certificates with new ones.
2011-12-08 14:44:05 +00:00
server.pem
Replace expired test server and client certificates with new ones.
2011-12-08 14:44:05 +00:00
server.srl
Import of old SSLeay release: SSLeay 0.9.0b
1998-12-21 10:56:39 +00:00
sess_id.c
free NULL cleanup -- coda
2015-05-01 14:37:16 -04:00
smime.c
Restore module loading
2015-05-29 12:41:50 +02:00
speed.c
Use bio_err not stderr in apps.
2015-06-09 12:48:55 -04:00
spkac.c
Restore module loading
2015-05-29 12:41:50 +02:00
srp.c
Restore module loading
2015-05-29 12:41:50 +02:00
testCA.pem
Import of old SSLeay release: SSLeay 0.8.1b
1998-12-21 10:52:47 +00:00
testdsa.h
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
testrsa.h
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
timeouts.h
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
ts.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
tsget
PR: 2031
2009-09-07 17:57:18 +00:00
verify.c
Standardize handling of #ifdef'd options.
2015-06-02 12:40:24 -04:00
version.c
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
vms_decc_init.c
Use safer sizeof variant in malloc
2015-05-04 15:00:13 -04:00
winrand.c
Big apps cleanup (option-parsing, etc)
2015-04-24 15:26:15 -04:00
x509.c
RT2547: Tighten perms on generated privkey files
2015-06-15 18:26:56 -04:00