aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2004-03-09Minimise the amount of code dependent on BN_DEBUG_RAND. In particular,Geoff Thorpe3-23/+5
redefine bn_clear_top2max() to be a NOP in the non-debugging case, and remove some unnecessary usages in bn_nist.c. Submitted by: Nils Larsch Reviewed by: Geoff Thorpe, Ulf Möller
2004-03-09More changes coming out of the bignum auditing. BN_CTX_get() should ideallyGeoff Thorpe1-12/+6
return a "zero" bignum as BN_new() does - so reset 'top'. During BN_CTX_end(), released bignums should be consistent so enforce this in debug builds. Also, reduce the number of wasted BN_clear_free() calls from BN_CTX_end() (typically by 75% or so). Submitted by: Nils Larsch Reviewed by: Geoff Thorpe, Ulf Möller
2004-03-08Fix policy constraints syntax.Dr. Stephen Henson1-2/+2
2004-03-08Support for inhibitAnyPolicy extension.Dr. Stephen Henson7-14/+45
2004-03-06typoUlf Möller1-1/+1
2004-03-05Cleanup ASN1 OID module when it exits.Dr. Stephen Henson1-2/+7
2004-03-05Call autoconfig code in pkcs7 utility.Dr. Stephen Henson1-0/+3
2004-03-05Memory leak fix.Dr. Stephen Henson1-2/+5
2004-03-05Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson5-14/+79
when X509_V_FLAG_X509_STRICT is set. Check for CRLSign in CRL issuer certificates. Reject CRLs with unhandled (any) critical extensions.
2004-03-04Typos.Dr. Stephen Henson1-3/+3
Reported by: Jose Castejon-Amenedo <Jose.Castejon-Amenedo@hp.com>
2004-03-04Make our page with pointers to binary distributions visible in the FAQRichard Levitte1-1/+4
2004-03-02Indent some of the code examples.Dr. Stephen Henson1-11/+11
2004-03-02Config docs.Dr. Stephen Henson4-4/+167
2004-03-02Documentation of the KISS autoconfig functions.Dr. Stephen Henson1-0/+77
2004-03-01More autoconfig docs.Dr. Stephen Henson1-3/+78
2004-03-01Avoid a memory leak in OCSP_parse_url().Richard Levitte1-0/+1
Notified by Paul Siegel <psiegel@corestreet.com>
2004-03-01Initial docs for the OpenSSL library configuration via openssl.cnfDr. Stephen Henson1-3/+62
2004-02-27Add ECDSA documentation.Geoff Thorpe1-0/+232
Submitted by: Nils Larsch
2004-02-27AES is spelled AES, not ASE. Oops...Richard Levitte1-3/+3
2004-02-26Make sure the given EVP_PKEY is updated in the PEM_STRING_PKCS8INF case also.Richard Levitte1-0/+4
PR: 833
2004-02-26Document the AES options for 'openssl smime'.Richard Levitte1-4/+7
PR: 834
2004-02-22A cleanup of the ecs_ossl.c code and some (doxygen) comments for ecdsa.hGeoff Thorpe2-149/+254
Submitted by: Nils Larsch Reviewed by: Geoff Thorpe
2004-02-22When adding positive elements, we can use BN_uadd() instead of BN_add().Geoff Thorpe1-1/+1
Submitted by: Nils Larsch Reviewed by: Geoff Thorpe
2004-02-19Use an OCTET STRING for the encoding of an OCSP nonce value.Dr. Stephen Henson2-7/+24
The old raw format can't be handled by some implementations and updates to RFC2560 will make this mandatory.
2004-02-10minor signed/unsigned warning fixesGeoff Thorpe3-5/+5
2004-02-08Fix handling of -offset and -length in asn1parse tool.Dr. Stephen Henson1-1/+9
If -offset exceeds -length of data available exit with an error. Don't read past end of total data available when -offset supplied. If -length exceeds total available truncate it.
2004-02-07Typo in crypto/bn/asm/x86_64.c, bn_div_words().Andy Polyakov1-1/+1
PR: 821
2004-02-01Add flag to avoid continuousDr. Stephen Henson3-3/+20
memory allocate when calling EVP_MD_CTX_copy_ex(). Without this HMAC is several times slower than < 0.9.7.
2004-01-30Typo in PA-RISC 2 rules in crypto/bn/Makefile.sslAndy Polyakov1-2/+2
2004-01-29HP/UX PA-RISC 2 targets update.Andy Polyakov4-25/+102
2004-01-29Remove typosRichard Levitte1-2/+2
2004-01-29-Wtraditional was a little too much...Richard Levitte1-4/+4
2004-01-29TypoRichard Levitte1-2/+2
2004-01-29In the development branch, it feels quite all right to warn on a lotRichard Levitte1-4/+4
more stuff.
2004-01-28make updateRichard Levitte1-3/+5
2004-01-28Add the missing parts for DES CFB1 and CFB8.Richard Levitte15-33/+335
Add the corresponding AES parts while I'm at it. make update
2004-01-28make updateRichard Levitte3-208/+207
2004-01-28Unsigned vs. signed problem removedRichard Levitte1-2/+2
2004-01-27#undef _POSIX_C_SOURCE in ui_openssl.c ruined IRIX builds. Comment on whyAndy Polyakov1-1/+5
_POSIX_C_SOURCE needed in first place.
2004-01-27CFB DES sync-up with FIPS branch.Andy Polyakov4-44/+235
2004-01-27Avoid signed vs. unsigned warnings (which are treated like errors onRichard Levitte2-2/+2
Windows).
2004-01-26S_IFBLK and S_IFCHR may not exist in some places (like Windows), soRichard Levitte1-0/+4
let's check for those macros, and if they aren't defined, let's assume there aren't Unixly devices on this platform.
2004-01-25Even though C specification explicitly says that constant type "stretches"Andy Polyakov2-14/+20
automatically to accomodate the value, some compilers fail to do so. Most notably 0x0123456789ABCDEF should come out as long long in 32-bit context, but HP compiler truncates it to 32-bit value. Which in turn breaks GF(2^m) arithmetics in hpux-parisc2-cc build. Therefore this fix...
2004-01-24Fix declaration inconsistency in ecparam.c.Andy Polyakov1-1/+1
2004-01-24Get rid of bogus warning when compiling with Sun vendor compiler.Andy Polyakov2-0/+13
2004-01-24We're passed p, so let's use p instead of making assumptions.Richard Levitte1-4/+4
2004-01-22Typo...Richard Levitte1-1/+1
2004-01-21Replace expired certificate.Dr. Stephen Henson2-14/+31
2004-01-21SHA-1 assembler tune-up for Intel P4Andy Polyakov1-203/+88
2004-01-10Adding a slash between the directoryt and the file is a problem withRichard Levitte1-3/+32
VMS. The C RTL can handle it well if the "directory" is a logical name with no colon, therefore ending being 'logname/file'. However, if the given logical names actually has a colon, or if you use a full VMS-syntax directory, you end up with 'logname:/file' or 'dev:[dir1.dir2]/file', and that isn't handled in any good way. So, on VMS, we need to check if the directory string ends with a separator (one of ':', ']' or '>' (< and > can be used instead [ and ])), and handle that by not inserting anything between the directory spec and the file name. In all other cases, it's assumed the directory spec is a logical name, so we need to place a colon between it and the file. Notified by Kevin Greaney <kevin.greaney@hp.com>.
generated by cgit v1.1 at 2024-07-14 06:51:10 +0000