aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2004-01-04Update URILutz Jänicke1-1/+1
Submitted by: Gertjan van Oosten <gertjan@West.NL> PR: #804
2004-01-04unintptr_t and <inttypes.h> are not strictly portable with respect toLutz Jänicke1-2/+1
ANSI C 89. Undo change to maintain compatibility.
2003-12-27Fix Perl problems on sparc64.Richard Levitte1-0/+4
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Avoid including cryptlib.h, it's not really needed.Richard Levitte13-11/+14
Check if IDEA is being built or not. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Only use environment variables if uid and gid are the same as euid and egid.Richard Levitte1-1/+2
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Check if a random "file" is really a device file, and treat itRichard Levitte2-11/+75
specially if it is. Add a few OpenBSD-specific cases. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Correct documentation typos.Richard Levitte4-4/+4
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27OpenBSD-internal changes.Richard Levitte1-4/+0
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Use sh explicitely to run point.shRichard Levitte47-49/+49
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Include strings.h so strcasecmp() and strncasecmp() get properly declared.Richard Levitte1-1/+2
2003-12-27Use BUF_strlcpy() instead of strcpy().Richard Levitte43-182/+233
Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Add a newline at the end of the last line.Richard Levitte2-2/+2
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-20Typos.Dr. Stephen Henson1-3/+3
2003-12-11To figure out if we're going outside the buffer, use the size of the buffer,Richard Levitte1-3/+3
not the size of the integer used to index in said buffer. PR: 794 Notified by: Rhett Garber <rhett_garber@hp.com>
2003-12-10Document that you need to include x509.h (to get [i2d|d2i]_RSA_PUBKEY()).Richard Levitte1-2/+3
Correct the typo PUKEY...
2003-12-10Document that you need to include x509.h (to get [i2d|d2i]_DSA_PUBKEY()).Richard Levitte1-2/+3
Correct the typo PUKEY...
2003-12-06Add "dif" variable to clean up the loop implementations.Ulf Möller1-45/+46
Submitted by: Nils Larsch
2003-12-06Skip a curve with generator of non-prime order.Ulf Möller1-0/+2
Submitted by: Nils Larsch
2003-12-06Avoid segfault if ret==0.Ulf Möller1-1/+2
Submitted by: Nils Larsch
2003-12-03Restructure make targets to allow parallel make.Lutz Jänicke2-4/+4
Submitted by: Witold Filipczyk <witekfl@poczta.gazeta.pl> PR: #513
2003-12-02Incremental cleanups to bn_lib.c.Geoff Thorpe1-48/+38
- Add missing bn_check_top() calls and relocate some others - Use BN_is_zero() where appropriate - Remove assert()s that bn_check_top() is already covering - Simplify the code in places (esp. bn_expand2()) - Only keep ambiguous zero handling if BN_STRICT isn't defined - Remove some white-space and make some other aesthetic tweaks
2003-12-02Use the BN_is_odd() macro in place of code that (inconsistently) does muchGeoff Thorpe2-5/+7
the same thing. Also, I have some stuff on the back-burner related to some BN_CTX notes from Peter Gutmann about his cryptlib hacks to the bignum code. The BN_CTX comments are there to remind me of some relevant points in the code.
2003-12-02BN_FLG_FREE is of extremely dubious usefulness, and is only referred toGeoff Thorpe2-1/+9
once in the source (where it is set for the benefit of no other code whatsoever). I've deprecated the declaration in the header and likewise made the use of the flag conditional in bn_lib.c. Note, this change also NULLs the 'd' pointer in a BIGNUM when it is reset but not deallocated.
2003-12-01Declare the static BIGNUM "BN_value_one()" more carefully.Geoff Thorpe1-1/+1
2003-12-01Add missing bn_check_top()s to bn_kron.c, remove some miscellaneousGeoff Thorpe1-3/+5
white-space, and include extra headers to satisfy debugging builds.
2003-12-01Add missing bn_check_top()s to bn_gf2m.c and remove some miscellaneousGeoff Thorpe1-29/+70
white-space.
2003-12-01The bn_set_max() macro is only "used" by the bn_set_[low|high]() macrosGeoff Thorpe1-32/+0
which, in turn, are used nowhere at all. This is a good thing because bn_set_max() would currently generate code that wouldn't compile (BIGNUM has no 'max' element). The only apparent use for bn_set_[low|high] would be for implementing windowing algorithms, and all of openssl's seem to use bn_***_words() helpers instead (including the BN_div() that Nils fixed recently, which had been using independently-coded versions of what these unused macros are intended for). I'm therefore consigning these macros to cvs oblivion in the name of readability.
2003-12-01bn_fix_top() exists for compatibility's sake and is mapped toGeoff Thorpe1-2/+2
bn_correct_top() or bn_check_top() depending on debug settings. For internal source, all bn_fix_top()s should be converted one way or the other depending on whether the use of bn_correct_top() is justified. For BN_div_recp(), these cases should not require correction if the other bignum functions are doing their jobs properly, so convert to bn_check_top().
2003-12-01It was pointed out to me that if the requested size is 0, we shouldn'tRichard Levitte1-4/+11
ty to allocate anything at all. This will allow eNULL to still work. PR: 751 Notified by: Lutz Jaenicke
2003-12-01Check that OPENSSL_malloc() really returned some memory.Richard Levitte1-0/+5
PR: 751 Notified by: meder@mcs.anl.gov Reviewed by: Lutz Jaenicke, Richard Levitte
2003-12-01CRYPTO_malloc(), CRYPTO_realloc() and variants of them should return NULLRichard Levitte1-4/+4
if the give size is 0. This is a thought that came up in PR 751.
2003-12-01Some more ASFLAGS settings requiredLutz Jänicke2-0/+2
PR: #735 Submitted by: Tim Rice <tim@multitalents.net>
2003-11-30Add more debugging to my Configure target, and "make update" to incorporateGeoff Thorpe3-6/+68
this and a few other changes.
2003-11-30If BN_STRICT is defined, don't accept an ambiguous representation of zeroGeoff Thorpe1-2/+20
(ie. where top may be zero, or it may be one if the corresponding word is set to zero). Note, this only affects the macros in bn.h, there are probably similar corrections required in some c files. Also, clarify the audit-related macros at the top of the header. Mental note: I must not forget to clean all this out before 0.9.8 is released ...
2003-11-30Improve a couple of the bignum macros. Note, this doesn't eliminateGeoff Thorpe1-5/+5
tolerance of ambiguous zero-representation, it just improves BN_abs_is_word() and simplifies other macros that depend on it.
2003-11-30Make BN_DEBUG_RAND less painfully slow by only consuming one byte ofGeoff Thorpe1-1/+3
pseudo-random data for each bn_pollute().
2003-11-29This improves the placement of check_top() macros in a couple of bn_libGeoff Thorpe1-2/+7
functions.
2003-11-29Make sure the documentation matches reality.Richard Levitte1-2/+2
PR: 755 Notified by: Jakub Bogusz <qboosh@pld-linux.org>
2003-11-29We're getting a clash with C++ because it has a type called 'list'.Richard Levitte6-47/+48
Therefore, change all instances of the symbol 'list' to something else. PR: 758 Submitted by: Frédéric Giudicelli <groups@newpki.org>
2003-11-29Add IPSec/IKE/Oakley curves.Richard Levitte5-4/+51
PR: 768 Submitted by: Vadim Fedukovich <vf@unity.net>
2003-11-29Damnit, I'm sick of having to do something special every time a moduleRichard Levitte3-5/+9
that gets built before objects barfs all over the place because it uses a new NID that hasn't had a chance of getting defined yet (in this case, it was about a couple of new EC curves, and therefore a couple of new corresponding NIDs). I'm placing objects first in SDIRS! There.
2003-11-28RSA_size() and DH_size() return the amount of bytes in a key, and weRichard Levitte1-2/+2
compared it to the amount of bits required... PR: 770 Submitted by: c zhang <czhang2005@hotmail.com>
2003-11-281024 is the export key bits limit according to current regulations, not 512.Richard Levitte1-1/+1
PR: 771 Submitted by: c zhang <czhang2005@hotmail.com>
2003-11-28Get rid of some signed/unsigned comparison warnings.Geoff Thorpe1-7/+14
2003-11-28Make a number of changes to the OS/2 build. Submitter's comment below.Richard Levitte5-25/+125
PR: 732 Submitted by: Ilya Zakharevich <nospam-abuse@ilyaz.org> Submitter's comment: This patch: a) Introduces a new file os2/backwardify.pl. b) Introduces a new mk1mf.pl variable $preamble. As you can see, it may be used also to move some OS-specific code to VC-CE too (the the first chunk of the patch); c) The DESCRIPTION specifier of the .def file is made more informative: now it contains the version number too. On OS/2 it is made conformant to OS/2 conventions; in particular, when one runs the standard command BLDLEVEL this.DLL one can see: Vendor: www.openssl.org/ Revision: 0.9.7c Description: OpenSSL: implementation of Secure Socket Layer; DLL for library crypto. Build for EMX -Zmtd [I did not make Win32 descriptions as informative as this - I'm afraid to break something. Be welcome to fix this.] d) On OS/2 the generated DLL was hardly usable (it had a shared initialized data segment). e) On OS/2 the generated DLLs had names like ssl.dll. However, DLL names on OS/2 are "global data". It is hard to have several DLLs with the same name on the system. Thus this precluded coexistence of OpenSSL with DLLs for other SLL implementations - or other name clashes. I transparently changed the names of the DLLs to open_ssl.dll and cryptssl.dll. f) The file added in (a) is used to create "forwarder" DLLs, so the applications expecting the "old" DLL names may use the new DLLs transparently. (A presence of these DLLs on the system nullifies (e), but makes old applications work. This is a stopgap measure until the old applications are relinked. Systems with no old applications do not need these DLLs, so may enjoy all the benefits of (e).) The new DLLs are placed in os2/ and os2/noname subdirectories. g) The makefiles created with os2/OS2-EMX.cmd did not work (some mysterious meaningless failures). The change to util/pl/OS2-EMX.pl uses the variable introduced in (b) to switch the Makefiles to SHELL=sh syntax. All these backslashes are removed, and the generated Makefiles started to work. h) Running os2/OS2-EMX.cmd now prints out what to do next.
2003-11-28Move another common functionality (reproduced so far with cut'n'paste)Richard Levitte3-33/+34
to apps.c, and give it the hopefully descriptive name parse_yesno().
2003-11-28Let's use text/plain in the example instead of crapy HTML.Richard Levitte1-3/+3
PR: 777 Submitted by: Michael Shields <mshields@sunblocksystems.com>
2003-11-28Forgot to change the declaration of do_subject() to one of parse_name()...Richard Levitte1-1/+1
2003-11-28Move do_subject() to apps.c and rename it to parse_name(). TheRichard Levitte3-138/+139
rationale behind the move is that it's use by several applications. The rationale behind the name change is that it describes what the function does a bit better.
2003-11-28Allow multi-valued rdns in subjects. This adds the -multivalue-rdn optionRichard Levitte3-28/+51
to 'openssl req' and 'openssl ca'. PR: 779 Submitted by: Michael Bell <michael.bell@cms.hu-berlin.de> Reviewed by: Richard Levitte (there will be some follow-up changes)
generated by cgit v1.1 at 2024-07-14 07:17:18 +0000