aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2001-02-10Fix CRL printing to correctly show when there are no revoked certificates.Dr. Stephen Henson5-5/+11
Make ca.c correctly initialize the revocation date. Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string() set the string type: so they can initialize ASN1_TIME structures properly.
2001-02-10Simplify BN_rand_rangeBodo Möller5-13/+8
2001-02-09New Option SSL_OP_CIPHER_SERVER_PREFERENCE allows TLS/SSLv3 server to overrideLutz Jänicke9-28/+102
the clients choice; in SSLv2 the client uses the server's preferences.
2001-02-09TypoLutz Jänicke1-1/+1
2001-02-09Fix "wierd" typo as submitted by Jeroen Ruigrok/Asmodai <asmodai@wxs.nl>.Lutz Jänicke2-2/+2
2001-02-09Various Win32 related fixed. Make no-krb5 work in mkdef.pl .Dr. Stephen Henson5-15/+8
Fix warning in apps/engine.c Remove definitions of deleted functions. Add missing definition of X509_VAL.
2001-02-09Various updates to mkdef.pl to cope with new aesDr. Stephen Henson2-7/+44
and ASN1 code.
2001-02-09fix editing errorBodo Möller1-1/+1
2001-02-09add linux-s390 configuration (based on information submitted byBodo Möller2-1/+3
Denis Beauchemin <Denis.Beauchemin@Courrier.USherb.ca>)
2001-02-09Add missing \n's to ocsp usage message.Dr. Stephen Henson1-9/+9
2001-02-08Allow various options to be included for signing and verify ofDr. Stephen Henson2-29/+87
OCSP responses. Documentation to follow... Urgh.. this conflicted with the -VAfile patch I hope I haven't broken it.
2001-02-08The check for request including a nonce and response not having it wasRichard Levitte1-1/+1
inversed. Corrected. Hopefully, this will make it work without dumping core.
2001-02-08Add the -VAfile option to 'openssl ocsp'. This option will give theRichard Levitte2-1/+22
client code certificates to use to only check response signatures. I'm not entirely sure if the way I just implemented the verification is the right way to do it, and would be happy if someone would like to review this.
2001-02-08use <= instead of ==Ulf Möller1-1/+1
2001-02-08point out that RAND_load_file() etc are only for seed files, not forUlf Möller1-0/+3
entropy devices or sockets.
2001-02-08Note that EGD is used automatically.Ulf Möller1-0/+3
2001-02-08cleanupUlf Möller1-6/+5
2001-02-08Another comment change. (Previous comment does not applyBodo Möller1-2/+2
for range = 11000000... or range = 100000...)
2001-02-08Change comments. (The expected number of iterations in BN_rand_rangeBodo Möller1-2/+2
never exceeds 1.333...).
2001-02-08oops -- remove observation codeBodo Möller1-4/+0
2001-02-08Integrate my implementation of a countermeasure againstBodo Möller6-12/+67
Bleichenbacher's DSA attack. With this implementation, the expected number of iterations never exceeds 2. New semantics for BN_rand_range(): BN_rand_range(r, min, range) now generates r such that min <= r < min+range. (Previously, BN_rand_range(r, min, max) generated r such that min <= r < max. It is more convenient to have the range; also the previous prototype was misleading because max was larger than the actual maximum.)
2001-02-08platform specific CFLAGS don't belong into this MakefileBodo Möller1-1/+2
2001-02-08Update documentation to match the state at 0.9.6 _and_ the recent changes.Lutz Jänicke1-5/+43
2001-02-07Bleichenbacher's DSA attackUlf Möller6-10/+28
2001-02-07Modify access to EGD socket to deal with EINTR etc that can appearLutz Jänicke1-67/+156
during connect() and other calls. First seen on Unixware-7. Unify access to EGD-socket for all RAND_egd_*() methods.
2001-02-07Fix AES code.Dr. Stephen Henson23-5015/+2075
Update Rijndael source to v3.0 Add AES OIDs. Change most references of Rijndael to AES. Add new draft AES ciphersuites.
2001-02-07Change preferences for sockets of EGD-style entropy daemons to a moreLutz Jänicke1-1/+1
reasonable selection.
2001-02-07Fix typo preventing correct usage of -out option.Lutz Jänicke1-1/+1
2001-02-06Rijdael CBC mode and partial undebugged SSL support.Ben Laurie15-13/+232
2001-02-06Improve the state machine.Ben Laurie1-13/+34
2001-02-06Avoid coredumps for CONF_get_...(NULL, ...)Bodo Möller2-18/+50
2001-02-06don't dump coreBodo Möller1-5/+4
2001-02-06format stringsUlf Möller8-12/+11
2001-02-06Fix potential buffer overrun for EBCDIC.Ulf Möller2-6/+23
2001-02-05Fix a memory leak in BIO_get_accept_socket(). This leak was small andRichard Levitte1-4/+4
only happened when the port number wasn't parsable ot the host wasn't possible to convert to an IP address. Contributed by Niko Baric <Niko.Baric@epost.de>
2001-02-05Include string.h (whis is in all relevant standards) instead ofBodo Möller1-1/+1
memory.h (which is not).
2001-02-05New function to copy nonce values from OCSPDr. Stephen Henson3-12/+21
request to response.
2001-02-04Make depend.Ben Laurie20-2511/+2723
2001-02-04BN assembler is no longer option on x86.Ben Laurie1-1/+1
2001-02-04Can't remember why this was needed?Ben Laurie1-1/+2
2001-02-04Fix a warning.Ben Laurie1-0/+1
2001-02-04Documenting session caching, 2nd step.Lutz Jänicke9-8/+303
2001-02-04Fix ASN1_TIME_to_generlizedtime().Dr. Stephen Henson5-11/+35
Add protoype for OCSP_response_create(). Add OCSP_request_sign() and OCSP_basic_sign() private key and certificate checks and make OCSP_NOCERTS consistent with PKCS7_NOCERTS
2001-02-03Various OCSP responder utility functions.Dr. Stephen Henson8-227/+334
Delete obsolete OCSP functions. Largely untested at present...
2001-02-03Clarify why SSL_CTX_use_certificate_chain_file() should be preferred.Lutz Jänicke1-2/+14
2001-02-03Typo: on my screen it nicely wrapped around at 80 :-)Lutz Jänicke1-1/+2
2001-02-03If the source has already been succesfully queried, do not try to open itLutz Jänicke1-2/+4
again as file.
2001-02-02Document session caching, first step.Lutz Jänicke5-2/+241
2001-02-02Various function for commmon operations.Dr. Stephen Henson12-45/+49
2001-02-02Tidy up the mess in bss_sock.c and bss_fd.cDr. Stephen Henson2-130/+225
by placing them socket/fd code in separate files rather than trying to have them both share the same one.
generated by cgit v1.1 at 2024-07-13 20:31:46 +0000