aboutsummaryrefslogtreecommitdiff
path: root/apps
AgeCommit message (Collapse)AuthorFilesLines
2011-01-09Constify.Ben Laurie1-2/+4
2010-12-14Part of the IF structure didn't get pasted here...Richard Levitte1-0/+7
PR: 2393
2010-12-14First attempt at adding the possibility to set the pointer size for the ↵Richard Levitte1-3/+55
builds on VMS. PR: 2393
2010-12-12apps/x590.c: harmonize usage of STDout and out_err.Andy Polyakov1-2/+2
PR: 2323
2010-11-18fix no SIGALRM case in speed.cDr. Stephen Henson1-1/+2
2010-11-16add TLS v1.1 options to s_serverDr. Stephen Henson1-0/+4
2010-11-11PR: 2366Dr. Stephen Henson2-6/+8
Submitted by: Damien Miller <djm@mindrot.org> Reviewed by: steve Stop pkeyutl crashing if some arguments are missing. Also make str2fmt tolerate NULL parameter.
2010-09-05Fixes to NPN from Adam Langley.Ben Laurie4-21/+21
2010-08-26For better forward-security support, add functionsBodo Möller1-0/+20
SSL_[CTX_]set_not_resumable_session_callback. Submitted by: Emilia Kasper (Google) [A part of this change affecting ssl/s3_lib.c was accidentally commited separately, together with a compilation fix for that file; see s3_lib.c CVS revision 1.133 (http://cvs.openssl.org/chngview?cn=19855).]
2010-07-28Add Next Protocol Negotiation.Ben Laurie4-1/+191
2010-07-27Sign mismatch.Ben Laurie1-1/+1
2010-07-09gcm128.c: API modification and readability improvements,Andy Polyakov1-2/+28
add ghash benchmark to apps/speed.c.
2010-07-05i variable is used on some platformsDr. Stephen Henson1-0/+1
2010-06-12Fix warnings.Ben Laurie16-65/+17
2010-05-27PR: 2262Dr. Stephen Henson1-2/+12
Submitted By: Victor Wagner <vitus@cryptocom.ru> Fix error reporting in load_key function.
2010-05-15oops, revert test patchDr. Stephen Henson1-10/+0
2010-05-15PR: 2253Dr. Stephen Henson1-0/+10
Submitted By: Ger Hobbelt <ger@hobbelt.com> Check callback return value when outputting errors.
2010-04-06PR: 2220Dr. Stephen Henson3-3/+3
Fixes to make OpenSSL compile with no-rc4
2010-03-14free up sigopts STACKDr. Stephen Henson1-0/+2
2010-03-14clear bogus errors in ca utilityDr. Stephen Henson1-0/+1
2010-03-14add -sigopt option to ca utilityDr. Stephen Henson3-20/+59
2010-03-12new sigopt and PSS support for req and x509 utilitiesDr. Stephen Henson3-11/+96
2010-03-10don't leave bogus errors in the queueDr. Stephen Henson1-0/+6
2010-03-07oopsDr. Stephen Henson1-1/+0
2010-03-07The OID sanity check was incorrect. It should only disallow *leading* 0x80Dr. Stephen Henson1-0/+1
values.
2010-03-05Add -engine_impl option to dgst which will use an implementation ofDr. Stephen Henson1-6/+21
an algorithm from the supplied engine instead of just the default one.
2010-03-03PR: 2183Dr. Stephen Henson1-5/+11
PR#1999 broke fork detection by assuming HAVE_FORK was set for all platforms. Include original HAVE_FORK detection logic while allowing it to be overridden on specific platforms with -DHAVE_FORK=1 or -DHAVE_FORK=0
2010-03-01use supplied ENGINE in genrsaDr. Stephen Henson1-1/+4
2010-02-27oops, revert verify.c changeDr. Stephen Henson1-3/+0
2010-02-27Add Kerberos fix which was in 0.9.8-stable but never committed to HEAD andDr. Stephen Henson1-0/+3
1.0.0. Original fix was on 2007-Mar-09 and had the log message: "Fix kerberos ciphersuite bugs introduced with PR:1336."
2010-02-26include TVS 1.1 version stringDr. Stephen Henson1-0/+3
2010-02-25add -trusted_first option and verify flagDr. Stephen Henson1-0/+2
2010-02-25allow setting of verify names in command line utilities and print out verify ↵Dr. Stephen Henson2-4/+36
names in verify utility
2010-02-12PR: 2170Dr. Stephen Henson1-1/+1
Submitted by: Magnus Lilja <lilja.magnus@gmail.com> Make -c option in dgst work again.
2010-02-02PR: 2161Dr. Stephen Henson1-0/+4
Submitted by: Doug Goldstein <cardoe@gentoo.org>, Steve. Make no-dsa, no-ecdsa and no-rsa compile again.
2010-01-28Experimental renegotiation support in s_server test -www server.Dr. Stephen Henson1-1/+31
2010-01-27revert wrongly committed test codeDr. Stephen Henson1-21/+2
2010-01-27typoDr. Stephen Henson1-2/+21
2010-01-27Have the VMS build system catch up with the 1.0.0-stable branch.Richard Levitte1-5/+6
2010-01-22Tolerate PKCS#8 DSA format with negative private key.Dr. Stephen Henson1-0/+4
2010-01-17apps/speed.c: limit loop counters to 2^31 in order to avoid overflowsAndy Polyakov1-5/+15
in performance calculations. For the moment there is only one code fast enough to suffer from this: Intel AES-NI engine. PR: 2096
2010-01-12PR: 2136Dr. Stephen Henson1-0/+29
Submitted by: Willy Weisz <weisz@vcpc.univie.ac.at> Add options to output hash using older algorithm compatible with OpenSSL versions before 1.0.0
2010-01-06Fix compilation on older Linux. Linux didn't always have sockaddr_storage,Andy Polyakov1-36/+20
not to mention that first sockaddr_storage had __ss_family, not ss_family. In other words it makes more sense to avoid sockaddr_storage...
2009-12-27Add simple external session cache to s_server. This serialises sessionsDr. Stephen Henson1-1/+122
just like a "real" server making it easier to trace any problems.
2009-12-16New option to enable/disable connection to unpatched serversDr. Stephen Henson1-1/+8
2009-12-08Add ctrl and macro so we can determine if peer support secure renegotiation.Dr. Stephen Henson2-0/+4
2009-12-07Initial experimental TLSv1.1 supportDr. Stephen Henson2-1/+12
2009-12-02Replace the broken SPKAC certification with the correct version.Dr. Stephen Henson1-34/+2
2009-11-26Experimental CMS password based recipient Info support.Dr. Stephen Henson1-2/+33
2009-11-12Update from 1.0.0-stableRichard Levitte1-1/+1