aboutsummaryrefslogtreecommitdiff
path: root/crypto/pem
AgeCommit message (Collapse)AuthorFilesLines
2002-12-29make updateRichard Levitte1-184/+98
2002-11-29A few more memset()s converted to OPENSSL_cleanse().Richard Levitte1-1/+1
I *think* I got them all covered by now, bu please, if you find any more, tell me and I'll correct it. PR: 343
2002-11-28Cleanse memory using the new OPENSSL_cleanse() function.Richard Levitte4-11/+11
I've covered all the memset()s I felt safe modifying, but may have missed some.
2002-11-18Add the ASN.1 structures and functions for CertificatePair, which isRichard Levitte2-0/+4
defined as follows (according to X.509_4thEditionDraftV6.pdf): CertificatePair ::= SEQUENCE { forward [0] Certificate OPTIONAL, reverse [1] Certificate OPTIONAL, -- at least one of the pair shall be present -- } The only thing I'm not sure about is if it's implicit or explicit tags that I should count on. For now, I'm thinking explicit, but will gladly stand corrected. Also implement the PEM functions to read and write certificate pairs, and defined the PEM tag as "CERTIFICATE PAIR". This needed to be defined, mostly for the sake of the LDAP attribute crossCertificatePair, but may prove useful elsewhere as well.
2002-11-13Merge from 0.9.7-stable.Richard Levitte1-1/+1
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie3-5/+12
2002-10-30Plug potential memory leak.Richard Levitte1-1/+1
Identified by Goetz Babin-Ebell <babinebell@trustcenter.de>
2002-10-09Use double dashes so makedepend doesn't misunderstand the flags weRichard Levitte1-1/+1
give it. For 0.9.7 and up, that means util/domd needs to remove those double dashes from the argument list when gcc is used to find the dependencies.
2002-08-29don't memset(data,0,...) if data is NULLBodo Möller1-2/+5
Submitted by: anonymous PR: 254
2002-08-12get rid of EVP_PKEY_ECDSA (now we have EVP_PKEY_EC instead)Bodo Möller1-1/+1
Submitted by: Nils Larsch
2002-08-09make updateBodo Möller1-125/+128
2002-08-07use a generic EC_KEY structure (EC keys are not ECDSA specific)Bodo Möller3-28/+24
Submitted by: Nils Larsch
2002-07-30"make update"Lutz Jänicke1-194/+191
2002-07-26Use SEC1 format for EC private keys.Bodo Möller5-6/+6
This is not ECDSA specific, so it's now PEM_STRING_ECPRIVATEKEY etc. Submitted by: Nils Larsch <nlarsch@compuserve.de>
2002-07-14Replace 'ecdsaparam' commandline utility by 'ecparam'Bodo Möller3-93/+184
(the same keys can be used for ECC schemes other than ECDSA) and add some new options. Similarly, use string "EC PARAMETERS" instead of "ECDSA PARAMETERS" in 'PEM' format. Fix ec_asn1.c (take into account the desired conversion form). 'make update'. Submitted by: Nils Larsch
2002-06-27Try to avoid double declaration of ERR_load_PEM_strings().Richard Levitte1-0/+2
PR 71
2002-06-27Pass CFLAG to dependency makers, so non-standard system include paths areRichard Levitte1-1/+1
handled properly. Part of PR 75
2002-06-05Check errors when parsing a PKCS8INF PEM FILE, or there will be a core dump ↵Richard Levitte1-0/+1
on error. PR: 77
2002-04-23Uhmmm, if we use && after having tested for the presence of the certificate,Richard Levitte1-1/+1
we just *might* stand a certain chance of actually getting it written to file...
2002-02-28use ERR_peek_last_error() instead of ERR_peek_error() to ignoreBodo Möller1-1/+1
any other errors that may be left in the error queue Submitted by: Jeffrey Altman
2002-02-20Stop assuming the IV is 8 bytes long, use the real size instead.Richard Levitte2-4/+4
This is especially important for AES that has a 16 bytes IV.
2002-02-13ECDSA supportBodo Möller6-114/+270
Submitted by: Nils Larsch <nla@trustcenter.de>
2002-02-05'make update'Richard Levitte1-1/+2
2002-01-24make updateRichard Levitte1-13/+13
libeay.num got tweaked so the old des symbols would retain their positions.
2001-12-17remove redundant ERR_load_... declarationsBodo Möller1-2/+0
2001-11-15make updateRichard Levitte1-1/+1
perl util/mkerr.pl -recurse -write -rebuild
2001-10-20Add missing EVP_CIPHER_CTX_{init,cleanup}Dr. Stephen Henson1-1/+4
2001-10-17Modify EVP cipher behaviour in a similar wayDr. Stephen Henson2-5/+5
to digests to retain compatibility.
2001-10-16Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()Dr. Stephen Henson1-1/+1
with existing code. Modify library to use digest *_ex() functions.
2001-10-04'make update'Richard Levitte1-60/+60
2001-08-05Start to reduce some of the header bloat.Ben Laurie1-22/+29
2001-07-31make updateRichard Levitte1-11/+11
2001-07-30Really add the EVP and all of the DES changes.Ben Laurie3-99/+133
2001-07-27More linker bloat reorganisation:Dr. Stephen Henson7-234/+492
Split private key PEM and normal PEM handling. Private key handling needs to link in stuff like PKCS#8. Relocate the ASN1 *_dup() functions, to the relevant ASN1 modules using new macro IMPLEMENT_ASN1_DUP_FUNCTION. Previously these were all in crypto/x509/x_all.c along with every ASN1 BIO/fp function which linked in *every* ASN1 function if a single dup was used. Move the authority key id ASN1 structure to a separate file. This is used in the X509 routines and its previous location linked in all the v3 extension code. Also move ASN1_tag2bit to avoid linking in a_bytes.c which is now largely obsolete. So far under Linux stripped binary with single PEM_read_X509 is now 238K compared to 380K before these changes.
2001-07-26First of several reorganisations toDr. Stephen Henson5-9/+146
reduce linker bloat. For example the single line: PEM_read_X509() results in a binary of around 400K in Linux! This first step separates some of the PEM functions and avoids linking in some PKCS#7 and PKCS#12 code.
2001-03-09Instead of telling both 'make' and the user that ranlibBodo Möller1-2/+1
errors can be tolerated, hide the error from 'make'. This gives shorter output both if ranlib fails and if it works.
2001-02-26make updateRichard Levitte1-21/+20
Note that all *_it variables are suddenly non-existant according to libeay.num. This is a bug that will be corrected. Please be patient.
2001-02-22e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte1-37/+37
and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
2001-02-19Make all configuration macros available for application by makingRichard Levitte7-91/+94
sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
2001-02-09Fix "wierd" typo as submitted by Jeroen Ruigrok/Asmodai <asmodai@wxs.nl>.Lutz Jänicke1-1/+1
2001-02-04Make depend.Ben Laurie1-69/+69
2000-12-31Rewrite PKCS#12 code and remove some of the oldDr. Stephen Henson1-2/+2
horrible macros. Fix two evil ASN1 bugs. Attempt to use 'ctx' when NULL if input is indefinite length constructed in asn1_check_tlen() and invalid pointer to ASN1_TYPE when reusing existing structure (this took *ages* to find because the new PKCS#12 code triggered it).
2000-11-12in some new file names the first 8 characters were not uniqueUlf Möller1-27/+26
2000-10-14The experimental Rijndael code moved to the main trunk.Richard Levitte1-22/+29
make update done.
2000-09-25'ranlib' doesn't always run on some systems. That's actuallyRichard Levitte1-1/+2
acceptable, since all that happens if it fails is a library with an index, which makes linking slower, but still working correctly.
2000-09-07'make update'Richard Levitte1-11/+16
2000-09-07It's not just VMS that needs some symbols to be hacked. Let'sRichard Levitte1-3/+1
centralise those hacks in crypto/symhacks.h and use it everywhere it's needed.
2000-08-14MD4 implemented. Assar Westerlund provided the digest code itself and the ↵Richard Levitte1-42/+45
test utility, I added the bits to get a EVP interface, the command line utility and the speed test
2000-07-05I got sick and tired of having to keep track of NIDs when such a thingRichard Levitte1-33/+36
could be done automagically, much like the numbering in libeay.num and ssleay.num. The solution works as follows: - New object identifiers are inserted in objects.txt, following the syntax given in objects.README. - objects.pl is used to process obj_mac.num and create a new obj_mac.h. - obj_dat.pl is used to create a new obj_dat.h, using the data in obj_mac.h. This is currently kind of a hack, and the perl code in objects.pl isn't very elegant, but it works as I intended. The simplest way to check that it worked correctly is to look in obj_dat.h and check the array nid_objs and make sure the objects haven't moved around (this is important!). Additions are OK, as well as consistent name changes.
2000-06-13Enable DSO support on alpha (OSF1), cc and gcc.Geoff Thorpe1-37/+41
Also, "make update" has added some missing functions to libeay.num, updated the TABLE for the alpha changes, and updated thousands of dependancies that have changed from recent commits.
generated by cgit v1.1 at 2024-07-14 03:09:07 +0000