aboutsummaryrefslogtreecommitdiff
path: root/ssl/ssl_asn1.c
AgeCommit message (Collapse)AuthorFilesLines
2007-08-12Fix warning and make no-tlsext work.Dr. Stephen Henson1-1/+4
2007-08-11RFC4507 (including RFC4507bis) TLS stateless session resumption supportDr. Stephen Henson1-7/+62
for OpenSSL.
2006-04-05Remove ECC extension information from external representationBodo Möller1-64/+5
of the session -- we don't really need it once the handshake has completed.
2006-03-30Implement Supported Elliptic Curves Extension.Bodo Möller1-7/+31
Submitted by: Douglas Stebila
2006-03-26Simplify ASN.1 for point format listBodo Möller1-27/+5
Submitted by: Douglas Stebila
2006-03-13Resolve signed vs. unsigned issuesRichard Levitte1-4/+4
2006-03-11Implement the Supported Point Formats Extension for ECC ciphersuitesBodo Möller1-7/+63
Submitted by: Douglas Stebila
2006-03-10add initial support for RFC 4279 PSK SSL ciphersuitesNils Larsch1-2/+87
PR: 1191 Submitted by: Mika Kousa and Pasi Eronen of Nokia Corporation Reviewed by: Nils Larsch
2006-01-04Fix signed/unsigned char clashes.Richard Levitte1-2/+2
2006-01-02Support TLS extensions (specifically, HostName)Bodo Möller1-1/+36
Submitted by: Peter Sylvester
2005-12-05Avoid warnings on VC++ 2005.Dr. Stephen Henson1-1/+1
2005-04-20Make kerberos ciphersuite code compile again.Dr. Stephen Henson1-5/+5
Avoid more shadow warnings.
2005-04-01use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.Nils Larsch1-3/+3
PR: 658
2005-03-31Give everything prototypes (well, everything that's actually used).Ben Laurie1-6/+6
2005-03-30Constification.Ben Laurie1-1/+1
2003-12-27Avoid including cryptlib.h, it's not really needed.Richard Levitte1-1/+0
Check if IDEA is being built or not. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe1-3/+3
I have tried to convert 'len' type variable declarations to unsigned as a means to address these warnings when appropriate, but when in doubt I have used casts in the comparisons instead. The better solution (that would get us all lynched by API users) would be to go through and convert all the function prototypes and structure definitions to use unsigned variables except when signed is necessary. The proliferation of (signed) "int" for strictly non-negative uses is unfortunate.
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie1-2/+9
2002-08-02get rid of OpenSSLDieBodo Möller1-2/+3
2002-07-30OpenSSL Security Advisory [30 July 2002]Lutz Jänicke1-0/+2
Changes marked "(CHATS)" were sponsored by the Defense Advanced Research Projects Agency (DARPA) and Air Force Research Laboratory, Air Force Materiel Command, USAF, under agreement number F30602-01-2-0537.
2002-07-10Reorder inclusion of header files:Lutz Jänicke1-1/+1
des_old.h redefines crypt: #define crypt(b,s)\ DES_crypt((b),(s)) This scheme leads to failure, if header files with the OS's true definition of crypt() are processed _after_ des_old.h was processed. This is e.g. the case on HP-UX with unistd.h. As evp.h now again includes des.h (which includes des_old.h), this problem only came up after this modification. Solution: move header files (indirectly) including e_os.h before the header files (indirectly) including evp.h. Submitted by: Reviewed by: PR:
2002-03-12Fix ASN1 additions for KRB5Dr. Stephen Henson1-16/+29
2001-07-31More Kerberos SSL changes from Jeffrey Altman <jaltman@columbia.edu>Richard Levitte1-0/+27
His comments are: First, it corrects a problem introduced in the last patch where the kssl_map_enc() would intentionally return NULL for valid ENCTYPE values. This was done to prevent verification of the kerberos 5 authenticator from being performed when Derived Key ciphers were in use. Unfortunately, the authenticator verification routine was not the only place that function was used. And it caused core dumps. Second, it attempt to add to SSL_SESSION the Kerberos 5 Client Principal Name.
2000-06-01There have been a number of complaints from a number of sources that namesRichard Levitte1-8/+8
like Malloc, Realloc and especially Free conflict with already existing names on some operating systems or other packages. That is reason enough to change the names of the OpenSSL memory allocation macros to something that has a better chance of being unique, like prepending them with OPENSSL_. This change includes all the name changes needed throughout all C files.
2000-02-03ispell (and minor modifications)Ulf Möller1-1/+1
1999-11-16Store verify_result with sessions to avoid potential security hole.Bodo Möller1-4/+26
1999-04-26Remove NOPROTO definitions and error code comments.Ulf Möller1-5/+0
1999-04-23Change #include filenames from <foo.h> to <openssl.h>.Bodo Möller1-2/+2
Submitted by: Reviewed by: PR:
1999-04-19Change functions to ANSI C.Ulf Möller1-7/+3
1999-03-22Fix security hole.Ben Laurie1-1/+24
1998-12-21Import of old SSLeay release: SSLeay 0.9.0bRalf S. Engelschall1-6/+6
1998-12-21Import of old SSLeay release: SSLeay 0.8.1bRalf S. Engelschall1-0/+313