https://github.com/openssl/openssl

sort by:
Revision Author Date Message Commit Date
e6738d4 Improve test suite. 02 February 2004, 15:25:30 UTC
4c6d0b7 Wrong variable! 31 January 2004, 17:18:02 UTC
135891a Force odd parity. 31 January 2004, 16:39:59 UTC
bcb0a64 Eliminate pointless variable. 31 January 2004, 16:30:13 UTC
7575c7e Test suite plus failure if selftest fails. 30 January 2004, 19:22:22 UTC
6a0fc3b Recent changes from 0.9.7-stable 29 January 2004, 09:48:49 UTC
ee2cffe Recent changes from 0.9.7-stable 29 January 2004, 09:40:44 UTC
326e02b Reserve for unaligned buffer. The problem was "pointed out" be HPUX64 gcc, which failed to compile it with "not aligned" at higher optimization levels. 24 January 2004, 15:04:38 UTC
50f4063 Fix for DES_cfb_encrypt corrupting output buffer. This renders certain code in corresponding EVP modules obsolete, which I remove at once. 24 January 2004, 10:33:33 UTC
370d5a7 Recent changes from 0.9.7-stable. 23 January 2004, 16:09:01 UTC
de56817 Replace expired certificate. 21 January 2004, 13:09:27 UTC
83d1298 This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips- 0_9_7-stable'. 21 January 2004, 13:08:15 UTC
815d705 Replace expired certificate. 21 January 2004, 13:08:11 UTC
30cb9ec SHA-1 assembler tune-up for Intel P4 21 January 2004, 08:17:08 UTC
8b79f20 Recent and not so recent changes from 0.9.7-stable, all conflicts resolved. 19 January 2004, 08:53:02 UTC
af6dab9 Adding a slash between the directoryt and the file is a problem with VMS. The C RTL can handle it well if the "directory" is a logical name with no colon, therefore ending being 'logname/file'. However, if the given logical names actually has a colon, or if you use a full VMS-syntax directory, you end up with 'logname:/file' or 'dev:[dir1.dir2]/file', and that isn't handled in any good way. So, on VMS, we need to check if the directory string ends with a separator (one of ':', ']' or '>' (< and > can be used instead [ and ])), and handle that by not inserting anything between the directory spec and the file name. In all other cases, it's assumed the directory spec is a logical name, so we need to place a colon between it and the file. Notified by Kevin Greaney <kevin.greaney@hp.com>. 10 January 2004, 18:04:38 UTC
cdb42bc Cover all DSA setups when running tests PR: #748 Submitted by: Kirill Kochetkov <kochet@ixbt.com> 08 January 2004, 07:46:37 UTC
7995627 This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips- 0_9_7-stable'. 08 January 2004, 07:38:16 UTC
fc56b52 Updates to s_time manual page PR: #570 Submitted by: Martin Witzel <MWITZEL@de.ibm.com> 08 January 2004, 07:38:15 UTC
6062460 Improve debugging. 06 January 2004, 18:02:32 UTC
a32fc68 Add s_time manual page Submitted by: "Martin Witzel" <MWITZEL@de.ibm.com> PR: #570 04 January 2004, 18:59:14 UTC
c0017a5 Update URI Submitted by: Gertjan van Oosten <gertjan@West.NL> PR: #804 04 January 2004, 18:05:50 UTC
344e866 unintptr_t and <inttypes.h> are not strictly portable with respect to ANSI C 89. Undo change to maintain compatibility. 04 January 2004, 17:53:21 UTC
0755217 Fix Perl problems on sparc64. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:13:18 UTC
5fdf066 Avoid including cryptlib.h, it's not really needed. Check if IDEA is being built or not. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:10:30 UTC
f28e8bd Only use environment variables if uid and gid are the same as euid and egid. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:07:20 UTC
de02ec2 Check if a random "file" is really a device file, and treat it specially if it is. Add a few OpenBSD-specific cases. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:02:22 UTC
1123410 Correct documentation typos. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 15:04:54 UTC
7cf8032 OpenBSD-internal changes. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 15:02:56 UTC
79b42e7 Use sh explicitely to run point.sh This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:59:07 UTC
f0c5db9 Include strings.h so strcasecmp() and strncasecmp() get properly declared. 27 December 2003, 14:54:48 UTC
d420ac2 Use BUF_strlcpy() instead of strcpy(). Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:40:17 UTC
b79aa47 Add a newline at the end of the last line. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:26:14 UTC
e88c577 Typos. 20 December 2003, 22:48:21 UTC
10fdd8d I haven't merged from 0.9.7-stable in a loooong time. It shows :-). 18 December 2003, 19:26:40 UTC
9c2fcb7 Make OFB MCT work. 18 December 2003, 17:21:18 UTC
01d49d1 Even ECB needs new keys. 18 December 2003, 15:39:16 UTC
380537d All CFB modes have to do magic on decrypt. 18 December 2003, 15:38:58 UTC
3229fd6 Who invented these tests? Reconstruct internal state in order to follow bizarre CFB test algorithm. 18 December 2003, 14:26:50 UTC
cba1c06 CFB-64 needs to use the saved IV too. 18 December 2003, 14:10:53 UTC
bebc48c Decrypt correctly. 18 December 2003, 13:57:24 UTC
50bd5b8 Derive new keys correctly. 18 December 2003, 13:33:12 UTC
91182b1 Output keys correctly. 18 December 2003, 12:44:27 UTC
21a5b6c Count was missing in MCT output. 18 December 2003, 10:08:01 UTC
a2b0de9 To figure out if we're going outside the buffer, use the size of the buffer, not the size of the integer used to index in said buffer. PR: 794 Notified by: Rhett Garber <rhett_garber@hp.com> 11 December 2003, 18:01:03 UTC
4775944 Document that you need to include x509.h (to get [i2d|d2i]_RSA_PUBKEY()). Correct the typo PUKEY... 10 December 2003, 14:31:55 UTC
2abd5b7 Document that you need to include x509.h (to get [i2d|d2i]_DSA_PUBKEY()). Correct the typo PUKEY... 10 December 2003, 13:57:51 UTC
380e145 Add "dif" variable to clean up the loop implementations. Submitted by: Nils Larsch 06 December 2003, 11:55:46 UTC
a9f2330 Skip a curve with generator of non-prime order. Submitted by: Nils Larsch 06 December 2003, 11:41:22 UTC
ce38bb1 Avoid segfault if ret==0. Submitted by: Nils Larsch 06 December 2003, 11:39:37 UTC
919f8bc Restructure make targets to allow parallel make. Submitted by: Witold Filipczyk <witekfl@poczta.gazeta.pl> PR: #513 03 December 2003, 16:29:41 UTC
2bfd2c7 Incremental cleanups to bn_lib.c. - Add missing bn_check_top() calls and relocate some others - Use BN_is_zero() where appropriate - Remove assert()s that bn_check_top() is already covering - Simplify the code in places (esp. bn_expand2()) - Only keep ambiguous zero handling if BN_STRICT isn't defined - Remove some white-space and make some other aesthetic tweaks 02 December 2003, 20:01:30 UTC
82b2f57 Use the BN_is_odd() macro in place of code that (inconsistently) does much the same thing. Also, I have some stuff on the back-burner related to some BN_CTX notes from Peter Gutmann about his cryptlib hacks to the bignum code. The BN_CTX comments are there to remind me of some relevant points in the code. 02 December 2003, 03:28:24 UTC
2ae1ea3 BN_FLG_FREE is of extremely dubious usefulness, and is only referred to once in the source (where it is set for the benefit of no other code whatsoever). I've deprecated the declaration in the header and likewise made the use of the flag conditional in bn_lib.c. Note, this change also NULLs the 'd' pointer in a BIGNUM when it is reset but not deallocated. 02 December 2003, 03:16:56 UTC
34066d7 Declare the static BIGNUM "BN_value_one()" more carefully. 01 December 2003, 23:13:17 UTC
b74cc07 Add missing bn_check_top()s to bn_kron.c, remove some miscellaneous white-space, and include extra headers to satisfy debugging builds. 01 December 2003, 23:11:45 UTC
e7e5fe4 Add missing bn_check_top()s to bn_gf2m.c and remove some miscellaneous white-space. 01 December 2003, 23:10:21 UTC
998ae04 The bn_set_max() macro is only "used" by the bn_set_[low|high]() macros which, in turn, are used nowhere at all. This is a good thing because bn_set_max() would currently generate code that wouldn't compile (BIGNUM has no 'max' element). The only apparent use for bn_set_[low|high] would be for implementing windowing algorithms, and all of openssl's seem to use bn_***_words() helpers instead (including the BN_div() that Nils fixed recently, which had been using independently-coded versions of what these unused macros are intended for). I'm therefore consigning these macros to cvs oblivion in the name of readability. 01 December 2003, 22:11:08 UTC
e65c2b9 bn_fix_top() exists for compatibility's sake and is mapped to bn_correct_top() or bn_check_top() depending on debug settings. For internal source, all bn_fix_top()s should be converted one way or the other depending on whether the use of bn_correct_top() is justified. For BN_div_recp(), these cases should not require correction if the other bignum functions are doing their jobs properly, so convert to bn_check_top(). 01 December 2003, 21:59:40 UTC
2fe9ab8 It was pointed out to me that if the requested size is 0, we shouldn't ty to allocate anything at all. This will allow eNULL to still work. PR: 751 Notified by: Lutz Jaenicke 01 December 2003, 13:25:37 UTC
1145e03 Check that OPENSSL_malloc() really returned some memory. PR: 751 Notified by: meder@mcs.anl.gov Reviewed by: Lutz Jaenicke, Richard Levitte 01 December 2003, 12:11:55 UTC
6781efb CRYPTO_malloc(), CRYPTO_realloc() and variants of them should return NULL if the give size is 0. This is a thought that came up in PR 751. 01 December 2003, 12:06:15 UTC
0bf1c1d Some more ASFLAGS settings required PR: #735 Submitted by: Tim Rice <tim@multitalents.net> 01 December 2003, 08:12:47 UTC
6ed474c Add more debugging to my Configure target, and "make update" to incorporate this and a few other changes. 30 November 2003, 23:29:27 UTC
46cb8d3 If BN_STRICT is defined, don't accept an ambiguous representation of zero (ie. where top may be zero, or it may be one if the corresponding word is set to zero). Note, this only affects the macros in bn.h, there are probably similar corrections required in some c files. Also, clarify the audit-related macros at the top of the header. Mental note: I must not forget to clean all this out before 0.9.8 is released ... 30 November 2003, 22:23:12 UTC
23fc5ac Improve a couple of the bignum macros. Note, this doesn't eliminate tolerance of ambiguous zero-representation, it just improves BN_abs_is_word() and simplifies other macros that depend on it. 30 November 2003, 22:02:10 UTC
5734beb Make BN_DEBUG_RAND less painfully slow by only consuming one byte of pseudo-random data for each bn_pollute(). 30 November 2003, 21:21:30 UTC
657a919 This improves the placement of check_top() macros in a couple of bn_lib functions. 29 November 2003, 20:34:07 UTC
6859bb1 Make sure the documentation matches reality. PR: 755 Notified by: Jakub Bogusz <qboosh@pld-linux.org> 29 November 2003, 10:33:25 UTC
3822740 We're getting a clash with C++ because it has a type called 'list'. Therefore, change all instances of the symbol 'list' to something else. PR: 758 Submitted by: Frédéric Giudicelli <groups@newpki.org> 29 November 2003, 10:25:37 UTC
0d78bc3 Add IPSec/IKE/Oakley curves. PR: 768 Submitted by: Vadim Fedukovich <vf@unity.net> 29 November 2003, 09:25:59 UTC
d87b79b Damnit, I'm sick of having to do something special every time a module that gets built before objects barfs all over the place because it uses a new NID that hasn't had a chance of getting defined yet (in this case, it was about a couple of new EC curves, and therefore a couple of new corresponding NIDs). I'm placing objects first in SDIRS! There. 29 November 2003, 09:19:12 UTC
70ef9c5 RSA_size() and DH_size() return the amount of bytes in a key, and we compared it to the amount of bits required... PR: 770 Submitted by: c zhang <czhang2005@hotmail.com> 28 November 2003, 23:03:14 UTC
b727907 1024 is the export key bits limit according to current regulations, not 512. PR: 771 Submitted by: c zhang <czhang2005@hotmail.com> 28 November 2003, 22:39:19 UTC
444c3a8 Get rid of some signed/unsigned comparison warnings. 28 November 2003, 16:39:16 UTC
67be54e This commit was manufactured by cvs2svn to create branch 'OpenSSL-fips- 0_9_7-stable'. 28 November 2003, 14:51:31 UTC
0b352c5 Make a number of changes to the OS/2 build. Submitter's comment below. PR: 732 Submitted by: Ilya Zakharevich <nospam-abuse@ilyaz.org> Submitter's comment: This patch: a) Introduces a new file os2/backwardify.pl. b) Introduces a new mk1mf.pl variable $preamble. As you can see, it may be used also to move some OS-specific code to VC-CE too (the the first chunk of the patch); c) The DESCRIPTION specifier of the .def file is made more informative: now it contains the version number too. On OS/2 it is made conformant to OS/2 conventions; in particular, when one runs the standard command BLDLEVEL this.DLL one can see: Vendor: www.openssl.org/ Revision: 0.9.7c Description: OpenSSL: implementation of Secure Socket Layer; DLL for library crypto. Build for EMX -Zmtd [I did not make Win32 descriptions as informative as this - I'm afraid to break something. Be welcome to fix this.] d) On OS/2 the generated DLL was hardly usable (it had a shared initialized data segment). e) On OS/2 the generated DLLs had names like ssl.dll. However, DLL names on OS/2 are "global data". It is hard to have several DLLs with the same name on the system. Thus this precluded coexistence of OpenSSL with DLLs for other SLL implementations - or other name clashes. I transparently changed the names of the DLLs to open_ssl.dll and cryptssl.dll. f) The file added in (a) is used to create "forwarder" DLLs, so the applications expecting the "old" DLL names may use the new DLLs transparently. (A presence of these DLLs on the system nullifies (e), but makes old applications work. This is a stopgap measure until the old applications are relinked. Systems with no old applications do not need these DLLs, so may enjoy all the benefits of (e).) The new DLLs are placed in os2/ and os2/noname subdirectories. g) The makefiles created with os2/OS2-EMX.cmd did not work (some mysterious meaningless failures). The change to util/pl/OS2-EMX.pl uses the variable introduced in (b) to switch the Makefiles to SHELL=sh syntax. All these backslashes are removed, and the generated Makefiles started to work. h) Running os2/OS2-EMX.cmd now prints out what to do next. 28 November 2003, 14:51:30 UTC
03ddbdd Move another common functionality (reproduced so far with cut'n'paste) to apps.c, and give it the hopefully descriptive name parse_yesno(). 28 November 2003, 14:45:09 UTC
5ebdb39 Let's use text/plain in the example instead of crapy HTML. PR: 777 Submitted by: Michael Shields <mshields@sunblocksystems.com> 28 November 2003, 14:32:31 UTC
d45a098 Forgot to change the declaration of do_subject() to one of parse_name()... 28 November 2003, 14:18:05 UTC
6d5ffb5 Move do_subject() to apps.c and rename it to parse_name(). The rationale behind the move is that it's use by several applications. The rationale behind the name change is that it describes what the function does a bit better. 28 November 2003, 14:07:14 UTC
7ce9e42 Allow multi-valued rdns in subjects. This adds the -multivalue-rdn option to 'openssl req' and 'openssl ca'. PR: 779 Submitted by: Michael Bell <michael.bell@cms.hu-berlin.de> Reviewed by: Richard Levitte (there will be some follow-up changes) 28 November 2003, 14:04:09 UTC
4d8743f Netware-specific changes, PR: 780 Submitted by: Verdon Walker <VWalker@novell.com> Reviewed by: Richard Levitte 28 November 2003, 13:10:58 UTC
4c8b4f9 Change my debugging entries to do fierce BIGNUM debugging. 28 November 2003, 12:54:11 UTC
81ba5f6 Due to recent debugging bursts, openssl should be more or less solid against inconsistent BIGNUMs coming out of any of its API functions. So this change no longer "fixes" the bn_print.c functions, but it makes for cleaner code. This patch was a part of ticket 697. PR: 697 Submitted by: Otto Moerbeek Reviewed by: Geoff Thorpe 25 November 2003, 21:07:59 UTC
6defae0 Fix some handling in bn_word. This also resolves the issues observed in ticket 697 (though uses a different solution than the proposed one). This problem was initially raised by Otto Moerbeek. PR: 697 Submitted by: Nils Larsch Reviewed by: Geoff Thorpe 25 November 2003, 20:39:19 UTC
e1064ad Some changes for bn_gf2m.c: better error checking plus some minor optimizations. Submitted by: Nils Larsch 25 November 2003, 03:41:20 UTC
d7559f1 Free "engine" resource in case of failure to prevent memory leak PR: #778 Submitted by: George Mitchell <george@m5p.com> 24 November 2003, 16:48:52 UTC
9e98981 BN_div() cleanup: replace the use of BN_sub and BN_add with bn_sub_words and bn_add_words to avoid using fake bignums to window other bignums that can lead to corruption. This change allows all bignum tests to pass with BN_DEBUG and BN_DEBUG_RAND debugging and valgrind. NB: This should be tested on a few different architectures and configuration targets, as the bignum code this deals with is quite preprocessor (and assembly) sensitive. Submitted by: Nils Narsch Reviewed by: Geoff Thorpe, Ulf Moeller 22 November 2003, 20:23:41 UTC
ec2179c Fix a small bug in str_copy: if more than one variable is replaced, make sure the current length is used to calculate the new buffer length instead of using the old length (prior to any variable substitution). Submitted by: Nils Larsch 21 November 2003, 21:42:35 UTC
a8287a9 Give CRLDP its standard name. Max req -x509 use V1 if extensions section absent. 20 November 2003, 22:45:06 UTC
ad5f0ed hpux64-parisc2-gcc target added. Once it is verified, ./config should be modified to choose it instead of hpux64-parisc-gcc, which should then be removed. hpux64-parisc-cc is removed already now as redundant [in case you wonder, 64-bit HP-UX ABI *implies* PA-RISC2.0]. 20 November 2003, 19:10:36 UTC
0a4c8ba ./config failed to correctly detect if gcc uses 64-bit ABI on HP-UX. PR: 772 20 November 2003, 18:33:20 UTC
95de3d2 Make sure to initialize AES counters to obtain proper results. Submitted by: Kirill Kochetkov <kochet@ixbt.com> PR: #748 18 November 2003, 18:27:12 UTC
31182ad re-enable the test, keeping the original method for RAND_pseudo_bytes which is used by BN_DEBUG_RAND Submitted by: Nils Larsch 16 November 2003, 19:33:31 UTC
f35232e Catch error condition to prevent NULL pointer dereference. Submitted by: Goetz Babin-Ebell <babin-ebell@trustcenter.de> PR: #766 16 November 2003, 16:30:39 UTC
fda5e38 Provide ASFLAGS in the subdirectories handling assembler code. Submitted by: Tim Rice <tim@multitalents.net> PR: #735, #765 16 November 2003, 14:38:34 UTC
ac9c6e1 The x9.62 tests replace the PRNG with specific numbers, so don't run them if BN_DEBUG_RAND is defined. Also, fix another small bug. Submitted by: Nils Larsch 16 November 2003, 12:24:45 UTC
1a01733 BN_set_bit() etc should use "unsigned int". Keep it as is to avoid an API change, but check for negativ values. Submitted by: Nils Larsch 15 November 2003, 08:37:50 UTC
d2cd461 Less restrictive debugging build. 14 November 2003, 14:06:40 UTC
back to top