6cae350 | Lutz Jänicke | 30 July 2002, 10:39:36 UTC | Release 0.9.6e Submitted by: Reviewed by: PR: | 30 July 2002, 10:39:36 UTC |
cfebe39 | Lutz Jänicke | 30 July 2002, 10:26:28 UTC | OpenSSL Security Advisory [30 July 2002] Changes marked "(CHATS)" were sponsored by the Defense Advanced Research Projects Agency (DARPA) and Air Force Research Laboratory, Air Force Materiel Command, USAF, under agreement number F30602-01-2-0537. Submitted by: Reviewed by: PR: | 30 July 2002, 10:26:28 UTC |
eb80f91 | Lutz Jänicke | 30 July 2002, 09:41:07 UTC | "make update" Submitted by: Reviewed by: PR: | 30 July 2002, 09:41:07 UTC |
7a0c653 | Richard Levitte | 30 July 2002, 09:26:50 UTC | Merge in the latest changes from 0.9.6-stable. | 30 July 2002, 09:26:50 UTC |
b5b000d | Richard Levitte | 23 July 2002, 14:49:57 UTC | Merge in recent changes from OpenSSL_0_9_6-stable. | 23 July 2002, 14:49:57 UTC |
6c2650a | cvs2svn | 19 July 2002, 11:05:51 UTC | This commit was manufactured by cvs2svn to create branch 'OpenSSL-engine- 0_9_6-stable'. | 19 July 2002, 11:05:51 UTC |
02b7ec8 | Lutz Jänicke | 19 July 2002, 11:05:50 UTC | Manual page for SSL_do_handshake(). Submitted by: Martin Sjögren <martin@strakt.com> PR: 137 | 19 July 2002, 11:05:50 UTC |
e2cdf9c | Geoff Thorpe | 18 July 2002, 22:19:01 UTC | This documentation change was being written at the same time as Richard's changes. So I'm committing this version to overwrite his changes for now, and he can always take his turn to overwrite my words if he wants :-) PR: 86 | 18 July 2002, 22:19:01 UTC |
0af9a89 | Geoff Thorpe | 18 July 2002, 20:59:22 UTC | This documentation change was being written at the same time as Richard's changes. So I'm committing this version to overwrite his changes for now, and he can always take his turn to overwrite my words if he wants :-) PR: 86 | 18 July 2002, 20:59:22 UTC |
290416d | Richard Levitte | 18 July 2002, 19:11:24 UTC | Explain why RSA_check_key() doesn't work with hard keys. PR: 86 | 18 July 2002, 19:11:24 UTC |
db802c6 | Richard Levitte | 18 July 2002, 19:10:57 UTC | Explain why RSA_check_key() doesn't work with hard keys. PR: 86 | 18 July 2002, 19:10:57 UTC |
503f3b1 | Richard Levitte | 18 July 2002, 18:54:46 UTC | Add history for documented new functions. PR: 59 | 18 July 2002, 18:54:46 UTC |
402bcde | Richard Levitte | 18 July 2002, 17:59:21 UTC | Allow subjects with more than 255 characters to be properly printed. PR: 147 | 18 July 2002, 17:59:21 UTC |
ff192dc | Richard Levitte | 18 July 2002, 17:34:02 UTC | Merge in the really latest changes from 0.9.6-stable. | 18 July 2002, 17:34:02 UTC |
8b98de6 | Richard Levitte | 18 July 2002, 14:19:26 UTC | Merge in the latest chanegs from 0.9.6-stable. | 18 July 2002, 14:19:26 UTC |
ec9ea6a | Richard Levitte | 18 July 2002, 12:37:59 UTC | Further enhance assembler support on Cygwin and DJGPP. Make pod2mantest useable on DOS-based systems. Part of PR 75, the rest is still under investigation. | 18 July 2002, 12:37:59 UTC |
7e66176 | Bodo Möller | 18 July 2002, 11:23:50 UTC | Fix bug introduced with revision 1.95 when this filed was modified to use the new X509_CRL_set_issuer_name() function: The CRL issuer should be X509_get_subject_name(x509), not X509_get_issuer_name(x509). Submitted by: Juergen Lesny <lesnyj@informatik.tu-muenchen.de> typo | 18 July 2002, 11:23:50 UTC |
ca6dde5 | Richard Levitte | 18 July 2002, 10:39:20 UTC | Reverse the change with the following log, it needs further investigation: Make S/MIME output conform with the mail and MIME standards. PR: 151 | 18 July 2002, 10:39:20 UTC |
8e6cbcd | Richard Levitte | 18 July 2002, 08:47:33 UTC | Make S/MIME output conform with the mail and MIME standards. PR: 151 | 18 July 2002, 08:47:33 UTC |
9335a5f | Richard Levitte | 18 July 2002, 07:47:30 UTC | Unixware doesn't have strings.h, so we need to declare strcasecmp() differently. Unixware 2 needs to link with libresolv. PR: 148 | 18 July 2002, 07:47:30 UTC |
32bf74e | Richard Levitte | 18 July 2002, 06:34:34 UTC | OPENSSL_SYS_WIN32 is important so util/mkdef.pl can detect it | 18 July 2002, 06:34:34 UTC |
6643f27 | Richard Levitte | 17 July 2002, 13:33:02 UTC | Make mkdir failsafe in case the directories are already present | 17 July 2002, 13:33:02 UTC |
cd4c36a | Richard Levitte | 17 July 2002, 13:27:43 UTC | Add support for shared libraries with OS/2. PR: 124 | 17 July 2002, 13:27:43 UTC |
311e209 | Richard Levitte | 17 July 2002, 11:29:15 UTC | Add a few FAQ entries for the various ways building OpenSSL on MacOS X can fail, and point at the text in the PROBLEMS file | 17 July 2002, 11:29:15 UTC |
951d8e0 | cvs2svn | 17 July 2002, 11:16:24 UTC | This commit was manufactured by cvs2svn to create branch 'OpenSSL-engine- 0_9_6-stable'. | 17 July 2002, 11:16:24 UTC |
fe5eb67 | Richard Levitte | 17 July 2002, 11:16:22 UTC | If OpenSSL is built with shared library support on MacOS X, everything works fine. Note: this is only true for 0.9.7 and on | 17 July 2002, 11:16:22 UTC |
f5db08e | Richard Levitte | 17 July 2002, 11:09:44 UTC | On MacOS X, the shared library editor uses DYLD_LIBRARY_PATH | 17 July 2002, 11:09:44 UTC |
8cfdb96 | Richard Levitte | 17 July 2002, 08:20:27 UTC | On MacOS X, you're not allowed to have common objects in shared libraries | 17 July 2002, 08:20:27 UTC |
ebccb42 | Richard Levitte | 17 July 2002, 07:48:39 UTC | Add the usually recommended solution to the linking problem entry for MacOS X | 17 July 2002, 07:48:39 UTC |
7dbed65 | Richard Levitte | 16 July 2002, 11:07:42 UTC | We had some experimental options in the Darwin entries. They are no longer needed | 16 July 2002, 11:07:42 UTC |
6789b41 | Richard Levitte | 16 July 2002, 10:46:00 UTC | The default C compiler on MacOS X doesn't like empty object files | 16 July 2002, 10:46:00 UTC |
0487cb2 | Richard Levitte | 16 July 2002, 10:20:06 UTC | Actually, the "bug" is really documented in the man-page for ld, so it's really a misfeature according to the jargon file (4.0.0) definition: ":misfeature: /mis-fee'chr/ or /mis'fee`chr/ /n./ A feature that eventually causes lossage, possibly because it is not adequate for a new situation that has evolved. Since it results from a deliberate and properly implemented feature, a misfeature is not a bug." | 16 July 2002, 10:20:06 UTC |
80e1495 | Richard Levitte | 16 July 2002, 10:04:40 UTC | There are problems on certain platforms, and possible answers on how to (temporarly) solve them. | 16 July 2002, 10:04:40 UTC |
041843e | Richard Levitte | 16 July 2002, 09:19:37 UTC | For those wanting to build for several platforms with the same source directory, making a separate directory tree with lots of symbolic links seems to be the solution. Unfortunately, Configure doesn't take appropriate steps to support this solution (as in removing a file that's going to be rewritten). This change corrects that situation. Now I just have to find all other places where there's lack of support for this. | 16 July 2002, 09:19:37 UTC |
c2aa4f2 | Richard Levitte | 16 July 2002, 08:53:32 UTC | For those wanting to build for several platforms with the same source directory, making a separate directory tree with lots of symbolic links seems to be the solution. Unfortunatelt, Configure doesn't take appropriate steps to support this solution (as in removing a file that's going to be rewritten). This change corrects that situation. Now I just have to find all other places where there's lack of support for this. | 16 July 2002, 08:53:32 UTC |
b23f50e | Richard Levitte | 16 July 2002, 08:02:31 UTC | Some older code (never committed) wasn't converted to the new format. Corrected. | 16 July 2002, 08:02:31 UTC |
7fe03ed | Richard Levitte | 16 July 2002, 07:06:48 UTC | Let's not forget the second -Wtraditional | 16 July 2002, 07:06:48 UTC |
9466fa6 | Richard Levitte | 16 July 2002, 06:53:45 UTC | Using -Wtraditional took it a little far. After all, we expect ANSI C, so we don't need to care about traditional compilers | 16 July 2002, 06:53:45 UTC |
cead7f3 | Richard Levitte | 16 July 2002, 06:52:03 UTC | Set up the engine before doing anything random-related, since engine randomness is only used for seeding and doing it in the wrong order will mean seeding is done before the engine randomness is hooked in. Notified by Frederic DONNAT <frederic.donnat@zencod.com> | 16 July 2002, 06:52:03 UTC |
cbecb3a | Richard Levitte | 15 July 2002, 15:35:40 UTC | There's an ongoing project to bring some kind of path selection mechanism to the ENGINE framework. This means there there are going to be new functionality for the DSO part, and ultimately some way of merging two file specifications together. This commit places the merging code into the repository. It's currently not used anywhere, and hasn't been tested at all. It may be full of errors, including syntactical ones. Those will be fixed as promptly as possible. | 15 July 2002, 15:35:40 UTC |
5dbd3ef | Bodo Möller | 14 July 2002, 16:54:31 UTC | Replace 'ecdsaparam' commandline utility by 'ecparam' (the same keys can be used for ECC schemes other than ECDSA) and add some new options. Similarly, use string "EC PARAMETERS" instead of "ECDSA PARAMETERS" in 'PEM' format. Fix ec_asn1.c (take into account the desired conversion form). 'make update'. Submitted by: Nils Larsch | 14 July 2002, 16:54:31 UTC |
876811e | Lutz Jänicke | 12 July 2002, 15:26:37 UTC | Rewording: some algorithms are also patented in Europe, so choose more defensive phrases... | 12 July 2002, 15:26:37 UTC |
b57c98d | Richard Levitte | 11 July 2002, 09:12:29 UTC | In UI_UTIL_read_pw(), we should look at the size parameter, not at BUFSIZ. Submitted by Götz Babin-Ebell <babinebell@trustcenter.de> | 11 July 2002, 09:12:29 UTC |
c4da6dd | Lutz Jänicke | 10 July 2002, 19:48:51 UTC | Discussion about Redhat's specialties for the FAQ. Submitted by: John.Airey@rnib.org.uk Reviewed by: PR: 128 | 10 July 2002, 19:48:51 UTC |
2edcb4a | Lutz Jänicke | 10 July 2002, 19:35:54 UTC | Typos in links between manual pages Submitted by: Richard.Koenning@fujitsu-siemens.com Reviewed by: PR: 129 | 10 July 2002, 19:35:54 UTC |
0c4d9b2 | Lutz Jänicke | 10 July 2002, 17:52:03 UTC | Sun's official statement with respect to /dev/random support. Submitted by: Garrett Anderson garrett@dirsec.com Reviewed by: PR: 120 | 10 July 2002, 17:52:03 UTC |
5012158 | Lutz Jänicke | 10 July 2002, 17:34:54 UTC | Minor typos Submitted by: jufi@nerdnet.de Reviewed by: PR: 138 | 10 July 2002, 17:34:54 UTC |
5c9396e | Bodo Möller | 10 July 2002, 08:39:05 UTC | remove obsolete comment | 10 July 2002, 08:39:05 UTC |
7b63c0f | Lutz Jänicke | 10 July 2002, 07:01:54 UTC | Reorder inclusion of header files: des_old.h redefines crypt: #define crypt(b,s)\ DES_crypt((b),(s)) This scheme leads to failure, if header files with the OS's true definition of crypt() are processed _after_ des_old.h was processed. This is e.g. the case on HP-UX with unistd.h. As evp.h now again includes des.h (which includes des_old.h), this problem only came up after this modification. Solution: move header files (indirectly) including e_os.h before the header files (indirectly) including evp.h. Submitted by: Reviewed by: PR: | 10 July 2002, 07:01:54 UTC |
063a890 | Lutz Jänicke | 10 July 2002, 06:41:55 UTC | Ciphers with NULL encryption were not properly handled because they were not covered by the strength bit mask. Submitted by: Reviewed by: PR: 130 | 10 July 2002, 06:41:55 UTC |
cd75620 | Bodo Möller | 09 July 2002, 10:51:25 UTC | fix synopsis Submitted by: Nils Larsch | 09 July 2002, 10:51:25 UTC |
d1d0be3 | Bodo Möller | 09 July 2002, 08:49:09 UTC | emtpy fragments are not necessary for SSL_eNULL (but noone uses it anyway) fix t1_enc.c: use OPENSSL_NO_RC4, not NO_RC4 | 09 July 2002, 08:49:09 UTC |
2c8ad4f | Geoff Thorpe | 08 July 2002, 15:16:10 UTC | oops, there were other cases of "ENGINE_ID" to change too. | 08 July 2002, 15:16:10 UTC |
121dea3 | Geoff Thorpe | 08 July 2002, 14:57:09 UTC | Correct an error in the README.ENGINE file. Submitted by: Jan Tschirschwitz <Jan.Tschirschwitz@cluster-labs.de> | 08 July 2002, 14:57:09 UTC |
ea4f109 | Bodo Möller | 04 July 2002, 08:51:09 UTC | AES cipher suites are now official (RFC3268) | 04 July 2002, 08:51:09 UTC |
7650934 | Lutz Jänicke | 30 June 2002, 19:40:18 UTC | README and INSTALL should contain information about the request tracker (noted by Jonathan Louie <jlouie@recourse.com>). | 30 June 2002, 19:40:18 UTC |
40c5cae | Richard Levitte | 29 June 2002, 22:04:09 UTC | Do not define crypt() on OpenBSD. Notified by Bob Beck of OpenBSD. | 29 June 2002, 22:04:09 UTC |
cce9396 | Richard Levitte | 27 June 2002, 17:19:55 UTC | opensslconf.h doesn't define what we want, e_os2.h does. PR 123 | 27 June 2002, 17:19:55 UTC |
47f3eaf | Richard Levitte | 27 June 2002, 17:06:28 UTC | Try to avoid double declaration of ERR_load_PEM_strings(). PR 71 | 27 June 2002, 17:06:28 UTC |
53fc93d | Richard Levitte | 27 June 2002, 16:56:30 UTC | A few changes to BC-32.pl didn't get properly applied. This completes PR 123 | 27 June 2002, 16:56:30 UTC |
17085b0 | Richard Levitte | 27 June 2002, 16:39:25 UTC | Pass CFLAG to dependency makers, so non-standard system include paths are handled properly. Part of PR 75 | 27 June 2002, 16:39:25 UTC |
4367eb8 | Richard Levitte | 27 June 2002, 16:32:04 UTC | DJGPP has some needed header files that other MSDOS/Windows compilers don't have. Part of PR 75 | 27 June 2002, 16:32:04 UTC |
0a8a997 | Richard Levitte | 27 June 2002, 16:29:46 UTC | Update the information on Cygwin. Part of PR 75 | 27 June 2002, 16:29:46 UTC |
a9d96b9 | Richard Levitte | 27 June 2002, 16:28:04 UTC | Forgot to change the second $ENV{DJDIR} to /dev/env/DJDIR. Part of PR 75 | 27 June 2002, 16:28:04 UTC |
ae689b6 | Richard Levitte | 27 June 2002, 15:10:57 UTC | The new stuff is for Borland Bulider 5, so document it appropriately | 27 June 2002, 15:10:57 UTC |
60d160d | Richard Levitte | 27 June 2002, 15:07:27 UTC | Document the new way of building with Borland Builder. This concludes the changes from PR 123 | 27 June 2002, 15:07:27 UTC |
0508664 | Richard Levitte | 27 June 2002, 14:57:54 UTC | Use underscores instead of dashes in temporary file names. This is due to weird Borland compilers. Part of PR 123 | 27 June 2002, 14:57:54 UTC |
fb96d9d | Richard Levitte | 27 June 2002, 14:55:52 UTC | When compiling for Windows, make sure we have the windows definitions declared. Part of PR 123 | 27 June 2002, 14:55:52 UTC |
e1a32c1 | Richard Levitte | 27 June 2002, 14:54:34 UTC | Use 32-bit sections instead of the default, 16-bit ones. Part of PR 123 | 27 June 2002, 14:54:34 UTC |
5585f4e | Richard Levitte | 27 June 2002, 10:26:40 UTC | have 'openssl pkcs7' exit with code 1 on error instead of 0. PR: 119 | 27 June 2002, 10:26:40 UTC |
e8b4d05 | Richard Levitte | 27 June 2002, 10:19:17 UTC | gcc requires -m64 to link 64-bit shared libraries on Solaris. PR: 117 | 27 June 2002, 10:19:17 UTC |
0df748e | Richard Levitte | 27 June 2002, 09:54:07 UTC | Use bg instead of bag as argument to macros, to avoid clashes with structure field names. PR: 112 | 27 June 2002, 09:54:07 UTC |
1fbcfbe | Richard Levitte | 27 June 2002, 09:18:45 UTC | There is no RSAREF any more, so do not ty to install it. PR: 106 | 27 June 2002, 09:18:45 UTC |
34ab17b | Richard Levitte | 27 June 2002, 09:13:44 UTC | The general debug target must specify that it doesn't use assembler routines. PR: 105 | 27 June 2002, 09:13:44 UTC |
b99e18b | Richard Levitte | 27 June 2002, 05:38:00 UTC | Recent changes from 0.9.6-stable. | 27 June 2002, 05:38:00 UTC |
4942ef6 | Richard Levitte | 27 June 2002, 05:03:00 UTC | A number of includes were removed from evp.h some time ago. The reason was that they weren't really needed any more for EVP itself. However, it seems like soma applications (I know about OpenSSH, but there may be more) used evp.h as the 'load all' header file, which makes sense since we try our best to promote the use of EVP instead of the lower level crypto algorithms. Therefore, I put the inclusions back so the application authors don't get too shocked by all the errors they would otherwise get. Thanks to Theo de Raadt for making us aware of this. | 27 June 2002, 05:03:00 UTC |
9ae08a9 | Bodo Möller | 26 June 2002, 14:28:41 UTC | Make sure buffers are large enough even for weird parameters Submitted by: Nils Larsch | 26 June 2002, 14:28:41 UTC |
76f8a1f | Bodo Möller | 26 June 2002, 14:21:16 UTC | update an entry on EVP changes | 26 June 2002, 14:21:16 UTC |
9d35882 | Richard Levitte | 25 June 2002, 11:40:49 UTC | For some reason, we need to return the full path to perl | 25 June 2002, 11:40:49 UTC |
49b10f7 | Richard Levitte | 25 June 2002, 11:20:49 UTC | Recent changes from 0.9.6-stable. | 25 June 2002, 11:20:49 UTC |
a6c6874 | Geoff Thorpe | 21 June 2002, 02:38:08 UTC | Make sure any ENGINE control commands make local copies of string pointers passed to them whenever necessary. Otherwise it is possible the caller may have overwritten (or deallocated) the original string data when a later ENGINE operation tries to use the stored values. Submitted by: Götz Babin-Ebell <babinebell@trustcenter.de> Reviewed by: Geoff Thorpe PR: 98 | 21 June 2002, 02:38:08 UTC |
a947f2d | Lutz Jänicke | 20 June 2002, 20:49:27 UTC | <sys/select.h> is included for AIX, when USE_SOCKETS is defined. Submitted by: Bernhard Simon <bs@bsws.zid.tuwien.ac.at> Reviewed by: PR: | 20 June 2002, 20:49:27 UTC |
94e19e7 | Lutz Jänicke | 20 June 2002, 19:57:23 UTC | HP-UX: shared libraries MUST be +x and SHOULD be -w. | 20 June 2002, 19:57:23 UTC |
04677ce | Lutz Jänicke | 20 June 2002, 19:49:39 UTC | Fix path to find util/pod2man.pl from the execution directory. Make sure to use the predefined PERL. Submitted by: Bernhard Simon <bs@bsws.zid.tuwien.ac.at> Reviewed by: PR: | 20 June 2002, 19:49:39 UTC |
407adb5 | Geoff Thorpe | 20 June 2002, 18:22:51 UTC | This apparently fixes compilation on OSX that was failing in 0.9.7 betas. Submitted by: Pieter Bowman <bowman@math.utah.edu> | 20 June 2002, 18:22:51 UTC |
da0616c | Lutz Jänicke | 20 June 2002, 17:32:04 UTC | AIX (V3) requires <sys/select.h> (included via e_os.h) for fd_set. Submitted by: Bernhard Simon <bs@bsws.zid.tuwien.ac.at> Reviewed by: PR: | 20 June 2002, 17:32:04 UTC |
1c02ca5 | Lutz Jänicke | 18 June 2002, 17:44:56 UTC | load_netscape_key is static. | 18 June 2002, 17:44:56 UTC |
3f2f3d4 | Bodo Möller | 18 June 2002, 09:36:02 UTC | always include <string.h> (we do this in various other header files, so it can't be bad) | 18 June 2002, 09:36:02 UTC |
c4c2c61 | Bodo Möller | 18 June 2002, 09:35:43 UTC | always include <string.h> (we do this in various other header files, so it can't be bad) PR: 102 | 18 June 2002, 09:35:43 UTC |
5f3d6f7 | Bodo Möller | 18 June 2002, 08:38:59 UTC | Implement handling of EC parameter seeds (new functions EC_GROUP_set_seed(), EC_GROUP_get0_seed(), EC_GROUP_get_seed_len()). New functions ECPKParameters_print(), ECPKParameters_print_fp(). Submitted by: Nils Larsch | 18 June 2002, 08:38:59 UTC |
ece0bdf | Bodo Möller | 17 June 2002, 13:59:12 UTC | typo | 17 June 2002, 13:59:12 UTC |
97e4b18 | Lutz Jänicke | 16 June 2002, 18:20:28 UTC | beta2, not beta1 | 16 June 2002, 18:20:28 UTC |
a2b38b3 | Lutz Jänicke | 16 June 2002, 11:33:59 UTC | Roll out OpenSSL-0.9.7-beta2 | 16 June 2002, 11:33:59 UTC |
d51092f | Lutz Jänicke | 16 June 2002, 10:31:17 UTC | Use -dumpversion to obtain gcc's version. Submitted by: ross.alexander@uk.neceur.com, allenh@eecs.berkeley.edu Reviewed by: PR: 96 | 16 June 2002, 10:31:17 UTC |
bdb6171 | Lutz Jänicke | 16 June 2002, 10:18:25 UTC | OpenSSL_add_all_algorithms has been replaced by configuration dependent functions and is redirected by macros. Switch it off now, possible removal later. | 16 June 2002, 10:18:25 UTC |
1d4547a | Lutz Jänicke | 14 June 2002, 20:15:18 UTC | Initial support for hpux64-parisc-gcc Submitted by: ross.alexander@uk.neceur.com Reviewed by: PR: 96 | 14 June 2002, 20:15:18 UTC |
65ee74f | Lutz Jänicke | 14 June 2002, 19:01:52 UTC | Some more prototype fixes. Use DECLARE macros in asn1* instead of direct declaration. Submitted by: Goetz Babin-Ebell <babinebell@trustcenter.de> Reviewed by: PR: 89 | 14 June 2002, 19:01:52 UTC |
c21506b | Bodo Möller | 14 June 2002, 12:21:11 UTC | New option SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for disabling CBC vulnerability workaround (included in SSL_OP_ALL). PR: #90 | 14 June 2002, 12:21:11 UTC |
00f1628 | Richard Levitte | 13 June 2002, 23:35:24 UTC | make update (adapt libeay.num to the 0.9.7-stable branch) | 13 June 2002, 23:35:24 UTC |
c69d103 | Richard Levitte | 13 June 2002, 21:44:23 UTC | Tentatively add support for UWIN, a Unix-like environment on top of Windows. PR: 62 | 13 June 2002, 21:44:23 UTC |