https://github.com/openssl/openssl

sort by:
Revision Author Date Message Commit Date
2e80b1f This commit was manufactured by cvs2svn to create tag 'OpenSSL_0_9_7d'. 17 March 2004, 12:01:20 UTC
82d63d3 Fix null-pointer assignment in do_change_cipher_spec() revealed by using the Codenomicon TLS Test Tool (CAN-2004-0079) Fix flaw in SSL/TLS handshaking when using Kerberos ciphersuites (CAN-2004-0112) Ready for 0.9.7d build Submitted by: Steven Henson Reviewed by: Joe Orton Approved by: Mark Cox 17 March 2004, 12:01:19 UTC
8e6a84e Avoid warnings. 16 March 2004, 13:50:18 UTC
95475b1 As in 0.9.8-dev, make sure we use unsigned constants, or some compilers may complain. 15 March 2004, 23:06:59 UTC
86f941c Fix typo in "IRIX 6.x shared build fix-up." 12 March 2004, 21:33:04 UTC
387fd00 IRIX 6.x shared build fix-up. 12 March 2004, 21:24:45 UTC
00b9c1b Incorporate crlNumber functionality from 0.9.8 except it is commented out in openssl.cnf . 08 March 2004, 13:07:07 UTC
051bb5c Incorporate the following changes from 0.9.8-dev: 2003-04-04 17:10 levitte * apps/: apps.c (1.72), apps.h (1.56), ca.c (1.135), x509.c (1.82): Convert save_serial() to work like save_index(), and add a rotate_serial() that works like rotate_index(). 2003-04-03 20:07 levitte * apps/: apps.c (1.69), ca.c (1.130): Conditionalise all debug strings. 2003-04-03 18:33 levitte * apps/apps.c (1.68), apps/apps.h (1.55), apps/ca.c (1.129), apps/ocsp.c (1.31), apps/openssl.cnf (1.24), apps/x509.c (1.80), CHANGES (1.1139): Make it possible to have multiple active certificates with the same subject. 08 March 2004, 02:53:46 UTC
931a031 Cleanup ASN1 OID module when it exits. 05 March 2004, 23:47:39 UTC
be21fe5 Call autoconfig code in pkcs7 utility. 05 March 2004, 23:45:08 UTC
ef3565a Memory leak fix. 05 March 2004, 23:39:12 UTC
01fc051 Various X509 fixes. Disable broken certificate workarounds when X509_V_FLAG_X509_STRICT is set. Check for CRLSign in CRL issuer certificates. Reject CRLs with unhandled (any) critical extensions. 05 March 2004, 17:16:06 UTC
ae43f34 -passin argument to rsautl 04 March 2004, 21:58:13 UTC
0902c55 Typos. Reported by: Jose Castejon-Amenedo <Jose.Castejon-Amenedo@hp.com> 04 March 2004, 21:41:59 UTC
58b6a16 Make our page with pointers to binary distributions visible in the FAQ 04 March 2004, 07:48:00 UTC
641c553 More configuration docs. 02 March 2004, 12:46:30 UTC
e390f5d Documentation of the KISS autoconfig functions. 02 March 2004, 01:00:24 UTC
078a977 More autoconfig docs. 01 March 2004, 19:15:54 UTC
4d6b383 Avoid a memory leak in OCSP_parse_url(). Notified by Paul Siegel <psiegel@corestreet.com> 01 March 2004, 14:58:25 UTC
489885c Fix from head. 01 March 2004, 13:23:41 UTC
850be8f Initial docs for the OpenSSL library configuration via openssl.cnf 01 March 2004, 01:04:58 UTC
a22d40d AES is spelled AES, not ASE. Oops... 27 February 2004, 02:24:54 UTC
ee12103 Make sure the given EVP_PKEY is updated in the PEM_STRING_PKCS8INF case also. PR: 833 26 February 2004, 22:07:47 UTC
4090b56 Document the AES options for 'openssl smime'. PR: 834 26 February 2004, 21:44:43 UTC
33ad6ec Use an OCTET STRING for the encoding of an OCSP nonce value. The old raw format can't be handled by some implementations and updates to RFC2560 will make the OCTET STRING mandatory. 19 February 2004, 18:17:35 UTC
dd10343 Fix handling of -offset and -length in asn1parse tool. If -offset exceeds -length of data available exit with an error. Don't read past end of total data available when -offset supplied. If -length exceeds total available truncate it. 08 February 2004, 13:30:33 UTC
ad55502 Typo in crypto/bn/asm/x86_64.c, bn_div_words(). PR: 821 07 February 2004, 09:46:47 UTC
31edde3 Add flag to avoid continuous memory allocate when calling EVP_MD_CTX_copy_ex(). Without this HMAC is several times slower than < 0.9.7. 01 February 2004, 13:37:56 UTC
381a693 make update 29 January 2004, 10:23:54 UTC
86cb571 Have the declarations match the definitions. 29 January 2004, 09:41:01 UTC
319a2c5 Typo 29 January 2004, 02:55:47 UTC
9d0e895 Make n unsigned, to avoid signed vs. unsigned conflicts. 29 January 2004, 00:05:54 UTC
44ee32e -Wstrict-prototypes is too much for 0.9.7-stable (there are tons of non-strict prototypes, all right? Kind of shadows the few other warnings so I keep missing them :-)). 29 January 2004, 00:03:05 UTC
5922128 0.9.7-stable is in freeze. That means we do bug fixes only, not new functionality. Therefore, I'm backing out most of the "CFB DES sync-up with FIPS branch" commit (I'm keeping the corrections of DES_cfb_encrypt()). 28 January 2004, 23:31:20 UTC
cb37947 Unsigned vs. signed problem removed 28 January 2004, 08:48:15 UTC
4668056 CFB DES sync-up with FIPS branch. 27 January 2004, 21:46:19 UTC
de23af9 Avoid signed vs. unsigned warnings (which are treated like errors on Windows). 27 January 2004, 01:16:09 UTC
3a5a176 S_IFBLK and S_IFCHR may not exist in some places (like Windows), so let's check for those macros, and if they aren't defined, let's assume there aren't Unixly devices on this platform. 26 January 2004, 23:46:03 UTC
a1d37a9 Typo... 22 January 2004, 22:36:48 UTC
6bff796 Replace expired certificate. 21 January 2004, 13:04:58 UTC
db452cd TABLE update for hpux64-paric2-gcc, addenum for HPUX64 gcc build update. 21 January 2004, 10:07:23 UTC
d435752 Proper support for HP-UX64 gcc build. PR: 772 21 January 2004, 09:58:18 UTC
c8b14ca SHA-1 assembler tune-up for Intel P4 21 January 2004, 08:19:36 UTC
8ba5c63 Adding a slash between the directoryt and the file is a problem with VMS. The C RTL can handle it well if the "directory" is a logical name with no colon, therefore ending being 'logname/file'. However, if the given logical names actually has a colon, or if you use a full VMS-syntax directory, you end up with 'logname:/file' or 'dev:[dir1.dir2]/file', and that isn't handled in any good way. So, on VMS, we need to check if the directory string ends with a separator (one of ':', ']' or '>' (< and > can be used instead [ and ])), and handle that by not inserting anything between the directory spec and the file name. In all other cases, it's assumed the directory spec is a logical name, so we need to place a colon between it and the file. Notified by Kevin Greaney <kevin.greaney@hp.com>. 10 January 2004, 18:04:36 UTC
3a0ede0 Cover all DSA setups when running tests PR: #748 Submitted by: Kirill Kochetkov <kochet@ixbt.com> 08 January 2004, 07:46:12 UTC
9cde81c Updates to s_time manual page PR: #570 Submitted by: Martin Witzel <MWITZEL@de.ibm.com> 08 January 2004, 07:39:33 UTC
62bd487 One more change to merge from -dev. 04 January 2004, 19:03:51 UTC
4ef740a Add s_time manual page Submitted by: "Martin Witzel" <MWITZEL@de.ibm.com> PR: #570 04 January 2004, 19:00:17 UTC
7f36acd This commit was manufactured by cvs2svn to create branch 'OpenSSL_0_9_7-stable'. 04 January 2004, 18:59:15 UTC
a32fc68 Add s_time manual page Submitted by: "Martin Witzel" <MWITZEL@de.ibm.com> PR: #570 04 January 2004, 18:59:14 UTC
09d7c42 Update URI Submitted by: Gertjan van Oosten <gertjan@West.NL> PR: #804 04 January 2004, 18:06:51 UTC
c0017a5 Update URI Submitted by: Gertjan van Oosten <gertjan@West.NL> PR: #804 04 January 2004, 18:05:50 UTC
3fbbd1e unintptr_t and <inttypes.h> are not strictly portable with respect to ANSI C 89. Undo change to maintain compatibility. 04 January 2004, 17:54:02 UTC
344e866 unintptr_t and <inttypes.h> are not strictly portable with respect to ANSI C 89. Undo change to maintain compatibility. 04 January 2004, 17:53:21 UTC
0755217 Fix Perl problems on sparc64. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:13:18 UTC
faa9c5c Fix Perl problems on sparc64. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:13:16 UTC
5fdf066 Avoid including cryptlib.h, it's not really needed. Check if IDEA is being built or not. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:10:30 UTC
d2c786d Avoid including cryptlib.h, it's not really needed. Check if IDEA is being built or not. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:09:59 UTC
f28e8bd Only use environment variables if uid and gid are the same as euid and egid. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:07:20 UTC
3e786f4 Only use environment variables if uid and gid are the same as euid and egid. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:07:18 UTC
de02ec2 Check if a random "file" is really a device file, and treat it specially if it is. Add a few OpenBSD-specific cases. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:02:22 UTC
4b66e71 Check if a random "file" is really a device file, and treat it specially if it is. Add a few OpenBSD-specific cases. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 16:01:52 UTC
90dd4d3 Correct documentation typos. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 15:05:26 UTC
1123410 Correct documentation typos. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 15:04:54 UTC
7cf8032 OpenBSD-internal changes. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 15:02:56 UTC
2d6452c OpenBSD-internal changes. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 15:02:54 UTC
cc056d6 Use sh explicitely to run point.sh This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 15:00:24 UTC
79b42e7 Use sh explicitely to run point.sh This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:59:07 UTC
f0c5db9 Include strings.h so strcasecmp() and strncasecmp() get properly declared. 27 December 2003, 14:54:48 UTC
394178c Use BUF_strlcpy() instead of strcpy(). Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:40:57 UTC
d420ac2 Use BUF_strlcpy() instead of strcpy(). Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:40:17 UTC
61590d8 Add a newline at the end of the last line. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:26:15 UTC
b79aa47 Add a newline at the end of the last line. This is part of a large change submitted by Markus Friedl <markus@openbsd.org> 27 December 2003, 14:26:14 UTC
ec2a595 Change 'exp' to something else, as 'exp' is predefined by GNU C. This was already done in HEAD, but not in this branch (I wonder why...). 27 December 2003, 14:24:20 UTC
8f5c833 Typos. 20 December 2003, 22:49:05 UTC
e88c577 Typos. 20 December 2003, 22:48:21 UTC
ffe966b To figure out if we're going outside the buffer, use the size of the buffer, not the size of the integer used to index in said buffer. PR: 794 Notified by: Rhett Garber <rhett_garber@hp.com> 11 December 2003, 18:01:06 UTC
a2b0de9 To figure out if we're going outside the buffer, use the size of the buffer, not the size of the integer used to index in said buffer. PR: 794 Notified by: Rhett Garber <rhett_garber@hp.com> 11 December 2003, 18:01:03 UTC
bb3de14 Document that you need to include x509.h (to get [i2d|d2i]_RSA_PUBKEY()). Correct the typo PUKEY... 10 December 2003, 14:31:57 UTC
4775944 Document that you need to include x509.h (to get [i2d|d2i]_RSA_PUBKEY()). Correct the typo PUKEY... 10 December 2003, 14:31:55 UTC
95ec1a7 Document that you need to include x509.h (to get [i2d|d2i]_DSA_PUBKEY()). Correct the typo PUKEY... 10 December 2003, 13:57:52 UTC
2abd5b7 Document that you need to include x509.h (to get [i2d|d2i]_DSA_PUBKEY()). Correct the typo PUKEY... 10 December 2003, 13:57:51 UTC
380e145 Add "dif" variable to clean up the loop implementations. Submitted by: Nils Larsch 06 December 2003, 11:55:46 UTC
a9f2330 Skip a curve with generator of non-prime order. Submitted by: Nils Larsch 06 December 2003, 11:41:22 UTC
ce38bb1 Avoid segfault if ret==0. Submitted by: Nils Larsch 06 December 2003, 11:39:37 UTC
919f8bc Restructure make targets to allow parallel make. Submitted by: Witold Filipczyk <witekfl@poczta.gazeta.pl> PR: #513 03 December 2003, 16:29:41 UTC
325829a Restructure make targets to allow parallel make. Submitted by: Witold Filipczyk <witekfl@poczta.gazeta.pl> PR: #513 03 December 2003, 16:29:16 UTC
2bfd2c7 Incremental cleanups to bn_lib.c. - Add missing bn_check_top() calls and relocate some others - Use BN_is_zero() where appropriate - Remove assert()s that bn_check_top() is already covering - Simplify the code in places (esp. bn_expand2()) - Only keep ambiguous zero handling if BN_STRICT isn't defined - Remove some white-space and make some other aesthetic tweaks 02 December 2003, 20:01:30 UTC
82b2f57 Use the BN_is_odd() macro in place of code that (inconsistently) does much the same thing. Also, I have some stuff on the back-burner related to some BN_CTX notes from Peter Gutmann about his cryptlib hacks to the bignum code. The BN_CTX comments are there to remind me of some relevant points in the code. 02 December 2003, 03:28:24 UTC
2ae1ea3 BN_FLG_FREE is of extremely dubious usefulness, and is only referred to once in the source (where it is set for the benefit of no other code whatsoever). I've deprecated the declaration in the header and likewise made the use of the flag conditional in bn_lib.c. Note, this change also NULLs the 'd' pointer in a BIGNUM when it is reset but not deallocated. 02 December 2003, 03:16:56 UTC
34066d7 Declare the static BIGNUM "BN_value_one()" more carefully. 01 December 2003, 23:13:17 UTC
b74cc07 Add missing bn_check_top()s to bn_kron.c, remove some miscellaneous white-space, and include extra headers to satisfy debugging builds. 01 December 2003, 23:11:45 UTC
e7e5fe4 Add missing bn_check_top()s to bn_gf2m.c and remove some miscellaneous white-space. 01 December 2003, 23:10:21 UTC
998ae04 The bn_set_max() macro is only "used" by the bn_set_[low|high]() macros which, in turn, are used nowhere at all. This is a good thing because bn_set_max() would currently generate code that wouldn't compile (BIGNUM has no 'max' element). The only apparent use for bn_set_[low|high] would be for implementing windowing algorithms, and all of openssl's seem to use bn_***_words() helpers instead (including the BN_div() that Nils fixed recently, which had been using independently-coded versions of what these unused macros are intended for). I'm therefore consigning these macros to cvs oblivion in the name of readability. 01 December 2003, 22:11:08 UTC
e65c2b9 bn_fix_top() exists for compatibility's sake and is mapped to bn_correct_top() or bn_check_top() depending on debug settings. For internal source, all bn_fix_top()s should be converted one way or the other depending on whether the use of bn_correct_top() is justified. For BN_div_recp(), these cases should not require correction if the other bignum functions are doing their jobs properly, so convert to bn_check_top(). 01 December 2003, 21:59:40 UTC
b0ea8b1 It was pointed out to me that if the requested size is 0, we shouldn't ty to allocate anything at all. This will allow eNULL to still work. PR: 751 Notified by: Lutz Jaenicke 01 December 2003, 13:25:39 UTC
2fe9ab8 It was pointed out to me that if the requested size is 0, we shouldn't ty to allocate anything at all. This will allow eNULL to still work. PR: 751 Notified by: Lutz Jaenicke 01 December 2003, 13:25:37 UTC
bb569f9 Check that OPENSSL_malloc() really returned some memory. PR: 751 Notified by: meder@mcs.anl.gov Reviewed by: Lutz Jaenicke, Richard Levitte 01 December 2003, 12:11:57 UTC
1145e03 Check that OPENSSL_malloc() really returned some memory. PR: 751 Notified by: meder@mcs.anl.gov Reviewed by: Lutz Jaenicke, Richard Levitte 01 December 2003, 12:11:55 UTC
31670c9 CRYPTO_malloc(), CRYPTO_realloc() and variants of them should return NULL if the give size is 0. This is a thought that came up in PR 751. 01 December 2003, 12:06:19 UTC
back to top