summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2004-03-12IRIX 6.x shared build fix-up.Andy Polyakov
For reference. Note that both cc and gcc support -Wl flag, but we can't use -Wl,-[not]all with both drivers, because cc rearranges options passed through -Wl. We can't use -Wl,-all,libcrypto.a,-notall with cc either, because it refuses to start with "no input" error.
2004-03-10staticGeoff Thorpe
2004-03-09Minimise the amount of code dependent on BN_DEBUG_RAND. In particular,Geoff Thorpe
redefine bn_clear_top2max() to be a NOP in the non-debugging case, and remove some unnecessary usages in bn_nist.c. Submitted by: Nils Larsch Reviewed by: Geoff Thorpe, Ulf Möller
2004-03-09More changes coming out of the bignum auditing. BN_CTX_get() should ideallyGeoff Thorpe
return a "zero" bignum as BN_new() does - so reset 'top'. During BN_CTX_end(), released bignums should be consistent so enforce this in debug builds. Also, reduce the number of wasted BN_clear_free() calls from BN_CTX_end() (typically by 75% or so). Submitted by: Nils Larsch Reviewed by: Geoff Thorpe, Ulf Möller
2004-03-08Fix policy constraints syntax.Dr. Stephen Henson
2004-03-08Support for inhibitAnyPolicy extension.Dr. Stephen Henson
2004-03-06typoUlf Möller
2004-03-05Cleanup ASN1 OID module when it exits.Dr. Stephen Henson
2004-03-05Call autoconfig code in pkcs7 utility.Dr. Stephen Henson
2004-03-05Memory leak fix.Dr. Stephen Henson
2004-03-05Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson
when X509_V_FLAG_X509_STRICT is set. Check for CRLSign in CRL issuer certificates. Reject CRLs with unhandled (any) critical extensions.
2004-03-04Typos.Dr. Stephen Henson
Reported by: Jose Castejon-Amenedo <Jose.Castejon-Amenedo@hp.com>
2004-03-04Make our page with pointers to binary distributions visible in the FAQRichard Levitte
2004-03-02Indent some of the code examples.Dr. Stephen Henson
2004-03-02Config docs.Dr. Stephen Henson
2004-03-02Documentation of the KISS autoconfig functions.Dr. Stephen Henson
2004-03-01More autoconfig docs.Dr. Stephen Henson
2004-03-01Avoid a memory leak in OCSP_parse_url().Richard Levitte
Notified by Paul Siegel <psiegel@corestreet.com>
2004-03-01Initial docs for the OpenSSL library configuration via openssl.cnfDr. Stephen Henson
2004-02-27Add ECDSA documentation.Geoff Thorpe
Submitted by: Nils Larsch
2004-02-27AES is spelled AES, not ASE. Oops...Richard Levitte
2004-02-26Make sure the given EVP_PKEY is updated in the PEM_STRING_PKCS8INF case also.Richard Levitte
PR: 833
2004-02-26Document the AES options for 'openssl smime'.Richard Levitte
PR: 834
2004-02-22A cleanup of the ecs_ossl.c code and some (doxygen) comments for ecdsa.hGeoff Thorpe
Submitted by: Nils Larsch Reviewed by: Geoff Thorpe
2004-02-22When adding positive elements, we can use BN_uadd() instead of BN_add().Geoff Thorpe
Submitted by: Nils Larsch Reviewed by: Geoff Thorpe
2004-02-19Use an OCTET STRING for the encoding of an OCSP nonce value.Dr. Stephen Henson
The old raw format can't be handled by some implementations and updates to RFC2560 will make this mandatory.
2004-02-10minor signed/unsigned warning fixesGeoff Thorpe
2004-02-08Fix handling of -offset and -length in asn1parse tool.Dr. Stephen Henson
If -offset exceeds -length of data available exit with an error. Don't read past end of total data available when -offset supplied. If -length exceeds total available truncate it.
2004-02-07Typo in crypto/bn/asm/x86_64.c, bn_div_words().Andy Polyakov
PR: 821
2004-02-01Add flag to avoid continuousDr. Stephen Henson
memory allocate when calling EVP_MD_CTX_copy_ex(). Without this HMAC is several times slower than < 0.9.7.
2004-01-30Typo in PA-RISC 2 rules in crypto/bn/Makefile.sslAndy Polyakov
2004-01-29HP/UX PA-RISC 2 targets update.Andy Polyakov
2004-01-29Remove typosRichard Levitte
2004-01-29-Wtraditional was a little too much...Richard Levitte
2004-01-29TypoRichard Levitte
2004-01-29In the development branch, it feels quite all right to warn on a lotRichard Levitte
more stuff.
2004-01-28make updateRichard Levitte
2004-01-28Add the missing parts for DES CFB1 and CFB8.Richard Levitte
Add the corresponding AES parts while I'm at it. make update
2004-01-28make updateRichard Levitte
2004-01-28Unsigned vs. signed problem removedRichard Levitte
2004-01-27#undef _POSIX_C_SOURCE in ui_openssl.c ruined IRIX builds. Comment on whyAndy Polyakov
_POSIX_C_SOURCE needed in first place.
2004-01-27CFB DES sync-up with FIPS branch.Andy Polyakov
2004-01-27Avoid signed vs. unsigned warnings (which are treated like errors onRichard Levitte
Windows).
2004-01-26S_IFBLK and S_IFCHR may not exist in some places (like Windows), soRichard Levitte
let's check for those macros, and if they aren't defined, let's assume there aren't Unixly devices on this platform.
2004-01-25Even though C specification explicitly says that constant type "stretches"Andy Polyakov
automatically to accomodate the value, some compilers fail to do so. Most notably 0x0123456789ABCDEF should come out as long long in 32-bit context, but HP compiler truncates it to 32-bit value. Which in turn breaks GF(2^m) arithmetics in hpux-parisc2-cc build. Therefore this fix...
2004-01-24Fix declaration inconsistency in ecparam.c.Andy Polyakov
2004-01-24Get rid of bogus warning when compiling with Sun vendor compiler.Andy Polyakov
2004-01-24We're passed p, so let's use p instead of making assumptions.Richard Levitte
2004-01-22Typo...Richard Levitte
2004-01-21Replace expired certificate.Dr. Stephen Henson