summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2011-03-19Apply all the changes submitted by Steven M. Schweda <sms@antinode.info>Richard Levitte
2011-03-19file install-ssl.com was added on branch OpenSSL_1_0_1-stable on 2011-03-19 ↵Richard Levitte
09:47:33 +0000
2011-03-19file vms_rms.h was added on branch OpenSSL_1_0_1-stable on 2011-03-19 ↵Richard Levitte
09:47:25 +0000
2011-03-19file install-crypto.com was added on branch OpenSSL_1_0_1-stable on ↵Richard Levitte
2011-03-19 09:47:25 +0000
2011-03-19file vms_decc_init.c was added on branch OpenSSL_1_0_1-stable on 2011-03-19 ↵Richard Levitte
09:47:21 +0000
2011-03-19file install-apps.com was added on branch OpenSSL_1_0_1-stable on 2011-03-19 ↵Richard Levitte
09:47:21 +0000
2011-03-19file openssl_undo.com was added on branch OpenSSL_1_0_1-stable on 2011-03-19 ↵Richard Levitte
09:47:19 +0000
2011-03-19file openssl_startup.com was added on branch OpenSSL_1_0_1-stable on ↵Richard Levitte
2011-03-19 09:47:19 +0000
2011-03-19file install-vms.com was added on branch OpenSSL_1_0_1-stable on 2011-03-19 ↵Richard Levitte
09:47:19 +0000
2011-03-16Fix SRP error codes (from HEAD).Dr. Stephen Henson
2011-03-16Add SRP.Ben Laurie
2011-03-13PR: 2469Dr. Stephen Henson
Submitted by: Jim Studt <jim@studt.net> Reviewed by: steve Check mac is present before trying to retrieve mac iteration count.
2011-03-12Remove redundant check to stop compiler warning.Dr. Stephen Henson
2011-03-12Fix warning.Ben Laurie
2011-03-10make no-dsa work againDr. Stephen Henson
2011-03-04s390x-mont.pl: optimize for z196.Andy Polyakov
2011-02-12dso_dlfcn.c: make it work on Tru64 4.0 [from HEAD].Andy Polyakov
2011-02-08Sync with 1.0.0 branch.Bodo Möller
(CVE-2011-0014 OCSP stapling fix has been applied to the 1.0.1 branch as well.)
2011-02-08OCSP stapling fix (OpenSSL 0.9.8r/1.0.0d)Bodo Möller
Submitted by: Neel Mehta, Adam Langley, Bodo Moeller
2011-02-08Synchronize with 1.0.0 branchBodo Möller
2011-02-03add -stripcr option to copy.pl from 0.9.8Dr. Stephen Henson
2011-02-03Assorted bugfixes:Bodo Möller
- safestack macro changes for C++ were incomplete - RLE decompression boundary case - SSL 2.0 key arg length check Submitted by: Google (Adam Langley, Neel Mehta, Bodo Moeller)
2011-02-03fix omissionBodo Möller
2011-02-03CVE-2010-4180 fix (from OpenSSL_1_0_0-stable)Bodo Möller
2011-02-01Since FIPS 186-3 specifies we use the leftmost bits of the digestDr. Stephen Henson
we shouldn't reject digest lengths larger than SHA256: the FIPS algorithm tests include SHA384 and SHA512 tests.
2011-01-30stop warnings about no previous prototype when compiling shared enginesDr. Stephen Henson
2011-01-26FIPS mode changes to make RNG compile (this will need updating later as weDr. Stephen Henson
need a whole new PRNG for FIPS). 1. avoid use of ERR_peek(). 2. If compiling with FIPS use small FIPS EVP and disable ENGINE
2011-01-26FIPS_allow_md5() no longer exists and is no longer requiredDr. Stephen Henson
2011-01-26Add rsa_crptRichard Levitte
2011-01-25Move RSA encryption functions to new file crypto/rsa/rsa_crpt.c to separateDr. Stephen Henson
crypto and ENGINE dependencies in RSA library.
2011-01-25Move BN_options function to bn_print.c to remove dependency for BIO printfDr. Stephen Henson
routines from bn_lib.c
2011-01-25Move DSA_sign, DSA_verify to dsa_asn1.c and include separate versions ofDr. Stephen Henson
DSA_SIG_new() and DSA_SIG_free() to remove ASN1 dependencies from DSA_do_sign() and DSA_do_verify().
2011-01-25recalculate DSA signature if r or s is zero (FIPS 186-3 requirement)Dr. Stephen Henson
2011-01-24PR: 2433Dr. Stephen Henson
Submitted by: Chris Wilson <chris@qwirx.com> Reviewed by: steve Constify ASN1_STRING_set_default_mask_asc().
2011-01-24New function EC_KEY_set_affine_coordinates() this performs all theDr. Stephen Henson
NIST PKV tests.
2011-01-24check EC public key isn't point at infinityDr. Stephen Henson
2011-01-24PR: 1612Dr. Stephen Henson
Submitted by: Robert Jackson <robert@rjsweb.net> Reviewed by: steve Fix EC_POINT_cmp function for case where b but not a is the point at infinity.
2011-01-19Add additional parameter to dsa_builtin_paramgen to output the generatedDr. Stephen Henson
seed to: this doesn't introduce any binary compatibility issues as the function is only used internally. The seed output is needed for FIPS 140-2 algorithm testing: the functionality used to be in DSA_generate_parameters_ex() but was removed in OpenSSL 1.0.0
2011-01-14add va_list version of ERR_add_error_dataDr. Stephen Henson
2011-01-13stop warning with no-engineDr. Stephen Henson
2011-01-10PR: 2425Richard Levitte
Synchronise VMS build with Unixly build.
2011-01-09add buf_str.c fileDr. Stephen Henson
2011-01-09move some string utilities to buf_str.c to reduce some dependencies (from ↵Dr. Stephen Henson
0.9.8 branch).
2011-01-09add X9.31 prime generation routines from 0.9.8 branchDr. Stephen Henson
2011-01-06PR: 2407Richard Levitte
Fix fault include. Submitted by Arpadffy Zoltan <Zoltan.Arpadffy@scientificgames.se>
2011-01-04Don't use decryption_failed alert for TLS v1.1 or later.Dr. Stephen Henson
2011-01-04Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failedDr. Stephen Henson
alert.
2011-01-03oops missed an assertDr. Stephen Henson
2011-01-03PR: 2411Dr. Stephen Henson
Submitted by: Rob Austein <sra@hactrn.net> Reviewed by: steve Fix corner cases in RFC3779 code.
2011-01-03Fix escaping code for string printing. If *any* escaping is enabled weDr. Stephen Henson
must escape the escape character itself (backslash).