summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2014-07-07Set optional peername when X509_check_host() succeeds.Viktor Dukhovni
Pass address of X509_VERIFY_PARAM_ID peername to X509_check_host(). Document modified interface. (cherry picked from commit ced3d9158a7a8c676be504bb6cd3b5ffb7cc7f13)
2014-07-07New peername element in X509_VERIFY_PARAM_IDViktor Dukhovni
Declaration, memory management, accessor and documentation. (cherry picked from commit 6e661d458f5aa8f52bf3d9098bd10025de5f08ea)
2014-07-07One more typo when changing !result to result <= 0Viktor Dukhovni
(cherry picked from commit eef1827f89ebb82d3bcb5391fa15e05061bab4b2)
2014-07-07Fix typo in last commitViktor Dukhovni
(cherry picked from commit 90b70a6a6b4df267fea2724c7af37d93366a1fec)
2014-07-07Multiple verifier reference identities.Viktor Dukhovni
Implemented as STACK_OF(OPENSSL_STRING). (cherry picked from commit 8abffa4a73fcbf6536e0a42d736ed9211a8204ea)
2014-07-07Implement sk_deep_copy.Viktor Dukhovni
(cherry picked from commit 66d884f06770f2daaee8016299ef7e1e3b91dfd1)
2014-07-06Usage for -hack and -prexit -verify_return_errorDr. Stephen Henson
(cherry picked from commit ee724df75d9ad67fd954253ac514fddb46f1e3c6)
2014-07-06Document certificate status request options.Dr. Stephen Henson
(cherry picked from commit cba3f1c739f012aaadb85aaefaf8de424d2695e2)
2014-07-06s_server usage for certificate status requestsDr. Stephen Henson
(cherry picked from commit a44f219c009798054d6741e919cba5b2e656dbf4)
2014-07-06Update ticket callback docs.Dr. Stephen Henson
(cherry picked from commit a23a6e85d8dcd5733a343754f434201f3c9aa6f0)
2014-07-06Sanity check keylength in PVK files.Dr. Stephen Henson
PR#2277 (cherry picked from commit 733a6c882e92f8221bd03a51643bb47f5f81bb81)
2014-07-06Added reference to platform specific cryptographic acceleration such as AES-NIJeffrey Walton
2014-07-06Fixed error in pod files with latest versions of pod2manMatt Caswell
(cherry picked from commit 07255f0a76d9d349d915e14f969b9ff2ee0d1953)
2014-07-06sha512-x86_64.pl: fix typo.Andy Polyakov
PR: #3431 (cherry picked from commit 7eb9680ae1bf5dd9aeb61c401f2c3bd900ac9aeb)
2014-07-05s3_pkt.c: fix typo.Andy Polyakov
(cherry picked from commit 0e7a32b55e8c5b1ec7c2bb755213d076390cc55e)
2014-07-05apps/speed.c: add multi-block benchmark.Andy Polyakov
(cherry picked from commit 375a64e3496c7576a7dbcfdf9a549bf2693506e8)
2014-07-05Return smaller of ret and f.Alan Hryngle
PR#3418. (cherry picked from commit fdea4fff8fb058be928980600b24cf4c62ef3630)
2014-07-05Don't limit message sizes in ssl3_get_cert_verify.Dr. Stephen Henson
PR#319 (reoponed version). (cherry picked from commit 7f6e9578648728478e84246fd3e64026b8b6a48e)
2014-07-04Add license info.Dr. Stephen Henson
(cherry picked from commit 55707a36cce3584457f687ff020842c079624ee8)
2014-07-04typoDr. Stephen Henson
2014-07-04Remove all RFC5878 code.Dr. Stephen Henson
Remove RFC5878 code. It is no longer needed for CT and has numerous bugs.
2014-07-03Merge branch 'rsalz-docfixes'Rich Salz
2014-07-03Close 3170, remove reference to Ariel Glenn's old 0.9.8 docRich Salz
(cherry picked from commit f1112985e847286033ac573e70bdee752d26f46f)
2014-07-02e_os.h: limit _MSC_VER trickery to older compilers.Andy Polyakov
PR: #3390 (cherry picked from commit aab3560b65b9254d17770bb6fe3ca7edd7451429)
2014-07-02bn_exp.c: fix x86_64-specific crash with one-word modulus.Andy Polyakov
PR: #3397 (cherry picked from commit eca441b2b4d33d2a18d163ef9b4b3aff14251c73)
2014-07-02Fix doc typo.Matt Smart
ERR_get_error(3) references the non-existent ERR_get_last_error_line_data instead of the one that does exist, ERR_peek_last_error_line_data. PR#3283 (cherry picked from commit 5cc99c6cf5e908df6b00b04af7f08e99c0698c7b)
2014-07-02Make disabling last cipher work.Thijs Alkemade
(cherry picked from commit 7cb472bd0d0fd9da3d42bed1acc56c3a79fc5328)
2014-07-02ASN1 sanity check.Dr. Stephen Henson
Primitive encodings shouldn't use indefinite length constructed form. PR#2438 (partial). (cherry picked from commit 398e99fe5e06edb11f55a39ce0883d9aa633ffa9)
2014-07-02Accessor functions for app_data in ECDSA_METHODDr. Stephen Henson
(cherry picked from commit 387b844ffdc79b733be0b1dbaddd2ac64a6c1192)
2014-07-02Fix possible buffer overrun.Ben Laurie
(cherry picked from commit 2db3ea29298bdc347f15fbfab6d5746022f05101) Conflicts: ssl/ssl_locl.h ssl/t1_lib.c
2014-07-01sha512-x86_64.pl: fix linking problem under Windows.Andy Polyakov
(cherry picked from commit 29be3f6411774e10169e60e1507df3d7c2e589df)
2014-06-30Fix copy for CCM, GCM and XTS.Dr. Stephen Henson
Internal pointers in CCM, GCM and XTS contexts should either be NULL or set to point to the appropriate key schedule. This needs to be adjusted when copying contexts. (cherry picked from commit c2fd5d79ffc4fc9d120a0faad579ce96473e6a2f)
2014-06-30Make EVP_Digest* work again.Dr. Stephen Henson
2014-06-29Don't core dump when using CMAC with dgst.Dr. Stephen Henson
We can't unfortunately print the CMAC cipher used without extending the API. PR#2579 (cherry picked from commit 79e31a2842e10271581cbfdaae0145dd4bd35107)
2014-06-29Make CMAC work with EVP_PKEY.Dr. Stephen Henson
Add patch originally accidentally omitted to allow CMAC to work with EVP_PKEY APIs.
2014-06-29Clarified that the signature's buffer size, `s`, is not used as anJeffrey Walton
IN parameter. Under the old docs, the only thing stated was "at most EVP_PKEY_size(pkey) bytes will be written". It was kind of misleading since it appears EVP_PKEY_size(pkey) WILL be written regardless of the signature's buffer size. (cherry picked from commit 6e6ba36d980f67b6e5c7b139f78da7acbbf8ec76)
2014-06-29Make EVP_CIPHER_CTX_copy work in GCM mode.ZNV
PR#3272 (cherry picked from commit 370bf1d708e6d7af42e1752fb078d0822c9bc73d)
2014-06-29Fix memory leak.Dr. Stephen Henson
PR#2531 (cherry picked from commit 44724beeadf95712a42a8b21dc71bf110e89a262)
2014-06-29Typo.Ken Ballou
PR#3173 (cherry picked from commit 76ed5a42ea68dd08bba44e4003b7e638e5d8a4a3)
2014-06-29Show errors on CSR verification failure.Dr. Stephen Henson
If CSR verify fails in ca utility print out error messages. Otherwise some errors give misleading output: for example if the key size exceeds the library limit. PR#2875 (cherry picked from commit a30bdb55d1361b9926eef8127debfc2e1bb8c484)
2014-06-29Make no-ssl3 no-ssl2 do more sensible things.Dr. Stephen Henson
(cherry picked from commit 7ae6a4b659facfd7ad8131238aa1d349cb3fc951)
2014-06-29Clarify protocols supported.Dr. Stephen Henson
Update protocols supported and note that SSLv2 is effectively disabled by default. PR#3184 (cherry picked from commit 1b13a4f38dfc385d5e776f6b3e06c5795874cf9b)
2014-06-28x86_64 assembly pack: refine clang detection.Andy Polyakov
(cherry picked from commit a356e488ad50ca9de3fc4955839441c5aff11ed3) Resolved conflicts: crypto/bn/asm/rsaz-avx2.pl
2014-06-28Typo.Dr. Stephen Henson
PR#3107 (cherry picked from commit 7c206db9280865ae4af352dbc14e9019a6c4795d)
2014-06-28Don't disable state strings with no-ssl2Dr. Stephen Henson
Some state strings were erronously not compiled when no-ssl2 was set. PR#3295 (cherry picked from commit 0518a3e19e18cfc441cab261b28441b8c8bd77bf)
2014-06-28Fix compilation with -DSSL_DEBUG -DTLS_DEBUG -DKSSL_DEBUGyogesh nagarkar
PR#3141 (cherry picked from commit d183545d4589f1e7a40190400b8b99ea3d1f7f97)
2014-06-28Fix typo in ideatest.cAndreas Westfeld
(cherry picked from commit d1d4382dcb3fdcad4758ef7e7dd7b61dbf5abbfe)
2014-06-27Remove redundant check.Ken Ballou
PR#3174 (cherry picked from commit fd331c0bb9b557903dd2ce88398570a3327b5ef0)
2014-06-27Fix for EVP_PBE_alg_add().Dr. Stephen Henson
In EVP_PBE_alg_add don't use the underlying NID for the cipher as it may have a non-standard key size. PR#3206 (cherry picked from commit efb7caef637a1de8468ca109efd355a9d0e73a45)
2014-06-27x86_64 assembly pack: addendum to last clang commit.Andy Polyakov
(cherry picked from commit 7eb048828008f195fb6edceb8f767622694e7426)