summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2008-10-07Experimental new date handling routines. These fix issues with X509_time_adj()Dr. Stephen Henson
and should avoid any OS date limitations such as the year 2038 bug.
2008-10-06Fix incorrect command for assember file generation on IA64Lutz Jänicke
Submitted by: Amadeu A. Barbosa Jr <amadeu@tecgraf.puc-rio.br>
2008-09-23Fix EC_KEY_check_key.Andy Polyakov
2008-09-22Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can'tBodo Möller
enable disabled ciphersuites.
2008-09-15From branch OpenSSL_0_9_8-stable: Allow soft-loading engines.Bodo Möller
Also, fix CHANGES (consistency with stable branch).
2008-09-15Add missing CHANGES entry.Dr. Stephen Henson
2008-09-15from 0.9.8 branchBodo Möller
2008-09-15Update FAQ.Dr. Stephen Henson
2008-09-15Fix yesterday typos in bss_dgram.c.Andy Polyakov
2008-09-15Fix build warnings.Geoff Thorpe
2008-09-14update commentBodo Möller
2008-09-14Winsock handles SO_RCVTIMEO in unique manner...Andy Polyakov
PR: 1648
2008-09-14oopsBodo Möller
2008-09-14dtls1_write_bytes consumers expect amount of bytes written per call, notAndy Polyakov
overall. PR: 1604
2008-09-14Fix SSL state transitions.Bodo Möller
Submitted by: Nagendra Modadugu
2008-09-14Note about CVS branch inconsistency.Bodo Möller
2008-09-14Really get rid of unsafe double-checked locking.Bodo Möller
Also, "CHANGES" clean-ups.
2008-09-14Some precautions to avoid potential security-relevant problems.Bodo Möller
2008-09-13DTLS didn't handle alerts correctly.Andy Polyakov
PR: 1632
2008-09-12AIX build updates.Andy Polyakov
2008-09-10Add SSL_FIPS flag for FIPS 140-2 approved ciphersuites and add a newDr. Stephen Henson
strength "FIPS" to represent all FIPS approved ciphersuites without NULL encryption.
2008-09-09Ignoring errors in makedepend can hide problems.Ben Laurie
2008-09-07Fix warning.Ben Laurie
2008-09-03Fix from stable branch.Dr. Stephen Henson
2008-09-03Do not discard cached handshake records during resumed sessions:Dr. Stephen Henson
they are used for mac computation.
2008-09-03Make no-tlsext compile.Dr. Stephen Henson
2008-09-01Perl script to run and verify OpenSSL against PKITS RFC3280 complianceDr. Stephen Henson
test suite.
2008-09-01Initial support for delta CRLs. If "use deltas" flag is set attempt to findDr. Stephen Henson
a delta CRL in addition to a full CRL. Check and search delta in addition to the base.
2008-08-29Add support for CRLs partitioned by reason code.Dr. Stephen Henson
Tidy CRL scoring system. Add new CRL path validation error.
2008-08-27Add support for freshest CRL extension.Dr. Stephen Henson
2008-08-20Initial indirect CRL support.Dr. Stephen Henson
2008-08-18Support for certificateIssuer CRL entry extension.Dr. Stephen Henson
2008-08-14Don't use assertions to check application-provided arguments;Bodo Möller
and don't unnecessarily fail on input size 0.
2008-08-13sanity checkBodo Möller
PR: 1679
2008-08-13fix error function codesBodo Möller
2008-08-13Mention ERR_remove_state() deprecation, and ERR_remove_thread_state(NULL).Bodo Möller
2008-08-13Initial support for CRL path validation. This supports distinct certificateDr. Stephen Henson
and CRL signing keys.
2008-08-12Initial code to support distinct certificate and CRL signing keys where theDr. Stephen Henson
CRL issuer is not part of the main path. Not complete yet and not compiled in because the CRL issuer certificate is not validated.
2008-08-12Support for policy mappings extension.Dr. Stephen Henson
Delete X509_POLICY_REF code. Fix handling of invalid policy extensions to return the correct error. Add command line option to inhibit policy mappings.
2008-08-08Initial support for name constraints certificate extension.Dr. Stephen Henson
TODO: robustness checking on name forms.
2008-08-06Correct the FAQ and the threads man page re: CRYPTO_THREADID changes.Geoff Thorpe
2008-08-06Remove the dual-callback scheme for numeric and pointer thread IDs,Geoff Thorpe
deprecate the original (numeric-only) scheme, and replace with the CRYPTO_THREADID object. This hides the platform-specifics and should reduce the possibility for programming errors (where failing to explicitly check both thread ID forms could create subtle, platform-specific bugs). Thanks to Bodo, for invaluable review and feedback.
2008-08-06sha1-armv4-large cosmetics.Andy Polyakov
2008-08-06sha1-armv4-large.pl performance improvement. On PXA255 it gives +10% onAndy Polyakov
8KB block, +60% on 1KB, +160% on 256B...
2008-08-05Fix signed/unsigned warning.Geoff Thorpe
2008-08-05Correctly handle errors in CMS I/O code.Dr. Stephen Henson
2008-08-04Fix error codes for memory-saving patch.Bodo Möller
Also, get rid of compile-time switch OPENSSL_NO_RELEASE_BUFFERS because it was rather pointless (the new behavior has to be explicitly requested by setting SSL_MODE_RELEASE_BUFFERS anyway).
2008-08-04Add support for nameRelativeToCRLIssuer field in distribution point nameDr. Stephen Henson
fields.
2008-08-02Make explicit_policy handling match expected RFC3280 behaviour.Dr. Stephen Henson
2008-08-01Refer to SSL_pending from the man page for SSL_readLutz Jänicke