summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2016-03-24Misc fixes in VMS/openssl_startup.com.inRichard Levitte
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-24Adjust some default installation directoriesRichard Levitte
- on VMS, SYS$COMMON:[SSL] is already used as installation directory by HP SSL, so we make our default for --openssldir SYS$COMMON:[OPENSSL-COMMON] instead. - Updated notes on default installation dirs fir Unix and Windows Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-23VMS: update the properties of symbol searchRichard Levitte
In this OpenSSL version, we deliver engines with lower case symbol names. The DSO symbol finder must be updated to allow for mixed case symbols or it won't fine them. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-23VMS: compensate for command line length limits with a logical nameRichard Levitte
Sometimes, you might end up with a rather long compile line due to excessively long /INCLUDE directories. Compensate for it by making a temporary logical name with them and using said logical name as /INCLUDE argument. A note was added to NOTES.VMS regarding these limitations. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-23Move dso.h to internalRich Salz
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-23Remove several unused undocumented functions.Rich Salz
Removed the following: DSO_bind_var, DSO_bind_var, DSO_get_default_method, DSO_get_loaded_filename, DSO_get_loaded_filename, DSO_get_method, DSO_new_method, DSO_pathbyaddr, DSO_set_default_method, DSO_set_method, DSO_set_name_converter, DSO_set_name_converter Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-23Fix error codeFdaSilvaYY
Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-23Small fixups in DSORichard Levitte
- VMS configs had no dso_scheme - Incorrect return of NULL method. Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-03-22Removed unused fields of CT_POLICY_EVAL_CTXRob Percival
Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-22Correct another batch of typosAlex Gaynor
Reviewed-by: Kurt Roeckx <kurt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-22Check algo_strength using SSL_STRONG_MASKKurt Roeckx
algo_strength contains 2 parts that need to be checked by their own. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> MR: #2082
2016-03-22remove unused references fieldDr. Stephen Henson
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-22Have only one DSO_METHOD_opensslRich Salz
Instead of have every DSO_METHOD_xxx in all platforms, ensure that only one DSO_METHOD_openssl is available on all platforms. Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-03-22Make DSO opaque.Rich Salz
This was really easy. Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-03-22Make X509_PUBKEY opaqueDr. Stephen Henson
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-22move x_pubkey.c to crypto/x509Dr. Stephen Henson
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-22Fix enable-zlib no-comp.Ben Laurie
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-22Fix no-rc4.Ben Laurie
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-22Move declaration of i into blocks where it is used.Ben Laurie
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-22sctp requires dgram.Ben Laurie
Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-21RT4660: BIO_METHODs should be const.David Benjamin
BIO_new, etc., don't need a non-const BIO_METHOD. This allows all the built-in method tables to live in .rodata. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Downcase VMS config namesRichard Levitte
On VMS, we downcase option names, which means that config names are downcased as well, so they need to be downcased in the target table to be found. Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-21Just like bio_out, bio_err needs the linebuffer filter on VMSRichard Levitte
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-21Adds s2i function for ct_precert_poison X509 extensionRob Percival
Allows CONF files for certificate requests to specify that a pre- certificate should be created (see RFC6962). Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2016-03-21Fix memory leak where fdlookup linked list is not freed duringSteven Linsell
ASYNC_WAIT_CTX_free Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
2016-03-21Fix no-ts with --strict-warningsMatt Caswell
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Fix no-sockMatt Caswell
Misc fixes for no-sock Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Fix no-gostMatt Caswell
Configure had the wrong name for the no-gost option. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Don't use hardcoded values for typesDr. Stephen Henson
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-21In for loop values, introduce a dummy to protect against empty listRichard Levitte
In constructions such as 'for x in $(MAKEVAR); do ...', there's the possibility that $(MAKEVAR) is en empty value. Some shells don't like that, so introduce a dummy value that gets discarded: for x in dummy $(MAKEVAR); do if [ "$$x" = "dummy" ]; then continue; fi Closes RT#4459 Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-21Fix no-seedMatt Caswell
Fix compilation with --strict-warnings and no-seed Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-21Remove the no-rijndael optionMatt Caswell
Rijndael is an old name for AES. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2016-03-21Fix no-scryptMatt Caswell
Fix the evp tests when no-scrypt is used. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Skip the CMS tests if CMS is disabledMatt Caswell
This fixes the no-cms compile time option. Reviewed-by: Emilia Käsper <emilia@openssl.org>
2016-03-21Fix no-dsaMatt Caswell
Misc fixes for no-dsa. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Build system: VC-WIN64I fixups.Andy Polyakov
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Configurations/windows-makefile.tmpl: respect no-makedepend.Andy Polyakov
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Windows build system: get uplink right.Andy Polyakov
Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21config: fix off-by-centimeter-to-the-right typo.Andy Polyakov
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2016-03-21Configurations/10-main.conf: freeze -std option in darwin*-ppc-cc.Andy Polyakov
RT#4422 Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-21Remove mk1mf documentationRichard Levitte
Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-21Remove the remainder of util/mk1mf.pl and companion scriptsRichard Levitte
This removes all scripts that deal with MINFO as well, since that's only used by mk1mf. Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-21Remove generation of ms/version32.rc from Configure, use util/mkrc.plRichard Levitte
utils/mkrc.pl was added a while ago as a better generator for the Windows DLL resource file. Finalize the change by removing the ms/version32.rc generator from Configure and adding resource file support using mkrc.pl in Configurations/windows-makefile.pl Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-21Remove the mk1mf VC-WIN* builds and its supporting scriptsRichard Levitte
The mk1mf build for the VC-WIN* targets is broken and the unified scheme works well enough, so we clean out the old. Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-20Fix ALPN - more fixesTodd Short
* Clear proposed, along with selected, before looking at ClientHello * Add test case for above * Clear NPN seen after selecting ALPN on server * Minor documentation updates Reviewed-by: Emilia Käsper <emilia@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-20Add a comment on dane_verify() logicViktor Dukhovni
Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-03-20Remove #error from include files.Rich Salz
Don't have #error statements in header files, but instead wrap the contents of that file in #ifndef OPENSSL_NO_xxx This means it is now always safe to include the header file. Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-03-20GH886: CONNECT should use HTTP/1.1Rich Salz
By default you get 0.9 which isn't widely available. But we use HTTP/1.0 for now. Courtesy beusink@users.github.com Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-03-20Have makedepend output to stdout and redirect itRichard Levitte
This gives us better control of what files are produced. Reviewed-by: Andy Polyakov <appro@openssl.org>
2016-03-20ct_int.h only needed by crypto/ctRich Salz
Merge ct_int.h into ct_locl.h Reviewed-by: Viktor Dukhovni <viktor@openssl.org>