summaryrefslogtreecommitdiffstats
AgeCommit message (Collapse)Author
2014-02-25Parse non-v1 SCTs less awkwardly.Rob Stradling
(cherry picked from commit 19f65ddbab30543415584ae7916e12a3c5249dba)
2014-02-25util/pl/VC-32.pl: harmonize with 1.0.1 and fix typo.Andy Polyakov
2014-02-24ms/do_win64a.bat: forward to NUL, not NUL:.Andy Polyakov
Allegedly formwarding to NUL: sometimes creates NUL file in file system. PR: 3250 (cherry picked from commit 63aff3001ef6ba2ac376cd3f237fb0d0b3e77f30)
2014-02-24we need /MD for fips buildsDr. Stephen Henson
2014-02-24Update NEWS with known issue.Dr. Stephen Henson
2014-02-24BC-32.pl: refresh Borland C support.Andy Polyakov
PR: 3251 Suggested by: Thorsten Schöning (cherry picked from commit 779c51c6446f384c2f2a7bd5cc4c3e0366baf628)
2014-02-24x509/by_dir.c: fix run-away pointer (and potential SEGV)Andy Polyakov
when adding duplicates in add_cert_dir. PR: 3261 Reported by: Marian Done (cherry picked from commit 758954e0d8232d370ed72b7f86640e40443e1778)
2014-02-24Prepare for 1.0.2-beta2-devDr. Stephen Henson
2014-02-24Prepare for 1.0.2-beta1 releaseOpenSSL_1_0_2-beta1Dr. Stephen Henson
2014-02-24OpenSSL 1.0.2 is now in betaDr. Stephen Henson
2014-02-24make updateDr. Stephen Henson
2014-02-24config: recognize ARMv8/AArch64 target.Andy Polyakov
(cherry picked from commit d099f0ed6ca518052bb167b31e999e1e7734eebf)
2014-02-23Only set current certificate to valid values.Dr. Stephen Henson
When setting the current certificate check that it has a corresponding private key. (cherry picked from commit 358d352aa244b4f2ef655bccff6658d92d5ce03c)
2014-02-23New chain building flags.Dr. Stephen Henson
New flags to build certificate chains. The can be used to rearrange the chain so all an application needs to do is add all certificates in arbitrary order and then build the chain to check and correct them. Add verify error code when building chain. Update docs. (cherry picked from commit 13dc3ce9ab483cade378bcf3844c92bacd817316)
2014-02-23Option to set current cert to server certificate.Dr. Stephen Henson
(cherry picked from commit daddd9a950e491c31f9500d5e570bc7eb96b2823)
2014-02-23Fix typo.Ben Laurie
2014-02-23Add debug flag.Ben Laurie
2014-02-21aes/asm/aesni-x86[_64].pl: minor Atom-specific performance tweak.Andy Polyakov
(cherry picked from commit 214368ffee5736836e2dbb80a16a4fbd85f0eaf9)
2014-02-21ssl/ssl_cert.c: DANE update.Andy Polyakov
2014-02-20make updateDr. Stephen Henson
2014-02-20fix WIN32 warningsDr. Stephen Henson
2014-02-20Show the contents of the RFC6962 Signed Certificate Timestamp List ↵Rob Stradling
Certificate/OCSP Extensions. Add the RFC6962 OIDs to the objects table. (backport from master branch)
2014-02-18Don't use CRYPTO_AES_CTR if it isn't defined.Dr. Stephen Henson
(cherry picked from commit 6ecbc2bb62835a401ad6efe240d469a23b21755b)
2014-02-15Don't use getcwd in non-copy builds.Dr. Stephen Henson
(cherry picked from commit f3a39032601fab2c704f03338e378592d3b4e262)
2014-02-15Don't override $srcd for non copy builds.Dr. Stephen Henson
2014-02-15recognise multiblockDr. Stephen Henson
2014-02-15Add /fixed flag for FIPS links where appropriate.Dr. Stephen Henson
2014-02-15Remove duplicate statement.Dr. Stephen Henson
(cherry picked from commit 5a7652c3e585e970e5b778074c92e617e48fde38)
2014-02-15Add support for aes-128/192/256-ctr to the cryptodev engine.Klaus-Peter Junghanns
This can be used to speed up SRTP with libsrtp, e.g. on TI omap/sitara based devices. (cherry picked from commit be2c4d9bd9e81030c547a34216ae2d8e5c888190)
2014-02-14Use defaults bits in req when not givenKurt Roeckx
If you use "-newkey rsa" it's supposed to read the default number of bits from the config file. However the value isn't used to generate the key, but it does print it's generating such a key. The set_keygen_ctx() doesn't call EVP_PKEY_CTX_set_rsa_keygen_bits() and you end up with the default set in pkey_rsa_init() (1024). Afterwards the number of bits gets read from the config file, but nothing is done with that anymore. We now read the config first and use the value from the config file when no size is given. PR: 2592 (cherry picked from commit 3343220327664680420d4068e1fbe46d2236f1b0)
2014-02-14Fix additional pod errors with numbered items.Kurt Roeckx
(cherry picked from commit e547c45f1c74e976656c042ec9d873f6eea0e756)
2014-02-14Fix various spelling errorsScott Schaefer
(cherry picked from commit 2b4ffc659eabec29f76821f0ac624a2b8c19e4c7)
2014-02-14Document pkcs12 -password behaviorScott Schaefer
apps/pkcs12.c accepts -password as an argument. The document author almost certainly meant to write "-password, -passin". However, that is not correct, either. Actually the code treats -password as equivalent to -passin, EXCEPT when -export is also specified, in which case -password as equivalent to -passout. (cherry picked from commit 856c6dfb09d69fc82ada2611c6cd792dfc60e355)
2014-02-14Fix error discrepancy with 1.0.1Dr. Stephen Henson
2014-02-14ssl/s3_pkt.c: detect RAND_bytes error in multi-block.Andy Polyakov
(cherry picked from commit 701134320a94908d8c0ac513741cab41e215a7b5)
2014-02-14x86[_64]cpuid.pl: add low-level RDSEED.Andy Polyakov
(cherry picked from commit f4d456408d9d7bca31f34765d1a05fbd9fa55826)
2014-02-14aes/asm/aesni-x86_64.pl: further optimization for Atom Silvermont.Andy Polyakov
Improve CBC decrypt and CTR by ~13/16%, which adds up to ~25/33% improvement over "pre-Silvermont" version. [Add performance table to aesni-x86.pl]. (cherry picked from commit 5599c7331b90d9d29c9914c2a95c16d91485415a)
2014-02-14Include self-signed flag in certificates by checking SKID/AKID as wellDr. Stephen Henson
as issuer and subject names. Although this is an incompatible change it should have little impact in pratice because self-issued certificates that are not self-signed are rarely encountered. (cherry picked from commit b1efb7161f409c81178b9aa95583db3390f90b1b)
2014-02-14Include TA in checks/callback with partial chains.Dr. Stephen Henson
When a chain is complete and ends in a trusted root checks are also performed on the TA and the callback notified with ok==1. For consistency do the same for chains where the TA is not self signed. (cherry picked from commit 385b3486661628f3f806205752bf968b8114b347)
2014-02-14Add cert_self_signed function to simplify verifyDr. Stephen Henson
(from master)
2014-02-14Simplify X509_STORE_CTX_get1_chain (from master).Dr. Stephen Henson
2014-02-13ssl/ssl[3].h: retain binary compatibility.Andy Polyakov
2014-02-13Configure: restore binary compatibility in darwin64-x86_64-cc.Andy Polyakov
(and remove duplicates).
2014-02-13evp/e_aes_cbc_hmac_sha*.c: improve cache locality.Andy Polyakov
(cherry picked from commit 9587429fa07a34066107e926fbc8708220f058fa)
2014-02-13ghash-x86[_64].pl: ~15% improvement on Atom SilvermontAndy Polyakov
(other processors unaffected). (cherry picked from commit 98e143f118aedc2fa79fa0ae90f1b039da106309)
2014-02-09fix error discrepancyDr. Stephen Henson
2014-02-09Make upate.Dr. Stephen Henson
Revert libssl ordinals to OpenSSL 1.0.1 values first to tidy up and avoid entries for deleted functions.
2014-02-09fix error number clashDr. Stephen Henson
2014-02-09Whitespace fixes.Ben Laurie
2014-02-09Merge branch '102_stable_tlsext_suppdata_changes' of ↵Ben Laurie
git://github.com/scottdeboy/openssl into scottdeboy-102_stable_tlsext_suppdata_changes
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-25 09:43:19 +0000