summaryrefslogtreecommitdiffstats
path: root/CHANGES
AgeCommit message (Collapse)Author
2001-02-19New -set_serial options to 'req' and 'x509'.Dr. Stephen Henson
Remove the old broken bio read of serial numbers in the 'ca' index file. This would choke if a revoked certificate was specified with a negative serial number. Fix typo in uid.c
2001-02-19Memory leak detection bugfixes for multi-threading.Bodo Möller
2001-02-16New options to 'ca' utility to support CRL entry extensions.Dr. Stephen Henson
Add revelant new X509V3 extensions. Add OIDs. Fix ASN1 memory leak code to pop info if external allocation used.
2001-02-15Move entry to match chronologic orderering.Lutz Jänicke
2001-02-15Don't forget to mention minor change.Lutz Jänicke
2001-02-14Option to disable standard block padding with EVP API.Dr. Stephen Henson
Add -nopad option to enc command. Update docs.
2001-02-14Initial OCSP SSL support.Dr. Stephen Henson
2001-02-14IRIX bugfixUlf Möller
2001-02-13New function OCSP_parse_url() and -url option for ocsp utility.Dr. Stephen Henson
Doesn't handle SSL URLs yet.
2001-02-12Modify OCSP nonce behaviour.Dr. Stephen Henson
2001-02-12Work around for libsafe "error".Dr. Stephen Henson
2001-02-10disable stdin buffering in load_certBodo Möller
2001-02-10Fix CRL printing to correctly show when there are no revoked certificates.Dr. Stephen Henson
Make ca.c correctly initialize the revocation date. Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string() set the string type: so they can initialize ASN1_TIME structures properly.
2001-02-09New Option SSL_OP_CIPHER_SERVER_PREFERENCE allows TLS/SSLv3 server to overrideLutz Jänicke
the clients choice; in SSLv2 the client uses the server's preferences.
2001-02-09Various updates to mkdef.pl to cope with new aesDr. Stephen Henson
and ASN1 code.
2001-02-08Allow various options to be included for signing and verify ofDr. Stephen Henson
OCSP responses. Documentation to follow... Urgh.. this conflicted with the -VAfile patch I hope I haven't broken it.
2001-02-08Add the -VAfile option to 'openssl ocsp'. This option will give theRichard Levitte
client code certificates to use to only check response signatures. I'm not entirely sure if the way I just implemented the verification is the right way to do it, and would be happy if someone would like to review this.
2001-02-08Integrate my implementation of a countermeasure againstBodo Möller
Bleichenbacher's DSA attack. With this implementation, the expected number of iterations never exceeds 2. New semantics for BN_rand_range(): BN_rand_range(r, min, range) now generates r such that min <= r < min+range. (Previously, BN_rand_range(r, min, max) generated r such that min <= r < max. It is more convenient to have the range; also the previous prototype was misleading because max was larger than the actual maximum.)
2001-02-07Bleichenbacher's DSA attackUlf Möller
2001-02-07Fix AES code.Dr. Stephen Henson
Update Rijndael source to v3.0 Add AES OIDs. Change most references of Rijndael to AES. Add new draft AES ciphersuites.
2001-02-06Avoid coredumps for CONF_get_...(NULL, ...)Bodo Möller
2001-02-06Fix potential buffer overrun for EBCDIC.Ulf Möller
2001-02-05New function to copy nonce values from OCSPDr. Stephen Henson
request to response.
2001-02-03Various OCSP responder utility functions.Dr. Stephen Henson
Delete obsolete OCSP functions. Largely untested at present...
2001-02-02Various function for commmon operations.Dr. Stephen Henson
2001-02-01Tolerate some "variations" used in someDr. Stephen Henson
certificates. One is a valid CA which has no basicConstraints but does have certSign keyUsage. Other is S/MIME signer with nonRepudiation but no digitalSignature.
2001-01-30Document the change.Richard Levitte
2001-01-28Make sk_sort tolearate a NULL argument.Dr. Stephen Henson
2001-01-26New OCSP response verify option OCSP_TRUSTOTHERDr. Stephen Henson
2001-01-25Zero the premaster secret after deriving the master secret in DHDr. Stephen Henson
ciphersuites.
2001-01-24Add debugging info to new ASN1 code to trace memory leaks.Dr. Stephen Henson
Fix PKCS7 and PKCS12 memory leaks. Initialise encapsulated content type properly.
2001-01-23EVP_add_digest_alias additions to SS_library_initBodo Möller
2001-01-23There is no C version of bn_div_3_wordsUlf Möller
2001-01-21Mention the ./config script fixes.Ulf Möller
2001-01-20Fix to stop X509_time_adj() using GeneralizedTime.Dr. Stephen Henson
2001-01-19Fixes to various ASN1_INTEGER routines for negative case.Dr. Stephen Henson
Enhance s2i_ASN1_INTEGER().
2001-01-19Fix openssl passwd -1Bodo Möller
2001-01-19Additional functionality in ocsp utility: print summaryDr. Stephen Henson
of status info. Check nonce values. Option to disable verify. Update usage message. Rename status to string functions and make them global.
2001-01-18Implement remaining OCSP verify checks inDr. Stephen Henson
accordance with RFC2560.
2001-01-17Make the change log on the RAND_poll change a bit more explicit. Suggested ↵Richard Levitte
by Bodo Moeller.
2001-01-17Initial OCSP certificate verify. Not complete,Dr. Stephen Henson
it just supports a "trusted OCSP global root CA".
2001-01-15New '-extfile' option for 'openssl ca'.Bodo Möller
This allows keeping extensions in a separate configuration file. Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
2001-01-14Change PKCS#12 key derivation routines to cope withDr. Stephen Henson
non null terminated passwords.
2001-01-13New OCSP utility. This can generate, parse and printDr. Stephen Henson
OCSP requests. It can also query reponders and parse or print out responses. Still needs some more work: OCSP response checks and of course documentation.
2001-01-12New 'openssl ca -status <serial>' and 'openssl ca -updatedb'Bodo Möller
commands. Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
2001-01-11New -newreq-nodes option to CA.pl.Bodo Möller
Submitted by: Damien Miller <djm@mindrot.org>
2001-01-11Add configuration for GNU Hurd.Richard Levitte
2001-01-11OCSP basic response verify. Very incompleteDr. Stephen Henson
but will verify the signatures on a response and locate the signers certifcate. Still needs to implement a proper OCSP certificate verify. Fix warning in RAND_egd().
2001-01-10After discussion with Richard, change the new API for extended memoryBodo Möller
allocation callbacks so that it is no longer visible to applications that these live at a different call level than conventional memory allocation callbacks.
2001-01-10Add SSLEAY_DIR argument code for SSLeay_version.Bodo Möller
Add '-d' option for 'openssl version' (included in '-a').
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-27 15:42:44 +0000