summaryrefslogtreecommitdiffstats
path: root/CHANGES
AgeCommit message (Collapse)Author
2000-01-16Add missing #ifndefs that caused missing symbols when building libsslUlf Möller
as a shared library without RSA. Use #ifndef NO_SSL2 instead of NO_RSA in ssl/s2*.c. Submitted by: Kris Kennaway <kris@hub.freebsd.org> Modified by Ulf Möller
2000-01-16New function RAND_pseudo_bytes() generated pseudorandom numbers thatUlf Möller
are not guaranteed to be unpredictable.
2000-01-13note about things still to do with RAND_bytesBodo Möller
2000-01-13Use CRYPTO_push_info to find a memory leak in pkcs12.c.Bodo Möller
2000-01-13Precautions against using the PRNG uninitialized: RAND_bytes() nowUlf Möller
returns int (1 = ok, 0 = not seeded). New function RAND_add() is the same as RAND_seed() but takes an estimate of the entropy as an additional argument.
2000-01-12Turn BN_prime_checks into a macro.Bodo Möller
Primes p where (p-1)/2 is prime too are called "safe", not "strong".
2000-01-11Added a comment about Win32.Richard Levitte
2000-01-11Add more info to the memory allocation change log.Richard Levitte
Suggested by Bodo.
2000-01-11The buffer in ss3_read_n cannot actually occur because it is neverBodo Möller
called with max > n when extend is set.
2000-01-11Clean up some of the SSL server code.Bodo Möller
2000-01-09New function X509_CTX_rget_chain(), make SSL_SESSION_print() display return ↵Dr. Stephen Henson
code. Remove references to 'TXT' in -inform and -outform switches.
2000-01-08Add PKCS#12 manpage and use MAC iteration counts by default.Dr. Stephen Henson
2000-01-07Honor the no-xxx Configure options when creating .DEF files.Ulf Möller
2000-01-07More X509_ATTRIBUTE changes.Dr. Stephen Henson
2000-01-06Initial automation changes to 'req' and X509_ATTRIBUTE functions.Dr. Stephen Henson
2000-01-06New functions SSL_get_finished, SSL_get_peer_finished.Bodo Möller
Add short state string for MS SGC.
2000-01-06Use separate arrays for certificate verify and for finished hashes.Bodo Möller
2000-01-02Enhanced support for Alpha Linux. See CHANGES for details.Andy Polyakov
2000-01-02Add support for MS "fast SGC".Dr. Stephen Henson
2000-01-01Fix some of the command line password stuff. New functionDr. Stephen Henson
that can automatically determine the type of a DER encoded "traditional" format private key and change some of the d2i functions to use it instead of requiring the application to work out the key type.
1999-12-29Don't request client certificate in anonymous ciphersuitesBodo Möller
except when following the specs is bound to fail.
1999-12-29Fix SSL_CTX_add_session: When two SSL_SESSIONs have the same ID,Bodo Möller
they can sometimes be different memory structures.
1999-12-29Add OIDs for idea and blowfish. Unfortunately these are inDr. Stephen Henson
the middle of the OID table so the diff is rather large :-(
1999-12-29Simplify the trust structure: basically zap the bit strings andDr. Stephen Henson
represent everything by OIDs.
1999-12-26New {i2d,d2i}_PrivateKey_{bio, fp} functions.Dr. Stephen Henson
1999-12-24Allow passwords to be included on command line for a fewDr. Stephen Henson
more utilities.
1999-12-23Add PKCS#8 utility functions and add PBE options.Dr. Stephen Henson
1999-12-22Correct spelling, and don't abuse grave accent as left quoteBodo Möller
(which was allowed by old ASCII definitions but is not compatible with ISO 8859-1, ISO 10646 etc.).
1999-12-22Support for ASN1 NULL type.Dr. Stephen Henson
1999-12-19Initial support for MacOS is now availableAndy Polyakov
Submitted by: Roy Woods <roy@centricsystems.ca> Reviewed by: Andy Polyakov
1999-12-18 - Added more documentation in CHANGES.Richard Levitte
- Made CRYPTO_MDEBUG even less used in crypto.h, giving MemCheck_start() and MemCheck_stop() only one possible definition. - Made the values of the debug function pointers in mem.c dependent on the existence of the CRYPTO_MDEBUG macro, and made the rest of the code understand the NULL case. That's it. With this code, the old behvior of the debug functionality is restored, but you can still opt to have it on, even when the library wasn't compiled with a defined CRYPTO_MDEBUG.
1999-12-18 - Made sure some changed behavior is documented in CHANGES.Richard Levitte
- Moved the handling of compile-time defaults from crypto.h to mem_dbg.c, since it doesn't make sense for the library users to try to affect this without recompiling libcrypto. - Made sure V_CRYPTO_MDEBUG_TIME and V_CRYPTO_MDEBUG_THREAD had clear and constant definitions. - Aesthetic correction.
1999-12-17Rebuild of the OpenSSL memory allocation and deallocation routines.Richard Levitte
With this change, the following is provided and present at all times (meaning CRYPTO_MDEBUG is no longer required to get this functionality): - hooks to provide your own allocation and deallocation routines. They have to have the same interface as malloc(), realloc() and free(). They are registered by calling CRYPTO_set_mem_functions() with the function pointers. - hooks to provide your own memory debugging routines. The have to have the same interface as as the CRYPTO_dbg_*() routines. They are registered by calling CRYPTO_set_mem_debug_functions() with the function pointers. I moved everything that was already built into OpenSSL and did memory debugging to a separate file (mem_dbg.c), to make it clear what is what. With this, the relevance of the CRYPTO_MDEBUG has changed. The only thing in crypto/crypto.h that it affects is the definition of the MemCheck_start and MemCheck_stop macros.
1999-12-11Various S/MIME fixes.Dr. Stephen Henson
1999-12-10Fix for crashing INTEGERs, ENUMERATEDs and OBJECT IDENTIFIERs.Dr. Stephen Henson
Also fix a memory leak in PKCS#7 routines.
1999-12-05Merge in my S/MIME library and utility.Dr. Stephen Henson
1999-12-03Add functions des_set_key_checked, des_set_key_unchecked.Bodo Möller
Never use des_set_key (it depends on the global variable des_check_key), but usually des_set_key_unchecked. Only destest.c bothered to look at the return values of des_set_key, but it did not set des_check_key -- if it had done so, most checks would have failed because of wrong parity and because of weak keys.
1999-12-03New function PKC12_newpass()Dr. Stephen Henson
1999-12-02Change the trust and purpose code so it doesn't need initDr. Stephen Henson
either and has a static and dynamic mix.
1999-12-01Modify the X509 V3 extension lookup code.Dr. Stephen Henson
1999-11-30Make salting the default. Fail gracefully if the input is not salted.Ben Laurie
1999-11-29Remainder of SSL purpose and trust code: trust and purpose setting inDr. Stephen Henson
SSL_CTX and SSL, functions to set them and defaults if no values set.
1999-11-27Add trust setting support to the verify code. It now checks theDr. Stephen Henson
trust settings of the root CA. After a few fixes it seems to work OK. Still need to add support to SSL and S/MIME code though.
1999-11-27Initial trust code: allow setting of trust checking functionsDr. Stephen Henson
in a table. Doesn't do too much yet. Make the -<digestname> options in 'x509' affect all relevant options. Change the name of the 'notrust' options to 'reject' as this causes less confusion and is a better description of the effect. A few constification changes.
1999-11-26New options to the -verify program which can be used for chain verification.Dr. Stephen Henson
Extend the X509_PURPOSE structure to include shortnames for purposed and default trust ids. Still need some extendable trust checking code and integration with the SSL and S/MIME code.
1999-11-24Initial chain verify code: not tested probably not workingDr. Stephen Henson
at present. However nothing enables it yet so this doesn't matter :-)
1999-11-23Support for authority information access extension.Dr. Stephen Henson
Fix so EVP_PKEY_rset_*() check return codes.
1999-11-21Transparent support for PKCS#8 private keys in RSA/DSA.Dr. Stephen Henson
New universal public key format. Fix CRL+cert load problem in by_file.c Make verify report errors when loading files or dirs
1999-11-19Support for otherName in GeneralName.Dr. Stephen Henson
1999-11-17Modify verify code to handle self signed certificates.Dr. Stephen Henson