summaryrefslogtreecommitdiffstats
path: root/apps/ocsp.c
AgeCommit message (Collapse)Author
2014-04-09Fix free errors in ocsp utility.Dr. Stephen Henson
Keep copy of any host, path and port values allocated by OCSP_parse_url and free as necessary. (cherry picked from commit 5219d3dd350cc74498dd49daef5e6ee8c34d9857)
2012-12-23add missing \nDr. Stephen Henson
2009-09-30PR: 2064, 728Dr. Stephen Henson
Submitted by: steve@openssl.org Add support for custom headers in OCSP requests.
2009-09-30Free SSL_CTX after BIODr. Stephen Henson
2009-07-27Change STRING to OPENSSL_STRING etc as common words suchDr. Stephen Henson
as "STRING" cause conflicts with other headers/libraries.
2009-04-02Add USE_SOCKETS.Dr. Stephen Henson
2009-02-06Just to be awkward Ubuntu 8.10 doesn't like _XOPEN_SOURCE_EXTENDED...Dr. Stephen Henson
2009-01-28Because DEC C - sorry, HP C - is picky about features, we need toRichard Levitte
define _XOPEN_SOURCE_EXTENDED to reach fd_set and timeval types and functionality.
2008-11-05Update obsolete email address...Dr. Stephen Henson
2008-06-04More type-checking.Ben Laurie
2008-03-16Fix a variety of warnings generated by some elevated compiler-fascism,Geoff Thorpe
OPENSSL_NO_DEPRECATED, etc. Steve, please double-check the CMS stuff...
2008-01-05Cygwin compatibility fix to apps/ocsp.c.Andy Polyakov
2008-01-03Netware support.Dr. Stephen Henson
Submitted by: Guenter Knauf <eflash@gmx.net>
2007-12-14Handle non-SHA1 digests for certids in OCSP test responder.Dr. Stephen Henson
2007-12-04Submitted by: Victor B. Wagner <vitus@cryptocom.ru>, steveDr. Stephen Henson
Use default algorithms for OCSP request and response signing. New command line option to support other digest use for OCSP certificate IDs.
2007-09-26Support for certificate status TLS extension.Dr. Stephen Henson
2007-08-12Fix warnings.Dr. Stephen Henson
2007-05-16PR: 1516Dr. Stephen Henson
Revert change in 1516 because it breaks Windows build. Use a modified version of the headers from s_client.c which has used similar functionality without any problems.
2007-04-04Don't free a NULL. Coverity ID 112.Ben Laurie
2007-04-04Die if serial number is invalid.Ben Laurie
2007-03-29Apply a more modern way to get the definition of select(), except for VMS.Richard Levitte
Submitted by Corinna Vinschen <vinschen@redhat.com>
2006-12-25Needed definition of _XOPEN_SOURCE_EXTENDED so DEC C on VMS will seeRichard Levitte
the declarations of fd_set, select() and so on.
2006-12-13properly initialize SSL context, check return valueNils Larsch
2006-08-20According to documentation, including time.h declares select() onRichard Levitte
OpenVMS, and possibly more. Ref: http://h71000.www7.hp.com/doc/82final/6529/6529pro_019.html#r_select
2006-07-17WIN32 fixes signed/unsigned issues and slightly socket semantics.Dr. Stephen Henson
2006-07-17Add -timeout option to ocsp utility.Dr. Stephen Henson
2004-05-17Remove some unnecessary recursive includes from the internal apps.h header,Geoff Thorpe
and include bn.h in those C files that need bignum functionality.
2003-09-03New -ignore_err option in ocsp application to stop the serverDr. Stephen Henson
exiting on the first error in a request.
2003-04-03Correct a lot of printing calls. Remove extra arguments...Richard Levitte
2003-04-03Make it possible to have multiple active certificates with the sameRichard Levitte
subject.
2003-03-26Update ocsp usage message and docs.Dr. Stephen Henson
2003-02-14Pay attention to disabled SSL versions.Richard Levitte
PR: 500
2003-02-14Make it possible to disable OCSP, the speed application, and the use of sockets.Richard Levitte
PR: 358
2002-12-03EXIT() may mean return(). That's confusing, so let's have it really meanRichard Levitte
exit() in whatever way works for the intended platform, and define OPENSSL_EXIT() to have the old meaning (the name is of course because it's only used in the openssl program)
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie
2002-10-11BN_bn2hex() returns "0" instead of "00" for zero. This disrputs theRichard Levitte
requirement that the serial number always be an even amount of characters. PR: 248
2002-08-01Make it possible to load keys from stdin, and restore thatRichard Levitte
functionality in the programs that had that before. Part fo PR 164
2002-08-01Cut'n'paste error with other reposnder certificates cleared.Richard Levitte
PR: 190
2002-07-10Reorder inclusion of header files:Lutz Jänicke
des_old.h redefines crypt: #define crypt(b,s)\ DES_crypt((b),(s)) This scheme leads to failure, if header files with the OS's true definition of crypt() are processed _after_ des_old.h was processed. This is e.g. the case on HP-UX with unistd.h. As evp.h now again includes des.h (which includes des_old.h), this problem only came up after this modification. Solution: move header files (indirectly) including e_os.h before the header files (indirectly) including evp.h. Submitted by: Reviewed by: PR:
2002-06-13Fix ext_dat.h extension ordering.Dr. Stephen Henson
Reinstate -reqout code. Avoid coredump in ocsp if setup_verify fails. Fix typo in ocsp usage message.
2002-02-22Config code updates.Dr. Stephen Henson
CONF_modules_unload() now calls CONF_modules_finish() automatically. Default use of section openssl_conf moved to CONF_modules_load() Load config file in several openssl utilities. Most utilities now load modules from the config file, though in a few (such as version) this isn't done because it couldn't be used for anything. In the case of ca and req the config file used is the same as the utility itself: that is the -config command line option can be used to specify an alternative file.
2001-08-23Load OCSP responder key before waiting for an incomingDr. Stephen Henson
connection so it can prompt for pass phrase on startup instead of after the first connection. Add -port switch to usage message.
2001-07-13Allow OCSP server to handle multiple requests.Dr. Stephen Henson
Document new OCSP options.
2001-07-12Initial OCSP server support, using index.txt format.Dr. Stephen Henson
This can process internal requests or behave like a mini responder. Todo: documentation, update usage info.
2001-05-30Extend all the loading functions to take an engine pointer, a passRichard Levitte
string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
2001-02-24New function and options to check OCSP response validity.Dr. Stephen Henson
2001-02-20Fix typo.Dr. Stephen Henson
2001-02-14Initial OCSP SSL support.Dr. Stephen Henson
2001-02-13New function OCSP_parse_url() and -url option for ocsp utility.Dr. Stephen Henson
Doesn't handle SSL URLs yet.
2001-02-12Modify OCSP nonce behaviour.Dr. Stephen Henson