summaryrefslogtreecommitdiffstats
path: root/apps
AgeCommit message (Collapse)Author
2010-05-27PR: 2262Dr. Stephen Henson
Submitted By: Victor Wagner <vitus@cryptocom.ru> Fix error reporting in load_key function.
2010-05-15oops, revert test patchDr. Stephen Henson
2010-05-15PR: 2253Dr. Stephen Henson
Submitted By: Ger Hobbelt <ger@hobbelt.com> Check callback return value when outputting errors.
2010-04-06PR: 2220Dr. Stephen Henson
Fixes to make OpenSSL compile with no-rc4
2010-03-14free up sigopts STACKDr. Stephen Henson
2010-03-14clear bogus errors in ca utilityDr. Stephen Henson
2010-03-14add -sigopt option to ca utilityDr. Stephen Henson
2010-03-12new sigopt and PSS support for req and x509 utilitiesDr. Stephen Henson
2010-03-10don't leave bogus errors in the queueDr. Stephen Henson
2010-03-07oopsDr. Stephen Henson
2010-03-07The OID sanity check was incorrect. It should only disallow *leading* 0x80Dr. Stephen Henson
values.
2010-03-05Add -engine_impl option to dgst which will use an implementation ofDr. Stephen Henson
an algorithm from the supplied engine instead of just the default one.
2010-03-03PR: 2183Dr. Stephen Henson
PR#1999 broke fork detection by assuming HAVE_FORK was set for all platforms. Include original HAVE_FORK detection logic while allowing it to be overridden on specific platforms with -DHAVE_FORK=1 or -DHAVE_FORK=0
2010-03-01use supplied ENGINE in genrsaDr. Stephen Henson
2010-02-27oops, revert verify.c changeDr. Stephen Henson
2010-02-27Add Kerberos fix which was in 0.9.8-stable but never committed to HEAD andDr. Stephen Henson
1.0.0. Original fix was on 2007-Mar-09 and had the log message: "Fix kerberos ciphersuite bugs introduced with PR:1336."
2010-02-26include TVS 1.1 version stringDr. Stephen Henson
2010-02-25add -trusted_first option and verify flagDr. Stephen Henson
2010-02-25allow setting of verify names in command line utilities and print out verify ↵Dr. Stephen Henson
names in verify utility
2010-02-12PR: 2170Dr. Stephen Henson
Submitted by: Magnus Lilja <lilja.magnus@gmail.com> Make -c option in dgst work again.
2010-02-02PR: 2161Dr. Stephen Henson
Submitted by: Doug Goldstein <cardoe@gentoo.org>, Steve. Make no-dsa, no-ecdsa and no-rsa compile again.
2010-01-28Experimental renegotiation support in s_server test -www server.Dr. Stephen Henson
2010-01-27revert wrongly committed test codeDr. Stephen Henson
2010-01-27typoDr. Stephen Henson
2010-01-27Have the VMS build system catch up with the 1.0.0-stable branch.Richard Levitte
2010-01-22Tolerate PKCS#8 DSA format with negative private key.Dr. Stephen Henson
2010-01-17apps/speed.c: limit loop counters to 2^31 in order to avoid overflowsAndy Polyakov
in performance calculations. For the moment there is only one code fast enough to suffer from this: Intel AES-NI engine. PR: 2096
2010-01-12PR: 2136Dr. Stephen Henson
Submitted by: Willy Weisz <weisz@vcpc.univie.ac.at> Add options to output hash using older algorithm compatible with OpenSSL versions before 1.0.0
2010-01-06Fix compilation on older Linux. Linux didn't always have sockaddr_storage,Andy Polyakov
not to mention that first sockaddr_storage had __ss_family, not ss_family. In other words it makes more sense to avoid sockaddr_storage...
2009-12-27Add simple external session cache to s_server. This serialises sessionsDr. Stephen Henson
just like a "real" server making it easier to trace any problems.
2009-12-16New option to enable/disable connection to unpatched serversDr. Stephen Henson
2009-12-08Add ctrl and macro so we can determine if peer support secure renegotiation.Dr. Stephen Henson
2009-12-07Initial experimental TLSv1.1 supportDr. Stephen Henson
2009-12-02Replace the broken SPKAC certification with the correct version.Dr. Stephen Henson
2009-11-26Experimental CMS password based recipient Info support.Dr. Stephen Henson
2009-11-12Update from 1.0.0-stableRichard Levitte
2009-11-11add missing parts of reneg port, fix apps patchDr. Stephen Henson
2009-11-11commit missing apps code for reneg fixDr. Stephen Henson
2009-10-31Add missing functions to allow access to newer X509_STORE_CTX statusDr. Stephen Henson
information. Add more informative message to verify callback to indicate when CRL path validation is taking place.
2009-10-31Add option to allow in-band CRL loading in verify utility. Add functionDr. Stephen Henson
load_crls and tidy up load_certs. Remove useless purpose variable from verify utility: now done with args_verify.
2009-10-28Add -no_cache option to s_serverDr. Stephen Henson
2009-10-18Use new X509_STORE_set_verify_cb function instead of old macro.Dr. Stephen Henson
2009-10-15Fix for WIN32 and possibly other platforms which don't define in_port_t.Dr. Stephen Henson
2009-10-15PR: 2069Dr. Stephen Henson
Submitted by: Michael Tuexen <tuexen@fh-muenster.de> Approved by: steve@openssl.org IPv6 support for DTLS.
2009-10-15PR: 1847Dr. Stephen Henson
Submitted by: Tomas Mraz <tmraz@redhat.com> Approved by: steve@openssl.org Integrated patches to CA.sh to bring it into line with CA.pl functionality.
2009-10-15Revert extra changes from previous commit.Dr. Stephen Henson
2009-10-15PR: 2066Dr. Stephen Henson
Submitted by: Guenter <lists@gknw.net> Approved by: steve@openssl.org Add -r option to dgst to produce format compatible with core utilities.
2009-10-04Fix warnings about ignoring fgets return valueDr. Stephen Henson
2009-10-01PR: 2061Dr. Stephen Henson
Submitted by: Julia Lawall <julia@diku.dk> Approved by: steve@openssl.org Correct i2b_PVK_bio error handling in rsa.c, dsa.c
2009-09-30PR: 2064, 728Dr. Stephen Henson
Submitted by: steve@openssl.org Add support for custom headers in OCSP requests.