summaryrefslogtreecommitdiffstats
path: root/apps
AgeCommit message (Collapse)Author
2001-12-09Improve back compatibility.Ben Laurie
2001-12-07fix warnings (one of them was clearly justified)Bodo Möller
2001-12-01Add -pubkey option to req command.Dr. Stephen Henson
2001-11-22check OPENSSL_NO_... before including header files that might beBodo Möller
disabled
2001-11-22In this particular error condition, the structural reference wasn't beingGeoff Thorpe
released.
2001-11-15Make it possible to give digest names as -evp arguments.Richard Levitte
2001-11-15If an engine isn't built in, try loading it as a shareable libraryRichard Levitte
instead. This also makes it possible for users to simply give said shareable library as argument for the -engine option.
2001-11-15make updateRichard Levitte
perl util/mkerr.pl -recurse -write -rebuild
2001-11-14Change the order of events so the capabilities of loaded engines canRichard Levitte
get listed as well.
2001-11-14Implement STARTTLS for certain protocols, currently only supporting SMTP.Richard Levitte
2001-11-10more output for SSL 2.0 in our msg_callbackBodo Möller
2001-11-06Win32 fixes.Dr. Stephen Henson
2001-11-06Fix email address delete code.Dr. Stephen Henson
2001-11-05DOS and Windows do not like unistd.hRichard Levitte
2001-11-02If verify fails, say why.Ben Laurie
2001-10-30Change the shared library support so the shared libraries get builtRichard Levitte
sooner and the programs get built against the shared libraries. This requires a bit more work. Things like -rpath and the possibility to still link the programs statically should be included. Some cleanup is also needed. This will be worked on.
2001-10-29Addapt VMS scripts to the newer disk layout system ODS-5, which allows more ↵Richard Levitte
than one period and mixed size characters in file names
2001-10-27Another noemailDN fix.Dr. Stephen Henson
2001-10-27Allow ca to certify requests containing BMPStrings and UTF8Strings.Dr. Stephen Henson
2001-10-27Bugfixes for noemailDN option. Make it use theDr. Stephen Henson
correct name (instead of NULL) if nomailDN is not set, fix memory leaks and retain DN structure when deleting emailAddress.
2001-10-26New options to allow req to accept UTF8 strings as input.Dr. Stephen Henson
2001-10-25Make sure openssl speed is compilable on systems where fork() doesn'tRichard Levitte
exist. For now, that's all the ones we "support" except Unix.
2001-10-25Add paralellism to speed - note that this currently causes a weird memory leak.Ben Laurie
2001-10-25Add '-noemailDN' option to 'openssl ca'. This prevents inclusion ofBodo Möller
the e-mail address in the DN (i.e., it will go into a certificate extension only). The new configuration file option 'email_in_dn = no' has the same effect. Submitted by: Massimiliano Pala madwolf@openca.org
2001-10-24Due to an increasing number of clashes between modern OpenSSL andRichard Levitte
libdes (which is still used out there) or other des implementations, the OpenSSL DES functions are renamed to begin with DES_ instead of des_. Compatibility routines are provided and declared by including openssl/des_old.h. Those declarations are the same as were in des.h when the OpenSSL project started, which is exactly how libdes looked at that time, and hopefully still looks today. The compatibility functions will be removed in some future release, at the latest in version 1.0.
2001-10-21Reject certificates with unhandled critical extensions.Dr. Stephen Henson
2001-10-21Stop spurious "unable to load config info" errors in reqDr. Stephen Henson
2001-10-20New functions SSL[_CTX]_set_msg_callback().Bodo Möller
New macros SSL[_CTX]_set_msg_callback_arg(). Message callback imlementation for SSL 3.0/TLS 1.0 (no SSL 2.0 yet). New '-msg' option for 'openssl s_client' and 'openssl s_server' that enable a message callback that displays all protocol messages. In ssl3_get_client_hello (ssl/s3_srvr.c), generate a fatal alert if client_version is smaller than the protocol version in use. Also change ssl23_get_client_hello (ssl/s23_srvr.c) to select TLS 1.0 if the client demanded SSL 3.0 but only TLS 1.0 is enabled; then the client will at least see that alert. Fix SSL[_CTX]_ctrl prototype (void * instead of char * for generic pointer). Add/update some OpenSSL copyright notices.
2001-10-20Add missing EVP_CIPHER_CTX_{init,cleanup}Dr. Stephen Henson
2001-10-17Modify EVP cipher behaviour in a similar wayDr. Stephen Henson
to digests to retain compatibility.
2001-10-16Flush buffers to prevent mixed output (Adam Back <adam@cypherspace.org>).Lutz Jänicke
2001-10-16Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()Dr. Stephen Henson
with existing code. Modify library to use digest *_ex() functions.
2001-10-10Add support for md4WithRSAEncryption.Richard Levitte
2001-10-10'make update'Richard Levitte
2001-10-10'make update'Richard Levitte
2001-10-04'make update'Richard Levitte
2001-10-04Because there's chances we clash with the system's types.h, rename ourRichard Levitte
types.h to ossl_typ.h.
2001-10-02sch isn't an array, how did this pass through gcc?Richard Levitte
2001-10-01Make "openssl engine -c" list any supported digests as well as supportedGeoff Thorpe
ciphers.
2001-09-28Change HZ in speed to rely on sysconf() if the clock tick is availableRichard Levitte
that way. Synchronise s_time with these changes.
2001-09-28ENGINE_register_all_complete() will register all implementations of allGeoff Thorpe
algorithms present in all loaded ENGINEs. The result is that if any of those ENGINEs successfully initialises, and the ENGINE_TABLE_FLAG_NOINIT flag isn't set, then they will always be used (and cached as defaults) in preference to software implementations. Ie. accidental auto-detection of acceleration hardware :-) This change stops all implementations being automatically registered in "openssl" sub-commands, so that the "setup_engine()" handler in apps.c controls which ENGINEs are registered for use. A special case has been added that will revert to this "auto-detect" logic, ie. if the "-engine" switch is used as; -engine auto
2001-09-27Stop thinking arguments starting with - are algorithm identifiers.Richard Levitte
Show timing parameters and timing functions used. It looks like some Linuxen have very weird settings for CLK_TCK. I'm very unsure about this change and will investigate further.
2001-09-25Put the cipher info back into the "openssl engine" command.Geoff Thorpe
2001-09-25Make necessary tweaks to apps/ files due to recent ENGINE surgery. SeeGeoff Thorpe
crypto/engine/README for details.
2001-09-24"make update"Geoff Thorpe
2001-09-20make updateBodo Möller
2001-09-12Updated dependencies from "make update"Geoff Thorpe
2001-09-12Reduce the header dependencies on engine.h in apps/.Geoff Thorpe
2001-09-10make updateGeoff Thorpe
2001-09-10Put all "common" initialisation in the apps_startup() and apps_shutdown()Geoff Thorpe
macros in apps.h.