| Age | Commit message (Collapse) | Author |
|---|
|
inherited from X509_STORE.
Add CRL checking options to other applications.
|
|
|
|
define LLONG properly for VC++.
stop compiler complaining about signed/unsigned mismatch in apps/engine.c
|
|
|
|
ENGINE.
* Extra verbosity can be added with more "v"'s, eg. '-vvv' gives
information about input flags and descriptions for each control command
in each ENGINE. Check the output of "openssl engine -vvv" for example.
* '-pre <cmd>' and '-post <cmd>' can be used to invoke control commands on
the specified ENGINE (or on all of them if no engine id is specified,
although that usually gets pretty ugly). '-post' commands are only
attempted if '-t' is specified and the engine successfully initialises.
'-pre' commands are always attempted whether or not '-t' causes an
initialisation to be tried afterwards. Multiple '-pre' and/or '-post'
commands can be specified and they will be called in the order they
occur on the command line.
Parameterised commands (the normal case, there are currently no
unparameterised ones) are split into command and argument via a separating
colon. Eg. "openssl engine -pre SO_PATH:/lib/libdriver.so <id>" results in
the call;
ENGINE_ctrl_cmd_string(e, "SO_PATH", "/lib/libdriver.so", 0);
Application code should similarly allow arbitrary name-value string pairs
to be passed into ENGINEs in a manner matching that in apps/engine.c,
either using the same colon-separated format, or entered as two distinct
strings. Eg. as stored in a registry. The last parameter of
ENGINE_ctrl_cmd_string can be changed from 0 to 1 if the command should
only be attempted if it's supported by the specified ENGINE (eg. for
commands like "FORK_CHECK:1" that may or may not apply to the run-time
ENGINE).
|
|
|
|
|
|
to subjectAltName when signing a certificate.
|
|
|
|
|
|
|
|
|
|
|
|
index -1).
|
|
|
|
|
|
Noted by Martin Kraemer <Martin.Kraemer@Fujitsu-Siemens.com>
|
|
|
|
Add default values for display by the 'ca' utility
to openssl.cnf
Update docs.
|
|
the 'ca' utility. This can now be extensively
customised in the configuration file and handles
multibyte strings and extensions properly.
This is required when extensions copying from
certificate requests is supported: the user
must be able to view the extensions before
allowing a certificate to be issued.
|
|
Add no_issuer option.
Fix X509_print_ex() so it prints out newlines when
certain fields are omitted.
|
|
|
|
|
|
HTTP responses.
|
|
functions to return constant EVP_MD and EVP_CIPHER
pointers.
Update docs.
|
|
because an incompletely initialized ASN1_INTEGER was used.
|
|
"make depend"
|
|
Submitted by Brad Dominy <jdominy@darwinuser.org>
|
|
Add EC vaporware: change relevant Makefiles and add some empty source
files.
"make update".
|
|
sets the subject name for a new request or supersedes the
subject name in a given request.
Add options '-batch' and '-verbose' to 'openssl req'.
Submitted by: Massimiliano Pala <madwolf@hackmasters.net>
Reviewed by: Bodo Moeller
|
|
|
|
Spotted by Pieter Bowman <bowman@math.utah.edu>
|
|
|
|
|
|
and make all files the depend on it include it without prefixing it
with openssl/.
This means that all Makefiles will have $(TOP) as one of the include
directories.
|
|
make strcasecmp a macro to _stricmp.
|
|
of session IDs. Namely, passing "-id_prefix <text>" will set a
generate_session_id() callback that generates session IDs as random data
with <text> block-copied over the top of the start of the ID. This can be
viewed by watching the session ID s_client's output when it connects.
This is mostly useful for testing any SSL/TLS code (eg. proxies) that wish
to deal with multiple servers, when each of which might be generating a
unique range of session IDs (eg. with a certain prefix).
|
|
strings.h according to X/Open.
|
|
was made in a certain sequence. This change restores the earlier
"chain of command".
|
|
|
|
|
|
|
|
correctly defined.
|
|
|
|
missed any.
This compiles and runs on Linux, and external applications have no
problems with it. The definite test will be to build this on VMS.
|
|
|
|
sure they are available in opensslconf.h, by giving them names starting
with "OPENSSL_" to avoid conflicts with other packages and by making
sure e_os2.h will cover all platform-specific cases together with
opensslconf.h.
I've checked fairly well that nothing breaks with this (apart from
external software that will adapt if they have used something like
NO_KRB5), but I can't guarantee it completely, so a review of this
change would be a good thing.
|
|
|
|
Remove the old broken bio read of serial numbers in the 'ca' index
file. This would choke if a revoked certificate was specified with
a negative serial number.
Fix typo in uid.c
|
|
Add revelant new X509V3 extensions.
Add OIDs.
Fix ASN1 memory leak code to pop info if external allocation used.
|
