summaryrefslogtreecommitdiffstats
path: root/apps
AgeCommit message (Collapse)Author
2001-02-27MacOSX doesn't have ftime().Richard Levitte
Spotted by Pieter Bowman <bowman@math.utah.edu>
2001-02-24New function and options to check OCSP response validity.Dr. Stephen Henson
2001-02-23I missed one.Geoff Thorpe
2001-02-22e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte
and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
2001-02-22Windows does not know of strigs.h or strcasecmp, so when in Windows,Richard Levitte
make strcasecmp a macro to _stricmp.
2001-02-21This adds command-line support to s_server for controlling the generationGeoff Thorpe
of session IDs. Namely, passing "-id_prefix <text>" will set a generate_session_id() callback that generates session IDs as random data with <text> block-copied over the top of the start of the ID. This can be viewed by watching the session ID s_client's output when it connects. This is mostly useful for testing any SSL/TLS code (eg. proxies) that wish to deal with multiple servers, when each of which might be generating a unique range of session IDs (eg. with a certain prefix).
2001-02-20Some functions, like strdup() and strcasecmp(), are defined inRichard Levitte
strings.h according to X/Open.
2001-02-20I forgot there was a reason why the inclusions and definition of u_intRichard Levitte
was made in a certain sequence. This change restores the earlier "chain of command".
2001-02-20OpenVMS catches up.Richard Levitte
2001-02-20Get e_os2.h to get all the system definitions correctly.Richard Levitte
2001-02-20Fix typo.Dr. Stephen Henson
2001-02-20Include opensslconf.h or the like early to make sure system macros getRichard Levitte
correctly defined.
2001-02-20honour '-no_tmp_rsa'Bodo Möller
2001-02-20Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte
missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
2001-02-20Fix warning.Ulf Möller
2001-02-19Make all configuration macros available for application by makingRichard Levitte
sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
2001-02-19make updateRichard Levitte
2001-02-19New -set_serial options to 'req' and 'x509'.Dr. Stephen Henson
Remove the old broken bio read of serial numbers in the 'ca' index file. This would choke if a revoked certificate was specified with a negative serial number. Fix typo in uid.c
2001-02-16New options to 'ca' utility to support CRL entry extensions.Dr. Stephen Henson
Add revelant new X509V3 extensions. Add OIDs. Fix ASN1 memory leak code to pop info if external allocation used.
2001-02-15Add "-rand" option to s_client and s_server.Lutz Jänicke
2001-02-14Option to disable standard block padding with EVP API.Dr. Stephen Henson
Add -nopad option to enc command. Update docs.
2001-02-14Initial OCSP SSL support.Dr. Stephen Henson
2001-02-13New function OCSP_parse_url() and -url option for ocsp utility.Dr. Stephen Henson
Doesn't handle SSL URLs yet.
2001-02-12Modify OCSP nonce behaviour.Dr. Stephen Henson
2001-02-10disable stdin buffering in load_certBodo Möller
2001-02-10use case-insensitive comparison in set_table_optsBodo Möller
(similar to how arguments such as -inform/-outform specifications are treated)
2001-02-10Fix CRL printing to correctly show when there are no revoked certificates.Dr. Stephen Henson
Make ca.c correctly initialize the revocation date. Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string() set the string type: so they can initialize ASN1_TIME structures properly.
2001-02-09New Option SSL_OP_CIPHER_SERVER_PREFERENCE allows TLS/SSLv3 server to overrideLutz Jänicke
the clients choice; in SSLv2 the client uses the server's preferences.
2001-02-09TypoLutz Jänicke
2001-02-09Various Win32 related fixed. Make no-krb5 work in mkdef.pl .Dr. Stephen Henson
Fix warning in apps/engine.c Remove definitions of deleted functions. Add missing definition of X509_VAL.
2001-02-09Add missing \n's to ocsp usage message.Dr. Stephen Henson
2001-02-08Allow various options to be included for signing and verify ofDr. Stephen Henson
OCSP responses. Documentation to follow... Urgh.. this conflicted with the -VAfile patch I hope I haven't broken it.
2001-02-08Add the -VAfile option to 'openssl ocsp'. This option will give theRichard Levitte
client code certificates to use to only check response signatures. I'm not entirely sure if the way I just implemented the verification is the right way to do it, and would be happy if someone would like to review this.
2001-02-07Fix typo preventing correct usage of -out option.Lutz Jänicke
2001-02-06Rijdael CBC mode and partial undebugged SSL support.Ben Laurie
2001-02-06don't dump coreBodo Möller
2001-02-06format stringsUlf Möller
2001-02-04Make depend.Ben Laurie
2001-02-03If the source has already been succesfully queried, do not try to open itLutz Jänicke
again as file.
2001-02-02Various function for commmon operations.Dr. Stephen Henson
2001-01-23Use OpenSSL_add_all_algorithms instead of the backwards compatibilityBodo Möller
alias SSLeay_add_all_algorithms
2001-01-19Fixes to various ASN1_INTEGER routines for negative case.Dr. Stephen Henson
Enhance s2i_ASN1_INTEGER().
2001-01-19Fix openssl passwd -1Bodo Möller
2001-01-19Additional functionality in ocsp utility: print summaryDr. Stephen Henson
of status info. Check nonce values. Option to disable verify. Update usage message. Rename status to string functions and make them global.
2001-01-18Don't shadow.Dr. Stephen Henson
2001-01-18Implement remaining OCSP verify checks inDr. Stephen Henson
accordance with RFC2560.
2001-01-17Keep up with UnixRichard Levitte
2001-01-17Initial OCSP certificate verify. Not complete,Dr. Stephen Henson
it just supports a "trusted OCSP global root CA".
2001-01-15New '-extfile' option for 'openssl ca'.Bodo Möller
This allows keeping extensions in a separate configuration file. Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
2001-01-14Fix warning in apps/ca.cDr. Stephen Henson