summaryrefslogtreecommitdiffstats
path: root/crypto/ocsp
AgeCommit message (Collapse)Author
2011-05-25Fix the ECDSA timing attack mentioned in the paper at:Dr. Stephen Henson
http://eprint.iacr.org/2011/232.pdf Thanks to the original authors Billy Bob Brumley and Nicola Tuveri for bringing this to our attention.
2011-01-26Change AR to ARX to allow exclusion of fips object modulesDr. Stephen Henson
2010-10-06We can't always read 6 bytes in an OCSP response: fix so error statusesDr. Stephen Henson
are read correctly for non-blocking I/O.
2010-06-12Fix warnings.Ben Laurie
2010-03-12missing goto meant signature was never printed outDr. Stephen Henson
2009-09-30PR: 2063Dr. Stephen Henson
Submitted by: Julia Lawall <julia@diku.dk> Approved by: steve@openssl.org Correct BIO_write error handling in ocsp_prn.c
2009-09-30PR: 2064, 728Dr. Stephen Henson
Submitted by: steve@openssl.org Add support for custom headers in OCSP requests.
2009-09-23Audit libcrypto for unchecked return values: fix all cases enounteredDr. Stephen Henson
2009-01-01Calculate offset correctly. (Coverity ID 233)Ben Laurie
2008-12-29If we're going to return errors (no matter how stupid), then we shouldBen Laurie
test for them!
2008-12-22This _WIN32-specific patch makes it possible to "wrap" OpenSSL in anotherAndy Polyakov
.DLL, in particular static build. The issue has been discussed in RT#1230 and later on openssl-dev, and mutually exclusive approaches were suggested. This completes compromise solution suggested in RT#1230. PR: 1230
2008-11-05Update obsolete email address...Dr. Stephen Henson
2007-12-04Submitted by: Victor B. Wagner <vitus@cryptocom.ru>, steveDr. Stephen Henson
Use default algorithms for OCSP request and response signing. New command line option to support other digest use for OCSP certificate IDs.
2007-10-13Bunch of constifications.Andy Polyakov
2007-09-26Support for certificate status TLS extension.Dr. Stephen Henson
2007-08-12Fix warnings.Dr. Stephen Henson
2007-06-07Finish gcc 4.2 changes.Dr. Stephen Henson
2006-11-30Update dependencies.Dr. Stephen Henson
2006-11-21Update from 0.9.8 stable. Eliminate duplicate error codes.Dr. Stephen Henson
2006-11-13Don't assume requestorName is present for signed requests. ASN1 OCSP moduleDr. Stephen Henson
fix: certs field is OPTIONAL.
2006-11-13OCSP library tidy. Use extension to encode OCSP extensions instead of doingDr. Stephen Henson
it manually. Make OCSP_CERTID_dup() a real function instead of a macro.
2006-07-17WIN32 fixes signed/unsigned issues and slightly socket semantics.Dr. Stephen Henson
2006-07-17Fix various error codes to match functions.Dr. Stephen Henson
2006-07-17New non-blocking OCSP functionality.Dr. Stephen Henson
2005-07-26improved error checking and some fixesNils Larsch
PR: 1170 Submitted by: Yair Elharrar Reviewed and edited by: Nils Larsch
2005-05-16Further BUILDENV refinement, further fool-proofing of Makefiles andAndy Polyakov
[most importantly] put back dependencies accidentaly eliminated in check-in #13342.
2005-05-15Fool-proofing MakefilesAndy Polyakov
2005-05-12Some C compilers produce warnings or compilation errors if an attemptDr. Stephen Henson
is made to directly cast a function of one type to what it considers and incompatible type. In particular gcc 3.4.2. Add new openssl_fcast macro to place functions into a form where the compiler will allow them to be cast. The current version achives this by casting to: void function(void).
2005-05-11Fix more error codes.Bodo Möller
(Also improve util/ck_errf.pl script, and occasionally fix source code formatting.)
2005-04-12Rebuild error codes.Dr. Stephen Henson
2005-04-11Add emacs cache files to .cvsignore.Richard Levitte
2005-03-31Consistency.Ben Laurie
2005-03-31Give everything prototypes (well, everything that's actually used).Ben Laurie
2005-03-30Blow away Makefile.ssl.Ben Laurie
2004-11-02Don't use $(EXHEADER) directly in for loops, as most shells will breakRichard Levitte
if $(EXHEADER) is empty. Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>
2004-05-17After the latest round of header-hacking, regenerate the dependencies inGeoff Thorpe
the Makefiles. NB: this commit is probably going to generate a huge posting and it is highly uninteresting to read.
2004-04-19make updateGeoff Thorpe
2004-03-04Typos.Dr. Stephen Henson
Reported by: Jose Castejon-Amenedo <Jose.Castejon-Amenedo@hp.com>
2004-03-01Avoid a memory leak in OCSP_parse_url().Richard Levitte
Notified by Paul Siegel <psiegel@corestreet.com>
2004-02-19Use an OCTET STRING for the encoding of an OCSP nonce value.Dr. Stephen Henson
The old raw format can't be handled by some implementations and updates to RFC2560 will make this mandatory.
2003-12-27Use sh explicitely to run point.shRichard Levitte
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-04-03Correct a lot of printing calls. Remove extra arguments...Richard Levitte
2003-03-14Don't give an error if response reason absent in OCSP HTTP.Dr. Stephen Henson
2003-01-16Armor against systems without ranlib...Lutz Jänicke
Submitted by: Thierry Lelegard <thierry.lelegard@canal-plus.fr> PR: 461
2002-12-29make updateRichard Levitte
2002-11-13Correct support for SunOS 4.1.3_U1.Richard Levitte
PR: 227
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie
2002-11-07Typo in OCSP ASN1 moduleDr. Stephen Henson
2002-10-09Use double dashes so makedepend doesn't misunderstand the flags weRichard Levitte
give it. For 0.9.7 and up, that means util/domd needs to remove those double dashes from the argument list when gcc is used to find the dependencies.
2002-08-09make updateBodo Möller
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-30 13:52:46 +0000