summaryrefslogtreecommitdiffstats
path: root/crypto/x509
AgeCommit message (Collapse)Author
2002-10-09Use double dashes so makedepend doesn't misunderstand the flags weRichard Levitte
give it. For 0.9.7 and up, that means util/domd needs to remove those double dashes from the argument list when gcc is used to find the dependencies.
2002-10-03Various enhancements to PKCS#12 code, newDr. Stephen Henson
medium level API, improved PKCS12_create and additional functionality in pkcs12 utility.
2002-08-22Make -nameopt work in req and add support for -reqoptDr. Stephen Henson
2002-08-12get rid of EVP_PKEY_ECDSA (now we have EVP_PKEY_EC instead)Bodo Möller
Submitted by: Nils Larsch
2002-08-09make updateBodo Möller
2002-08-09Add ECDH support.Bodo Möller
Additional changes: - use EC_GROUP_get_degree() in apps/req.c - add ECDSA and ECDH to apps/speed.c - adds support for EC curves over binary fields to ECDSA - new function EC_KEY_up_ref() in crypto/ec/ec_key.c - reorganize crypto/ecdsa/ecdsatest.c - add engine support for ECDH - fix a few bugs in ECDSA engine support Submitted by: Douglas Stebila <douglas.stebila@sun.com>
2002-08-07use a generic EC_KEY structure (EC keys are not ECDSA specific)Bodo Möller
Submitted by: Nils Larsch
2002-07-30"make update"Lutz Jänicke
2002-07-14Replace 'ecdsaparam' commandline utility by 'ecparam'Bodo Möller
(the same keys can be used for ECC schemes other than ECDSA) and add some new options. Similarly, use string "EC PARAMETERS" instead of "ECDSA PARAMETERS" in 'PEM' format. Fix ec_asn1.c (take into account the desired conversion form). 'make update'. Submitted by: Nils Larsch
2002-06-27Pass CFLAG to dependency makers, so non-standard system include paths areRichard Levitte
handled properly. Part of PR 75
2002-02-28Increase internal security when using strncpy, by making sure the resulting ↵Richard Levitte
string is NUL-terminated
2002-02-23Updates from stable branch.Dr. Stephen Henson
2002-02-13ECDSA supportBodo Möller
Submitted by: Nils Larsch <nla@trustcenter.de>
2001-12-17remove redundant ERR_load_... declarationsBodo Möller
2001-10-21Reject certificates with unhandled critical extensions.Dr. Stephen Henson
2001-10-20Typo.Dr. Stephen Henson
2001-10-16Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()Dr. Stephen Henson
with existing code. Modify library to use digest *_ex() functions.
2001-10-08Small documentation fixes (Howard Lum <howard@pumpkin.canada.sun.com>)Lutz Jänicke
2001-10-04'make update'Richard Levitte
2001-10-04Because there's chances we clash with the system's types.h, rename ourRichard Levitte
types.h to ossl_typ.h.
2001-09-01Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe
See the commit log message for that for more information. NB: X509_STORE_CTX's use of "ex_data" support was actually misimplemented (initialisation by "memset" won't/can't/doesn't work). This fixes that but requires that X509_STORE_CTX_init() be able to handle errors - so its prototype has been changed to return 'int' rather than 'void'. All uses of that function throughout the source code have been tracked down and adjusted.
2001-08-18Add first cut symmetric crypto support.Ben Laurie
2001-08-17Add CRL utility functions to allow CRLs to beDr. Stephen Henson
built up without accessing structures directly. Update ca.c to use new functions. Fix ca.c so it now build CRLs correctly again.
2001-08-12The indexes returned by ***_get_ex_new_index() functions are used whenGeoff Thorpe
setting stack (actually, array) values in ex_data. So only increment the global counters if the underlying CRYPTO_get_ex_new_index() call succeeds. This change doesn't make "ex_data" right (see the comment at the head of ex_data.c to know why), but at least makes the source code marginally less frustrating.
2001-08-06More typedef'd struct names as search targetsBodo Möller
2001-08-06Reinsert typedef'ed names for structs to help those trying to read theBodo Möller
sourcecode (including fgrep)
2001-08-05Start to reduce some of the header bloat.Ben Laurie
2001-07-31make updateRichard Levitte
2001-07-30Really add the EVP and all of the DES changes.Ben Laurie
2001-07-30Don't miss files...Lutz Jänicke
2001-07-30Fix inconsistent behaviour with respect to verify_callback handling.Lutz Jänicke
2001-07-27More linker bloat reorganisation:Dr. Stephen Henson
Split private key PEM and normal PEM handling. Private key handling needs to link in stuff like PKCS#8. Relocate the ASN1 *_dup() functions, to the relevant ASN1 modules using new macro IMPLEMENT_ASN1_DUP_FUNCTION. Previously these were all in crypto/x509/x_all.c along with every ASN1 BIO/fp function which linked in *every* ASN1 function if a single dup was used. Move the authority key id ASN1 structure to a separate file. This is used in the X509 routines and its previous location linked in all the v3 extension code. Also move ASN1_tag2bit to avoid linking in a_bytes.c which is now largely obsolete. So far under Linux stripped binary with single PEM_read_X509 is now 238K compared to 380K before these changes.
2001-06-26Handle empty X509_NAME in printing routines.Dr. Stephen Henson
2001-06-19Change all calls to low level digest routines in the library andDr. Stephen Henson
applications to use EVP. Add missing calls to HMAC_cleanup() and don't assume HMAC_CTX can be copied using memcpy(). Note: this is almost identical to the patch submitted to openssl-dev by Verdon Walker <VWalker@novell.com> except some redundant EVP_add_digest_()/EVP_cleanup() calls were removed and some changes made to avoid compiler warnings.
2001-06-11Add support for MS CSP Name PKCS#12 attribute.Dr. Stephen Henson
2001-05-24Add missing variable length cipher flag for Blowfish.Dr. Stephen Henson
Only use trust settings if either trust or reject settings are present, otherwise use compatibility mode. This stops root CAs being rejected if they have alias of keyid set.
2001-05-12Change Win32 to use EXPORT_VAR_AS_FN.Dr. Stephen Henson
Fix OPENSSL_IMPLEMENT_GLOBAL. Allow Win32 to use EXPORT_VAR_AS_FN in mkdef.pl make update.
2001-05-10Purpose and trust setting functions for X509_STORE.Dr. Stephen Henson
Tidy existing code.
2001-05-09Allow various X509_STORE_CTX properties to beDr. Stephen Henson
inherited from X509_STORE. Add CRL checking options to other applications.
2001-05-07Initial CRL based revocation checking.Dr. Stephen Henson
2001-03-15Overhaul the display of certificate details inDr. Stephen Henson
the 'ca' utility. This can now be extensively customised in the configuration file and handles multibyte strings and extensions properly. This is required when extensions copying from certificate requests is supported: the user must be able to view the extensions before allowing a certificate to be issued.
2001-03-09Instead of telling both 'make' and the user that ranlibBodo Möller
errors can be tolerated, hide the error from 'make'. This gives shorter output both if ranlib fails and if it works.
2001-02-26Enhance OCSP_request_verify() so it finds the signers certificateDr. Stephen Henson
properly and supports several flags.
2001-02-26make updateRichard Levitte
Note that all *_it variables are suddenly non-existant according to libeay.num. This is a bug that will be corrected. Please be patient.
2001-02-23Initial support for ASN1_ITEM_FUNCTION option toDr. Stephen Henson
change the way ASN1 modules are exported. Still needs a bit of work for example the hack which a dummy function prototype to avoid compilers warning about multiple ;s.
2001-02-22e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte
and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
2001-02-19Make all configuration macros available for application by makingRichard Levitte
sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
2001-02-12Work around for libsafe "error".Dr. Stephen Henson
2001-02-04Make depend.Ben Laurie
2001-02-02Various function for commmon operations.Dr. Stephen Henson
generated by cgit v1.2.3 (git 2.25.1) at 2024-09-13 06:06:53 +0000