summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Collapse)Author
1999-04-27Undo.Ulf Möller
1999-04-27Message digest stuff.Ulf Möller
1999-04-27New Configure option no-<cipher> (rsa, idea, rc5, ...).Ulf Möller
1999-04-27Add missing DEPFLAG.Ulf Möller
1999-04-26Remove NOPROTO definitions and error code comments.Ulf Möller
1999-04-25Various header consistency fixes.Dr. Stephen Henson
1999-04-24Fix header files so that any one can be included first.Bodo Möller
Submitted by: Reviewed by: PR:
1999-04-24Change the command line options of mkerr.pl so -static is now default andDr. Stephen Henson
a -write option is needed to actually change anything. Second attempt at getting rid of ERR, ERRC definitions: it might even work this time :-)
1999-04-24Restore ERRC definitions that are needed to compile the library.Bodo Möller
Submitted by: Reviewed by: PR: Submitted by: Reviewed by: PR:
1999-04-24Delete the unnecessary ERR and ERRC lines in makefiles, add some functionalityDr. Stephen Henson
to error code script: it can now find untranslatable function codes (usually because the function is static and not defined in a header: occasionally because of a typo...) and unreferenced function and reason codes. To see this try: perl util/mkerr.pl -recurse -debug Also fixed some typos in crypto/pkcs12 that this found :-) Also tidy up some error calls that had to be all on one line: the old error script couldn't find codes unless the call was all on one line.
1999-04-24Complete rewrite of the error code generation script. It now runs as a singleDr. Stephen Henson
script, translates function codes better and doesn't need the K&R function prototypes to work (NB. the K&R prototypes can't be wiped just yet: they are still needed by the DEF generator...). I also ran the script with the -rewrite option to update all the header and source files.
1999-04-23"make depend"Bodo Möller
Submitted by: Reviewed by: PR:
1999-04-23Change #include filenames from <foo.h> to <openssl.h>.Bodo Möller
Submitted by: Reviewed by: PR:
1999-04-23Work with -pedantic!Ben Laurie
1999-04-22Don't return 0 from ssl2_read when a packet with empty payload is received.Bodo Möller
Submitted by: Reviewed by: PR:
1999-04-22Fixed some race conditions.Bodo Möller
Submitted by: Reviewed by: PR:
1999-04-21Fix DES export ciphersuites.Ben Laurie
1999-04-19const correctness.Ben Laurie
1999-04-19Change functions to ANSI C.Ulf Möller
1999-04-17Massive constification.Ben Laurie
1999-04-16Fix some warnings. Contributed by Anonymous.Ben Laurie
1999-04-15Add new experimental ciphersuites. Bring naming into line with RFC.Ben Laurie
1999-04-15Just use an ANSI declaration, instead.Ben Laurie
1999-04-14Make Windows compilers happy.Bodo Möller
Submitted by:Tom Titchener Reviewed by: PR:
1999-04-14Typo.Ben Laurie
1999-04-12Add type-safe STACKs and SETs.Ben Laurie
1999-04-09Tiny comment to improve code comprehensibility.Bodo Möller
Submitted by: Reviewed by: PR:
1999-04-01New Makefile variables $(RANLIB) and $(PERL).Ulf Möller
1999-03-31New option "-showcerts" for s_clientBodo Möller
Slight cleanup in ssl/
1999-03-29Remove deleted PKCS#12 functions from pkcs12.h, get rid of object creationDr. Stephen Henson
kludge, remove CRs from ssl_ciph.c and update Win32 functions for PKCS#12 code. It might compile under Win32 now ...
1999-03-22function names recently changed - consistency.Ralf S. Engelschall
1999-03-22Fix security hole.Ben Laurie
1999-03-14Remove some references which called malloc and free instead of Malloc and Free.Dr. Stephen Henson
1999-03-12Delete NULL ciphers from 'ALL' in the cipher list aliases. This means thatDr. Stephen Henson
NULL ciphers specifically have to be enabled with e.g. "DEFAULT:eNULL". This prevents cipher lists from inadvertantly having NULL ciphers at the top of their list (e.g. the default ones) because they didn't have to be taken into account before.
1999-03-06Disable new TLS1 ciphersuites.Ben Laurie
1999-03-06Fix names of cert stack functions.Ben Laurie
1999-03-06Put the dependencies back.Ben Laurie
1999-03-06Move the SSL_CTX_xxx defines at the top of ssl.h to the location of otherRalf S. Engelschall
SSL_CTX_xxx defines. What was the reason to move them to the top, even before the copyright and #ifdef HEADER_SSL_H? Hmmm... when there was and still is a good reason feel free to reverse this patch, but please document why it is needed this way.
1999-03-06Fix export ciphersuites, again.Ben Laurie
1999-03-06General source tree makefile cleanups: Made `making xxx in yyy...' displayRalf S. Engelschall
consistent in the source tree and replaced `/bin/rm' by `rm'. Additonally cleaned up the `make links' target: Remove unnecessary semicolons, subsequent redundant removes, inline point.sh into mklink.sh to speed processing and no longer clutter the display with confusing stuff. Instead only the actually done links are displayed.
1999-03-06Permit null ciphers.Ben Laurie
1999-03-04Remove confusing variables in function signatures in filesRalf S. Engelschall
ssl/ssl_lib.c and ssl/ssl.h. At least the double ctx-variable confused some compilers. Submitted by: Lennart Bong <lob@kulthea.stacken.kth.se> Reviewed by: Ralf S. Engelschall
1999-03-03Fix the Win32 compile environment and add various changes so it will now compileDr. Stephen Henson
under Win32 (9X and NT) again. Note: some signed/unsigned changes recently checked in were killing the Win32 compile.
1999-02-28Add functions to add certs to stacks, used for CA file/path stuff in servers.Ben Laurie
1999-02-28More truth in declarations.Ben Laurie
1999-02-28Experiment with doxygen documentation.Ben Laurie
1999-02-26Ops, the logic of the second argument has to be coupled with the != test toRalf S. Engelschall
work correctly for the SSL_CTX_xxx situations, too. Now "make test" passes again fine.
1999-02-25Add a bunch of SSL_xxx() functions for configuring the temporary RSA and DHRalf S. Engelschall
private keys and/or callback functions which directly correspond to their SSL_CTX_xxx() counterparts but work on a per-connection basis. This is needed for applications which have to configure certificates on a per-connection basis (e.g. Apache+mod_ssl) instead of a per-context basis (e.g. s_server). For the RSA certificate situation is makes no difference, but for the DSA certificate situation this fixes the "no shared cipher" problem where the OpenSSL cipher selection procedure failed because the temporary keys were not overtaken from the context and the API provided no way to reconfigure them. The new functions now let applications reconfigure the stuff and they are in detail: SSL_need_tmp_RSA, SSL_set_tmp_rsa, SSL_set_tmp_dh, SSL_set_tmp_rsa_callback and SSL_set_tmp_dh_callback. Additionally a new non-public-API function ssl_cert_instantiate() is used as a helper function and also to reduce code redundancy inside ssl_rsa.c. Submitted by: Ralf S. Engelschall Reviewed by: Ben Laurie
1999-02-25Fix the cipher decision scheme for export ciphers: the export bits are *not*Ralf S. Engelschall
within SSL_MKEY_MASK or SSL_AUTH_MASK, they are within SSL_EXP_MASK. So, the original variable has to be used instead of the already masked variable. Submitted by: Richard Levitte <levitte@stacken.kth.se> Reviewed by: Ralf S. Engelschall
1999-02-22Various changes to make this stuff compile under Win32 and VC++ with andDr. Stephen Henson
without -debug option to mk1mf.pl. Change _export to is_export (_export is a reserved word under VC++). Add yucky function prototype function pointer casts. Sanitise the included files in crypto/x509v3. Also changed ssleay.exe target to openssl.exe