summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Collapse)Author
2005-05-16Further BUILDENV refinement, further fool-proofing of Makefiles andAndy Polyakov
[most importantly] put back dependencies accidentaly eliminated in check-in #13342.
2005-05-16ecc api cleanup; summary:Nils Larsch
- hide the EC_KEY structure definition in ec_lcl.c + add some functions to use/access the EC_KEY fields - change the way how method specific data (ecdsa/ecdh) is attached to a EC_KEY - add ECDSA_sign_ex and ECDSA_do_sign_ex functions with additional parameters for pre-computed values - rebuild libeay.num from 0.9.7
2005-05-15Fool-proofing MakefilesAndy Polyakov
2005-05-12Fix from stable branch.Dr. Stephen Henson
2005-05-12fix msg_callback() arguments for SSL 2.0 compatible client helloBodo Möller
(previous revision got this wrong)
2005-05-11Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabledBodo Möller
with the SSL_OP_NO_SSLv2 option.
2005-05-10use 'p' as conversion specifier for printf to avoid truncation ofNils Larsch
pointers on 64 bit platforms. Patch supplied by Daniel Gryniewicz via Mike Frysinger <vapier@gentoo.org>. PR: 1064
2005-05-10give EC_GROUP_new_by_nid a more meanigful name:Nils Larsch
EC_GROUP_new_by_nid -> EC_GROUP_new_by_curve_name
2005-05-09Update util/ck_errf.pl script, and have it run automaticallyBodo Möller
during "make errors" and thus during "make update". Fix lots of bugs that util/ck_errf.pl can detect automatically. Various others of these are still left to fix; that's why "make update" will complain loudly when run now.
2005-05-08give EC_GROUP_*_nid functions a more meaningful nameNils Larsch
EC_GROUP_get_nid -> EC_GROUP_get_curve_name EC_GROUP_set_nid -> EC_GROUP_set_curve_name
2005-05-03backport fix from the stable branchNils Larsch
2005-04-29check return value of RAND_pseudo_bytes; backport from the stable branchNils Larsch
2005-04-27Lots of Win32 fixes for DTLS.Dr. Stephen Henson
1. "unsigned long long" isn't portable changed: to BN_ULLONG. 2. The LL prefix isn't allowed in VC++ but it isn't needed where it is used. 2. Avoid lots of compiler warnings about signed/unsigned mismatches. 3. Include new library directory pqueue in mk1mf build system. 4. Update symbols.
2005-04-26Fix various incorrect error function codes.Bodo Möller
("perl util/ck_errf.pl */*.c */*/*.c" still reports many more.)
2005-04-26remove some functions from exported headersBodo Möller
2005-04-26make updateBodo Möller
2005-04-26fix SSLerr stuff for DTLS1 code;Bodo Möller
move some functions from exported header <openssl/dtl1.h> into "ssl_locl.h"; fix silly indentation (a TAB is *not* always 4 spaces)
2005-04-26Fixes for signed/unsigned warnings and shadows.Dr. Stephen Henson
2005-04-26Add DTLS support.Ben Laurie
2005-04-23change prototype of the ecdh KDF: make input parameter const and the outlen ↵Nils Larsch
argument more flexible
2005-04-20Make kerberos ciphersuite code compile again.Dr. Stephen Henson
Avoid more shadow warnings.
2005-04-13More cover-ups, removing OPENSSL_GLOBAL/EXTERNS. We can remove more...Andy Polyakov
2005-04-12Rebuild error codes.Dr. Stephen Henson
2005-04-11Add emacs cache files to .cvsignore.Richard Levitte
2005-04-09Make kerberos ciphersuite code work with newer header filesDr. Stephen Henson
2005-04-09Added restrictions on the use of proxy certificates, as they may poseRichard Levitte
a security threat on unexpecting applications. Document and test.
2005-04-08add support for DER encoded private keys to SSL_CTX_use_PrivateKey_file()Nils Larsch
and SSL_use_PrivateKey_file() PR: 1035 Submitted by: Walter Goulet Reviewed by: Nils Larsch
2005-04-07get rid of very buggy and very imcomplete DH cert supportNils Larsch
Reviewed by: Bodo Moeller
2005-04-01really clear the error queue hereNils Larsch
PR: 860
2005-04-01use SSL3_VERSION_MAJOR instead of SSL3_VERSION etc.Nils Larsch
PR: 658
2005-03-31Give everything prototypes (well, everything that's actually used).Ben Laurie
2005-03-30Blow away Makefile.ssl.Ben Laurie
2005-03-30Constification.Ben Laurie
2005-03-22Ensure (SSL_RANDOM_BYTES - 4) of pseudo random data is used for server andDr. Stephen Henson
client random values.
2005-03-20some const fixesNils Larsch
2005-01-19Apparently, at least with my VMS C environment, defining _XOPEN_SOURCERichard Levitte
gets _POSIX_C_SOURC and _ANSI_C_SOURCE defined, which stops u_int from being defined, and that breaks havock into the rest of the standard headers... *sigh*
2005-01-18Small thing. It seems like we have to defined _XOPEN_SOURCE to getRichard Levitte
isascii() on DEC/Compaq/HP C for VMS.
2005-01-17Changes concering RFC 3820 (proxy certificates) integration:Richard Levitte
- Enforce that there should be no policy settings when the language is one of id-ppl-independent or id-ppl-inheritAll. - Add functionality to ssltest.c so that it can process proxy rights and check that they are set correctly. Rights consist of ASCII letters, and the condition is a boolean expression that includes letters, parenthesis, &, | and ^. - Change the proxy certificate configurations so they get proxy rights that are understood by ssltest.c. - Add a script that tests proxy certificates with SSL operations. Other changes: - Change the copyright end year in mkerr.pl. - make update.
2005-01-12Small typo, `mask' got the same value ORed to it twice instead ofRichard Levitte
`mask' and `emask' getting that operation done once each. Patch supplied by Nils Larsch <nils.larsch@cybertrust.com>
2004-11-02Don't use $(EXHEADER) directly in for loops, as most shells will breakRichard Levitte
if $(EXHEADER) is empty. Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>
2004-10-25Fix race condition when SSL ciphers are initialized.Dr. Stephen Henson
2004-09-06New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson
This tidies up verify parameters and adds support for integrated policy checking. Add support for policy related command line options. Currently only in smime application. WARNING: experimental code subject to change.
2004-07-10make updateRichard Levitte
2004-07-10Use the new directory reading functions.Richard Levitte
2004-05-20Move some COMP functions to be inside the #ifndef OPENSSL_NO_COMPRichard Levitte
wrapping preprocessor directive. This also removes a duplicate declaration.
2004-05-17After the latest round of header-hacking, regenerate the dependencies inGeoff Thorpe
the Makefiles. NB: this commit is probably going to generate a huge posting and it is highly uninteresting to read.
2004-05-17Deprecate quite a few recursive includes from the ssl.h API header andGeoff Thorpe
remove some unnecessary includes from the internal header ssl_locl.h. This then requires adding includes for bn.h in four C files.
2004-05-15Fixes so alerts are sent properly in s3_pkt.cDr. Stephen Henson
PR: 851
2004-04-26Allow RSA key-generation to specify an arbitrary public exponent. JelteGeoff Thorpe
proposed the change and submitted the patch, I jiggled it slightly and adjusted the other parts of openssl that were affected. PR: 867 Submitted by: Jelte Jansen Reviewed by: Geoff Thorpe
2004-04-19make updateGeoff Thorpe