summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Collapse)Author
2002-07-14Replace 'ecdsaparam' commandline utility by 'ecparam'Bodo Möller
(the same keys can be used for ECC schemes other than ECDSA) and add some new options. Similarly, use string "EC PARAMETERS" instead of "ECDSA PARAMETERS" in 'PEM' format. Fix ec_asn1.c (take into account the desired conversion form). 'make update'. Submitted by: Nils Larsch
2002-07-10Reorder inclusion of header files:Lutz Jänicke
des_old.h redefines crypt: #define crypt(b,s)\ DES_crypt((b),(s)) This scheme leads to failure, if header files with the OS's true definition of crypt() are processed _after_ des_old.h was processed. This is e.g. the case on HP-UX with unistd.h. As evp.h now again includes des.h (which includes des_old.h), this problem only came up after this modification. Solution: move header files (indirectly) including e_os.h before the header files (indirectly) including evp.h. Submitted by: Reviewed by: PR:
2002-07-10Ciphers with NULL encryption were not properly handled because they wereLutz Jänicke
not covered by the strength bit mask. Submitted by: Reviewed by: PR: 130
2002-07-09emtpy fragments are not necessary for SSL_eNULLBodo Möller
(but noone uses it anyway) fix t1_enc.c: use OPENSSL_NO_RC4, not NO_RC4
2002-07-04AES cipher suites are now official (RFC3268)Bodo Möller
2002-06-27Pass CFLAG to dependency makers, so non-standard system include paths areRichard Levitte
handled properly. Part of PR 75
2002-06-14New option SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS for disabling CBCBodo Möller
vulnerability workaround (included in SSL_OP_ALL). PR: #90
2002-06-06Merge from 0.9.7-stable.Richard Levitte
2002-05-23Recover from errorsRichard Levitte
2002-05-22Allow the use of the TCP/IP stack keyword TCPIP and NONERichard Levitte
2002-05-07Fix ciphersuite list to enforce low priority for RC4.Bodo Möller
2002-05-07ensure that, for each strength, RC4 ciphers have least preferenceBodo Möller
in the default ciphersuite list
2002-05-07refer to latest draft for AES ciphersuitesBodo Möller
2002-05-06fix warningBodo Möller
2002-05-05disable AES ciphersuites unless explicitly requestedBodo Möller
2002-05-05fix castsBodo Möller
2002-04-29undo nonsense patch (r *is* signed or we have signedness mismatches elsewhere)Bodo Möller
2002-04-29Fix unsigned vs. signed clashRichard Levitte
2002-04-29Synchronise with 0.9.7-stable.Richard Levitte
2002-04-29Synchronise with 0.9.7-stable.Richard Levitte
2002-04-20Signedness mismatch.Richard Levitte
Notified by Bernd Matthes <bernd.matthes@gemplus.com>
2002-04-18Make sure the opened directory is closed on exit.Richard Levitte
Notified by Lorinczy Zsigmond <lzsiga@mail.ahiv.hu>
2002-04-14fix length field we create when converting SSL 2.0 format into SSL 3.0/TLS ↵Bodo Möller
1.0 format (the bug was introduced with message callback support)
2002-04-13Implement known-IV countermeasure.Bodo Möller
Fix length checks in ssl3_get_client_hello(). Use s->s3->in_read_app_data differently to fix ssl3_read_internal().
2002-03-19Map new X509 verification errors to alert codes (Tom Wu <tom@arcot.com>).Lutz Jänicke
2002-03-19Initialize ciph_ctx in kssl.cDr. Stephen Henson
2002-03-15fix ssl3_pendingBodo Möller
2002-03-14Add missing strength entries.Lutz Jänicke
2002-03-14Initialize cipher context in KRB5Dr. Stephen Henson
("D. Russell" <russelld@aol.net>) Allow HMAC functions to use an alternative ENGINE.
2002-03-14use BIO_nwrite() more properly to demonstrate the general idea ofBodo Möller
BIO_nwrite0/BIO_nwrite (the previous code was OK for BIO pairs but not in general)
2002-03-13Undo previous patch: avoid warnings by #undef'ingDr. Stephen Henson
duplicate definitions. Suggested by "Kenneth R. Robinette" <support@securenetterm.com>
2002-03-12Fix Kerberos warnings with VC++.Dr. Stephen Henson
2002-03-12Fix ASN1 additions for KRB5Dr. Stephen Henson
2002-03-12Fix various warnings when compiling with KRB5 code.Dr. Stephen Henson
2002-02-28use ERR_peek_last_error() instead of ERR_peek_error()Bodo Möller
2002-02-28Increase internal security when using strncpy, by making sure the resulting ↵Richard Levitte
string is NUL-terminated
2002-02-28Add 'void *' argument to app_verify_callback.Bodo Möller
Submitted by: D. K. Smetters <smetters@parc.xerox.com> Reviewed by: Bodo Moeller
2002-02-27Fix the fix (Yoram Zahavi)...Lutz Jänicke
2002-02-26Make sure to remove bad sessions in SSL_clear() (found by Yoram Zahavi).Lutz Jänicke
2002-02-22Fix for AIX.Dr. Stephen Henson
Submitted by Dawn Whiteside <dwhitesi@tiercel.uwaterloo.ca>
2002-02-13ECDSA supportBodo Möller
Submitted by: Nils Larsch <nla@trustcenter.de>
2002-02-10Make removal from session cache more robust.Lutz Jänicke
2002-02-08Do not store unneeded data.Lutz Jänicke
2002-01-14Bugfix: In ssl3_accept, don't use a local variable 'got_new_session'Bodo Möller
to indicate that a real handshake is taking place (the value will be lost during multiple invocations). Set s->new_session to 2 instead.
2002-01-14Return -1 from ssl3_get_server_done (ssl3/s3_clnt.c) ifBodo Möller
the SSL_R_LENGTH_MISMATCH error is detected.
2002-01-12Prototype info function.Ben Laurie
2002-01-12Add client_cert_cb prototype.Ben Laurie
2001-12-28ssl3_read_bytes bug fixUlf Möller
Submitted by: D P Chang <dpc@qualys.com> Reviewed by: Bodo
2001-12-17remove redundant ERR_load_... declarationsBodo Möller
2001-12-09Improve back compatibility.Ben Laurie
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-27 13:07:23 +0000