summaryrefslogtreecommitdiffstats
path: root/ssl
AgeCommit message (Collapse)Author
2005-12-05Avoid warnings on VC++ 2005.Dr. Stephen Henson
2005-11-15disable some invalid ciphersuitesBodo Möller
2005-10-26Add fixes for CAN-2005-2969.Bodo Möller
(This were in 0.9.7-stable and 0.9.8-stable, but not in HEAD so far.)
2005-10-08Avoid warning on Win32.Dr. Stephen Henson
2005-10-08New option SSL_OP_NO_COMP to disable compression. New ctrls to setDr. Stephen Henson
maximum send fragment size. Allocate I/O buffers accordingly.
2005-10-02Make OPENSSL_NO_COMP work under Win32.Dr. Stephen Henson
2005-10-01Fix compilation without OPENSSL_NO_COMP :-)Dr. Stephen Henson
2005-09-30Make OPENSSL_NO_COMP compile again.Dr. Stephen Henson
2005-09-21128 bit AES ciphersuites should be classified as HIGH.Dr. Stephen Henson
2005-08-28fix warnings when building openssl with the following compiler options:Nils Larsch
-Wmissing-prototypes -Wcomment -Wformat -Wimplicit -Wmain -Wmultichar -Wswitch -Wshadow -Wtrigraphs -Werror -Wchar-subscripts -Wstrict-prototypes -Wreturn-type -Wpointer-arith -W -Wunused -Wno-unused-parameter -Wuninitialized
2005-08-27Fix warnings.Ben Laurie
2005-08-25Keep cipher lists sorted in the source instead of sorting them atNils Larsch
runtime, thus removing the need for a lock. Add a test to ssltest to verify that the cipher lists are sorted.
2005-08-21initialize cipher/digest methods table in SSL_library_init() and hence ↵Nils Larsch
remove the need for a lock
2005-08-14Let the TLSv1_method() etc. functions return a const SSL_METHODNils Larsch
pointer and make the SSL_METHOD parameter in SSL_CTX_new, SSL_CTX_set_ssl_version and SSL_set_ssl_method const.
2005-08-08a ssl object needs it's own instance of a ecdh key; remove obsolete commentNils Larsch
2005-08-08remove unused internal foo_base_method functionsNils Larsch
2005-08-05Initialize SSL_METHOD structures at compile time. This removes the needDr. Stephen Henson
for locking code. The CRYPTO_LOCK_SSL_METHOD lock is now no longer used.
2005-08-03WCE update, mostly typos.Andy Polyakov
2005-07-26improved error checking and some fixesNils Larsch
PR: 1170 Submitted by: Yair Elharrar Reviewed and edited by: Nils Larsch
2005-07-26bytes_to_long_long isn't used anywhere any more, so let's remove itRichard Levitte
entirely.
2005-07-26I'm reversing this change, as it seems the error is somewhere else.Richard Levitte
2005-07-26Fix signed/unsigned warnings.Geoff Thorpe
2005-07-26Fix PEDANTIC compilation, using the same trick as elsewhere.Geoff Thorpe
2005-07-26Fix 64-bit compilation when PQ_64BIT_IS_INTEGER isn't defined.Geoff Thorpe
2005-07-22Fix some signed/unsigned warnings.Geoff Thorpe
2005-07-16makeNils Larsch
./configure no-deprecated [no-dsa] [no-dh] [no-ec] [no-rsa] make depend all test work again PR: 1159
2005-06-29Brought forward from 0.9.8 - 64 bit warning fixes and fussy compiler fixes.Ben Laurie
2005-06-27Eliminate dependency on UNICODE macro.Andy Polyakov
2005-06-23DCC doesn't like argument names in returned function pointers.Richard Levitte
PR: 1122
2005-06-20Fix typo in ssl/d1_pkt.c.Andy Polyakov
2005-06-20Handle wrap-arounds and revive missing assignment.Andy Polyakov
2005-06-16Do not undefine _XOPEN_SOURCE. This is currently experimental, andRichard Levitte
will be firmed up as soon as it's been verified not to break anything.
2005-06-10- let SSL_CTX_set_cipher_list and SSL_set_cipher_list return anNils Larsch
error if the cipher list is empty - fix last commit in ssl_create_cipher_list - clean up ssl_create_cipher_list
2005-06-08use "=" instead of "|=", fix typoNils Larsch
2005-06-08ssl_create_cipher_list should return an error if no cipher could beNils Larsch
collected (see SSL_CTX_set_cipher_list manpage). Fix handling of "cipher1+cipher2" expressions in ssl_cipher_process_rulestr. PR: 836 + 1005
2005-06-07"Liberate" dtls from BN dependency. Fix bug in replay/update.Andy Polyakov
2005-06-06Further change pq_compat.h to generate the flag macros PQ_64BIT_IS_INTEGERRichard Levitte
and PQ_64BIT_IS_BIGNUM with the values 0 (for false) and 1 (for true), depending on which is true. Use those flags everywhere else to provide the correct implementation for handling certain operations in q PQ_64BIT.
2005-06-04From 0.9.8-stable:Richard Levitte
handshake_write_seq is an unsigned short, so treat it like one
2005-06-01clear error queue on success and return NULL if no cert could be readNils Larsch
PR: 1088
2005-05-31Synchronise more with the Unix build.Richard Levitte
2005-05-30pqueue and dtls uses 64-bit values. Unfortunately, OpenSSL doesn'tRichard Levitte
have a uniform representation for those over all architectures, so a little bit of hackery is needed. Contributed by nagendra modadugu <nagendra@cs.stanford.edu>
2005-05-29We have some source with \r\n as line ends. DEC C informs about that,Richard Levitte
and I really can't be bothered...
2005-05-21When _XOPEN_SOURCE is defined, make sure it's defined to 500. Required inRichard Levitte
http://www.opengroup.org/onlinepubs/007908799/xsh/compilation.html. Notified by David Wolfe <dwolfe5272@yahoo.com>
2005-05-16Further BUILDENV refinement, further fool-proofing of Makefiles andAndy Polyakov
[most importantly] put back dependencies accidentaly eliminated in check-in #13342.
2005-05-16ecc api cleanup; summary:Nils Larsch
- hide the EC_KEY structure definition in ec_lcl.c + add some functions to use/access the EC_KEY fields - change the way how method specific data (ecdsa/ecdh) is attached to a EC_KEY - add ECDSA_sign_ex and ECDSA_do_sign_ex functions with additional parameters for pre-computed values - rebuild libeay.num from 0.9.7
2005-05-15Fool-proofing MakefilesAndy Polyakov
2005-05-12Fix from stable branch.Dr. Stephen Henson
2005-05-12fix msg_callback() arguments for SSL 2.0 compatible client helloBodo Möller
(previous revision got this wrong)
2005-05-11Don't use the SSL 2.0 Client Hello format if SSL 2.0 is disabledBodo Möller
with the SSL_OP_NO_SSLv2 option.
2005-05-10use 'p' as conversion specifier for printf to avoid truncation ofNils Larsch
pointers on 64 bit platforms. Patch supplied by Daniel Gryniewicz via Mike Frysinger <vapier@gentoo.org>. PR: 1064