openssl - Mirror of https://github.com/openssl/openssl

Age	Commit message (Collapse)	Author
2023-08-25	Changed the default value of the "ess_cert_id_alg" option	olszomal
	This is used to calculate the TSA's public key certificate identifier. The default algorithm is changed from sha1 to sha256. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/21794)
2021-08-04	Add config_diagnostics to our configuration files.	Pauli
	The change to a more configuration based approach to enable FIPS mode operation highlights a shortcoming in the default should do something approach we've taken for bad configuration files. Currently, a bad configuration file will be automatically loaded and once the badness is detected, it will silently stop processing the configuration and continue normal operations. This is good for remote servers, allowing changes to be made without bricking things. It's bad when a user thinks they've configured what they want but got something wrong and it still appears to work. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> (Merged from https://github.com/openssl/openssl/pull/16171)
2021-05-27	TEST: Prefer using precomputed RSA and DH keys for more efficient tests	Dr. David von Oheimb
	Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <pauli@openssl.org> (Merged from https://github.com/openssl/openssl/pull/13715)
2019-11-24	Remove RANDFILE settings from configuration files	Dr. Matthias St. Pierre
	OpenSSL 1.1.1 introduced a new CSPRNG with an improved seeding mechanism, which makes it dispensable to define a RANDFILE for saving and restoring randomness. This commit removes the RANDFILE declarations from our own configuration files and adds documentation that this option is not needed anymore and retained mainly for compatibility reasons. Fixes #10433 Reviewed-by: Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/10436)
2017-05-03	Added support for ESSCertIDv2	Marek Klein
	Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/771)
2015-11-20	Use better defaults for TSA.	Dr. Stephen Henson
	Use SHA256 for TSA and setted permitted digests to a sensible value. Based on PR#4141 Reviewed-by: Matt Caswell <matt@openssl.org>
2015-11-20	Add support for signer_digest option in TS.	Dr. Stephen Henson
	Based on PR#2145 Reviewed-by: Matt Caswell <matt@openssl.org>
2015-04-20	Use 2K RSA and SHA256 in tests	Rich Salz
	Reviewed-by: Andy Polyakov <appro@openssl.org>
2013-09-05	misspellings fixes by https://github.com/vlajos/misspell_fixer	Veres Lajos

2010-01-25	There's really no need to use $ENV::HOME	Richard Levitte

2006-11-07	Make TSA tests use the noprompt mode of utilities rather than piping	Dr. Stephen Henson
	the result into interative utilities.
2006-02-12	time stamp Makefile, test files	Ulf Möller
	Submitted by: Zoltan Glozik <zglozik@opentsa.org>