Geoff Thorpe
404f952aa3
Some more tweaks to ENGINE code.
...
ENGINE handler functions should take the ENGINE structure as a parameter -
this is because ENGINE structures can be copied, and like other
structure/method setups in OpenSSL, it should be possible for init(),
finish(), ctrl(), etc to adjust state inside the ENGINE structures rather
than globally. This commit includes the dependant changes in the ENGINE
implementations.
2001-04-18 03:57:05 +00:00
Geoff Thorpe
dcd87618ab
Some more tweaks to ENGINE code.
...
Previous changes permanently removed the commented-out old code for where
it was possible to create and use an ENGINE statically, and this code gets
rid of the ENGINE_FLAGS_MALLOCED flag that supported the distinction with
dynamically allocated ENGINEs. It also moves the area for ENGINE_FLAGS_***
values from engine_int.h to engine.h - because it should be possible to
declare ENGINEs just from declarations in exported headers.
2001-04-18 03:03:16 +00:00
Geoff Thorpe
d54bf14559
Some more tweaks to ENGINE code.
...
* Constify the get/set functions, and add some that functions were missing.
* Add a new 'ENGINE_cpy()' function that will produce a new ENGINE based
copied from an original (except for the references, ie. the new copy will
be like an ENGINE returned from 'ENGINE_new()' - a structural reference).
* Removed the "null parameter" checking in the get/set functions - it is
legitimate to set NULL values as a way of *changing* an ENGINE (ie.
removing a handler that previously existed). Also, passing a NULL pointer
for an ENGINE is obviously wrong for these functions, so don't bother
checking for it. The result is a number of error codes and strings could
be removed.
2001-04-18 02:01:36 +00:00
Geoff Thorpe
ea3a429efe
Structural references should never be decremented directly - so leave that
...
to ENGINE_free(). Also, remove "#if 0" code that has no useful future.
2001-04-18 01:07:28 +00:00
Geoff Thorpe
e3f1223fe4
This moves string constants out of vendor headers and into C files.
2001-04-18 00:43:23 +00:00
Geoff Thorpe
7ef6e3fe2f
'make update'
2001-04-17 23:53:58 +00:00
Lutz Jänicke
197322455d
Clarify request of client certificates. This is a FAQ.
2001-04-17 13:18:56 +00:00
Ben Laurie
4f19a0672b
Fix warning.
2001-04-16 03:00:57 +00:00
Lutz Jänicke
854e076df8
Constify (Jason Molenda <jason@molenda.com>)
2001-04-14 14:50:02 +00:00
Lutz Jänicke
cb2a0e1319
Missing link ("Greg Stark" <gstark@ethentica.com>)
2001-04-12 21:11:31 +00:00
Lutz Jänicke
638b0d4277
Fix wrong information with respect to CAs listed to the client
...
(follows from technical discussion with Amit Chopra <amitc@pspl.co.in>).
2001-04-12 16:02:34 +00:00
Bodo Möller
f2346808de
update so that changes going into the 0.9.6 tree can be logged
2001-04-12 12:42:20 +00:00
Bodo Möller
d7818facb9
undo previous change ...
2001-04-12 12:03:41 +00:00
Bodo Möller
bcf95a2183
update from 0.9.6a
2001-04-12 12:01:47 +00:00
Lutz Jänicke
f7181a9179
Typo (Jun-ichiro itojun Hagino <itojun@iijlab.net>)
2001-04-12 11:45:42 +00:00
Richard Levitte
9237ba8b66
Correct typo.
2001-04-11 14:14:54 +00:00
Richard Levitte
95874603b0
Add -keyform.
2001-04-11 14:11:55 +00:00
Richard Levitte
ed2e24d564
Show an example of moving the emailAddress object from the subkect DN
...
to subjectAltName when signing a certificate.
2001-04-11 13:04:20 +00:00
Richard Levitte
c9fd77e9dd
Make it possible to move the emailAddress object to the subjectAltName
...
extension instead of just copying it. That makes a certificate comply
even more with PKIX recommendations according to RFC 2459.
2001-04-11 12:55:06 +00:00
Bodo Möller
a9d2bc4902
Add information on 0.9.6a (in a form such that the list can be
...
verified by looking at 'diff -u ../openssl-0.9.6a/CHANGES CHANGES')
2001-04-11 10:35:38 +00:00
Richard Levitte
c3bdbcf639
NetBSD and OpenBSD use TOD as well
2001-04-11 10:06:02 +00:00
Bodo Möller
d9a770e6ea
Mention automatically queried EGD sockets (OpenSSL 0.9.7).
...
0.9.5 is obsolete, so we don't have to discuss its 'openssl rsa'
seeding bug.
2001-04-10 07:59:43 +00:00
Lutz Jänicke
35feed50f0
Some clarifications about $RANDFILE usage.
2001-04-09 16:01:38 +00:00
Lutz Jänicke
a116afa42e
OpenSSH 1.2.2p1 is dead and gone. Errors detecting the OpenSSL library
...
are however still common and are solved by checking config.log.
2001-04-09 15:55:58 +00:00
Richard Levitte
b4542fb307
Correct info in the FAQ.
2001-04-09 14:17:26 +00:00
Bodo Möller
1f224bf029
Adjust BN_mod_inverse algorithm selection according to experiments on
...
Ultra-Sparcs (both 32-bit and 64-bit compilations)
2001-04-09 09:28:24 +00:00
Bodo Möller
4d231b4359
update (0.9.6a)
2001-04-09 07:15:16 +00:00
Bodo Möller
ac0f1d0b14
comment
2001-04-08 18:47:23 +00:00
Bodo Möller
124d8cf701
code documentation
2001-04-08 18:41:35 +00:00
Bodo Möller
7d0d0996aa
binary algorithm for modular inversion
2001-04-08 18:23:44 +00:00
Bodo Möller
9cddbf14db
avoid '||' since Ultrix apparently doesn't understand it
2001-04-08 18:22:53 +00:00
Bodo Möller
5f1fddbbe7
'||', '&&' and 'test -x' apparently don't work on Ultrix;
...
also 'test' appears to be available as '[' only in 'if' conditions.
2001-04-08 13:49:45 +00:00
Bodo Möller
027e257b1d
Avoid assert() in the library.
2001-04-08 13:47:51 +00:00
Lutz Jänicke
93f117003e
Add forgotten "-passin" option to smime.c usage help.
2001-04-08 10:51:14 +00:00
Richard Levitte
42748c084e
Resize a local buffer to accomodate the size requirements of AES.
...
Protect against future mistakes with an assert().
2001-04-08 05:41:42 +00:00
Richard Levitte
77dd9c1850
Add the possibility to have AES removed in Windows as well.
...
Spotted by Harald Koch <chk@pobox.com>
2001-04-08 04:35:58 +00:00
Bodo Möller
83d968df60
Don't use 'tt' uninitialized when reporting an error
...
(we don't have an ASN1_TEMPLATE to complain about at this stage,
so errtt == NULL should be OK)
2001-04-05 11:40:16 +00:00
Richard Levitte
4ac881ede3
Fix couple of memory leaks in PKCS7_dataDecode().
...
(provided by Stephen)
2001-04-05 10:19:12 +00:00
Richard Levitte
ccd2cd3e64
Unixware config.
2001-04-05 10:09:53 +00:00
Bodo Möller
6186ef9338
don't use shell functions
2001-04-04 16:26:31 +00:00
Richard Levitte
6bcac6e578
Correct a typo. linux != linus.
2001-04-04 16:03:00 +00:00
Richard Levitte
967d95f096
Incorporate some changes that make OpenSSL compilable in CygWin.
2001-04-04 15:50:30 +00:00
Richard Levitte
26c7750827
Since vms.mar handles 32-bit integers, do not use it on Alpha, that's
...
just a slowdown.
2001-04-04 13:52:56 +00:00
Richard Levitte
5a16d270ab
OpenVMS/Alpha should use 64 bits. If nothing else, there's
...
performance to gain.
2001-04-04 13:51:35 +00:00
Richard Levitte
3a465d5ec9
Make do_bsd-gcc-shared depend on do_gnu-shared instead of the non-existent linux-shared
2001-04-04 04:24:24 +00:00
Bodo Möller
413a4a0461
Fix warnings.
2001-04-03 14:03:47 +00:00
Bodo Möller
a95d2c5133
Make sure OPENSSL_SYS_... is defined when we need it.
2001-04-03 14:03:19 +00:00
Bodo Möller
1876cc32ae
This change should be suitable as a workaround for the Solaris x86
...
compiler bug reported in <01032110293775.22278@weba3.iname.net>
(the '++seq[i]' condition is evaluated as 256 rather than 0
when the previous value is 255).
2001-04-03 13:50:30 +00:00
Richard Levitte
4e2a08ddd4
Plug a memory leak. Spotted by "Shijin" <shijin@comex.com>
2001-04-03 09:42:36 +00:00
Richard Levitte
61e2c34a10
Reports on Windows, DG-UX and older OpenVMS.
2001-04-03 09:02:07 +00:00