Andy Polyakov
|
e17d60d5fb
|
Fix couple gcc 4 warnings, reformat comment.
|
2005-06-08 21:27:34 +00:00 |
|
Nils Larsch
|
e32b08abc3
|
ssl_create_cipher_list should return an error if no cipher could be
collected (see SSL_CTX_set_cipher_list manpage). Fix handling of
"cipher1+cipher2" expressions in ssl_cipher_process_rulestr.
PR: 836 + 1005
|
2005-06-08 21:16:32 +00:00 |
|
Andy Polyakov
|
2776beb91a
|
Mask new fips_*vs test programs in non-fips builds.
|
2005-06-07 19:56:52 +00:00 |
|
Andy Polyakov
|
dca20343e0
|
Simplify ssltest compile rule.
|
2005-06-07 16:36:52 +00:00 |
|
Andy Polyakov
|
e99f6700e1
|
Simplified shortcut from FIPS_mode_set.
|
2005-06-07 16:36:21 +00:00 |
|
Andy Polyakov
|
3da3c85a3f
|
Fix typos and add missing lines in Makefile.
|
2005-06-07 14:08:54 +00:00 |
|
Andy Polyakov
|
d58d546e2d
|
Initial support for DSO FIPS fingerprinting.
|
2005-06-07 12:39:27 +00:00 |
|
Andy Polyakov
|
780b97aba6
|
Ad-hoc DSO_pathbyaddr for selected platforms from HEAD in FIPS context.
|
2005-06-07 10:49:35 +00:00 |
|
Andy Polyakov
|
e0ec2d772c
|
Set OPENSSL_PIC flags for shared builds [from HEAD].
|
2005-06-07 10:48:24 +00:00 |
|
Dr. Stephen Henson
|
5fbf6769fc
|
Update from head.
|
2005-06-06 22:42:35 +00:00 |
|
Dr. Stephen Henson
|
7bf79446c8
|
Delete test error print.
|
2005-06-06 18:05:00 +00:00 |
|
Richard Levitte
|
bdee60fc1a
|
Skipping all tests just because one algorithm is disabled seems a bit harsch.
PR: 1089
|
2005-06-06 08:38:13 +00:00 |
|
Andy Polyakov
|
0b62d2f4c9
|
Don't mention Makefile.ssl and don't mention Solaris x86 ld bug, as it's
not relevant in 0.9.7 context.
|
2005-06-06 08:38:03 +00:00 |
|
Richard Levitte
|
4375ca95a4
|
Document the change.
|
2005-06-05 23:17:53 +00:00 |
|
Richard Levitte
|
acce7b5963
|
Remove the incorrect installation of '%{openssldir}/lib'.
PR: 1074
|
2005-06-05 23:15:18 +00:00 |
|
Richard Levitte
|
c5098ee16f
|
Old typo...
PR: 1097
|
2005-06-05 21:54:59 +00:00 |
|
Andy Polyakov
|
6d0e43d555
|
./PROBLEMS update from HEAD.
|
2005-06-05 18:09:24 +00:00 |
|
Richard Levitte
|
9f32d49de9
|
The macro THREADS was changed to OPENSSL_THREADS a long time ago.
PR: 1096
|
2005-06-04 08:44:05 +00:00 |
|
Dr. Stephen Henson
|
db84c9075b
|
Use correct config file environment variable.
|
2005-06-02 23:16:33 +00:00 |
|
Dr. Stephen Henson
|
e96fad9d2d
|
Typo.
|
2005-06-02 20:30:03 +00:00 |
|
Dr. Stephen Henson
|
0c7b06714e
|
Add CHANGES entry for PSS and X9.31 padding.
|
2005-06-02 20:08:30 +00:00 |
|
Andy Polyakov
|
d893001918
|
fips/*/Makefile updates to accomodate new VSes.
|
2005-06-02 19:15:15 +00:00 |
|
Richard Levitte
|
b8bd781b7e
|
Synchronise some more with the Unix build.
|
2005-06-02 19:08:41 +00:00 |
|
Andy Polyakov
|
bb792a485a
|
Make PSS more flexible, most notably assign special meaning to negative
sLen values: -1 -> sLen = hLen, -2 -> sLen autochosen/autorecovered.
|
2005-06-02 18:07:16 +00:00 |
|
Andy Polyakov
|
452421d059
|
Comply with .sam[ple].
|
2005-06-02 18:01:09 +00:00 |
|
Dr. Stephen Henson
|
ea8399724e
|
Remove redundant reference, which produces a warning (??) in gcc 3.4.2.
|
2005-06-02 01:18:25 +00:00 |
|
Dr. Stephen Henson
|
26655341fc
|
Update symbols. Add #ifdef OPENSSL_FIPS in various places.
|
2005-06-02 00:09:25 +00:00 |
|
Dr. Stephen Henson
|
5858d32a59
|
Fixes for unusual key lengths an PSS.
|
2005-06-01 22:06:46 +00:00 |
|
Nils Larsch
|
0dfe532ea9
|
clear error queue on success and return NULL if cert could be read
PR: 1088
|
2005-06-01 08:36:38 +00:00 |
|
Nils Larsch
|
5c567ffd4c
|
fix assertion
|
2005-05-31 20:39:54 +00:00 |
|
Richard Levitte
|
3bc1781994
|
Synchronise with the Unix build...
|
2005-05-31 20:29:23 +00:00 |
|
Dr. Stephen Henson
|
485bcc9cab
|
Preliminary support for X9.31 RSA key generation for FIPS.
Included prime derivation, random prime generation, test program and
new option to genrsa.
|
2005-05-31 12:38:03 +00:00 |
|
Richard Levitte
|
bb1bbb3274
|
Synchronise with Unixly build
|
2005-05-30 22:26:22 +00:00 |
|
Dr. Stephen Henson
|
4bd7bc97e8
|
make update
|
2005-05-29 12:30:21 +00:00 |
|
Dr. Stephen Henson
|
4d4339922c
|
Stop warnings.
|
2005-05-29 12:22:05 +00:00 |
|
Richard Levitte
|
c3d03b70af
|
We have some source with \r\n as line ends. DEC C informs about that,
and I really can't be bothered...
|
2005-05-29 12:13:05 +00:00 |
|
Dr. Stephen Henson
|
e4c2c550b9
|
Add X9.31 signature support, mainly for FIPS140. Add new option to rsautl and
include options to use X9.31 in tests.
|
2005-05-28 20:15:48 +00:00 |
|
Dr. Stephen Henson
|
570357b7a8
|
Add PSS support to tests.
|
2005-05-28 11:18:44 +00:00 |
|
Dr. Stephen Henson
|
7044d328a2
|
Add PSS support. Minimal at this stage for FIPS140.
|
2005-05-27 21:59:52 +00:00 |
|
Dr. Stephen Henson
|
35d7cc8166
|
Error checking.
|
2005-05-27 21:22:48 +00:00 |
|
Bodo Möller
|
80790d89ec
|
Use BN_with_flags() in a cleaner way.
Complete previous change:
Constant time DSA [sync with mainstream].
|
2005-05-27 15:39:15 +00:00 |
|
Andy Polyakov
|
7bad200b49
|
Constant-time RSA [sync with mainstream].
Submitted by: bodo
|
2005-05-27 08:12:44 +00:00 |
|
Andy Polyakov
|
6b6f64da2d
|
Constant time DH [sync with mainstream].
Submitted by: bodo
|
2005-05-27 08:11:16 +00:00 |
|
Andy Polyakov
|
31def5ae59
|
Constant-time DSA signing [sync with mainstream].
Submitted by: bodo
|
2005-05-27 06:42:11 +00:00 |
|
Andy Polyakov
|
713407a5c7
|
fips/sha1 -> fips/sha remains.
|
2005-05-26 23:09:02 +00:00 |
|
Andy Polyakov
|
db73333585
|
Remove fips/sha1/*.
|
2005-05-26 23:01:20 +00:00 |
|
Andy Polyakov
|
84c9b6edb1
|
Throw in SHAmix test vectors.
|
2005-05-26 22:17:55 +00:00 |
|
Andy Polyakov
|
e609c04994
|
Rename fips/sha1 to fips/sha.
|
2005-05-26 21:29:10 +00:00 |
|
Dr. Stephen Henson
|
53cfa36d37
|
Allow zero length messages and make format look more like samples.
|
2005-05-26 18:48:24 +00:00 |
|
Dr. Stephen Henson
|
b10bd63df3
|
FIPS SHA* test for new format.
|
2005-05-26 18:31:53 +00:00 |
|