Nils Larsch
06e12403e0
clear dso pointer in case of an error
...
PR: 816
2005-06-17 21:14:35 +00:00
Nils Larsch
03b3a0d022
update for the cswift engine:
...
- fix the problem described in bug report 825
- fix a segfault when the engine fails to initialize
- let the engine switch to software when keysize > 2048
PR: 825, 826
Submitted by: Frédéric Giudicelli
2005-06-17 20:26:07 +00:00
Richard Levitte
f840728f43
Do not undefine _XOPEN_SOURCE. This is currently experimental, and
...
will be firmed up as soon as it's been verified not to break anything.
2005-06-16 22:21:39 +00:00
Andy Polyakov
30fc34625c
Make sure detached fingerprints are installed [as well as minor cygwin
...
and hpux updates].
2005-06-14 12:29:34 +00:00
Andy Polyakov
18f3210a35
Make human-readable error messages more human-friendly.
2005-06-14 12:18:47 +00:00
Nils Larsch
82da9623bf
update FAQ
2005-06-13 08:38:29 +00:00
Richard Levitte
7c0341dbc4
Show what the offending target was.
...
PR: 1108
2005-06-13 02:38:07 +00:00
Ben Laurie
7450139b8b
Default sensibly when in FIPS mode.
2005-06-10 20:49:10 +00:00
Nils Larsch
e85e5ca5ec
- let SSL_CTX_set_cipher_list and SSL_set_cipher_list return an
...
error if the cipher list is empty
- fix last commit in ssl_create_cipher_list
- clean up ssl_create_cipher_list
2005-06-10 20:00:39 +00:00
Dr. Stephen Henson
67cdaca99d
Remove CRs from files.
2005-06-10 00:41:25 +00:00
Andy Polyakov
b00f715c96
Eliminate gcc -pedantic warnings.
2005-06-09 21:37:30 +00:00
Andy Polyakov
098927c384
Allow for dso load by explicit path on HP-UX.
2005-06-09 20:47:41 +00:00
Nils Larsch
0eb8e0058c
use "=" instead of "|=", fix typo
2005-06-08 22:24:27 +00:00
Richard Levitte
56c55b0655
Avoid endless loops. Really, we were using the same variable for two
...
different conditions...
2005-06-08 21:59:51 +00:00
Andy Polyakov
e17d60d5fb
Fix couple gcc 4 warnings, reformat comment.
2005-06-08 21:27:34 +00:00
Nils Larsch
e32b08abc3
ssl_create_cipher_list should return an error if no cipher could be
...
collected (see SSL_CTX_set_cipher_list manpage). Fix handling of
"cipher1+cipher2" expressions in ssl_cipher_process_rulestr.
PR: 836 + 1005
2005-06-08 21:16:32 +00:00
Andy Polyakov
2776beb91a
Mask new fips_*vs test programs in non-fips builds.
2005-06-07 19:56:52 +00:00
Andy Polyakov
dca20343e0
Simplify ssltest compile rule.
2005-06-07 16:36:52 +00:00
Andy Polyakov
e99f6700e1
Simplified shortcut from FIPS_mode_set.
2005-06-07 16:36:21 +00:00
Andy Polyakov
3da3c85a3f
Fix typos and add missing lines in Makefile.
2005-06-07 14:08:54 +00:00
Andy Polyakov
d58d546e2d
Initial support for DSO FIPS fingerprinting.
2005-06-07 12:39:27 +00:00
Andy Polyakov
780b97aba6
Ad-hoc DSO_pathbyaddr for selected platforms from HEAD in FIPS context.
2005-06-07 10:49:35 +00:00
Andy Polyakov
e0ec2d772c
Set OPENSSL_PIC flags for shared builds [from HEAD].
2005-06-07 10:48:24 +00:00
Dr. Stephen Henson
5fbf6769fc
Update from head.
2005-06-06 22:42:35 +00:00
Dr. Stephen Henson
7bf79446c8
Delete test error print.
2005-06-06 18:05:00 +00:00
Richard Levitte
bdee60fc1a
Skipping all tests just because one algorithm is disabled seems a bit harsch.
...
PR: 1089
2005-06-06 08:38:13 +00:00
Andy Polyakov
0b62d2f4c9
Don't mention Makefile.ssl and don't mention Solaris x86 ld bug, as it's
...
not relevant in 0.9.7 context.
2005-06-06 08:38:03 +00:00
Richard Levitte
4375ca95a4
Document the change.
2005-06-05 23:17:53 +00:00
Richard Levitte
acce7b5963
Remove the incorrect installation of '%{openssldir}/lib'.
...
PR: 1074
2005-06-05 23:15:18 +00:00
Richard Levitte
c5098ee16f
Old typo...
...
PR: 1097
2005-06-05 21:54:59 +00:00
Andy Polyakov
6d0e43d555
./PROBLEMS update from HEAD.
2005-06-05 18:09:24 +00:00
Richard Levitte
9f32d49de9
The macro THREADS was changed to OPENSSL_THREADS a long time ago.
...
PR: 1096
2005-06-04 08:44:05 +00:00
Dr. Stephen Henson
db84c9075b
Use correct config file environment variable.
2005-06-02 23:16:33 +00:00
Dr. Stephen Henson
e96fad9d2d
Typo.
2005-06-02 20:30:03 +00:00
Dr. Stephen Henson
0c7b06714e
Add CHANGES entry for PSS and X9.31 padding.
2005-06-02 20:08:30 +00:00
Andy Polyakov
d893001918
fips/*/Makefile updates to accomodate new VSes.
2005-06-02 19:15:15 +00:00
Richard Levitte
b8bd781b7e
Synchronise some more with the Unix build.
2005-06-02 19:08:41 +00:00
Andy Polyakov
bb792a485a
Make PSS more flexible, most notably assign special meaning to negative
...
sLen values: -1 -> sLen = hLen, -2 -> sLen autochosen/autorecovered.
2005-06-02 18:07:16 +00:00
Andy Polyakov
452421d059
Comply with .sam[ple].
2005-06-02 18:01:09 +00:00
Dr. Stephen Henson
ea8399724e
Remove redundant reference, which produces a warning (??) in gcc 3.4.2.
2005-06-02 01:18:25 +00:00
Dr. Stephen Henson
26655341fc
Update symbols. Add #ifdef OPENSSL_FIPS in various places.
2005-06-02 00:09:25 +00:00
Dr. Stephen Henson
5858d32a59
Fixes for unusual key lengths an PSS.
2005-06-01 22:06:46 +00:00
Nils Larsch
0dfe532ea9
clear error queue on success and return NULL if cert could be read
...
PR: 1088
2005-06-01 08:36:38 +00:00
Nils Larsch
5c567ffd4c
fix assertion
2005-05-31 20:39:54 +00:00
Richard Levitte
3bc1781994
Synchronise with the Unix build...
2005-05-31 20:29:23 +00:00
Dr. Stephen Henson
485bcc9cab
Preliminary support for X9.31 RSA key generation for FIPS.
...
Included prime derivation, random prime generation, test program and
new option to genrsa.
2005-05-31 12:38:03 +00:00
Richard Levitte
bb1bbb3274
Synchronise with Unixly build
2005-05-30 22:26:22 +00:00
Dr. Stephen Henson
4bd7bc97e8
make update
2005-05-29 12:30:21 +00:00
Dr. Stephen Henson
4d4339922c
Stop warnings.
2005-05-29 12:22:05 +00:00
Richard Levitte
c3d03b70af
We have some source with \r\n as line ends. DEC C informs about that,
...
and I really can't be bothered...
2005-05-29 12:13:05 +00:00