Dr. Stephen Henson
5f444c8fcd
In order to get the expected self signed error when
...
calling X509_verify_cert() in x509.c the cert should
not be added to the trusted store.
2003-09-21 02:15:07 +00:00
Geoff Thorpe
62afa8bd58
These should be write-locks, not read-locks.
2003-09-08 16:00:46 +00:00
Bodo Möller
2689b8f326
certain changes have to be listed twice in this file because OpenSSL
...
0.9.6h forked into 0.9.6i and 0.9.7 ...
2003-09-04 12:52:10 +00:00
Dr. Stephen Henson
bd69ac5c93
New -ignore_err option in ocsp application to stop the server
...
exiting on the first error in a request.
2003-09-03 23:54:00 +00:00
Dr. Stephen Henson
33ed371ec9
Only accept a client certificate if the server requests
...
one, as required by SSL/TLS specs.
2003-09-03 23:42:17 +00:00
Dr. Stephen Henson
3b07c32fe7
outlen should be int * in out_utf8.
2003-08-21 12:31:17 +00:00
Bodo Möller
9cc513a000
fix out-of-bounds check in lock_dbg_cb (was too lose to detect all
...
invalid cases)
PR: 674
2003-08-14 10:33:26 +00:00
Richard Levitte
cac32e5acd
Undo the change that left LD_LIBRARY_PATH unchanged. The errors I saw
...
weren't due to that, but to a change on the SCO machines I used for
testing, where my $PATH was suddenly incorrect.
2003-08-14 06:54:29 +00:00
Bodo Möller
0e9edc98d4
make sure no error is left in the queue that is intentionally ignored
2003-08-11 18:56:19 +00:00
Richard Levitte
27bd937cc0
Don't fiddle with LD_LIBRARY_PATH when building non-static.
2003-08-11 11:46:01 +00:00
Richard Levitte
f56c451143
Oops, removed a little too much.
2003-08-11 09:56:17 +00:00
Richard Levitte
05a1f76093
make update
2003-08-11 09:53:24 +00:00
Richard Levitte
4ed9388e5d
A new branch for FIPS-related changes has been created with the name
...
OpenSSL-fips-0_9_7-stable.
Since the 0.9.7-stable branch is supposed to be in freeze and should
only contain bug corrections, this change removes the FIPS changes
from that branch.
2003-08-11 09:37:17 +00:00
Richard Levitte
94a1183fab
Avoid clashing with the regular DES functions when not compiling with
...
-DFIPS. This is basically only visible when building with shared
library supoort...
2003-08-08 10:08:14 +00:00
Richard Levitte
30e4269241
Correct two problems, found by Martin Kochanski <cardbox@easynet.co.uk>:
...
1. CreateToolhelp32Snapshot returns INVALID_HANDLE_VALUE, not NULL, on error.
2. On Windows CE, a snapshot handle is closed with CloseToolhelp32Snapshot,
not CloseHandle.
2003-08-07 11:57:21 +00:00
Bodo Möller
59315df637
add OpenSSL license
...
fix typo
2003-08-06 10:38:37 +00:00
Richard Levitte
3659df7d15
make update
...
(I'm quite worried about what this will do to compatibility with
earlier 0.9.7 versions)
2003-08-04 13:26:14 +00:00
Richard Levitte
16f1fdbc8b
Add an empty list of AES tests. At least, the test suite will pass,
...
and perhaps the conflict this generates on the person that hasn't yet
committed the real file will prompt him to do so :-).
2003-08-04 12:03:56 +00:00
Richard Levitte
98c1a4900c
Inclusion of openssl/engine.h should always be wrapped with a check that
...
OPENSSL_NO_ENGINE is not defined.
2003-08-04 10:12:38 +00:00
Ben Laurie
2541f58309
Make tests work (CFB1 still doesn't produce the right answers, strangely).
2003-08-03 12:22:35 +00:00
Dr. Stephen Henson
6b063f32d9
Make the EFB NIDs have empty OIDs aliased to the real EFB OID.
2003-08-01 17:06:48 +00:00
Dr. Stephen Henson
693f2e3625
Replace C++ style comments.
2003-08-01 13:07:29 +00:00
Ben Laurie
afab06d3f5
DES CFB8 test.
2003-08-01 10:31:25 +00:00
Ben Laurie
8fb97c9acd
Fix DES CFB-r.
2003-08-01 10:25:58 +00:00
Richard Levitte
7312a38d9e
No C++ comments in C programs!
2003-07-31 21:41:51 +00:00
Richard Levitte
475e8d3d1d
If FDIRS is to be treated like SDIRS, let's not forget to initialize
...
it in Makefile.org.
2003-07-31 21:30:07 +00:00
Ben Laurie
c5f070d5d5
Whoops, forgot FIPS DES, also add EVPs for DES CFB1 and 8.
2003-07-30 18:30:18 +00:00
Ben Laurie
1b9e855744
Test vectors and useless samples.
2003-07-29 17:53:41 +00:00
Ben Laurie
f3b2ea53e2
AES CFB8.
2003-07-29 17:05:16 +00:00
Ben Laurie
ed71769948
Missing files.
2003-07-29 15:17:22 +00:00
Ben Laurie
e1c0a9c416
MMT for CFB1
2003-07-29 14:34:48 +00:00
Ben Laurie
0b8c5413a4
Reformat.
2003-07-29 14:06:02 +00:00
Ben Laurie
c473d53898
The rest of the keysizes for CFB1, working AES AVS test for CFB1.
2003-07-29 13:24:27 +00:00
Ben Laurie
e8f8249319
Working CFB1 and test vectors.
2003-07-29 10:56:56 +00:00
Ben Laurie
e2ced802b4
Add support for partial CFB modes, make tests work, update dependencies.
2003-07-28 15:08:00 +00:00
Ben Laurie
9163658aa8
New fingerprints.
2003-07-28 09:56:08 +00:00
Ben Laurie
d3a15e132d
Build when not FIPS.
2003-07-27 21:13:35 +00:00
Ben Laurie
47954f114c
Build in non-FIPS mode.
2003-07-27 17:23:08 +00:00
Ben Laurie
3ef747c8b6
Use unified diff.
2003-07-27 17:19:28 +00:00
Ben Laurie
75622f1ece
Unfinished FIPS stuff for review/improvement.
2003-07-27 17:00:51 +00:00
Ben Laurie
a052dd6532
Add untested CFB-r mode. Will be tested soon.
2003-07-27 13:46:57 +00:00
Bodo Möller
5cc2658cff
tolerate extra data at end of client hello for SSL 3.0
...
PR: 659
2003-07-21 15:17:49 +00:00
Bodo Möller
2f4335ec2b
fix: 0.9.7 is based on 0.9.6h, not on 0.9.6k
...
typo in 0.9.6k section
2003-07-21 15:08:03 +00:00
Richard Levitte
2ab0740785
Make sure openssl.pc is readable by everyone.
...
PR: 654
2003-07-04 11:41:15 +00:00
Richard Levitte
82f676c633
Add a slash so grep doesn't return both ./crypto/bio/bss_mem.o and
...
./crypto/mem.o when we're looking for mem.o.
2003-07-03 21:43:39 +00:00
Richard Levitte
5f24adda77
Oops, I forgot to replace 'counter' with 'ivec' when used...
2003-07-03 20:50:46 +00:00
Richard Levitte
900f062d1f
The convenience argumetn for -nameopt and -certopt is ca_default, not
...
default_ca.
PR: 653
2003-07-03 07:46:54 +00:00
Richard Levitte
ba64c2cc8f
The 'counter' is really the IV.
2003-07-03 06:42:45 +00:00
Richard Levitte
29e62e487f
Change AES-CTR to increment the IV by 1 instead of 2^64.
2003-07-03 06:41:33 +00:00
Lutz Jänicke
ec28f9c12c
Clarify wording of verify_callback() behaviour.
2003-06-26 14:03:33 +00:00