Dr. Stephen Henson
7471431322
Avoid warning.
2008-10-26 11:54:26 +00:00
Dr. Stephen Henson
1542de4eed
Update from HEAD.
2008-10-22 19:55:25 +00:00
Dr. Stephen Henson
b6c2bffbdf
Return correct exit code if there is an error in dgst command.
2008-10-22 18:51:37 +00:00
Dr. Stephen Henson
ff09931e22
Sync OIDS with HEAD.
2008-10-22 18:48:50 +00:00
Lutz Jänicke
155c70b882
Allow detection of input EOF in quiet mode by adding -no_ign_eof option
...
to s_client application.
PR: #1761
Submitted by: David Woodhouse <dwmw2@infradead.org>
2008-10-22 06:46:13 +00:00
Lutz Jänicke
7c49452973
Add missing "-d" to option list of openssl version.
...
Submitted by: Alex Chen <alex_chen@filemaker.com>
2008-10-20 12:53:33 +00:00
Lutz Jänicke
312539ae9f
Armor pq_compat.h header file against multiple inclusion
...
Submitted by: Alex Chen <alex_chen@filemaker.com>
2008-10-20 12:40:20 +00:00
Ben Laurie
cc40dcce58
Distinguish public/private data more clearly.
2008-10-20 09:26:04 +00:00
Ben Laurie
5790921aea
Ignore executable.
2008-10-19 15:34:13 +00:00
Ben Laurie
df84c11407
Add J-PAKE demo.
2008-10-19 15:33:32 +00:00
Ben Laurie
b76306c983
Constification.
2008-10-18 14:27:36 +00:00
Ben Laurie
cdffc716c9
Set the comparison function in v3_addr_canonize().
2008-10-14 19:21:30 +00:00
Ben Laurie
5dffc13f55
Add XMPP STARTTLS support.
2008-10-14 19:09:47 +00:00
Ben Laurie
a5873a8d3d
Fix warnings.
2008-10-14 19:05:02 +00:00
Lutz Jänicke
4db3e88459
Firstly, the bitmap we use for replay protection was ending up with zero
...
length, so a _single_ pair of packets getting switched around would
cause one of them to be 'dropped'.
Secondly, it wasn't even _dropping_ the offending packets, in the
non-blocking case. It was just returning garbage instead.
PR: #1752
Submitted by: David Woodhouse <dwmw2@infradead.org>
2008-10-13 06:43:06 +00:00
Lutz Jänicke
ab073bad4f
When the underlying BIO_write() fails to send a datagram, we leave the
...
offending record queued as 'pending'. The DTLS code doesn't expect this,
and we end up hitting an OPENSSL_assert() in do_dtls1_write().
The simple fix is just _not_ to leave it queued. In DTLS, dropping
packets is perfectly acceptable -- and even preferable. If we wanted a
service with retries and guaranteed delivery, we'd be using TCP.
PR: #1703
Submitted by: David Woodhouse <dwmw2@infradead.org>
2008-10-10 10:41:32 +00:00
Lutz Jänicke
cfe04f607d
Fix incorrect command for assember file generation on IA64
...
Submitted by: Amadeu A. Barbosa Jr <amadeu@tecgraf.puc-rio.br>
2008-10-06 10:35:29 +00:00
Dr. Stephen Henson
c0e9f540e0
Check for errors in ASN1 sign and verify routines.
2008-09-25 16:38:07 +00:00
Andy Polyakov
7c97aacbe8
Fix EC_KEY_check_key [from HEAD].
2008-09-23 17:34:08 +00:00
Dr. Stephen Henson
36b8f87566
Typo.
2008-09-23 11:21:17 +00:00
Bodo Möller
d875413a0b
Make sure that SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG can't
...
enable disabled ciphersuites.
2008-09-22 21:22:51 +00:00
Dr. Stephen Henson
155ad6d219
Fix warnings when more pedantic "debuge-steve32" target is used.
2008-09-21 11:40:36 +00:00
Dr. Stephen Henson
138f20433e
Camellia low level API algorithm blocking.
2008-09-21 11:21:43 +00:00
Dr. Stephen Henson
7747c67861
Make camellia work with updated EVP macros.
2008-09-21 10:24:08 +00:00
Dr. Stephen Henson
237a6f06b6
Add do_fips.bat WIN32 build script. Update version in Configure.
2008-09-18 12:13:54 +00:00
Dr. Stephen Henson
fe99beb82a
Build montgomery ASM file on WIN32.
2008-09-18 11:56:09 +00:00
Dr. Stephen Henson
736a77f275
Merge FIPS changes to VC-32 build system.
2008-09-18 11:45:30 +00:00
Dr. Stephen Henson
94539213a1
Add extra utilities from FIPS branch.
2008-09-18 11:20:08 +00:00
Dr. Stephen Henson
c5c4246319
Add FIPS changes to mk1mf.pl
2008-09-17 17:21:31 +00:00
Dr. Stephen Henson
2e6d8a8991
Update defs.
2008-09-17 17:12:53 +00:00
Dr. Stephen Henson
e852835da6
Make update: delete duplicate error code.
2008-09-17 17:11:09 +00:00
Dr. Stephen Henson
d245c32529
Update some util files to recognize new FIPS directories.
2008-09-17 16:58:01 +00:00
Dr. Stephen Henson
964d58bcb0
Add missing files.
2008-09-17 16:27:50 +00:00
Dr. Stephen Henson
52702f6f92
Updates to build system from FIPS branch. Make fipscanisterbuild work and
...
build FIPS test programs.
2008-09-17 15:56:42 +00:00
Dr. Stephen Henson
05794d983f
Add RSA update from FIPS branch that got omitted....
2008-09-17 15:53:59 +00:00
Dr. Stephen Henson
364f36f851
Don't change NUM_LOCKS value for non-FIPS builds.
2008-09-17 15:07:41 +00:00
Dr. Stephen Henson
9b809d6278
Add missing files.
2008-09-16 22:54:30 +00:00
Dr. Stephen Henson
bbefea3387
Add missing files.
2008-09-16 22:48:18 +00:00
Dr. Stephen Henson
d83dde6180
Merge changes to build system from fips branch.
2008-09-16 21:44:57 +00:00
Dr. Stephen Henson
63e1319d0f
FIPS merge of test changes: make sure key sizes are 1024 bits.
2008-09-16 15:14:55 +00:00
Dr. Stephen Henson
8067d34b3a
FIPS merge "crypto" functions.
2008-09-16 15:11:50 +00:00
Dr. Stephen Henson
e3f2860e73
Merge public key FIPS code, RSA, DSA, DH.
2008-09-16 14:55:26 +00:00
Dr. Stephen Henson
92eb44d238
Add missing file.
2008-09-16 11:52:33 +00:00
Dr. Stephen Henson
f4179bead4
RAND library FIPS merge.
2008-09-16 11:50:05 +00:00
Dr. Stephen Henson
fced277486
conf/hmac FIPS merge.
2008-09-16 11:37:03 +00:00
Dr. Stephen Henson
3d1be455ce
ERR library FIPS merge. Reorganise functions and add FIPS error
...
definitions.
2008-09-16 11:26:29 +00:00
Dr. Stephen Henson
dee4d129cb
FIPS des library merge.
2008-09-16 11:17:48 +00:00
Dr. Stephen Henson
0067bd77a8
Part FIPS bn merge: move functiosn to bn_opt.c to reduce dependencies.
2008-09-16 11:08:24 +00:00
Dr. Stephen Henson
d98904e5a7
Add missing RC4 algorithm block source file.
2008-09-16 11:02:19 +00:00
Dr. Stephen Henson
96a259e81e
Merge FIPS low level algorithm blocking code. Give hard errors if non-FIPS
...
algorithms are use in FIPS mode using low level API. No effect in non-FIPS
mode.
2008-09-16 10:47:28 +00:00