Ben Laurie
f3f53c8ca5
Handle WANT_READ more correctly (thanks to Bodo).
2000-09-05 18:47:57 +00:00
Dr. Stephen Henson
2f043896d1
*BIG* verify code reorganisation.
...
The old code was painfully primitive and couldn't handle
distinct certificates using the same subject name.
The new code performs several tests on a candidate issuer
certificate based on certificate extensions.
It also adds several callbacks to X509_VERIFY_CTX so its
behaviour can be customised.
Unfortunately some hackery was needed to persuade X509_STORE
to tolerate this. This should go away when X509_STORE is
replaced, sometime...
This must have broken something though :-(
2000-09-05 17:53:58 +00:00
Ben Laurie
29eb7d9ce0
Distinguish between assertions and conditions that should cause death.
2000-09-05 17:06:45 +00:00
Dr. Stephen Henson
34216c0422
Keep a not of original encoding in certificate requests.
...
Add new option to PKCS7_sign to exclude S/MIME capabilities.
2000-09-05 13:27:57 +00:00
Bodo Möller
22c7ea4068
Mention fix in bio_lib.c.
2000-09-05 12:46:10 +00:00
Bodo Möller
29dc25e88a
Increase print buffer (10K instead of just 2K).
2000-09-05 12:43:39 +00:00
Bodo Möller
0572abbf53
Ignore Makefile.save
2000-09-05 12:42:05 +00:00
Bodo Möller
7d95ff76e6
Remove silly test for b->references at the end of BIO_write:
...
If some other thread deletes the BIO that one thread needs for
BIO_write, then there's a lot of trouble anyway; there's
nothing special about calling the callback.
2000-09-05 12:35:00 +00:00
Bodo Möller
affadbef0b
Consistency
2000-09-04 15:47:17 +00:00
Bodo Möller
397bd0938a
Use consistent indentation,
2000-09-04 15:38:02 +00:00
Bodo Möller
bbb8de0966
Avoid abort() throughout the library, except when preprocessor
...
symbols for debugging are defined.
2000-09-04 15:34:43 +00:00
Bodo Möller
5e38616380
Fix for BN_mul_word(a, 0).
2000-09-04 15:30:14 +00:00
Bodo Möller
54705b3992
-Wall insists that main return an int.
2000-09-04 15:29:06 +00:00
Bodo Möller
4ed601b172
Include MD4 in documentation.
2000-09-04 15:28:21 +00:00
Bodo Möller
04a3ae5592
Tell CVS to ignore 'lib'.
2000-09-04 15:27:47 +00:00
Dr. Stephen Henson
bd08a2bd0c
Add 'rsautl' low level RSA utility.
...
Add DER public key routines.
Add -passin argument to 'ca' utility.
Document sign and verify options to dgst.
2000-09-03 23:13:48 +00:00
Bodo Möller
55ac522068
Undo change from 1.7 to 1.8:
...
Returning -1 for an attempt to read from an empty buffer is empty is
not an error that should be signalled via the error queue, it's a
'retry read' condition and is signalled as such.
2000-09-01 12:29:14 +00:00
Bodo Möller
ccc265eaa7
Use C syntax, not FORTRAN or whatever that was :-)
2000-09-01 10:40:37 +00:00
Bodo Möller
a545c6f6b1
QNX 4 support.
2000-09-01 09:54:25 +00:00
Bodo Möller
5b774c67d3
-N option to diff is not essential, and mentioning it is unnecessarily
...
confusing to people whose diff doesn't implement it.
2000-09-01 09:42:17 +00:00
Ben Laurie
7049ef5f90
Add demo state machine.
2000-08-30 18:14:28 +00:00
Dr. Stephen Henson
7df1c720f6
Fix typo in i2d_ASN1_ENUMERATED
...
Fix bug in read only memory BIOs so BIO_reset() works.
Add sign and verify options to dgst utility, need
to update docs.
2000-08-30 16:14:29 +00:00
Ben Laurie
b3756cf0e9
Diagnose EOF on memory BIOs (or you just get mysterious errors with no error
...
message).
2000-08-28 12:54:18 +00:00
Ben Laurie
065866b28d
Use the passed buffer in ERR_error_string!
2000-08-28 10:57:01 +00:00
Dr. Stephen Henson
dcb1ef5c22
Change PKCS#7 test data to take account of removal of
...
indefinite length encoding.
2000-08-25 01:29:41 +00:00
Dr. Stephen Henson
d428bf8c56
New option to CA.pl to sign request using CA extensions.
...
This allows intermediate CAs to be created more easily.
PKCS12_create() now checks private key matches certificate.
Fix typo in x509 app.
Update docs.
New function ASN1_STRING_to_UTF8() converts any ASN1_STRING
type to UTF8.
2000-08-24 23:24:18 +00:00
Dr. Stephen Henson
d096b524af
Add support for 'other' PKCS#7 content types.
2000-08-22 22:20:25 +00:00
Ben Laurie
c9b51693dc
max -> dmax in bn_check_top.
2000-08-22 21:23:09 +00:00
Dr. Stephen Henson
cae0ae2e4b
Fix ASN1_INTEGER_to_BN properly this time...
2000-08-22 16:06:24 +00:00
Dr. Stephen Henson
469938cb40
Fixes to d2i_ASN1_OBJECT, ASN1_INTEGER_to_BN and a_strex.c
2000-08-22 12:54:21 +00:00
Dr. Stephen Henson
eaa2818189
Various fixes...
...
initialize ex_pathlen to -1 so it isn't checked if pathlen
is not present.
set ucert to NULL in apps/pkcs12.c otherwise it gets freed
twice.
remove extraneous '\r' in MIME encoder.
Allow a NULL to be passed to X509_gmtime_adj()
Make PKCS#7 code use definite length encoding rather then
the indefinite stuff it used previously.
2000-08-21 22:02:23 +00:00
Richard Levitte
622ec449e5
Added OIDs from RFC 2247, 1155, and a few from 1700
2000-08-19 08:47:59 +00:00
Richard Levitte
bb531a0a1c
Assar wanted an address change.
2000-08-18 09:50:41 +00:00
Richard Levitte
e6629837a9
Added BIO_vprintf() and BIO_vsnprintf(). The former because I've
...
found myself needing it a number of times, the latter for completeness.
2000-08-18 09:36:59 +00:00
Richard Levitte
97a377b973
NULL is not an integer...
2000-08-18 09:30:31 +00:00
Richard Levitte
6fd5a04729
Document the added diversity to the possible log levels.
2000-08-17 23:27:03 +00:00
Richard Levitte
0f4e21360d
Add more diversity to the possible log levels. Now we have full
...
coverage for all syslog level.
2000-08-17 23:15:53 +00:00
Richard Levitte
d03e0f3411
Added md4 to the VMS compilation
2000-08-17 22:43:31 +00:00
Richard Levitte
12dc462520
make update
2000-08-17 22:39:03 +00:00
Richard Levitte
967f4ca847
New option 'ctestall' for mkdef.pl, that makes it not only generate
...
existing functions, but really all functions that exist in libeay.num
and ssleay.num. This is a good check on how much we should actually
clean up the number files.
2000-08-17 21:26:22 +00:00
Richard Levitte
368f85545e
Document the reconfiguratoin option for Configure.
2000-08-17 10:25:46 +00:00
Richard Levitte
c59cb511f3
Allow reconfiguration. This can be useful if some source update
...
requires that you configure again, but you don't want to reenter all
those configuration arguments again.
2000-08-17 10:23:45 +00:00
Richard Levitte
fa1194d30a
Correct the title. This also fooled the automatic documentation builder
...
that this was actually the pkcs7 document...
2000-08-15 17:35:10 +00:00
Richard Levitte
25b93b9def
IBMcxx complains that maxmem is as low as 2048 for certain modules
...
(like all the digests). Setting maxmem to 16K seems to give the
compiler enough space to do all the optimization it wants.
2000-08-14 17:00:36 +00:00
Richard Levitte
b98ebe0fa5
I forgot this file that Assar provided as well...
2000-08-14 14:20:52 +00:00
Richard Levitte
3009458e2f
MD4 implemented. Assar Westerlund provided the digest code itself and the test utility, I added the bits to get a EVP interface, the command line utility and the speed test
2000-08-14 14:05:53 +00:00
Richard Levitte
5ce42a7e68
Memory leaks fix. It now looks like all memory leaks, at least around
...
building complete chains, are gone.
2000-08-11 22:50:08 +00:00
Richard Levitte
9ee1c838cb
Memory leaks fix. There seems to be more in other parts of OpenSSL...
2000-08-11 21:41:08 +00:00
Richard Levitte
88364bc2bc
The pkcs12 had no way of getting a CA file or path to be used when
...
building a complete chain. Now added through the -CAfile and -CApath
arguments.
2000-08-11 19:43:20 +00:00
Richard Levitte
35140f3354
Abdelilah Essiari <aes@george.lbl.gov> reports that for very small
...
records, EVP_EncodeUpdate() may misbehave. This happens when there's
a record boundary between the two ending b64 equal signs, which makes
EVP_EncodeUpdate think there has been more than one EOF, and therefore
add an extra NUL at the end of the output buffer. This fix corrects
that problem.
2000-08-11 08:36:25 +00:00