Dr. Stephen Henson
a677c87b7b
Since FIPS 186-3 specifies we use the leftmost bits of the digest
...
we shouldn't reject digest lengths larger than SHA256: the FIPS
algorithm tests include SHA384 and SHA512 tests.
2011-02-01 12:54:04 +00:00
Dr. Stephen Henson
f8a123b4a2
stop warnings about no previous prototype when compiling shared engines
2011-01-30 01:05:38 +00:00
Dr. Stephen Henson
c64beae686
PR: 2433
...
Submitted by: Chris Wilson <chris@qwirx.com>
Reviewed by: steve
Constify ASN1_STRING_set_default_mask_asc().
2011-01-24 16:20:15 +00:00
Dr. Stephen Henson
99ef8323e4
check EC public key isn't point at infinity
2011-01-24 15:08:01 +00:00
Dr. Stephen Henson
2668c58969
PR: 1612
...
Submitted by: Robert Jackson <robert@rjsweb.net>
Reviewed by: steve
Fix EC_POINT_cmp function for case where b but not a is the point at infinity.
2011-01-24 14:41:58 +00:00
Dr. Stephen Henson
5ae3168a77
stop warning with no-engine
2011-01-13 15:42:59 +00:00
Richard Levitte
559579659c
The previous change was incorrect in this branch...
2011-01-10 21:00:25 +00:00
Richard Levitte
2dd74160cc
PR: 2425
...
Synchronise VMS build with Unixly build.
2011-01-10 20:55:24 +00:00
Richard Levitte
2adf63272c
PR: 2407
...
Fix fault include.
Submitted by Arpadffy Zoltan <Zoltan.Arpadffy@scientificgames.se>
2011-01-06 20:56:07 +00:00
Dr. Stephen Henson
fb5a0fb8f1
Since DTLS 1.0 is based on TLS 1.1 we should never return a decryption_failed
...
alert.
2011-01-04 19:33:22 +00:00
Dr. Stephen Henson
c222de16ce
oops missed an assert
2011-01-03 12:53:33 +00:00
Dr. Stephen Henson
19091ac236
PR: 2411
...
Submitted by: Rob Austein <sra@hactrn.net>
Reviewed by: steve
Fix corner cases in RFC3779 code.
2011-01-03 01:40:34 +00:00
Dr. Stephen Henson
2fcf251d3d
Fix escaping code for string printing. If *any* escaping is enabled we
...
must escape the escape character itself (backslash).
2011-01-03 01:27:00 +00:00
Dr. Stephen Henson
dab5848cd9
PR: 2410
...
Submitted by: Rob Austein <sra@hactrn.net>
Reviewed by: steve
Use OPENSSL_assert() instead of assert().
2011-01-03 01:22:09 +00:00
Dr. Stephen Henson
a02f0f3d69
PR: 2413
...
Submitted by: Michael Bergandi <mbergandi@gmail.com>
Reviewed by: steve
Fix typo in crypto/bio/bss_dgram.c
2011-01-03 01:07:03 +00:00
Dr. Stephen Henson
e69d49364e
use fips-dev not dev-fips
2011-01-03 00:44:14 +00:00
Dr. Stephen Henson
38921f0abf
PR: 2416
...
Submitted by: Mark Phalan <mark.phalan@oracle.com>
Reviewed by: steve
Use L suffix in version number.
2011-01-03 00:26:05 +00:00
Richard Levitte
d76ce84c92
Part of the IF structure didn't get pasted here...
...
PR: 2393
2010-12-14 21:44:36 +00:00
Richard Levitte
c3c7a0d26e
First attempt at adding the possibility to set the pointer size for the builds on VMS.
...
PR: 2393
2010-12-14 19:18:52 +00:00
Andy Polyakov
d06bc800f2
bss_file.c: refine UTF8 logic [from HEAD].
...
PR: 2382
2010-12-11 14:53:58 +00:00
Dr. Stephen Henson
a01dc637bd
ignore leading null fields
2010-12-03 19:31:06 +00:00
Dr. Stephen Henson
3bbbe757ea
update for next release
2010-12-02 19:37:46 +00:00
Dr. Stephen Henson
76474e519f
prepare for release
2010-12-02 18:29:04 +00:00
Dr. Stephen Henson
420f572d49
make update
2010-12-02 18:26:12 +00:00
Dr. Stephen Henson
6d65d44b95
fix for CVE-2010-4180
2010-12-02 18:24:55 +00:00
Dr. Stephen Henson
91e1ff77a0
PR: 2386
...
Submitted by: Stefan Birrer <stefan.birrer@adnovum.ch>
Reviewed by: steve
Correct SKM_ASN1_SET_OF_d2i macro.
2010-12-02 17:59:36 +00:00
Dr. Stephen Henson
c8e60ec8fa
fix doc typos
2010-12-02 13:45:15 +00:00
Dr. Stephen Henson
e840570207
use consistent FAQ between version
2010-12-02 00:10:27 +00:00
Andy Polyakov
077527f19e
Configure: make -mno-cygwin optional on mingw platforms [from HEAD].
...
PR: 2381
2010-11-30 22:19:26 +00:00
Dr. Stephen Henson
00daa2e6c6
PR: 2385
...
Submitted by: Stefan Birrer <stefan.birrer@adnovum.ch>
Reviewed by: steve
Zero key->pkey.ptr after it is freed so the structure can be reused.
2010-11-30 19:37:33 +00:00
Dr. Stephen Henson
000f221d60
update NEWS
2010-11-30 13:42:15 +00:00
Richard Levitte
579a605494
Better method for creating SSLROOT:.
...
Make sure to include the path to evptest.txt.
2010-11-29 22:27:21 +00:00
Dr. Stephen Henson
fa29ebd7ed
add CVE to J-PAKE issue
2010-11-29 18:21:43 +00:00
Dr. Stephen Henson
3360999046
update NEWS
2010-11-29 16:53:54 +00:00
Dr. Stephen Henson
0b965e59cb
Some of the MS_STATIC use in crypto/evp is a legacy from the days when
...
EVP_MD_CTX was much larger: it isn't needed anymore.
2010-11-27 17:34:57 +00:00
Dr. Stephen Henson
1684846f54
PR: 2240
...
Submitted by: Jack Lloyd <lloyd@randombit.net>, "Mounir IDRASSI" <mounir.idrassi@idrix.net>, steve
Reviewed by: steve
As required by RFC4492 an absent supported points format by a server is
not an error: it should be treated as equivalent to an extension only
containing uncompressed.
2010-11-25 12:28:28 +00:00
Ben Laurie
dde6d9520c
Document change.
2010-11-24 15:07:56 +00:00
Ben Laurie
f9a772b743
J-PAKE was not correctly checking values, which could lead to attacks.
2010-11-24 13:48:12 +00:00
Andy Polyakov
0d6f7dbb50
INSTALL.W32: document trouble with symlinks under MSYS [from HEAD].
...
PR: 2377
2010-11-23 23:01:01 +00:00
Richard Levitte
994a1ea900
Implement bc test strategy as submitted by Steven M. Schweda <sms@antinode.info>.
...
Make sure we move to '__here' before trying to use it to build local sslroot:
2010-11-23 02:12:11 +00:00
Richard Levitte
e5d1fd38d1
Print openssl version information at the end of the tests
2010-11-23 01:06:10 +00:00
Richard Levitte
a330ed26be
Give the architecture dependent directory higher priority
2010-11-23 01:05:29 +00:00
Richard Levitte
ca0a86c89d
Don't define an empty CFLAGS, it's much more honest not to defined it at all.
...
Make sure to remove any [.CRYTO]BUILDINF.H so it doesn't get used instead of
[.CRYPTO._''ARCH'BUILDINF.H
2010-11-23 01:04:04 +00:00
Richard Levitte
1cf7bbce48
* tests.com: Add the symbol openssl_conf, so the openssl application
...
stops complaining about a missing configuration file. Define the logical
name PERL_ENV_TABLES with values to Perl considers the DCL symbol table
as part of the environment (see 'man perlvms' for details), so cms-test.pl
can get the value of EXE_DIR from tests.com, among others.
* cms-test.pl: Make changes to have it work on VMS as well. Upper or mixed
case options need to be quoted and the openssl command needs a VMS-specific
treatment. It all should work properly on Unix, I hope it does on Windows
as well...
2010-11-22 23:42:51 +00:00
Andy Polyakov
4cdde22432
s390x.S: fix typo in bn_mul_words [from HEAD].
...
PR: 2380
2010-11-22 21:57:07 +00:00
Dr. Stephen Henson
a28cee6efe
PR: 2376
...
Submitted by: Guenter <lists@gknw.net>
Reviewed by: steve
Cleanup alloca use, fix Win32 target for OpenWatcom.
2010-11-19 00:11:27 +00:00
Dr. Stephen Henson
1977bafba4
PR: 2375
...
Submitted by: Guenter <lists@gknw.net>
Reviewed by: steve
cleanup/fix e_aep.c for OpenWatcom
2010-11-18 22:59:42 +00:00
Dr. Stephen Henson
3c96907f2b
PR: 2374
...
Submitted by: Guenter <lists@gknw.net>
Reviewed by: steve
Don't compile capi ENGINE on mingw32
2010-11-18 22:56:42 +00:00
Richard Levitte
2d96a30dc7
Tell the user what test is being performed.
2010-11-18 22:47:01 +00:00
Richard Levitte
c09d1df7d3
Make sure the source directory for ASN1TEST is defined.
2010-11-18 22:45:38 +00:00