Dr. Stephen Henson
bfb7bac83b
Updates for 0.9.7e release.
2004-10-25 11:24:39 +00:00
Dr. Stephen Henson
75f7141ab4
make update
2004-10-25 00:04:22 +00:00
Richard Levitte
9e57ab615c
Because libraries on Windows lack useful version information, the zlib
...
guys had to change the name to differentiate with older versions when
a backward incompatibility came up. Of course, we need to adapt.
This change simply tries to load the library through the newer name
(ZLIB1) first, and if that fails, it tries the good old ZLIB.
2004-10-14 05:49:01 +00:00
Dr. Stephen Henson
70bfcc895e
Oops..
2004-10-04 17:28:57 +00:00
Dr. Stephen Henson
8de8bcbe2c
Fix race condition when CRL checking is enabled.
2004-10-04 16:27:36 +00:00
Dr. Stephen Henson
d06db8ad9e
Check ASN1_TYPE structure type is a SEQUENCE in PKCS7_get_smimecap().
2004-09-15 23:38:45 +00:00
Dr. Stephen Henson
ffa8e7b74c
Oops, forgot to reorder extension request nids.
2004-09-13 22:39:49 +00:00
Dr. Stephen Henson
85e8decc16
ASN1_STRING_to_UTF8() assumed that the MBSTRING_* flags were of
...
the form MBSTRING_FLAG|nbyte where "nbyte" is the number of
bytes per character.
Unfortunately this isn't so and we can't change the #defines because
this would break binary compatibility, so for 0.9.7X only translate
between the two.
2004-09-13 22:30:31 +00:00
Dr. Stephen Henson
8f349c58f7
Stop warning.
2004-09-10 20:27:45 +00:00
Dr. Stephen Henson
cfafb6a73d
When looking for request extensions in a certificate look first
...
for the PKCS#9 OID then the non standard MS OID.
2004-09-10 20:26:30 +00:00
Andy Polyakov
4157fae6fe
Sync aes_ctr.c with HEAD.
2004-08-23 22:28:27 +00:00
Dr. Stephen Henson
8c172bce1c
Make ASN1_INTEGER_cmp() work as expected with negative integers.
2004-08-10 17:40:31 +00:00
Richard Levitte
1033449613
make update
2004-08-10 09:09:08 +00:00
Dr. Stephen Henson
bb82123707
Don't ignore return values of EVP_DigestInit_ex() in md BIOs and dgst.
2004-08-05 18:10:46 +00:00
Richard Levitte
eb7bb58471
Let's lock a write lock when changing values, shall we?
...
Thanks to Dr Stephen Henson <shenson@drh-consultancy.co.uk> for making
me aware of this error.
2004-08-02 14:15:07 +00:00
Richard Levitte
7f9c37457a
To protect FIPS-related global variables, add locking mechanisms
...
around them.
NOTE: because two new locks are added, this adds potential binary
incompatibility with earlier versions in the 0.9.7 series. However,
those locks will only ever be touched when FIPS_mode_set() is called
and after, thanks to a variable that's only changed from 0 to 1 once
(when FIPS_mode_set() is called). So basically, as long as FIPS mode
hasn't been engaged explicitely by the calling application, the new
locks are treated as if they didn't exist at all, thus not becoming a
problem. Applications that are built or rebuilt to use FIPS
functionality will need to be recompiled in any case, thus not being a
problem either.
2004-07-30 14:38:02 +00:00
Richard Levitte
88a8ae6aee
We build the crypto stuff, not the ssl stuff, in this command procedure...
2004-07-29 22:26:03 +00:00
Dr. Stephen Henson
e4c1c03c5b
Add FIPS name to error library.
2004-07-27 00:20:41 +00:00
Dr. Stephen Henson
43894f9c0d
When in FIPS mode write private keys in PKCS#8 and PBES2 format to
...
avoid use of prohibited MD5 algorithm.
2004-07-21 17:41:26 +00:00
Andy Polyakov
c6e27dcf31
Make rand_win.c UNICODE savvy. "Backport" from HEAD.
2004-07-21 17:18:53 +00:00
Richard Levitte
a47e836efe
Since version 7.0, The C RTL in VMS handles time in terms of UTC
...
instead of local time.
2004-07-19 07:49:47 +00:00
Andy Polyakov
370358dfb4
Sync with HEAD. Up to >20% overall performance improvement.
2004-07-17 13:27:38 +00:00
Andy Polyakov
a77b16abd4
IA-64 is intolerant to misaligned access. It was a problem on Win64 as
...
we were mislead by _MSC_VER macro, which is defined by *all* Windows
Microsoft compilers.
2004-07-17 12:54:54 +00:00
Richard Levitte
901959c945
I think it could be a good thing to know what went wrong with the tests...
2004-07-12 12:25:56 +00:00
Richard Levitte
5358bc44f4
o_str.c: Windows doesn't have <strings.h>, and since we use _strnicmp() and
...
_stricmp() on that platform, use the appropriate header file for it,
<string.h>.
o_str.h: we only want to get size_t, which is defined in <stddef.h>.
Philippe Bougeret <philippe.bougeret@freesbee.fr> notified us about Windows
not having a <strings.h>
2004-07-08 08:32:51 +00:00
Dr. Stephen Henson
a7f14cb4c6
Delta CRL support in extension code.
2004-07-06 17:26:33 +00:00
Dr. Stephen Henson
531b538df5
Ooops, missed part of PKCS#8 patch.
2004-07-06 17:25:11 +00:00
Dr. Stephen Henson
49ede900fa
Fix memory leak.
2004-07-04 16:36:58 +00:00
Richard Levitte
83f22920c2
Changes for VOS, submitted by Paul Green <Paul.Green@stratus.com>.
...
PR: 499
2004-06-28 22:01:07 +00:00
Dr. Stephen Henson
fee38dcb9a
Return an error if an attempt is made to encode or decode
...
cipher ASN1 parameters and the cipher doesn't support it.
2004-06-24 12:31:48 +00:00
Ben Laurie
b5e4469150
The version that was actually submitted for FIPS testing.
2004-06-19 13:15:35 +00:00
Richard Levitte
3e00d6c4bb
Typo, setting the first element of nids[] to NULL instead of setting
...
*cnids.
2004-06-15 11:46:06 +00:00
Richard Levitte
5affe206e1
Define FIPS_*_SIZE_T for AES, DSA and RSA as well, in preparation for
...
size_t-ification of those algorithms in future version of OpenSSL...
2004-05-19 14:16:33 +00:00
Andy Polyakov
1f4eccaaa5
Make reservations in FIPS code for upcoming size_t-fication of OpenSSL API.
...
And couple of bug-fixes in fips/rand code [return without lock release and
incorrect return value in fips_rand_bytes].
2004-05-17 15:37:26 +00:00
Ben Laurie
9ac9a29407
Fix self-tests, ban some things in FIPS mode, fix copyrights.
2004-05-15 17:51:26 +00:00
Richard Levitte
bac2e26a9e
Reimplement old functions, so older software that link to libcrypto
...
don't crash and burn.
2004-05-14 17:55:59 +00:00
Richard Levitte
dbf2ac31c9
Synchronise o_str.c between 0.9.8-dev and 0.9.7-stable.
2004-05-13 22:40:08 +00:00
Ben Laurie
72d75ee206
Blow up in people's faces if they don't reseed.
2004-05-12 14:11:10 +00:00
Richard Levitte
49bc4c1023
make update
2004-05-12 10:17:15 +00:00
Richard Levitte
0e92f7738a
Forgot to update the Makefile with the o_str stuff...
2004-05-12 10:17:02 +00:00
Richard Levitte
d529f2a8f7
The functions OPENSSL_strcasen?cmp() were forgotten when merging the
...
FIPS branch into this. It's needed at least for certain OpenVMS
versions, and should really be used in a more general way.
2004-05-12 10:09:00 +00:00
Richard Levitte
90cce79346
Makefile.ssl changed name to Makefile.
2004-05-12 08:28:00 +00:00
Ben Laurie
3642f632d3
Pull FIPS back into stable.
2004-05-11 12:46:24 +00:00
Richard Levitte
3b8ba6b610
When the pointer 'from' changes, it's stored length needs to change as
...
well.
Notified by Frank Kardel <kardel@acm.org> in PR 879.
2004-05-06 09:31:31 +00:00
Dr. Stephen Henson
6e308baf5a
Fix memory leak.
...
PR:870
2004-04-22 12:33:03 +00:00
Geoff Thorpe
688791b22b
Extend the index parameter checking from sk_value to sk_set(). Also tidy up
...
some similar code elsewhere.
Thanks to Francesco Petruzzi for bringing this to my attention.
2004-04-21 15:09:25 +00:00
cvs2svn
462a286eeb
This commit was manufactured by cvs2svn to create branch
...
'OpenSSL_0_9_7-stable'.
2004-04-13 17:47:38 +00:00
Richard Levitte
a110d01771
Typo. "pa-rics2W" corrected to "pa-risc2W".
...
PR: 868
2004-04-02 12:39:54 +00:00
Geoff Thorpe
7ef7a1b3de
Avoid undefined results when the parameter is out of range.
2004-04-02 06:25:53 +00:00
Geoff Thorpe
2749276b95
Avoid undefined results when the parameter is out of range.
2004-04-02 06:25:11 +00:00