Bodo Möller
46c4647e3c
"openssl no-..." commands for avoiding the need to grep
...
"openssl list-standard-commands".
2000-03-13 20:31:46 +00:00
Bodo Möller
d58d6c2783
Include a timing test that works without RSA.
2000-03-13 19:44:45 +00:00
Bodo Möller
95fabd2fbc
Corrections.
...
In testss, use MD5 as digest algorithm so that the resulting
certificates can be used for testssl with RSA.
2000-03-13 19:35:37 +00:00
Bodo Möller
7d2509b6df
Update usage info
2000-03-13 19:30:59 +00:00
Bodo Möller
65b002f399
Update test suite so that 'make test' succeeds in 'no-rsa' configuration.
2000-03-13 19:24:39 +00:00
Richard Levitte
bc23b70e47
Synchronise with Unix.
2000-03-13 19:05:18 +00:00
Richard Levitte
41f0aae69b
Correct a potential bug.
2000-03-13 18:59:11 +00:00
Bodo Möller
ee607d338a
Don't try to test the RSA command if it is not available.
2000-03-13 18:05:59 +00:00
Bodo Möller
e11f0de67f
Copy DH key (if available) in addition to the bare parameters
...
in SSL_new.
If SSL_OP_SINGLE_DH_USE is set, don't waste time in SSL_[CTX_]set_tmp_dh
on computing a DH key that will be ignored anyway.
ssltest -dhe1024dsa (w/ 160-bit sub-prime) had an unfair performance
advantage over -dhe1024 (safe prime): SSL_OP_SINGLE_DH_USE was
effectively always enabled because SSL_new ignored the DH key set in
the SSL_CTX. Now -dhe1024 takes the server only about twice as long
as -dhe1024dsa instead of three times as long (for 1024 bit RSA
with 1024 bit DH).
2000-03-13 17:07:04 +00:00
Bodo Möller
563f1503a8
Connection timings (using ISO C function clock()).
2000-03-13 15:06:54 +00:00
Bodo Möller
88f17a5e98
Remove Win32 assembler files. They are always rebuilt (with some
...
choice of parameters) when they are needed.
2000-03-13 08:04:20 +00:00
Bodo Möller
863fe2ecac
cleaning up a little
2000-03-12 23:27:14 +00:00
Ulf Möller
3a6a39c373
asm workaround for SuSE Linux
...
proposed by Holger Reif
2000-03-12 12:52:36 +00:00
Ulf Möller
cee814f9d5
make update
2000-03-12 12:49:45 +00:00
Bodo Möller
bf8479d22f
Workaround for Windoze weirdness.
2000-03-11 01:29:26 +00:00
Bodo Möller
4a56f7493c
On NeXT, ssize_t is int, not long (see <sys/types.h> -- the definition
...
is activated only when _POSIX_SOURCE is defined).
2000-03-11 01:29:14 +00:00
Ulf Möller
f95808e8a5
NO_SYSLOG is defined for MSDOS anyway. just don't include the Unix
...
header...
2000-03-10 23:45:51 +00:00
Ulf Möller
b70dcdfc3f
ssize_t
2000-03-10 23:45:28 +00:00
Bodo Möller
4991d07cf3
Use signed types where necessary, and add missing functionality
...
to make SSL_nread0 work.
2000-03-10 21:44:38 +00:00
Ulf Möller
9e03333fd5
Use L for all constants.
2000-03-10 17:43:05 +00:00
Ulf Möller
9f06706bf7
Don't generate asm files for no-asm.
2000-03-10 17:02:12 +00:00
Ulf Möller
153a59f46d
Repair bss_log.
...
Curiously enough, void functions don't return a value.
2000-03-10 17:01:23 +00:00
Bodo Möller
2d5e449a18
Mention -ign_eof.
2000-03-10 13:49:02 +00:00
Bodo Möller
e458958280
Always use fixed DH parameters created with 'dhparam -C',
...
don't dynamically create them. This allows using ssltest
for approximate performance comparisons:
$ time ./ssltest -num 50 -tls1 -cert ../apps/server2.pem \
[-no_dhe|-dhe1024dsa|-dhe1024]
(server2.pem contains a 1024 bit RSA key, the default has only
512 bits.) Note that these timings contain both the server's and
the client's computations, they are not a good indicator for
server workload in different configurations.
2000-03-10 13:23:20 +00:00
Richard Levitte
ce301b6b0b
Add the possibility (with -ign_eof) to ignore end of file on input but
...
still not be quiet. Also make it clear that -quiet implicitely means
-ign_eof as well.
2000-03-10 12:18:28 +00:00
Bodo Möller
0dd3989868
Change to code generated by 'dhparam -C':
...
- Move DH parameter components inside the function.
- Automatically #include the required header file if it
has not already been #included.
2000-03-10 12:17:37 +00:00
Bodo Möller
a10c512afa
another typo
2000-03-10 11:47:58 +00:00
Bodo Möller
9f5d2069a4
typo
2000-03-10 11:43:45 +00:00
Ulf Möller
e4947bfec7
clarify.
2000-03-09 17:07:55 +00:00
Ulf Möller
837174dd63
bug fix.
...
Submitted by: "Yoram Meroz" <yoram@mail.idrive.com>
2000-03-09 17:07:19 +00:00
Bodo Möller
97025c5fc0
Manual page installation did not work if INSTALL_PREFIX was a relative path.
2000-03-09 15:04:27 +00:00
Dr. Stephen Henson
e743a5134e
Don't Free() password if it was read from config file.
2000-03-09 01:03:44 +00:00
Bodo Möller
97853bd5c1
Clarification.
2000-03-08 20:20:15 +00:00
Dr. Stephen Henson
c61252001b
Fix typo and make ca get the CA and request fields correct.
2000-03-08 12:44:10 +00:00
Dr. Stephen Henson
9886f42014
Manual pages for EVP_Open* and EVP_Seal*
2000-03-08 01:48:12 +00:00
Richard Levitte
b7e1636171
Protect variables from potential misinterpretations, for example a
...
colon which may bite the lesser knowleged...
2000-03-07 23:17:48 +00:00
Richard Levitte
3bf7ef5389
Check that a password was actually passed, or the user will just get
...
mysterious crashes.
2000-03-07 22:35:27 +00:00
Dr. Stephen Henson
f71732627a
Manual pages for EVP signing and verifying.
2000-03-07 17:35:25 +00:00
Bodo Möller
daf4e53e86
spelling
2000-03-07 15:10:08 +00:00
Dr. Stephen Henson
068fdce877
New compatability trust and purpose settings.
2000-03-07 14:04:29 +00:00
Bodo Möller
fa0ca35b95
{NEXT,OPEN}STEP don't have pid_t.
2000-03-07 09:37:19 +00:00
Dr. Stephen Henson
48fe0eec67
Fix the PKCS#8 DSA code so it works again. All the
...
broken formats worked but the valid didn't :-(
2000-03-07 01:03:33 +00:00
Ulf Möller
4c4d87f95f
bug fix release planned
2000-03-06 14:24:25 +00:00
Bodo Möller
4013f3bf1e
Fix the indentation, and avoid a compiler warning.
2000-03-06 10:21:57 +00:00
Richard Levitte
fe10275da8
Let's not lie to the people.
2000-03-06 07:31:17 +00:00
Bodo Möller
de83c12253
Add missing include (only MONOLITH builds were possible without it).
...
Submitted by: Andrew W. Gray
2000-03-05 01:11:44 +00:00
Bodo Möller
59fc2b0fc2
Preserve reason strings in automatically build tables.
2000-03-05 00:19:36 +00:00
Richard Levitte
5ba7c902e5
Beautifying. Sorry, but code that's slammed to the far left is not
...
very readable in my opinion.
2000-03-04 21:31:52 +00:00
Richard Levitte
3916800fef
Let's care about the compiler warnings for both cases, shall we?
2000-03-04 20:19:57 +00:00
Bodo Möller
1a2450bfc3
There is no reason to use downcase letters throughout in error reason
...
strings, it's just the default because it's usually ok.
2000-03-04 17:56:32 +00:00