summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Clean up layout.Ben Laurie2013-09-051-1/+2
|
* Add an "-xmpphost" option to s_clientCarlos Alberto Lopez Perez2013-09-052-1/+16
| | | | | | | | | | | * Many XMPP servers are configured with multiple domains (virtual hosts) * In order to establish successfully the TLS connection you have to specify which virtual host you are trying to connect. * Test this, for example with :: * Fail: openssl s_client -connect talk.google.com:5222 -starttls xmpp * Works: openssl s_client -connect talk.google.com:5222 -starttls xmpp -xmpphost gmail.com
* Add "xmpp" to the list of supported starttls protocols on s_client manpageCarlos Alberto Lopez Perez2013-09-051-1/+1
|
* Fix infinite loop on s_client starttls xmppCarlos Alberto Lopez Perez2013-09-051-2/+4
| | | | | | | | | | | | | | * When the host used in "-connect" is not what the remote XMPP server expects the server will return an error like this: <stream:error> <host-unknown xmlns='urn:ietf:params:xml:ns:xmpp-streams'/> </stream:error> * But the actual code will stay on the loop forever because the stop condition "/stream:features>" will never happen, * Make this more robust: The stop condition should be that BIO_read failed * Test if for example with :: openssl s_client -connect random.jabb3r.net:5222 -starttls xmpp
* Fix XMPP code detection on s_client starttls xmppCarlos Alberto Lopez Perez2013-09-051-1/+2
| | | | | | | | * Some XMPP Servers (OpenFire) use double quotes. * This makes s_client starttls work with this servers. * Tested with OpenFire servers from http://xmpp.net/ :: openssl s_client -connect coderollers.com:5222 -starttls xmpp
* Don't prefer ECDHE-ECDSA ciphers when the client appears to be Safari on OS X.Rob Stradling2013-09-055-6/+114
| | | | OS X 10.8..10.8.3 has broken support for ECDHE-ECDSA ciphers.
* Document supported curve functions.Dr. Stephen Henson2013-09-031-0/+100
|
* Document -force_pubkey option.Dr. Stephen Henson2013-08-211-0/+10
|
* Correct ECDSA example.Dr. Stephen Henson2013-08-211-7/+3
|
* Correctly test for no-ec.Ben Laurie2013-08-211-1/+1
|
* Fix compile errors.Ben Laurie2013-08-211-3/+4
|
* Typo: don't call RAND_cleanup during app startup.Dr. Stephen Henson2013-08-181-1/+1
| | | | (cherry picked from commit 90e7f983b573c3f3c722a02db4491a1b1cd87e8c)
* Add documentation.Dr. Stephen Henson2013-08-174-0/+211
| | | | | Preliminary documentation for chain and verify stores and certificate chain setting functions.
* Don't run ECDH CMS tests if EC disabled.Dr. Stephen Henson2013-08-171-0/+20
|
* Make no-ec compilation work.Dr. Stephen Henson2013-08-179-22/+79
|
* Return 1 when setting ECDH auto mode.Dr. Stephen Henson2013-08-171-2/+2
|
* Add the server 'hang' issue to the FAQDr. Stephen Henson2013-08-141-0/+11
|
* DTLS message_sequence number wrong in rehandshake ServerHelloMichael Tuexen2013-08-132-1/+3
| | | | | | | | | | This fix ensures that * A HelloRequest is retransmitted if not responded by a ClientHello * The HelloRequest "consumes" the sequence number 0. The subsequent ServerHello uses the sequence number 1. * The client also expects the sequence number of the ServerHello to be 1 if a HelloRequest was received earlier. This patch fixes the RFC violation.
* DTLS handshake fix.Michael Tuexen2013-08-081-0/+6
| | | | | | Reported by: Prashant Jaikumar <rmstar@gmail.com> Fix handling of application data received before a handshake.
* Fix for PEM_X509_INFO_read_bio.Kaspar Brand2013-08-061-0/+1
| | | | | | PR: 3028 Fix bug introduced in PEM_X509_INFO_bio which wouldn't process RSA keys correctly if they appeared first.
* Update cms docs.Dr. Stephen Henson2013-08-051-2/+16
|
* Add X9.42 DH test.Dr. Stephen Henson2013-08-051-0/+8
|
* Add X9.42 DH certificate to S/MIME testDr. Stephen Henson2013-08-052-1/+47
|
* CMS RFC2631 X9.42 DH enveloped data support.Dr. Stephen Henson2013-08-054-9/+565
|
* Add KDF for DH.Dr. Stephen Henson2013-08-058-64/+274
| | | | | | | | Add X9.42 DH KDF. Move sharedinfo generation code to CMS library as the same structure is used by DH and ECDH. Move ASN1_OBJECT typedef to ossl_typ.h so it can be picked up by dh headers without the need to use ASN1.
* Extend DH parameter generation support.Dr. Stephen Henson2013-08-052-2/+121
| | | | | Add support for DH parameter generation using DSA methods including FIPS 186-3.
* Enhance DH dup functions.Dr. Stephen Henson2013-08-052-22/+60
| | | | Make DHparams_dup work properly with X9.42 DH parameters.
* If present print j, seed and counter values for DHDr. Stephen Henson2013-08-051-0/+25
|
* Minor optimisation to KDF algorithm.Dr. Stephen Henson2013-08-051-1/+1
| | | | Don't need to use temporary buffer if remaining length equals digest length.
* Algorithm parameter support.Dr. Stephen Henson2013-08-054-4/+29
| | | | | Check and set AlgorithmIdenfier parameters for key wrap algorithms. Currently these just set parameters to NULL.
* crypto/evp/e_aes.c: fix logical pre-processor bug and formatting.Andy Polyakov2013-08-031-5/+11
| | | | | Bug would emerge when XTS is added to bsaes-armv7.pl. Pointed out by Ard Biesheuvel of Linaro.
* crypto/bn/asm/rsax-x86_64.pl: make it work on Darwin.Andy Polyakov2013-08-031-9/+9
|
* crypto/sha/asm/sha*-x86_64.pl: comply with Win64 ABI.Andy Polyakov2013-07-312-8/+8
|
* Various custom extension fixes.Trevor Perrin2013-07-313-20/+13
| | | | | | Force no SSL2 when custom extensions in use. Don't clear extension state when cert is set. Clear on renegotiate.
* Add tests for ALPN functionality.Adam Langley2013-07-223-0/+174
| | | | | Conflicts: ssl/ssltest.c
* Add a no-opt 64-bit target.Ben Laurie2013-07-221-0/+1
|
* Support ALPN.Adam Langley2013-07-228-7/+432
| | | | | | | | | | | | This change adds support for ALPN[1] in OpenSSL. ALPN is the IETF blessed version of NPN and we'll be supporting both ALPN and NPN for some time yet. [1] https://tools.ietf.org/html/draft-ietf-tls-applayerprotoneg-00 Conflicts: ssl/ssl3.h ssl/t1_lib.c
* Make ecdsatest work with nonces.Dr. Stephen Henson2013-07-192-2/+10
| | | | | | | Update ecdsatest to use ECDSA_sign_setup and ECDSA_sign_ex, this avoids the nonce generation which would otherwise break the test. Reinstate ecdsatest.
* Temporarily disable ECDSA test.Dr. Stephen Henson2013-07-191-1/+1
| | | | Disable ECDSA test temporarily: it is incompatible with ECDSA nonces.
* New CMS tests.Dr. Stephen Henson2013-07-171-0/+25
| | | | Add some ECDH CMS tests.
* Scripts to recreate S/MIME test certificates.Dr. Stephen Henson2013-07-1711-205/+489
| | | | | | | Add a script to generate keys and certificates for the S/MIME and CMS tests. Update certificates and add EC examples.
* Custom key wrap option for cms utility.Dr. Stephen Henson2013-07-171-1/+17
|
* Return correct enveloped data type in ASN1 methods.Dr. Stephen Henson2013-07-172-0/+8
| | | | | | For RSA and DSA keys return an appropriate RecipientInfo type. By setting CMS_RECIPINFO_NONE for DSA keys an appropriate error is returned if an attempt is made to use DSA with enveloped data.
* Add support for ECDH KARI.Dr. Stephen Henson2013-07-174-2/+402
| | | | | | Add support for ECDH in enveloped data. The CMS ctrls for the EC ASN1 method decode/encode the appropriate parameters from the CMS ASN1 data and send appropriate data to the EC public key method.
* Add support for X9.62 KDF.Dr. Stephen Henson2013-07-175-6/+364
| | | | Add X9.62 KDF to EC EVP_PKEY_METHOD.
* Add new OIDs from RFC5753Dr. Stephen Henson2013-07-176-5/+194
| | | | | Add OIDs for KDF schemes from RFC5753 and add cross references for each type and the appropriate digest to use.
* CMS support for key agreeement recipient info.Dr. Stephen Henson2013-07-1712-93/+824
| | | | | Add hooks to support key agreement recipient info type (KARI) using algorithm specific code in the relevant public key ASN1 method.
* Set CMS EnvelopedData version correctly.Dr. Stephen Henson2013-07-171-0/+73
|
* EVP support for wrapping algorithms.Dr. Stephen Henson2013-07-1713-197/+420
| | | | | | | | | Add support for key wrap algorithms via EVP interface. Generalise AES wrap algorithm and add to modes, making existing AES wrap algorithm a special case. Move test code to evptests.txt
* Typo.Dr. Stephen Henson2013-07-171-1/+1
|
generated by cgit v1.2.3 (git 2.39.1) at 2025-01-10 05:08:21 +0100