Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | PR: 2527 | Dr. Stephen Henson | 2011-05-25 | 1 | -0/+1 |
| | | | | | | | Submitted by: Marcus Meissner <meissner@suse.de> Reviewed by: steve Set cnf to NULL to avoid possible double free. | ||||
* | Implement FIPS_mode and FIPS_mode_set | Dr. Stephen Henson | 2011-05-19 | 1 | -4/+1 |
| | |||||
* | Enter FIPS mode by calling FIPS_module_mode_set in openssl.c until | Dr. Stephen Henson | 2011-05-12 | 1 | -1/+4 |
| | | | | FIPS_mode_set is implemented. | ||||
* | make kerberos work with OPENSSL_NO_SSL_INTERN | Dr. Stephen Henson | 2011-05-12 | 2 | -12/+25 |
| | |||||
* | Initial TLS v1.2 client support. Include a default supported signature | Dr. Stephen Henson | 2011-05-09 | 1 | -0/+15 |
| | | | | | | | | algorithms extension (including everything we support). Swicth to new signature format where needed and relax ECC restrictions. Not TLS v1.2 client certifcate support yet but client will handle case where a certificate is requested and we don't have one. | ||||
* | Continuing TLS v1.2 support: add support for server parsing of | Dr. Stephen Henson | 2011-05-06 | 1 | -0/+3 |
| | | | | | | | | signature algorithms extension and correct signature format for server key exchange. All ciphersuites should now work on the server but no client support and no client certificate support yet. | ||||
* | Initial incomplete TLS v1.2 support. New ciphersuites added, new version | Dr. Stephen Henson | 2011-04-30 | 3 | -1/+16 |
| | | | | | | | checking added, SHA256 PRF support added. At present only RSA key exchange ciphersuites work with TLS v1.2 as the new signature format is not yet implemented. | ||||
* | Initial "opaque SSL" framework. If an application defines | Dr. Stephen Henson | 2011-04-30 | 5 | -23/+27 |
| | | | | | | | | | | OPENSSL_NO_SSL_INTERN all ssl related structures are opaque and internals cannot be directly accessed. Many applications will need some modification to support this and most likely some additional functions added to OpenSSL. The advantage of this option is that any application supporting it will still be binary compatible if SSL structures change. | ||||
* | More fixes for DSA FIPS overrides. | Dr. Stephen Henson | 2011-04-23 | 1 | -1/+9 |
| | |||||
* | Make sure overrides work for RSA/DSA. | Dr. Stephen Henson | 2011-04-23 | 2 | -0/+12 |
| | |||||
* | Add fips hmac key to dgst utility. | Dr. Stephen Henson | 2011-04-07 | 1 | -0/+2 |
| | |||||
* | FIPS mode support for openssl utility: doesn't work properly yet due | Dr. Stephen Henson | 2011-04-04 | 1 | -0/+16 |
| | | | | to missing DRBG support in libcrypto. | ||||
* | Corrections to the VMS build system. | Richard Levitte | 2011-03-25 | 2 | -70/+86 |
| | | | | Submitted by Steven M. Schweda <sms@antinode.info> | ||||
* | For VMS, implement the possibility to choose 64-bit pointers with | Richard Levitte | 2011-03-25 | 2 | -43/+70 |
| | | | | | | | | different options: "64" The build system will choose /POINTER_SIZE=64=ARGV if the compiler supports it, otherwise /POINTER_SIZE=64. "64=" The build system will force /POINTER_SIZE=64. "64=ARGV" The build system will force /POINTER_SIZE=64=ARGV. | ||||
* | make update (1.1.0-dev) | Richard Levitte | 2011-03-23 | 1 | -117/+122 |
| | | | | | | This meant alarger renumbering in util/libeay.num due to symbols appearing in 1.0.0-stable and 1.0.1-stable. However, since there's been no release on this branch yet, it should be harmless. | ||||
* | * apps/makeapps.com: Add srp. | Richard Levitte | 2011-03-20 | 1 | -1/+1 |
| | |||||
* | * apps/makeapps.com: Forgot to end the check for /POINTER_SIZE=64=ARGV | Richard Levitte | 2011-03-20 | 1 | -0/+1 |
| | | | | | | | with turning trapping back on. * test/maketests.com: Do the same check for /POINTER_SIZE=64=ARGV here. * test/clean-test.com: A new script for cleaning up. | ||||
* | * apps/openssl.c: For VMS, take care of copying argv if needed much earlier, | Richard Levitte | 2011-03-20 | 2 | -29/+77 |
| | | | | | | | | directly in main(). 'if needed' also includes when argv is a 32 bit pointer in an otherwise 64 bit environment. * apps/makeapps.com: When using /POINTER_SIZE=64, try to use the additional =ARGV, but only if it's supported. Fortunately, DCL is very helpful telling us in this case. | ||||
* | After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS | Richard Levitte | 2011-03-19 | 8 | -174/+511 |
| | | | | submitted by Steven M. Schweda <sms@antinode.info> | ||||
* | Fix warnings about ignored return values. | Dr. Stephen Henson | 2011-03-17 | 1 | -2/+10 |
| | |||||
* | Missing SRP files. | Ben Laurie | 2011-03-16 | 2 | -0/+7 |
| | |||||
* | PR: 2469 | Dr. Stephen Henson | 2011-03-13 | 1 | -1/+1 |
| | | | | | | | Submitted by: Jim Studt <jim@studt.net> Reviewed by: steve Check mac is present before trying to retrieve mac iteration count. | ||||
* | Fix warnings: signed/unisgned comparison, shadowing (in some cases global | Dr. Stephen Henson | 2011-03-12 | 2 | -7/+7 |
| | | | | functions such as rand() ). | ||||
* | Add SRP support. | Ben Laurie | 2011-03-12 | 5 | -130/+1168 |
| | |||||
* | Fix warning. | Ben Laurie | 2011-03-12 | 1 | -0/+1 |
| | |||||
* | make no-dsa work again | Dr. Stephen Henson | 2011-03-10 | 1 | -0/+2 |
| | |||||
* | Fix duplicate code and typo. | Dr. Stephen Henson | 2011-02-06 | 1 | -3/+1 |
| | |||||
* | make update | Bodo Möller | 2011-02-03 | 1 | -13/+13 |
| | |||||
* | Constify. | Ben Laurie | 2011-01-09 | 1 | -2/+4 |
| | |||||
* | Part of the IF structure didn't get pasted here... | Richard Levitte | 2010-12-14 | 1 | -0/+7 |
| | | | | PR: 2393 | ||||
* | First attempt at adding the possibility to set the pointer size for the ↵ | Richard Levitte | 2010-12-14 | 1 | -3/+55 |
| | | | | | | builds on VMS. PR: 2393 | ||||
* | apps/x590.c: harmonize usage of STDout and out_err. | Andy Polyakov | 2010-12-12 | 1 | -2/+2 |
| | | | | PR: 2323 | ||||
* | fix no SIGALRM case in speed.c | Dr. Stephen Henson | 2010-11-18 | 1 | -1/+2 |
| | |||||
* | add TLS v1.1 options to s_server | Dr. Stephen Henson | 2010-11-16 | 1 | -0/+4 |
| | |||||
* | PR: 2366 | Dr. Stephen Henson | 2010-11-11 | 2 | -6/+8 |
| | | | | | | | | Submitted by: Damien Miller <djm@mindrot.org> Reviewed by: steve Stop pkeyutl crashing if some arguments are missing. Also make str2fmt tolerate NULL parameter. | ||||
* | Fixes to NPN from Adam Langley. | Ben Laurie | 2010-09-05 | 4 | -21/+21 |
| | |||||
* | For better forward-security support, add functions | Bodo Möller | 2010-08-26 | 1 | -0/+20 |
| | | | | | | | | | | SSL_[CTX_]set_not_resumable_session_callback. Submitted by: Emilia Kasper (Google) [A part of this change affecting ssl/s3_lib.c was accidentally commited separately, together with a compilation fix for that file; see s3_lib.c CVS revision 1.133 (http://cvs.openssl.org/chngview?cn=19855).] | ||||
* | Add Next Protocol Negotiation. | Ben Laurie | 2010-07-28 | 4 | -1/+191 |
| | |||||
* | Sign mismatch. | Ben Laurie | 2010-07-27 | 1 | -1/+1 |
| | |||||
* | gcm128.c: API modification and readability improvements, | Andy Polyakov | 2010-07-09 | 1 | -2/+28 |
| | | | | add ghash benchmark to apps/speed.c. | ||||
* | i variable is used on some platforms | Dr. Stephen Henson | 2010-07-05 | 1 | -0/+1 |
| | |||||
* | Fix warnings. | Ben Laurie | 2010-06-12 | 16 | -65/+17 |
| | |||||
* | PR: 2262 | Dr. Stephen Henson | 2010-05-27 | 1 | -2/+12 |
| | | | | | | Submitted By: Victor Wagner <vitus@cryptocom.ru> Fix error reporting in load_key function. | ||||
* | oops, revert test patch | Dr. Stephen Henson | 2010-05-15 | 1 | -10/+0 |
| | |||||
* | PR: 2253 | Dr. Stephen Henson | 2010-05-15 | 1 | -0/+10 |
| | | | | | | Submitted By: Ger Hobbelt <ger@hobbelt.com> Check callback return value when outputting errors. | ||||
* | PR: 2220 | Dr. Stephen Henson | 2010-04-06 | 3 | -3/+3 |
| | | | | Fixes to make OpenSSL compile with no-rc4 | ||||
* | free up sigopts STACK | Dr. Stephen Henson | 2010-03-14 | 1 | -0/+2 |
| | |||||
* | clear bogus errors in ca utility | Dr. Stephen Henson | 2010-03-14 | 1 | -0/+1 |
| | |||||
* | add -sigopt option to ca utility | Dr. Stephen Henson | 2010-03-14 | 3 | -20/+59 |
| | |||||
* | new sigopt and PSS support for req and x509 utilities | Dr. Stephen Henson | 2010-03-12 | 3 | -11/+96 |
| |