summaryrefslogtreecommitdiffstats
path: root/apps (follow)
Commit message (Collapse)AuthorAgeFilesLines
* PR: 2527Dr. Stephen Henson2011-05-251-0/+1
| | | | | | | Submitted by: Marcus Meissner <meissner@suse.de> Reviewed by: steve Set cnf to NULL to avoid possible double free.
* Implement FIPS_mode and FIPS_mode_setDr. Stephen Henson2011-05-191-4/+1
|
* Enter FIPS mode by calling FIPS_module_mode_set in openssl.c untilDr. Stephen Henson2011-05-121-1/+4
| | | | FIPS_mode_set is implemented.
* make kerberos work with OPENSSL_NO_SSL_INTERNDr. Stephen Henson2011-05-122-12/+25
|
* Initial TLS v1.2 client support. Include a default supported signatureDr. Stephen Henson2011-05-091-0/+15
| | | | | | | | algorithms extension (including everything we support). Swicth to new signature format where needed and relax ECC restrictions. Not TLS v1.2 client certifcate support yet but client will handle case where a certificate is requested and we don't have one.
* Continuing TLS v1.2 support: add support for server parsing ofDr. Stephen Henson2011-05-061-0/+3
| | | | | | | | signature algorithms extension and correct signature format for server key exchange. All ciphersuites should now work on the server but no client support and no client certificate support yet.
* Initial incomplete TLS v1.2 support. New ciphersuites added, new versionDr. Stephen Henson2011-04-303-1/+16
| | | | | | | checking added, SHA256 PRF support added. At present only RSA key exchange ciphersuites work with TLS v1.2 as the new signature format is not yet implemented.
* Initial "opaque SSL" framework. If an application definesDr. Stephen Henson2011-04-305-23/+27
| | | | | | | | | | OPENSSL_NO_SSL_INTERN all ssl related structures are opaque and internals cannot be directly accessed. Many applications will need some modification to support this and most likely some additional functions added to OpenSSL. The advantage of this option is that any application supporting it will still be binary compatible if SSL structures change.
* More fixes for DSA FIPS overrides.Dr. Stephen Henson2011-04-231-1/+9
|
* Make sure overrides work for RSA/DSA.Dr. Stephen Henson2011-04-232-0/+12
|
* Add fips hmac key to dgst utility.Dr. Stephen Henson2011-04-071-0/+2
|
* FIPS mode support for openssl utility: doesn't work properly yet dueDr. Stephen Henson2011-04-041-0/+16
| | | | to missing DRBG support in libcrypto.
* Corrections to the VMS build system.Richard Levitte2011-03-252-70/+86
| | | | Submitted by Steven M. Schweda <sms@antinode.info>
* For VMS, implement the possibility to choose 64-bit pointers withRichard Levitte2011-03-252-43/+70
| | | | | | | | different options: "64" The build system will choose /POINTER_SIZE=64=ARGV if the compiler supports it, otherwise /POINTER_SIZE=64. "64=" The build system will force /POINTER_SIZE=64. "64=ARGV" The build system will force /POINTER_SIZE=64=ARGV.
* make update (1.1.0-dev)Richard Levitte2011-03-231-117/+122
| | | | | | This meant alarger renumbering in util/libeay.num due to symbols appearing in 1.0.0-stable and 1.0.1-stable. However, since there's been no release on this branch yet, it should be harmless.
* * apps/makeapps.com: Add srp.Richard Levitte2011-03-201-1/+1
|
* * apps/makeapps.com: Forgot to end the check for /POINTER_SIZE=64=ARGVRichard Levitte2011-03-201-0/+1
| | | | | | | with turning trapping back on. * test/maketests.com: Do the same check for /POINTER_SIZE=64=ARGV here. * test/clean-test.com: A new script for cleaning up.
* * apps/openssl.c: For VMS, take care of copying argv if needed much earlier,Richard Levitte2011-03-202-29/+77
| | | | | | | | directly in main(). 'if needed' also includes when argv is a 32 bit pointer in an otherwise 64 bit environment. * apps/makeapps.com: When using /POINTER_SIZE=64, try to use the additional =ARGV, but only if it's supported. Fortunately, DCL is very helpful telling us in this case.
* After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMSRichard Levitte2011-03-198-174/+511
| | | | submitted by Steven M. Schweda <sms@antinode.info>
* Fix warnings about ignored return values.Dr. Stephen Henson2011-03-171-2/+10
|
* Missing SRP files.Ben Laurie2011-03-162-0/+7
|
* PR: 2469Dr. Stephen Henson2011-03-131-1/+1
| | | | | | | Submitted by: Jim Studt <jim@studt.net> Reviewed by: steve Check mac is present before trying to retrieve mac iteration count.
* Fix warnings: signed/unisgned comparison, shadowing (in some cases globalDr. Stephen Henson2011-03-122-7/+7
| | | | functions such as rand() ).
* Add SRP support.Ben Laurie2011-03-125-130/+1168
|
* Fix warning.Ben Laurie2011-03-121-0/+1
|
* make no-dsa work againDr. Stephen Henson2011-03-101-0/+2
|
* Fix duplicate code and typo.Dr. Stephen Henson2011-02-061-3/+1
|
* make updateBodo Möller2011-02-031-13/+13
|
* Constify.Ben Laurie2011-01-091-2/+4
|
* Part of the IF structure didn't get pasted here...Richard Levitte2010-12-141-0/+7
| | | | PR: 2393
* First attempt at adding the possibility to set the pointer size for the ↵Richard Levitte2010-12-141-3/+55
| | | | | | builds on VMS. PR: 2393
* apps/x590.c: harmonize usage of STDout and out_err.Andy Polyakov2010-12-121-2/+2
| | | | PR: 2323
* fix no SIGALRM case in speed.cDr. Stephen Henson2010-11-181-1/+2
|
* add TLS v1.1 options to s_serverDr. Stephen Henson2010-11-161-0/+4
|
* PR: 2366Dr. Stephen Henson2010-11-112-6/+8
| | | | | | | | Submitted by: Damien Miller <djm@mindrot.org> Reviewed by: steve Stop pkeyutl crashing if some arguments are missing. Also make str2fmt tolerate NULL parameter.
* Fixes to NPN from Adam Langley.Ben Laurie2010-09-054-21/+21
|
* For better forward-security support, add functionsBodo Möller2010-08-261-0/+20
| | | | | | | | | | SSL_[CTX_]set_not_resumable_session_callback. Submitted by: Emilia Kasper (Google) [A part of this change affecting ssl/s3_lib.c was accidentally commited separately, together with a compilation fix for that file; see s3_lib.c CVS revision 1.133 (http://cvs.openssl.org/chngview?cn=19855).]
* Add Next Protocol Negotiation.Ben Laurie2010-07-284-1/+191
|
* Sign mismatch.Ben Laurie2010-07-271-1/+1
|
* gcm128.c: API modification and readability improvements,Andy Polyakov2010-07-091-2/+28
| | | | add ghash benchmark to apps/speed.c.
* i variable is used on some platformsDr. Stephen Henson2010-07-051-0/+1
|
* Fix warnings.Ben Laurie2010-06-1216-65/+17
|
* PR: 2262Dr. Stephen Henson2010-05-271-2/+12
| | | | | | Submitted By: Victor Wagner <vitus@cryptocom.ru> Fix error reporting in load_key function.
* oops, revert test patchDr. Stephen Henson2010-05-151-10/+0
|
* PR: 2253Dr. Stephen Henson2010-05-151-0/+10
| | | | | | Submitted By: Ger Hobbelt <ger@hobbelt.com> Check callback return value when outputting errors.
* PR: 2220Dr. Stephen Henson2010-04-063-3/+3
| | | | Fixes to make OpenSSL compile with no-rc4
* free up sigopts STACKDr. Stephen Henson2010-03-141-0/+2
|
* clear bogus errors in ca utilityDr. Stephen Henson2010-03-141-0/+1
|
* add -sigopt option to ca utilityDr. Stephen Henson2010-03-143-20/+59
|
* new sigopt and PSS support for req and x509 utilitiesDr. Stephen Henson2010-03-123-11/+96
|