aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Make sk_sort tolearate a NULL argument.Dr. Stephen Henson2001-01-282-1/+4
|
* New OCSP response verify option OCSP_TRUSTOTHERDr. Stephen Henson2001-01-263-7/+22
|
* Documentation language corrections, contributed by Chris Pepper ↵Richard Levitte2001-01-253-10/+10
| | | | <pepper@mail.reppep.com>
* Zero the premaster secret after deriving the master secret in DHDr. Stephen Henson2001-01-252-0/+5
| | | | ciphersuites.
* Insert a missing space to stop pod2man giving stroppy "malformed" warnings.Geoff Thorpe2001-01-251-1/+1
|
* updateBodo Möller2001-01-241-1/+22
|
* Add debugging info to new ASN1 code to trace memory leaks.Dr. Stephen Henson2001-01-246-15/+58
| | | | | | Fix PKCS7 and PKCS12 memory leaks. Initialise encapsulated content type properly.
* Update "OAEP reconsidered" commentBodo Möller2001-01-241-8/+8
|
* new yearUlf Möller2001-01-241-1/+1
|
* EVP_add_digest_alias additions to SS_library_initBodo Möller2001-01-231-1/+8
|
* There is no C version of bn_div_3_wordsUlf Möller2001-01-232-1/+4
|
* For improved compatibility with 'strange' certificates, add someBodo Möller2001-01-231-0/+4
| | | | digest aliases (as found in OpenSSL_add_all_digests).
* Use OpenSSL_add_all_algorithms instead of the backwards compatibilityBodo Möller2001-01-231-3/+3
| | | | alias SSLeay_add_all_algorithms
* More on the e_os.h mess ...Bodo Möller2001-01-231-2/+6
|
* Copy over just written manpage to the ones still missing.Lutz Jänicke2001-01-233-1/+117
|
* Add entries for new manpages...Lutz Jänicke2001-01-231-1/+4
|
* Definition of NO_KRB5 in ssl.h for external applications.Ulf Möller2001-01-222-0/+9
|
* Use the correct number of arguments in the example.Ulf Möller2001-01-211-2/+2
|
* Mention the ./config script fixes.Ulf Möller2001-01-211-0/+3
|
* Documentation about SSL_get_ex_data_X509_STORE_CTX_idx andLutz Jänicke2001-01-203-7/+160
| | | | | SSL_get_ex_new_index() functionality. Extended verify_callback() example to show the usage.
* Fix to stop X509_time_adj() using GeneralizedTime.Dr. Stephen Henson2001-01-202-3/+14
|
* Update ocsp utility documentation.Dr. Stephen Henson2001-01-201-8/+57
|
* Fixes to various ASN1_INTEGER routines for negative case.Dr. Stephen Henson2001-01-195-6/+45
| | | | Enhance s2i_ASN1_INTEGER().
* Fix openssl passwd -1Bodo Möller2001-01-192-1/+4
|
* Additional functionality in ocsp utility: print summaryDr. Stephen Henson2001-01-196-24/+164
| | | | | | | of status info. Check nonce values. Option to disable verify. Update usage message. Rename status to string functions and make them global.
* Don't shadow.Dr. Stephen Henson2001-01-181-1/+0
|
* Implement remaining OCSP verify checks inDr. Stephen Henson2001-01-185-13/+187
| | | | accordance with RFC2560.
* Make the change log on the RAND_poll change a bit more explicit. Suggested ↵Richard Levitte2001-01-171-3/+8
| | | | by Bodo Moeller.
* Keep up with UnixRichard Levitte2001-01-171-2/+2
|
* Initial OCSP certificate verify. Not complete,Dr. Stephen Henson2001-01-1713-42/+204
| | | | it just supports a "trusted OCSP global root CA".
* link to the new manpage.Ulf Möller2001-01-152-1/+8
|
* New '-extfile' option for 'openssl ca'.Bodo Möller2001-01-153-22/+114
| | | | | | This allows keeping extensions in a separate configuration file. Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
* Update the LHASH man page.Geoff Thorpe2001-01-141-48/+139
| | | | | | | | | | | | | | | | * Correct some prototypes and macros with respect to "const"ness. * Add the extra macros and examples due to the lh_doall[_arg] modifications made recently. The existing example is also reworked for consistency. * Rewrite, tweak, and supplement bits of the existing comments that seemed (IMHO) to be a little convoluted and misleading. * Add a NOTE section that explains the use of macros and avoiding function casts (ie. generate a wrapper as with the macros, or prototype any callback functions exactly to not require casting). Also, explain the "const" approach taken in LHASH for the purposes of API comprehensibility and also application code auditing.
* Change PKCS#12 key derivation routines to cope withDr. Stephen Henson2001-01-145-9/+19
| | | | non null terminated passwords.
* Fix warning in apps/ca.cDr. Stephen Henson2001-01-141-2/+2
|
* Preliminary ocsp utility documentation.Dr. Stephen Henson2001-01-142-0/+139
| | | | Fix ocsp usage message.
* New OCSP utility. This can generate, parse and printDr. Stephen Henson2001-01-136-7/+469
| | | | | | | | OCSP requests. It can also query reponders and parse or print out responses. Still needs some more work: OCSP response checks and of course documentation.
* Disable RegQueryValueEx() call.Bodo Möller2001-01-121-0/+5
| | | | | Problem reported by "Wolfgang Marczy" <WMarczy@topcall.co.at> in a message to openssl-dev (19 Dec 2000 13:40:51 +0100).
* New 'openssl ca -status <serial>' and 'openssl ca -updatedb'Bodo Möller2001-01-122-34/+327
| | | | | | commands. Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
* isspace must be used only on *unsigned* charsBodo Möller2001-01-121-6/+6
|
* note strncpy problemBodo Möller2001-01-121-1/+4
|
* When we are waiting for user action, we should say this explicitly.Bodo Möller2001-01-121-3/+3
|
* Fix typo in OCSP ASN1 module, this causedDr. Stephen Henson2001-01-113-4/+4
| | | | | | | | | | | invalid format in OCSP request signatures. Add spaces to OCSP HTTP header. Change X509_NAME_set() there's no reason why it should return an error if the destination points to NULL... though it should if the destination is NULL.
* Remove "AVAILABLE PATCH" that has now been applied.Bodo Möller2001-01-111-4/+4
| | | | Move ex_data.c entry from "NEEDS PATCH" to "OPEN ISSUES".
* New -newreq-nodes option to CA.pl.Bodo Möller2001-01-113-3/+18
| | | | Submitted by: Damien Miller <djm@mindrot.org>
* Add configuration for GNU Hurd.Richard Levitte2001-01-113-0/+10
|
* OCSP basic response verify. Very incompleteDr. Stephen Henson2001-01-116-5/+162
| | | | | | | | | | but will verify the signatures on a response and locate the signers certifcate. Still needs to implement a proper OCSP certificate verify. Fix warning in RAND_egd().
* No functional change, but slightly improved code clarity.Bodo Möller2001-01-101-3/+6
|
* After discussion with Richard, change the new API for extended memoryBodo Möller2001-01-102-74/+65
| | | | | | allocation callbacks so that it is no longer visible to applications that these live at a different call level than conventional memory allocation callbacks.
* It's silly to use a different default for PERL than in the topBodo Möller2001-01-101-1/+1
| | | | | Makefile. (The default is never actually used though because the top Makefile passes its value of PERL down to sub-Makefiles.)