aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Implement support for no-tsRichard Levitte2016-03-185-20/+32
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* apps/progs.pl: more consistent output for digestsRichard Levitte2016-03-182-4/+11
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix no-desMatt Caswell2016-03-185-12/+29
| | | | | | Numerous fixes for no-des. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix no-dgramMatt Caswell2016-03-181-3/+10
| | | | | | | A few places in s_client needed some OPENSSL_NO_DTLS guards which fixes no-dgram. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix no-deprecatedMatt Caswell2016-03-181-0/+1
| | | | | | | The no-deprecated build was failing because afalg was relying on a transitive include that does not exist in a no-deprecated build. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix no-cmacMatt Caswell2016-03-183-3/+12
| | | | | | There were a couple of CMAC references without OPENSSL_NO_CMAC guards. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add a test to see that signals are caught as failuresRichard Levitte2016-03-183-0/+31
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Make OpenSSL::Test::run() sensitive to signalsRichard Levitte2016-03-181-2/+7
| | | | | | | | | | | | | | | $? in perl gets the status value from wait(2), which is a word with the exit code in the upper half and the number of a raised signal in the lower half. OpenSSL::Test::run() ignored the signal half up until now. With this change, we recalculate an exit code the same way the Unix shells do, using this formula: ($? & 0x7f) ? ($? & 0x7f)|0x80 : ($? >> 8); Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Remove more unused things.Rich Salz2016-03-1815-6028/+1
| | | | | | Moved doc/standards.txt to the web. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Resolved unresolved symbols with no-hwMatt Caswell2016-03-181-7/+10
| | | | | | | Compiling on Windows with no-hw was resulting in unresolved symbols in the padlock engine. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Ensure that no-comp functions are flagged as suchMatt Caswell2016-03-185-15/+25
| | | | | | | | mkdef.pl was not detecting no-comp functions. This updates the header file so that mkdef.pl detects that no-comp applies, and the functions are marked accordingly. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix no-rc2 in the CMS testMatt Caswell2016-03-181-5/+9
| | | | | | | The CMS test uses some RC2 keys which should be skipped if the RC2 is disabled. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Mark OCB as an AEAD cipherMatt Caswell2016-03-181-3/+6
| | | | | | | OCB is AEAD capable but was not marked as such with the EVP_CIPH_FLAG_AEAD_CIPHER flag. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Ensure that memory allocated for the ticket is freedMatt Caswell2016-03-181-0/+1
| | | | | | | | | If a call to EVP_DecryptUpdate fails then a memory leak could occur. Ensure that the memory is freed appropriately. Issue reported by Guido Vranken. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix a potential double free in EVP_DigestInit_exMatt Caswell2016-03-181-1/+3
| | | | | | | | | | There is a potential double free in EVP_DigestInit_ex. This is believed to be reached only as a result of programmer error - but we should fix it anyway. Issue reported by Guido Vranken. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix build; CPP syntax error.Rich Salz2016-03-181-1/+1
| | | | Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Update EVP_CIPHER_CTX_set_padding documentation.Conrado Porto Lopes Gouvêa2016-03-171-6/+8
| | | | | | Add note about when EVP_CIPHER_CTX_set_padding should be called. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* README: small fixupsRichard Levitte2016-03-171-5/+3
| | | | | | | | Don't refer to INSTALL files that don't exist any more. Make it clear that the libssl and libcrypto libraries may be named differently on different platforms. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Make picker, thread and combine standard config helper functionsRichard Levitte2016-03-174-32/+52
| | | | | | Document them as well Reviewed-by: Andy Polyakov <appro@openssl.org>
* Remove Netware and OS/2Rich Salz2016-03-1760-3350/+54
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Disallow --classic for WindowsRichard Levitte2016-03-171-1/+1
| | | | | | With all the config changes, mk1mf is broken on Windows. Reviewed-by: Rich Salz <rsalz@openssl.org>
* windows-makefile.tmpl: Stop keeping temporary filesRichard Levitte2016-03-171-2/+2
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Add install targets for WindowsRichard Levitte2016-03-173-12/+101
| | | | | | | | | | | | | | | | | | | | | | On Windows, we set INSTALLTOP to default as follows: VC-WIN32: PREFIX: %ProgramFiles(x86)%\OpenSSL OPENSSLDIR: %CommonProgramFiles(x86)%\SSL VC-WIN64*: PREFIX: %ProgramW6432%\OpenSSL OPENSSLDIR: %CommonProgramW6432%\SSL Should those environment variables be missing, the following is used as fallback: PREFIX: %ProgramFiles%\OpenSSL OPENSSLDIR: %CommonProgramFiles%\SSL Reviewed-by: Andy Polyakov <appro@openssl.org>
* Report TLS 1.0 as backwards-compatible TLSv1Viktor Dukhovni2016-03-172-1/+8
| | | | | | | The TLSv1.0 form is retained for reporting the first protocol version that supports a given cupher. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove ultrix/mips support.Rich Salz2016-03-177-70/+5
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove support for Borland C++Richard Levitte2016-03-176-185/+3
| | | | | | | Borland C++ 4.5 is very old and our "support" for it is already non-existent, we might as well remove it. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Use correct C format for keysets.plDr. Stephen Henson2016-03-171-63/+64
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Start documenting Configure internalsRichard Levitte2016-03-171-0/+136
| | | | | | | | | | | This is a living document, everyone is encouraged to add to it. Implementation details as well as broader implementation philosophy has a place here. I'm starting with documentation of the how conditions in build.info files are treated. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Added build.info debugging capability to ConfigureRichard Levitte2016-03-171-2/+20
| | | | | | | | | | This is only enabled when the environment variable CONFIGURE_DEBUG_BUILDINFO is defined. This will cause every line in every build.info file to be displayed, along with the content of the skip stack before and after parsing. This can be a very powerful tool to see that all conditions are working as expected. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Simplify define as we don't support MS-DOS anymore.Dr. Stephen Henson2016-03-171-7/+2
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Don't define OPENSSL_ENGINES in test recipes, do it in Makefiles insteadRichard Levitte2016-03-1713-9/+8
| | | | | | | | | | | | | | In most builds, we can assume that engines live in the build tree subdirectory "engines". This was hard coded into the tests that use the engine ossltest. However, that hard coding is tedious, it would need to be done in every test recipe, and it's an incorrect assumption in some cases. This change has us play it safe and let the build files tell the testing framework where the engines are. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Have 'openssl version -a' output the default engines directory as wellRichard Levitte2016-03-171-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Bugfix: Encode the requested length in s_cb.c:hexencode()Viktor Dukhovni2016-03-171-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Sort cipher-list at runtime.Rich Salz2016-03-164-1530/+1228
| | | | | | Reduces #ifdef complexity. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* unix-Makefile template: use $(PERL) everywhereRichard Levitte2016-03-161-1/+1
| | | | | | There was one spot that had hard-coded 'perl' Reviewed-by: Rich Salz <rsalz@openssl.org>
* Deal with DSA_SIG opaqueness.Ben Laurie2016-03-161-16/+12
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Prepare for 1.1.0-pre5-devRichard Levitte2016-03-162-4/+4
| | | | Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Prepare for 1.1.0-pre4 releaseOpenSSL_1_1_0-pre4Richard Levitte2016-03-162-3/+3
| | | | Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Some platforms provide getcontext() but it does not workMatt Caswell2016-03-162-32/+21
| | | | | | | | | | Some platforms claim to be POSIX but their getcontext() implementation does not work. Therefore we update the ASYNC_is_capable() function to test for this. RT#4366 Reviewed-by: Richard Levitte <levitte@openssl.org>
* When building DLLs, hack the library name in the .def fileRichard Levitte2016-03-161-1/+7
| | | | | | | | | util/mkdef.pl assumes it knows what the resulting library name will be. Really, it shouldn't, but changing it will break classic native Windows builds, so we leave it for now and change the LIBRARY line externally when needed instead. Reviewed-by: Matt Caswell <matt@openssl.org>
* DLL object files should not be built with /Zl"Richard Levitte2016-03-161-1/+3
| | | | | | When building the DLLs, we depend on the correct default C RTL info. Reviewed-by: Matt Caswell <matt@openssl.org>
* Appveyor - make sure to actually build "shared" in the shared configurationRichard Levitte2016-03-161-1/+7
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Fix up CHANGESEmilia Kasper2016-03-162-3/+4
| | | | | | | | | | - Remove duplicate entry - Add author for SSL_CIPHER query functions - Note HKDF support in CHANGES and NEWS [ci skip] Reviewed-by: Richard Levitte <levitte@openssl.org>
* We should use $SRCDIR in MakefilesMatt Caswell2016-03-161-1/+1
| | | | | | | | | Normally we always refer to source files relative to $SRCDIR in Makefiles. However the reference to unix-Makefile.tmpl was using a fully expanded absolute path. This can cause problems for Mingw. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Disable AFALG when cross-compilingMatt Caswell2016-03-161-0/+2
| | | | | | | | We don't currently support cross-compiling of the afalg engine. However we were failing to explicitly mark it as disabled during Configure leading to a failed build. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix a TLSProxy race conditionMatt Caswell2016-03-154-15/+50
| | | | | | | | | | | TLSProxy starts s_server and specifies the number of client connects it should expect. After that s_server is supposed to close down automatically. However, if another test is then run then TLSProxy will start a new instance of s_server. If the previous instance hasn't closed down yet then the new instance can fail to bind to the socket. Reviewed-by: Richard Levitte <levitte@openssl.org>
* poly1305/asm/poly1305-x86_64.pl: make it work with linux-x32.Andy Polyakov2016-03-152-3/+9
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* On Windows, page walking is known as __chkstk.Emilia Kasper2016-03-153-0/+6
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Explain *cough*-dowsEmilia Kasper2016-03-153-3/+3
| | | | Reviewed-by: Andy Polyakov <appro@openssl.org>
* Make the perl dependency post-processor into just one lineRichard Levitte2016-03-151-3/+1
| | | | | | | Make doesn't always treat multiline quoted strings as nicely as one would wish. Reviewed-by: Andy Polyakov <appro@openssl.org>