aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Fix path in commentsDr. Stephen Henson2015-09-227-7/+7
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* make dependDr. Stephen Henson2015-09-222-12/+127
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Move certificate request and CRL routines to x509 dir.Dr. Stephen Henson2015-09-2212-144/+29
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Move functions.Dr. Stephen Henson2015-09-227-193/+196
| | | | | | Move various functions tagged onto t_x509.c to more appropriate places. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Update SEE ALSO sections.Dr. Stephen Henson2015-09-222-1/+31
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Document signature accessors.Dr. Stephen Henson2015-09-221-0/+81
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Extension parsing and encoding docs.Dr. Stephen Henson2015-09-221-0/+217
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Document i2d_re_X509_REQ_tbs() and i2d_re_X509_CRL_tbs().Dr. Stephen Henson2015-09-222-2/+7
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Document X509_REVOKED functions.Dr. Stephen Henson2015-09-221-0/+103
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Document X509 sign and verify functions.Dr. Stephen Henson2015-09-221-0/+90
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Document X509 public key functions.Dr. Stephen Henson2015-09-221-0/+75
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Document X509 name get and set functions.Dr. Stephen Henson2015-09-221-0/+81
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Document X509 version functions.Dr. Stephen Henson2015-09-221-0/+78
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Use accessors in X509_REQ_print().Dr. Stephen Henson2015-09-221-10/+9
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Use accessor functions in X509_CRL_print().Dr. Stephen Henson2015-09-221-8/+11
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* New accessor X509_REQ_get_X509_PUBKEY()Dr. Stephen Henson2015-09-223-1/+11
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Additional X509_CRL accessors.Dr. Stephen Henson2015-09-222-0/+12
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* typoDr. Stephen Henson2015-09-222-4/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Add comments to x509_int.hDr. Stephen Henson2015-09-221-49/+73
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Add accessors for X509_REVOKED.Dr. Stephen Henson2015-09-222-0/+12
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Add accessors for request and CRL signaturesDr. Stephen Henson2015-09-223-2/+39
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Remove "noise" comments from TS files.Rich Salz2015-09-2210-337/+48
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* RT3479: Add UTF8 support to BIO_read_filename()David Woodhouse2015-09-211-3/+10
| | | | | | | | | | | | | | | | If we use BIO_new_file(), on Windows it'll jump through hoops to work around their unusual charset/Unicode handling. it'll convert a UTF-8 filename to UCS-16LE and attempt to use _wfopen(). If you use BIO_read_filename(), it doesn't do this. Shouldn't it be consistent? It would certainly be nice if SSL_use_certificate_chain_file() worked. Also made BIO_C_SET_FILENAME work (rsalz) Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Andy Polyakov <appro@openssl.org>
* RT3823: Improve the robustness of event loggingGunnar Kudrjavets2015-09-211-5/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are a couple of minor fixes here: 1) Handle the case when RegisterEventSource() fails (which it may for various reasons) and do the work of logging the event only if it succeeds. 2) Handle the case when ReportEvent() fails and do our best in debug builds to at least attempt somehow indicate that something has gone wrong. The typical situation would be someone running tools like DbMon, DBWin32, DebugView or just having the debugger attached. The intent is to make sure that at least some data will be captured so that we can save hours and days of debugging time. 3) Minor fix to change the MessageBox() flag to MB_ICONERROR. Though the value of MB_ICONERROR is the same value as MB_ICONSTOP, the intent is better conveyed by using MB_ICONERROR. Testing performed: 1) Clean compilation for debug-VC-WIN32 and VC-WIN32. 2) Good test results (nmake -f ms\ntdll.mak test) for debug-VC-WIN32 and VC-WIN32. 3) Stepped through relevant changes using WinDBG and exercised the impacted code paths. Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Matt Caswell <matt@openssl.org>
* GOST PKCS12 supportMatt Caswell2015-09-211-3/+38
| | | | | | | | Changes required to add GOST support to PKCS12 Based on a patch provided by Dmitry Belyavsky <beldmit@gmail.com> Reviewed-by: Stephen Henson <steve@openssl.org>
* Add GOST extensions to PKCS#5Matt Caswell2015-09-211-0/+4
| | | | | | | | GOST extends PKCS5 PBES2/PBKDF2 with some additional GOST specific PRFs. Based on a patch provided by Dmitry Belyavsky <beldmit@gmail.com> Reviewed-by: Stephen Henson <steve@openssl.org>
* Fix SRP memory leaksMatt Caswell2015-09-211-9/+24
| | | | | | | There were some memory leaks in the creation of an SRP verifier (both on successful completion and also on some error paths). Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Fix -srpvfile option in srp command lineMatt Caswell2015-09-211-12/+16
| | | | | | | | | The -srpvfile option was broken in the srp command line app. Using it would always result in "-dbfile and -configfile cannot be specified together." The error message is also wrong because the option is "-srpvfile" not "-dbfile", so that has been fixed too. Reviewed-by: Emilia Käsper <emilia@openssl.org>
* Make SRP work with -wwwDr. Stephen Henson2015-09-201-0/+45
| | | | | | PR#3817 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Handle SSL_ERROR_WANT_X509_LOOKUPDr. Stephen Henson2015-09-201-0/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* remove unneeded includesDr. Stephen Henson2015-09-201-6/+0
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* make no-dh workDr. Stephen Henson2015-09-205-6/+18
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Move EVP_PKEY_METHOD into private headers.Dr. Stephen Henson2015-09-207-13/+8
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Simplify Simple.pm further, and make it more verboseRichard Levitte2015-09-201-5/+4
| | | | Reviewed-by: Stephen Henson <steve@openssl.org>
* Correct srp testRichard Levitte2015-09-201-1/+1
| | | | | | There actually is a "srp" feature to check the availability on Reviewed-by: Stephen Henson <steve@openssl.org>
* Correct jpake testRichard Levitte2015-09-201-1/+1
| | | | | | There actually is a "jpake" feature to check the availability on Reviewed-by: Stephen Henson <steve@openssl.org>
* Correct sha testsRichard Levitte2015-09-203-3/+3
| | | | | | | These tests were checking for specific sha variants, when they should just check if "sha" is disabled. Reviewed-by: Stephen Henson <steve@openssl.org>
* Correct whirlpool testRichard Levitte2015-09-201-1/+1
| | | | | | | | | | | It depended on 'openssl no-wp', which always exited with code 0, so this test would never be performed, and this, I never discovered that the program it's supposed to run was misspellt. Furthermore, the feature to check is 'whirlpool', not 'wp'. All corrected. Reviewed-by: Stephen Henson <steve@openssl.org>
* Finally, remove a possibly disabled featureRichard Levitte2015-09-201-3/+0
| | | | | | | I have no clue why MD_GHOST94 was checked on, there is no OPENSSL_NO_MD_GHOST94 in sight anywhere Reviewed-by: Stephen Henson <steve@openssl.org>
* Add more features that may be disabledRichard Levitte2015-09-201-0/+6
| | | | | | | | Have a look at the directories in crypto/, I found reason to add checks on CMAC and HMAC. This might be completely irrelevant, but I prefered covering too much than not enough. Reviewed-by: Stephen Henson <steve@openssl.org>
* Add more features that may be disabledRichard Levitte2015-09-201-1/+19
| | | | | | | | | | A grep of OPENSSL_NO_ in the rest of the source tree revealed a few more features to check. NOTE: there are some of those macros that I ignore because a check of them doesn't seem useful to external apps. This might change later on. Reviewed-by: Stephen Henson <steve@openssl.org>
* Add more features that may be disabledRichard Levitte2015-09-201-3/+21
| | | | | | | After a grep of OPENSSL_NO_ in apps/*.c, a few more features that may be interesting to check the availability of came up. Reviewed-by: Stephen Henson <steve@openssl.org>
* Add more features that may be disabledRichard Levitte2015-09-201-0/+63
| | | | | | | I've tried to make this list as complete as possible, based on information found in apps/progs.pl. Reviewed-by: Stephen Henson <steve@openssl.org>
* Sort the disabled features alphabeticallyRichard Levitte2015-09-201-7/+7
| | | | Reviewed-by: Stephen Henson <steve@openssl.org>
* typoDr. Stephen Henson2015-09-201-1/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Update Simple.pm to use disabled()Dr. Stephen Henson2015-09-201-1/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Change test recipes to use disabled()Dr. Stephen Henson2015-09-206-20/+26
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add Utils.pmDr. Stephen Henson2015-09-201-0/+84
| | | | | | | | Add Utils.pm for test utilities. This currently just contains one function: disabled which checks if a feature is disabled based on the output of openssl list -disabled Reviewed-by: Richard Levitte <levitte@openssl.org>
* Small typoRichard Levitte2015-09-201-1/+1
| | | | | | OPENSSL_NO_ECA changed to OPENSSL_NO_EC Reviewed-by: Stephen Henson <steve@openssl.org>
* Make sure to actually use @smime_cms_comp_test when testing it...Richard Levitte2015-09-191-1/+1
| | | | | | | | Obvious typo, and it took configuring with 'zlib' to discover it, otherwise there was a previous skip that bypassed this section entirely. Reviewed-by: Tim Hudson <tjh@openssl.org>