aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Update WIN32 nasm build to use new asm files.Dr. Stephen Henson2008-01-043-18/+33
|
* Avoid WIN32 signed/unsigned warnings.Dr. Stephen Henson2008-01-044-8/+7
|
* Move CHANGES entry. Revert include file install line.Dr. Stephen Henson2008-01-032-21/+20
|
* Netware support.Dr. Stephen Henson2008-01-0321-297/+669
| | | | Submitted by: Guenter Knauf <eflash@gmx.net>
* NASM has recently changed name of win32 pre-compiled binary.Andy Polyakov2008-01-031-1/+4
| | | | PR: 1627
* Add quotes to Win32 install directories.Dr. Stephen Henson2008-01-031-22/+22
| | | | Submitted by: Mladen Turk <mturk@apache.org>
* perlasm/x86*.pl updates.Andy Polyakov2008-01-033-4/+14
|
* Final (for this commit series) optimized version and with commentary section.Andy Polyakov2007-12-291-353/+334
|
* This is also informational commit exposing loop modulo scheduling "factor."Andy Polyakov2007-12-291-2/+246
|
* New Montgomery multiplication module, ppc64-mont.pl. Reference, non-optimizedAndy Polyakov2007-12-291-0/+690
| | | | implementation. This is essentially informational commit.
* ppc-xlate.pl update.Andy Polyakov2007-12-291-2/+23
|
* Source readability fix, which incidentally works around XLC compiler bug.Andy Polyakov2007-12-291-5/+4
|
* Engage x86 assembler in Mac OS X build.Andy Polyakov2007-12-1814-56/+90
|
* Mac OS X x86 assembler support.Andy Polyakov2007-12-182-5/+28
|
* Disable support for Metrowerks assembler. Assembler itself is broken,Andy Polyakov2007-12-181-3/+2
| | | | specifically it incorrectly encodes EA offsets between 128 and 255.
* x86 perlasm overhaul.Andy Polyakov2007-12-184-265/+301
|
* Avoid aliasing warning.Dr. Stephen Henson2007-12-162-6/+6
|
* Update ordinalsDr. Stephen Henson2007-12-161-0/+1
|
* Initialize sigsize.Dr. Stephen Henson2007-12-141-1/+1
|
* Handle non-SHA1 digests for certids in OCSP test responder.Dr. Stephen Henson2007-12-141-1/+15
|
* gmp engine was non-operational.Andy Polyakov2007-12-041-4/+4
|
* Submitted by: Victor B. Wagner <vitus@cryptocom.ru>, steveDr. Stephen Henson2007-12-044-15/+28
| | | | | Use default algorithms for OCSP request and response signing. New command line option to support other digest use for OCSP certificate IDs.
* Change submitted by Doug Kaufman. He writes:Richard Levitte2007-12-033-3/+7
| | | | | | | | | | | | I just compiled the 9.9-dev version from the 12022007 tarball under DJGPP. There were only 2 changes needed, one for b_sock.c, since DJGPP with WATT32 doesn't define socklen_t and one for testtsa to handle DOS style path separators. I also noted what seems to be a typographical error in ts.pod. The test suite passes. The patch is attached. Since I am in the US, I have sent notifications to the Bureau of Industry and Security and to the NSA.
* Some assembler are allergic to lea reg,BYTE PTR[...].Andy Polyakov2007-12-021-1/+1
| | | | Submitted by: Guenter Knauf
* Structure symbol decorations, optimize label handling...Andy Polyakov2007-11-242-61/+65
|
* Rebuild OID database: duplicates got in there somehow??Dr. Stephen Henson2007-11-233-89/+87
|
* Fix from stable branch.Dr. Stephen Henson2007-11-234-91/+93
|
* Add caRepository OID and sync object NIDs with OpenSSL 0.9.8.Dr. Stephen Henson2007-11-235-557/+567
|
* Synchronize x86nasm.pl with x86unix.pl.Andy Polyakov2007-11-221-5/+8
|
* Combat [bogus] relocations in some assember modules.Andy Polyakov2007-11-222-25/+23
|
* Lookup public key ASN1 methods by string by iterating through allDr. Stephen Henson2007-11-215-13/+90
| | | | | implementations instead of all added ENGINEs to cover case where an ENGINE is not added.
* Submitted by: "Victor B. Wagner" <vitus@cryptocom.ru>Dr. Stephen Henson2007-11-213-25/+127
| | | | Update gost algorithm print routines.
* Avoid warning.Dr. Stephen Henson2007-11-201-2/+2
|
* Update debug-steve targets.Dr. Stephen Henson2007-11-201-2/+2
|
* Submitted by: "Victor B. Wagner" <vitus@cryptocom.ru>Dr. Stephen Henson2007-11-204-4/+45
| | | | | Make {d2i,i2d}_PrivateKey() fall back to PKCS#8 format if no legacy format supported. Add support in d2i_AutoPrivateKey().
* Rebuild object cross reference table.Dr. Stephen Henson2007-11-201-0/+58
|
* Typos in man pages: dependant->dependentLutz Jänicke2007-11-195-7/+7
| | | | Submitted by: Tobias Stoeckmann <tobias@bugol.de>
* Should reject signatures that we can't properly verifyBodo Möller2007-11-191-0/+15
| | | | | and couldn't generate (as pointed out by Ernst G Giessmann)
* fix typosBodo Möller2007-11-192-10/+14
| | | | Submitted by: Ernst G. Giessmann
* Fix buffer overflow.Ben Laurie2007-11-161-1/+1
|
* The hash length check wasn't strict enough,Bodo Möller2007-11-161-1/+9
| | | | as pointed out by Ernst G Giessmann
* Fix warnings.Ben Laurie2007-11-162-4/+5
|
* Commit #16325 fixed one thing but broke DH with certain moduli.Andy Polyakov2007-11-031-7/+12
|
* Fix from stable branch.Dr. Stephen Henson2007-11-031-1/+4
|
* Add OIDs by CMP (RFC 4210) and CRMF (RFC 4211)Lutz Jänicke2007-11-015-70/+82
| | | | Submitted by: Martin Peylo <martinmeis@googlemail.com>
* Fix duplicate error codes.Dr. Stephen Henson2007-10-262-16/+7
|
* GOST ENGINE information.Dr. Stephen Henson2007-10-261-0/+280
|
* 1. Changes for s_client.c to make it return non-zero exit code in caseDr. Stephen Henson2007-10-2631-951/+699
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | of handshake failure 2. Changes to x509_certificate_type function (crypto/x509/x509type.c) to make it recognize GOST certificates as EVP_PKT_SIGN|EVP_PKT_EXCH (required for s3_srvr to accept GOST client certificates). 3. Changes to EVP - adding of function EVP_PKEY_CTX_get0_peerkey - Make function EVP_PKEY_derive_set_peerkey work for context with ENCRYPT operation, because we use peerkey field in the context to pass non-ephemeral secret key to GOST encrypt operation. - added EVP_PKEY_CTRL_SET_IV control command. It is really GOST-specific, but it is used in SSL code, so it has to go in some header file, available during libssl compilation 4. Fix to HMAC to avoid call of OPENSSL_cleanse on undefined data 5. Include des.h if KSSL_DEBUG is defined into some libssl files, to make debugging output which depends on constants defined there, work and other KSSL_DEBUG output fixes 6. Declaration of real GOST ciphersuites, two authentication methods SSL_aGOST94 and SSL_aGOST2001 and one key exchange method SSL_kGOST 7. Implementation of these methods. 8. Support for sending unsolicited serverhello extension if GOST ciphersuite is selected. It is require for interoperability with CryptoPro CSP 3.0 and 3.6 and controlled by SSL_OP_CRYPTOPRO_TLSEXT_BUG constant. This constant is added to SSL_OP_ALL, because it does nothing, if non-GOST ciphersuite is selected, and all implementation of GOST include compatibility with CryptoPro. 9. Support for CertificateVerify message without length field. It is another CryptoPro bug, but support is made unconditional, because it does no harm for draft-conforming implementation. 10. In tls1_mac extra copy of stream mac context is no more done. When I've written currently commited code I haven't read EVP_DigestSignFinal manual carefully enough and haven't noticed that it does an internal digest ctx copying. This implementation was tested against 1. CryptoPro CSP 3.6 client and server 2. Cryptopro CSP 3.0 server
* Release OpenSSL 0.9.8g with various fixes to issues introduced with 0.9.8fLutz Jänicke2007-10-194-4/+23
|
* Fix from stable branch.Dr. Stephen Henson2007-10-181-0/+1
|