aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Do not treat 0 return value from BIO_get_fd() as errorAlessandro Ghedini2015-10-231-1/+1
| | | | | | | | | 0 is a valid file descriptor. RT#4068 Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove bugs/ and crypto/threads/Alessandro Ghedini2015-10-2318-1973/+0
| | | | | Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Clarify return values for EVP_DigestVerifyFinal.Adam Eijdenberg2015-10-221-4/+5
| | | | | | | | | Previous language was unclear. New language isn't pretty but I believe it is more accurate. Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Ben Laurie <ben@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Only include SRP headers when OPENSSL_NO_SRP is undefinedRichard Levitte2015-10-221-2/+3
| | | | | | [fixes github issue #447] Reviewed-by: Tim Hudson <tjh@openssl.org>
* Make Configure die when unsupported options are givenRichard Levitte2015-10-221-1/+8
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add an explicit list of options that can be disabled, enabled, ...Richard Levitte2015-10-221-0/+89
| | | | | | | | | | | | | | Configure has, so far, had no control at all of which 'no-' options it can be given. This means that, for example, someone could configure with something absurd like 'no-stack' and then watch the build crumble to dust... or file a bug report. This introduces some sanity into the possible choices. The added list comes from looking for the explicit ones used in Configure, and from grepping after OPENSSL_NO_ in all source files. Reviewed-by: Rich Salz <rsalz@openssl.org>
* make updateRichard Levitte2015-10-212-1/+9
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Don't forget to load the CT error stringsRichard Levitte2015-10-211-0/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Handle CT error macros separatelyRichard Levitte2015-10-215-5/+14
| | | | | | | | | | Because the default error macro generator assumes the header file with error macros is in include/openssl and therefore generates a C file with error texts that include <openssl/{name}.h>, we need to generate the error macros and texts for CT separately, since the CT module doesn't follow the default criteria. Reviewed-by: Matt Caswell <matt@openssl.org>
* Don't use SSLv23_server_method in an exampleMatt Caswell2015-10-211-1/+1
| | | | | | | | The function SSLv23_server_method() is an old name. New code should use TLS_server_method() instead. Therefore don't use SSLv23_server_method() in an example in the docs. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Avoid undefined behaviour in PACKET_buf_initMatt Caswell2015-10-211-1/+1
| | | | | | | | | | Change the sanity check in PACKET_buf_init to check for excessive length buffers, which should catch the interesting cases where len has been cast from a negative value whilst avoiding any undefined behaviour. RT#4094 Reviewed-by: Richard Levitte <levitte@openssl.org>
* ct_locl.h moved, reflect it in crypto/ct/MakefileRichard Levitte2015-10-181-1/+1
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* make updateRichard Levitte2015-10-182-3/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add crypto/include/internal to the directories to scan for stack declarationsRichard Levitte2015-10-181-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Because ct_locl.h is used between modules, move it to internal headersRichard Levitte2015-10-183-2/+2
| | | | | | Rename it to ct_int.h Reviewed-by: Rich Salz <rsalz@openssl.org>
* Move auto Host adding to query_responderDr. Stephen Henson2015-10-181-14/+11
| | | | | | | Check for Host header in query_responder instead of process_responder. This also fixes a memory leak in the old code if the headers was NULL. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix memory leak with -issuer option.Dr. Stephen Henson2015-10-181-3/+5
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* set string type when embeddingDr. Stephen Henson2015-10-181-0/+1
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Move contributing info to CONTRIBUTINGManish Goregaokar2015-10-172-37/+44
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Run tests on Travis for mingw builds as wellRich Salz2015-10-162-2/+12
| | | | | Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Andy Polyakov <appro@openssl.org>
* Fix error message when loading engines from configDmitry Belyavsky2015-10-161-4/+4
| | | | | | | | | | | When using command line applications errors occur when trying to load engines specified in a config file. Introduced by commit a0a82324f96 RT#4093 Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Remove Obsolete enginesMatt Caswell2015-10-1534-7785/+9
| | | | | | | | There are a number of engines in the OpenSSL source code which are now obsolete. The following engines have been removed: 4758cca, aep, atalla, cswift, nuron, sureware. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Fix self signed handling.Dr. Stephen Henson2015-10-151-9/+10
| | | | | | | | | Don't mark a certificate as self signed if keyUsage is present and certificate signing not asserted. PR#3979 Reviewed-by: Matt Caswell <matt@openssl.org>
* embed CRL serial number and signature fieldsDr. Stephen Henson2015-10-155-23/+18
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* embed certificate serial number and signature fieldsDr. Stephen Henson2015-10-156-24/+20
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* embed value field of X509_EXTENSIONDr. Stephen Henson2015-10-153-4/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* add CHANGES entry for embedDr. Stephen Henson2015-10-151-0/+21
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Handle embed flag in ASN1_STRING_copy().Dr. Stephen Henson2015-10-151-1/+3
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* PACKET: fix __owurEmilia Kasper2015-10-151-5/+4
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Appease gcc's Wmaybe-uninitializedEmilia Kasper2015-10-151-2/+1
| | | | | | False positive: gcc (4.8) can't figure out the SSL_IS_DTLS logic. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove EVP_CHECK_DES_KEYEmilia Kasper2015-10-143-18/+2
| | | | | | Thanks to the OpenBSD community for bringing this to our attention. Reviewed-by: Rich Salz <rsalz@openssl.org>
* ct_locl.h: fix some commentsEmilia Kasper2015-10-141-5/+7
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* make depend: prefer clang over makedependEmilia Kasper2015-10-142-4/+6
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* RFC5753 compliance.Dr. Stephen Henson2015-10-131-1/+2
| | | | | | | | RFC5753 requires that we omit parameters for AES key wrap and set them to NULL for 3DES wrap. OpenSSL decrypt uses the received algorithm parameters so can transparently handle either form. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Add Clang 3.6 and additional GCC 5 builds to travisAlessandro Ghedini2015-10-131-0/+14
| | | | | | | Follow-up to f386742. Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Andy Polyakov <appro@openssl.org>
* GH429: Add clang to travisAlessandro Ghedini2015-10-132-4/+15
| | | | | Signed-off-by: Rich Salz <rsalz@akamai.com> Reviewed-by: Andy Polyakov <appro@openssl.org>
* testlib/OpenSSL/Test.pm: remove redundant 'cmd /c', MSWin32 Perl can take ↵Andy Polyakov2015-10-131-2/+0
| | | | | | care of itself. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Harmonize do_rehash_rule with updated test/recipies/25-test_verify.t.Andy Polyakov2015-10-133-3/+5
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Test suite: chomp->s/\R// to harmonize with mingw 'make test'.Andy Polyakov2015-10-138-10/+10
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Test suite: minimal required to get mingw 'make test' work under Linux.Andy Polyakov2015-10-136-7/+26
| | | | | | (part by Alessandro Ghedini) Reviewed-by: Richard Levitte <levitte@openssl.org>
* Rename -set-serial command to reqMatt Caswell2015-10-121-1/+1
| | | | | | | | | Previous OpenSSL versions used -set_serial, but master was using -set-serial - so rename it back to the old version. RT#4059 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Centralise loading default apps config fileMatt Caswell2015-10-1238-114/+19
| | | | | | | | | | | | | | | | | Loading the config file after processing command line options can cause problems, e.g. where an engine provides new ciphers/digests these are not then recoginised on the command line. Move the default config file loading to before the command line option processing. Whilst we're doing this we might as well centralise this instead of doing it individually for each application. Finally if we do it before the OpenSSL_add_ssl_algorithms() call then ciphersuites provided by an engine (e.g. GOST) can be available to the apps. RT#4085 RT#4086 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Fix option name discrepancyMatt Caswell2015-10-121-2/+2
| | | | | | | | | | There used to be options -macopt and -sigopt in <=1.0.2 for the dgst command line app. These were incorrectly spelled as -macop and -sigop in master. RT#4072 Reviewed-by: Andy Polyakov <appro@openssl.org>
* Configurations: move -Wno-pedantic-ms-format to .travis.yml.Andy Polyakov2015-10-122-4/+4
| | | | | | The option is not available in older toolchains and would cause breakage. Reviewed-by: Richard Levitte <levitte@openssl.org>
* embed OCSP_CERTIDDr. Stephen Henson2015-10-116-23/+22
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* embed support for ASN1_STRINGDr. Stephen Henson2015-10-113-7/+18
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Embed various OCSP fields.Dr. Stephen Henson2015-10-119-67/+67
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* embed support for CHOICE typeDr. Stephen Henson2015-10-112-5/+11
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Skip PSK tests for no-pskDr. Stephen Henson2015-10-111-4/+12
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Make no-psk compile without warnings.Dr. Stephen Henson2015-10-113-7/+4
| | | | | | PR#4035 Reviewed-by: Matt Caswell <matt@openssl.org>
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-19 23:46:58 +0000