aboutsummaryrefslogtreecommitdiffstats
path: root/CHANGES
Commit message (Collapse)AuthorAgeFilesLines
...
* Add configuration for GNU Hurd.Richard Levitte2001-01-111-0/+3
|
* OCSP basic response verify. Very incompleteDr. Stephen Henson2001-01-111-0/+5
| | | | | | | | | | but will verify the signatures on a response and locate the signers certifcate. Still needs to implement a proper OCSP certificate verify. Fix warning in RAND_egd().
* After discussion with Richard, change the new API for extended memoryBodo Möller2001-01-101-18/+14
| | | | | | allocation callbacks so that it is no longer visible to applications that these live at a different call level than conventional memory allocation callbacks.
* Add SSLEAY_DIR argument code for SSLeay_version.Bodo Möller2001-01-101-0/+5
| | | | Add '-d' option for 'openssl version' (included in '-a').
* Fix C code generate by 'openssl dsaparam -C'.Bodo Möller2001-01-101-0/+4
|
* As response to a user request to be able to use external memoryRichard Levitte2001-01-101-0/+25
| | | | | | handling routines that need file name and line number information, I've added a call level to our memory handling routines to allow that kind of hooking.
* Fix uni2asc() so it can properly convert zero lengthDr. Stephen Henson2001-01-101-0/+4
| | | | | unicode strings. Certain PKCS#12 files contain these in BMPStrings and it used to crash on them.
* Add automatic query of EGD sockets to RAND_poll(). The EGD sockets areLutz Jänicke2001-01-091-0/+6
| | | | | | | only queried when the /dev/[u]random devices did not return enough entropy. Only the amount of entropy missing to reach the required minimum is queried, as EGD may be drained. Queried locations are: /etc/entropy, /var/run/egd-pool
* It was correctly pointed out to me that my CHANGES entry was a little thinGeoff Thorpe2001-01-091-1/+3
| | | | on details. :-)
* Move all the existing function pointer casts associated with LHASH's twoGeoff Thorpe2001-01-091-0/+5
| | | | | | | "doall" functions to using type-safe wrappers. As and where required, this can be replaced by redeclaring the underlying callbacks to use the underlying "void"-based prototypes (eg. if performance suffers from an extra level of function invocation).
* Change RAND_poll for Unix to try a number of devices and only readRichard Levitte2001-01-081-0/+6
| | | | | | | | | them for a short period of time (actually, poll them with select(), then read() whatever is there), which is about 10ms (hard-coded value) each. Separate Windows and Unixly code, and start on a VMS variant that currently just returns 0.
* Add set of OCSP client functions. All experimentalDr. Stephen Henson2001-01-081-1/+23
| | | | | | | | and subject to addition, modifcation or deletion. Add two OCSP nonce utility functions. Fix typo in status code name.
* Modify OCSP API to more closely reflectDr. Stephen Henson2001-01-051-0/+11
| | | | | | application needs. Add OCSP library name to error code.
* Update OCSP API.Dr. Stephen Henson2001-01-041-0/+6
| | | | | | | | | | | | | | | | | | Remove extensions argument from various functions because it is not needed with the new extension code. New function OCSP_cert_to_id() to convert a pair of certificates into an OCSP_CERTID. New simple OCSP HTTP function. This is rather primitive but just about adequate to send OCSP requests and parse the response. Fix typo in CRL distribution points extension. Fix ASN1 code so it adds a final null to constructed strings.
* Fix the S/MIME code so it now works again andDr. Stephen Henson2000-12-311-0/+13
| | | | uses the new ASN1 code.
* Rewrite PKCS#12 code and remove some of the oldDr. Stephen Henson2000-12-311-0/+8
| | | | | | | | | | horrible macros. Fix two evil ASN1 bugs. Attempt to use 'ctx' when NULL if input is indefinite length constructed in asn1_check_tlen() and invalid pointer to ASN1_TYPE when reusing existing structure (this took *ages* to find because the new PKCS#12 code triggered it).
* Document.Richard Levitte2000-12-311-0/+5
|
* ASN1_ITEM versions of ASN1_d2i_{fp, bio} and replacement ofDr. Stephen Henson2000-12-301-0/+5
| | | | | | most of the old wrappers. A few of the old versions remain because they are non standard and the corresponding ASN1 code has not been reimplemented yet.
* Replace the old ASN1_dup() with ASN1_item_dup() andDr. Stephen Henson2000-12-291-1/+1
| | | | zap some evil function pointers casts along the way...
* Enhancements to mkdef.pl:Richard Levitte2000-12-291-0/+5
| | | | | | | | | * detect "unknown" algorithms (any C macro starting with NO_ that is not explicitely mentioned in mkdef.pl as a known algorithm) and report. * add a number of algorithms that can be deselected. * look in ssl/kssl.h as well. * accept multiple whitespace (not just one SPC) in preprocessor lines.
* Add NO_ASN1_OLD to remove some old style functions:Dr. Stephen Henson2000-12-281-1/+4
| | | | | | | | | | currently OpenSSL itself wont compile with this set because some old style stuff remains. Change old functions X509_sign(), X509_verify() etc to use new item based functions. Replace OCSP function declarations with DECLARE macros.
* ASN1_ITEM versions of sign, verify, pack and unpack.Dr. Stephen Henson2000-12-281-0/+4
| | | | | The old function pointer versions will eventually go away.
* New OCSP extension functions.Dr. Stephen Henson2000-12-281-0/+4
|
* Finish SSL_peek/SSL_pending fixes.Bodo Möller2000-12-261-0/+1
|
* Fix SSL_peek and SSL_pending.Bodo Möller2000-12-251-5/+13
|
* New function X509V3_add_i2d() this is used forDr. Stephen Henson2000-12-241-0/+6
| | | | | | | encoding, replacing and deleting extensions. Fix X509V3_get_d2i() so it uses takes note of new critical behaviour.
* Split a CHANGES entry so that one of the halves matches theBodo Möller2000-12-201-3/+3
| | | | corresponding new entry in the OpenSSL_0_9_6-stable branch.
* Fixes to OCSP print code.Dr. Stephen Henson2000-12-201-1/+11
| | | | | | | | | | | | | | Don't try to print request certificates if signature is not present. Remove unnecessary test for certificates being NULL. Fix typos in printed output. Tidy up output. Fix for typo in OCSP_SERVICELOC ASN1 template. Also give a bit more info in CHANGES about the ASN1 revision.
* Don't hold CRYPTO_LOCK_RSA during time-consuming operations.Bodo Möller2000-12-191-3/+3
|
* Import s2_pkt.c wbuf fixes from OpenSSL_0_9_6-stable branch.Bodo Möller2000-12-181-0/+5
|
* Obtain lock CRYPTO_LOCK_RSA before creating BN_MONT_CTXBodo Möller2000-12-181-0/+9
| | | | | | structures and setting rsa->_method_mod_{n,p,q}. Submitted by: "Reddie, Steven" <Steven.Reddie@ca.com>
* Make mkdef.pl parse some ASN1 IMPLEMENT macros.Dr. Stephen Henson2000-12-161-0/+3
| | | | Initial support for variables in DEF files.
* Locking issues.Bodo Möller2000-12-151-0/+17
|
* Implement some standard OCSP extensions in the v3 code. TheseDr. Stephen Henson2000-12-151-1/+1
| | | | are all raw print only extensions at present.
* Make a note of the new engine.Geoff Thorpe2000-12-141-0/+3
|
* New function X509V3_extensions_print() this removes extension duplicationDr. Stephen Henson2000-12-141-0/+5
| | | | | | | | | from the print routines. Reorganisation of OCSP code: initial print routines in ocsp_prn.c. Doesn't work fully because OCSP extensions aren't reimplemented yet. Implement some ASN1 functions needed to compile OCSP code.
* First step towards SSL_peek fix.Bodo Möller2000-12-141-2/+3
|
* New function X509_signature_print() to remove some duplicateDr. Stephen Henson2000-12-141-0/+4
| | | | code from certificate, CRL and request printing routines.
* Change the PKCS7 structure to use SEQUENCE OF for theDr. Stephen Henson2000-12-131-0/+8
| | | | | | | | | authenticated attributes: this is used to retain the original encoding and not break signatures. Support for a SET OF which reorders the STACK when encoding a structure. This will be used with the PKCS7 code.
* Replace the old style OCSP ASN1 module.Dr. Stephen Henson2000-12-131-0/+3
|
* Rewrite the extension code to use an ASN1_ITEM structureDr. Stephen Henson2000-12-131-0/+5
| | | | | | | | for its ASN1 operations as well as the old style function pointers (i2d, d2i, new, free). Change standard extensions to support this. Fix a warning in BN_mul(), bn_mul.c about uninitialised 'j'.
* Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson2000-12-081-0/+4
| | | | | | to main trunk. Lets see if the makes it to openssl-cvs :-)
* Fix some things that look like bugs.Bodo Möller2000-12-071-0/+10
| | | | | | One problem that looked like a problem in bn_recp.c at first turned out to be a BN_mul bug. An example is given in bn_recp.c; finding the bug responsible for this is left as an exercise.
* Sign-related fixes (and tests).Bodo Möller2000-12-071-0/+4
| | | | | | BN_mod_exp_mont does not work properly yet if modulus m is negative (we want computations to be carried out modulo |m|).
* BN_mod_sqrt documentation/commentBodo Möller2000-12-061-1/+3
|
* Faster BN_mod_sqrt algorithm for p == 5 (8).Bodo Möller2000-12-061-1/+1
|
* Improve formatting.Bodo Möller2000-12-041-2/+2
|
* Make a note of the LHASH changes.Geoff Thorpe2000-12-041-0/+6
|
* Note the bntest change.Ulf Möller2000-12-021-5/+7
| | | | The *_part_words functions are not static.
* Correct a mail address...Richard Levitte2000-12-011-1/+1
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-23 22:53:59 +0000