aboutsummaryrefslogtreecommitdiffstats
path: root/apps/apps.h
Commit message (Collapse)AuthorAgeFilesLines
* If we include winsock2.h then FD_SET wants an unsigned type for an fd.Dr. Stephen Henson2006-04-171-0/+7
|
* Add RSA ctrl for padding mode, add ctrl support in pkeyutl.Dr. Stephen Henson2006-04-091-0/+1
|
* Reformat pkeyutl.c, add support for verify operation but nothing actuallyDr. Stephen Henson2006-04-081-0/+1
| | | | supports it (yet).
* Fix bug where freed OIDs could be accessed in EVP_cleanup() byDr. Stephen Henson2006-03-281-2/+2
| | | | defering freeing in OBJ_cleanup().
* Collect timing procedures in apps/apps.c. It's a bit cruel patch, as itAndy Polyakov2005-11-061-0/+4
| | | | | temporarily[!] removes support for couple of esoteric platforms [well, Netware, vxWorks and VMS].
* Eliminate remaining calls to stat in apps/apps.c and unify WIN32_rename forAndy Polyakov2005-11-041-5/+0
| | | | all Windows targets.
* Eliminate dependency on read/write/stat in apps under _WIN32.Andy Polyakov2005-11-041-0/+3
|
* Get rid of arcane reference to _fmode in apps/apps.h. Binary open isAndy Polyakov2005-11-031-34/+4
| | | | handles properly by bss_file.c, which renders _fmode redundant.
* Integrated support for PVK files.Dr. Stephen Henson2005-08-311-0/+2
|
* Command line support for RSAPublicKey format.Dr. Stephen Henson2005-08-211-0/+2
|
* Various Win32 and other fixes for warnings and compilation errors.Dr. Stephen Henson2005-04-191-1/+1
| | | | Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.
* const fixesNils Larsch2005-04-151-1/+1
|
* some const fixesNils Larsch2005-04-051-4/+4
|
* Reformat smime utility.Dr. Stephen Henson2004-09-071-1/+3
| | | | Add support for policy checking in verify utility.
* New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson2004-09-061-0/+1
| | | | | | | | | | This tidies up verify parameters and adds support for integrated policy checking. Add support for policy related command line options. Currently only in smime application. WARNING: experimental code subject to change.
* Remove some unnecessary recursive includes from the internal apps.h header,Geoff Thorpe2004-05-171-2/+0
| | | | and include bn.h in those C files that need bignum functionality.
* Reduce chances of issuer and serial number duplication by use of randomDr. Stephen Henson2004-04-201-0/+3
| | | | | | initial serial numbers. PR: 842
* Move another common functionality (reproduced so far with cut'n'paste)Richard Levitte2003-11-281-0/+1
| | | | to apps.c, and give it the hopefully descriptive name parse_yesno().
* Forgot to change the declaration of do_subject() to one of parse_name()...Richard Levitte2003-11-281-1/+1
|
* Allow multi-valued rdns in subjects. This adds the -multivalue-rdn optionRichard Levitte2003-11-281-1/+1
| | | | | | | | | | to 'openssl req' and 'openssl ca'. PR: 779 Submitted by: Michael Bell <michael.bell@cms.hu-berlin.de> Reviewed by: Richard Levitte (there will be some follow-up changes)
* Netware-specific changes,Richard Levitte2003-11-281-0/+2
| | | | | | PR: 780 Submitted by: Verdon Walker <VWalker@novell.com> Reviewed by: Richard Levitte
* Generalise the definition of strcasecmp() and strncasecmp() forRichard Levitte2003-09-091-6/+0
| | | | | | platforms that don't (necessarely) have it. In the case of VMS, this means moving a couple of functions from apps/ to crypto/ and make them general (although only used privately).
* Convert save_serial() to work like save_index(), and add aRichard Levitte2003-04-041-1/+2
| | | | rotate_serial() that works like rotate_index().
* Make it possible to have multiple active certificates with the sameRichard Levitte2003-04-031-1/+31
| | | | subject.
* Add the possibility to build without the ENGINE framework.Richard Levitte2003-01-301-19/+50
| | | | PR: 287
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-131-0/+1
|
* VMS below version 7 doesn't have strcasecmp, so let's roll our own on VMS.Richard Levitte2002-10-101-0/+6
| | | | PR: 184
* Make sure that the 'config' variable is correctly defined and declaredRichard Levitte2002-10-091-0/+2
| | | | | | for monolithic as well as non-monolithic biuld. More work is probably needed in this area. PR: 144
* Make it possible to load keys from stdin, and restore thatRichard Levitte2002-08-011-2/+2
| | | | | functionality in the programs that had that before. Part fo PR 164
* Add missing prototypes.Lutz Jänicke2002-06-131-6/+2
| | | | | Submitted by: Goetz Babin-Ebell <babinebell@trustcenter.de> PR: 89
* Reorganise -subj option code, fix buffer overrun.Dr. Stephen Henson2002-05-191-0/+2
|
* ENGINE module additions.Dr. Stephen Henson2002-03-061-4/+4
| | | | | | | | | | | | | | | Add "init" command to control ENGINE initialization. Call ENGINE_finish on initialized ENGINEs on exit. Reorder shutdown in apps.c: modules should be shut down first. Add test private key loader to openssl ENGINE: this just loads a private key in PEM format. Fix print format for dh length parameter.
* non-Monolith fixes.Dr. Stephen Henson2002-02-221-0/+1
| | | | Submitted by Andrew W. Gray <agray@iconsinc.com>
* Config code updates.Dr. Stephen Henson2002-02-221-1/+4
| | | | | | | | | | | | | | | | | | | CONF_modules_unload() now calls CONF_modules_finish() automatically. Default use of section openssl_conf moved to CONF_modules_load() Load config file in several openssl utilities. Most utilities now load modules from the config file, though in a few (such as version) this isn't done because it couldn't be used for anything. In the case of ca and req the config file used is the same as the utility itself: that is the -config command line option can be used to specify an alternative file.
* Apply the following changes by Toomas Kiisk <vix@cyber.ee>:Richard Levitte2002-01-251-0/+2
| | | | | | | | * make openssl rsa work with -engine chil * misc changes, including debug-linux-ppro Configure target and FORMAT_NETSCAPE-aware load_{,pub}key() This completes the application of his changes.
* New functions SSL[_CTX]_set_msg_callback().Bodo Möller2001-10-201-0/+53
| | | | | | | | | | | | | | | | | | | | | New macros SSL[_CTX]_set_msg_callback_arg(). Message callback imlementation for SSL 3.0/TLS 1.0 (no SSL 2.0 yet). New '-msg' option for 'openssl s_client' and 'openssl s_server' that enable a message callback that displays all protocol messages. In ssl3_get_client_hello (ssl/s3_srvr.c), generate a fatal alert if client_version is smaller than the protocol version in use. Also change ssl23_get_client_hello (ssl/s23_srvr.c) to select TLS 1.0 if the client demanded SSL 3.0 but only TLS 1.0 is enabled; then the client will at least see that alert. Fix SSL[_CTX]_ctrl prototype (void * instead of char * for generic pointer). Add/update some OpenSSL copyright notices.
* Because there's chances we clash with the system's types.h, rename ourRichard Levitte2001-10-041-1/+1
| | | | types.h to ossl_typ.h.
* ENGINE_register_all_complete() will register all implementations of allGeoff Thorpe2001-09-281-5/+3
| | | | | | | | | | | | | | | algorithms present in all loaded ENGINEs. The result is that if any of those ENGINEs successfully initialises, and the ENGINE_TABLE_FLAG_NOINIT flag isn't set, then they will always be used (and cached as defaults) in preference to software implementations. Ie. accidental auto-detection of acceleration hardware :-) This change stops all implementations being automatically registered in "openssl" sub-commands, so that the "setup_engine()" handler in apps.c controls which ENGINEs are registered for use. A special case has been added that will revert to this "auto-detect" logic, ie. if the "-engine" switch is used as; -engine auto
* Make necessary tweaks to apps/ files due to recent ENGINE surgery. SeeGeoff Thorpe2001-09-251-8/+8
| | | | crypto/engine/README for details.
* Reduce the header dependencies on engine.h in apps/.Geoff Thorpe2001-09-121-1/+1
|
* Put all "common" initialisation in the apps_startup() and apps_shutdown()Geoff Thorpe2001-09-101-1/+6
| | | | macros in apps.h.
* Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe2001-09-011-1/+1
| | | | | | | | | | | See the commit log message for that for more information. NB: X509_STORE_CTX's use of "ex_data" support was actually misimplemented (initialisation by "memset" won't/can't/doesn't work). This fixes that but requires that X509_STORE_CTX_init() be able to handle errors - so its prototype has been changed to return 'int' rather than 'void'. All uses of that function throughout the source code have been tracked down and adjusted.
* Initial OCSP server support, using index.txt format.Dr. Stephen Henson2001-07-121-0/+6
| | | | | | | This can process internal requests or behave like a mini responder. Todo: documentation, update usage info.
* Modify apps to use NCONF code instead of old CONF code.Dr. Stephen Henson2001-06-281-2/+2
| | | | | | | | | | Add new extension functions which work with NCONF. Tidy up extension config routines and remove redundant code. Fix NCONF_get_number(). Todo: more testing of apps to see they still work...
* apps_startup() needs a corresponding apps_shutdown().Richard Levitte2001-06-231-7/+11
|
* Fix UI leak in apps.Dr. Stephen Henson2001-06-231-0/+1
|
* Change the common application routines to use a UI_METHOD for passwordRichard Levitte2001-06-191-3/+7
| | | | prompting, even when done through the callback.
* Provide an application-common setup function for engines and use itRichard Levitte2001-06-181-0/+1
| | | | everywhere.
* Extend all the loading functions to take an engine pointer, a passRichard Levitte2001-05-301-4/+18
| | | | | | | | | | | | | | string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
* Add copy_extensions option to 'ca' utility.Dr. Stephen Henson2001-03-161-0/+6
|