summaryrefslogtreecommitdiffstats
path: root/apps/ca.c
Commit message (Collapse)AuthorAgeFilesLines
* Fix email address delete code.Dr. Stephen Henson2001-11-061-1/+1
|
* Another noemailDN fix.Dr. Stephen Henson2001-10-271-6/+3
|
* Allow ca to certify requests containing BMPStrings and UTF8Strings.Dr. Stephen Henson2001-10-271-7/+10
|
* Bugfixes for noemailDN option. Make it use theDr. Stephen Henson2001-10-271-17/+15
| | | | | | correct name (instead of NULL) if nomailDN is not set, fix memory leaks and retain DN structure when deleting emailAddress.
* Add '-noemailDN' option to 'openssl ca'. This prevents inclusion ofBodo Möller2001-10-251-38/+98
| | | | | | | | the e-mail address in the DN (i.e., it will go into a certificate extension only). The new configuration file option 'email_in_dn = no' has the same effect. Submitted by: Massimiliano Pala madwolf@openca.org
* Reduce the header dependencies on engine.h in apps/.Geoff Thorpe2001-09-121-1/+0
|
* Make -passin -passout etc work again.Dr. Stephen Henson2001-08-171-3/+10
| | | | Fix leak in ca.c when using -passin.
* Add CRL utility functions to allow CRLs to beDr. Stephen Henson2001-08-171-23/+27
| | | | | | | | built up without accessing structures directly. Update ca.c to use new functions. Fix ca.c so it now build CRLs correctly again.
* Initial OCSP server support, using index.txt format.Dr. Stephen Henson2001-07-121-88/+123
| | | | | | | This can process internal requests or behave like a mini responder. Todo: documentation, update usage info.
* Modify apps to use NCONF code instead of old CONF code.Dr. Stephen Henson2001-06-281-58/+62
| | | | | | | | | | Add new extension functions which work with NCONF. Tidy up extension config routines and remove redundant code. Fix NCONF_get_number(). Todo: more testing of apps to see they still work...
* Make better use of load_cert, load_certs and load_key.Richard Levitte2001-06-271-37/+11
|
* Provide an application-common setup function for engines and use itRichard Levitte2001-06-181-17/+1
| | | | everywhere.
* Extend all the loading functions to take an engine pointer, a passRichard Levitte2001-05-301-25/+3
| | | | | | | | | | | | | | string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
* VMS doesn't support more than on period in a file nameRichard Levitte2001-05-221-0/+16
|
* Add copy_extensions option to 'ca' utility.Dr. Stephen Henson2001-03-161-47/+37
|
* Overhaul the display of certificate details inDr. Stephen Henson2001-03-151-37/+144
| | | | | | | | | | | the 'ca' utility. This can now be extensively customised in the configuration file and handles multibyte strings and extensions properly. This is required when extensions copying from certificate requests is supported: the user must be able to view the extensions before allowing a certificate to be issued.
* New option '-subj arg' for 'openssl req' and 'openssl ca'. ThisBodo Möller2001-03-051-22/+104
| | | | | | | | | | sets the subject name for a new request or supersedes the subject name in a given request. Add options '-batch' and '-verbose' to 'openssl req'. Submitted by: Massimiliano Pala <madwolf@hackmasters.net> Reviewed by: Bodo Moeller
* Windows does not know of strigs.h or strcasecmp, so when in Windows,Richard Levitte2001-02-221-1/+6
| | | | make strcasecmp a macro to _stricmp.
* Some functions, like strdup() and strcasecmp(), are defined inRichard Levitte2001-02-201-0/+1
| | | | strings.h according to X/Open.
* Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte2001-02-201-10/+11
| | | | | | | missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
* Make all configuration macros available for application by makingRichard Levitte2001-02-191-2/+2
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* New -set_serial options to 'req' and 'x509'.Dr. Stephen Henson2001-02-191-8/+11
| | | | | | | | Remove the old broken bio read of serial numbers in the 'ca' index file. This would choke if a revoked certificate was specified with a negative serial number. Fix typo in uid.c
* New options to 'ca' utility to support CRL entry extensions.Dr. Stephen Henson2001-02-161-20/+304
| | | | | | | | Add revelant new X509V3 extensions. Add OIDs. Fix ASN1 memory leak code to pop info if external allocation used.
* Fix CRL printing to correctly show when there are no revoked certificates.Dr. Stephen Henson2001-02-101-4/+3
| | | | | | | Make ca.c correctly initialize the revocation date. Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string() set the string type: so they can initialize ASN1_TIME structures properly.
* format stringsUlf Möller2001-02-061-1/+1
|
* Don't shadow.Dr. Stephen Henson2001-01-181-1/+0
|
* New '-extfile' option for 'openssl ca'.Bodo Möller2001-01-151-19/+96
| | | | | | This allows keeping extensions in a separate configuration file. Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
* Fix warning in apps/ca.cDr. Stephen Henson2001-01-141-2/+2
|
* New 'openssl ca -status <serial>' and 'openssl ca -updatedb'Bodo Möller2001-01-121-34/+320
| | | | | | commands. Submitted by: Massimiliano Pala <madwolf@comune.modena.it>
* If CONF_get_string returns NULL and we want to tolerate thisBodo Möller2000-12-151-8/+33
| | | | (e.g., use a default), we have to call ERR_clear_error().
* Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson2000-12-081-1/+1
| | | | | | to main trunk. Lets see if the makes it to openssl-cvs :-)
* Fix warnings.Ben Laurie2000-12-031-4/+4
|
* Use the new LHASH macros to declare type-safe wrapper functions that canGeoff Thorpe2000-12-021-15/+21
| | | | | | | | be used as the hash/compare callbacks without function pointer casting. For now, this is just happening in the apps/ directory whilst a few people check the approach. The rest of the library will be moved across to the same idea if there's no problems with this.
* First step in tidying up the LHASH code. The callback prototypes (andGeoff Thorpe2000-12-011-4/+6
| | | | | | | | | | | | | | | | casts) used in the lhash code are about as horrible and evil as they can be. For starters, the callback prototypes contain empty parameter lists. Yuck. This first change defines clearer prototypes - including "typedef"'d function pointer types to use as "hash" and "compare" callbacks, as well as the callbacks passed to the lh_doall and lh_doall_arg iteration functions. Now at least more explicit (and clear) casting is required in all of the dependant code - and that should be included in this commit. The next step will be to hunt down and obliterate some of the function pointer casting being used when it's not necessary - a particularly evil variant exists in the implementation of lh_doall.
* Add the possibility to use keys handled by engines in moreRichard Levitte2000-10-281-6/+30
| | | | applications.
* Merge the engine branch into the main trunk. All conflicts resolved.Richard Levitte2000-10-261-0/+27
| | | | At the same time, add VMS support for Rijndael.
* On VMS, stdout may very well lead to a file that is written to in aRichard Levitte2000-09-201-5/+19
| | | | | | | | | | | | | | | | | record-oriented fashion. That means that every write() will write a separate record, which will be read separately by the programs trying to read from it. This can be very confusing. The solution is to put a BIO filter in the way that will buffer text until a linefeed is reached, and then write everything a line at a time, so every record written will be an actual line, not chunks of lines and not (usually doesn't happen, but I've seen it once) several lines in one record. Voila, BIO_f_linebuffer() is born. Since we're so close to release time, I'm making this VMS-only for now, just to make sure no code is needlessly broken by this. After the release, this BIO method will be enabled on all other platforms as well.
* Add 'rsautl' low level RSA utility.Dr. Stephen Henson2000-09-031-1/+11
| | | | | | | | Add DER public key routines. Add -passin argument to 'ca' utility. Document sign and verify options to dgst.
* Move add_oid_section to apps.c, so it can be shared by severalRichard Levitte2000-06-221-24/+1
| | | | | applications. Also, have it and the certificate and key loading functions take a BIO argument for error output.
* There have been a number of complaints from a number of sources that namesRichard Levitte2000-06-011-25/+25
| | | | | | | | | like Malloc, Realloc and especially Free conflict with already existing names on some operating systems or other packages. That is reason enough to change the names of the OpenSSL memory allocation macros to something that has a better chance of being unique, like prepending them with OPENSSL_. This change includes all the name changes needed throughout all C files.
* Typesafety thought police.Ben Laurie2000-05-161-12/+12
|
* Get rid of more non-ANSI declarations.Ulf Möller2000-05-151-1/+1
|
* Fix typo and make ca get the CA and request fields correct.Dr. Stephen Henson2000-03-081-1/+1
|
* The OpenVMS library is most definitely not built for anything butRichard Levitte2000-02-261-1/+1
| | | | | | files, unless it's all in unixly syntax. We can't guarantee that right now, so let's skip the whole test suit. There are other places (like the open()) where errors are detected anyway.
* Pass phrase reorganisation.Dr. Stephen Henson2000-02-161-1/+1
|
* Remove the access() call altogether for VMS, since it doesn't quiteRichard Levitte2000-02-151-5/+11
| | | | | | | work for directory specifications (this will be reported as a bug to DEC^H^H^HCompaq). It could as well be removed for all others as well, since stat() and open() will return appropriate errors as well, but I leave that to someone else to decide.
* Make gcc 2.95.2 happy again, even under ``-Wall -Wshadow -Wpointer-arith ↵Ralf S. Engelschall2000-02-111-0/+2
| | | | | | -Wcast-align -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -Winline''.
* ispell (and minor modifications)Ulf Möller2000-02-031-10/+10
|
* Add new -notext option to 'ca', -pubkey option to spkac.Dr. Stephen Henson2000-02-031-10/+11
| | | | | | | | Remove some "WTF??" casts from applications. Fixes to keep VC++ happy and avoid warnings. Docs tidy.
* Allow passwords to be included on command line for a fewDr. Stephen Henson1999-12-241-7/+2
| | | | more utilities.
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-19 17:47:46 +0000