aboutsummaryrefslogtreecommitdiffstats
path: root/apps/openssl.c
Commit message (Collapse)AuthorAgeFilesLines
* Implement FIPS_mode and FIPS_mode_setDr. Stephen Henson2011-05-191-4/+1
|
* Enter FIPS mode by calling FIPS_module_mode_set in openssl.c untilDr. Stephen Henson2011-05-121-1/+4
| | | | FIPS_mode_set is implemented.
* FIPS mode support for openssl utility: doesn't work properly yet dueDr. Stephen Henson2011-04-041-0/+16
| | | | to missing DRBG support in libcrypto.
* For VMS, implement the possibility to choose 64-bit pointers withRichard Levitte2011-03-251-29/+35
| | | | | | | | different options: "64" The build system will choose /POINTER_SIZE=64=ARGV if the compiler supports it, otherwise /POINTER_SIZE=64. "64=" The build system will force /POINTER_SIZE=64. "64=ARGV" The build system will force /POINTER_SIZE=64=ARGV.
* * apps/openssl.c: For VMS, take care of copying argv if needed much earlier,Richard Levitte2011-03-201-28/+56
| | | | | | | | directly in main(). 'if needed' also includes when argv is a 32 bit pointer in an otherwise 64 bit environment. * apps/makeapps.com: When using /POINTER_SIZE=64, try to use the additional =ARGV, but only if it's supported. Fortunately, DCL is very helpful telling us in this case.
* After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMSRichard Levitte2011-03-191-0/+26
| | | | submitted by Steven M. Schweda <sms@antinode.info>
* Fix warnings about ignoring fgets return valueDr. Stephen Henson2009-10-041-1/+2
|
* Allow use of algorithm and cipher names for dgsts and enc utilities insteadDr. Stephen Henson2009-03-301-0/+15
| | | | of having to manually include each one.
* From branch OpenSSL_0_9_8-stable: Allow soft-loading engines.Bodo Möller2008-09-151-3/+15
| | | | Also, fix CHANGES (consistency with stable branch).
* Avoid warnings with -pedantic, specifically:Dr. Stephen Henson2008-07-041-1/+1
| | | | | | Conversion between void * and function pointer. Value computed not used. Signed/unsigned argument.
* Stop warning about extra ';' outside of function.Dr. Stephen Henson2008-05-311-2/+2
|
* LHASH revamp. make depend.Ben Laurie2008-05-261-28/+24
|
* New functions to enumerate digests and ciphers.Dr. Stephen Henson2006-07-091-0/+55
|
* Camellia cipher, contributed by NTTBodo Möller2006-06-091-1/+9
| | | | | Submitted by: Masashi Fujita Reviewed by: Bodo Moeller
* Add an explicit load_config() call so any added algorithms areDr. Stephen Henson2006-04-041-0/+4
| | | | visible.
* New function to retrieve ASN1 info on public key algorithms. New commandDr. Stephen Henson2006-04-041-5/+48
| | | | line option to print out info.
* some const fixesNils Larsch2005-04-051-5/+6
|
* fix out-of-bounds check in lock_dbg_cb (was too lose to detect allBodo Möller2003-08-141-1/+1
| | | | | | invalid cases) PR: 674
* Add the possibility to build without the ENGINE framework.Richard Levitte2003-01-301-0/+2
| | | | PR: 287
* EXIT() may mean return(). That's confusing, so let's have it really meanRichard Levitte2002-12-031-1/+1
| | | | | | exit() in whatever way works for the intended platform, and define OPENSSL_EXIT() to have the old meaning (the name is of course because it's only used in the openssl program)
* allocate bio_err before memory debugging is enabled to avoid memory leaksBodo Möller2002-11-181-4/+4
| | | | | | (we can't release it before the CRYPTO_mem_leaks() call!) Submitted by: Nils Larsch
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-131-11/+7
|
* Make sure that the 'config' variable is correctly defined and declaredRichard Levitte2002-10-091-1/+1
| | | | | | for monolithic as well as non-monolithic biuld. More work is probably needed in this area. PR: 144
* Reorder inclusion of header files:Lutz Jänicke2002-07-101-1/+1
| | | | | | | | | | | | | | | | | des_old.h redefines crypt: #define crypt(b,s)\ DES_crypt((b),(s)) This scheme leads to failure, if header files with the OS's true definition of crypt() are processed _after_ des_old.h was processed. This is e.g. the case on HP-UX with unistd.h. As evp.h now again includes des.h (which includes des_old.h), this problem only came up after this modification. Solution: move header files (indirectly) including e_os.h before the header files (indirectly) including evp.h. Submitted by: Reviewed by: PR:
* Allow longer program names (VMS allows up to 39 characters).Richard Levitte2002-04-061-2/+2
| | | | Submitted by Compaq.
* Stop spurious "unable to load config info" errors in reqDr. Stephen Henson2001-10-211-1/+6
|
* New functions SSL[_CTX]_set_msg_callback().Bodo Möller2001-10-201-1/+1
| | | | | | | | | | | | | | | | | | | | | New macros SSL[_CTX]_set_msg_callback_arg(). Message callback imlementation for SSL 3.0/TLS 1.0 (no SSL 2.0 yet). New '-msg' option for 'openssl s_client' and 'openssl s_server' that enable a message callback that displays all protocol messages. In ssl3_get_client_hello (ssl/s3_srvr.c), generate a fatal alert if client_version is smaller than the protocol version in use. Also change ssl23_get_client_hello (ssl/s23_srvr.c) to select TLS 1.0 if the client demanded SSL 3.0 but only TLS 1.0 is enabled; then the client will at least see that alert. Fix SSL[_CTX]_ctrl prototype (void * instead of char * for generic pointer). Add/update some OpenSSL copyright notices.
* Reduce the header dependencies on engine.h in apps/.Geoff Thorpe2001-09-121-0/+1
|
* Put all "common" initialisation in the apps_startup() and apps_shutdown()Geoff Thorpe2001-09-101-9/+0
| | | | macros in apps.h.
* restore previous revision -- memory leak should be fixed in mem.cBodo Möller2001-09-101-2/+2
|
* fix memory leakBodo Möller2001-09-101-2/+2
|
* Fix apps/openssl.c and ssl/ssltest.c so that they useBodo Möller2001-09-101-2/+7
| | | | | | | | | | | | | CRYPTO_set_mem_debug_options() instead of CRYPTO_dbg_set_options(), which is the default implementation of the former and should usually not be directly used by applications (at least if we assume that the options accepted by the default implementation will also be meaningful to any other implementations). Also fix apps/openssl.c and ssl/ssltest such that environment variable setting 'OPENSSL_DEBUG_MEMORY=off' actively disables the compiled-in library defaults (i.e. such that CRYPTO_MDEBUG is ignored in this case).
* Modify apps to use NCONF code instead of old CONF code.Dr. Stephen Henson2001-06-281-4/+5
| | | | | | | | | | Add new extension functions which work with NCONF. Tidy up extension config routines and remove redundant code. Fix NCONF_get_number(). Todo: more testing of apps to see they still work...
* apps_startup() needs a corresponding apps_shutdown().Richard Levitte2001-06-231-1/+2
|
* Fix UI leak in apps.Dr. Stephen Henson2001-06-231-0/+1
|
* Clean up ENGINE before exiting.Richard Levitte2001-04-261-0/+2
|
* Forcibly enable memory leak checking during "make test"Bodo Möller2001-03-111-1/+7
|
* Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte2001-02-201-3/+3
| | | | | | | missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
* Locking issues.Bodo Möller2000-12-151-0/+126
|
* Constification of the data of a hash table. This means the callbackRichard Levitte2000-12-131-4/+4
| | | | | | | functions need to be constified, and therefore meant a number of easy changes a little everywhere. Now, if someone could explain to me why OBJ_dup() cheats...
* Next step in tidying up the LHASH code.Geoff Thorpe2000-12-081-11/+17
| | | | | | | | | | | | | | | | DECLARE/IMPLEMENT macros now exist to create type (and prototype) safe wrapper functions that avoid the use of function pointer casting yet retain type-safety for type-specific callbacks. However, most of the usage within OpenSSL itself doesn't really require the extra function because the hash and compare callbacks are internal functions declared only for use by the hash table. So this change catches all those cases and reimplements the functions using the base-level LHASH prototypes and does per-variable casting inside those functions to convert to the appropriate item type. The exception so far is in ssl_lib.c where the hash and compare callbacks are not static - they're exposed in ssl.h so their prototypes should not be changed. In this last case, the IMPLEMENT_LHASH_*** macros have been left intact.
* Fix warnings.Ben Laurie2000-12-031-2/+2
|
* Use the new LHASH macros to declare type-safe wrapper functions that canGeoff Thorpe2000-12-021-2/+5
| | | | | | | | be used as the hash/compare callbacks without function pointer casting. For now, this is just happening in the apps/ directory whilst a few people check the approach. The rest of the library will be moved across to the same idea if there's no problems with this.
* First step in tidying up the LHASH code. The callback prototypes (andGeoff Thorpe2000-12-011-1/+3
| | | | | | | | | | | | | | | | casts) used in the lhash code are about as horrible and evil as they can be. For starters, the callback prototypes contain empty parameter lists. Yuck. This first change defines clearer prototypes - including "typedef"'d function pointer types to use as "hash" and "compare" callbacks, as well as the callbacks passed to the lh_doall and lh_doall_arg iteration functions. Now at least more explicit (and clear) casting is required in all of the dependant code - and that should be included in this commit. The next step will be to hunt down and obliterate some of the function pointer casting being used when it's not necessary - a particularly evil variant exists in the implementation of lh_doall.
* Make all engines available in the openssl application.Richard Levitte2000-11-061-0/+1
|
* On VMS, stdout may very well lead to a file that is written to in aRichard Levitte2000-09-201-2/+14
| | | | | | | | | | | | | | | | | record-oriented fashion. That means that every write() will write a separate record, which will be read separately by the programs trying to read from it. This can be very confusing. The solution is to put a BIO filter in the way that will buffer text until a linefeed is reached, and then write everything a line at a time, so every record written will be an actual line, not chunks of lines and not (usually doesn't happen, but I've seen it once) several lines in one record. Voila, BIO_f_linebuffer() is born. Since we're so close to release time, I'm making this VMS-only for now, just to make sure no code is needlessly broken by this. After the release, this BIO method will be enabled on all other platforms as well.
* Make it so we can dynamically enable memory allocation debugging through theRichard Levitte2000-08-011-0/+2
| | | | | | environment variable OPENSSL_DEBUG_MEMORY (existence is sufficient). At the same time, it makes sure that CRYPTO_malloc_debug_init() gets expanded some- where and thereby tested for compilation.
* There have been a number of complaints from a number of sources that namesRichard Levitte2000-06-011-1/+1
| | | | | | | | | like Malloc, Realloc and especially Free conflict with already existing names on some operating systems or other packages. That is reason enough to change the names of the OpenSSL memory allocation macros to something that has a better chance of being unique, like prepending them with OPENSSL_. This change includes all the name changes needed throughout all C files.
* Eliminate memory leaks in mem_dbg.c.Bodo Möller2000-03-181-1/+1
|
* e_os.h: don't do double work with status codes.Richard Levitte2000-03-181-1/+1
| | | | openssl.c: make damn sure e_os.h knows about OPENSSL_C