aboutsummaryrefslogtreecommitdiffstats
path: root/apps/smime.c
Commit message (Collapse)AuthorAgeFilesLines
* Typo and comment fixFdaSilvaYY2016-07-251-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1301)
* Use correct EOL in headers.Dr. Stephen Henson2016-05-191-3/+5
| | | | | | RT#1817 Reviewed-by: Rich Salz <rsalz@openssl.org>
* Copyright consolidation 01/10Rich Salz2016-05-171-54/+5
| | | | | Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* Fix signer option and support format SMIME.Dr. Stephen Henson2016-05-131-5/+5
| | | | | | | | | | | | Fix -signer option in smime utility to output signer certificates when verifying. Add support for format SMIME for -inform and -outform with cms and smime utilities. PR#4215 Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* GH932: Add more help messages to some apps options.FdaSilvaYY2016-05-041-1/+1
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove unused parameters from internal functionsRich Salz2016-02-221-6/+6
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Refactor apps load_certs/load_crls to work incrementallyViktor Dukhovni2016-01-201-2/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Centralise loading default apps config fileMatt Caswell2015-10-121-3/+0
| | | | | | | | | | | | | | | | | Loading the config file after processing command line options can cause problems, e.g. where an engine provides new ciphers/digests these are not then recoginised on the command line. Move the default config file loading to before the command line option processing. Whilst we're doing this we might as well centralise this instead of doing it individually for each application. Finally if we do it before the OpenSSL_add_ssl_algorithms() call then ciphersuites provided by an engine (e.g. GOST) can be available to the apps. RT#4085 RT#4086 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Add support for -no-CApath and -no-CAfile optionsMatt Caswell2015-09-251-2/+14
| | | | | | | | | | | For those command line options that take the verification options -CApath and -CAfile, if those options are absent then the default path or file is used instead. It is not currently possible to specify *no* path or file at all. This change adds the options -no-CApath and -no-CAfile to specify that the default locations should not be used to all relevant applications. Reviewed-by: Andy Polyakov <appro@openssl.org>
* Change the way apps open their input and output filesRichard Levitte2015-09-061-11/+6
| | | | | | | | | | | | The different apps had the liberty to decide whether they would open their input and output files in binary mode or not, which could be confusing if two different apps were handling the same type of file in different ways. The solution is to centralise the decision of low level file organisation, and that the apps would use a selection of formats to state the intent of the file. Reviewed-by: Tim Hudson <tjh@openssl.org>
* Make the handling of output and input formats consistentRichard Levitte2015-09-061-4/+2
| | | | | | | | Most of all, we needed to sort out which ones are binary and which ones are text, and make sure they are treated accordingly and consistently so Reviewed-by: Tim Hudson <tjh@openssl.org>
* Restore module loadingRichard Levitte2015-05-291-0/+3
| | | | | | | The module loading feature got broken a while ago, so restore it, but have it a bit more explicit this time around. Reviewed-by: Stephen Henson <steve@openssl.org>
* Use p==NULL not !p (in if statements, mainly)Rich Salz2015-05-111-6/+6
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* free NULL cleanup -- codaRich Salz2015-05-011-4/+2
| | | | | | | | After the finale, the "real" final part. :) Do a recursive grep with "-B1 -w [a-zA-Z0-9_]*_free" to see if any of the preceeding lines are an "if NULL" check that can be removed. Reviewed-by: Tim Hudson <tjh@openssl.org>
* free null cleanup finaleRich Salz2015-05-011-2/+1
| | | | | | Don't check for NULL before calling OPENSSL_free Reviewed-by: Richard Levitte <levitte@openssl.org>
* free NULL cleanup 5aRich Salz2015-04-301-2/+1
| | | | | | | | | Don't check for NULL before calling a free routine. This gets X509_.*free: x509_name_ex_free X509_policy_tree_free X509_VERIFY_PARAM_free X509_STORE_free X509_STORE_CTX_free X509_PKEY_free X509_OBJECT_free_contents X509_LOOKUP_free X509_INFO_free Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove needless bio_err argumentRich Salz2015-04-291-1/+1
| | | | | | | Many functions had a BIO* parameter, and it was always called with bio_err. Remove the param and just use bio_err. Reviewed-by: Matt Caswell <matt@openssl.org>
* fewer NO_ENGINE #ifdef'sRich Salz2015-04-251-8/+2
| | | | | | | | Make setup_engine be a dummy if NO_ENGINE is enabled. The option is not enabled if NO_ENGINE is enabled, so the one "wasted" variable just sits there. Removes some variables and code. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Big apps cleanup (option-parsing, etc)Rich Salz2015-04-241-350/+285
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is merges the old "rsalz-monolith" branch over to master. The biggest change is that option parsing switch from cascasding 'else if strcmp("-foo")' to a utility routine and somethin akin to getopt. Also, an error in the command line no longer prints the full summary; use -help (or --help :) for that. There have been many other changes and code-cleanup, see bullet list below. Special thanks to Matt for the long and detailed code review. TEMPORARY: For now, comment out CRYPTO_mem_leaks() at end of main Tickets closed: RT3515: Use 3DES in pkcs12 if built with no-rc2 RT1766: s_client -reconnect and -starttls broke RT2932: Catch write errors RT2604: port should be 'unsigned short' RT2983: total_bytes undeclared #ifdef RENEG RT1523: Add -nocert to fix output in x509 app RT3508: Remove unused variable introduced by b09eb24 RT3511: doc fix; req default serial is random RT1325,2973: Add more extensions to c_rehash RT2119,3407: Updated to dgst.pod RT2379: Additional typo fix RT2693: Extra include of string.h RT2880: HFS is case-insensitive filenames RT3246: req command prints version number wrong Other changes; incompatibilities marked with *: Add SCSV support Add -misalign to speed command Make dhparam, dsaparam, ecparam, x509 output C in proper style Make some internal ocsp.c functions void Only display cert usages with -help in verify Use global bio_err, remove "BIO*err" parameter from functions For filenames, - always means stdin (or stdout as appropriate) Add aliases for -des/aes "wrap" ciphers. *Remove support for IISSGC (server gated crypto) *The undocumented OCSP -header flag is now "-header name=value" *Documented the OCSP -header flag Reviewed-by: Matt Caswell <matt@openssl.org>
* Add -no_alt_chains option to apps to implement the newMatt Caswell2015-02-251-0/+2
| | | | | | | | | X509_V_FLAG_NO_ALT_CHAINS flag. Using this option means that when building certificate chains, the first chain found will be the one used. Without this flag, if the first chain found is not trusted then we will keep looking to see if we can build an alternative chain instead. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* Dead code clean: #if 0 removal in appsRich Salz2015-01-301-5/+0
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-743/+655
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Document -trusted_first option in man pages and help.Hubert Kario2014-06-191-0/+1
| | | | | Add -trusted_first description to help messages and man pages of tools that deal with certificate verification.
* Allow reordering of certificates when signing.Dr. Stephen Henson2014-06-021-0/+8
| | | | | | | | | Add certificates if -nocerts and -certfile specified when signing in smime application. This can be used this to specify the order certificates appear in the PKCS#7 structure: some broken applications require a certain ordering. PR#3316
* Change default cipher in smime app to des3.Dr. Stephen Henson2014-05-211-2/+2
| | | | PR#3357
* Use new X509_STORE_set_verify_cb function instead of old macro.Dr. Stephen Henson2009-10-181-1/+1
|
* Update from 1.0.0-stableDr. Stephen Henson2009-07-271-18/+18
|
* Update obsolete email address...Dr. Stephen Henson2008-11-051-1/+1
|
* More type-checking.Ben Laurie2008-06-041-18/+18
|
* Improve error detection when streaming S/MIME.Dr. Stephen Henson2007-05-101-3/+10
| | | | Only use streaming when appropriate for detached data in smime utility.
* Add SEED encryption algorithm.Bodo Möller2007-04-231-0/+7
| | | | | | PR: 1503 Submitted by: KISA Reviewed by: Bodo Moeller
* Update smime utility to support streaming for -encrypt and -sign -nodetachDr. Stephen Henson2007-04-131-4/+14
| | | | | | | options. Add new streaming i2d (though strictly speaking it is BER format when streaming) and PEM functions. These all process content on the fly without storing it all in memory.
* There is should be no need to rewind the input stream any more.Dr. Stephen Henson2006-07-131-5/+0
| | | | | | | | | For S/MIME multipart/signed type the signature is calculated on the fly. For other detached data forms the stream isn't used after the single pass to calculate signatures. For non-detached the data is stored in a memory BIO.
* Camellia cipher, contributed by NTTBodo Möller2006-06-091-0/+12
| | | | | Submitted by: Masashi Fujita Reviewed by: Bodo Moeller
* Allow any supported cipher to be used with smime -encrypt.Dr. Stephen Henson2006-05-251-1/+1
|
* Fix smime -pk7out.Dr. Stephen Henson2006-05-221-1/+1
|
* Add -resign and -md options to smime command to support resigning anDr. Stephen Henson2006-05-181-65/+84
| | | | existing structure and using alternative digest for signing.
* Multiple signer support in smime application.Dr. Stephen Henson2006-05-181-6/+92
|
* Reformat smime.c utility.Dr. Stephen Henson2006-05-181-124/+57
|
* Allow PKCS7_decrypt() to work if no cert supplied.Dr. Stephen Henson2005-08-041-2/+2
|
* some const fixesNils Larsch2005-04-051-1/+1
|
* Reformat smime utility.Dr. Stephen Henson2004-09-071-39/+2
| | | | Add support for policy checking in verify utility.
* Don't use 'explicit' for variable name.Dr. Stephen Henson2004-09-071-3/+3
|
* Reformat smime.cDr. Stephen Henson2004-09-071-167/+331
|
* New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson2004-09-061-8/+72
| | | | | | | | | | This tidies up verify parameters and adds support for integrated policy checking. Add support for policy related command line options. Currently only in smime application. WARNING: experimental code subject to change.
* Various S/MIME bug and compatibility fixes.Dr. Stephen Henson2003-06-011-0/+4
|
* Fix indefinite length encoding so EOC correctly updatesDr. Stephen Henson2003-02-251-2/+2
| | | | | | | | the buffer pointer. Rename PKCS7_PARTSIGN to PKCS7_STREAM. Guess what that's for :-)
* Single pass processing to cleartext S/MIME signing.Dr. Stephen Henson2003-02-151-3/+9
|
* Add the possibility to build without the ENGINE framework.Richard Levitte2003-01-301-0/+8
| | | | PR: 287
* Make it possible to load keys from stdin, and restore thatRichard Levitte2002-08-011-1/+1
| | | | | functionality in the programs that had that before. Part fo PR 164
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-27 10:00:00 +0000