aboutsummaryrefslogtreecommitdiffstats
path: root/apps/x509.c
Commit message (Collapse)AuthorAgeFilesLines
* Add support for default public key digest type ctrl.Dr. Stephen Henson2006-05-071-30/+7
|
* Remove link between digests and signature algorithms.Dr. Stephen Henson2006-04-191-0/+2
| | | | | Use cross reference table in ASN1_item_sign(), ASN1_item_verify() to eliminate the need for algorithm specific code.
* Remove ASN1_METHOD code replace with new ASN1 alternative.Dr. Stephen Henson2005-08-201-8/+7
|
* makeNils Larsch2005-07-161-0/+4
| | | | | | | | ./configure no-deprecated [no-dsa] [no-dh] [no-ec] [no-rsa] make depend all test work again PR: 1159
* some const fixesNils Larsch2005-04-051-2/+2
|
* use SHA-1 as the default digest for the apps/openssl commandsNils Larsch2005-04-021-1/+1
|
* Give everything prototypes (well, everything that's actually used).Ben Laurie2005-03-311-2/+1
|
* Use X509_cmp_time() in -checkend option, to support GeneralizedTime.Dr. Stephen Henson2004-12-051-2/+2
|
* Fix x509.c so it creates serial number file again if noDr. Stephen Henson2004-11-131-2/+5
| | | | serial number is supplied on command line.
* Make self signing option of 'x509' use random serial numbers too.Dr. Stephen Henson2004-05-121-3/+7
|
* New option to 'x509' -next_serial. This outputs the certificateDr. Stephen Henson2004-04-211-1/+22
| | | | | | serial number plus 1 to the output file. Its purpose is to allow serial number files to be initialized when random serial numbers are used.
* Use X509_get_serialNumber() instead of accessing internals in x509.cDr. Stephen Henson2004-04-211-1/+2
|
* header cleanup in apps/Geoff Thorpe2004-04-191-0/+2
|
* Use BUF_strlcpy() instead of strcpy().Richard Levitte2003-12-271-6/+8
| | | | | | | Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
* In order to get the expected self signed error whenDr. Stephen Henson2003-09-211-1/+1
| | | | | calling X509_verify_cert() in x509.c the cert should not be added to the trusted store.
* Add -issuer_hash and make -subject_hash the default way to get theRichard Levitte2003-07-031-6/+15
| | | | | | subject hash, with -hash a synonym kept around for backward compatibility reasons. PR: 650
* Convert save_serial() to work like save_index(), and add aRichard Levitte2003-04-041-1/+1
| | | | rotate_serial() that works like rotate_index().
* Remove unused variable.Richard Levitte2003-04-031-1/+0
|
* Make it possible to have multiple active certificates with the sameRichard Levitte2003-04-031-70/+8
| | | | subject.
* No need to test -setalias twice.Richard Levitte2003-03-311-6/+0
| | | | PR: 556
* Add the possibility to build without the ENGINE framework.Richard Levitte2003-01-301-0/+8
| | | | PR: 287
* EXIT() may mean return(). That's confusing, so let's have it really meanRichard Levitte2002-12-031-1/+1
| | | | | | exit() in whatever way works for the intended platform, and define OPENSSL_EXIT() to have the old meaning (the name is of course because it's only used in the openssl program)
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-131-3/+4
|
* Variables on the stack must be initialized or we can't depend on anyRichard Levitte2002-11-111-1/+1
| | | | initial value. For errline/errorline, we did depend on that, erroneously
* -CAserial does take a filename argument.Richard Levitte2002-11-081-1/+1
| | | | PR: 332
* get rid of EVP_PKEY_ECDSA (now we have EVP_PKEY_EC instead)Bodo Möller2002-08-121-3/+3
| | | | Submitted by: Nils Larsch
* Make it possible to load keys from stdin, and restore thatRichard Levitte2002-08-011-6/+7
| | | | | functionality in the programs that had that before. Part fo PR 164
* Only use DSA-functions if available.Lutz Jänicke2002-07-291-1/+5
| | | | | | Submitted by: "Hellan,Kim KHE" <KHE@kmd.dk> Reviewed by: PR: 167
* CAformat should not be used for CA key format.Richard Levitte2002-05-301-1/+1
|
* Config code updates.Dr. Stephen Henson2002-02-221-0/+3
| | | | | | | | | | | | | | | | | | | CONF_modules_unload() now calls CONF_modules_finish() automatically. Default use of section openssl_conf moved to CONF_modules_load() Load config file in several openssl utilities. Most utilities now load modules from the config file, though in a few (such as version) this isn't done because it couldn't be used for anything. In the case of ca and req the config file used is the same as the utility itself: that is the -config command line option can be used to specify an alternative file.
* ECDSA supportBodo Möller2002-02-131-0/+10
| | | | Submitted by: Nils Larsch <nla@trustcenter.de>
* Reduce the header dependencies on engine.h in apps/.Geoff Thorpe2001-09-121-1/+0
|
* Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe2001-09-011-1/+5
| | | | | | | | | | | See the commit log message for that for more information. NB: X509_STORE_CTX's use of "ex_data" support was actually misimplemented (initialisation by "memset" won't/can't/doesn't work). This fixes that but requires that X509_STORE_CTX_init() be able to handle errors - so its prototype has been changed to return 'int' rather than 'void'. All uses of that function throughout the source code have been tracked down and adjusted.
* Modify apps to use NCONF code instead of old CONF code.Dr. Stephen Henson2001-06-281-14/+15
| | | | | | | | | | Add new extension functions which work with NCONF. Tidy up extension config routines and remove redundant code. Fix NCONF_get_number(). Todo: more testing of apps to see they still work...
* Use apps_shutdown() in all applications, in case someone decides notRichard Levitte2001-06-231-0/+1
| | | | | | | to go the monolith way (does anyone do that these days?). NOTE: a few applications are missing in this commit. I've a few more changes in them that I haven't tested yet.
* Provide an application-common setup function for engines and use itRichard Levitte2001-06-181-17/+1
| | | | everywhere.
* Extend all the loading functions to take an engine pointer, a passRichard Levitte2001-05-301-5/+7
| | | | | | | | | | | | | | string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
* Bugfix: previously the serial number file could turn negativeBodo Möller2001-03-081-8/+10
| | | | because an incompletely initialized ASN1_INTEGER was used.
* Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte2001-02-201-2/+2
| | | | | | | missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
* Fix warning.Ulf Möller2001-02-201-1/+1
|
* Make all configuration macros available for application by makingRichard Levitte2001-02-191-5/+5
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* New -set_serial options to 'req' and 'x509'.Dr. Stephen Henson2001-02-191-26/+53
| | | | | | | | Remove the old broken bio read of serial numbers in the 'ca' index file. This would choke if a revoked certificate was specified with a negative serial number. Fix typo in uid.c
* format stringsUlf Möller2001-02-061-1/+1
|
* If CONF_get_string returns NULL and we want to tolerate thisBodo Möller2000-12-151-2/+9
| | | | (e.g., use a default), we have to call ERR_clear_error().
* Add the possibility to use keys handled by engines in moreRichard Levitte2000-10-281-3/+4
| | | | applications.
* The majority of the OCSP code from CertCo.Richard Levitte2000-10-271-0/+8
|
* Merge the engine branch into the main trunk. All conflicts resolved.Richard Levitte2000-10-261-0/+27
| | | | At the same time, add VMS support for Rijndael.
* More code for X509_print_ex() support.Dr. Stephen Henson2000-10-061-2/+8
|
* On VMS, stdout may very well lead to a file that is written to in aRichard Levitte2000-09-201-2/+16
| | | | | | | | | | | | | | | | | record-oriented fashion. That means that every write() will write a separate record, which will be read separately by the programs trying to read from it. This can be very confusing. The solution is to put a BIO filter in the way that will buffer text until a linefeed is reached, and then write everything a line at a time, so every record written will be an actual line, not chunks of lines and not (usually doesn't happen, but I've seen it once) several lines in one record. Voila, BIO_f_linebuffer() is born. Since we're so close to release time, I'm making this VMS-only for now, just to make sure no code is needlessly broken by this. After the release, this BIO method will be enabled on all other platforms as well.
* Get rid of ASN1_UTCTIME_get, which cannot work with time_tBodo Möller2000-09-061-57/+74
| | | | | | | return type (on platforms where time_t is a 32 bit value). New function ASN1_UTCTIME_cmp_time_t as a replacement for use in apps/x509.c.
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-07 05:56:18 +0000