aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/asn1
Commit message (Collapse)AuthorAgeFilesLines
* Vade retro C++ comments!Richard Levitte2001-07-311-1/+3
| | | | (Latin for "comments", anyone?)
* Really add the EVP and all of the DES changes.Ben Laurie2001-07-303-486/+250
|
* More linker bloat reorganisation:Dr. Stephen Henson2001-07-2710-19/+34
| | | | | | | | | | | | | | | | | | | | | Split private key PEM and normal PEM handling. Private key handling needs to link in stuff like PKCS#8. Relocate the ASN1 *_dup() functions, to the relevant ASN1 modules using new macro IMPLEMENT_ASN1_DUP_FUNCTION. Previously these were all in crypto/x509/x_all.c along with every ASN1 BIO/fp function which linked in *every* ASN1 function if a single dup was used. Move the authority key id ASN1 structure to a separate file. This is used in the X509 routines and its previous location linked in all the v3 extension code. Also move ASN1_tag2bit to avoid linking in a_bytes.c which is now largely obsolete. So far under Linux stripped binary with single PEM_read_X509 is now 238K compared to 380K before these changes.
* Patches from Vern Staats <staatsvr@asc.hpc.mil> to get Kerberos 5 inRichard Levitte2001-07-092-0/+4
| | | | | | | | | | | | | | | | SSL according to RFC 2712. His comment is: This is a patch to openssl-SNAP-20010702 to support Kerberized SSL authentication. I'm expecting to have the full kssl-0.5 kit up on sourceforge by the end of the week. The full kit includes patches for mod-ssl, apache, and a few text clients. The sourceforge URL is http://sourceforge.net/projects/kssl/ . Thanks to a note from Simon Wilkinson I've replaced my KRB5 AP_REQ message with a real KerberosWrapper struct. I think this is fully RFC 2712 compliant now, including support for the optional authenticator field. I also added openssl-style ASN.1 macros for a few Kerberos structs; see crypto/krb5/ if you're interested.
* Another empty X509_NAME fix.Dr. Stephen Henson2001-06-261-0/+2
|
* Handle empty X509_NAME in printing routines.Dr. Stephen Henson2001-06-261-2/+2
|
* Change all calls to low level digest routines in the library andDr. Stephen Henson2001-06-191-8/+3
| | | | | | | | | | applications to use EVP. Add missing calls to HMAC_cleanup() and don't assume HMAC_CTX can be copied using memcpy(). Note: this is almost identical to the patch submitted to openssl-dev by Verdon Walker <VWalker@novell.com> except some redundant EVP_add_digest_()/EVP_cleanup() calls were removed and some changes made to avoid compiler warnings.
* cp is only used when DSA is built.Richard Levitte2001-06-191-1/+1
|
* Add support for MS CSP Name PKCS#12 attribute.Dr. Stephen Henson2001-06-111-1/+3
|
* 'make update'Richard Levitte2001-06-051-3/+3
|
* New internal function OPENSSL_gmtime, which is intended to do the sameRichard Levitte2001-05-163-69/+14
| | | | as gmtime_r() on the systems where that is defined.
* Fix ASN1 bug when decoding OTHER type.Dr. Stephen Henson2001-04-212-3/+8
| | | | Various S/MIME DSA related fixes.
* Fix warning.Ben Laurie2001-04-161-1/+5
|
* Don't use 'tt' uninitialized when reporting an errorBodo Möller2001-04-051-1/+0
| | | | | (we don't have an ASN1_TEMPLATE to complain about at this stage, so errtt == NULL should be OK)
* Rewrite CHOICE field setting code to properly handleDr. Stephen Henson2001-04-022-13/+22
| | | | | | combine in CHOICE options. This was causing d2i_DSAPublicKey() to misbehave.
* Overhaul the display of certificate details inDr. Stephen Henson2001-03-152-5/+13
| | | | | | | | | | | the 'ca' utility. This can now be extensively customised in the configuration file and handles multibyte strings and extensions properly. This is required when extensions copying from certificate requests is supported: the user must be able to view the extensions before allowing a certificate to be issued.
* Document the -certopt option to the x509 utility.Dr. Stephen Henson2001-03-151-2/+4
| | | | | | | Add no_issuer option. Fix X509_print_ex() so it prints out newlines when certain fields are omitted.
* Instead of telling both 'make' and the user that ranlibBodo Möller2001-03-091-2/+1
| | | | | | errors can be tolerated, hide the error from 'make'. This gives shorter output both if ranlib fails and if it works.
* avoid compiler warningBodo Möller2001-03-081-1/+1
|
* Get rid of '#define ERR_file_name __FILE__', which is unnecessary indirection.Bodo Möller2001-03-081-1/+1
| | | | | | (It cannot possibly help to avoid duplicate 'name of file' strings in object files because the preprocessor does not work at object file level.)
* New option '-subj arg' for 'openssl req' and 'openssl ca'. ThisBodo Möller2001-03-051-1/+8
| | | | | | | | | | sets the subject name for a new request or supersedes the subject name in a given request. Add options '-batch' and '-verbose' to 'openssl req'. Submitted by: Massimiliano Pala <madwolf@hackmasters.net> Reviewed by: Bodo Moeller
* Introduce the possibility to access global variables throughRichard Levitte2001-03-022-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | functions on platform were that's the best way to handle exporting global variables in shared libraries. To enable this functionality, one must configure with "EXPORT_VAR_AS_FN" or defined the C macro "OPENSSL_EXPORT_VAR_AS_FUNCTION" in crypto/opensslconf.h (the latter is normally done by Configure or something similar). To implement a global variable, use the macro OPENSSL_IMPLEMENT_GLOBAL in the source file (foo.c) like this: OPENSSL_IMPLEMENT_GLOBAL(int,foo)=1; OPENSSL_IMPLEMENT_GLOBAL(double,bar); To declare a global variable, use the macros OPENSSL_DECLARE_GLOBAL and OPENSSL_GLOBAL_REF in the header file (foo.h) like this: OPENSSL_DECLARE_GLOBAL(int,foo); #define foo OPENSSL_GLOBAL_REF(foo) OPENSSL_DECLARE_GLOBAL(double,bar); #define bar OPENSSL_GLOBAL_REF(bar) The #defines are very important, and therefore so is including the header file everywere where the defined globals are used. The macro OPENSSL_EXPORT_VAR_AS_FUNCTION also affects the definition of ASN.1 items, but that structure is a bt different. The largest change is in util/mkdef.pl which has been enhanced with better and easier to understand logic to choose which symbols should go into the Windows .def files as well as a number of fixes and code cleanup (among others, algorithm keywords are now sorted lexicographically to avoid constant rewrites).
* make updateRichard Levitte2001-02-261-116/+112
| | | | | Note that all *_it variables are suddenly non-existant according to libeay.num. This is a bug that will be corrected. Please be patient.
* Trap an invalid ASN1_ITEM construction and print outDr. Stephen Henson2001-02-253-4/+16
| | | | the errant field for more ASN1 error conditions.
* Print out OID of unknown signature or public keyDr. Stephen Henson2001-02-241-6/+11
| | | | algorithms.
* Get rid of ASN1_ITEM_FUNCTIONS dummy functionDr. Stephen Henson2001-02-2320-41/+40
| | | | | | prototype hack. This unfortunately means that every ASN1_*_END construct cannot have a trailing ;
* Initial support for ASN1_ITEM_FUNCTION option toDr. Stephen Henson2001-02-2310-62/+216
| | | | | | | | change the way ASN1 modules are exported. Still needs a bit of work for example the hack which a dummy function prototype to avoid compilers warning about multiple ;s.
* e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte2001-02-221-452/+439
| | | | | | | | and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
* Exported header files should not include e_os.h.Richard Levitte2001-02-221-1/+0
|
* Rebuild ASN1 error codes to remove unused function and reason codes.Dr. Stephen Henson2001-02-222-200/+46
|
* 'make update'Geoff Thorpe2001-02-212-31/+39
|
* Include string.h so mem*() functions get properly declared.Richard Levitte2001-02-201-0/+1
|
* Include OpenSSL header files earlier so macros like OPENSSL_SYS_VMSRichard Levitte2001-02-201-2/+2
| | | | get a chance to be defined.
* Include string.h so mem* functions get properly declared.Richard Levitte2001-02-201-0/+1
|
* Include string.h so mem* functions get properly declared.Richard Levitte2001-02-201-0/+1
|
* Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte2001-02-203-8/+8
| | | | | | | missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
* Make all configuration macros available for application by makingRichard Levitte2001-02-1919-613/+591
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* New options to 'ca' utility to support CRL entry extensions.Dr. Stephen Henson2001-02-163-2/+8
| | | | | | | | Add revelant new X509V3 extensions. Add OIDs. Fix ASN1 memory leak code to pop info if external allocation used.
* Fix CRL printing to correctly show when there are no revoked certificates.Dr. Stephen Henson2001-02-103-1/+3
| | | | | | | Make ca.c correctly initialize the revocation date. Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string() set the string type: so they can initialize ASN1_TIME structures properly.
* Various Win32 related fixed. Make no-krb5 work in mkdef.pl .Dr. Stephen Henson2001-02-091-0/+2
| | | | | | | | Fix warning in apps/engine.c Remove definitions of deleted functions. Add missing definition of X509_VAL.
* Include string.h (whis is in all relevant standards) instead ofBodo Möller2001-02-051-1/+1
| | | | memory.h (which is not).
* Make depend.Ben Laurie2001-02-041-487/+525
|
* Fix a warning.Ben Laurie2001-02-041-0/+1
|
* Fix ASN1_TIME_to_generlizedtime().Dr. Stephen Henson2001-02-041-2/+2
| | | | | | | | Add protoype for OCSP_response_create(). Add OCSP_request_sign() and OCSP_basic_sign() private key and certificate checks and make OCSP_NOCERTS consistent with PKCS7_NOCERTS
* Various OCSP responder utility functions.Dr. Stephen Henson2001-02-032-0/+48
| | | | | | Delete obsolete OCSP functions. Largely untested at present...
* Various function for commmon operations.Dr. Stephen Henson2001-02-022-17/+5
|
* Add debugging info to new ASN1 code to trace memory leaks.Dr. Stephen Henson2001-01-241-3/+27
| | | | | | Fix PKCS7 and PKCS12 memory leaks. Initialise encapsulated content type properly.
* Fixes to various ASN1_INTEGER routines for negative case.Dr. Stephen Henson2001-01-192-1/+13
| | | | Enhance s2i_ASN1_INTEGER().
* Fix typo in OCSP ASN1 module, this causedDr. Stephen Henson2001-01-111-1/+1
| | | | | | | | | | | invalid format in OCSP request signatures. Add spaces to OCSP HTTP header. Change X509_NAME_set() there's no reason why it should return an error if the destination points to NULL... though it should if the destination is NULL.
* Fix typo in OCSP nonce extension.Dr. Stephen Henson2001-01-043-5/+9
| | | | | | | | | | | | Set correct type in ASN1_STRING for INTEGER and ENUMERATED types. Make ASN1_INTEGER_get() and ASN1_ENUMERATED_get() return -1 for invalid type rather than 0 (which is often valid). -1 may also be valid but this is less likely. Load OCSP error strings in ERR_load_crypto_strings().
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-28 12:08:14 +0000