aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/pkcs7
Commit message (Collapse)AuthorAgeFilesLines
* Change from main development line, 2001-03-20 16:36 levitteRichard Levitte2001-03-211-0/+4
| | | | | avoid linking problems when OpenSSL is built with no-dsa. Spotted by Hellan,Kim KHE <khe@kmd.dk>
* Stop PKCS7_verify() core dumping with unknown publicDr. Stephen Henson2001-02-242-8/+10
| | | | | key algorithms and leaking if the signature verify fails.
* Transport from development branch.Richard Levitte2001-01-301-3/+3
|
* Fix from main trunk, 2000-09-25 10:52 levitte:Richard Levitte2000-10-111-1/+2
| | | | | | 'ranlib' doesn't always run on some systems. That's actually acceptable, since all that happens if it fails is a library with an index, which makes linking slower, but still working correctly.
* Work around for Netscape PKCS#7 signedData bug.Dr. Stephen Henson2000-09-181-0/+5
|
* Use sk_*_new_null() instead of sk_*_new(NULL), since that takes careRichard Levitte2000-09-173-4/+4
| | | | | of complaints from the compiler about data pointers and function pointers not being compatible with each other.
* Two places where I forgot to change vms_idhacks to symhacks.Richard Levitte2000-09-081-3/+1
|
* Ugh, BIO_find_type() cannot be passed a NULL.Dr. Stephen Henson2000-09-071-3/+3
| | | | | | | Fix doc example, and fix BIO_find_type(). Fix PKCS7_verify(). It was using 'i' for both the loop variable and the verify return value.
* Add docs for BIO_find_type() and friends.Dr. Stephen Henson2000-09-071-2/+2
| | | | | Added function BIO_next() otherwise you can't traverse a chain without accessing BIO internals.
* 'make update'Richard Levitte2000-09-071-11/+16
|
* Keep a not of original encoding in certificate requests.Dr. Stephen Henson2000-09-052-9/+13
| | | | Add new option to PKCS7_sign to exclude S/MIME capabilities.
* Add support for 'other' PKCS#7 content types.Dr. Stephen Henson2000-08-221-0/+3
|
* Various fixes...Dr. Stephen Henson2000-08-211-1/+1
| | | | | | | | | | | | | | | | initialize ex_pathlen to -1 so it isn't checked if pathlen is not present. set ucert to NULL in apps/pkcs12.c otherwise it gets freed twice. remove extraneous '\r' in MIME encoder. Allow a NULL to be passed to X509_gmtime_adj() Make PKCS#7 code use definite length encoding rather then the indefinite stuff it used previously.
* MD4 implemented. Assar Westerlund provided the digest code itself and the ↵Richard Levitte2000-08-141-25/+27
| | | | test utility, I added the bits to get a EVP interface, the command line utility and the speed test
* I got sick and tired of having to keep track of NIDs when such a thingRichard Levitte2000-07-051-15/+19
| | | | | | | | | | | | | | | | | | could be done automagically, much like the numbering in libeay.num and ssleay.num. The solution works as follows: - New object identifiers are inserted in objects.txt, following the syntax given in objects.README. - objects.pl is used to process obj_mac.num and create a new obj_mac.h. - obj_dat.pl is used to create a new obj_dat.h, using the data in obj_mac.h. This is currently kind of a hack, and the perl code in objects.pl isn't very elegant, but it works as I intended. The simplest way to check that it worked correctly is to look in obj_dat.h and check the array nid_objs and make sure the objects haven't moved around (this is important!). Additions are OK, as well as consistent name changes.
* Safe stack reorganisation in terms of function casts.Dr. Stephen Henson2000-06-162-155/+0
| | | | | | | | | | | | After some messing around this seems to work but needs a few more tests. Working out the syntax for sk_set_cmp_func() (cast it to a function that itself returns a function pointer) was painful :-( Needs some testing to see what other compilers think of this syntax. Also needs similar stuff for ASN1_SET_OF etc etc.
* Enable DSO support on alpha (OSF1), cc and gcc.Geoff Thorpe2000-06-131-23/+26
| | | | | | Also, "make update" has added some missing functions to libeay.num, updated the TABLE for the alpha changes, and updated thousands of dependancies that have changed from recent commits.
* There have been a number of complaints from a number of sources that namesRichard Levitte2000-06-014-22/+22
| | | | | | | | | like Malloc, Realloc and especially Free conflict with already existing names on some operating systems or other packages. That is reason enough to change the names of the OpenSSL memory allocation macros to something that has a better chance of being unique, like prepending them with OPENSSL_. This change includes all the name changes needed throughout all C files.
* "make update" + stripping the type-specific stack functions out ofGeoff Thorpe2000-06-012-0/+155
| | | | libeay.num and ssleay.num.
* The previous commit to crypto/stack/*.[ch] pulled the type-safety stringsGeoff Thorpe2000-06-011-4/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | yet tighter, and also put some heat on the rest of the library by insisting (correctly) that compare callbacks used in stacks are prototyped with "const" parameters. This has led to a depth-first explosion of compiler warnings in the code where 1 constification has led to 3 or 4 more. Fortunately these have all been resolved to completion and the code seems cleaner as a result - in particular many of the _cmp() functions should have been prototyped with "const"s, and now are. There was one little problem however; X509_cmp() should by rights compare "const X509 *" pointers, and it is now declared as such. However, it's internal workings can involve recalculating hash values and extensions if they have not already been setup. Someone with a more intricate understanding of the flow control of X509 might be able to tighten this up, but for now - this seemed the obvious place to stop the "depth-first" constification of the code by using an evil cast (they have migrated all the way here from safestack.h). Fortunately, this is the only place in the code where this was required to complete these type-safety changes, and it's reasonably clear and commented, and seemed the least unacceptable of the options. Trying to take the constification further ends up exploding out considerably, and indeed leads directly into generalised ASN functions which are not likely to cooperate well with this.
* sk_value was also suffering from de-const-ification.Geoff Thorpe2000-05-311-0/+2
| | | | Also, add in a couple of missing declarations in pkcs7 code.
* Beginnings of EVP cipher overhaul. This should eventuallyDr. Stephen Henson2000-05-261-27/+4
| | | | | | | | | | | | | | | enhance and tidy up the EVP interface. This patch adds initial support for variable length ciphers and changes S/MIME code to use this. Some other library functions need modifying to support use of modified cipher parameters. Also need to change all the cipher functions that should return error codes, but currenly don't. And of course it needs extensive testing...
* Yet more typesafety.Ben Laurie2000-05-212-5/+7
|
* Typesafe Thought Police part 4.Ben Laurie2000-05-164-63/+72
|
* Typesafety Thought Police part 3.Ben Laurie2000-05-161-0/+4
|
* Get rid of more non-ANSI declarations.Ulf Möller2000-05-152-19/+19
|
* In Message-ID: <003201bfb332$14a07520$0801a8c0@janm.transactionsite.com>,Richard Levitte2000-05-021-4/+4
| | | | | | "Jan Mikkelsen" <janm@transactionsite.com> correctly states that the OpenSSL header files have #include's and extern "C"'s in an incorrect order. Thusly fixed.
* "make update"Richard Levitte2000-04-091-10/+11
|
* Clean up context, even if an error occured.Richard Levitte2000-03-231-0/+1
|
* Update docs and remove old PKCS#7 README file.Dr. Stephen Henson2000-03-231-5/+0
|
* Preserve reason strings in automatically build tables.Bodo Möller2000-03-051-1/+2
|
* Ouch! PKCS7_encrypt() was heading MIME text headers twiceDr. Stephen Henson2000-02-281-7/+0
| | | | | because it added them manually and as part of SMIME_crlf_copy(). Removed the manual add.
* Rename functions for new convention.Dr. Stephen Henson2000-02-263-10/+10
|
* Make pkcs8 work again.Dr. Stephen Henson2000-02-221-2/+3
| | | | | Make EVP_CIPHER_type() return NID_undef if the cipher has no ASN1 OID, modify code to handle this.
* Change EVP_MD_CTX_type so it is more logical and add EVP_MD_CTX_md forDr. Stephen Henson2000-02-221-3/+3
| | | | | | | | the old functionality. Various warning fixes. Initial EVP symmetric cipher docs.
* Move the registration of callback functions to special functionsRichard Levitte2000-02-201-0/+16
| | | | | | | | | | designed for that. This removes the potential error to mix data and function pointers. Please note that I'm a little unsure how incorrect calls to the old ctrl functions should be handled, in som cases. I currently return 0 and that's it, but it may be more correct to generate a genuine error in those cases.
* Note about des_ncbc_encrypt.Bodo Möller2000-02-081-1/+1
|
* Rename SSLeay_add_all_algorithms() et al toDr. Stephen Henson2000-02-042-2/+2
| | | | | OpenSSL_add_all_algorithms(). Move these into separate files so they work properly.
* ispell (and minor modifications)Ulf Möller2000-02-033-3/+3
|
* Seek out and destroy another evil cast.Ulf Möller2000-01-301-2/+2
|
* Check RAND_bytes() return value or use RAND_pseudo_bytes().Ulf Möller2000-01-211-1/+1
|
* New function RAND_pseudo_bytes() generated pseudorandom numbers thatUlf Möller2000-01-161-1/+1
| | | | are not guaranteed to be unpredictable.
* Avoid some warnings, and run "make update".Bodo Möller2000-01-141-3/+3
|
* Precautions against using the PRNG uninitialized: RAND_bytes() nowUlf Möller2000-01-131-1/+2
| | | | | | returns int (1 = ok, 0 = not seeded). New function RAND_add() is the same as RAND_seed() but takes an estimate of the entropy as an additional argument.
* make no-des and no-rc2 work.Bodo Möller2000-01-074-5/+40
|
* #undef PKCS7_SIGNER_INFO for Win32 to avoid clashes.Dr. Stephen Henson2000-01-071-1/+2
| | | | | Fix so CRLDistributionPoints relativeName option uses the correct type.
* Add OIDs for idea and blowfish. Unfortunately these are inDr. Stephen Henson1999-12-293-1/+9
| | | | the middle of the OID table so the diff is rather large :-(
* Delete an unused variable and make the PKCS#12 keygen debugging code workDr. Stephen Henson1999-12-151-1/+0
| | | | again.
* Fix the S/MIME code to use canonical MIME format forDr. Stephen Henson1999-12-151-5/+2
| | | | encrypted mail. Also update the smime docs.
* Various S/MIME fixes. Fix for memory leak, recipient list bugDr. Stephen Henson1999-12-141-5/+10
| | | | and not excluding parameters with DSA keys.