aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/stack
Commit message (Collapse)AuthorAgeFilesLines
...
* Some C compilers produce warnings or compilation errors if an attemptDr. Stephen Henson2005-05-121-24/+27
| | | | | | | | | | is made to directly cast a function of one type to what it considers and incompatible type. In particular gcc 3.4.2. Add new openssl_fcast macro to place functions into a form where the compiler will allow them to be cast. The current version achives this by casting to: void function(void).
* Make sure id2_func is properly cast as well...Richard Levitte2005-04-201-2/+2
|
* Avoid compiler complaint about mismatched function signaturesRichard Levitte2005-04-201-2/+2
| | | | (void * != char *)
* Type mismatch detected by DEC C compiler. void* != void**Richard Levitte2005-04-201-1/+1
|
* Various Win32 and other fixes for warnings and compilation errors.Dr. Stephen Henson2005-04-191-2/+2
| | | | Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.
* Add emacs cache files to .cvsignore.Richard Levitte2005-04-111-0/+2
|
* Give everything prototypes (well, everything that's actually used).Ben Laurie2005-03-311-1/+1
|
* Blow away Makefile.ssl.Ben Laurie2005-03-301-4/+3
|
* Don't use $(EXHEADER) directly in for loops, as most shells will breakRichard Levitte2004-11-021-1/+1
| | | | | | if $(EXHEADER) is empty. Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>
* Oops!Dr. Stephen Henson2004-10-041-1/+1
|
* Fix race condition when CRL checking is enabled.Dr. Stephen Henson2004-10-043-0/+74
|
* New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson2004-09-061-0/+21
| | | | | | | | | | This tidies up verify parameters and adds support for integrated policy checking. Add support for policy related command line options. Currently only in smime application. WARNING: experimental code subject to change.
* After the latest round of header-hacking, regenerate the dependencies inGeoff Thorpe2004-05-171-8/+7
| | | | | the Makefiles. NB: this commit is probably going to generate a huge posting and it is highly uninteresting to read.
* Extend the index parameter checking from sk_value to sk_set(). Also tidy upGeoff Thorpe2004-04-211-3/+2
| | | | | | some similar code elsewhere. Thanks to Francesco Petruzzi for bringing this to my attention.
* Avoid undefined results when the parameter is out of range.Geoff Thorpe2004-04-021-1/+1
|
* Fix ASN1 warnings.Dr. Stephen Henson2004-03-251-7/+8
|
* Initial support for certificate policy checking and evaluation.Dr. Stephen Henson2004-03-231-0/+63
| | | | | This is currently *very* experimental and needs to be more fully integrated with the main verification code.
* Use sh explicitely to run point.shRichard Levitte2003-12-271-1/+1
| | | | This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
* make updateRichard Levitte2003-05-011-0/+21
|
* make updateRichard Levitte2003-04-292-26/+7
|
* Include objects.h to get a correct declaration of OBJ_bsearch_ex(),Richard Levitte2003-04-291-1/+2
| | | | not to mention the OBJ_BSEARCH_* macros.
* Add an extended variant of sk_find() which returns a non-NULL pointerRichard Levitte2003-04-293-13/+92
| | | | even if an exact match wasn't found.
* Support for name constraints.Dr. Stephen Henson2003-03-241-0/+20
|
* Support for policyMappingsDr. Stephen Henson2003-03-201-0/+20
|
* Use double dashes so makedepend doesn't misunderstand the flags weRichard Levitte2002-10-091-1/+1
| | | | | | | give it. For 0.9.7 and up, that means util/domd needs to remove those double dashes from the argument list when gcc is used to find the dependencies.
* Pass CFLAG to dependency makers, so non-standard system include paths areRichard Levitte2002-06-271-1/+1
| | | | | handled properly. Part of PR 75
* Fix various warnings when compiling with KRB5 code.Dr. Stephen Henson2002-03-121-0/+20
|
* Experimental configuration code.Dr. Stephen Henson2002-01-051-0/+40
| | | | Incomplete, largely untested and subject to change/deletion.
* The cleanup stack in ENGINE changed slightly, so this "make update" isGeoff Thorpe2001-10-011-19/+19
| | | | needed.
* This commits the changes to STACK macros forced by recent ENGINE surgery.Geoff Thorpe2001-09-251-19/+39
|
* Add first cut symmetric crypto support.Ben Laurie2001-08-181-0/+20
|
* make updateRichard Levitte2001-07-311-1/+1
|
* Really add the EVP and all of the DES changes.Ben Laurie2001-07-301-1/+1
|
* make updateRichard Levitte2001-07-101-0/+160
|
* Fix a memory leak in 'sk_dup' in the case a realloc() fails. Also, tidy upGeoff Thorpe2001-05-311-5/+7
| | | | a bit of weird code in sk_new.
* Add a general user interface API. This is designed to replace thingsRichard Levitte2001-05-061-0/+20
| | | | | | | like des_read_password and friends (backward compatibility functions using this new API are provided). The purpose is to remove prompting functions from the DES code section as well as provide for prompting through dialog boxes in a window system and the like.
* Instead of telling both 'make' and the user that ranlibBodo Möller2001-03-091-2/+1
| | | | | | errors can be tolerated, hide the error from 'make'. This gives shorter output both if ranlib fails and if it works.
* e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte2001-02-221-2/+2
| | | | | | | | and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
* Make all configuration macros available for application by makingRichard Levitte2001-02-191-2/+3
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* Make sk_sort tolearate a NULL argument.Dr. Stephen Henson2001-01-281-1/+1
|
* Additional functionality in ocsp utility: print summaryDr. Stephen Henson2001-01-191-0/+20
| | | | | | | of status info. Check nonce values. Option to disable verify. Update usage message. Rename status to string functions and make them global.
* Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson2000-12-081-0/+20
| | | | | | to main trunk. Lets see if the makes it to openssl-cvs :-)
* The majority of the OCSP code from CertCo.Richard Levitte2000-10-271-0/+58
|
* 'ranlib' doesn't always run on some systems. That's actuallyRichard Levitte2000-09-251-1/+2
| | | | | acceptable, since all that happens if it fails is a library with an index, which makes linking slower, but still working correctly.
* Some platforms define NULL as ((void *)0). Unfortunately, a void*Richard Levitte2000-09-171-1/+1
| | | | | can't be used as a function pointer according the the standards. Use a 0 instead and there will be no trouble.
* 'make update'Richard Levitte2000-09-071-1/+2
|
* *BIG* verify code reorganisation.Dr. Stephen Henson2000-09-051-0/+20
| | | | | | | | | | | | | | | | | The old code was painfully primitive and couldn't handle distinct certificates using the same subject name. The new code performs several tests on a candidate issuer certificate based on certificate extensions. It also adds several callbacks to X509_VERIFY_CTX so its behaviour can be customised. Unfortunately some hackery was needed to persuade X509_STORE to tolerate this. This should go away when X509_STORE is replaced, sometime... This must have broken something though :-(
* "make update"Richard Levitte2000-07-241-20/+0
|
* I got sick and tired of having to keep track of NIDs when such a thingRichard Levitte2000-07-051-0/+20
| | | | | | | | | | | | | | | | | | could be done automagically, much like the numbering in libeay.num and ssleay.num. The solution works as follows: - New object identifiers are inserted in objects.txt, following the syntax given in objects.README. - objects.pl is used to process obj_mac.num and create a new obj_mac.h. - obj_dat.pl is used to create a new obj_dat.h, using the data in obj_mac.h. This is currently kind of a hack, and the perl code in objects.pl isn't very elegant, but it works as I intended. The simplest way to check that it worked correctly is to look in obj_dat.h and check the array nid_objs and make sure the objects haven't moved around (this is important!). Additions are OK, as well as consistent name changes.
* Change mkstack.pl so it now sorts each groupDr. Stephen Henson2000-06-221-548/+548
| | | | | | | | | | | | into lexical order. Previously it depended on the order of files in the directory. This should now mean that all systems will agree on the order of safestack.h and will not change it needlessly and avoid massive needless commits to safestack.h in future. It wont however avoid this one :-(