aboutsummaryrefslogtreecommitdiffstats
path: root/crypto
Commit message (Collapse)AuthorAgeFilesLines
* _lrotl() is a call to the C runtime library!Ulf Möller2000-10-301-1/+1
|
* DSO_load() should also work when it is passed a NULL - a new DSO is createdGeoff Thorpe2000-10-301-3/+3
| | | | | | automatically, however some code was still referring to the original pointer rather than the internal one (and thus to NULL instead of the created pointer).
* The majority of the OCSP code from CertCo.Richard Levitte2000-10-2718-0/+3796
|
* Merge the engine branch into the main trunk. All conflicts resolved.Richard Levitte2000-10-2646-366/+6700
| | | | At the same time, add VMS support for Rijndael.
* On HP-UX, at least when shl_* are used, the libraries have theRichard Levitte2000-10-261-7/+12
| | | | extension .sl instead of .so.
* For the operating systems where it matters, it is sometimes good toRichard Levitte2000-10-263-17/+40
| | | | | | translate library names by only adding ".so" to them without prepending them with "lib". Add the flag DSO_FLAG_NAME_TRANSLATION_EXT_ONLY for that purpose.
* This changes the behaviour of the DSO mechanism for determining anGeoff Thorpe2000-10-268-111/+434
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | appropriate filename translation on the host system. Apart from this point, users should also note that there's a slight change in the API functions too. The DSO now contains its own to-be-converted filename ("dso->filename"), and at the time the DSO loads the "dso->loaded_filename" value is set to the translated form. As such, this also provides an impicit way of determining if the DSO is currently loaded or not. Except, perhaps, VMS .... :-) The various DSO_METHODs have been updated for this mechanism except VMS which is deliberately broken for now, Richard is going to look at how to fit it in (the source comments in there explain "the issue"). Basically, the new callback scheme allows the filename conversion to (a) be turned off altogether through the use of the DSO_FLAG_NO_NAME_TRANSLATION flag, (b) be handled in the default way using the default DSO_METHOD's converter (c) overriden per-DSO by setting the override callback (d) a mix of (b) and (c) - eg. implement an override callback that; (i) checks if we're win32 "if(strstr(dso->meth->name, "win32"))..." and if so, convert "blah" into "blah32.dll" (the default is otherwise to make it "blah.dll"). (ii) default to the normal behaviour - eg. we're not on win32, so finish with (return dso->meth->dso_name_converter(dso,NULL)). (e) be retried a number of times by writing a new DSO_METHOD where the "dso_load()" handler will call the converter repeatedly. Then the custom converter could use state information in the DSO to suggest different conversions or paths each time it is invoked.
* Pointer error correctedRichard Levitte2000-10-221-2/+2
|
* On some operating systems, MAX is defined. Call ours OSSL_MAX insteadRichard Levitte2000-10-221-3/+3
|
* Fix for bug (?) in assembly language routines for SHA1. ThisDr. Stephen Henson2000-10-202-7/+9
| | | | | | | causes MASM to complain and not produce valid debug info. Hopefully this wont break anything else... Also fix typo in e_rd.c
* Keep binary backward compatibility by putting new method functionRichard Levitte2000-10-193-5/+7
| | | | pointers at the end of the structure.
* Make it possible for methods to load from something other than a BIO,Richard Levitte2000-10-193-19/+36
| | | | | | by providing a function pointer that is given a name instead of a BIO. For example, this could be used to load configuration data from an LDAP server.
* NCONF_get_number() has no error checking at all. As a replacement,Richard Levitte2000-10-194-14/+61
| | | | | | NCONF_get_number_e() is defined (_e for "error checking") and is promoted strongly. The old NCONF_get_number is kept around for binary backward compatibility.
* Always return a value.Ben Laurie2000-10-161-1/+1
| | | | | | Submitted by: Reviewed by: PR:
* CRYPTO_get_ex_new_index would never return an error.Richard Levitte2000-10-161-1/+1
|
* Fix for typo in certificate directory lookup code.Dr. Stephen Henson2000-10-141-1/+1
|
* The experimental Rijndael code moved to the main trunk.Richard Levitte2000-10-1427-424/+5617
| | | | make update done.
* Bump the shared library version (should have been done a while ago).Richard Levitte2000-10-131-1/+1
|
* Make the new conf implementatoin bug-compatible with the old one.Richard Levitte2000-10-133-3/+26
| | | | | | | Actually, it's a feature that it goes looking at environment variables. It's just a pity that it's at the cost of the error checking... I'll see if I can come up with a better interface for this.
* Make non blocking I/O work for accept BIOs.Dr. Stephen Henson2000-10-123-1/+16
|
* Do a favor to those who get weird compiles and report if RAND_pseudo_bytesRichard Levitte2000-10-101-1/+8
| | | | returns -1...
* BIO_sock_init() returns 1 for success and -1 for failure, not 0;Bodo Möller2000-10-091-3/+3
| | | | thus the condition '!BIO_sock_init()' doesn't make sense.
* DSO_ctrl() changes have removed a couple of DSO_METHOD-specific functionsGeoff Thorpe2000-10-092-34/+24
| | | | so I've regenerated the error numbers and strings for the DSO functions.
* None of the DSO_METHOD's were handling anything except generic messages.Geoff Thorpe2000-10-084-104/+8
| | | | These are now processed inside DSO_ctrl() itself.
* Time to get rid of some rather silly code duplication - some DSO_ctrl()Geoff Thorpe2000-10-081-0/+16
| | | | commands are common to all DSO_METHODs, hence handle them at the top.
* More code for X509_print_ex() support.Dr. Stephen Henson2000-10-063-8/+56
|
* Global DirectoryString mask fix.Dr. Stephen Henson2000-10-044-79/+157
| | | | | | Add support for X509_NAME_print_ex() in req. Initial code for cutomizable X509 print routines.
* A compiler warning removed. Thanks to the folks at HP!Richard Levitte2000-09-272-2/+2
|
* 'ranlib' doesn't always run on some systems. That's actuallyRichard Levitte2000-09-2537-37/+74
| | | | | acceptable, since all that happens if it fails is a library with an index, which makes linking slower, but still working correctly.
* Make the algorithm implementations depend on the correspondingRichard Levitte2000-09-251-2/+34
| | | | selection macros.
* Update the status and version number to 0.9.7-dev.Richard Levitte2000-09-241-2/+2
|
* Time to build the release. Bump the version info accordingly.Richard Levitte2000-09-241-2/+2
|
* Only use the new informational verify codes if weDr. Stephen Henson2000-09-221-10/+9
| | | | | | specifically ask for them. Fix typo in docs.
* Catch V_ASN1_NULL.Richard Levitte2000-09-221-0/+2
|
* Fix ASN1_TYPE bug.Dr. Stephen Henson2000-09-212-6/+9
|
* Time to build beta 3. Bump the version numbers accordingly.OpenSSL_0_9_6-beta3Richard Levitte2000-09-211-2/+2
|
* Changes by Jeffrey Altman <jaltman@columbia.edu> to make RAND_poll()Richard Levitte2000-09-211-69/+107
| | | | work better in Win32. Verified by zhu qun-ying <qyzhu@krdl.org.sg>.
* Portability patch for HP MPE/iX. Submitted by Mark Bixby <mark_bixby@hp.com>Richard Levitte2000-09-212-1/+7
|
* On VMS, stdout may very well lead to a file that is written to in aRichard Levitte2000-09-205-1/+407
| | | | | | | | | | | | | | | | | record-oriented fashion. That means that every write() will write a separate record, which will be read separately by the programs trying to read from it. This can be very confusing. The solution is to put a BIO filter in the way that will buffer text until a linefeed is reached, and then write everything a line at a time, so every record written will be an actual line, not chunks of lines and not (usually doesn't happen, but I've seen it once) several lines in one record. Voila, BIO_f_linebuffer() is born. Since we're so close to release time, I'm making this VMS-only for now, just to make sure no code is needlessly broken by this. After the release, this BIO method will be enabled on all other platforms as well.
* Totally remove the supposedly 'faster' variant inBodo Möller2000-09-192-30/+1
| | | | | | | | | | | | | | | BN_mod_mul_montgomery, which calls bn_sqr_recursive without much preparation. bn_sqr_recursive requires the length of its argument to be a power of 2, which is not always the case here. There's no reason for not using BN_sqr -- if a simpler approach to squaring made sense, then why not change BN_sqr? (Using BN_sqr should also speed up DH where g is chosen such that it becomes small [e.g., 2] when converted to Montgomery representation.) Case closed :-)
* Document BN_mod_mul_montgomery bug;Bodo Möller2000-09-191-2/+3
| | | | | make disabled code slightly more correct (this does not solve the problem though).
* Disable buggy code variant in BN_mod_mul_montgomery that was enabledBodo Möller2000-09-191-1/+20
| | | | | in 0.9.6-beta1 and 0.9.6-beta2 and caused the BN_mont_exp_mont_word() failure (bug report "openssh 2.2.0p1 fails with openssl 0.9.6-beta1").
* No engine stuff in the main trunk.Richard Levitte2000-09-181-2/+1
|
* Work around for Netscape PKCS#7 signedData bug.Dr. Stephen Henson2000-09-181-0/+5
|
* Going through performance statistics sometimes generates an exception,Richard Levitte2000-09-181-3/+7
| | | | | so disable that part. Reported by Jeffrey Altman <jaltman@columbia.edu>
* cyclecount is only used when __GNUC__ isn't defined.Richard Levitte2000-09-181-1/+2
|
* Disable the net statistics gathering code, since different compilersRichard Levitte2000-09-181-1/+14
| | | | disagree on the proper syntax and type names.
* Unless we cast, thorough compilers will complainRichard Levitte2000-09-181-1/+1
|
* Jeffrey Altman reminds us to initialize some variables and ercommends the ↵Richard Levitte2000-09-181-9/+19
| | | | use of LOadLibrary instead of GetModuleHandle
* A new beta is being released. Change the version numbersRichard Levitte2000-09-171-2/+2
| | | | accordingly.