aboutsummaryrefslogtreecommitdiffstats
path: root/crypto
Commit message (Collapse)AuthorAgeFilesLines
* Fix uni2asc() so it can properly convert zero lengthDr. Stephen Henson2001-01-101-1/+1
| | | | | unicode strings. Certain PKCS#12 files contain these in BMPStrings and it used to crash on them.
* oops, void functions shouldn't try and return a value. Strangely, gccGeoff Thorpe2001-01-091-2/+2
| | | | | didn't even give a warning for this yet HPUX cc considered it an error. Reported by Lutz(@openssl.org).
* Add automatic query of EGD sockets to RAND_poll(). The EGD sockets areLutz Jänicke2001-01-093-12/+67
| | | | | | | only queried when the /dev/[u]random devices did not return enough entropy. Only the amount of entropy missing to reach the required minimum is queried, as EGD may be drained. Queried locations are: /etc/entropy, /var/run/egd-pool
* Don't cheat: when only getting several bytes from each source, n is incrementedLutz Jänicke2001-01-091-2/+5
| | | | | correctly, but RAND_add(..,n) counts the increasing n several times. Only RAND_add(..,n) once entropy collection is finished.
* Move all the existing function pointer casts associated with LHASH's twoGeoff Thorpe2001-01-095-11/+24
| | | | | | | "doall" functions to using type-safe wrappers. As and where required, this can be replaced by redeclaring the underlying callbacks to use the underlying "void"-based prototypes (eg. if performance suffers from an extra level of function invocation).
* Get rid of the function pointer casting in the debugging memory code dueGeoff Thorpe2001-01-092-6/+13
| | | | | to LHASH usage. NB: The callback type used as been suctioned off into crypto.h as CRYPTO_MEM_LEAK_CB to improve clarity.
* This adds macros to implement (and/or declare) type-safe wrapper functionsGeoff Thorpe2001-01-092-14/+35
| | | | | | | | | | | | around the callbacks required in the LHASH code for the "doall" functions. Also - fix the evil function pointer casting in the two lh_doall functions by deferring to a static utility function. Previously lh_doall() was invoking lh_doall_arg() by casting the callback to the 2-parameter prototype and passing in a NULL argument. This appears to have been working thus far but it's not a hot idea. If the extra level of indirection becomes a performance hit, we can just provide two virtually identical implementations for each variant later on.
* Whilst in the process of fixing outstanding function-pointer casts in theGeoff Thorpe2001-01-081-1/+1
| | | | | | | | LHASH code, this evil was uncovered. The cast was obscuring the fact that the function was prototyped to take 2 parameters when in fact it is being used as a callback that should take only one. Anyway, the function itself ignores the second parameter (thankfully). A proper cure is on the way but for now this corrects the inconsistency.
* Keep up with Unix code. It's beginning to be time to rethink the VMSRichard Levitte2001-01-081-2/+3
| | | | build system...
* Add prototypes for new OCSP functions.Dr. Stephen Henson2001-01-082-1/+16
| | | | Fix bug in OCSP_find_status().
* Change RAND_poll for Unix to try a number of devices and only readRichard Levitte2001-01-084-51/+283
| | | | | | | | | them for a short period of time (actually, poll them with select(), then read() whatever is there), which is about 10ms (hard-coded value) each. Separate Windows and Unixly code, and start on a VMS variant that currently just returns 0.
* Add set of OCSP client functions. All experimentalDr. Stephen Henson2001-01-087-59/+414
| | | | | | | | and subject to addition, modifcation or deletion. Add two OCSP nonce utility functions. Fix typo in status code name.
* Keep up with the Unixly changes.Richard Levitte2001-01-071-1/+1
|
* Modify OCSP API to more closely reflectDr. Stephen Henson2001-01-053-28/+9
| | | | | | application needs. Add OCSP library name to error code.
* Fix typo in OCSP nonce extension.Dr. Stephen Henson2001-01-045-6/+12
| | | | | | | | | | | | Set correct type in ASN1_STRING for INTEGER and ENUMERATED types. Make ASN1_INTEGER_get() and ASN1_ENUMERATED_get() return -1 for invalid type rather than 0 (which is often valid). -1 may also be valid but this is less likely. Load OCSP error strings in ERR_load_crypto_strings().
* Update OCSP API.Dr. Stephen Henson2001-01-048-55/+217
| | | | | | | | | | | | | | | | | | Remove extensions argument from various functions because it is not needed with the new extension code. New function OCSP_cert_to_id() to convert a pair of certificates into an OCSP_CERTID. New simple OCSP HTTP function. This is rather primitive but just about adequate to send OCSP requests and parse the response. Fix typo in CRL distribution points extension. Fix ASN1 code so it adds a final null to constructed strings.
* Fix the S/MIME code so it now works again andDr. Stephen Henson2000-12-313-37/+42
| | | | uses the new ASN1 code.
* Make the DSO code for VMS work again. First attempt.Richard Levitte2000-12-311-30/+24
|
* Since asn1.h gets included recursively from many places, the easiestRichard Levitte2000-12-311-0/+3
| | | | | is to have asn1.h include e_os.h and e_os2.h. Of course, this makes the unofficial "non-export" status of e_os.h a bit delicate...
* Rewrite PKCS#12 code and remove some of the oldDr. Stephen Henson2000-12-3113-138/+190
| | | | | | | | | | horrible macros. Fix two evil ASN1 bugs. Attempt to use 'ctx' when NULL if input is indefinite length constructed in asn1_check_tlen() and invalid pointer to ASN1_TYPE when reusing existing structure (this took *ages* to find because the new PKCS#12 code triggered it).
* If OPENSSL_BUILD_SHLIBCRYPTO (for files that end up as libcryptoRichard Levitte2000-12-316-19/+51
| | | | | | | objects) or OPENSSL_BUILD_SHLIBSSL (for files that end up as libssl objects) is defined, redefine OPENSSL_EXTERN to be OPENSSL_EXPORT. This is actually only important on Win32, and can safely be ignored in all other cases, at least for now.
* Delete PKCS#12 redundant files.Dr. Stephen Henson2000-12-304-647/+0
|
* ASN1_ITEM versions of ASN1_d2i_{fp, bio} and replacement ofDr. Stephen Henson2000-12-305-59/+154
| | | | | | most of the old wrappers. A few of the old versions remain because they are non standard and the corresponding ASN1 code has not been reimplemented yet.
* Replace the old ASN1_dup() with ASN1_item_dup() andDr. Stephen Henson2000-12-293-30/+17
| | | | zap some evil function pointers casts along the way...
* Correct a typo.Richard Levitte2000-12-291-1/+1
|
* "make update" plus a rewrite of both .num files.Richard Levitte2000-12-293-114/+93
|
* ASN1_ITEM version of ASN1_dup(). Might wantDr. Stephen Henson2000-12-282-1/+27
| | | | something more efficient later...
* Update VMS build procedures to match the current status.Richard Levitte2000-12-282-19/+23
|
* Add NO_ASN1_OLD to remove some old style functions:Dr. Stephen Henson2000-12-286-78/+47
| | | | | | | | | | currently OpenSSL itself wont compile with this set because some old style stuff remains. Change old functions X509_sign(), X509_verify() etc to use new item based functions. Replace OCSP function declarations with DECLARE macros.
* ASN1_ITEM versions of sign, verify, pack and unpack.Dr. Stephen Henson2000-12-286-1/+194
| | | | | The old function pointer versions will eventually go away.
* New OCSP extension functions.Dr. Stephen Henson2000-12-282-11/+237
|
* Avoid compiler warnings in hw_ubsec.c: unused staticDr. Stephen Henson2000-12-272-2/+11
| | | | | | | functions and signed/unsigned mismatch. This will of course change if some of the unused functions suddenly get used...
* X509V3_add_i2d() needs to be able to allocate aDr. Stephen Henson2000-12-273-10/+11
| | | | | | | STACK_OF(X509_EXTENSION) so it should be passed STACK_OF(X509_EXTENSION) ** in the first argument. Modify wrappers appropriately.
* New function X509V3_add_i2d() this is used forDr. Stephen Henson2000-12-245-1/+119
| | | | | | | encoding, replacing and deleting extensions. Fix X509V3_get_d2i() so it uses takes note of new critical behaviour.
* Various Win32 related fixes. Doesn't compile yet onDr. Stephen Henson2000-12-216-9/+17
| | | | | | | | | | | | | | Win32 but it is getting there... Update mkdef.pl to handle ASN1_ANY and fix headers. Stop various VC++ warnings. Include some fixes from "Peter 'Luna' Runestig" <peter@runestig.com> Remove external declaration for des_set_weak_key_flag: it doesn't exist.
* Don't access non-existing element buf[256], use buf[255] instead.Bodo Möller2000-12-201-1/+1
| | | | Submitted by: draslar <draslar@elray.ch>
* Fixes to OCSP print code.Dr. Stephen Henson2000-12-204-18/+17
| | | | | | | | | | | | | | Don't try to print request certificates if signature is not present. Remove unnecessary test for certificates being NULL. Fix typos in printed output. Tidy up output. Fix for typo in OCSP_SERVICELOC ASN1 template. Also give a bit more info in CHANGES about the ASN1 revision.
* fix indentationBodo Möller2000-12-191-1/+1
|
* Don't hold CRYPTO_LOCK_RSA during time-consuming operations.Bodo Möller2000-12-191-58/+67
|
* Add a comment (intended change)Bodo Möller2000-12-181-1/+1
|
* Comment correction.Bodo Möller2000-12-181-2/+4
|
* Obtain lock CRYPTO_LOCK_RSA before creating BN_MONT_CTXBodo Möller2000-12-181-12/+70
| | | | | | structures and setting rsa->_method_mod_{n,p,q}. Submitted by: "Reddie, Steven" <Steven.Reddie@ca.com>
* Redo OCSP response printing. Remove duplicate orDr. Stephen Henson2000-12-179-942/+178
| | | | obsolete code. Delete some redundant files.
* Simplify preprocessor statements.Bodo Möller2000-12-171-6/+4
|
* Add OCSP service locator extension.Dr. Stephen Henson2000-12-163-6/+38
|
* Do not poll DEVRANDOM if weäre building without an file pointer API.Richard Levitte2000-12-161-0/+6
| | | | Spotted by "David Schwartz" <davids@webmaster.com>.
* Add support for the noCheck OCSP extension. This isDr. Stephen Henson2000-12-165-4/+28
| | | | just a NULL and appears in a certificate.
* Locking issues.Bodo Möller2000-12-154-10/+35
|
* Implement some standard OCSP extensions in the v3 code. TheseDr. Stephen Henson2000-12-155-65/+130
| | | | are all raw print only extensions at present.
* The C version of bn_sub_part_words is needed not onlyBodo Möller2000-12-151-1/+1
| | | | in NO_ASM configurations