aboutsummaryrefslogtreecommitdiffstats
path: root/demos
Commit message (Collapse)AuthorAgeFilesLines
* Fix to build better with DJGPP.Richard Levitte2002-11-142-0/+10
| | | | | | | | | | | | | | | | | PR: 338 Here's the description, submitted by Gisle Vanem <giva@bgnett.no>: 1. sock_init() renamed to ssl_sock_init() in ./apps/s_socket.c due to name-clash with Watt-32. 2. rand() renamed to Rand() in ./crypto/bn/divtest.c due to name-clash with <stdlib.h> 3. Added calls to dbug_init()/sock_init() in some demo programs. 4. Changed cflags/lflags in configure. Watt-32 install root now taken from $WATT_ROOT.
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-132-3/+2
|
* Make internal functions static.Richard Levitte2002-11-131-22/+22
|
* Name the flag files correctly.Richard Levitte2002-11-131-2/+2
|
* There's a name clash between OpenSSL and RSAref. Since this engine handlesRichard Levitte2002-10-241-4/+7
| | | | | | RSAref data, pretend we don't care for OpenSSL's MD2 and MD5 structures or implementation. Remove all kinds of silly warning
* Typo: v3 is represented by 2.Dr. Stephen Henson2002-10-211-1/+1
|
* Add a few more target platforms, to see how well the shared libraryRichard Levitte2002-10-101-0/+16
| | | | linking works on them.
* Don't fuss with the demo binariesRichard Levitte2002-10-091-0/+4
|
* add URL for Internet DraftBodo Möller2002-09-161-1/+3
|
* 1. switch from "-newkey ecdsa:..." to "-newkey ec:..."Bodo Möller2002-09-103-20/+22
| | | | | | 2. automatically create required sub-directories Submitted by: Vipul Gupta <Vipul.Gupta@sun.com>
* Some files deserve to be ignoredRichard Levitte2002-08-133-0/+12
|
* Merge in demo engines from 0.9.7-stable.Richard Levitte2002-08-1319-1/+4866
|
* Scripts for testing ECC ciphersuites.Bodo Möller2002-08-125-0/+579
| | | | Submitted by: Sun Microsystems Labs
* Add the CBC flag for cbc ciphersRichard Levitte2002-08-011-3/+3
|
* Allow longer program names (VMS allows up to 39 characters).Richard Levitte2002-04-061-2/+2
| | | | Submitted by Compaq.
* Fix buggy if-condition (thomas poindessous <poinde_t@epita.fr>).Lutz Jänicke2002-03-211-1/+1
|
* '#if OPENSSL_VERSION_NUMBER >= ...' to document the recent changeBodo Möller2002-03-051-2/+7
|
* Add 'void *' argument to app_verify_callback.Bodo Möller2002-02-281-3/+3
| | | | | Submitted by: D. K. Smetters <smetters@parc.xerox.com> Reviewed by: Bodo Moeller
* A rough little self-test for tunala. This runs through all cipher-suite /Geoff Thorpe2002-02-201-0/+107
| | | | SSL/TLS version combinations looking for mishaps.
* Make the "ungunk" logic a little more robust.Geoff Thorpe2002-02-201-5/+5
|
* - Add support for cipher suites that require a temporary RSA key forGeoff Thorpe2002-02-203-7/+32
| | | | | key-agreement. - Tolerate signal interruptions of select().
* Correct for the recent prototype changes.Geoff Thorpe2002-01-172-2/+2
|
* Produce less confusing statistics when "-out_totals" is used.Geoff Thorpe2002-01-161-12/+6
|
* The sample certs had expired, so these are newer ones that should lastGeoff Thorpe2002-01-163-123/+121
| | | | quite a bit longer.
* - Network errors could pollute the buffers because -1 isn't noticed in anGeoff Thorpe2002-01-103-11/+11
| | | | | | | "unsigned int". - Remove redundant processing with machine->ssl is NULL. - Remove compiler warnings about uninitialised 'ctx' (it's not used uninitialised, but gcc can't see that).
* - libtool finally annoyed me too much, so I'm nuking it,Geoff Thorpe2002-01-084-35/+28
| | | | | | - tidy up some output, - print a warning when running an SSL server with no cert, - only log each connect/disconnect if the new "-out_conns" switch is used.
* Constify.Geoff Thorpe2002-01-041-1/+1
|
* Build dynamic rsaref engine on VMS. Tested on VAX so far.Richard Levitte2001-11-161-0/+85
|
* make updateRichard Levitte2001-11-152-0/+6
|
* Add MD digests.Richard Levitte2001-11-151-7/+138
| | | | | And this finishes this engine, it now offers all ciphers and digests that RSAref 2.0 has.
* Add DES functions.Richard Levitte2001-11-151-6/+224
| | | | | Restructure the code and comment it a bit. Prepare for the presence of digests.
* Use the generated error code files.Richard Levitte2001-11-151-91/+5
|
* 'make update' + some touches.Richard Levitte2001-11-152-0/+264
|
* Add targets to update the error code files.Richard Levitte2001-11-151-1/+30
|
* Add a local error code configuration file for the rsaref dynamicRichard Levitte2001-11-151-0/+8
| | | | engine.
* Make use of RSAref's header files instead of EAY's crafted rsaref.h.Richard Levitte2001-11-142-206/+24
|
* In a Debian Linux environment, it's not a good idea, apparently, toRichard Levitte2001-11-141-1/+1
| | | | | | | manually declare the include directory /usr/include at the same time as the macro PROTOTYPES is defined with the value 1. Besides, /usr/include is the standard include directory anyway, so there's no need to specify it explicitely.
* Add a demo that reimplements the RSAref glue in form of a dynamicallyRichard Levitte2001-11-145-0/+725
| | | | loadable engine.
* Modify EVP cipher behaviour in a similar wayDr. Stephen Henson2001-10-172-5/+5
| | | | to digests to retain compatibility.
* Modernise and fix (ancient) "maurice" demos.Dr. Stephen Henson2001-09-282-8/+3
|
* Make (ancient) sign.c demo compile again.Dr. Stephen Henson2001-09-281-2/+2
|
* ignore binaryBodo Möller2001-09-241-0/+1
|
* avoid everything resembling a magic trigraphBodo Möller2001-09-242-4/+4
|
* Change Makefile so that it works without any additional changesBodo Möller2001-09-182-5/+6
| | | | at least on Solaris
* Another demo.Bodo Möller2001-09-178-0/+1783
|
* Add certificate and request demos.Dr. Stephen Henson2001-09-123-0/+328
| | | | Fix X509V3 macro so they compile.
* - New INSTALL document describing different ways to build "tunala" andGeoff Thorpe2001-07-2311-44/+354
| | | | | | | | | | | | | | | possible problems. - New file breakage.c handles (so far) missing functions. - Get rid of some signed/unsigned/const warnings thanks to solaris-cc - Add autoconf/automake input files, and helper scripts to populate missing (but auto-generated) files. This change adds a configure.in and Makefile.am to build everything using autoconf, automake, and libtool - and adds "gunk" scripts to generate the various files those things need (and clean then up again after). This means that "autogunk.sh" needs to be run first on a system with the autotools, but the resulting directory should be "configure"able and compilable on systems without those tools.
* Make all configuration macros available for application by makingRichard Levitte2001-02-191-3/+3
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* Re-order a couple of static functions and "#if 0" out unused ones - thisGeoff Thorpe2001-02-121-14/+16
| | | | gets rid of gcc warnings.
* This change was a quick experiment that I'd wanted to try that works quiteGeoff Thorpe2001-02-121-7/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | well (and is a good demonstration of how encapsulating the SSL in a memory-based state machine can make it easier to apply to different situations). The change implements a new command-line switch "-flipped <0|1>" which, if set to 1, reverses the usual interpretation of a client and server for SSL tunneling. Normally, an ssl client (ie. "-server 0") accepts "cleartext" connections and conducts SSL/TLS over a proxied connection acting as an SSL client. Likewise, an ssl server (ie. "-server 1") accepts connections and conducts SSL/TLS (as an SSL server) over them and passes "cleartext" over the proxied connection. With "-flipped 1", an SSL client (specified with "-server 0") in fact accepts SSL connections and proxies clear, whereas an SSL server ("-server 1") accepts clear and proxies SSL. NB: most of this diff is command-line handling, the actual meat of the change is simply the line or two that plugs "clean" and "dirty" file descriptors into the item that holds the state-machine - reverse them and you get the desired behaviour. This allows a network server to be an SSL client, and a network client to be an SSL server. Apart from curiosity value, there's a couple of possibly interesting applications - SSL/TLS is inherently vulnerable to trivial DoS attacks, because the SSL server usually has to perform a private key operation first, even if the client is authenticated. With this scenario, the network client is the SSL server and performs the first private key operation, whereas the network server serves as the SSL client. Another possible application is when client-only authentication is required (ie. the underlying protocol handles (or doesn't care about) authenticating the server). Eg. an SSL/TLS version of 'ssh' could be concocted where the client's signed certificate is used to validate login to a server system - whether or not the client needs to validate who the server is can be configured at the client end rather than at the server end (ie. a complete inversion of what happens in normal SSL/TLS). NB: This is just an experiment/play-thing, using "-flipped 1" probably creates something that is interoperable with exactly nothing. :-)
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-11 20:50:08 +0000