aboutsummaryrefslogtreecommitdiffstats
path: root/ssl/ssl_cert.c
Commit message (Collapse)AuthorAgeFilesLines
* e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte2001-02-221-1/+1
| | | | | | | | and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
* Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte2001-02-201-15/+14
| | | | | | | missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
* Locking issues.Bodo Möller2000-12-151-9/+19
|
* mark a bugBodo Möller2000-11-291-0/+1
|
* include 'err' label only when it is actually usedBodo Möller2000-11-171-0/+2
|
* Use sk_*_new_null() instead of sk_*_new(NULL), since that takes careRichard Levitte2000-09-171-1/+1
| | | | | of complaints from the compiler about data pointers and function pointers not being compatible with each other.
* There have been a number of complaints from a number of sources that namesRichard Levitte2000-06-011-5/+5
| | | | | | | | | like Malloc, Realloc and especially Free conflict with already existing names on some operating systems or other packages. That is reason enough to change the names of the OpenSSL memory allocation macros to something that has a better chance of being unique, like prepending them with OPENSSL_. This change includes all the name changes needed throughout all C files.
* The previous commit to crypto/stack/*.[ch] pulled the type-safety stringsGeoff Thorpe2000-06-011-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | yet tighter, and also put some heat on the rest of the library by insisting (correctly) that compare callbacks used in stacks are prototyped with "const" parameters. This has led to a depth-first explosion of compiler warnings in the code where 1 constification has led to 3 or 4 more. Fortunately these have all been resolved to completion and the code seems cleaner as a result - in particular many of the _cmp() functions should have been prototyped with "const"s, and now are. There was one little problem however; X509_cmp() should by rights compare "const X509 *" pointers, and it is now declared as such. However, it's internal workings can involve recalculating hash values and extensions if they have not already been setup. Someone with a more intricate understanding of the flow control of X509 might be able to tighten this up, but for now - this seemed the obvious place to stop the "depth-first" constification of the code by using an evil cast (they have migrated all the way here from safestack.h). Fortunately, this is the only place in the code where this was required to complete these type-safety changes, and it's reasonably clear and commented, and seemed the least unacceptable of the options. Trying to take the constification further ends up exploding out considerably, and indeed leads directly into generalised ASN functions which are not likely to cooperate well with this.
* Avoid sprintf, and harmonize indentation.Bodo Möller2000-05-211-73/+76
|
* Use correct function names in SSLerr macros.Bodo Möller2000-03-141-3/+3
|
* Copy DH key (if available) in addition to the bare parametersBodo Möller2000-03-131-4/+21
| | | | | | | | | | | | | in SSL_new. If SSL_OP_SINGLE_DH_USE is set, don't waste time in SSL_[CTX_]set_tmp_dh on computing a DH key that will be ignored anyway. ssltest -dhe1024dsa (w/ 160-bit sub-prime) had an unfair performance advantage over -dhe1024 (safe prime): SSL_OP_SINGLE_DH_USE was effectively always enabled because SSL_new ignored the DH key set in the SSL_CTX. Now -dhe1024 takes the server only about twice as long as -dhe1024dsa instead of three times as long (for 1024 bit RSA with 1024 bit DH).
* Tidy up CRYPTO_EX_DATA structures.Dr. Stephen Henson2000-01-231-2/+1
|
* Remainder of SSL purpose and trust code: trust and purpose setting inDr. Stephen Henson1999-11-291-3/+13
| | | | SSL_CTX and SSL, functions to set them and defaults if no values set.
* Initial support for MacOS.Andy Polyakov1999-09-111-2/+12
| | | | | | | | | | | | | | This will soon be complemented with MacOS specific source code files and INSTALL.MacOS. I (Andy) have decided to get rid of a number of #include <sys/types.h>. I've verified it's ok (both by examining /usr/include/*.h and compiling) on a number of Unix platforms. Unfortunately I don't have Windows box to verify this on. I really appreciate if somebody could try to compile it and contact me a.s.a.p. in case a problem occurs. Submitted by: Roy Wood <roy@centricsystems.ca> Reviewed by: Andy Polyakov <appro@fy.chalmers.se>
* Comments.Bodo Möller1999-08-081-1/+1
|
* correct error signalling for opendir() failureBodo Möller1999-07-301-1/+3
|
* Additional user data argument to pem_password_cb function typeBodo Möller1999-07-211-2/+2
| | | | | and to lots of PEM_... functions. Submitted by: Damien Miller <dmiller@ilogic.com.au>
* More safe stack.Ben Laurie1999-05-301-7/+7
|
* NeXT doesn't have dirent.Ulf Möller1999-05-201-2/+4
| | | | Pointed out by Juergen Moellenhoff <jurgen@oic.de>
* Various bugfixes: Uses locking for some more of the stuff that is notBodo Möller1999-05-141-5/+12
| | | | | | | | | thread-safe (where thread-safe counterparts are not available on all platforms), and don't memcpy to NULL-pointers Submitted by: Anonymous Reviewed by: Bodo Moeller Also, clean up htons vs. ntohs confusions.
* Some tiny clean-ups related to the cert_st / sess_cert_st change.Bodo Möller1999-05-131-15/+0
|
* New structure type SESS_CERT used instead of CERT inside SSL_SESSION.Bodo Möller1999-05-131-21/+62
| | | | | | | While modifying the sources, I found some inconsistencies on the use of s->cert vs. s->session->sess_cert; I don't know if those could really have caused problems, but possibly this is a proper bug-fix and not just a clean-up.
* VMS support.Ulf Möller1999-05-131-0/+4
| | | | Submitted by: Richard Levitte <richard@levitte.org>
* Changed a comment.Bodo Möller1999-05-101-2/+6
| | | | | | Submitted by: Reviewed by: PR:
* Create a duplicate of the SSL_CTX's CERT in SSL_new instead of copyingBodo Möller1999-05-091-0/+201
| | | | | | | pointers. The cert_st handling is changed by this in various ways. Submitted by: Reviewed by: PR:
* Various Win32 fixes. Win95 doesn't support MoveFileEx() (which was used for aDr. Stephen Henson1999-05-081-1/+1
| | | | | | Win32 version of rename() ). There isn't a precise rename() equivalent under Win95: the standard rename() complains if the destination already exists so replaced with a combination of unlink() and MoveFile().
* Some more stack stuff.Ben Laurie1999-05-031-6/+8
|
* Support verify_depth from the SSL API without need for user-definedBodo Möller1999-05-011-0/+2
| | | | | | | | callbacks. Submitted by: Reviewed by: PR:
* Change #include filenames from <foo.h> to <openssl.h>.Bodo Möller1999-04-231-3/+3
| | | | | | Submitted by: Reviewed by: PR:
* Change functions to ANSI C.Ulf Möller1999-04-191-4/+3
|
* Add type-safe STACKs and SETs.Ben Laurie1999-04-121-22/+23
|
* function names recently changed - consistency.Ralf S. Engelschall1999-03-221-1/+1
|
* Fix names of cert stack functions.Ben Laurie1999-03-061-6/+6
|
* Fix the Win32 compile environment and add various changes so it will now compileDr. Stephen Henson1999-03-031-1/+7
| | | | | under Win32 (9X and NT) again. Note: some signed/unsigned changes recently checked in were killing the Win32 compile.
* Add functions to add certs to stacks, used for CA file/path stuff in servers.Ben Laurie1999-02-281-37/+123
|
* Ops, the logic of the second argument has to be coupled with the != test toRalf S. Engelschall1999-02-261-1/+1
| | | | | work correctly for the SSL_CTX_xxx situations, too. Now "make test" passes again fine.
* Add a bunch of SSL_xxx() functions for configuring the temporary RSA and DHRalf S. Engelschall1999-02-251-0/+21
| | | | | | | | | | | | | | | | | | | | | | private keys and/or callback functions which directly correspond to their SSL_CTX_xxx() counterparts but work on a per-connection basis. This is needed for applications which have to configure certificates on a per-connection basis (e.g. Apache+mod_ssl) instead of a per-context basis (e.g. s_server). For the RSA certificate situation is makes no difference, but for the DSA certificate situation this fixes the "no shared cipher" problem where the OpenSSL cipher selection procedure failed because the temporary keys were not overtaken from the context and the API provided no way to reconfigure them. The new functions now let applications reconfigure the stuff and they are in detail: SSL_need_tmp_RSA, SSL_set_tmp_rsa, SSL_set_tmp_dh, SSL_set_tmp_rsa_callback and SSL_set_tmp_dh_callback. Additionally a new non-public-API function ssl_cert_instantiate() is used as a helper function and also to reduce code redundancy inside ssl_rsa.c. Submitted by: Ralf S. Engelschall Reviewed by: Ben Laurie
* Accept NULL in *_free.Ben Laurie1999-01-071-0/+3
|
* Various cleanups and fixed by Marc and Ralf to start the OpenTLS projectRalf S. Engelschall1998-12-221-1/+1
|
* Import of old SSLeay release: SSLeay 0.9.1b (unreleased)Ralf S. Engelschall1998-12-211-2/+23
|
* Import of old SSLeay release: SSLeay 0.9.0bRalf S. Engelschall1998-12-211-8/+11
|
* Import of old SSLeay release: SSLeay 0.8.1bRalf S. Engelschall1998-12-211-0/+326
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-27 01:00:32 +0000