summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Make all configuration macros available for application by makingRichard Levitte2001-02-19275-4476/+4774
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* Remove temporary files when done.Richard Levitte2001-02-191-1/+1
|
* make updateRichard Levitte2001-02-194-90/+212
|
* An obvious but hard-to-see cut'n'paste error corrected.Richard Levitte2001-02-191-2/+1
|
* New -set_serial options to 'req' and 'x509'.Dr. Stephen Henson2001-02-195-37/+86
| | | | | | | | Remove the old broken bio read of serial numbers in the 'ca' index file. This would choke if a revoked certificate was specified with a negative serial number. Fix typo in uid.c
* Do not insert things in syms{} and kind{} when parsing the headerRichard Levitte2001-02-191-86/+70
| | | | | files. Instead, insert proper information in the $def string, which will be properly munged later on.
* Make the choice of "makedepend" program choosable through a switch.Richard Levitte2001-02-191-2/+5
|
* VMS follows suit.Richard Levitte2001-02-191-1/+1
|
* Memory leak detection bugfixes for multi-threading.Bodo Möller2001-02-192-36/+65
|
* Add uid.{c,o}Bodo Möller2001-02-191-2/+2
|
* Perl code patch contributed by "Kurt J. Pires" <kjpires@iat.com>Richard Levitte2001-02-196-32/+60
| | | | | | | | | His own words are: The patch adds no new functionality (other than a simple test package) to the libraries, but it allows them to be compiled with Perl5.6.0. It has only been tested under "Red Hat Linux release 7.0 (Guinness)" with the unpatched verion of OpenSSL 0.9.6 released last September.
* Make it possible to use gcc to generate the dependency tables.Richard Levitte2001-02-162-4/+18
|
* ispellUlf Möller2001-02-1612-20/+20
|
* pod format errorUlf Möller2001-02-161-0/+1
|
* New options to 'ca' utility to support CRL entry extensions.Dr. Stephen Henson2001-02-1612-31/+415
| | | | | | | | Add revelant new X509V3 extensions. Add OIDs. Fix ASN1 memory leak code to pop info if external allocation used.
* Move entry to match chronologic orderering.Lutz Jänicke2001-02-151-3/+3
|
* Don't forget to mention minor change.Lutz Jänicke2001-02-151-0/+3
|
* Add "-rand" option to s_client and s_server.Lutz Jänicke2001-02-154-2/+48
|
* That was misleading. The problem won't happen with 0.9.6a anyway.Ulf Möller2001-02-141-5/+3
|
* Include the newly reported problem with bc on FreeBSD 4.2.Richard Levitte2001-02-141-8/+11
|
* Option to disable standard block padding with EVP API.Dr. Stephen Henson2001-02-147-29/+109
| | | | | | Add -nopad option to enc command. Update docs.
* New function OPENSSL_issetugid(). Needs more work.Ulf Möller2001-02-143-10/+104
|
* Initial OCSP SSL support.Dr. Stephen Henson2001-02-142-3/+17
|
* IRIX bugfixUlf Möller2001-02-142-2/+12
|
* Finish first round of session cache documentation.Lutz Jänicke2001-02-136-9/+126
|
* Update of linux-ppc. Contributed by MATSUURA TakanoriRichard Levitte2001-02-131-1/+2
| | | | <t-matsuu@protein.osaka-u.ac.jp>
* New manual page: SSL_CTX_set_mode.Lutz Jänicke2001-02-134-2/+89
|
* New function OCSP_parse_url() and -url option for ocsp utility.Dr. Stephen Henson2001-02-135-2/+137
| | | | Doesn't handle SSL URLs yet.
* Modify OCSP nonce behaviour.Dr. Stephen Henson2001-02-125-100/+93
|
* Work around for libsafe "error".Dr. Stephen Henson2001-02-122-12/+8
|
* Re-order a couple of static functions and "#if 0" out unused ones - thisGeoff Thorpe2001-02-121-14/+16
| | | | gets rid of gcc warnings.
* This change was a quick experiment that I'd wanted to try that works quiteGeoff Thorpe2001-02-121-7/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | well (and is a good demonstration of how encapsulating the SSL in a memory-based state machine can make it easier to apply to different situations). The change implements a new command-line switch "-flipped <0|1>" which, if set to 1, reverses the usual interpretation of a client and server for SSL tunneling. Normally, an ssl client (ie. "-server 0") accepts "cleartext" connections and conducts SSL/TLS over a proxied connection acting as an SSL client. Likewise, an ssl server (ie. "-server 1") accepts connections and conducts SSL/TLS (as an SSL server) over them and passes "cleartext" over the proxied connection. With "-flipped 1", an SSL client (specified with "-server 0") in fact accepts SSL connections and proxies clear, whereas an SSL server ("-server 1") accepts clear and proxies SSL. NB: most of this diff is command-line handling, the actual meat of the change is simply the line or two that plugs "clean" and "dirty" file descriptors into the item that holds the state-machine - reverse them and you get the desired behaviour. This allows a network server to be an SSL client, and a network client to be an SSL server. Apart from curiosity value, there's a couple of possibly interesting applications - SSL/TLS is inherently vulnerable to trivial DoS attacks, because the SSL server usually has to perform a private key operation first, even if the client is authenticated. With this scenario, the network client is the SSL server and performs the first private key operation, whereas the network server serves as the SSL client. Another possible application is when client-only authentication is required (ie. the underlying protocol handles (or doesn't care about) authenticating the server). Eg. an SSL/TLS version of 'ssh' could be concocted where the client's signed certificate is used to validate login to a server system - whether or not the client needs to validate who the server is can be configured at the client end rather than at the server end (ie. a complete inversion of what happens in normal SSL/TLS). NB: This is just an experiment/play-thing, using "-flipped 1" probably creates something that is interoperable with exactly nothing. :-)
* More about session caching.Lutz Jänicke2001-02-114-0/+79
|
* Include information that automatic query is a new feature.Lutz Jänicke2001-02-101-2/+5
|
* Update for 0.9.7 with SSL_OP_CIPHER_SERVER_PREFERENCE.Lutz Jänicke2001-02-101-0/+10
|
* Manual page for SSL_CTX_set_options(). Unfortunately for some of theLutz Jänicke2001-02-105-1/+221
| | | | options someone much longer working with OpenSSL/SSLeay is needed.
* Oops: It's RegTP, not RegPT ...Bodo Möller2001-02-103-0/+0
|
* Add German SiG root certificates (extracted from the official cert registryBodo Möller2001-02-103-0/+57
| | | | | file http://www.nrca-ds.de/ftp/pkd.ttp, which contains a total of 288 certificates issued by the RegPT so far)
* disable stdin buffering in load_certBodo Möller2001-02-102-0/+8
|
* use case-insensitive comparison in set_table_optsBodo Möller2001-02-101-1/+1
| | | | | (similar to how arguments such as -inform/-outform specifications are treated)
* Fix CRL printing to correctly show when there are no revoked certificates.Dr. Stephen Henson2001-02-105-5/+11
| | | | | | | Make ca.c correctly initialize the revocation date. Make ASN1_UTCTIME_set_string() and ASN1_GENERALIZEDTIME_set_string() set the string type: so they can initialize ASN1_TIME structures properly.
* Simplify BN_rand_rangeBodo Möller2001-02-105-13/+8
|
* New Option SSL_OP_CIPHER_SERVER_PREFERENCE allows TLS/SSLv3 server to overrideLutz Jänicke2001-02-099-28/+102
| | | | the clients choice; in SSLv2 the client uses the server's preferences.
* TypoLutz Jänicke2001-02-091-1/+1
|
* Fix "wierd" typo as submitted by Jeroen Ruigrok/Asmodai <asmodai@wxs.nl>.Lutz Jänicke2001-02-092-2/+2
|
* Various Win32 related fixed. Make no-krb5 work in mkdef.pl .Dr. Stephen Henson2001-02-095-15/+8
| | | | | | | | Fix warning in apps/engine.c Remove definitions of deleted functions. Add missing definition of X509_VAL.
* Various updates to mkdef.pl to cope with new aesDr. Stephen Henson2001-02-092-7/+44
| | | | and ASN1 code.
* fix editing errorBodo Möller2001-02-091-1/+1
|
* add linux-s390 configuration (based on information submitted byBodo Möller2001-02-092-1/+3
| | | | Denis Beauchemin <Denis.Beauchemin@Courrier.USherb.ca>)
* Add missing \n's to ocsp usage message.Dr. Stephen Henson2001-02-091-9/+9
|
View Lorry Controller Status