Richard Levitte
f9b3bff6f7
First tentative impementation of Kerberos 5 cryptos and keys for SSL/TLS. Implemented by Vern Staats <staatsvr@asc.hpc.mil>, further hacked and distributed by Jeffrey Altman <jaltnab@columbia.edu>
2000-11-30 22:53:34 +00:00
Bodo Möller
53d286797c
avoid segmentation fault
2000-11-29 11:04:31 +00:00
Richard Levitte
d53d271728
Addapt the VMS scripts to the changes in the Makefiles.
2000-11-22 18:17:16 +00:00
Ben Laurie
646d56956b
Better handling of EVP names, add EVP to speed.
2000-11-20 04:14:19 +00:00
Bodo Möller
db70a3fd6e
Improve usability of 'openssl passwd' by including
...
password verification where it makes sense.
2000-11-17 09:03:02 +00:00
Ulf Möller
6a8ba34f9d
in some new file names the first 8 characters were not unique
2000-11-12 22:32:18 +00:00
Ben Laurie
757e392d4e
Make Rijndael work! Those long flights have some good points.
2000-11-12 02:13:38 +00:00
Richard Levitte
ccb9643f02
Remove references to RSAref. The glue library is but a memory to fade
...
away now...
2000-11-08 17:51:37 +00:00
Richard Levitte
5e4ca4220e
The consequence of constification is that to pass the address to a
...
pointer to a const double pointe parameter, the pointer must point to
const data as well.
2000-11-06 23:16:04 +00:00
Richard Levitte
e7ef1a561a
Make all engines available in the openssl application.
2000-11-06 22:03:00 +00:00
Richard Levitte
11c0f1201c
Change the engine library so the application writer has to explicitely
...
load the "external" built-in engines (those that require DSO). This
makes linking with libdl or other dso libraries non-mandatory.
Change 'openssl engine' accordingly.
Change the engine header files so some declarations (that differed at
that!) aren't duplicated, and make sure engine_int.h includes
engine.h. That way, there should be no way of missing the needed
info.
2000-11-02 20:33:04 +00:00
Richard Levitte
69e7805f54
'openssl engine' can now list engine capabilities. The current
...
implementation is contained in the application, and the capability
string building part should really be part of the engine library.
This is therefore an experimental hack, and will be changed in the
near future.
2000-11-02 19:24:48 +00:00
Richard Levitte
e264cfe17a
Better error reporting in 'openssl engine'
2000-11-02 18:58:43 +00:00
Richard Levitte
8224b0cbe5
make update
2000-11-02 18:53:25 +00:00
Bodo Möller
15d52ddb55
Never call load_dh_param(NULL) because this leads to an illegal
...
fopen(NULL).
2000-11-02 10:35:10 +00:00
Richard Levitte
d48f487e2c
-t is supported, so display some help about it.
2000-11-01 23:55:45 +00:00
Richard Levitte
14c6d27d63
Add application to enumerate, list and test engines with.
2000-11-01 02:57:35 +00:00
Richard Levitte
92125ffaec
Make flag variables int instead of char. This avoids getting into trouble on systems where char is unsigned by default
2000-10-31 11:58:56 +00:00
Richard Levitte
32d862ede4
Add the possibility to use keys handled by engines in more
...
applications.
2000-10-28 22:40:40 +00:00
Richard Levitte
a44f26d5c9
Small documentation change
2000-10-28 22:21:04 +00:00
Richard Levitte
5660eb489e
NetBSD doesn't use ftime().
2000-10-27 20:28:37 +00:00
Richard Levitte
eb64730b9c
The majority of the OCSP code from CertCo.
2000-10-27 11:05:35 +00:00
Richard Levitte
5270e7025e
Merge the engine branch into the main trunk. All conflicts resolved.
...
At the same time, add VMS support for Rijndael.
2000-10-26 21:07:28 +00:00
Bodo Möller
28967cf079
rsautl.c requires RSA.
2000-10-26 12:05:57 +00:00
Bodo Möller
4fb40db932
Don't ever set 'seeded' if RAND_status() returned 0
...
(although maybe this static variable should be abolished totally,
it was introduced before RAND_status existed).
2000-10-23 07:37:03 +00:00
Richard Levitte
2b59a6ac14
There's no reason why app_RAND_load_file() should return 0 when
...
RAND_status() hasn't.
Reported by Dale Stimson <dale@accentre.com>.
2000-10-21 22:43:07 +00:00
Dr. Stephen Henson
51754ec835
Update test server certificate in apps/server.pem (it was expired).
2000-10-16 22:56:10 +00:00
Richard Levitte
3ab5651112
The experimental Rijndael code moved to the main trunk.
...
make update done.
2000-10-14 20:09:54 +00:00
Dr. Stephen Henson
8ca533e378
More code for X509_print_ex() support.
2000-10-06 11:51:47 +00:00
Dr. Stephen Henson
d0c9858914
Global DirectoryString mask fix.
...
Add support for X509_NAME_print_ex() in req.
Initial code for cutomizable X509 print routines.
2000-10-04 01:16:32 +00:00
Richard Levitte
1cbb729fdc
Oops, if the target only had USE_TOD, an error message was issued...
2000-09-21 16:01:08 +00:00
Richard Levitte
c5f8bbbc0b
Portability patch for HP MPE/iX. Submitted by Mark Bixby <mark_bixby@hp.com>
2000-09-21 05:42:01 +00:00
Richard Levitte
edb0d64367
AIX doesn't like ftime() either.
2000-09-20 15:10:16 +00:00
Richard Levitte
645749ef98
On VMS, stdout may very well lead to a file that is written to in a
...
record-oriented fashion. That means that every write() will write a
separate record, which will be read separately by the programs trying
to read from it. This can be very confusing.
The solution is to put a BIO filter in the way that will buffer text
until a linefeed is reached, and then write everything a line at a
time, so every record written will be an actual line, not chunks of
lines and not (usually doesn't happen, but I've seen it once) several
lines in one record. Voila, BIO_f_linebuffer() is born.
Since we're so close to release time, I'm making this VMS-only for
now, just to make sure no code is needlessly broken by this. After
the release, this BIO method will be enabled on all other platforms as
well.
2000-09-20 13:55:50 +00:00
Richard Levitte
b004872c59
BSDI only supports ftime() through libcompat, which means it's
...
better not to use it.
2000-09-19 23:14:42 +00:00
Dr. Stephen Henson
688fbf5475
Fix a typo in apps/pkcs12.c which was using the wrong part of
...
ASN1_TYPE (though they are both ASN1_STRING so it didn't cause
any problems).
Make 'siglen' an int in apps/dgst.c so we can check the return
value of BIO_read() etc.
2000-09-19 17:51:11 +00:00
Richard Levitte
28178bcf24
FreeBSD only supports ftime() through libcompat, which means it's
...
better not to use it.
2000-09-19 16:13:38 +00:00
Richard Levitte
a3829b8650
ftime() is not supported on SGI.
...
Reported by Steve Robb <steve@eu.c2.net>
2000-09-18 16:52:05 +00:00
Richard Levitte
62324627aa
Use sk_*_new_null() instead of sk_*_new(NULL), since that takes care
...
of complaints from the compiler about data pointers and function
pointers not being compatible with each other.
2000-09-17 18:21:27 +00:00
Richard Levitte
623eea376a
siglen is unsigned, so comparing it to less than 0 is silly, and
...
generates a compiler warning with Compaq C.
2000-09-17 18:08:38 +00:00
Richard Levitte
1c86d93ca5
'make update'
2000-09-15 22:13:38 +00:00
Richard Levitte
095aadc43f
Move up inclusion of conf.h, so non-MONOLITH programs can benefit from
...
it as well, especially in apps.c.
2000-09-15 19:37:14 +00:00
Richard Levitte
5614bb91f5
rsa_num2 is no longer used, so remove it.
2000-09-14 11:09:03 +00:00
Richard Levitte
03ea28c985
Better error checking for RSA and DSA signature and verification speed
...
tests. This was required to not get mysterious errors when they
wouldn't quite want to work.
2000-09-12 08:12:52 +00:00
Richard Levitte
05c2b37176
DSA_verify() and DSA_sign() might return -1...
2000-09-11 22:21:38 +00:00
Richard Levitte
16e91fe8ab
OpenBSD doesn't support timeb.
2000-09-11 16:46:35 +00:00
Richard Levitte
ec6a40e278
Last minute update, in time to make it to 0.9.6-beta1
2000-09-11 13:06:48 +00:00
Richard Levitte
97d8e82c4c
Marin Kraemer <Martin.Kraemer@MchP.Siemens.De> sent us patches to make
...
the OpenSSL commands x50 and req work better on a EBCDIC system.
2000-09-10 14:45:19 +00:00
Richard Levitte
0baed24c1b
More VMS synchronisation
2000-09-09 18:05:27 +00:00
Richard Levitte
eec79f9bab
Synchronise the VMS build with the Unix one.
2000-09-08 20:25:49 +00:00