- 31 Mar, 2015 4 commits
-
-
Douglas E Engert authored
RFC5915 requires the use of the I2OSP primitive as defined in RFC3447 for storing an EC Private Key. This converts the private key into an OCTETSTRING and retains any leading zeros. This commit ensures that those leading zeros are present if required. Reviewed-by:
Andy Polyakov <appro@openssl.org>
-
Matt Caswell authored
Fix up various things that were missed during the record layer work. All instances where we are breaking the encapsulation rules. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
The "clean" target in libssl has been updated to handle the new record layer sub-directory. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Richard Levitte authored
When building on Unix, there are times when the 'EX_LIB' MINFO variable contains valuable information. Make sure to take care of it. fixrules in util/pl/unix.pl was previously changed with a simpler fix of rules, with a comment claiming that's compatible with -j. Unfortunately, this breaks multiline rules and doesn't change anything for single line rules. While at it, do not prefix pure echo lines with a 'cd $(TEST_D) &&', as that's rather silly. Reviewed-by:
Andy Polyakov <appro@openssl.org>
-
- 30 Mar, 2015 5 commits
-
-
Dr. Stephen Henson authored
Update code to use ASN1_TYPE_pack_sequence and ASN1_TYPE_unpack_sequence instead of performing the same operation manually. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Dr. Stephen Henson authored
Add new functions ASN1_TYPE_pack_sequence and ASN1_TYPE_unpack_sequence: these encode and decode ASN.1 SEQUENCE using an ASN1_TYPE structure. Update ordinals. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
The logic with how 'ok' was calculated didn't quite convey what's "ok", so the logic is slightly redone to make it less confusing. Reviewed-by:
Andy Polyakov <appro@openssl.org>
-
- 29 Mar, 2015 4 commits
-
-
Andy Polyakov authored
Follow-up to sha256-armv4.pl in cooperation with Ard Biesheuvel (Linaro) and Sami Tolvanen (Google). Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Andy Polyakov authored
and eliminate little-endian dependency. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
The FAQ says this: After the release of OpenSSL 1.0.0 the versioning scheme changed. Letter releases (e.g. 1.0.1a) can only contain bug and security fixes and no new features. Minor releases change the last number (e.g. 1.0.2) and can contain new features that retain binary compatibility. Changes to the middle number are considered major releases and neither source nor binary compatibility is guaranteed. With such a scheme (and with the thinking that it's nice if the shared library version stays on track with the OpenSSL version), it's rather futile to keep the minor release number in the shared library version. The deed already done with OpenSSL 1.0.x can't be changed, but with 1.x.y, x=1 and on, 1.x as shared library version is sufficient. Reviewed-by:
Kurt Roeckx <kurt@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:
Matt Caswell <matt@openssl.org>
-
- 28 Mar, 2015 7 commits
-
-
Dr. Stephen Henson authored
Remove partially implemented d2i_X509_PKEY and i2d_X509_PKEY: nothing uses them and they don't work properly. Update ordinals. Reviewed-by:
Kurt Roeckx <kurt@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Rich Salz authored
EVP_.*free; this gets: EVP_CIPHER_CTX_free EVP_PKEY_CTX_free EVP_PKEY_asn1_free EVP_PKEY_asn1_set_free EVP_PKEY_free EVP_PKEY_free_it EVP_PKEY_meth_free; and also EVP_CIPHER_CTX_cleanup Reviewed-by:
Kurt Roeckx <kurt@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Andy Polyakov authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:
Kurt Roeckx <kurt@openssl.org>
-
- 26 Mar, 2015 20 commits
-
-
Dr. Stephen Henson authored
Remove the combine option. This was used for compatibility with some non standard behaviour in ancient versions of OpenSSL: specifically the X509_ATTRIBUTE and DSAPublicKey handling. Since these have now been revised it is no longer needed. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Dr. Stephen Henson authored
DSA public keys could exist in two forms: a single Integer type or a SEQUENCE containing the parameters and public key with a field called "write_params" deciding which form to use. These forms are non standard and were only used by functions containing "DSAPublicKey" in the name. Simplify code to only use the parameter form and encode the public key component directly in the DSA public key method. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Add some design documentation on how the record layer works to aid future maintenance. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Fix some formatting oddities in rec_layer_d1.c. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Fix some strange formatting in record.h. This was probably originally introduced as part of the reformat work. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Replace the hard coded value 8 (the size of the sequence number) with a constant defined in a macro. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
numbers directly Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Also push some usage of last_write_sequence out of dtls1_retransmit_message and into the record layer. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
alert_fragment_len from s->d1 to s->rlayer.d Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Create dtls_bitmap.h and dtls_bitmap.c Reviewed-by:
Richard Levitte <levitte@openssl.org>
-