- 23 Aug, 2017 4 commits
-
-
Dr. Stephen Henson authored
Fix GCM documentation: the tag does not have to be supplied before decrypting any data any more. Reviewed-by:
Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4231)
-
Rich Salz authored
Reviewed-by:
Andy Polyakov <appro@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4234)
-
Kazuki Yamaguchi authored
Fix a typo made in commit 27c6d63d (#4202). Reviewed-by:
Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4235)
-
Rich Salz authored
Don't keep it in the DRBG object, just allocate/free as needed. Reviewed-by:
Paul Dale <paul.dale@oracle.com> (Merged from https://github.com/openssl/openssl/pull/4226)
-
- 22 Aug, 2017 12 commits
-
-
Pauli authored
Movely removal of unnecessary brackets but some could be bugs addressed too. Reviewed-by:
-
Rich Salz authored
Remove GETPID_IS_MEANINGLESS and osslargused. Move socket-related things to new file internal/sockets.h; this is now only needed by four(!!!) files. Compiles should be a bit faster. Remove USE_SOCKETS ifdef's Reviewed-by:
-
Paul Yang authored
Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Rich Salz authored
Use EVP_EncodeBlock/EVP_DecodeBlock Reviewed-by:
-
Richard Levitte authored
Our internal replacement functions return 0 for those values. However, depending on locale, the C RTL functions may return 1. Reviewed-by:
-
Richard Levitte authored
Values that aren't representable as unsigned give undefined results. Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Rich Salz authored
Add -rand_serial to CA command and "serial_rand" config option. Up RAND_BITS to 159, and comment why: now confirms to CABForum guidelines (Ballot 164) as well as IETF RFC 5280 (PKIX). Reviewed-by:
-
Pauli authored
Clang is generating a warning over an assignment of a variable to itself. This occurs on an ASCII based machine where the convert to ASCII macro doesn't do anything. The fix is to introduce a temporary variable. Reviewed-by:
-
Pauli authored
Remove the exit_main function which is never used. Remove the exit_options array which is also unreferenced. Reviewed-by:
-
- 21 Aug, 2017 20 commits
-
-
Pauli authored
return true for characters > 127. I.e. they are allowing extended ASCII characters through which then cause problems. E.g. marking superscript '2' as a number then causes the common (ch - '0') conversion to number to fail miserably. Likewise letters with diacritical marks can also cause problems. If a non-ASCII character set is being used (currently only EBCDIC), it is adjusted for. The implementation uses a single table with a bit for each of the defined classes. These functions accept an int argument and fail for values out of range or for characters outside of the ASCII set. They will work for both signed and unsigned character inputs. Reviewed-by:
-
Pauli authored
Cast arguments to the various ctype functions to unsigned char to match their documentation. Reviewed-by:
-
Rich Salz authored
Thanks to Hubert Kario for pointing this out. Reviewed-by:
-
Paul Yang authored
Reviewed-by:
Ben Kaduk <kaduk@mit.edu> Reviewed-by:
-
Rich Salz authored
Reviewed-by:
-
Johannes Bauer authored
PKEY_CTX setters tests were previously present for HKDF and scrypt; this patch also adds tests for the third currently supported KDF, TLS1-PRF. Reviewed-by:
Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/4196)
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Matt Caswell authored
bss_dgram.c is deferred until later due to ongoing discussions. Reviewed-by:
-
Matt Caswell authored
Reviewed-by:
-
Pauli authored
Reviewed-by:
-
- 19 Aug, 2017 1 commit
-
-
Richard Levitte authored
It used the default UI reader as fallback instead of the UI writer. Fixes #4147 Fixes #4195 Reviewed-by:
Kurt Roeckx <kurt@roeckx.be> (Merged from https://github.com/openssl/openssl/pull/4198)
-
- 18 Aug, 2017 3 commits
-
-
Rich Salz authored
Thanks to Christian Heimes for pointing this out. Reviewed-by:
-
Todd Short authored
Force non-empty padding extension. When enabled, force the padding extension to be at least 1 byte long. WebSphere application server cannot handle having an empty extension (e.g. EMS/EtM) as the last extension in a client hello. This moves the SigAlgs extension last for TLSv1.2 to avoid this issue. Reviewed-by:
-
Balaji Marisetti authored
CLA: trivial Reviewed-by:
-
