Commits · 60938ae772ae3dc21f38e97c524145f6d21bd910 · CYBER - Cyber Security / TS 103 523 MSP / ETS / ETS OpenSSL

12 Dec, 2012 2 commits
- add -crl_download option to s_server · 60938ae7
  Dr. Stephen Henson authored Dec 12, 2012
  
  60938ae7
- add -cert_chain option to s_client · 4e71d952
  Dr. Stephen Henson authored Dec 12, 2012
  
  4e71d952
11 Dec, 2012 2 commits
- Make openssl verify return errors. · fefc111a
  Ben Laurie authored Dec 11, 2012
  
  fefc111a
- Update ignores. · b204ab65
  Ben Laurie authored Dec 11, 2012
  
  b204ab65
10 Dec, 2012 2 commits
- Tabification. Remove accidental duplication. · ec40e5ff
  Ben Laurie authored Dec 10, 2012
  
  ec40e5ff
- revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 instead · b34aa49c
  Dr. Stephen Henson authored Dec 10, 2012
  
  b34aa49c
09 Dec, 2012 2 commits
- add -badsig option to ocsp utility too. · 1e8b9e7e
  Dr. Stephen Henson authored Dec 09, 2012
  
  1e8b9e7e
- allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY mode · d372d365
  Dr. Stephen Henson authored Dec 09, 2012
  
  d372d365
07 Dec, 2012 4 commits
- send out the raw SSL/TLS headers to the msg_callback and display them in SSL_trace · 36b5bb6f
  Dr. Stephen Henson authored Dec 07, 2012
  
  36b5bb6f
- Fix OCSP checking. · 30c278aa
  Ben Laurie authored Dec 07, 2012
  
  30c278aa
- typo · 083bec78
  Dr. Stephen Henson authored Dec 07, 2012
  
  083bec78
- really fix automatic ;-) · 1edf8f1b
  Dr. Stephen Henson authored Dec 07, 2012
  
  1edf8f1b
06 Dec, 2012 5 commits
- documentation fixes · 65f2a565
  Dr. Stephen Henson authored Dec 06, 2012
  
  65f2a565
- fix handling of "automatic" in file mode · f1f5c70a
  Dr. Stephen Henson authored Dec 06, 2012
  
  f1f5c70a
- Add code to download CRLs based on CRLDP extension. · 0090a686
  Dr. Stephen Henson authored Dec 06, 2012
```
Just a sample, real world applications would have to be cleverer.
```
  0090a686
- remove print_ssl_cert_checks() from openssl application: it is no longer used · f5a7d5b1
  Dr. Stephen Henson authored Dec 06, 2012
  
  f5a7d5b1
- Fix two bugs which affect delta CRL handling: · abd2ed01
  Dr. Stephen Henson authored Dec 06, 2012
```
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
```
  abd2ed01
05 Dec, 2012 2 commits
- Integrate host, email and IP address checks into X509_verify. · 3bf15e29
  Dr. Stephen Henson authored Dec 05, 2012
```
Add new verify options to set checks.

Remove previous -check* commands from s_client and s_server.
```
  3bf15e29
- aes-s390x.pl: fix XTS bugs in z196-specific code path. · 8df400cf
  Andy Polyakov authored Dec 05, 2012
  
  8df400cf
04 Dec, 2012 5 commits
- don't print verbose policy check messages when -quiet is selected even on error · fbeb85ec
  Dr. Stephen Henson authored Dec 04, 2012
  
  fbeb85ec
- ghash-sparcv9.pl: shave off one more xmulx, improve T3 performance by 7%. · 3766e7cc
  Andy Polyakov authored Dec 04, 2012
  
  3766e7cc
- initial support for delta CRL generations by diffing two full CRLs · 2e8cb108
  Dr. Stephen Henson authored Dec 04, 2012
  
  2e8cb108
- make -subj always override config file · 256f9573
  Dr. Stephen Henson authored Dec 04, 2012
  
  256f9573
- check mval for NULL too · b6b094fb
  Dr. Stephen Henson authored Dec 04, 2012
  
  b6b094fb
03 Dec, 2012 4 commits
- fix leak · 0db46a7d
  Dr. Stephen Henson authored Dec 03, 2012
  
  0db46a7d
- oops, really check brief mode only ;-) · 2537d469
  Dr. Stephen Henson authored Dec 03, 2012
  
  2537d469
- don't check errno is zero, just print out message · 5447f836
  Dr. Stephen Henson authored Dec 03, 2012
  
  5447f836
- if no error code and -brief selected print out connection closed instead of read error · 66d9f2e5
  Dr. Stephen Henson authored Dec 03, 2012
  
  66d9f2e5
02 Dec, 2012 3 commits
- add -badsig option to corrupt CRL signatures for testing too · 139cd16c
  Dr. Stephen Henson authored Dec 02, 2012
  
  139cd16c
- New option to add CRLs for s_client and s_server. · fdb78f3d
  Dr. Stephen Henson authored Dec 02, 2012
  
  fdb78f3d
- add option to get a certificate or CRL from a URL · 95ea5318
  Dr. Stephen Henson authored Dec 02, 2012
  
  95ea5318
01 Dec, 2012 4 commits
- return error if Suite B mode is selected and TLS 1.2 can't be used. Correct error coded · 4842dde8
  Dr. Stephen Henson authored Dec 01, 2012
  
  4842dde8
- cryptlib.c: fix logical error. · f91926a2
  Andy Polyakov authored Dec 01, 2012
  
  f91926a2
- aesni-x86_64.pl: CTR face lift, +25% on Bulldozer. · 9282c335
  Andy Polyakov authored Dec 01, 2012
  
  9282c335
- aes-s390x.pl: harmonize software-only code path [and minor optimization]. · c3cddeae
  Andy Polyakov authored Dec 01, 2012
  
  c3cddeae
30 Nov, 2012 1 commit
- Add new test option set the version in generated certificates: this · df316fd4
  Dr. Stephen Henson authored Nov 30, 2012
```
is needed to test some profiles/protocols which reject certificates
with unsupported versions.
```
  df316fd4
29 Nov, 2012 3 commits
- PR: 2803 · 2fceff5b
  Dr. Stephen Henson authored Nov 29, 2012
```
Submitted by: jean-etienne.schwartz@bull.net

In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.
```
  2fceff5b
- add wrapper function for certificate download · f4042781
  Dr. Stephen Henson authored Nov 29, 2012
  
  f4042781
- constify · 68f5500d
  Dr. Stephen Henson authored Nov 29, 2012
  
  68f5500d
28 Nov, 2012 1 commit
- Generalise OCSP I/O functions to support dowloading of other ASN1 · 6f9076ff
  Dr. Stephen Henson authored Nov 28, 2012
```
structures using HTTP. Add wrapper function to handle CRL download.
```
  6f9076ff