- Jun 20, 2016
-
-
Richard Levitte authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> Reviewed-by:
Stephen Henson <steve@openssl.org>
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
While travelling up the certificate chain, the internal proxy_path_length must be updated with the pCPathLengthConstraint value, or verification will not work properly. This corresponds to RFC 3820, 4.1.4 (a). Reviewed-by:
-
Richard Levitte authored
The subject name MUST be the same as the issuer name, with a single CN entry added. RT#1852 Reviewed-by:
-
Dr. Matthias St. Pierre authored
Reviewed-by:Andy Polyakov <appro@openssl.org>
-
Richard Levitte authored
Reviewed-by: -
Kurt Cancemi authored
Reviewed-by:
Matt Caswell <matt@openssl.org> Reviewed-by:
-
Kurt Cancemi authored
Reviewed-by:
-
huangqinjin authored
Reviewed-by:
-
Kurt Cancemi authored
Reviewed-by:
-
Jiri Horky authored
Reviewed-by:Richard Levitte <levitte@openssl.org>
-
Emilia Kasper authored
Reorder arguments to follow convention. Also allow r/s to be NULL in DSA_SIG_get0, similarly to ECDSA_SIG_get0. This complements GH1193 which adds non-const setters. Reviewed-by: -
Andy Polyakov authored
Reviewed-by: -
Rob Percival authored
Reviewed-by:
-
Rob Percival authored
This encompasses what was previously tested. Reviewed-by:
-
Andy Polyakov authored
Reviewed-by: -
Andy Polyakov authored
RT#4578 Reviewed-by: -
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
The previous change for Windows wasn't quite right. Corrected to use %HOME%, %USERPROFILE% and %SYSTEMPROFILE%, in that order. Also adding the default home for VMS, SYS$LOGIN: Reviewed-by:
-
- Jun 18, 2016
-
-
FdaSilvaYY authored
Reviewed-by:
Kurt Roeckx <kurt@openssl.org> Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
Matt Caswell authored
Better than losing the const qualifier. RT4378 Reviewed-by: -
Matt Caswell authored
Update e_os2.h so that inttypes.h is included. RT4378 Reviewed-by: -
Matt Caswell authored
Changing the type of the |str| variable in asn1pars enables us to remove 4 casts with just 1. This silences an OpenBSD warning along the way. RT4378 Reviewed-by: -
Matt Caswell authored
EVP_MDs are always const, so stacks of them should be too. This silences a warning about type punning on OpenBSD. RT4378 Reviewed-by: -
Matt Caswell authored
Add const qualifiers to lots of SRP stuff. This started out as an effort to silence some "type-punning" warnings on OpenBSD...but the fix was to have proper const correctness in SRP. RT4378 Reviewed-by: -
Matt Caswell authored
RT4378 Reviewed-by:
-
- Jun 17, 2016
-
-
Matt Caswell authored
Previously we would try %RANDFILE%, then %HOME% and finally "C:". Unfortunately this often ends up being "C:" which the user may not have write permission for. Now we try %RANDFILE% first, and then the same set of environment vars as GetTempFile() uses, i.e. %TMP%, then %TEMP%, %USERPROFILE% and %SYSTEMROOT%. If all else fails we fall back to %HOME% and only then "C:". Reviewed-by: -
Richard Levitte authored
- User targets are now the same and generally do the same things - configdata.pm depends on exactly the same files on all platforms - VMS production of shared libraries is simplified - VMS automatic dependency files get the extension .D rather than .MMS Reviewed-by:
-
- Jun 16, 2016
-
-
Rich Salz authored
Reviewed-by: -
FdaSilvaYY authored
Reviewed-by:
-
Matt Caswell authored
mkdef.pl was failing to understand no-ripemd. This is a deprecated option which should act as an alias for no-rmd160. Reviewed-by: -
Rich Salz authored
Aggregate local initializers are rarely portable (: Reviewed-by: -
Nathaniel McCallum authored
Before the addition of this function, it was impossible to read the symmetric key from an EVP_PKEY_HMAC type EVP_PKEY. Reviewed-by:
Emilia Käsper <emilia@openssl.org> Reviewed-by:
-
Matt Caswell authored
This reverts commit 9c1a9ccf . TerminateProcess is asynchronous, so the code as written in the above commit is not correct. It is also probably not needed in the speed case. Reverting in order to figure out the correct solution. Reviewed-by:
-
Matt Caswell authored
On some platforms we can't startup the TLSProxy due to environmental problems (e.g. network set up on the build machine). These aren't OpenSSL problems so we shouldn't treat them as test failures. Just visibly indicate that we are skipping the test. We only skip the first time we attempt to start up the proxy. If that works then everything else should do...if not we should probably investigate and so report as a failure. This also removes test_networking...there is a danger that this turns into a test of user's environmental set up rather than OpenSSL. Reviewed-by: -
Matt Caswell authored
Misc fixes following the constification of the DH, DSA and RSA getters. Reviewed-by:
-
