Commits · 1be02dd84277d15136ecb06fa253b83aaca9de49 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Sep 27, 2003
- Make MD5 assembler code able to handle messages larger than 2GB on 32-bit · 1be02dd8
  Richard Levitte authored Sep 27, 2003
```
systems and above.
PR: 664
```
  1be02dd8
- Selected changes for MSDOS, contributed by Gisle Vanem <giva@bgnett.no>. · 3d7c4a5a
  Richard Levitte authored Sep 27, 2003
```
PR: 669
```
  3d7c4a5a
- Add reference counting around the thread state hash table. · 11171f3c
  Richard Levitte authored Sep 27, 2003
```
Unfortunately, this means that the dynamic ENGINE version just went up, and
isn't backward compatible.
PR: 678
```
  11171f3c
- Have ssl3_ssl3_send_client_verify() change the state to SSL3_ST_SW_CERT_VRFY_B. · ba9f80c5
  Richard Levitte authored Sep 27, 2003
```
PR: 679
```
  ba9f80c5
- Have ssl3_send_certificate_request() change the state to SSL3_ST_SW_CERT_REQ_B. · e59659dc
  Richard Levitte authored Sep 27, 2003
```
PR: 680
```
  e59659dc
- Include the instance in the Kerberos ticket information. · 253e893c
  Richard Levitte authored Sep 27, 2003
```
In s_server, print the received Kerberos information.
PR: 693
```
  253e893c
- Correct small documentation error. · 0ad2c4f8
  Richard Levitte authored Sep 27, 2003
```
PR: 698
```
  0ad2c4f8
- Free the Kerberos context upon freeing the SSL. · 0e6c20da
  Richard Levitte authored Sep 27, 2003
```
Contributed by Andrew Mann <amann@tccgi.com>
```
  0e6c20da
- Add necessary changes to be able to build on VxWorks for PPC860. · f6b659cb
  Richard Levitte authored Sep 27, 2003
```
Contributed by Bob Bradley <bob@chaoticsoftware.com>
```
  f6b659cb
Sep 25, 2003

Fix prime generation loop in crypto/bn/bn_prime.pl by making · 6bd27f86

Ralf S. Engelschall authored Sep 25, 2003

sure the loop does correctly stop and breaking ("division by zero")
modulus operations are not performed. The (pre-generated) prime
table crypto/bn/bn_prime.h was already correct, but it could not be
re-generated on some platforms because of the "division by zero"
situation in the script.

6bd27f86

Sep 21, 2003
- Add -passin support to rsautl · dfe399e7
  Dr. Stephen Henson authored Sep 21, 2003
  
  dfe399e7
- In order to get the expected self signed error when · 7068c8b1
  Dr. Stephen Henson authored Sep 21, 2003
```
calling X509_verify_cert() in x509.c the cert should
not be added to the trusted store.
```
  7068c8b1
Sep 09, 2003

Typos. · 82384690
Dr. Stephen Henson authored Sep 09, 2003

82384690

Generalise the definition of strcasecmp() and strncasecmp() for · e6fa67fa

Richard Levitte authored Sep 09, 2003

platforms that don't (necessarely) have it.  In the case of VMS, this
means moving a couple of functions from apps/ to crypto/ and make them
general (although only used privately).

e6fa67fa

Sep 08, 2003
- These should be write-locks, not read-locks. · 9ea72d37
  Geoff Thorpe authored Sep 08, 2003
  
  9ea72d37
Sep 04, 2003
- certain changes have to be listed twice in this file because OpenSSL · a9077513
  Bodo Möller authored Sep 04, 2003
```
0.9.6h forked into 0.9.6i and 0.9.7 ...
```
  a9077513
Sep 03, 2003
- New -ignore_err option in ocsp application to stop the server · 560dfd2a
  Dr. Stephen Henson authored Sep 03, 2003
```
exiting on the first error in a request.
```
  560dfd2a
- Only accept a client certificate if the server requests · 14f3d7c5
  Dr. Stephen Henson authored Sep 03, 2003
```
one, as required by SSL/TLS specs.
```
  14f3d7c5
Aug 21, 2003
- outlen should be int * in out_utf8. · 510dc1ec
  Dr. Stephen Henson authored Aug 21, 2003
  
  510dc1ec
Aug 14, 2003
- fix out-of-bounds check in lock_dbg_cb (was too lose to detect all · 563c05e2
  Bodo Möller authored Aug 14, 2003
```
invalid cases)

PR: 674
```
  563c05e2
Aug 11, 2003
- make sure no error is left in the queue that is intentionally ignored · 643ecd2e
  Bodo Möller authored Aug 11, 2003
  
  643ecd2e
Aug 07, 2003

Correct two problems, found by Martin Kochanski <cardbox@easynet.co.uk>: · 88401ed4

Richard Levitte authored Aug 07, 2003

1. CreateToolhelp32Snapshot returns INVALID_HANDLE_VALUE, not NULL, on error.
2. On Windows CE, a snapshot handle is closed with CloseToolhelp32Snapshot,
   not CloseHandle.

88401ed4

Aug 06, 2003
- add OpenSSL license · 3aa8d3a7
  Bodo Möller authored Aug 06, 2003
```
fix typo
```
  3aa8d3a7
Aug 04, 2003
- Inclusion of openssl/engine.h should always be wrapped with a check that · 5b6e7c8c
  Richard Levitte authored Aug 04, 2003
```
OPENSSL_NO_ENGINE is not defined.
```
  5b6e7c8c
Jul 23, 2003
- Avoid clashes with Win32 names in WinCrypt.h · f96d1af4
  Dr. Stephen Henson authored Jul 23, 2003
  
  f96d1af4
Jul 22, 2003

updates for draft-ietf-tls-ecc-03.txt · 968766ca
Bodo Möller authored Jul 22, 2003
```
Submitted by: Douglas Stebila
Reviewed by: Bodo Moeller
```
968766ca

add test for secp160r1 · 652ae06b

Bodo Möller authored Jul 22, 2003

add code for kP+lQ timings

Submitted by: Douglas Stebila <douglas.stebila@sun.com>
Reviewed by: Bodo Moeller

652ae06b

Jul 21, 2003
- tolerate extra data at end of client hello for SSL 3.0 · ddc38679
  Bodo Möller authored Jul 21, 2003
```
PR: 659
```
  ddc38679
- fix: 0.9.7 is based on 0.9.6h, not on 0.9.6k · 02e05594
  Bodo Möller authored Jul 21, 2003
```
typo in 0.9.6k section
```
  02e05594
- new function EC_GROUP_cmp() (used by EVP_PKEY_cmp()) · ada0e717
  Bodo Möller authored Jul 21, 2003
```
Submitted by: Nils Larsch
```
  ada0e717
- manpages for 'openssl ec' and 'openssl ecparam' · 2c789c82
  Bodo Möller authored Jul 21, 2003
```
Submitted by: Nils Larsch
```
  2c789c82
Jul 10, 2003

A document that has a very rough description of the X509 · d143dce0

Richard Levitte authored Jul 10, 2003

functionality.  This is mostly so there's a way to get from the
crypto.html page to the function descriptions.

d143dce0

Jul 04, 2003
- Replace CCITT with ITU-T. Keep CCITT around as an alias. · f9d183c2
  Richard Levitte authored Jul 04, 2003
```
make update

PR: 80
```
  f9d183c2
- Make sure openssl.pc is readable by everyone. · 182cd19d
  Richard Levitte authored Jul 04, 2003
```
PR: 654
```
  182cd19d
- The counter is big-endian. Since it comes as an array of char, · 61f00386
  Richard Levitte authored Jul 04, 2003
```
there's absolutely no need to special-case it on little-endian
machines.

Notified by Thierry Boivin <Thierry.Boivin@celsecat.com>
```
  61f00386
Jul 03, 2003
- Oops, I forgot to replace 'counter' with 'ivec' when used... · 2ae0352b
  Richard Levitte authored Jul 03, 2003
  
  2ae0352b
- Add -issuer_hash and make -subject_hash the default way to get the · 94805c84
  Richard Levitte authored Jul 03, 2003
```
subject hash, with -hash a synonym kept around for backward
compatibility reasons.
PR: 650
```
  94805c84
- The convenience argumetn for -nameopt and -certopt is ca_default, not · 6f2f534b
  Richard Levitte authored Jul 03, 2003
```
default_ca.
PR: 653
```
  6f2f534b
- The 'counter' is really the IV. · da6c44fc
  Richard Levitte authored Jul 03, 2003
  
  da6c44fc
- Change AES-CTR to increment the IV by 1 instead of 2^64. · da0d3356
  Richard Levitte authored Jul 03, 2003
  
  da0d3356