Commits · 2537d46903c72d947b4e7eddd0bc89937d1350be · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Dec 03, 2012
- oops, really check brief mode only ;-) · 2537d469
  Dr. Stephen Henson authored Dec 03, 2012
  
  2537d469
- don't check errno is zero, just print out message · 5447f836
  Dr. Stephen Henson authored Dec 03, 2012
  
  5447f836
- if no error code and -brief selected print out connection closed instead of read error · 66d9f2e5
  Dr. Stephen Henson authored Dec 03, 2012
  
  66d9f2e5
Dec 02, 2012
- add -badsig option to corrupt CRL signatures for testing too · 139cd16c
  Dr. Stephen Henson authored Dec 02, 2012
  
  139cd16c
- New option to add CRLs for s_client and s_server. · fdb78f3d
  Dr. Stephen Henson authored Dec 02, 2012
  
  fdb78f3d
- add option to get a certificate or CRL from a URL · 95ea5318
  Dr. Stephen Henson authored Dec 02, 2012
  
  95ea5318
Dec 01, 2012
- return error if Suite B mode is selected and TLS 1.2 can't be used. Correct error coded · 4842dde8
  Dr. Stephen Henson authored Dec 01, 2012
  
  4842dde8
- cryptlib.c: fix logical error. · f91926a2
  Andy Polyakov authored Dec 01, 2012
  
  f91926a2
- aesni-x86_64.pl: CTR face lift, +25% on Bulldozer. · 9282c335
  Andy Polyakov authored Dec 01, 2012
  
  9282c335
- aes-s390x.pl: harmonize software-only code path [and minor optimization]. · c3cddeae
  Andy Polyakov authored Dec 01, 2012
  
  c3cddeae
Nov 30, 2012
- Add new test option set the version in generated certificates: this · df316fd4
  Dr. Stephen Henson authored Nov 30, 2012
```
is needed to test some profiles/protocols which reject certificates
with unsupported versions.
```
  df316fd4
Nov 29, 2012
- PR: 2803 · 2fceff5b
  Dr. Stephen Henson authored Nov 29, 2012
```
Submitted by: jean-etienne.schwartz@bull.net

In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.
```
  2fceff5b
- add wrapper function for certificate download · f4042781
  Dr. Stephen Henson authored Nov 29, 2012
  
  f4042781
- constify · 68f5500d
  Dr. Stephen Henson authored Nov 29, 2012
  
  68f5500d
Nov 28, 2012
- Generalise OCSP I/O functions to support dowloading of other ASN1 · 6f9076ff
  Dr. Stephen Henson authored Nov 28, 2012
```
structures using HTTP. Add wrapper function to handle CRL download.
```
  6f9076ff
- C64x+ assembly pack: improve EABI support. · 904732f6
  Andy Polyakov authored Nov 28, 2012
  
  904732f6
- Update support for Intel compiler: add linux-x86_64-icc and fix problems. · cf5ecc3e
  Andy Polyakov authored Nov 28, 2012
  
  cf5ecc3e
Nov 27, 2012
- New functions to set lookup_crls callback and to retrieve internal X509_STORE · 2c340864
  Dr. Stephen Henson authored Nov 27, 2012
```
from X509_STORE_CTX.
```
  2c340864
Nov 26, 2012
- Print out point format list for clients too. · 84bafb74
  Dr. Stephen Henson authored Nov 26, 2012
  
  84bafb74
- Use default point formats extension for server side as well as client · 5087afa1
  Dr. Stephen Henson authored Nov 26, 2012
```
side, if possible.

Don't advertise compressed char2 for SuiteB as it is not supported.
```
  5087afa1
- change inaccurate error message · 93c2c9be
  Dr. Stephen Henson authored Nov 26, 2012
  
  93c2c9be
- set auto ecdh parameter selction for Suite B · d900c0ae
  Dr. Stephen Henson authored Nov 26, 2012
  
  d900c0ae
- set cmdline flag in s_server · 55b66f08
  Dr. Stephen Henson authored Nov 26, 2012
  
  55b66f08
Nov 25, 2012
- option to output corrupted signature in certificates for testing purposes · 96cfba0f
  Dr. Stephen Henson authored Nov 25, 2012
  
  96cfba0f
Nov 24, 2012
- AES for SPARC T4: add XTS, reorder subroutines to improve TLB locality. · cd686946
  Andy Polyakov authored Nov 24, 2012
  
  cd686946
- add Suite B 128 bit mode offering only combination 2 · 1c16fd1f
  Dr. Stephen Henson authored Nov 24, 2012
  
  1c16fd1f
Nov 23, 2012
- Don't display messages about verify depth in s_server if -quiet it set. · a5afc0a8
  Dr. Stephen Henson authored Nov 23, 2012
```
Add support for separate verify and chain stores in s_client.
```
  a5afc0a8
Nov 22, 2012
- Add support for printing out and retrieving EC point formats extension. · 20b431e3
  Dr. Stephen Henson authored Nov 22, 2012
  
  20b431e3
- reject zero length point format list or supported curves extensions · e83aefb3
  Dr. Stephen Henson authored Nov 22, 2012
  
  e83aefb3
Nov 21, 2012
- support -quiet with -msg or -trace · 1740c9fb
  Dr. Stephen Henson authored Nov 21, 2012
  
  1740c9fb
- curves can be set in both client and server · 2588d4ca
  Dr. Stephen Henson authored Nov 21, 2012
  
  2588d4ca
- use correct return values when callin cmd · 878b5d07
  Dr. Stephen Henson authored Nov 21, 2012
  
  878b5d07
- only use a default curve if not already set · 191b3f0b
  Dr. Stephen Henson authored Nov 21, 2012
  
  191b3f0b
- Reorganise parameters for OPENSSL_gmtime_diff. · 46a6cec6
  Dr. Stephen Henson authored Nov 21, 2012
```
Make ASN1_UTCTIME_cmp_time_t more robust by using the new time functions.
```
  46a6cec6
- Submitted by: Florian Weimer <fweimer@redhat.com> · 472af806
  Dr. Stephen Henson authored Nov 21, 2012
```
PR: 2909

Update test cases to cover internal error return values.

Remove IDNA wildcard filter.
```
  472af806
- PR: 2908 · 5c1393bf
  Dr. Stephen Henson authored Nov 21, 2012
```
Submitted by: Dmitry Belyavsky <beldmit@gmail.com>

Fix DH double free if parameter generation fails.
```
  5c1393bf
Nov 20, 2012
- fix printout of expiry days if -enddate is used in ca · f7ac0ec8
  Dr. Stephen Henson authored Nov 20, 2012
  
  f7ac0ec8
- don't use psec or pdays if NULL · 598c423e
  Dr. Stephen Henson authored Nov 20, 2012
  
  598c423e
- first parameter is difference in days, not years · 360ef676
  Dr. Stephen Henson authored Nov 20, 2012
  
  360ef676
- reorganise SSL_CONF_cmd manual page and update some links · 13cfb043
  Dr. Stephen Henson authored Nov 20, 2012
  
  13cfb043