Skip to content
  1. Nov 19, 2000
  2. Nov 18, 2000
  3. Nov 17, 2000
  4. Nov 16, 2000
    • Richard Levitte's avatar
      More constification of the BN library. · cbd48ba6
      Richard Levitte authored
      cbd48ba6
    • Richard Levitte's avatar
      Make sure to print the BN counting (BN_COUNT) to stderr instead of · 67d93e6f
      Richard Levitte authored
      stdout.  bc gets so confused by bean counts.
      67d93e6f
    • Richard Levitte's avatar
      afb83c45
    • Richard Levitte's avatar
      I've checked again and again. There really is no need to expand a to · 43fcc1b0
      Richard Levitte authored
      4 times it's size when bn_sqr_recursive() won't look farther than the
      original length.  Thereby, constification is no longer a problem.
      43fcc1b0
    • Richard Levitte's avatar
      /proc/cpuinfo can have several lines containing the word "type". We want the... · d5695a26
      Richard Levitte authored
      /proc/cpuinfo can have several lines containing the word "type".  We want the one that is "type", plain and simple.  Caught by Raoul Borenius <borenius@shuttle.de>
      d5695a26
    • Geoff Thorpe's avatar
      I have no idea how this comment got there, but it's certainly not · 8bfc8f93
      Geoff Thorpe authored
      applicable to ENGINE_ctrl()
      8bfc8f93
    • Geoff Thorpe's avatar
      Many applications that use OpenSSL with ENGINE support might face a · ef02b10a
      Geoff Thorpe authored
      situation where they've initialised the ENGINE, loaded keys (which are then
      linked to that ENGINE), and performed other checks (such as verifying
      certificate chains etc). At that point, if the application goes
      multi-threaded or multi-process it creates problems for any ENGINE
      implementations that are either not thread/process safe or that perform
      optimally when they do not have to perform locking and other contention
      management tasks at "run-time".
      
      This defines a new ENGINE_ctrl() command that can be supported by engines
      at their discretion. If ENGINE_ctrl(..., ENGINE_CTRL_HUP,...) returns an
      error then the caller should check if the *_R_COMMAND_NOT_IMPLEMENTED error
      reason was set - it may just be that the engine doesn't support or need the
      HUP command, or it could be that the attempted reinitialisation failed. A
      crude alternative is to ignore the return value from ENGINE_ctrl() (and
      clear any errors with ERR_clear_error()) and perform a test operation
      immediately after the "HUP". Very crude indeed.
      
      ENGINEs can support this command to close and reopen connections, files,
      handles, or whatever as an alternative to run-time locking when such things
      would otherwise be needed. In such a case, it's advisable for the engine
      implementations to support locking by default but disable it after the
      arrival of a HUP command, or any other indication by the application that
      locking is not required. NB: This command exists to allow an ENGINE to
      reinitialise without the ENGINE's functional reference count having to sink
      down to zero and back up - which is what is normally required for the
      finish() and init() handlers to get invoked. It would also be a bad idea
      for engine_lib to catch this command itself and interpret it by calling the
      engine's init() and finish() handlers directly, because reinitialisation
      may need special handling on a case-by-case basis that is distinct from a
      finish/init pair - eg. calling a finish() handler may invalidate the state
      stored inside individual keys that have already loaded for this engine.
      ef02b10a
  5. Nov 15, 2000
  6. Nov 14, 2000
  7. Nov 13, 2000
    • Lutz Jänicke's avatar
      HP-UX shared libraries do not build any longer, as EX_LIBS contains · 305db17b
      Lutz Jänicke authored
      "-Wl,+s" instead of +s:
      * Hardcoded necessary references to -ldld/-ldl into the build rules and
        removed EX_LIBS.
      
      HP-UX records the pathnames of dependent libraries when the shared libs
      are built, so that ./libcrypto.sl... is recorded in libssl.sl..., with
      "./" not being resolvable when running an application linked against -lssl:
      * Build libssl without explicit reference to libcrypto, applications will
        be linked with "-lssl -lcrypto" anyway.
      
      Document these informations in Makefile.org.
      305db17b
  8. Nov 12, 2000
  9. Nov 10, 2000