Skip to content
GitLab
  1. 04 Apr, 2018 1 commit
  3. 03 Apr, 2018 2 commits
    • Matt Caswell's avatar
      Fix a text canonicalisation bug in CMS · bcc63714
      Matt Caswell authored 
      

Where a CMS detached signature is used with text content the text goes
through a canonicalisation process first prior to signing or verifying a
signature. This process strips trailing space at the end of lines, converts
line terminators to CRLF and removes additional trailing line terminators
at the end of a file. A bug in the canonicalisation process meant that
some characters, such as form-feed, were incorrectly treated as whitespace
and removed. This is contrary to the specification (RFC5485). This fix
could mean that detached text data signed with an earlier version of
OpenSSL 1.1.0 may fail to verify using the fixed version, or text data
signed with a fixed OpenSSL may fail to verify with an earlier version of
OpenSSL 1.1.0. A workaround is to only verify the canonicalised text data
and use the "-binary" flag (for the "cms" command line application) or set
the SMIME_BINARY/PKCS7_BINARY/CMS_BINARY flags (if using CMS_verify()).

Reviewed-by: default avatarTim Hudson <tjh@openssl.org>
Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5790)
      bcc63714
    • Matt Caswell's avatar
      Fix CHANGES · ba505435
      Matt Caswell authored 
      

Fix the last release version number in CHANGES

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/5852)
      ba505435
  5. 29 Mar, 2018 1 commit
  7. 27 Mar, 2018 1 commit
  9. 26 Mar, 2018 1 commit
  11. 19 Mar, 2018 1 commit
  13. 14 Mar, 2018 1 commit
  15. 07 Mar, 2018 1 commit
    • Viktor Dukhovni's avatar
      Implement multi-process OCSP responder. · 3e3c7c36
      Viktor Dukhovni authored 
      

With "-multi" the OCSP responder forks multiple child processes,
and respawns them as needed.  This can be used as a long-running
service, not just a demo program.  Therefore the index file is
automatically re-read when changed.  The responder also now optionally
times out client requests.

Reviewed-by: default avatarMatt Caswell <matt@openssl.org>
      3e3c7c36
  17. 05 Mar, 2018 1 commit
  19. 04 Mar, 2018 1 commit
  21. 02 Mar, 2018 1 commit
  23. 23 Feb, 2018 1 commit
  25. 13 Feb, 2018 3 commits
  27. 12 Feb, 2018 1 commit
  29. 07 Feb, 2018 1 commit
  31. 29 Jan, 2018 1 commit
  33. 28 Jan, 2018 1 commit
  35. 23 Jan, 2018 1 commit
  37. 07 Jan, 2018 2 commits
  39. 02 Jan, 2018 1 commit
  41. 12 Dec, 2017 1 commit
  43. 07 Dec, 2017 1 commit
  45. 06 Dec, 2017 1 commit
  47. 21 Nov, 2017 1 commit
    • Paul Yang's avatar
      Support multi-prime RSA (RFC 8017) · 665d899f
      Paul Yang authored 
      

* Introduce RSA_generate_multi_prime_key to generate multi-prime
  RSA private key. As well as the following functions:
    RSA_get_multi_prime_extra_count
    RSA_get0_multi_prime_factors
    RSA_get0_multi_prime_crt_params
    RSA_set0_multi_prime_params
    RSA_get_version
* Support EVP operations for multi-prime RSA
* Support ASN.1 operations for multi-prime RSA
* Support multi-prime check in RSA_check_key_ex
* Support multi-prime RSA in apps/genrsa and apps/speed
* Support multi-prime RSA manipulation functions
* Test cases and documentation are added
* CHANGES is updated

Reviewed-by: default avatarTim Hudson <tjh@openssl.org>
Reviewed-by: default avatarBernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/4241)
      665d899f
  49. 12 Nov, 2017 1 commit
  51. 05 Nov, 2017 2 commits
  53. 02 Nov, 2017 1 commit
  55. 31 Oct, 2017 1 commit
  57. 25 Oct, 2017 1 commit
  59. 07 Oct, 2017 1 commit
  61. 30 Aug, 2017 1 commit
  63. 27 Aug, 2017 1 commit
  65. 15 Aug, 2017 1 commit
  67. 07 Aug, 2017 1 commit
  69. 25 Jul, 2017 1 commit