Commits · 2fe9ab8e20e1480825cd5962ca516924f4f03f5e · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

01 Dec, 2003 4 commits
- It was pointed out to me that if the requested size is 0, we shouldn't · 2fe9ab8e
  Richard Levitte authored Dec 01, 2003
```
ty to allocate anything at all.  This will allow eNULL to still work.

PR: 751
Notified by: Lutz Jaenicke
```
  2fe9ab8e
- Check that OPENSSL_malloc() really returned some memory. · 1145e038
  Richard Levitte authored Dec 01, 2003
```
PR: 751
Notified by: meder@mcs.anl.gov
Reviewed by: Lutz Jaenicke, Richard Levitte
```
  1145e038
- CRYPTO_malloc(), CRYPTO_realloc() and variants of them should return NULL · 6781efb9
  Richard Levitte authored Dec 01, 2003
```
if the give size is 0.

This is a thought that came up in PR 751.
```
  6781efb9
- Some more ASFLAGS settings required · 0bf1c1d8
  Lutz Jänicke authored Dec 01, 2003
```
PR: #735
Submitted by: Tim Rice <tim@multitalents.net>
```
  0bf1c1d8
30 Nov, 2003 4 commits

Add more debugging to my Configure target, and "make update" to incorporate · 6ed474ca
Geoff Thorpe authored Nov 30, 2003
```
this and a few other changes.
```
6ed474ca

If BN_STRICT is defined, don't accept an ambiguous representation of zero · 46cb8d36

Geoff Thorpe authored Nov 30, 2003

(ie. where top may be zero, or it may be one if the corresponding word is
set to zero). Note, this only affects the macros in bn.h, there are probably
similar corrections required in some c files.

Also, clarify the audit-related macros at the top of the header. Mental
note: I must not forget to clean all this out before 0.9.8 is released ...

46cb8d36

Improve a couple of the bignum macros. Note, this doesn't eliminate · 23fc5ac6

Geoff Thorpe authored Nov 30, 2003

tolerance of ambiguous zero-representation, it just improves
BN_abs_is_word() and simplifies other macros that depend on it.

23fc5ac6

Make BN_DEBUG_RAND less painfully slow by only consuming one byte of · 5734bebe
Geoff Thorpe authored Nov 30, 2003
```
pseudo-random data for each bn_pollute().
```
5734bebe

29 Nov, 2003 5 commits
- This improves the placement of check_top() macros in a couple of bn_lib · 657a9195
  Geoff Thorpe authored Nov 29, 2003
```
functions.
```
  657a9195
- Make sure the documentation matches reality. · 6859bb1a
  Richard Levitte authored Nov 29, 2003
```
PR: 755
Notified by: Jakub Bogusz <qboosh@pld-linux.org>
```
  6859bb1a
- We're getting a clash with C++ because it has a type called 'list'. · 3822740c
  Richard Levitte authored Nov 29, 2003
```
Therefore, change all instances of the symbol 'list' to something else.

PR: 758
Submitted by: Frédéric Giudicelli <groups@newpki.org>
```
  3822740c
- Add IPSec/IKE/Oakley curves. · 0d78bc33
  Richard Levitte authored Nov 29, 2003
```
PR: 768
Submitted by: Vadim Fedukovich <vf@unity.net>
```
  0d78bc33
- Damnit, I'm sick of having to do something special every time a module · d87b79bf
  Richard Levitte authored Nov 29, 2003
```
that gets built before objects barfs all over the place because it
uses a new NID that hasn't had a chance of getting defined yet (in
this case, it was about a couple of new EC curves, and therefore a
couple of new corresponding NIDs).

I'm placing objects first in SDIRS!  There.
```
  d87b79bf
28 Nov, 2003 11 commits

RSA_size() and DH_size() return the amount of bytes in a key, and we · 70ef9c5a
Richard Levitte authored Nov 28, 2003
```
compared it to the amount of bits required...
PR: 770
Submitted by: c zhang <czhang2005@hotmail.com>
```
70ef9c5a
1024 is the export key bits limit according to current regulations, not 512. · b727907a
Richard Levitte authored Nov 28, 2003
```
PR: 771
Submitted by: c zhang <czhang2005@hotmail.com>
```
b727907a
Get rid of some signed/unsigned comparison warnings. · 444c3a84
Geoff Thorpe authored Nov 28, 2003

444c3a84

Make a number of changes to the OS/2 build. Submitter's comment below. · 0b352c58

Richard Levitte authored Nov 28, 2003

PR: 732
Submitted by: Ilya Zakharevich <nospam-abuse@ilyaz.org>

Submitter's comment:

This patch:

a) Introduces a new file os2/backwardify.pl.

b) Introduces a new mk1mf.pl variable $preamble.  As you can see, it may
   be used also to move some OS-specific code to VC-CE too (the the
   first chunk of the patch);

c) The DESCRIPTION specifier of the .def file is made more informative:
   now it contains the version number too.  On OS/2 it is made conformant
   to OS/2 conventions; in particular, when one runs the standard command
	BLDLEVEL this.DLL
   one can see:

   Vendor:      www.openssl.org/
   Revision:    0.9.7c
   Description: OpenSSL: implementation of Secure Socket Layer; DLL for library crypto.  Build for EMX -Zmtd

   [I did not make Win32 descriptions as informative as this - I'm afraid to
    break something.  Be welcome to fix this.]

d) On OS/2 the generated DLL was hardly usable (it had a shared initialized
   data...

0b352c58

Move another common functionality (reproduced so far with cut'n'paste) · 03ddbdd9
Richard Levitte authored Nov 28, 2003
```
to apps.c, and give it the hopefully descriptive name parse_yesno().
```
03ddbdd9
Let's use text/plain in the example instead of crapy HTML. · 5ebdb390
Richard Levitte authored Nov 28, 2003
```
PR: 777
Submitted by: Michael Shields <mshields@sunblocksystems.com>
```
5ebdb390
Forgot to change the declaration of do_subject() to one of parse_name()... · d45a0984
Richard Levitte authored Nov 28, 2003

d45a0984

Move do_subject() to apps.c and rename it to parse_name(). The · 6d5ffb59

Richard Levitte authored Nov 28, 2003

rationale behind the move is that it's use by several applications.
The rationale behind the name change is that it describes what the
function does a bit better.

6d5ffb59

Allow multi-valued rdns in subjects. This adds the -multivalue-rdn option · 7ce9e425

Richard Levitte authored Nov 28, 2003

to 'openssl req' and 'openssl ca'.

PR: 779
Submitted by: Michael Bell <michael.bell@cms.hu-berlin.de>
Reviewed by: Richard Levitte

(there will be some follow-up changes)

7ce9e425

Netware-specific changes, · 4d8743f4

Richard Levitte authored Nov 28, 2003

PR: 780
Submitted by: Verdon Walker <VWalker@novell.com>
Reviewed by: Richard Levitte

4d8743f4

Change my debugging entries to do fierce BIGNUM debugging. · 4c8b4f9d
Richard Levitte authored Nov 28, 2003

4c8b4f9d

25 Nov, 2003 3 commits

Due to recent debugging bursts, openssl should be more or less solid · 81ba5f67

Geoff Thorpe authored Nov 25, 2003

against inconsistent BIGNUMs coming out of any of its API functions. So
this change no longer "fixes" the bn_print.c functions, but it makes for
cleaner code. This patch was a part of ticket 697.

PR: 697
Submitted by: Otto Moerbeek
Reviewed by: Geoff Thorpe

81ba5f67

Fix some handling in bn_word. This also resolves the issues observed in · 6defae04

Geoff Thorpe authored Nov 25, 2003

ticket 697 (though uses a different solution than the proposed one). This
problem was initially raised by Otto Moerbeek.

PR: 697
Submitted by: Nils Larsch
Reviewed by: Geoff Thorpe

6defae04

Some changes for bn_gf2m.c: better error checking plus some minor · e1064adf
Geoff Thorpe authored Nov 25, 2003
```
optimizations.

Submitted by: Nils Larsch
```
e1064adf

24 Nov, 2003 1 commit
- Free "engine" resource in case of failure to prevent memory leak · d7559f16
  Lutz Jänicke authored Nov 24, 2003
```
PR: #778
Submitted by: George Mitchell <george@m5p.com>
```
  d7559f16
22 Nov, 2003 1 commit

BN_div() cleanup: replace the use of BN_sub and BN_add with bn_sub_words · 9e989810

Geoff Thorpe authored Nov 22, 2003

and bn_add_words to avoid using fake bignums to window other bignums that
can lead to corruption. This change allows all bignum tests to pass with
BN_DEBUG and BN_DEBUG_RAND debugging and valgrind. NB: This should be
tested on a few different architectures and configuration targets, as the
bignum code this deals with is quite preprocessor (and assembly) sensitive.

Submitted by: Nils Narsch
Reviewed by: Geoff Thorpe, Ulf Moeller

9e989810

21 Nov, 2003 1 commit

Fix a small bug in str_copy: if more than one variable is replaced, make · ec2179cf

Geoff Thorpe authored Nov 21, 2003

sure the current length is used to calculate the new buffer length instead
of using the old length (prior to any variable substitution).

Submitted by: Nils Larsch

ec2179cf

20 Nov, 2003 3 commits
- Give CRLDP its standard name. · a8287a90
  Dr. Stephen Henson authored Nov 20, 2003
```
Max req -x509 use V1 if extensions section absent.
```
  a8287a90
- hpux64-parisc2-gcc target added. Once it is verified, ./config should · ad5f0ed5
  Andy Polyakov authored Nov 20, 2003
```
be modified to choose it instead of hpux64-parisc-gcc, which should
then be removed. hpux64-parisc-cc is removed already now as redundant
[in case you wonder, 64-bit HP-UX ABI *implies* PA-RISC2.0].
```
  ad5f0ed5
- ./config failed to correctly detect if gcc uses 64-bit ABI on HP-UX. · 0a4c8baf
  Andy Polyakov authored Nov 20, 2003
```
PR: 772
```
  0a4c8baf
18 Nov, 2003 1 commit
- Make sure to initialize AES counters to obtain proper results. · 95de3d20
  Lutz Jänicke authored Nov 18, 2003
```
Submitted by: Kirill Kochetkov <kochet@ixbt.com>

PR: #748
```
  95de3d20
16 Nov, 2003 4 commits
- re-enable the test, keeping the original method for RAND_pseudo_bytes · 31182ad3
  Ulf Möller authored Nov 16, 2003
```
which is used by BN_DEBUG_RAND
Submitted by: Nils Larsch
```
  31182ad3
- Catch error condition to prevent NULL pointer dereference. · f35232e6
  Lutz Jänicke authored Nov 16, 2003
```
Submitted by: Goetz Babin-Ebell <babin-ebell@trustcenter.de>

PR: #766
```
  f35232e6
- Provide ASFLAGS in the subdirectories handling assembler code. · fda5e385
  Lutz Jänicke authored Nov 16, 2003
```
Submitted by: Tim Rice <tim@multitalents.net>

PR: #735, #765
```
  fda5e385
- The x9.62 tests replace the PRNG with specific numbers, · ac9c6e10
  Ulf Möller authored Nov 16, 2003
```
so don't run them if BN_DEBUG_RAND is defined.

Also, fix another small bug.

Submitted by: Nils Larsch
```
  ac9c6e10
15 Nov, 2003 1 commit

BN_set_bit() etc should use "unsigned int". · 1a017330

Ulf Möller authored Nov 15, 2003

Keep it as is to avoid an API change, but check for negativ values.

Submitted by: Nils Larsch

1a017330

14 Nov, 2003 1 commit
- Less restrictive debugging build. · d2cd4612
  Richard Levitte authored Nov 14, 2003
  
  d2cd4612