Commits · 33c98a28acc0c9d356b550d8c3c26f18512b9b21 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Jun 22, 2011
- correctly encode OIDs near 2^32 · 33c98a28
  Dr. Stephen Henson authored Jun 22, 2011
  
  33c98a28
- allow MD5 use for computing old format hash links · b2ddddfb
  Dr. Stephen Henson authored Jun 22, 2011
  
  b2ddddfb
Jun 21, 2011
- Don't set FIPS rand method at same time as RAND method as this can cause · c24367eb
  Dr. Stephen Henson authored Jun 21, 2011
```
the FIPS library to fail. Applications that want to set the FIPS rand
method can do so explicitly and presumably they know what they are doing...
```
  c24367eb
- Add FIPS error codes. · 7397b353
  Dr. Stephen Henson authored Jun 21, 2011
  
  7397b353
- Stop warning. · baee44c3
  Dr. Stephen Henson authored Jun 21, 2011
  
  baee44c3
- Rename all AES_set*() functions using private_ prefix. · 1f2e4ecc
  Dr. Stephen Henson authored Jun 21, 2011
  
  1f2e4ecc
Jun 20, 2011
- make EVP_dss() work for DSA signing · 955e2800
  Dr. Stephen Henson authored Jun 20, 2011
  
  955e2800
- Redirect null cipher to FIPS module. · bf0736eb
  Dr. Stephen Henson authored Jun 20, 2011
  
  bf0736eb
- Don't set default public key methods in FIPS mode so applications · 3a5b97b7
  Dr. Stephen Henson authored Jun 20, 2011
```
can switch between modes.
```
  3a5b97b7
Jun 18, 2011
- Set FIPSLINK correctly now trailing slash is removed from FIPSDIR. · 45bf8250
  Dr. Stephen Henson authored Jun 18, 2011
  
  45bf8250
- Don't add trailing slash to FIPSDIR: it causes problems with Windows builds. · 4a18d5c8
  Dr. Stephen Henson authored Jun 18, 2011
  
  4a18d5c8
Jun 17, 2011
- Preliminary WIN32 support for FIPS capable OpenSSL building. · 174b26c4
  Dr. Stephen Henson authored Jun 17, 2011
  
  174b26c4
Jun 15, 2011
- Fix the version history: given that 1.0.1 has yet to be released, · 5cacc82f
  Bodo Möller authored Jun 15, 2011
```
we should list "Changes between 1.0.0e and 1.0.1",
not "between 1.0.0d and 1.0.1".
```
  5cacc82f
Jun 14, 2011
- Update key sizes to 2048 bits. · 29a90816
  Dr. Stephen Henson authored Jun 14, 2011
```
Only build ssltest with fipsld.

Include FIPS mode test for ssltest.
```
  29a90816
- set FIPS allow before initialising ctx · 4bea4540
  Dr. Stephen Henson authored Jun 14, 2011
  
  4bea4540
- typo · 8bfd0ae4
  Dr. Stephen Henson authored Jun 14, 2011
  
  8bfd0ae4
- Use include dir when copiling fips_premain_dso. · 378943ce
  Dr. Stephen Henson authored Jun 14, 2011
  
  378943ce
- Fix warnings in shared builds. · c65d409a
  Dr. Stephen Henson authored Jun 14, 2011
  
  c65d409a
Jun 13, 2011
- make sure custom cipher flag doesn't use any mode bits · ed1bbe2c
  Dr. Stephen Henson authored Jun 13, 2011
  
  ed1bbe2c
- Set rand method in FIPS_mode_set() not in rand library. · b0b3d090
  Dr. Stephen Henson authored Jun 13, 2011
  
  b0b3d090
- Redirect RAND to FIPS module in FIPS mode. · 0ede2af7
  Dr. Stephen Henson authored Jun 13, 2011
  
  0ede2af7
Jun 12, 2011
- Redirect HMAC and CMAC operations to module. · e8d23f78
  Dr. Stephen Henson authored Jun 12, 2011
  
  e8d23f78
Jun 10, 2011
- update ordinals · 907cd721
  Dr. Stephen Henson authored Jun 10, 2011
  
  907cd721
- Disable GCM, CCM, XTS outside FIPS mode this will be updated · 7c402e5a
  Dr. Stephen Henson authored Jun 10, 2011
```
when backported.
```
  7c402e5a
- add cmac to Windows build, update ordinals · b8d78a55
  Dr. Stephen Henson authored Jun 10, 2011
  
  b8d78a55
Jun 09, 2011
- Add android platforms. Let fipsdir come from environment. · dfa58629
  Dr. Stephen Henson authored Jun 09, 2011
  
  dfa58629
- add android support to DSO (from HEAD) · 4276908f
  Dr. Stephen Henson authored Jun 09, 2011
  
  4276908f
- Add -attime. · be23b71e
  Ben Laurie authored Jun 09, 2011
  
  be23b71e
- Fix warnings/errors(!). · f851acbf
  Ben Laurie authored Jun 09, 2011
  
  f851acbf
- Fix warnings. · 78ef9b02
  Ben Laurie authored Jun 09, 2011
  
  78ef9b02
- Redirect DH key and parameter generation. · ed9b0e5c
  Dr. Stephen Henson authored Jun 09, 2011
  
  ed9b0e5c
- Redirect DSA operations to FIPS module in FIPS mode. · 752c1a0c
  Dr. Stephen Henson authored Jun 09, 2011
  
  752c1a0c
- Use method rsa keygen first if FIPS mode if it is a FIPS method. · cc30415d
  Dr. Stephen Henson authored Jun 09, 2011
  
  cc30415d
Jun 08, 2011
- Redirect DH operations to FIPS module. Block non-FIPS methods. · 03e16611
  Dr. Stephen Henson authored Jun 08, 2011
```
Sync DH error codes with HEAD.
```
  03e16611
- fix memory leak · 8e2f3c1c
  Dr. Stephen Henson authored Jun 08, 2011
  
  8e2f3c1c
- Check fips method flags for ECDH, ECDSA. · b6d63b25
  Dr. Stephen Henson authored Jun 08, 2011
  
  b6d63b25
- Implement Camellia_set_key properly for FIPS builds. · e6b88d02
  Dr. Stephen Henson authored Jun 08, 2011
  
  e6b88d02
Jun 06, 2011
- rc4_skey.c: remove dead/redundant code (it's never compiled) and · 125060ca
  Andy Polyakov authored Jun 06, 2011
```
misleading/obsolete comment [from HEAD].
```
  125060ca
- Recognise "fips" in mkdef.pl script. · b4baca92
  Dr. Stephen Henson authored Jun 06, 2011
  
  b4baca92
- Redirection of ECDSA, ECDH operations to FIPS module. · 6342b6e3
  Dr. Stephen Henson authored Jun 06, 2011
```
Also use FIPS EC methods unconditionally for now: might want to use them
only in FIPS mode or with a switch later.
```
  6342b6e3