Commits · 3a3f964edaf69f50bcb659a5486bbd30c0afb630 · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Dec 19, 2012
- gost_crypt.c: more intuitive ceiling. · 3a3f964e
  Andy Polyakov authored Dec 19, 2012
  
  3a3f964e
- correct CHANGES · b7d1a1af
  Dr. Stephen Henson authored Dec 19, 2012
  
  b7d1a1af
- engines/cchost/gost_crypt.c: fix typo. · 8cfb6411
  Andy Polyakov authored Dec 19, 2012
  
  8cfb6411
- engines/e_capi.c: fix typo. · 2c0093d2
  Andy Polyakov authored Dec 19, 2012
```
Submitted by: Pierre Delaage
```
  2c0093d2
- engine/cchost: fix bugs. · 947e1292
  Andy Polyakov authored Dec 19, 2012
```
PR: 2821
Submitted by: Dmitry Belyavsky, Serguei Leontiev
```
  947e1292
Dec 18, 2012
- dso/dso_win32.c: fix compiler warning. · 0a2d5003
  Andy Polyakov authored Dec 18, 2012
  
  0a2d5003
- util/pl/VC-32.pl fix typo. · fb0a5208
  Andy Polyakov authored Dec 18, 2012
  
  fb0a5208
- Use client version when deciding which cipher suites to disable. · 230ec17d
  Dr. Stephen Henson authored Dec 18, 2012
  
  230ec17d
- util/pl/VC-32.pl: refresh, switch to ws2, add crypt32, fix typo (based on · 668bcfd5
  Andy Polyakov authored Dec 18, 2012
```
suggestions from Pierre Delaage).
```
  668bcfd5
Dec 16, 2012
- VC-32.pl: fix typo. · 8774f78d
  Andy Polyakov authored Dec 16, 2012
```
Submitted by: Pierre Delaage
```
  8774f78d
- d1_lib.c,bss_dgram.c: eliminate dependency on _ftime. · f469880c
  Andy Polyakov authored Dec 16, 2012
  
  f469880c
- add -rmd option to set OCSP response signing digest · bbdfbacd
  Dr. Stephen Henson authored Dec 16, 2012
  
  bbdfbacd
Dec 15, 2012
- Check chain is not NULL before assuming we have a validated chain. · e9754726
  Dr. Stephen Henson authored Dec 15, 2012
```
The modification to the OCSP helper purpose breaks normal OCSP verification.
It is no longer needed now we can trust partial chains.
```
  e9754726
- Return success when the responder is active. · 99fc818e
  Dr. Stephen Henson authored Dec 15, 2012
```
Don't verify our own responses.
```
  99fc818e
- typo · 265f835e
  Dr. Stephen Henson authored Dec 15, 2012
  
  265f835e
Dec 14, 2012
- Add support for '-' as input and output filenames in ocsp utility. · 33826fd0
  Dr. Stephen Henson authored Dec 14, 2012
```
Recognise verification arguments.
```
  33826fd0
- oops, revert, committed in error · 92821996
  Dr. Stephen Henson authored Dec 14, 2012
  
  92821996
- apps/ocsp.c · 11e2957d
  Dr. Stephen Henson authored Dec 14, 2012
  
  11e2957d
- Documentation improvements by Chris Palmer (Google). · 3a778a29
  Ben Laurie authored Dec 14, 2012
  
  3a778a29
Dec 13, 2012
- fips/fipsld: improve cross-compile support. · 4d265478
  Andy Polyakov authored Dec 13, 2012
  
  4d265478
- Use new partial chain flag instead of modifying input parameters. · 2a21cdbe
  Dr. Stephen Henson authored Dec 13, 2012
  
  2a21cdbe
- New verify flag to return success if we have any certificate in the · 51e7a437
  Dr. Stephen Henson authored Dec 13, 2012
```
trusted store instead of the default which is to return an error if
we can't build the complete chain.
```
  51e7a437
- Document -pubkey. · 74cc3b58
  Ben Laurie authored Dec 13, 2012
  
  74cc3b58
Dec 12, 2012
- Improve my 64-bit debug target. · e7cf2b10
  Ben Laurie authored Dec 12, 2012
  
  e7cf2b10
- add -crl_download option to s_server · 60938ae7
  Dr. Stephen Henson authored Dec 12, 2012
  
  60938ae7
- add -cert_chain option to s_client · 4e71d952
  Dr. Stephen Henson authored Dec 12, 2012
  
  4e71d952
Dec 11, 2012
- Make openssl verify return errors. · fefc111a
  Ben Laurie authored Dec 11, 2012
  
  fefc111a
- Update ignores. · b204ab65
  Ben Laurie authored Dec 11, 2012
  
  b204ab65
Dec 10, 2012
- Tabification. Remove accidental duplication. · ec40e5ff
  Ben Laurie authored Dec 10, 2012
  
  ec40e5ff
- revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 instead · b34aa49c
  Dr. Stephen Henson authored Dec 10, 2012
  
  b34aa49c
Dec 09, 2012
- add -badsig option to ocsp utility too. · 1e8b9e7e
  Dr. Stephen Henson authored Dec 09, 2012
  
  1e8b9e7e
- allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY mode · d372d365
  Dr. Stephen Henson authored Dec 09, 2012
  
  d372d365
Dec 07, 2012
- send out the raw SSL/TLS headers to the msg_callback and display them in SSL_trace · 36b5bb6f
  Dr. Stephen Henson authored Dec 07, 2012
  
  36b5bb6f
- Fix OCSP checking. · 30c278aa
  Ben Laurie authored Dec 07, 2012
  
  30c278aa
- typo · 083bec78
  Dr. Stephen Henson authored Dec 07, 2012
  
  083bec78
- really fix automatic ;-) · 1edf8f1b
  Dr. Stephen Henson authored Dec 07, 2012
  
  1edf8f1b
Dec 06, 2012
- documentation fixes · 65f2a565
  Dr. Stephen Henson authored Dec 06, 2012
  
  65f2a565
- fix handling of "automatic" in file mode · f1f5c70a
  Dr. Stephen Henson authored Dec 06, 2012
  
  f1f5c70a
- Add code to download CRLs based on CRLDP extension. · 0090a686
  Dr. Stephen Henson authored Dec 06, 2012
```
Just a sample, real world applications would have to be cleverer.
```
  0090a686
- remove print_ssl_cert_checks() from openssl application: it is no longer used · f5a7d5b1
  Dr. Stephen Henson authored Dec 06, 2012
  
  f5a7d5b1