- 16 Jan, 2016 6 commits
-
-
Dr. Stephen Henson authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Viktor Dukhovni authored
This avoids explicit double spaces between sentences. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Viktor Dukhovni authored
Also s/s/ssl/ as appropriate in the code example. Suggested by Claus Assmann. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Viktor Dukhovni authored
Also report an SSL_dane_enable error when the basedomain is an invalid SNI name. Avoid side-effects when such a name is valid with X509_VERIFY_PARAM_set1_host(), as e.g. with an empty name, by setting the SNI name first. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Viktor Dukhovni authored
While empty inputs to SSL_set1_host() clear the reference identifier list. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Rich Salz authored
Via Rainer Jung Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
- 15 Jan, 2016 6 commits
-
-
Dr. Stephen Henson authored
Reviewed-by:
Viktor Dukhovni <viktor@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:
Viktor Dukhovni <viktor@openssl.org>
-
Zi Lin authored
- bugfix: should not treat '--' as invalid domain substring. - '-' should not be the first letter of a domain Signed-off-by:
Viktor Dukhovni <viktor@openssl.org> Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Rich Salz authored
Reviewed-by:
Matt Caswell <matt@openssl.org>
-
Matt Caswell authored
The windows installation instructions were very out of date. Substantial update to the text. Remove a lot of historical stuff that isn't relevant any more, and merge the win64 and win32 instructions into one file. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
Also remove the INSTALL.W64 file. Next commit will update INSTALL.WIN to cover both. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
- 14 Jan, 2016 23 commits
-
-
Richard Levitte authored
The previous 'Relax the requirements for a debug build' commit had an extra line of code that shouldn't have been there. This fixes it. Reviewed-by:
Viktor Dukhovni <viktor@openssl.org>
-
Viktor Dukhovni authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
It seems that the r modifier for s/// is fairly new. It's reported not to exist in perl 5.10.1, so it's better to avoid it when possible. Reviewed-by:
Tim Hudson <tjh@openssl.org>
-
Viktor Dukhovni authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Benjamin Kaduk authored
The entropy-gathering daemon is used only on a small number of machines. Provide a configure knob so that EGD support can be disabled by default but re-enabled on those systems that do need it. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Rich Salz authored
Reviewed-by:
Viktor Dukhovni <viktor@openssl.org>
-
Viktor Dukhovni authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Viktor Dukhovni authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Richard Levitte authored
On Unixly platforms, this doesn't matter. On VMS, it does. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
We required that a target be named 'debug-something' or to have at least one of the configuration items debug_cflags and debug_lflags for --debug to be accepted. However, there are targets with no such markings but that will still have debugging capabilities. This is particularly true for mk1mf builds, where the extra flags for debugging are figured out later on by util/mk1mf.pl. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Rich Salz authored
It turns out that -pause calls the undocumented function SSL_set_debug. That just sets flag inside the SSL structure. That flag, despite the command is never used. So remove the flag, the field, and the function. Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Viktor Dukhovni authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Richard Levitte authored
Reviewed-by:
Matt Caswell <matt@openssl.org>
-
Richard Levitte authored
Reviewed-by:
Matt Caswell <matt@openssl.org>
-
Richard Levitte authored
Reviewed-by:
Matt Caswell <matt@openssl.org>
-
Richard Levitte authored
Tell open() O_BINARY on VMS doesn't make sense, as it's possible to use more precise file attributes. However, if we're still going to fdopen() it in binary mode, we must set the fd in binary context. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
On some platforms, the shell will determine what attributes a file will have, so while the program might think it's safely outputting binary data, it's not always true. For the sake of the tests, it's therefore safer to use -out than to use redirection. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
'openssl rehash' isn't implemented on all platforms, and since 'make test' depends on a rehash of certs/demo being performed, it becomes an effective block from running tests on any platform but Unix, for the moment. It's better to fall back to c_rehash and let the tests perform everywhere. Reviewed-by:
Matt Caswell <matt@openssl.org>
-
Rich Salz authored
Reviewed-by:
Viktor Dukhovni <viktor@openssl.org>
-
Dr. Stephen Henson authored
Reviewed-by:
Viktor Dukhovni <viktor@openssl.org>
-
Viktor Dukhovni authored
Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
On VMS, the command MCR will assume SYS$SYSTEM: when the first argument lacks a directory spec. So for programs in the current directory, we add [] to tell MCR it is in the current directory. It's the same as having ./ at the start of a program on Unix so the shell doesn't start looking along $PATH. Reviewed-by:
Rich Salz <rsalz@openssl.org>
-
- 13 Jan, 2016 5 commits
-
-
Viktor Dukhovni authored
Regenerated expired test certificates, good for the next 100 years. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Viktor Dukhovni authored
Note, this now compiles, but fails tests, so further remediation is required. Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Rich Salz authored
Reviewed-by:
Dr. Stephen Henson <steve@openssl.org>
-
Viktor Dukhovni authored
Reviewed-by:
Richard Levitte <levitte@openssl.org>
-
Matt Caswell authored
This used to work but somewhere along the line it broke and was failing to detect duplicate ordinals - which was the whole point of the test! Reviewed-by:
Rich Salz <rsalz@openssl.org>
-