- 20 Sep, 2016 11 commits
-
-
Rich Salz authored
Check arg count and print an error message. Reviewed-by:
Richard Levitte <levitte@openssl.org> (cherry picked from commit 13a46183)
-
Richard Levitte authored
Reviewed-by:
Tim Hudson <tjh@openssl.org> (cherry picked from commit a19228b7)
-
Richard Levitte authored
Reviewed-by:
Rich Salz <rsalz@openssl.org> (cherry picked from commit 6e836806)
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
Call SSL_CTX_new() before doing any configuration. (or call OPENSSL_ssl_init()) Reviewed-by:
-
Richard Levitte authored
'ECDHParameters = Automatic' isn't accepted. Reviewed-by:
-
Richard Levitte authored
Note: server-cmod doesn't seem to do things right... from loading cmod.cnf, it tries to load libssl_conf.so. Reviewed-by:
-
FdaSilvaYY authored
CMS_NOOLDMIMETYPE and PKCS7_NOOLDMIMETYPE are unused in pkcs7/cms code. Reviewed-by:
Andy Polyakov <appro@openssl.org> Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
- 19 Sep, 2016 4 commits
-
-
Matt Caswell authored
We were casting num_alloc to size_t in lots of places, or just using it in a context where size_t makes more sense - so convert it. This simplifies the code a bit. Also tweak the style in stack.c a bit following on from the previous commit Reviewed-by:
-
Guido Vranken authored
Reviewed-by:
Matt Caswell <matt@openssl.org> (cherry picked from commit 9731a9ce)
-
FdaSilvaYY authored
no-rsa is no longer an option since 7ec8de16 Fix a typo about poly1305 Reviewed-by:
-
Richard Levitte authored
Some compilers complain about unused variables, and some tests do not run well without OCSP. Reviewed-by:
-
- 17 Sep, 2016 3 commits
-
-
Richard Levitte authored
In an earlier attempt to simplify the processing of disabled options, 'no-err' and 'no-async' stopped working properly. 'err' and 'async' are directories under 'crypto/', but they are special insofar that they can't be simply skipped, like all the algorithm directories can, so they need special treatment among the disablable things. Reviewed-by:
-
Richard Levitte authored
While we're at it, correct the fault in windows-makefile.tmpl Reviewed-by:
-
FdaSilvaYY authored
APP_INFO is currently a field of MEM struct. Reviewed-by:
-
- 16 Sep, 2016 4 commits
-
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
They are now relative paths as well Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
- 15 Sep, 2016 6 commits
-
-
Matt Caswell authored
This reverts commit 77a6be4d . There were some unexpected side effects to this commit, e.g. in SSLv3 a warning alert gets sent "no_certificate" if a client does not send a Certificate during Client Auth. With the above commit this causes the connection to abort, which is incorrect. There may be some other edge cases like this so we need to have a rethink on this. Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
Reviewed-by:
-
Richard Levitte authored
This is needed, because on VMS, select() can only be used on sockets. being able to use select() on all kinds of file descriptors is unique to Unix. So, the solution for VMS is to create a layer that translates input from standard input to socket communication. Reviewed-by:
-
- 14 Sep, 2016 3 commits
-
-
Rich Salz authored
Where -curves, etc., are defined: SSL_CONF_cmd Reviewed-by: -
Rich Salz authored
Resolves GH1515 and GH1509. Reviewed-by:
-
Matt Caswell authored
The internal SRP function t_fromb64() converts from base64 to binary. It does not validate that the size of the destination is sufficiently large - that is up to the callers. In some places there was such a check, but not in others. Add an argument to t_fromb64() to provide the size of the destination buffer and validate that we don't write too much data. Also add some sanity checks to the callers where appropriate. With thanks to Shi Lei for reporting this issue. Reviewed-by:
-
- 13 Sep, 2016 9 commits
-
-
Richard Levitte authored
Also, enlarge test group 20 to include openssl commands that aren't tested otherwise Reviewed-by:
-
Richard Levitte authored
RT#4674 Reviewed-by:
-
Andy Grundman authored
This flag got moved after -xarch=v9 in 1.1.0 and had the unexpected side effect of the compiler building for 32-bit v8plusa instead of v9. GH#1521 CLA: none; trivial Signed-off-by:
-
Viktor Szakats authored
Reviewed-by:
-
Viktor Szakats authored
it appears when using gcc/mingw: ``` apps/s_client.c:815:9: warning: variable 'at_eof' set but not used [-Wunused-but-set-variable] int at_eof = 0; ^~~~~~ ``` Reviewed-by: -
Andy Polyakov authored
Reviewed-by:
-
Andy Polyakov authored
Reviewed-by:
-
Matt Caswell authored
Signed-off-by:
-
Matt Caswell authored
A peer continually sending unrecognised warning alerts could mean that we make no progress on a connection. We should abort rather than continuing if we receive an unrecognised warning alert. Thanks to Shi Lei for reporting this issue. Reviewed-by:
-
