- 09 3月, 2001 1 次提交
-
-
由 Bodo Möller 提交于
-
- 07 3月, 2001 1 次提交
-
-
由 Bodo Möller 提交于
-
- 23 2月, 2001 1 次提交
-
-
由 Geoff Thorpe 提交于
an SSL_CTX's session cache, it is necessary to compare the ssl_version at the same time (a conflict is defined, courtesy of SSL_SESSION_cmp(), as a matching id/id_length pair and a matching ssl_version). However, the SSL_SESSION that will result from the current negotiation does not necessarily have the same ssl version as the "SSL_METHOD" in use by the SSL_CTX - part of the work in a handshake is to agree on an ssl version! This is fixed by having the check function accept an SSL pointer rather than the SSL_CTX it belongs to. [Thanks to Lutz for illuminating the full extent of my stupidity]
-
- 22 2月, 2001 2 次提交
-
-
由 Geoff Thorpe 提交于
the ID will be padded out to 16 bytes if the callback attempted to generate a shorter one. The problem is that the uniqueness checking function used in callbacks may mistakenly think a 9-byte ID is unique when in fact its padded 16-byte version is not. This makes the checking function detect SSLv2 cases, and ensures the padded form is checked rather than the shorter one passed by the callback.
-
由 Geoff Thorpe 提交于
SSL/TLS session IDs in a server. According to RFC2246, the session ID is an arbitrary value chosen by the server. It can be useful to have some control over this "arbitrary value" so as to choose it in ways that can aid in things like external session caching and balancing (eg. clustering). The default session ID generation is to fill the ID with random data. The callback used by default is built in to ssl_sess.c, but registering a callback in an SSL_CTX or in a particular SSL overrides this. BTW: SSL callbacks will override SSL_CTX callbacks, and a new SSL structure inherits any callback set in its 'parent' SSL_CTX. The header comments describe how this mechanism ticks, and source code comments describe (hopefully) why it ticks the way it does. Man pages are on the way ... [NB: Lutz was also hacking away and helping me to figure out how best to do this.]
-
- 20 2月, 2001 1 次提交
-
-
由 Richard Levitte 提交于
missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
-
- 12 12月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
duplicating the certificate that is in the original SSL, remove the one that SSL_new() provided, if any. Spotted by: Mike Zeoli <zeoli@roguewave.com>
-
- 09 12月, 2000 1 次提交
-
-
由 Geoff Thorpe 提交于
DECLARE/IMPLEMENT macros now exist to create type (and prototype) safe wrapper functions that avoid the use of function pointer casting yet retain type-safety for type-specific callbacks. However, most of the usage within OpenSSL itself doesn't really require the extra function because the hash and compare callbacks are internal functions declared only for use by the hash table. So this change catches all those cases and reimplements the functions using the base-level LHASH prototypes and does per-variable casting inside those functions to convert to the appropriate item type. The exception so far is in ssl_lib.c where the hash and compare callbacks are not static - they're exposed in ssl.h so their prototypes should not be changed. In this last case, the IMPLEMENT_LHASH_*** macros have been left intact.
-
- 04 12月, 2000 1 次提交
-
-
由 Geoff Thorpe 提交于
cases of function pointer casting in lh_new() calls - and leave only the lh_doall and lh_doall_arg cases to be finished.
-
- 02 12月, 2000 2 次提交
-
-
由 Ulf Möller 提交于
-
由 Geoff Thorpe 提交于
casts) used in the lhash code are about as horrible and evil as they can be. For starters, the callback prototypes contain empty parameter lists. Yuck. This first change defines clearer prototypes - including "typedef"'d function pointer types to use as "hash" and "compare" callbacks, as well as the callbacks passed to the lh_doall and lh_doall_arg iteration functions. Now at least more explicit (and clear) casting is required in all of the dependant code - and that should be included in this commit. The next step will be to hunt down and obliterate some of the function pointer casting being used when it's not necessary - a particularly evil variant exists in the implementation of lh_doall.
-
- 01 12月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
First tentative impementation of Kerberos 5 cryptos and keys for SSL/TLS. Implemented by Vern Staats <staatsvr@asc.hpc.mil>, further hacked and distributed by Jeffrey Altman <jaltnab@columbia.edu>
-
- 30 11月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
free that, since it's shared by all SSL_CTX's, present and future.
-
- 28 11月, 2000 1 次提交
-
-
由 Bodo Möller 提交于
-
- 12 10月, 2000 1 次提交
-
-
由 Dr. Stephen Henson 提交于
-
- 26 9月, 2000 2 次提交
-
-
由 Bodo Möller 提交于
-
由 Bodo Möller 提交于
accept/connect functions; those should not change the read_ahead setting of the SSL structure.
-
- 18 9月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
of complaints from the compiler about data pointers and function pointers not being compatible with each other.
-
- 05 9月, 2000 1 次提交
-
-
由 Dr. Stephen Henson 提交于
Add new option to PKCS7_sign to exclude S/MIME capabilities.
-
- 04 9月, 2000 1 次提交
-
-
由 Bodo Möller 提交于
symbols for debugging are defined.
-
- 02 6月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
like Malloc, Realloc and especially Free conflict with already existing names on some operating systems or other packages. That is reason enough to change the names of the OpenSSL memory allocation macros to something that has a better chance of being unique, like prepending them with OPENSSL_. This change includes all the name changes needed throughout all C files.
-
- 01 6月, 2000 1 次提交
-
-
由 Geoff Thorpe 提交于
yet tighter, and also put some heat on the rest of the library by insisting (correctly) that compare callbacks used in stacks are prototyped with "const" parameters. This has led to a depth-first explosion of compiler warnings in the code where 1 constification has led to 3 or 4 more. Fortunately these have all been resolved to completion and the code seems cleaner as a result - in particular many of the _cmp() functions should have been prototyped with "const"s, and now are. There was one little problem however; X509_cmp() should by rights compare "const X509 *" pointers, and it is now declared as such. However, it's internal workings can involve recalculating hash values and extensions if they have not already been setup. Someone with a more intricate understanding of the flow control of X509 might be able to tighten this up, but for now - this seemed the obvious place to stop the "depth-first" constification of the code by using an evil cast (they have migrated all the way here from safestack.h). Fortunately, this is the only place in the code where this was required to complete these type-safety changes, and it's reasonably clear and commented, and seemed the least unacceptable of the options. Trying to take the constification further ends up exploding out considerably, and indeed leads directly into generalised ASN functions which are not likely to cooperate well with this.
-
- 28 3月, 2000 1 次提交
-
-
由 Bodo Möller 提交于
-
- 26 2月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
restored, but not as a macro this time...
-
- 24 2月, 2000 3 次提交
-
-
由 Richard Levitte 提交于
-
由 Ulf Möller 提交于
-
由 Ulf Möller 提交于
-
- 23 2月, 2000 1 次提交
-
-
由 Dr. Stephen Henson 提交于
Allow ADH to be used but not present in the default cipher list. Allow CERTIFICATE to be used in PEM headers for PKCS#7 structures: some CAs do this.
-
- 22 2月, 2000 1 次提交
-
-
由 Bodo Möller 提交于
-
- 21 2月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
designed for that. This removes the potential error to mix data and function pointers. Please note that I'm a little unsure how incorrect calls to the old ctrl functions should be handled, in som cases. I currently return 0 and that's it, but it may be more correct to generate a genuine error in those cases.
-
- 31 1月, 2000 2 次提交
-
-
由 Ulf Möller 提交于
-
由 Ulf Möller 提交于
eliminate some of the -Wcast-qual warnings (debug-ben-strict target)
-
- 24 1月, 2000 1 次提交
-
-
由 Dr. Stephen Henson 提交于
Tidy up CRYPTO_EX_DATA structures.
-
- 22 1月, 2000 1 次提交
-
-
由 Dr. Stephen Henson 提交于
minor changes. Docs haven't been added at this stage. They are probably best included in the 'ciphers' program docs.
-
- 18 1月, 2000 1 次提交
-
-
由 Richard Levitte 提交于
non-function pointers to function pointers and vice versa. The current solution is to have unions that describe the conversion we want to do, and gives us the ability to extract the type of data we want. The current solution is a quick fix, and can probably be made in a more general or elegant way.
-
- 09 1月, 2000 1 次提交
-
-
由 Dr. Stephen Henson 提交于
Remove references to 'TXT' in -inform and -outform switches.
-
- 06 1月, 2000 2 次提交
-
-
由 Bodo Möller 提交于
Add short state string for MS SGC.
-
由 Bodo Möller 提交于
-
- 02 12月, 1999 1 次提交
-
-
由 Dr. Stephen Henson 提交于
either and has a static and dynamic mix.
-
- 30 11月, 1999 1 次提交
-
-
由 Dr. Stephen Henson 提交于
SSL_CTX and SSL, functions to set them and defaults if no values set.
-