1. 09 12月, 2002 2 次提交
    • R
      make update · 0edad88a
      Richard Levitte 提交于
      0edad88a
    • G
      Nils Larsch submitted; · e1898724
      Geoff Thorpe 提交于
        - a patch to fix a memory leak in rsa_gen.c
        - a note about compiler warnings with unions
        - a note about improving structure element names
      
      This applies his patch and implements a solution to the notes.
      e1898724
  2. 08 12月, 2002 2 次提交
    • G
      This is a first-cut at improving the callback mechanisms used in · e9224c71
      Geoff Thorpe 提交于
      key-generation and prime-checking functions. Rather than explicitly passing
      callback functions and caller-defined context data for the callbacks, a new
      structure BN_GENCB is defined that encapsulates this; a pointer to the
      structure is passed to all such functions instead.
      
      This wrapper structure allows the encapsulation of "old" and "new" style
      callbacks - "new" callbacks return a boolean result on the understanding
      that returning FALSE should terminate keygen/primality processing.  The
      BN_GENCB abstraction will allow future callback modifications without
      needing to break binary compatibility nor change the API function
      prototypes. The new API functions have been given names ending in "_ex" and
      the old functions are implemented as wrappers to the new ones.  The
      OPENSSL_NO_DEPRECATED symbol has been introduced so that, if defined,
      declaration of the older functions will be skipped. NB: Some
      openssl-internal code will stick with the older callbacks for now, so
      appropriate "#undef" logic will be put in place - this is in case the user
      is *building* openssl (rather than *including* its headers) with this
      symbol defined.
      
      There is another change in the new _ex functions; the key-generation
      functions do not return key structures but operate on structures passed by
      the caller, the return value is a boolean. This will allow for a smoother
      transition to having key-generation as "virtual function" in the various
      ***_METHOD tables.
      e9224c71
    • R
      Implement a stateful variant if the ZLIB compression method. The old · 86a62cf1
      Richard Levitte 提交于
      stateless variant is kept, but isn't used anywhere.
      86a62cf1
  3. 07 12月, 2002 1 次提交
  4. 06 12月, 2002 2 次提交
  5. 05 12月, 2002 7 次提交
  6. 04 12月, 2002 4 次提交
  7. 03 12月, 2002 2 次提交
    • R
    • R
      I think I got it now. Apparently, the case of having to shift down · 6ab285bf
      Richard Levitte 提交于
      the divisor was a bit more complex than I first saw.  The lost bit
      can't just be discarded, as there are cases where it is important.
      For example, look at dividing 320000 with 80000 vs. 80001 (all
      decimals), the difference is crucial.  The trick here is to check if
      that lost bit was 1, and in that case, do the following:
      
      1. subtract the quotient from the remainder
      2. as long as the remainder is negative, add the divisor (the whole
         divisor, not the shofted down copy) to it, and decrease the
         quotient by one.
      
      There's probably a nice mathematical proof for this already, but I
      won't bother with that, unless someone requests it from me.
      6ab285bf
  8. 02 12月, 2002 2 次提交
  9. 01 12月, 2002 3 次提交
  10. 29 11月, 2002 3 次提交
  11. 28 11月, 2002 1 次提交
  12. 27 11月, 2002 3 次提交
  13. 26 11月, 2002 1 次提交
  14. 24 11月, 2002 1 次提交
  15. 22 11月, 2002 1 次提交
  16. 20 11月, 2002 2 次提交
  17. 19 11月, 2002 3 次提交
    • R
      Fix an unsigned/signed mismatch. · 821385ad
      Richard Levitte 提交于
      821385ad
    • R
      Add the ASN.1 structures and functions for CertificatePair, which is · 711f1a3c
      Richard Levitte 提交于
      defined as follows (according to X.509_4thEditionDraftV6.pdf):
      
      CertificatePair ::= SEQUENCE {
      	forward		[0]	Certificate OPTIONAL,
      	reverse		[1]	Certificate OPTIONAL,
      	-- at least one of the pair shall be present -- }
      
      The only thing I'm not sure about is if it's implicit or explicit tags
      that I should count on.  For now, I'm thinking explicit, but will
      gladly stand corrected.
      
      Also implement the PEM functions to read and write certificate pairs,
      and defined the PEM tag as "CERTIFICATE PAIR".
      
      This needed to be defined, mostly for the sake of the LDAP attribute
      crossCertificatePair, but may prove useful elsewhere as well.
      711f1a3c
    • R
      Determine HZ exactly as in apps/speed.c. · a1d85309
      Richard Levitte 提交于
      a1d85309