1. 06 10月, 2002 2 次提交
  2. 04 10月, 2002 1 次提交
  3. 30 7月, 2002 1 次提交
    • L
      OpenSSL Security Advisory [30 July 2002] · c046fffa
      Lutz Jänicke 提交于
      Changes marked "(CHATS)" were sponsored by the Defense Advanced
      Research Projects Agency (DARPA) and Air Force Research Laboratory,
      Air Force Materiel Command, USAF, under agreement number
      F30602-01-2-0537.
      c046fffa
  4. 21 6月, 2002 1 次提交
    • G
      Make sure any ENGINE control commands make local copies of string · a6c6874a
      Geoff Thorpe 提交于
      pointers passed to them whenever necessary. Otherwise it is possible the
      caller may have overwritten (or deallocated) the original string data
      when a later ENGINE operation tries to use the stored values.
      
      Submitted by: Götz Babin-Ebell <babinebell@trustcenter.de>
      Reviewed by: Geoff Thorpe
      PR: 98
      a6c6874a
  5. 08 2月, 2002 1 次提交
  6. 26 9月, 2001 1 次提交
    • G
      This change replaces the ENGINE's underlying mechanics with the new · b6d1e52d
      Geoff Thorpe 提交于
      ENGINE_TABLE-based stuff - as described in crypto/engine/README.
      
      Associated miscellaneous changes;
       - the previous cipher/digest hooks that hardwired directly to EVP's
         OBJ_NAME-based storage have been backed out. New cipher/digest support
         has been constructed and will be committed shortly.
       - each implementation defines its own ENGINE_load_<name> function now.
       - the "openssl" ENGINE isn't needed or loaded any more.
       - core (not algorithm or class specific) ENGINE code has been split into
         multiple files to increase readability and decrease linker bloat.
       - ENGINE_cpy() has been removed as it wasn't really a good idea in the
         first place and now, because of registration issues, can't be
         meaningfully defined any more.
       - BN_MOD_EXP[_CRT] support is removed as per the README.
       - a bug in enginetest.c has been fixed.
      
      NB: This commit almost certainly breaks compilation until subsequent
      changes are committed.
      b6d1e52d
  7. 15 9月, 2001 1 次提交
  8. 06 9月, 2001 1 次提交
  9. 04 9月, 2001 1 次提交
    • G
      This changes the existing hardware ENGINE implementations to dynamically · 2dc5383a
      Geoff Thorpe 提交于
      declare their own error strings so that they can be more easily compiled as
      external shared-libraries if desired. Also, each implementation has been
      given canonical "dynamic" support at the base of each file and is only
      built if the ENGINE_DYNAMIC_SUPPORT symbol is defined.
      
      Also, use "void" prototypes rather than empty prototypes in engine_int.h.
      
      This does not yet;
        (i) remove error strings when unloading,
       (ii) remove the redundant ENGINE_R_*** codes (though ENGINE_F_*** codes
            have gone), or
      (iii) provide any instructions on how to build shared-library ENGINEs or
            use them.
      
      All are on their way.
      2dc5383a
  10. 26 4月, 2001 1 次提交
  11. 19 4月, 2001 2 次提交
    • G
      Some more tweaks to ENGINE code. · e2f3ae12
      Geoff Thorpe 提交于
      This change adds some basic control commands to the existing ENGINEs
      (except the software 'openssl' engine). All these engines currently load
      shared-libraries for hardware APIs, so they've all been given "SO_PATH"
      commands that will configure the chosen ENGINE to load its shared library
      from the given path. Eg. by calling;
          ENGINE_ctrl_cmd_string(e, "SO_PATH", <path>, 0).
      
      The nCipher 'chil' ENGINE has also had "FORK_CHECK" and "THREAD_LOCKING"
      commands added so these settings could be handled via application-level
      configuration rather than in application source code.
      
      Changes to "openssl engine" to test and examine these control commands will
      be made shortly. It will also provide the necessary tips to application
      programs wanting to support these dynamic control commands.
      e2f3ae12
    • G
      Some more tweaks to ENGINE code. · 59bc3126
      Geoff Thorpe 提交于
      The existing ENGINEs (including the default 'openssl' software engine) were
      static, declared inside the source file for each engine implementation. The
      reason this was not going boom was that all the ENGINEs had reference
      counts that never hit zero (once linked into the internal list, each would
      always have at least 1 lasting structural reference).
      
      To fix this so it will stay standing when an "unload" function is added to
      match ENGINE_load_builtin_engines(), the "constructor" functions for each
      ENGINE implementation have been changed to dynamically allocate and
      construct their own ENGINEs using API functions. The other benefit of this
      is that no ENGINE implementation has to include the internal "engine_int.h"
      header file any more.
      59bc3126
  12. 18 4月, 2001 1 次提交
    • G
      Some more tweaks to ENGINE code. · 404f952a
      Geoff Thorpe 提交于
      ENGINE handler functions should take the ENGINE structure as a parameter -
      this is because ENGINE structures can be copied, and like other
      structure/method setups in OpenSSL, it should be possible for init(),
      finish(), ctrl(), etc to adjust state inside the ENGINE structures rather
      than globally. This commit includes the dependant changes in the ENGINE
      implementations.
      404f952a
  13. 08 3月, 2001 1 次提交
  14. 20 2月, 2001 1 次提交
    • R
      Make all configuration macros available for application by making · cf1b7d96
      Richard Levitte 提交于
      sure they are available in opensslconf.h, by giving them names starting
      with "OPENSSL_" to avoid conflicts with other packages and by making
      sure e_os2.h will cover all platform-specific cases together with
      opensslconf.h.
      
      I've checked fairly well that nothing breaks with this (apart from
      external software that will adapt if they have used something like
      NO_KRB5), but I can't guarantee it completely, so a review of this
      change would be a good thing.
      cf1b7d96
  15. 14 11月, 2000 1 次提交
  16. 07 11月, 2000 3 次提交
  17. 27 10月, 2000 1 次提交