- 14 3月, 2004 2 次提交
-
-
由 Geoff Thorpe 提交于
Remove certain redundant BN_zero() initialisations, because BN_CTX_get(), BN_init(), [etc] already initialise to zero. Correct error checking in bn_sqr.c, and be less wishy-wash about how/why the result's 'top' value is set (note also, 'max' is always > 0 at this point).
-
由 Geoff Thorpe 提交于
change to work properly; BN_zero() should set 'neg' to zero as well as 'top' to match the behaviour of BN_new().
-
- 08 3月, 2004 1 次提交
-
-
由 Dr. Stephen Henson 提交于
-
- 06 3月, 2004 1 次提交
-
-
由 Dr. Stephen Henson 提交于
when X509_V_FLAG_X509_STRICT is set. Check for CRLSign in CRL issuer certificates. Reject CRLs with unhandled (any) critical extensions.
-
- 20 2月, 2004 1 次提交
-
-
由 Dr. Stephen Henson 提交于
The old raw format can't be handled by some implementations and updates to RFC2560 will make this mandatory.
-
- 01 2月, 2004 1 次提交
-
-
由 Dr. Stephen Henson 提交于
memory allocate when calling EVP_MD_CTX_copy_ex(). Without this HMAC is several times slower than < 0.9.7.
-
- 10 11月, 2003 1 次提交
-
-
由 Dr. Stephen Henson 提交于
-
- 05 11月, 2003 1 次提交
-
-
由 Geoff Thorpe 提交于
is itself experimental, and in addition may cause execution to break on existing openssl "bugs" that previously were harmless or at least invisible.
-
- 30 10月, 2003 1 次提交
-
-
由 Geoff Thorpe 提交于
except internally to the allocator BN_CTX_new(), as such this deprecates the use of BN_CTX_init() in the API. Moreover, the structure definition of BN_CTX is taken out of bn_lcl.h and moved into bn_ctx.c itself. NDEBUG should probably only be "forced" in the top-level configuration, but until it is I will avoid removing it from bn_ctx.c which might surprise people with massive slow-downs in their keygens. So I've left it in bn_ctx.c but tidied up the preprocessor logic a touch and made it more tolerant of debugging efforts.
-
- 29 10月, 2003 4 次提交
-
-
由 Geoff Thorpe 提交于
choice but to have to cast away "const" qualifiers from their prototypes. This does not remove constification restrictions from hash/compare callbacks, but allows destructor commands to be run over a tables' elements without bad casts.
-
由 Geoff Thorpe 提交于
linux system (namely mine) chokes on our definitions and uses of the "HZ" symbol in crypto/tmdiff.[ch] and apps/speed.c as a "bad function cast" (when in fact there is no function casting involved at all). In both cases, it is easily worked around by not defining a cast into the macro and jiggling the expressions slightly. In addition - this highlights some cruft in openssl that needs sorting out. The tmdiff.h header is exported as part of the openssl API despite the fact that it is ugly as the driven sludge and not used anywhere in the library, applications, or utilities. More weird still, almost identical code exists in apps/speed.c though it looks to be slightly tweaked - so either tmdiff should be updated and used by speed.c, or it should be dumped because it's obviously not useful enough. Rather than removing it for now, I've changed the API for tmdiff to at least make sense. This involves taking the object type (MS_TM) from the implementation and using it in the header rather than using "char *" in the API and casting mercilessly in the code (ugh). If someone doesn't like "MS_TM" and the "ms_time_***" naming, by all means change it. This should be a harmless improvement, because the existing API is clearly not very useful (eg. we reimplement it rather than using it in our own utils). However, someone still needs to take a hack at consolidating speed.c and tmdiff.[ch] somehow.
-
由 Geoff Thorpe 提交于
and links with OPENSSL_NO_DEPRECATED defined.
-
由 Geoff Thorpe 提交于
be) precompiled out in the API headers. This change is to ensure that if it is defined when compiling openssl, the deprecated functions aren't implemented either.
-
- 12 10月, 2003 1 次提交
-
-
由 Dr. Stephen Henson 提交于
-
- 11 10月, 2003 2 次提交
-
-
由 Dr. Stephen Henson 提交于
-
由 Dr. Stephen Henson 提交于
type is "other".
-
- 01 10月, 2003 1 次提交
-
-
由 Dr. Stephen Henson 提交于
-
- 25 9月, 2003 1 次提交
-
-
由 Ralf S. Engelschall 提交于
sure the loop does correctly stop and breaking ("division by zero") modulus operations are not performed. The (pre-generated) prime table crypto/bn/bn_prime.h was already correct, but it could not be re-generated on some platforms because of the "division by zero" situation in the script.
-
- 04 9月, 2003 3 次提交
-
-
由 Bodo Möller 提交于
0.9.6h forked into 0.9.6i and 0.9.7 ...
-
由 Dr. Stephen Henson 提交于
exiting on the first error in a request.
-
由 Dr. Stephen Henson 提交于
one, as required by SSL/TLS specs.
-
- 22 7月, 2003 2 次提交
-
-
由 Bodo Möller 提交于
Submitted by: Douglas Stebila Reviewed by: Bodo Moeller
-
由 Bodo Möller 提交于
add code for kP+lQ timings Submitted by: Douglas Stebila <douglas.stebila@sun.com> Reviewed by: Bodo Moeller
-
- 21 7月, 2003 2 次提交
-
-
由 Bodo Möller 提交于
PR: 659
-
由 Bodo Möller 提交于
typo in 0.9.6k section
-
- 20 6月, 2003 3 次提交
-
-
由 Richard Levitte 提交于
PR: 587
-
由 Richard Levitte 提交于
-
由 Richard Levitte 提交于
-
- 12 6月, 2003 2 次提交
-
-
由 Richard Levitte 提交于
-
由 Richard Levitte 提交于
-
- 10 6月, 2003 1 次提交
-
-
由 Richard Levitte 提交于
-
- 03 6月, 2003 1 次提交
-
-
由 Dr. Stephen Henson 提交于
-
- 02 6月, 2003 1 次提交
-
-
由 Dr. Stephen Henson 提交于
-
- 01 5月, 2003 3 次提交
-
-
由 Richard Levitte 提交于
-
由 Richard Levitte 提交于
crypto/store/README, crypto/store/store.h and crypto/store/str_locl.h.
-
由 Richard Levitte 提交于
-
- 30 4月, 2003 3 次提交
-
-
由 Richard Levitte 提交于
that uses them that I'll commit in a few days.
-
由 Richard Levitte 提交于
returns an index.
-
由 Richard Levitte 提交于
flags.
-
- 11 4月, 2003 1 次提交
-
-
由 Bodo Möller 提交于
-