4c99916337
va_{start,end} audit:
...
Make sure that each va_start has one and only one matching va_end,
especially in error cases.
If the va_list is used multiple times, do multiple va_starts/va_ends.
If a function gets va_list as argument, don't let it use va_end (since
it's the callers responsibility).
Improved by comments from enami and christos -- thanks!
Heimdal/krb4/KAME changes already fed back, rest to follow.
Inspired by, but not not based on, OpenBSD.
2001-09-24 13:22:25 +00:00
7fc834dc03
upgrade to 0.9.6b. no shlib major/minor bump is necessary.
2001-07-11 06:50:53 +00:00
0eb42056bd
OpenSSL 0.9.6b
2001-07-11 03:54:20 +00:00
a549080f85
OpenSSL 0.9.6b
2001-07-11 03:53:32 +00:00
7d076b538c
fix PRNG weakness. the workaround presented on bugtraq posting.
2001-07-10 14:01:26 +00:00
aae394a457
make it compile on macppc (or, platforms where char = unsigned char)
...
From: Dave Huang <khym@azeotrope.org>
2001-04-14 08:36:12 +00:00
08f45e7850
fix unterminated L<>.
2001-04-12 09:42:45 +00:00
974c617dfe
sync better with 0.9.6a.
2001-04-12 07:57:56 +00:00
35a07da1df
use openssl 0.9.6a. shlib major # is bumped for libcrypto, libssl and
...
all kerberos libraries.
2001-04-12 07:48:03 +00:00
75902e8d9b
OpenSSL 0.9.6a
2001-04-12 03:10:36 +00:00
3095531005
OpenSSL 0.9.6a
2001-04-12 03:08:43 +00:00
b9e8ac0f0f
OpenSSL 0.9.6a
2001-04-12 03:06:03 +00:00
9e3025d914
des_cblock_print_file() does not really exist.
2001-04-11 10:13:28 +00:00
6b5ab77765
fo -> for
2001-04-02 18:25:34 +00:00
0265b9e0c2
redo 1.1 -> 1.2. on RAND_file_name(), return /dev/urandom by default.
...
RAND_{load,write}_file() takes care of device file case. from openbsd.
2001-03-26 18:08:25 +00:00
522ac04d08
backout 1.1 -> 1.2 (use /dev/urandom if no value can be found),
...
/dev/urandom is not a normal file - there'll be no EOF.
noticed by Manuel Bouyer.
2001-03-21 19:49:50 +00:00
286bcc01a3
don't use LOG_CONS
2001-01-11 02:58:05 +00:00
1473c569f5
eliminated redundant decl.
2001-01-07 00:01:16 +00:00
b1375d5035
do not look at environment variables if issetugid() == 0.
...
use random number device file as the default value.
from openbsd.
2001-01-05 06:22:32 +00:00
e33acbd7b7
Correct printf format (used with integers, not longs).
2000-10-19 15:10:33 +00:00
c011ac8db6
- Correct missing closedir(3) in SSL_add_dir_cert_subjects_to_stack().
...
This should be fix the bug that apache enabled SSL may exhaust its
file descriptors. Noted by TAKANO Yuji <takachan@running-dog.net>
on apache@ecc.u-tokyo.ac.jp, apache mailing list in Japanese.
He had already sent a bug report to openssl-dev@openssl.org , but it
wasn't fixed in openssl-0.9.6. :-(
2000-10-13 01:47:27 +00:00
612e4c298a
define DES_LONG in time to be used by later header files.
2000-10-08 18:42:03 +00:00
a001cd4e77
exit 0 on success, 1 on error
2000-10-06 06:21:16 +00:00
dc3402136b
Constify variables containing format strings
2000-10-05 14:32:50 +00:00
18e8d6decc
do not loop forever
2000-10-03 15:07:14 +00:00
42e4adfd95
make it useful as test (exit 0 if successful)
2000-10-03 14:45:36 +00:00
0b86bc5a1c
nuke #define for changing variable size (affects ABI).
2000-10-03 04:00:19 +00:00
169eefc02f
move rc5/idea dummy functions from crypto/dist/openssl/crypto to lib/libcrypto.
...
they are not part of the openssl distribution.
suggested by thorpej.
2000-10-01 22:17:59 +00:00
9c7b3bf3d5
nuke all NO_<algorithm name> in header file. they change ABI due to
...
#ifdef in struct/union definitions, and are bad for us shipping library binary.
2000-10-01 22:13:14 +00:00
563bf184ad
improve abort message, when RC5/IDEA in libcrypto (dummy) is called.
2000-09-30 14:29:16 +00:00
8d26d03189
repair openssl (libcrypto) for non-32bit architecture.
...
don't use unsigned long where 32bit unsigned variable is asked for.
use u_int32_t. (not sure if uint32_t is better or not, but anyway,
u_int32_t <-> uint32_t should not raise binary compatibility issue)
PR10921.
TODO: have arch-dependent Makefiles where we supply -DFOO for optimization.
(do not change size of variable though)
XXX: we should actually nuke all other #ifdef in /usr/include/openssl/*.h,
however, that needs a lot of work and will make future openssl upgrade harder.
remove RC5 and IDEA by default. build them separately as
libcrypto_{rc5,idea}.a. put dummy function, which is "warning to stderr
and exit(1)". NOCRYPTO_{RC5,IDEA} are obsoleted.
PR10883.
2000-09-30 00:23:28 +00:00
206c5781b6
des_random_key() returns void.
2000-07-16 09:57:53 +00:00
11e7166667
back out part of previous; des_random_key() returns void again.
2000-07-16 09:50:33 +00:00
542954c318
delete removed files.
2000-07-16 05:57:01 +00:00
8c7937883e
merge cornflakes.
2000-07-16 05:55:10 +00:00
2429f6a29f
OpenSSL 0.9.5a import.
2000-07-16 05:03:53 +00:00
f3b213ec53
Do previous slightly differently, i.e. commit the change that I
...
had made to add the prototypes, but forgot to commit. This version
more closely matches the crypto-us version it was derived from.
2000-06-22 13:59:13 +00:00
61cad8ca49
Add missing prototypes for:
...
des_set_random_generator_seed, des_new_random_key and des_init_random_number_generator
This fix the compile problems in lib/libtelnet.
2000-06-22 09:01:42 +00:00
21b1800004
The pieces of OpenSSL missing from netbsd-cryptosrc-intl.
2000-06-16 05:28:49 +00:00
1dc0dc5fb1
Import OpenSSL 0.9.4 from netbsd-cryptosrc-intl.
2000-06-14 22:44:19 +00:00
wiz