Skip to main content
swh:1:snp:dc2a5002442a00b1c0eda7c65d04ea7455e166cd
sort by:
RevisionAuthorDateMessageCommit Date
f25b0dd Ben Laurie08 October 2003, 13:12:50 UTCAnother stupid diff.08 October 2003, 13:12:50 UTC
871743a Ben Laurie08 October 2003, 10:18:02 UTCFIPS depends on object, so crypto must be built before fips.08 October 2003, 10:18:02 UTC
2821a5e Ben Laurie07 October 2003, 10:55:36 UTCDon't assume diff is any good.07 October 2003, 10:55:36 UTC
739320b Ben Laurie05 October 2003, 22:22:15 UTCNo test.05 October 2003, 22:22:15 UTC
c9ee3cc Ben Laurie04 October 2003, 14:11:45 UTCFingerprinting needs to work even if OpenSSL isn't installed yet.04 October 2003, 14:11:45 UTC
95a64aa Richard Levitte02 October 2003, 10:55:25 UTCRecent changes from 0.9.7-stable02 October 2003, 10:55:25 UTC
80be2f4 Ben Laurie30 September 2003, 16:15:49 UTCsetkey is already defined on HP/UX.30 September 2003, 16:15:49 UTC
cf54f06 Richard Levitte29 September 2003, 22:29:03 UTCMake sure we get OPENSSL_FIPS.29 September 2003, 22:29:03 UTC
5389c2d Richard Levitte29 September 2003, 19:02:26 UTCRecent changes from 0.9.7-stable29 September 2003, 19:02:26 UTC
4e2307e Richard Levitte29 September 2003, 18:46:31 UTCDetect correctly that we're in FIPS mode. Don't run testfipsssl unless in FIPS mode.29 September 2003, 18:46:31 UTC
64961dc Richard Levitte29 September 2003, 15:10:24 UTCRecent changes from 0.9.7-stable29 September 2003, 15:10:24 UTC
ed2e0e3 Richard Levitte28 September 2003, 09:26:37 UTCSynchronise util/libeay.num with the 0.9.7-stable one. Correct some depend targets in the fips directory tree. make update28 September 2003, 09:26:37 UTC
7027553 Richard Levitte28 September 2003, 09:07:11 UTCRecent changes from 0.9.7-stable28 September 2003, 09:07:11 UTC
445aa1c Ben Laurie27 September 2003, 20:07:17 UTCDSA self-test.27 September 2003, 20:07:17 UTC
2343078 Ben Laurie27 September 2003, 15:54:43 UTCSelftest RSA and some fixes.27 September 2003, 15:54:43 UTC
2fe7c59 Richard Levitte27 September 2003, 10:13:11 UTCRecent changes from 0.9.7-stable.27 September 2003, 10:13:11 UTC
899ffab Ben Laurie25 September 2003, 20:04:40 UTCMake FIPS work again.25 September 2003, 20:04:40 UTC
577332d Ben Laurie25 September 2003, 20:01:57 UTCConstification.25 September 2003, 20:01:57 UTC
3b84ce3 Richard Levitte25 September 2003, 12:24:52 UTCUse OPENSSL_FIPS instead of FIPS.25 September 2003, 12:24:52 UTC
2667b06 Richard Levitte25 September 2003, 12:22:46 UTCUhmm, o_str.o, not o_str.c...25 September 2003, 12:22:46 UTC
a26be03 Dr. Stephen Henson21 September 2003, 02:12:36 UTCIn order to get the expected self signed error when calling X509_verify_cert() in x509.c the cert should not be added to the trusted store.21 September 2003, 02:12:36 UTC
d5adc4b Ben Laurie14 September 2003, 13:01:54 UTCMissing file.14 September 2003, 13:01:54 UTC
fe2d15d Ben Laurie13 September 2003, 20:41:53 UTCDon't debug.13 September 2003, 20:41:53 UTC
c45c8f3 Ben Laurie13 September 2003, 17:03:54 UTCMake TLSv1 work in FIPS mode.13 September 2003, 17:03:54 UTC
b09c9a9 Ben Laurie13 September 2003, 16:57:56 UTCAdd a debug flag.13 September 2003, 16:57:56 UTC
a2fd4d0 Ben Laurie13 September 2003, 13:36:13 UTCTemporarily remove FIPS test that doesn't work.13 September 2003, 13:36:13 UTC
52fc641 Ben Laurie11 September 2003, 21:37:01 UTCAdd RSA to FIPS.11 September 2003, 21:37:01 UTC
f29f610 Richard Levitte10 September 2003, 09:15:22 UTCmake update10 September 2003, 09:15:22 UTC
27d6381 Richard Levitte10 September 2003, 09:15:09 UTCInclude "e_os.h" instead of "../e_os.h", and trust the building procedure to give the correct -I options to the compiler. This is *especially* true for test programs that appear in two places, with different paths to e_os.h depending on where they are built.10 September 2003, 09:15:09 UTC
fa68935 Richard Levitte10 September 2003, 09:06:01 UTCInclude openssl/fips.h outside of the check for FIPS, so make depend doesn't differ between FIPS and non-FIPS modes.10 September 2003, 09:06:01 UTC
b2f94f8 Richard Levitte10 September 2003, 09:05:06 UTCWe currently define FIPS, not OPENSSL_FIPS. The reason for this is (probably) that FIPS is an entirely internal macro, and is not accessible by third-party authors.10 September 2003, 09:05:06 UTC
ad6eec3 Dr. Stephen Henson10 September 2003, 00:44:53 UTCUse BIO_snprintf() instead of snprintf(). Update hashes.10 September 2003, 00:44:53 UTC
25c578f Dr. Stephen Henson10 September 2003, 00:16:42 UTCTypo.10 September 2003, 00:16:42 UTC
22f0838 Dr. Stephen Henson10 September 2003, 00:10:34 UTCInclude e_os.h in a few cases (to pick up str(n)icmp defs). Disable a few tests if not FIPS.10 September 2003, 00:10:34 UTC
c61e45f Dr. Stephen Henson09 September 2003, 23:43:29 UTCUpdate hashes. Fix a few typos in o_str.c09 September 2003, 23:43:29 UTC
7418027 Richard Levitte09 September 2003, 16:39:41 UTCmake update09 September 2003, 16:39:41 UTC
d344672 Richard Levitte09 September 2003, 16:38:16 UTCMove the FIPS check so make depend doesn't give different results depending on FIPS mode.09 September 2003, 16:38:16 UTC
245dac4 Richard Levitte09 September 2003, 14:48:52 UTCGeneralise the definition of strcasecmp() and strncasecmp() for platforms that don't (necessarely) have it. In the case of VMS, this means moving a couple of functions from apps/ to crypto/ and make them general (although only used privately).09 September 2003, 14:48:52 UTC
c377882 cvs2svn09 September 2003, 14:48:37 UTCThis commit was manufactured by cvs2svn to create branch 'OpenSSL-fips- 0_9_7-stable'.09 September 2003, 14:48:37 UTC
e6fa67f Richard Levitte09 September 2003, 14:48:36 UTCGeneralise the definition of strcasecmp() and strncasecmp() for platforms that don't (necessarely) have it. In the case of VMS, this means moving a couple of functions from apps/ to crypto/ and make them general (although only used privately).09 September 2003, 14:48:36 UTC
c2cdb1a Richard Levitte09 September 2003, 09:10:45 UTCTest data files should not be part of the TEST value, or util/mk1mf.pl gets confused... The separate TESTDATA variable was inspired from crypto/evp/Makefile.ssl.09 September 2003, 09:10:45 UTC
31b28f9 Dr. Stephen Henson08 September 2003, 17:01:48 UTCPut #ifdef FIPS round FIPS DSA_generate_parameters . #if 0 unimplemented ciphers so mkdef.pl doesn't pick them up.08 September 2003, 17:01:48 UTC
f61bc95 Richard Levitte08 September 2003, 16:49:37 UTCRecent changes from 0.9.7-stable.08 September 2003, 16:49:37 UTC
64a014a Richard Levitte08 September 2003, 16:43:55 UTCMake it builadable in non-FIPS mode. The current solution is very Unix-bound, and there is probably a better way to do this.08 September 2003, 16:43:55 UTC
9ea72d3 Geoff Thorpe08 September 2003, 15:47:55 UTCThese should be write-locks, not read-locks.08 September 2003, 15:47:55 UTC
a86eff4 Dr. Stephen Henson08 September 2003, 12:49:08 UTCincluded <string.h> in fips.c to pick up memcmp definition. update fips_make_sha1 to use fips_err.h update hashes.08 September 2003, 12:49:08 UTC
4c4ef33 Dr. Stephen Henson08 September 2003, 12:39:13 UTCUpdate dependencies.08 September 2003, 12:39:13 UTC
1ce9c76 Richard Levitte08 September 2003, 11:37:31 UTCMore files to ignore.08 September 2003, 11:37:31 UTC
19c8d4a Richard Levitte08 September 2003, 11:36:32 UTCIgnore the directory rsp (introduced when running tests).08 September 2003, 11:36:32 UTC
e7d580a Richard Levitte08 September 2003, 11:35:23 UTCSome more files to ignore.08 September 2003, 11:35:23 UTC
1f8e046 Richard Levitte08 September 2003, 11:33:07 UTCSince fips_err is really just used as a header by fips_err_wrapper.c, let's change it's suffix from .c to .h. This also avoids some otherwise very mysterious (and probably sensible from a historical point of view :-)) name changes done by mk1mf.pl.08 September 2003, 11:33:07 UTC
7e1ef2d Richard Levitte08 September 2003, 10:00:23 UTCWhen building the FIPS test binaries, also build the corresponding fingerprints.08 September 2003, 10:00:23 UTC
ccf61c8 Richard Levitte08 September 2003, 09:59:43 UTCRemove some unneeded space.08 September 2003, 09:59:43 UTC
6d02c53 Richard Levitte08 September 2003, 09:59:11 UTCUse $(TOP) instead of ../.. as much as possible.08 September 2003, 09:59:11 UTC
dac0d33 Richard Levitte08 September 2003, 09:57:57 UTCBecause of changes in Makefile.ssl, the files got reordered.08 September 2003, 09:57:57 UTC
f63ff4a Richard Levitte08 September 2003, 09:57:27 UTCProduce libcrypto.sha1 directly after building the libraries. Otherwise, the test target will fail because libcrypto.sha1 is missing or not up to date.08 September 2003, 09:57:27 UTC
9ef37a8 Richard Levitte08 September 2003, 09:17:36 UTCmake update.08 September 2003, 09:17:36 UTC
fbb4008 Richard Levitte08 September 2003, 09:17:13 UTCfips_err.c doesn't belong with the headers.08 September 2003, 09:17:13 UTC
549d89f Richard Levitte08 September 2003, 09:16:39 UTCInclude all the fips directories.08 September 2003, 09:16:39 UTC
5db9e7b Richard Levitte08 September 2003, 09:16:17 UTCHandle the "fips" option.08 September 2003, 09:16:17 UTC
104f570 Ben Laurie07 September 2003, 11:13:54 UTCMissing file.07 September 2003, 11:13:54 UTC
e1015c1 Ben Laurie07 September 2003, 10:59:34 UTCSamples.07 September 2003, 10:59:34 UTC
97e62d5 Ben Laurie07 September 2003, 10:53:13 UTCAdd samples.07 September 2003, 10:53:13 UTC
9aca5b2 Dr. Stephen Henson06 September 2003, 16:57:16 UTCFix signed/unsigned warning.06 September 2003, 16:57:16 UTC
b8b47f6 Ben Laurie06 September 2003, 13:31:40 UTCAdd fingerprint chain and checking.06 September 2003, 13:31:40 UTC
b5da126 Ben Laurie06 September 2003, 10:41:27 UTCMake the problem clearer.06 September 2003, 10:41:27 UTC
a7d6495 Richard Levitte05 September 2003, 14:09:40 UTCInclude e_os.h to get the proper definition of OPENSSL_UNISTD, and use that macro. It's possible that OPENSSL_UNISTD_IO should be used instead of OPENSSL_UNISTD, for the MSDOS case...05 September 2003, 14:09:40 UTC
f743ef2 Richard Levitte05 September 2003, 13:41:04 UTCmake update05 September 2003, 13:41:04 UTC
79176d6 Richard Levitte05 September 2003, 13:37:28 UTCALWAYS check the standalone source. make update.05 September 2003, 13:37:28 UTC
e726e5f Richard Levitte05 September 2003, 13:26:52 UTCMake sure the compilation of the FIPS stuff goes through even in non-FIPS mode. Update the appropriate fingerprints accordingly. (something is weird, someone else was working on the same stuff, and removed fips_sha1_selftest.c from fips/sha1/standalone.sha1...)05 September 2003, 13:26:52 UTC
c1a3237 Dr. Stephen Henson05 September 2003, 13:00:34 UTCFix signed/unsigned warnings and C++ comments. Update hashes05 September 2003, 13:00:34 UTC
6b211d8 Richard Levitte05 September 2003, 12:22:21 UTCInclude string.h and stdlib.h where needed, to avoid warnings about strlen(), memcmp(), exit() and others to be used without a proper declaration. Update the appropriate fingerprints accordingly.05 September 2003, 12:22:21 UTC
f3bda01 Ben Laurie04 September 2003, 16:46:42 UTCMissing files.04 September 2003, 16:46:42 UTC
a907751 Bodo Möller04 September 2003, 12:52:56 UTCcertain changes have to be listed twice in this file because OpenSSL 0.9.6h forked into 0.9.6i and 0.9.7 ...04 September 2003, 12:52:56 UTC
4ccac96 Ben Laurie04 September 2003, 10:22:13 UTCAutomagically seed FIPS PRNG. Add OPENSSL_FIPS flag.04 September 2003, 10:22:13 UTC
4ef3352 Ben Laurie04 September 2003, 09:04:24 UTC-DFIPS may be the last thing on the line.04 September 2003, 09:04:24 UTC
1f1bd3a Ben Laurie04 September 2003, 07:17:43 UTCSelftests.04 September 2003, 07:17:43 UTC
560dfd2 Dr. Stephen Henson03 September 2003, 23:56:01 UTCNew -ignore_err option in ocsp application to stop the server exiting on the first error in a request.03 September 2003, 23:56:01 UTC
14f3d7c Dr. Stephen Henson03 September 2003, 23:47:34 UTCOnly accept a client certificate if the server requests one, as required by SSL/TLS specs.03 September 2003, 23:47:34 UTC
b2293a6 Ben Laurie03 September 2003, 14:11:33 UTCDSA stuff and tests.03 September 2003, 14:11:33 UTC
766332a Ben Laurie31 August 2003, 09:50:11 UTCMore test vectors.31 August 2003, 09:50:11 UTC
51f7c5a Ben Laurie31 August 2003, 08:52:39 UTCAdd test.31 August 2003, 08:52:39 UTC
fc0376e Ben Laurie30 August 2003, 17:28:08 UTCHandle 3DES tests.30 August 2003, 17:28:08 UTC
51c568b Ben Laurie30 August 2003, 15:50:26 UTCAdd 3-DES CFB-r mode (no test vectors yet).30 August 2003, 15:50:26 UTC
2b3784c Ben Laurie30 August 2003, 15:35:37 UTCUpdated test vectors (probably incorrect, but who am I to question?).30 August 2003, 15:35:37 UTC
2e9f3c4 Ben Laurie30 August 2003, 14:49:08 UTCOops. Need to allocate extra buffer.30 August 2003, 14:49:08 UTC
aac3861 Ben Laurie30 August 2003, 13:19:03 UTCBuild the test program when needed.30 August 2003, 13:19:03 UTC
e0162fa Ben Laurie29 August 2003, 18:58:03 UTCRemove unused functions/data.29 August 2003, 18:58:03 UTC
510dc1e Dr. Stephen Henson21 August 2003, 12:32:12 UTCoutlen should be int * in out_utf8.21 August 2003, 12:32:12 UTC
563c05e Bodo Möller14 August 2003, 10:33:56 UTCfix out-of-bounds check in lock_dbg_cb (was too lose to detect all invalid cases) PR: 67414 August 2003, 10:33:56 UTC
a8e3195 Richard Levitte14 August 2003, 07:02:27 UTCUndo the change that left LD_LIBRARY_PATH unchanged. The errors I saw weren't due to that, but to a change on the SCO machines I used for testing, where my $PATH was suddenly incorrect.14 August 2003, 07:02:27 UTC
643ecd2 Bodo Möller11 August 2003, 18:56:22 UTCmake sure no error is left in the queue that is intentionally ignored11 August 2003, 18:56:22 UTC
4435349 Richard Levitte11 August 2003, 10:31:21 UTCMake sure the order matches the command line in Makefile.ssl.11 August 2003, 10:31:21 UTC
ec47bb7 Richard Levitte11 August 2003, 10:24:52 UTC- Add a configuration keyword "fips" to compile with FIPS implementations. - Reorder the build so the standalone FIPS SHA1 checker is built first. - Add necessary defines to avoid symbol clashes between FIPS and non-FIPS implementations. - Change necessary signatures. - Correct bugs in FIPS build Makefiles. - make update11 August 2003, 10:24:52 UTC
bf50d5b cvs2svn08 August 2003, 10:08:15 UTCThis commit was manufactured by cvs2svn to create branch 'OpenSSL-fips- 0_9_7-stable'.08 August 2003, 10:08:15 UTC
94a1183 Richard Levitte08 August 2003, 10:08:14 UTCAvoid clashing with the regular DES functions when not compiling with -DFIPS. This is basically only visible when building with shared library supoort...08 August 2003, 10:08:14 UTC
88401ed Richard Levitte07 August 2003, 11:57:42 UTCCorrect two problems, found by Martin Kochanski <cardbox@easynet.co.uk>: 1. CreateToolhelp32Snapshot returns INVALID_HANDLE_VALUE, not NULL, on error. 2. On Windows CE, a snapshot handle is closed with CloseToolhelp32Snapshot, not CloseHandle.07 August 2003, 11:57:42 UTC
30e4269 Richard Levitte07 August 2003, 11:57:21 UTCCorrect two problems, found by Martin Kochanski <cardbox@easynet.co.uk>: 1. CreateToolhelp32Snapshot returns INVALID_HANDLE_VALUE, not NULL, on error. 2. On Windows CE, a snapshot handle is closed with CloseToolhelp32Snapshot, not CloseHandle.07 August 2003, 11:57:21 UTC
59315df Bodo Möller06 August 2003, 10:38:37 UTCadd OpenSSL license fix typo06 August 2003, 10:38:37 UTC
3aa8d3a Bodo Möller06 August 2003, 10:36:25 UTCadd OpenSSL license fix typo06 August 2003, 10:36:25 UTC
back to top