summaryrefslogtreecommitdiffstats
path: root/crypto/asn1 (follow)
Commit message (Collapse)AuthorAgeFilesLines
...
* Various OCSP responder utility functions.Dr. Stephen Henson2001-02-032-0/+48
| | | | | | Delete obsolete OCSP functions. Largely untested at present...
* Various function for commmon operations.Dr. Stephen Henson2001-02-022-17/+5
|
* Add debugging info to new ASN1 code to trace memory leaks.Dr. Stephen Henson2001-01-241-3/+27
| | | | | | Fix PKCS7 and PKCS12 memory leaks. Initialise encapsulated content type properly.
* Fixes to various ASN1_INTEGER routines for negative case.Dr. Stephen Henson2001-01-192-1/+13
| | | | Enhance s2i_ASN1_INTEGER().
* Fix typo in OCSP ASN1 module, this causedDr. Stephen Henson2001-01-121-1/+1
| | | | | | | | | | | invalid format in OCSP request signatures. Add spaces to OCSP HTTP header. Change X509_NAME_set() there's no reason why it should return an error if the destination points to NULL... though it should if the destination is NULL.
* Fix typo in OCSP nonce extension.Dr. Stephen Henson2001-01-043-5/+9
| | | | | | | | | | | | Set correct type in ASN1_STRING for INTEGER and ENUMERATED types. Make ASN1_INTEGER_get() and ASN1_ENUMERATED_get() return -1 for invalid type rather than 0 (which is often valid). -1 may also be valid but this is less likely. Load OCSP error strings in ERR_load_crypto_strings().
* Update OCSP API.Dr. Stephen Henson2001-01-041-3/+9
| | | | | | | | | | | | | | | | | | Remove extensions argument from various functions because it is not needed with the new extension code. New function OCSP_cert_to_id() to convert a pair of certificates into an OCSP_CERTID. New simple OCSP HTTP function. This is rather primitive but just about adequate to send OCSP requests and parse the response. Fix typo in CRL distribution points extension. Fix ASN1 code so it adds a final null to constructed strings.
* Since asn1.h gets included recursively from many places, the easiestRichard Levitte2000-12-311-0/+3
| | | | | is to have asn1.h include e_os.h and e_os2.h. Of course, this makes the unofficial "non-export" status of e_os.h a bit delicate...
* Rewrite PKCS#12 code and remove some of the oldDr. Stephen Henson2000-12-313-15/+20
| | | | | | | | | | horrible macros. Fix two evil ASN1 bugs. Attempt to use 'ctx' when NULL if input is indefinite length constructed in asn1_check_tlen() and invalid pointer to ASN1_TYPE when reusing existing structure (this took *ages* to find because the new PKCS#12 code triggered it).
* If OPENSSL_BUILD_SHLIBCRYPTO (for files that end up as libcryptoRichard Levitte2000-12-312-19/+30
| | | | | | | objects) or OPENSSL_BUILD_SHLIBSSL (for files that end up as libssl objects) is defined, redefine OPENSSL_EXTERN to be OPENSSL_EXPORT. This is actually only important on Win32, and can safely be ignored in all other cases, at least for now.
* ASN1_ITEM versions of ASN1_d2i_{fp, bio} and replacement ofDr. Stephen Henson2000-12-304-5/+120
| | | | | | most of the old wrappers. A few of the old versions remain because they are non standard and the corresponding ASN1 code has not been reimplemented yet.
* ASN1_ITEM version of ASN1_dup(). Might wantDr. Stephen Henson2000-12-282-1/+27
| | | | something more efficient later...
* Add NO_ASN1_OLD to remove some old style functions:Dr. Stephen Henson2000-12-284-0/+15
| | | | | | | | | | currently OpenSSL itself wont compile with this set because some old style stuff remains. Change old functions X509_sign(), X509_verify() etc to use new item based functions. Replace OCSP function declarations with DECLARE macros.
* ASN1_ITEM versions of sign, verify, pack and unpack.Dr. Stephen Henson2000-12-285-1/+184
| | | | | The old function pointer versions will eventually go away.
* Various Win32 related fixes. Doesn't compile yet onDr. Stephen Henson2000-12-212-6/+11
| | | | | | | | | | | | | | Win32 but it is getting there... Update mkdef.pl to handle ASN1_ANY and fix headers. Stop various VC++ warnings. Include some fixes from "Peter 'Luna' Runestig" <peter@runestig.com> Remove external declaration for des_set_weak_key_flag: it doesn't exist.
* New function X509V3_extensions_print() this removes extension duplicationDr. Stephen Henson2000-12-142-52/+9
| | | | | | | | | from the print routines. Reorganisation of OCSP code: initial print routines in ocsp_prn.c. Doesn't work fully because OCSP extensions aren't reimplemented yet. Implement some ASN1 functions needed to compile OCSP code.
* New function X509_signature_print() to remove some duplicateDr. Stephen Henson2000-12-143-48/+25
| | | | code from certificate, CRL and request printing routines.
* Change the PKCS7 structure to use SEQUENCE OF for theDr. Stephen Henson2000-12-142-1/+20
| | | | | | | | | authenticated attributes: this is used to retain the original encoding and not break signatures. Support for a SET OF which reorders the STACK when encoding a structure. This will be used with the PKCS7 code.
* Constification of the data of a hash table. This means the callbackRichard Levitte2000-12-132-2/+2
| | | | | | | functions need to be constified, and therefore meant a number of easy changes a little everywhere. Now, if someone could explain to me why OBJ_dup() cheats...
* Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson2000-12-0873-6594/+4838
| | | | | | to main trunk. Lets see if the makes it to openssl-cvs :-)
* Make sure bs is assigned NULL when it's free'd, or there will be anRichard Levitte2000-11-192-0/+2
| | | | (incorrect) attempt to free it once more...
* in some new file names the first 8 characters were not uniqueUlf Möller2000-11-121-101/+88
|
* Constify DH-related code.Richard Levitte2000-11-073-4/+4
|
* Constify DSA-related code.Richard Levitte2000-11-0710-14/+17
|
* Constify the RSA parts of the ASN.1 library. Note some ugly castsRichard Levitte2000-11-079-23/+27
| | | | | that are needed in the ASN.1 macros. Hopefully, we can get rid of those in an elegant way in the future.
* The majority of the OCSP code from CertCo.Richard Levitte2000-10-273-0/+110
|
* The experimental Rijndael code moved to the main trunk.Richard Levitte2000-10-141-79/+136
| | | | make update done.
* More code for X509_print_ex() support.Dr. Stephen Henson2000-10-061-4/+10
|
* Global DirectoryString mask fix.Dr. Stephen Henson2000-10-043-79/+140
| | | | | | Add support for X509_NAME_print_ex() in req. Initial code for cutomizable X509 print routines.
* 'ranlib' doesn't always run on some systems. That's actuallyRichard Levitte2000-09-251-1/+2
| | | | | acceptable, since all that happens if it fails is a library with an index, which makes linking slower, but still working correctly.
* Catch V_ASN1_NULL.Richard Levitte2000-09-221-0/+2
|
* Fix ASN1_TYPE bug.Dr. Stephen Henson2000-09-212-6/+9
|
* Use sk_*_new_null() instead of sk_*_new(NULL), since that takes careRichard Levitte2000-09-171-1/+1
| | | | | of complaints from the compiler about data pointers and function pointers not being compatible with each other.
* Marin Kraemer <Martin.Kraemer@MchP.Siemens.De> sent us patches to makeRichard Levitte2000-09-101-0/+7
| | | | the OpenSSL commands x50 and req work better on a EBCDIC system.
* More VMS synchronisationRichard Levitte2000-09-091-0/+1
|
* Fix some CygWin problems.Ulf Möller2000-09-092-6/+5
|
* Two places where I forgot to change vms_idhacks to symhacks.Richard Levitte2000-09-081-3/+1
|
* Two new PKCS#12 demo programs.Dr. Stephen Henson2000-09-082-0/+16
| | | | | | Update PKCS12_parse(). Make the keyid in certificate aux info more usable.
* 'make update'Richard Levitte2000-09-071-133/+173
|
* Get rid of ASN1_UTCTIME_get, which cannot work with time_tBodo Möller2000-09-062-0/+48
| | | | | | | return type (on platforms where time_t is a 32 bit value). New function ASN1_UTCTIME_cmp_time_t as a replacement for use in apps/x509.c.
* 'make update'Bodo Möller2000-09-061-4/+5
|
* *BIG* verify code reorganisation.Dr. Stephen Henson2000-09-051-3/+8
| | | | | | | | | | | | | | | | | The old code was painfully primitive and couldn't handle distinct certificates using the same subject name. The new code performs several tests on a candidate issuer certificate based on certificate extensions. It also adds several callbacks to X509_VERIFY_CTX so its behaviour can be customised. Unfortunately some hackery was needed to persuade X509_STORE to tolerate this. This should go away when X509_STORE is replaced, sometime... This must have broken something though :-(
* Keep a not of original encoding in certificate requests.Dr. Stephen Henson2000-09-051-0/+21
| | | | Add new option to PKCS7_sign to exclude S/MIME capabilities.
* Fix typo in i2d_ASN1_ENUMERATEDDr. Stephen Henson2000-08-301-1/+1
| | | | | | | Fix bug in read only memory BIOs so BIO_reset() works. Add sign and verify options to dgst utility, need to update docs.
* New option to CA.pl to sign request using CA extensions.Dr. Stephen Henson2000-08-253-1/+27
| | | | | | | | | | | | | This allows intermediate CAs to be created more easily. PKCS12_create() now checks private key matches certificate. Fix typo in x509 app. Update docs. New function ASN1_STRING_to_UTF8() converts any ASN1_STRING type to UTF8.
* Add support for 'other' PKCS#7 content types.Dr. Stephen Henson2000-08-231-5/+7
|
* Fix ASN1_INTEGER_to_BN properly this time...Dr. Stephen Henson2000-08-222-2/+2
|
* Fixes to d2i_ASN1_OBJECT, ASN1_INTEGER_to_BN and a_strex.cDr. Stephen Henson2000-08-223-9/+10
|
* Various fixes...Dr. Stephen Henson2000-08-222-0/+93
| | | | | | | | | | | | | | | | initialize ex_pathlen to -1 so it isn't checked if pathlen is not present. set ucert to NULL in apps/pkcs12.c otherwise it gets freed twice. remove extraneous '\r' in MIME encoder. Allow a NULL to be passed to X509_gmtime_adj() Make PKCS#7 code use definite length encoding rather then the indefinite stuff it used previously.
* MD4 implemented. Assar Westerlund provided the digest code itself and the ↵Richard Levitte2000-08-141-345/+379
| | | | test utility, I added the bits to get a EVP interface, the command line utility and the speed test