Commit Graph

176 Commits

Author SHA1 Message Date
Geoff Thorpe 4c3296960d Remove the dual-callback scheme for numeric and pointer thread IDs,
deprecate the original (numeric-only) scheme, and replace with the
CRYPTO_THREADID object. This hides the platform-specifics and should reduce
the possibility for programming errors (where failing to explicitly check
both thread ID forms could create subtle, platform-specific bugs).

Thanks to Bodo, for invaluable review and feedback.
2008-08-06 15:54:15 +00:00
Bodo Möller 2cd81830ef sync with 0.9.8 branch 2008-05-28 22:30:28 +00:00
Lutz Jänicke d18ef847f4 Remove all root CA files (beyond test CAs including private key)
from the OpenSSL distribution.
2008-05-23 08:59:23 +00:00
Dr. Stephen Henson 930875ef77 Clarify FAQ. 2008-01-23 19:21:00 +00:00
Lutz Jänicke 11d01d371f Release OpenSSL 0.9.8g with various fixes to issues introduced with 0.9.8f 2007-10-19 08:26:03 +00:00
Ben Laurie fdb2fe6dc2 New release. 2007-10-11 19:31:29 +00:00
Lutz Jänicke 7bbce69721 Port from 0.9.8-stable 2007-09-24 11:01:18 +00:00
Dr. Stephen Henson ac63b8370e Update FAQ,NEWS in HEAD. 2007-02-23 13:16:38 +00:00
Dr. Stephen Henson 29a1bb07e5 Additional detail. 2006-09-06 11:59:04 +00:00
Bodo Möller 99e9a90081 update information on "current version" ... 2006-09-06 11:54:19 +00:00
Dr. Stephen Henson 715020e334 Add an FAQ. 2006-09-06 11:53:50 +00:00
Bodo Möller 48fc582f66 New functions CRYPTO_set_idptr_callback(),
CRYPTO_get_idptr_callback(), CRYPTO_thread_idptr() for a 'void *' type
thread ID, since the 'unsigned long' type of the existing thread ID
does not always work well.
2006-06-23 15:21:36 +00:00
Dr. Stephen Henson 11e46bd7ae Update FAQ. 2006-05-04 14:22:00 +00:00
Dr. Stephen Henson 246e09319c Fix bug where freed OIDs could be accessed in EVP_cleanup() by
defering freeing in OBJ_cleanup().
2006-03-28 17:23:48 +00:00
Dr. Stephen Henson f7a3296d8c Typo. 2006-03-28 14:48:42 +00:00
Dr. Stephen Henson 1c17d91c53 Minor clarification. 2006-02-11 01:54:19 +00:00
Dr. Stephen Henson a070f0dac5 Add FAQ about AKID. 2006-02-11 00:46:34 +00:00
Andy Polyakov 65613f23ba Mention PROBLEMS in FAQ. 2005-11-09 19:43:40 +00:00
Andy Polyakov 2c730f6fc2 Improve cross-compiler portability of applink.c module and mention
CRYPTO_malloc_init in FAQ.
2005-11-09 17:11:03 +00:00
Bodo Möller 72dce7685e Add fixes for CAN-2005-2969.
(This were in 0.9.7-stable and 0.9.8-stable, but not in HEAD so far.)
2005-10-26 19:40:45 +00:00
Dr. Stephen Henson 09b6c2ef15 Make OPENSSL_NO_COMP compile again. 2005-09-30 23:35:33 +00:00
Richard Levitte 2bd2cd9b78 Changes from the 0.9.8 branch. 2005-07-05 19:16:24 +00:00
Nils Larsch 034bae10fc update FAQ 2005-06-13 08:38:02 +00:00
Andy Polyakov 4b5598682a FAQ to mention no-sha512 as option for compilers without support for 64-bit
integer type.
2005-06-06 09:32:01 +00:00
Andy Polyakov 851e31ff07 FAQ to mention no-sse2. 2005-05-19 19:54:49 +00:00
Andy Polyakov 788e67e227 FAQ update to mention Applink. 2005-05-18 13:35:54 +00:00
Dr. Stephen Henson 9d2f51c086 Update FAQ. 2005-04-12 16:38:00 +00:00
Richard Levitte 6141b86a49 Change the memory leak FAQ entry to describe the levels of thread safety in each function 2005-03-23 21:14:59 +00:00
Dr. Stephen Henson 23fadaa084 Update FAQ 2005-03-22 20:10:38 +00:00
Bodo Möller af1048c25c Take MDC2 patent into account. 2005-03-02 20:22:58 +00:00
Andy Polyakov d9248e5780 FAQ update to mention no-sha0 as possible workaround for Tru64 compiler bug.
Well, no-options seem to be busted in HEAD currently, which should/will be
fixed one way or another (see PR#989 for a possible alternative).
2005-01-09 20:42:33 +00:00
Mark J. Cox e6e1f4cb5e Mention that the keys likely to have signed the distribution are now
listed on the web site for easy finding and downloading
2004-11-30 14:34:16 +00:00
Dr. Stephen Henson 559f90ff60 Update FAQ. 2004-10-25 12:36:33 +00:00
Dr. Stephen Henson 6ef7b78e7c Update FAQ. 2004-08-11 17:22:13 +00:00
Richard Levitte d9f40bbe55 Make our page with pointers to binary distributions visible in the FAQ 2004-03-04 07:47:40 +00:00
Dr. Stephen Henson ec7c9ee8b8 Indent some of the code examples. 2004-03-02 13:39:23 +00:00
Dr. Stephen Henson 2990244980 ASN1 parse fix and release file changes. 2003-09-30 16:47:33 +00:00
Bodo Möller 500df82a96 fix formatting 2003-03-18 12:52:02 +00:00
Richard Levitte d8cbc93585 Update release information 2003-02-19 14:02:37 +00:00
Bodo Möller 379e568950 typo 2003-02-04 12:57:34 +00:00
Bodo Möller c09a297892 Update PRNG entry:
- OpenSSL version differences
- Sun /dev/urandom patch information
2003-02-04 12:28:11 +00:00
Richard Levitte 3d6a84c42a For VC++7 and up, the file is VSVARS32.BAT.
PR: 327
2003-01-30 19:01:56 +00:00
Andy Polyakov 1a6356b2ca Minor FAQ update 2003-01-13 16:34:05 +00:00
Andy Polyakov 0382c95e4d OpenBSD FAQ update. Apparently gas from binutils-2.x makes it impossible to
use gcc -fPIC ... on OpenBSD-i386. Alternative solution is provided.
2003-01-12 21:39:13 +00:00
Richard Levitte 08101d72ce Merge in changes from 0.9.7-stable. 2002-12-30 23:56:09 +00:00
Andy Polyakov 75c4028585 My English is definitely not good as my assembly skills:-) And it looks like
titles can't be multi-line...
2002-12-30 20:17:20 +00:00
Andy Polyakov 85f258d1c2 It probably belongs in PROBLEMS, but it's more likely to be a FAQ. 2002-12-30 11:10:03 +00:00
Andy Polyakov 76a03d568e FAQ addenum as discussed in RT#417. 2002-12-27 14:27:48 +00:00
Andy Polyakov 26a60b2eb0 Better wording? 2002-12-18 09:42:51 +00:00
Andy Polyakov e0b2073fd4 BN_sqr test failure entry. 2002-12-09 13:43:38 +00:00
Richard Levitte 43ecece595 Merge in relevant changes from the OpenSSL 0.9.6h release. 2002-12-05 21:50:13 +00:00
Richard Levitte d4e573f305 Add a FAQ on how to check the authenticity of the openSSL distribution.
PR: 292
2002-11-14 13:00:59 +00:00
Lutz Jänicke 96c930dd2f More information to the important issue of seeding the PRNG
Submitted by:
Reviewed by:
PR: 285
2002-11-11 08:33:10 +00:00
Richard Levitte f742e497dd Add a FAQ entry for yet another bc failure.
PR: 199
2002-08-15 10:50:31 +00:00
Richard Levitte 36969082bb Update with the status for 0.9.6g. 2002-08-12 06:54:54 +00:00
Richard Levitte fbe792f0ac 0.9.6f is released 2002-08-08 22:55:28 +00:00
Lutz Jänicke b218af2b27 0.9.6e and 0.9.7-beta3 are out. 2002-07-30 11:32:47 +00:00
Richard Levitte 311e209931 Add a few FAQ entries for the various ways building OpenSSL on MacOS X
can fail, and point at the text in the PROBLEMS file
2002-07-17 11:29:15 +00:00
Lutz Jänicke 876811e2af Rewording: some algorithms are also patented in Europe, so choose more
defensive phrases...
2002-07-12 15:26:37 +00:00
Lutz Jänicke c4da6dd38a Discussion about Redhat's specialties for the FAQ.
Submitted by: John.Airey@rnib.org.uk
Reviewed by:
PR: 128
2002-07-10 19:48:51 +00:00
Lutz Jänicke 0c4d9b2fbc Sun's official statement with respect to /dev/random support.
Submitted by: Garrett Anderson garrett@dirsec.com
Reviewed by:
PR: 120
2002-07-10 17:52:03 +00:00
Lutz Jänicke e8233e699b Clarify formulation (proposed by Bodo Moeller). 2002-06-13 08:53:42 +00:00
Lutz Jänicke e1f7ea25d2 Make change uniqueIdentifier -> x500UniqueIdentifier clearly visible.
Submitted by:
Reviewed by:
PR: 82
2002-06-12 20:46:38 +00:00
Richard Levitte 72b5215645 Synchronise the FAQ 2002-05-09 23:41:40 +00:00
Lutz Jänicke 17e2c77a77 Add information about -nameopt option for x509. 2002-04-29 16:01:41 +00:00
Bodo Möller 3c89d78dba update FAQ and CHANGES file (0.9.6c has been released) 2001-12-21 12:29:52 +00:00
Richard Levitte a542db90c6 Extentions of the explanations to the linking problem on Win32. Provided by Andrew Gray <agray@iconsinc.com> 2001-11-19 20:46:35 +00:00
Dr. Stephen Henson 0b33bc6b72 Add an FAQ. 2001-11-12 01:58:50 +00:00
Ulf Möller e3fefbfd56 ispell 2001-09-07 06:39:38 +00:00
Richard Levitte 6bc847e49e Apply the Tru64 patch from Tim Mooney <mooney@dogbert.cc.ndsu.NoDak.edu>
His comments are:

1) Changes all references for `True64' to be `Tru64', which is the correct
spelling for the OS name.

2) Makes `alpha-cc' be the same as `alpha164-cc', and adds an `alphaold-cc'
entry that is the same as the previous `alpha-cc'.  The reason is that most
people these days are using the newer compiler, so it should be the default.

3) Adds a bit of commentary to Configure, regarding the name changes of
the OS over the years, so it's not so confusing to people that haven't been
with the OS for a while.

4) Adds an `alpha-cc-rpath' target (which is *not* selected automatically
by Configure under any circumstance) that builds an RPATH into the
shared libraries.  This is explained in the comment in Configure.  It's
very very useful for people that want it, and people that don't want it
just shouldn't choose that target.

5) Adds the `-pthread' flag as the best way to get POSIX thread support
from the newer compiler.

6) Updates the Makefile targets, so that when the `alpha164-cc', `alpha-cc',
or `alpha-cc-rpath' target is what Configure is set to use, it uses a Makefile
target that includes the `-msym' option when building the shared library.
This is a performance enhancement.

7) Updates `config' so that if it detects you're running version 4 or 5
of the OS, it automatically selects `alpha-cc', but uses `alphaold-cc'
for versions 1-3 of the OS.

8) Updates the comment in opensslv.h, fixing both the OS name typo and
adding a reference to IRIX 6.x, since the shared library semantics are
virtually identical there.
2001-08-10 15:26:21 +00:00
Lutz Jänicke a0256f462a Clarify actual state. 2001-07-12 08:53:50 +00:00
Lutz Jänicke 9c11a0e541 Typo... 2001-07-11 15:49:35 +00:00
Lutz Jänicke 679df234b7 What is an '-engine' version? 2001-07-11 15:31:21 +00:00
Bodo Möller e9ad0d2c31 Fix PRNG. 2001-07-10 10:49:34 +00:00
Ulf Möller 6af59bc095 the backslash is significant... 2001-05-04 15:03:59 +00:00
Bodo Möller 24cc290b85 .rnd issues 2001-05-03 09:27:43 +00:00
Lutz Jänicke 197322455d Clarify request of client certificates. This is a FAQ. 2001-04-17 13:18:56 +00:00
Bodo Möller d9a770e6ea Mention automatically queried EGD sockets (OpenSSL 0.9.7).
0.9.5 is obsolete, so we don't have to discuss its 'openssl rsa'
seeding bug.
2001-04-10 07:59:43 +00:00
Lutz Jänicke 35feed50f0 Some clarifications about $RANDFILE usage. 2001-04-09 16:01:38 +00:00
Lutz Jänicke a116afa42e OpenSSH 1.2.2p1 is dead and gone. Errors detecting the OpenSSL library
are however still common and are solved by checking config.log.
2001-04-09 15:55:58 +00:00
Richard Levitte b4542fb307 Correct info in the FAQ. 2001-04-09 14:17:26 +00:00
Ulf Möller 6767a53669 That statement seems to be not true. In fact, I have said that I would
like to use libtool, but not automake.

Let's investigate that further, or leave the question open for now.
2001-02-23 18:22:58 +00:00
Ulf Möller ba93fd6a38 autoconf would be useful... 2001-02-23 18:00:06 +00:00
Ulf Möller a6ed5dd674 That was misleading. The problem won't happen with 0.9.6a anyway. 2001-02-14 16:55:22 +00:00
Richard Levitte 1417f2dccb Include the newly reported problem with bc on FreeBSD 4.2. 2001-02-14 07:45:59 +00:00
Bodo Möller 09f4278d25 undo previous change: '-prexit' is already available in current versions of s_client 2000-12-18 08:18:07 +00:00
Bodo Möller 959f67d6a4 When mentioning features that don't exist in current releases of
OpenSSL (such as the new undocumented '-prexit' option to s_client),
the FAQ should point out that they don't: The FAQ is not just part
of the release, it's current version is also published on the web.
2000-12-17 00:32:49 +00:00
Richard Levitte 7522254b48 Make sure each FAQ item has an index entry. 2000-12-16 11:14:41 +00:00
Dr. Stephen Henson 1a7b2d33f4 Add a couple of FAQs. 2000-12-16 01:07:16 +00:00
Ulf Möller 17e757478a GPL FAQ.
I hope this adequately summarizes the results of all those disussions.
2000-12-01 02:47:50 +00:00
Richard Levitte 0ae485dc07 New format for the FAQ. We now have different sections for different
types of questions.  Hopefully, that'll make them easier to spot, and
specially, easier to refer to.
2000-11-30 13:04:14 +00:00
Bodo Möller b1d6e3f551 Documentation on using the SSL library with non-blocking I/O. 2000-11-17 10:25:46 +00:00
Richard Levitte bf55ece1c1 Two questions have been asked quite often lately. 2000-10-17 16:16:12 +00:00
Richard Levitte 0e8f2fdfdd Time to build the release. Bump the version info accordingly. 2000-09-24 15:21:30 +00:00
Ulf Möller 7cae5f9fc8 ispell. 2000-09-20 03:42:15 +00:00
Dr. Stephen Henson c5a3b7e790 Add BIO_read() (etc.) docs.
Add an ASN1 FAQ because I'm sick of answering it :-)
2000-09-09 00:59:37 +00:00
Dr. Stephen Henson 84b65340e1 Two new PKCS#12 demo programs.
Update PKCS12_parse().

Make the keyid in certificate aux info more usable.
2000-09-07 23:14:26 +00:00
Bodo Möller 26b0d15628 See RSA Security's press release at
http://www.rsasecurity.com/news/pr/000906-1.html (September 6, 2000):
"RSA Security Releases RSA Encryption Algorithm into Public Domain"
2000-09-06 14:55:11 +00:00
Richard Levitte b364e5d27b FAQ about ar "missing" on Solaris. 2000-07-11 21:44:53 +00:00
Richard Levitte 5789f8f780 More experiments show that you can set your data segment size soft
limit higher and thereby get through compilation of sha_dgst.c.
2000-07-05 17:46:58 +00:00