root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity
openssl/apps
History
Dr. Stephen Henson 09599b52d4 Auto DH support. 
Add auto DH parameter support. This is roughly equivalent to the
ECDH auto curve selection but for DH. An application can just call

SSL_CTX_set_auto_dh(ctx, 1);

and appropriate DH parameters will be used based on the size of the
server key.

Unlike ECDH there is no way a peer can indicate the range of DH parameters
it supports. Some peers cannot handle DH keys larger that 1024 bits for
example. In this case if you call:

SSL_CTX_set_auto_dh(ctx, 2);

Only 1024 bit DH parameters will be used.

If the server key is 7680 bits or more in size then 8192 bit DH parameters
will be used: these will be *very* slow.

The old export ciphersuites aren't supported but those are very
insecure anyway.
 		2014-03-28 14:49:04 +00:00
..
demoCA
…
demoSRP Missing SRP files. 2011-03-16 11:50:33 +00:00
set
…
.cvsignore Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev 2008-04-17 10:19:16 +00:00
CA.com Corrections to the VMS build system. 2011-03-25 16:20:35 +00:00
CA.pl.in Fix from stable branch. 2006-04-28 00:30:49 +00:00
CA.sh PR: 1847 2009-10-15 17:27:34 +00:00
Makefile make depend 2014-02-20 18:48:56 +00:00
app_rand.c Use new-style system-id macros everywhere possible. I hope I haven't 2001-02-20 08:13:47 +00:00
apps.c Avoid Windows 8 Getversion deprecated errors. 2014-02-25 13:40:33 +00:00
apps.h Fix compilation with no-nextprotoneg. 2013-11-14 01:20:12 +00:00
asn1pars.c PR: 2527 2011-05-25 15:05:39 +00:00
ca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
ca-key.pem
…
ca-req.pem
…
ca.c misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
cert.pem
…
ciphers.c new command line option -stdname to ciphers utility 2012-11-16 00:35:46 +00:00
client.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
cms.c Add suppot for ASCII with CRLF canonicalisation. 2014-02-13 14:35:56 +00:00
crl.c initial support for delta CRL generations by diffing two full CRLs 2012-12-04 18:35:36 +00:00
crl2p7.c Update from 1.0.0-stable 2009-07-27 21:10:00 +00:00
dgst.c add fips blocking overrides to command line utilities 2012-02-10 16:47:40 +00:00
dh.c Fix warnings. 2010-06-12 14:13:23 +00:00
dh512.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh1024.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh2048.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh4096.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dhparam.c PR: 2908 2012-11-21 14:02:40 +00:00
dsa-ca.pem
…
dsa-pca.pem
…
dsa.c PR: 2220 2010-04-06 11:18:59 +00:00
dsa512.pem
…
dsa1024.pem
…
dsap.pem
…
dsaparam.c More fixes for DSA FIPS overrides. 2011-04-23 21:59:12 +00:00
ec.c Fix warnings. 2010-06-12 14:13:23 +00:00
ecparam.c Fix various spelling errors 2014-02-14 22:29:12 +00:00
enc.c add fips blocking overrides to command line utilities 2012-02-10 16:47:40 +00:00
engine.c Update from 1.0.0-stable 2009-07-27 21:10:00 +00:00
errstr.c LHASH revamp. make depend. 2008-05-26 11:24:29 +00:00
gendh.c Fix warnings. 2010-06-12 14:13:23 +00:00
gendsa.c Fix warnings. 2010-06-12 14:13:23 +00:00
genpkey.c Make no-engine work again. 2008-12-20 17:04:40 +00:00
genrsa.c Change default bits to 1024 2013-01-07 16:18:31 +00:00
install-apps.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
makeapps.com Corrections to the VMS build system. 2011-03-25 16:20:35 +00:00
nseq.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
ocsp.c Move CT viewer extension code to crypto/x509v3 2014-02-20 18:48:56 +00:00
oid.cnf
…
openssl-vms.cnf misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
openssl.c Call RAND_cleanup in openssl application. 2013-03-28 14:29:39 +00:00
openssl.cnf misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
passwd.c Brought forward from 0.9.8 - 64 bit warning fixes and fussy compiler fixes. 2005-06-29 11:02:15 +00:00
pca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
pca-key.pem
…
pca-req.pem
…
pkcs7.c Fix warnings. 2010-06-12 14:13:23 +00:00
pkcs8.c PKCS#8 support for alternative PRFs. 2014-03-01 23:16:08 +00:00
pkcs12.c PR: 2469 2011-03-13 18:20:01 +00:00
pkey.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
pkeyparam.c Fix warnings. 2010-06-12 14:13:23 +00:00
pkeyutl.c PR: 2366 2010-11-11 14:42:50 +00:00
prime.c Generate primes, too. 2005-08-23 13:48:17 +00:00
privkey.pem PR: 1644 2009-09-06 15:49:46 +00:00
progs.h PR: 2714 2012-02-10 19:43:14 +00:00
progs.pl PR: 2714 2012-02-10 19:43:14 +00:00
rand.c Fix warnings. 2010-06-12 14:13:23 +00:00
req.c Use defaults bits in req when not given 2014-02-14 22:30:27 +00:00
req.pem
…
rsa.c PR: 2220 2010-04-06 11:18:59 +00:00
rsa8192.pem
…
rsautl.c Update from 1.0.0-stable. 2009-04-26 22:18:22 +00:00
s512-key.pem
…
s512-req.pem
…
s1024key.pem
…
s1024req.pem
…
s_apps.h Add callbacks supporting generation and retrieval of supplemental data entries, facilitating RFC 5878 (TLS auth extensions) 2013-09-06 13:59:13 +01:00
s_cb.c New chain building flags. 2014-02-23 13:36:38 +00:00
s_client.c Move CT viewer extension code to crypto/x509v3 2014-02-20 18:48:56 +00:00
s_server.c Auto DH support. 2014-03-28 14:49:04 +00:00
s_socket.c Provisional DTLS 1.2 support. 2013-03-26 15:16:41 +00:00
s_time.c If we include winsock2.h then FD_SET wants an unsigned type for an fd. 2006-04-17 12:22:13 +00:00
server.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
server.srl
…
server2.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
sess_id.c Initial "opaque SSL" framework. If an application defines 2011-04-29 22:37:12 +00:00
smime.c Use new X509_STORE_set_verify_cb function instead of old macro. 2009-10-18 14:40:33 +00:00
speed.c md5-sparcv9.pl: more accurate performance result. 2012-09-28 09:25:49 +00:00
spkac.c Updatde from stable branch. 2009-01-07 23:44:27 +00:00
srp.c misspellings fixes by https://github.com/vlajos/misspell_fixer 2013-09-05 21:39:42 +01:00
testCA.pem
…
testdsa.h openssl speed is quite useful for testing hardware support (among other 2001-07-11 18:59:25 +00:00
testrsa.h cleaning up a little 2000-03-12 23:27:14 +00:00
timeouts.h Add DTLS support. 2005-04-26 16:02:40 +00:00
ts.c Fix some warnings caused by __owur. Temporarily (I hope) remove the more 2011-11-14 00:36:10 +00:00
tsget PR: 2031 2009-09-07 17:57:18 +00:00
verify.c Add -show_chain option to print out verified chain. 2014-02-25 14:05:22 +00:00
version.c Add missing "-d" to option list of openssl version. 2008-10-20 12:53:36 +00:00
vms_decc_init.c After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
winrand.c Security fixes brought forward from 0.9.7. 2002-11-13 15:43:43 +00:00
x509.c Move CT viewer extension code to crypto/x509v3 2014-02-20 18:48:56 +00:00