aboutsummaryrefslogtreecommitdiff
path: root/pow/POW-0.7/POW.c
AgeCommit message (Collapse)Author
2010-01-23CleanupRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2967
2010-01-23Reference count cleanupRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2966
2009-11-18Update to new OpenSSL snapshot, to track TLS negotiation protocolRob Austein
bugfixes. While we're at this, switch to 1.0.0-stable snapshot series, with goal of eventually converging on OpenSSL 1.0.0. This included a few changes to track OpenSSL: - The "STRING" type used in the OpenSSL stack macros became "OPENSSL_STRING". - OpenSSL has deprecated the MD2 digest algorithm, so POW code can't refer to it unconditionally (perhaps I should remove support for it from POW entirely, but for now I just honor the compile-time conditional). - OpenSSL's configuration script was whining that I should run "make depend", so I do that now as part of the OpenSSL library build. svn path=/openssl/Makefile; revision=2883
2009-08-25I hate switching languages in mid-thought.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2709
2009-08-25Doh, have to null terminate when storing string indefinitely as CRob Austein
string (rather than immediately converting to Python). svn path=/pow/POW-0.7/POW.c; revision=2708
2009-08-20ctx->current_issuer appears to be set to garbage whenRob Austein
ssl_object_verify_callback() is invoked, so don't log the garbage. svn path=/pow/POW-0.7/POW.c; revision=2692
2009-08-15TypoRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2689
2009-08-15First cut at passing X.509 validation error state back from TLSRob Austein
validation callback. svn path=/pow/POW-0.7/POW.c; revision=2687
2009-07-18Attempting to read() from an uninitialized SSL object isn't useful,Rob Austein
but it shouldn't dump core either. svn path=/pow/POW-0.7/POW.c; revision=2641
2009-06-02Cleanup of POW return values.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2485
2009-06-01POW.Ssl.AddTrust and custom X509 verification handler.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2482
2009-06-01New TLS code mostly working. Only lightly tested so far, but "makeRob Austein
test" ran to completion. svn path=/pow/POW-0.7/POW.c; revision=2481
2009-05-30Ssl.useKey() botched EVP_PKEY reference count, leading to core dumps.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2478
2009-05-30Don't short-circuit TLS X.509 verificationRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2475
2009-05-30Ssl.trustCertificate()Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2474
2009-05-30DocRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2473
2009-05-29Ssl.fileno()Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2472
2009-05-29SSL verification modesRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2471
2009-05-29Unused variablesRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2469
2009-05-29Further adventures in translation from OpenSSL error stack to PythonRob Austein
exceptions. svn path=/pow/POW-0.7/POW.c; revision=2467
2009-05-29Fix Define_Exception() macrologyRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2466
2009-05-29More cleanup. Remove disused PKCS #7 code. Rework exceptions toRob Austein
simplify use of event-driven SSL connections. svn path=/pow/POW-0.7/POW.c; revision=2465
2009-05-28Massive cleanup, mostly cosmetic.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2455
2009-05-27CleanupRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2454
2009-05-27Impressively consistant typo.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=2453
2009-01-07Tighten error checkingRob Austein
svn path=/pow/POW-0.7/POW.c; revision=2037
2008-10-10Update to new OpenSSL snapshot. This required code changes to trackRob Austein
new type-safety features in the OpenSSL "stack" metatype. svn path=/openssl/Makefile; revision=2012
2008-06-28Silence gcc 4.1.2 warningsRob Austein
svn path=/pow/POW-0.7/POW.c; revision=1959
2008-05-13OpenSSL fixed some bugs, remove my workarounds.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1770
2008-05-12Add X509Store.verifyDetailed()Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1767
2008-05-06Bogus error messageRob Austein
svn path=/pow/POW-0.7/POW.c; revision=1743
2008-05-02Next time, remember to check that I'm using the right CMS_ContentInfo*Rob Austein
variable before reporting my own stupid null pointer oops as an OpenSSL bug. Sigh. svn path=/pow/POW-0.7/POW.c; revision=1736
2008-05-01Debugging with stone knives and bearskins.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1735
2008-05-01Updated OpenSSL snapshot fixes the CMS bug I reported a few weeksRob Austein
back, so remove workaround. Still need to report and get fixes for the two other OpenSSL bugs I discovered over the last few days.... svn path=/pow/POW-0.7/POW.c; revision=1733
2008-05-01Simplify BSC and start adding BPKI CRL support; the latter doesn'tRob Austein
work yet due to an apparent bug in OpenSSL (CMS_add0_crl() dumps core). If through some bizzare twist of fate we revive the idea of allowing CA certs in CMS messages, this is the change that will need to be (partly) backed out. svn path=/docs/left-right-xml; revision=1730
2008-04-28Rework POW error handling. Code around spuriousRob Austein
EVP_R_COMMAND_NOT_SUPPORTED errors from CMS routines. svn path=/pow/POW-0.7/POW.c; revision=1719
2008-04-24CMS.certs() and CMS.crls()Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1700
2008-04-22CleanupRob Austein
svn path=/pow/POW-0.7/POW.c; revision=1696
2008-04-22Add CRL support to CMS.sign(), reorder CMS.sign() arguments.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1693
2008-04-22Add flags to CMS.verify(), add CMS.pprint().Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1692
2008-04-22Add flag support to CMS.sign.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1691
2008-04-22CMS.eContentType()Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1689
2008-04-19Convert CMS code to something vaguely object-oriented, to simplifyRob Austein
handling of eContentType OIDs, etc. Unifiy some of the redundant XML processing as method routines. svn path=/pow/POW-0.7/POW.c; revision=1679
2008-04-18Workaround for OpenSSL CMS problem: pass NULL cert list to CMS_sign(),Rob Austein
call CMS_add1_cert() directly. svn path=/pow/POW-0.7/POW.c; revision=1673
2008-04-18Checkpoint. New CMS code that's approaching the right thing, butRob Austein
doesn't work yet (this may be an OpenSSL bug, not sure yet). Breaks "make test". svn path=/pow/POW-0.7/POW.c; revision=1672
2008-04-09CleanupRob Austein
svn path=/pow/POW-0.7/POW.c; revision=1645
2008-04-09First cut at new CMS code, not yet tested. So far this is just aRob Austein
clone of the PKCS7 code, whacked with a stick until it compiles. svn path=/pow/POW-0.7/POW.c; revision=1642
2008-03-24Support verification of CMS without bundled EE cert.Rob Austein
svn path=/pow/POW-0.7/POW.c; revision=1562
2008-03-16Get PyBool checks rightRob Austein
svn path=/pow/POW-0.7/POW.c; revision=1558
2008-03-15Ok, try adding optional no_certs arg to PKCS7.sign()Rob Austein
svn path=/docs/rpki-db-schema.sql; revision=1557