OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Dr. Stephen Henson
Root: /v/openssl/cvs Email: steve@openssl.org
Module: openssl Date: 18-Aug-2008 18:48:47
Branch: HEAD Handle: 2008081817484700

Modified files:
openssl/crypto/x509v3 ext_dat.h v3_alt.c

Log:
Support for certificateIssuer CRL entry extension.

Summary:
Revision Changes Path
1.22 +2 -1 openssl/crypto/x509v3/ext_dat.h
1.38 +6 -0 openssl/crypto/x509v3/v3_alt.c
____________________________________________________________________________

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Bodo Moeller
Root: /v/openssl/cvs Email: bodo@openssl.org
Module: openssl Date: 14-Aug-2008 23:37:51
Branch: HEAD Handle: 2008081422375100

Modified files:
openssl/crypto/evp evp_enc.c

Log:
Don't use assertions to check application-provided arguments;
and don't unnecessarily fail on input size 0.

Summary:
Revision Changes Path
1.46 +9 -4 openssl/crypto/evp/evp_enc.c
____________________________________________________________________________

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Bodo Moeller
Root: /v/openssl/cvs Email: bodo@openssl.org
Module: openssl Date: 14-Aug-2008 23:37:21
Branch: OpenSSL_0_9_8-stable Handle: 2008081422372000

Modified files: (Branch: OpenSSL_0_9_8-stable)
openssl/crypto/evp evp_enc.c

Log:
Don't use assertions to check application-provided arguments;
and don't unnecessarily fail on input size 0.

Summary:
Revision Changes Path
1.42.2.4 +9 -4 openssl/crypto/evp/evp_enc.c
____________________________________________________________________________

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Bodo Moeller
Root: /v/openssl/cvs Email: bodo@openssl.org
Module: openssl Date: 13-Aug-2008 21:45:06
Branch: HEAD Handle: 2008081320450600

Modified files:
openssl/ssl s3_pkt.c ssl.h ssl_err.c

Log:
sanity check

PR: 1679

Summary:
Revision Changes Path
1.67 +7 -0 openssl/ssl/s3_pkt.c
1.213 +1 -0 openssl/ssl/ssl.h
1.75 +1 -0 openssl/ssl/ssl_err.c
____________________________________________________________________________

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Bodo Moeller
Root: /v/openssl/cvs Email: bodo@openssl.org
Module: openssl Date: 13-Aug-2008 21:44:45
Branch: OpenSSL_0_9_8-stable Handle: 2008081320444400

Modified files: (Branch: OpenSSL_0_9_8-stable)
openssl/ssl s3_pkt.c ssl.h ssl_err.c

Log:
sanity check

PR: 1679

Summary:
Revision Changes Path
1.57.2.3 +7 -0 openssl/ssl/s3_pkt.c
1.161.2.21 +1 -0 openssl/ssl/ssl.h
1.53.2.11 +1 -0 openssl/ssl/ssl_err.c
____________________________________________________________________________

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Bodo Moeller
Root: /v/openssl/cvs Email: bodo@openssl.org
Module: openssl Date: 13-Aug-2008 21:44:15
Branch: HEAD Handle: 2008081320441500

Modified files:
openssl/engines e_capi.c e_capi_err.c e_capi_err.h

Log:
fix error function codes

Summary:
Revision Changes Path
1.23 +3 -3 openssl/engines/e_capi.c
1.5 +1 -0 openssl/engines/e_capi_err.c
1.5 +1 -0 openssl/engines/e_capi_err.h
____________________________________________________________________________

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Bodo Moeller
Root: /v/openssl/cvs Email: bodo@openssl.org
Module: openssl Date: 13-Aug-2008 21:30:03
Branch: HEAD Handle: 2008081320300100

Modified files:
openssl CHANGES

Log:
Mention ERR_remove_state() deprecation, and
ERR_remove_thread_state(NULL).

Summary:
Revision Changes Path
1.1437 +5 -1 openssl/CHANGES
____________________________________________________________________________

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Dr. Stephen Henson
Root: /v/openssl/cvs Email: steve@openssl.org
Module: openssl Date: 13-Aug-2008 18:00:11
Branch: HEAD Handle: 2008081317000902

Modified files:
openssl CHANGES
openssl/apps apps.c
openssl/crypto/x509 x509_vfy.c x509_vfy.h

Log:
Initial support for CRL path validation. This supports distinct certificate
and CRL signing keys.

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Dr. Stephen Henson
Root: /v/openssl/cvs Email: steve@openssl.org
Module: openssl Date: 12-Aug-2008 18:07:53
Branch: HEAD Handle: 2008081217075200

Modified files:
openssl/crypto/x509 x509_vfy.c

Log:
Initial code to support distinct certificate and CRL signing keys where the
CRL issuer is not part of the main path.

Not complete yet and not compiled in because the CRL issuer certificate is
not validated.

Summary:
Revision Changes Path
1.98 +28 -1 openssl/crypto/x509/x509_vfy.c
____________________________________________________________________________

patch -p0 <<'@@ .'
Index: openssl/crypto/x509/x509_vfy.c
============================================================================
$ cvs diff -u -r1.97 -r1.98 x509_vfy.c
--- openssl/crypto/x509/x509_vfy...

OpenSSL CVS Repository
http://cvs.openssl.org/
____________________________________________________________________________

Server: cvs.openssl.org Name: Dr. Stephen Henson
Root: /v/openssl/cvs Email: steve@openssl.org
Module: openssl Date: 12-Aug-2008 12:32:57
Branch: HEAD Handle: 2008081211325501

Modified files:
openssl CHANGES
openssl/apps apps.c
openssl/crypto/x509 x509_vfy.c
openssl/crypto/x509v3 pcy_cache.c pcy_data.c pcy_int.h pcy_map.c
pcy_node.c pcy_tree.c v3_cpols.c v3_purp.c

Log:
Support for policy mappings extension.

Delete X509_POLICY_REF code.

Fix handling of invalid policy extensions to return the correct error.

Add command line option to inhibit policy mappings.