openssl, branch STATE_after_zlib

This commit was manufactured by cvs2svn to create tag 'STATE_after_zlib'.

2002-12-08T09:31:42Z

Since it's defined in draft-ietf-tls-compression-04.txt, let's make

2002-12-08T09:31:41Z

ZLIB a known compression method, with the identity 1.

Undefine OPENSSL_NO_DEPRECATED inside openssl application code if we are

2002-12-08T05:38:44Z

being built with it defined - it is not a symbol to affect how openssl itself builds, but to alter the way openssl headers can be used from an API point of view. The "deprecated" function wrappers will always remain inside OpenSSL at least as long as they're still being used internally. :-) The exception is dsaparam which has been updated to the BN_GENCB-based functions to test the new functionality. If GENCB_TEST is defined, dsaparam will support a "-timebomb " switch to cancel parameter-generation if it gets as far as 'n' seconds without completion.

This is a first-cut at improving the callback mechanisms used in

2002-12-08T05:24:31Z

key-generation and prime-checking functions. Rather than explicitly passing callback functions and caller-defined context data for the callbacks, a new structure BN_GENCB is defined that encapsulates this; a pointer to the structure is passed to all such functions instead. This wrapper structure allows the encapsulation of "old" and "new" style callbacks - "new" callbacks return a boolean result on the understanding that returning FALSE should terminate keygen/primality processing. The BN_GENCB abstraction will allow future callback modifications without needing to break binary compatibility nor change the API function prototypes. The new API functions have been given names ending in "_ex" and the old functions are implemented as wrappers to the new ones. The OPENSSL_NO_DEPRECATED symbol has been introduced so that, if defined, declaration of the older functions will be skipped. NB: Some openssl-internal code will stick with the older callbacks for now, so appropriate "#undef" logic will be put in place - this is in case the user is *building* openssl (rather than *including* its headers) with this symbol defined. There is another change in the new _ex functions; the key-generation functions do not return key structures but operate on structures passed by the caller, the return value is a boolean. This will allow for a smoother transition to having key-generation as "virtual function" in the various ***_METHOD tables.

Fix a warning, and do some constification as a lucky side-effect :-)

2002-12-08T05:19:43Z

Since it's defined in draft-ietf-tls-compression-04.txt, let's make

2002-12-08T02:41:11Z

ZLIB a known compression method, with the identity 1.

Implement a stateful variant if the ZLIB compression method. The old

2002-12-08T02:39:38Z

stateless variant is kept, but isn't used anywhere.

Forgot one.

2002-12-07T20:03:42Z

Add a few items I intend to work on for 0.9.8 and on.

2002-12-07T20:02:20Z

Workaround for GCC-ia64 compiler bug.

2002-12-06T17:18:10Z

Submitted by: Reviewed by: PR: