openssl/apps/apps.h, branch OpenSSL_1_1_1e

Fix header file include guard names

2019-09-27T21:58:12Z

Make the include guards consistent by renaming them systematically according to the naming conventions below The public header files (in the 'include/openssl' directory) are not changed in 1.1.1, because it is a stable release. For the private header files files, the guard names try to match the path specified in the include directives, with all letters converted to upper case and '/' and '.' replaced by '_'. An extra 'OSSL_' is added as prefix. Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/9681)

Update copyright year

2019-09-10T12:56:40Z

Reviewed-by: Richard Levitte (Merged from https://github.com/openssl/openssl/pull/9847)

Remove HEADER_X509_H include detector from apps

2019-07-24T15:08:38Z

The HEADER_X509_H check is redundant, because is already included. Reviewed-by: Richard Levitte Reviewed-by: Bernd Edlinger (Merged from https://github.com/openssl/openssl/pull/9365)

apps: Stop pretending to care about Netscape keys

2018-11-02T09:59:17Z

The documentation says some commands care, but the code says differently. Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/7440) (cherry picked from commit d91d443f0d26262148d1dc9d29f9fdf025b958ca)

Allow configuation of the number of TLSv1.3 session tickets via SSL_CONF

2018-05-17T15:48:25Z

Also allows the apps to set it. Reviewed-by: Viktor Dukhovni Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/5227)

Revert "Check directory is able to create files for various -out option"

2018-04-25T09:44:26Z

This reverts commit 555c94a0db9661428da0a45cb32b9f002324eefd. Reviewed-by: Andy Polyakov (Merged from https://github.com/openssl/openssl/pull/6033)

Support "-min_protocol" and "-max_protocol" in s_server and s_client

2018-03-19T17:24:30Z

If for nothing else, they are needed when doing a regression test Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/5663)

Split configuration of TLSv1.3 ciphers from older ciphers

2018-03-14T10:15:50Z

With the current mechanism, old cipher strings that used to work in 1.1.0, may inadvertently disable all TLSv1.3 ciphersuites causing connections to fail. This is confusing for users. In reality TLSv1.3 are quite different to older ciphers. They are much simpler and there are only a small number of them so, arguably, they don't need the same level of control that the older ciphers have. This change splits the configuration of TLSv1.3 ciphers from older ones. By default the TLSv1.3 ciphers are on, so you cannot inadvertently disable them through your existing config. Fixes #5359 Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/5392)

Implement multi-process OCSP responder.

2018-03-07T16:03:43Z

With "-multi" the OCSP responder forks multiple child processes, and respawns them as needed. This can be used as a long-running service, not just a demo program. Therefore the index file is automatically re-read when changed. The responder also now optionally times out client requests. Reviewed-by: Matt Caswell

Prepare to detect index changes in OCSP responder.

2018-03-07T16:03:01Z

Retain open file handle and previous stat data for the CA index file, enabling detection and index reload (upcoming commit). Check requirements before entering accept loop. Reviewed-by: Matt Caswell