openssl/ssl/ssl_err.c, branch OpenSSL_0_9_2bTLS/SSL and crypto library.http://git.bktus.com/gpgfrontend/openssl/atom?h=OpenSSL_0_9_2b1999-03-22T12:22:14ZFix security hole.1999-03-22T12:22:14ZBen Laurieben@openssl.org1999-03-22T12:22:14Zurn:sha1:b4cadc6e1343c01b06613053a90ed2ee85e65090Fix names of cert stack functions.1999-03-06T14:49:11ZBen Laurieben@openssl.org1999-03-06T14:49:11Zurn:sha1:a49034aba9f9adf4278e23ab7dc8cb8bb1b83892Add functions to add certs to stacks, used for CA file/path stuff in servers.1999-02-28T17:41:55ZBen Laurieben@openssl.org1999-02-28T17:41:55Zurn:sha1:eb90a483ad85e9dc430610a78362837ad344cac1Add a bunch of SSL_xxx() functions for configuring the temporary RSA and DH1999-02-25T14:40:29ZRalf S. Engelschallrse@openssl.org1999-02-25T14:40:29Zurn:sha1:15d21c2df4335f1cea72472b8e71a76d9004d38e
private keys and/or callback functions which directly correspond to their
SSL_CTX_xxx() counterparts but work on a per-connection basis. This is needed
for applications which have to configure certificates on a per-connection
basis (e.g. Apache+mod_ssl) instead of a per-context basis (e.g.
s_server).
For the RSA certificate situation is makes no difference, but for the DSA
certificate situation this fixes the "no shared cipher" problem where the
OpenSSL cipher selection procedure failed because the temporary keys were not
overtaken from the context and the API provided no way to reconfigure them.
The new functions now let applications reconfigure the stuff and they are in
detail: SSL_need_tmp_RSA, SSL_set_tmp_rsa, SSL_set_tmp_dh,
SSL_set_tmp_rsa_callback and SSL_set_tmp_dh_callback. Additionally a new
non-public-API function ssl_cert_instantiate() is used as a helper function
and also to reduce code redundancy inside ssl_rsa.c.
Submitted by: Ralf S. Engelschall
Reviewed by: Ben Laurie
Generate errors when public/private key check is done.1999-02-20T11:50:07ZBen Laurieben@openssl.org1999-02-20T11:50:07Zurn:sha1:4004dbb7f621bb771c695232ec2da602db19a3b9Updates to the new SSL compression code1999-02-16T09:22:21ZMark J. Coxmark@openssl.org1999-02-16T09:22:21Zurn:sha1:413c4f45ed0508d2242638696b7665f499d68265
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Fix so that the version number in the master secret, when passed
via RSA, checks that if TLS was proposed, but we roll back to SSLv3
(because the server will not accept higher), that the version number
is 0x03,0x01, not 0x03,0x00
[Eric A. Young, (from changes to C2Net SSLeay, integrated by Mark Cox)]
Submitted by:
Reviewed by:
PR:
Import of old SSLeay release: SSLeay 0.9.1b (unreleased)1998-12-21T11:00:56ZRalf S. Engelschallrse@openssl.org1998-12-21T11:00:56Zurn:sha1:dfeab0689f69c0b4bd3480ffd37a9cacc2f17d9cImport of old SSLeay release: SSLeay 0.9.0b1998-12-21T10:56:39ZRalf S. Engelschallrse@openssl.org1998-12-21T10:56:39Zurn:sha1:58964a492275ca9a59a0cd9c8155cb2491b4b909Import of old SSLeay release: SSLeay 0.8.1b1998-12-21T10:52:47ZRalf S. Engelschallrse@openssl.org1998-12-21T10:52:47Zurn:sha1:d02b48c63a58ea4367a0e905979f140b7d090f86