New Configure option "rsaref".

Don#t auto-generate crypto/pem/pem.h -- a fixed file is fine for it.

Submitted by:
Reviewed by:
PR:

Add type-safe STACKs and SETs.

gcc claims this is a shadow, though I can't find what it is shadowing...

Add `openssl ca -revoke <certfile>' facility which revokes a certificate
specified in <certfile> by updating the entry in the index.txt file.
This way one no longer has to edit the index.txt

Add `openssl ca -revoke <certfile>' facility which revokes a certificate
specified in <certfile> by updating the entry in the index.txt file.
This way one no longer has to edit the index.txt file manually for
revoking a certificate. The -revoke option does the gory details now.

Submitted by: Massimiliano Pala <madwolf@openca.org>
Cleaned up and integrated by: Ralf S. Engelschall

show more ...

Fix `openssl crl -noout -text' combination where `-noout' killed the `-text'
option at all and this way the `-noout -text' combination was inconsistent in
`openssl crl' with the friends in `o

Fix `openssl crl -noout -text' combination where `-noout' killed the `-text'
option at all and this way the `-noout -text' combination was inconsistent in
`openssl crl' with the friends in `openssl x509|rsa|dsa'.

show more ...

Make sure a corresponding plain text error message exists for the
X509_V_ERR_CERT_REVOKED/23 error number which can occur when a
verify callback function determined that a certificate was rev

Make sure a corresponding plain text error message exists for the
X509_V_ERR_CERT_REVOKED/23 error number which can occur when a
verify callback function determined that a certificate was revoked.

show more ...

Obsoleted by new openssl command "list-cipher-commands".
Submitted by:
Reviewed by:
PR:

Submitted by:
Reviewed by:
PR:

Fix a few typos and tabs while I'm poking around in ca.c...

Rid the world of yet more evil casts.

Adjust renegotiation slightly.

Fix a typo in the X.509v3 docs: cRLSign instead of cRLCertSign is correct
according to the sources.... found by Steffen Dettmer <steffen@tfh-berlin.de>.

Rid the world of more evil casts.

Install signal handler if we are using sigaction.

Bugfix: s_client occasionally would sleep in select() when it should
have checked SSL_pending() first.
Submitted by:
Reviewed by:
PR:

recent changes.

Test PKCS#1 v1.5 padding as well.

Use Perl 5 even if Perl 4 comes first in the search path.

Separate DSA functionality from ASN.1 encoding.
New functions DSA_do_sign and DSA_do_verify to provide access to
the raw DSA values.

Preprocessor file to allow testenc to test only those ciphers
that are available.
Submitted by:
Reviewed by:
PR:

Tiny comment to improve code comprehensibility.
Submitted by:
Reviewed by:
PR:

Add PKCS#5 v2.0 ASN1 structures.

Bugs.

New "open issue" (ERR_...).

Submitted by:
Reviewed by:
PR: