More X509 V3 stuff. Add support for extensions in the 'req' application
so that: openssl req -x509 -new -out cert.pem
will take extensions from openssl.cnf a sample for a CA is included.

More X509 V3 stuff. Add support for extensions in the 'req' application
so that: openssl req -x509 -new -out cert.pem
will take extensions from openssl.cnf a sample for a CA is included.
Also change the directory order so pem is nearer the end. Otherwise 'make links'
wont work because pem.h can't be built.

show more ...

Add file x509v3.err.

Make sure people know when they need to rebuild the Makefile.

Minor constification.

Continuing adding X509 V3 support. This starts to integrate the code with
the main library, but only with printing at present. To see this try:
openssl x509 -in cert.pem -text
on a certif

Continuing adding X509 V3 support. This starts to integrate the code with
the main library, but only with printing at present. To see this try:
openssl x509 -in cert.pem -text
on a certificate with some extensions in it.

show more ...

Initial addition of new X509 V3 files, tidy of old files.

Start keeping track of wishes people make on our mailing lists to make sure we
don't forget them and this way we have them bundled together.

Correct bracketing error.

Continued patches so certificates and CRLs now can support and use
GeneralizedTime.

This time, get it right.

Finally lay dependencies to rest (I hope!).

Spelling mistake.

This is the result of a "make errors" with the new error building functionality
in place.

New err_code.pl script to retain old error codes. This should allow the use
of 'make errors' without causing huge re-organisations of files when a new
code is added.

Ignore auto-generated programs.

Dispose of generated programs.

Fix major cockup with short keys in CAST-128.

Update CHANGES for GeneralizedTime info.

Correct Linux 1 recognition.
Contributed by: Ulf Möller <ulf@fitug.de>

Oops. Missing NULL frees.

Remove pointless MD5 hash.
Contributed by: Anonymous <nobody@replay.com>

Generate an error on an invalid directory.

Time to blow up the source tree :-) This is the beginning of support for
GeneralizedTime. At several points PKIX specifies that GeneralizedTime can be
used but OpenSSL doesn't currently suppo

Time to blow up the source tree :-) This is the beginning of support for
GeneralizedTime. At several points PKIX specifies that GeneralizedTime can be
used but OpenSSL doesn't currently support it. This patch adds several files
and a bunch of functions.

Of interest is the ASN1_TIME structure and its related functions. At several
points certificates, CRLs et al specify that a time can be expressed as a
choice of UTCTime and GeneralizedTime. Currently OpenSSL interprets this
(wrongly) as UTCTime because GeneralizedTime isn't supported. The ASN1_TIME
stuff provides this functionality.

Still todo is to trace which cert and CRL points need an ASN1_TIME and modify
the utilities appropriately and of course fix all the bugs.

Note new OpenSSL copyright in the new file a_time.c. I didn't put it in
a_gentm.c because it is a minimally modified form a_utctm.c .

Since this adds new files and error codes you will need to do a 'make errors'
at the top level to add the new codes.

show more ...

More prototypes.

More prototypes.