Mark Andrews
395fe33465
add more LIBRESSL_VERSION_NUMBER checks
...
(cherry picked from commit 3d38cfaf8a
2016-11-01 12:25:03 +11:00
Tinderbox User
e356a7622a
update copyright notice / whitespace
2016-10-30 23:47:21 +00:00
Mark Andrews
76af83c9ad
4497. [port] Add support for OpenSSL 1.1.0. [RT #41284 ]
...
(cherry picked from commit 1fce0951ed
2016-10-31 10:05:55 +11:00
Mark Andrews
c40906dfad
4450. [port] Provide more nuanced HSM support which better matches
...
the specific PKCS11 providers capabilities. [RT #42458 ]
(cherry picked from commit 8ee6f289d8
2016-08-19 08:05:47 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Mark Andrews
5b1c7ef35b
4264. [bug] Check const of strchr/strrchr assignments match
...
argument's const status. [RT #41150 ]
2015-11-20 18:38:24 +11:00
Mark Andrews
f824c65d1f
4340. [port] Fix LibreSSL compatibility. [RT #40977 ]
2015-10-19 10:43:58 +11:00
Evan Hunt
ce9f893e21
[master] address buffer accounting error
...
4168. [security] A buffer accounting error could trigger an
assertion failure when parsing certain malformed
DNSSEC keys. (CVE-2015-5722) [RT #40212 ]
2015-08-07 13:16:10 -07:00
Mark Andrews
e0fea0bf85
silence coverity warnings
2015-05-30 17:44:52 +10:00
Tinderbox User
431e5c81db
update copyright notice / whitespace
2015-05-28 23:45:24 +00:00
Mark Andrews
8bb630c751
4129. [port] Address API changes in OpenSSL 1.1.0. [RT #39532 ]
2015-05-28 14:41:21 +10:00
Mark Andrews
e53e202ef3
4128. [bug] Address issues raised by Coverity 7.6. [RT #39537 ]
2015-05-28 13:17:07 +10:00
Mark Andrews
58a1051e92
3974. [bug] handle DH_compute_key() failure correctly in
...
openssldh_link.c. [RT #37477 ]
2014-10-13 23:41:36 +11:00
Evan Hunt
3249da26fc
[master] rationalize external key handling
...
3723. [cleanup] Imported keys are now handled the same way
regardless of DNSSEC algorithm. [RT #35215 ]
2014-01-30 17:49:32 -08:00
Mark Andrews
e20788e121
update copyrights
2014-01-16 15:19:24 +11:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Mark Andrews
2bdfb330af
update copyrights
2013-12-05 15:04:53 +11:00
Mark Andrews
c3c8823fed
3681. [port] Update the Windows build system to support feature
...
selection and WIN64 builds. This is a work in
progress. [RT #34160 ]
2013-12-04 12:47:23 +11:00
Mark Andrews
6eb6af6732
3354. [func] Improve OpenSSL error logging. [RT #29932 ]
2012-07-23 15:08:21 +10:00
Tinderbox User
ef1963d83d
update copyright notice
2012-06-15 23:45:49 +00:00
Mark Andrews
7865ea9545
3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-14 15:44:20 +10:00
Automatic Updater
135bcc2e42
update copyright notice
2011-01-11 23:47:14 +00:00
Mark Andrews
433e06a25c
3006. [func] Allow dynamically generated TSIG keys to be preserved
...
across restarts of named. Initially this is for
TSIG keys generated using GSSAPI. [RT #22639 ]
2011-01-10 05:32:04 +00:00
Mark Andrews
8a0943e125
silence compiler warnings. [RT #20472 ]
2009-10-30 05:08:23 +00:00
Francis Dupont
775a8d86d9
keygen progress indication [RT #20284 ]
2009-10-24 09:46:19 +00:00
Automatic Updater
7b1894bec1
update copyright notice
2009-09-03 23:48:13 +00:00
Mark Andrews
bbc204a237
2669. [func] Update PKCS#11 support to support Keyper HSM.
...
Update PKCS#11 patch to be against openssl-0.9.8i.
2009-09-03 04:09:58 +00:00
Automatic Updater
e672951ed2
update copyright notice
2008-04-01 23:47:10 +00:00
Francis Dupont
2a31bd5310
add EVP and PKCS11
2008-03-31 14:42:51 +00:00
Automatic Updater
271c4c7ffa
update copyright notice
2007-08-28 07:20:43 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
f36c85c3ce
update copyright notice
2007-01-08 02:45:04 +00:00
Mark Andrews
2a5600ad8b
prime_len -> key->key_size
2007-01-08 02:35:58 +00:00
Mark Andrews
8eb4eca375
2127. [port] Improved OpenSSL 0.9.8 support. [RT #16563 ]
2007-01-08 01:53:30 +00:00
Mark Andrews
289ae548d5
2105. [func] GSS-TSIG support (RFC 3645).
2006-12-04 01:54:53 +00:00
Mark Andrews
641f68d427
update copyright notice
2006-03-02 00:37:23 +00:00
Mark Andrews
25c18fded0
1994. [port] OpenSSL 0.9.8 support. [RT #15694 ]
2006-03-01 02:32:46 +00:00
Mark Andrews
016c0a82f1
1888. [func] "USE INTERNAL MALLOC" is now runtime selectable.
...
[RT #14892 ]
2005-06-17 02:22:45 +00:00
Mark Andrews
69fe9aaafd
update copyright notice
2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
494576ce20
1790. [cleanup] Move lib/dns/sec/dst up into lib/dns. This should
...
allow parallel make to succeed.
2004-12-09 01:41:25 +00:00
