Mark Andrews
76af83c9ad
4497. [port] Add support for OpenSSL 1.1.0. [RT #41284 ]
...
(cherry picked from commit 1fce0951ed
2016-10-31 10:05:55 +11:00
Mark Andrews
c40906dfad
4450. [port] Provide more nuanced HSM support which better matches
...
the specific PKCS11 providers capabilities. [RT #42458 ]
(cherry picked from commit 8ee6f289d8
2016-08-19 08:05:47 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Tinderbox User
161b5249b9
update copyright notice / whitespace
2015-08-19 23:45:23 +00:00
Evan Hunt
420a43c8d8
[master] timing safe memory comparisons
...
4183. [cleanup] Use timing-safe memory comparisons in cryptographic
code. Also, the timing-safe comparison functions have
been renamed to avoid possible confusion with
memcmp(). [RT #40148 ]
2015-08-17 18:26:44 -07:00
Francis Dupont
fc63119c8b
Hardened OpenSSL digest/HMAC calls [RT #37944 ]
2014-12-02 12:41:01 +01:00
Evan Hunt
acbb301e64
[master] better error output when initializing pkcs11
...
3786. [func] Provide more detailed error codes when using
native PKCS#11. "pkcs11-tokens" now fails robustly
rather than asserting when run against an HSM with
an incomplete PCKS#11 API implementation. [RT #35479 ]
2014-03-12 20:52:01 -07:00
Evan Hunt
dbb012765c
[master] merge libiscpk11 to libisc
...
3735. [cleanup] Merged the libiscpk11 library into libisc
to simplify dependencies. [RT #35205 ]
2014-02-11 21:20:28 -08:00
Evan Hunt
1b255a0c4e
[master] overlooked some memcpy->memmove changes with pkcs11 merge
2014-01-21 10:08:01 -08:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Tinderbox User
431a83fb29
update copyright notice
2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260
[master] replace memcpy() with memmove().
...
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120 ]
2014-01-08 16:39:05 -08:00
Tinderbox User
ca48f47d88
update copyright notice
2013-07-09 23:46:11 +00:00
Evan Hunt
5b7abbef51
[master] added isc_safe_memcmp()
...
3611. [bug] Improved resistance to a theoretical authentication
attack based on differential timing. [RT #33939 ]
2013-07-09 11:47:16 -07:00
Automatic Updater
53f0234c3e
update copyright notice
2009-02-06 23:47:42 +00:00
Francis Dupont
c1d7e0562f
OpenSSL hashes
2009-02-06 12:26:23 +00:00
Automatic Updater
70e5a7403f
update copyright notice
2007-06-19 23:47:24 +00:00
Automatic Updater
ec5347e2c7
update copyright notice
2007-06-18 23:47:57 +00:00
Mark Andrews
69f56d4ef2
remove redundant memset
2006-02-26 22:28:22 +00:00
Mark Andrews
26e2a07a0b
update copyright notice
2006-01-27 23:57:46 +00:00
Mark Andrews
c6d4f78152
1973. [func] TSIG HMACSHA1, HMACSHA224, HMACSHA256, HMACSHA384 and
...
HMACSHA512 support. [RT #13606 ]
2006-01-27 02:35:15 +00:00
Mark Andrews
69fe9aaafd
update copyright notice
2005-04-29 00:24:12 +00:00
Rob Austein
ab023a6556
1851. [doc] Doxygen comment markup. [RT #11398 ]
2005-04-27 04:57:32 +00:00
Mark Andrews
dafcb997e3
update copyright notice
2004-03-05 05:14:21 +00:00
Andreas Gustafsson
91cd0f93ad
sizeof style
2001-11-27 01:56:32 +00:00
Brian Wellington
499b34cea0
copyright update
2001-01-09 22:01:04 +00:00
David Lawrence
40f53fa8d9
Trailing whitespace trimmed. Perhaps running "perl util/spacewhack.pl in your
...
own CVS tree will help minimize CVS conflicts. Maybe not.
Blame Graff for getting me to trim all trailing whitespace.
2000-08-01 01:33:37 +00:00
David Lawrence
15a4474541
word wrap copyright notice at column 70
2000-07-27 09:55:03 +00:00
David Lawrence
976f44baa3
needed isc/string.h for memset() prototype
2000-07-26 22:36:34 +00:00
Brian Wellington
9c4cba349f
334. [func] Added hmac-md5 to libisc.
2000-07-17 17:33:39 +00:00
