Date: Tue, 30 Jul 2002 12:48:52 -0700 (PDT) From: Robert Watson <rwatson@FreeBSD.org> To: Perforce Change Reviews <perforce@freebsd.org> Subject: PERFORCE change 15214 for review Message-ID: <200207301948.g6UJmqKb049455@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
http://people.freebsd.org/~peter/p4db/chv.cgi?CH=15214 Change 15214 by rwatson@rwatson_tislabs on 2002/07/30 12:48:06 Integ the trustedbsd_base tree to pull in new OpenSSL, as well as the mac_policy() system call. Affected files ... .. //depot/projects/trustedbsd/base/crypto/openssl/CHANGES#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/Configure#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/FAQ#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/INSTALL#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/Makefile.org#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/Makefile.ssl#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/NEWS#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/PROBLEMS#1 branch .. //depot/projects/trustedbsd/base/crypto/openssl/README#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/CA.pl#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/Makefile.ssl#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/apps.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/asn1pars.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/ca.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/der_chop#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/pkcs7.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/apps/x509.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/config#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/Makefile.ssl#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_bitstr.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_enum.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_int.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_set.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_utctm.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/asn1_lib.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/d2i_dhp.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/d2i_dsap.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/d2i_r_pr.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/t_pkey.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/x_pubkey.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bio/b_print.c#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bio/bf_nbio.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bio/bss_bio.c#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn.h#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_div.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_gcd.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_mont.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_mul.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/conf/Makefile.ssl#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/conf/conf_def.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/cryptlib.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/cryptlib.h#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/des/des.h#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/dsa/dsa_asn1.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/dso/dso_dlfcn.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/ebcdic.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/bio_enc.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/c_allc.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/c_alld.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/evp.h#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/objects/o_names.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/objects/obj_dat.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/opensslv.h#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pem/pem2.h#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pem/pem_lib.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/perlasm/x86nasm.pl#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pkcs12/pkcs12.h#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pkcs7/pk7_doit.c#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pkcs7/verify.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/rsa/rsa_eay.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/txt_db/txt_db.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/crypto/x509v3/v3_ia5.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/demos/maurice/loadkeys.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/apps/crl2pkcs7.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/apps/smime.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/BN_rand.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/DH_get_ex_new_index.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/EVP_DigestInit.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/EVP_SignInit.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/EVP_VerifyInit.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/RSA_check_key.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/err.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/rsa.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_sess_set_cache_size.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_sess_set_get_cb.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_set_cert_store.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_set_client_cert_cb.pod#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_set_options.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_accept.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_connect.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_do_handshake.pod#1 branch .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_get_error.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_set_connect_state.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_write.pod#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/ssl.pod#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/e_os.h#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/Makefile.ssl#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s2_clnt.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s2_lib.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s2_srvr.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_clnt.c#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_enc.c#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_lib.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_srvr.c#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl.h#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_asn1.c#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_err.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_locl.h#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_sess.c#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/ssl/t1_enc.c#4 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/test/Makefile.ssl#3 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/tools/c_rehash#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/util/dirname.pl#1 branch .. //depot/projects/trustedbsd/base/crypto/openssl/util/domd#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/util/mk1mf.pl#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/util/pl/BC-32.pl#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/util/pl/VC-32.pl#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/util/pod2man.pl#2 integrate .. //depot/projects/trustedbsd/base/crypto/openssl/util/pod2mantest#1 branch .. //depot/projects/trustedbsd/base/crypto/openssl/util/pod2mantest.pod#1 branch .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/Makefile#8 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_ctrl.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_base64.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_buffer.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_cipher.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_md.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_null.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_ssl.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_find_type.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_new_bio_pair.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_push.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_read.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_accept.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_bio.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_connect.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_fd.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_file.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_mem.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_null.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_socket.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_set_callback.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_should_retry.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_CTX_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_CTX_start.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_add.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_add_word.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_bn2bin.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_cmp.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_copy.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_generate_prime.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_mod_inverse.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_mod_mul_montgomery.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_mod_mul_reciprocal.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_num_bytes.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_rand.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_set_bit.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_zero.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/CA.pl.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/CRYPTO_set_ex_data.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_generate_key.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_generate_parameters.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_get_ex_new_index.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_set_method.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_size.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_SIG_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_do_sign.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_dup_DH.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_generate_key.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_generate_parameters.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_get_ex_new_index.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_set_method.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_sign.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_size.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_GET_LIB.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_clear_error.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_error_string.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_get_error.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_load_crypto_strings.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_load_strings.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_print_errors.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_put_error.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_remove_state.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_DigestInit.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_EncryptInit.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_OpenInit.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_SealInit.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_SignInit.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_VerifyInit.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/OpenSSL_add_all_algorithms.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_add.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_bytes.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_cleanup.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_egd.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_load_file.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_set_rand_method.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_blinding_on.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_check_key.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_generate_key.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_get_ex_new_index.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_print.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_private_encrypt.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_public_encrypt.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_set_method.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_sign.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_size.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CIPHER_get_name.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_COMP_add_compression_method.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_add_extra_chain_cert.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_add_session.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_ctrl.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_flush_sessions.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_free.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_get_ex_new_index.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_get_verify_mode.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_load_verify_locations.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sess_number.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sess_set_cache_size.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sess_set_get_cb.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sessions.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_cert_store.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_cert_verify_callback.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_cipher_list.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_client_CA_list.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_client_cert_cb.3#1 branch .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_default_passwd_cb.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_info_callback.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_mode.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_options.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_quiet_shutdown.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_session_cache_mode.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_session_id_context.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_ssl_version.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_timeout.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_tmp_dh_callback.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_tmp_rsa_callback.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_verify.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_use_certificate.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_SESSION_free.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_SESSION_get_ex_new_index.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_SESSION_get_time.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_accept.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_alert_type_string.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_clear.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_connect.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_do_handshake.3#1 branch .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_free.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_SSL_CTX.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_ciphers.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_client_CA_list.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_current_cipher.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_default_timeout.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_error.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_ex_data_X509_STORE_CTX_idx.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_ex_new_index.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_fd.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_peer_cert_chain.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_peer_certificate.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_rbio.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_session.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_verify_result.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_version.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_library_init.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_load_client_CA_file.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_new.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_pending.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_read.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_rstate_string.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_session_reused.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_bio.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_connect_state.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_fd.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_session.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_shutdown.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_verify_result.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_shutdown.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_state_string.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_want.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_write.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/asn1parse.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/bio.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/blowfish.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/bn.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/bn_internal.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/buffer.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ca.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ciphers.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/config.5#1 branch .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/crl.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/crl2pkcs7.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/crypto.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/d2i_DHparams.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/d2i_RSAPublicKey.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/d2i_SSL_SESSION.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/des.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/des_modes.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dgst.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dh.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dhparam.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dsa.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dsa.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dsaparam.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/enc.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/err.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/evp.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/gendsa.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/genrsa.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/hmac.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/lh_stats.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/lhash.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/md5.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/mdc2.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/nseq.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/openssl.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/passwd.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/pkcs12.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/pkcs7.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/pkcs8.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rand.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rand.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rc4.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/req.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ripemd.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rsa.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rsa.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rsautl.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/s_client.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/s_server.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/sess_id.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/sha.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/smime.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/speed.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/spkac.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ssl.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/threads.3#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/verify.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/version.1#2 integrate .. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/x509.1#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/README#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/cvs-supfile#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/doc-supfile#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/gnats-supfile#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/ports-supfile#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/stable-supfile#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/standard-supfile#2 integrate .. //depot/projects/trustedbsd/base/share/examples/cvsup/www-supfile#2 integrate .. //depot/projects/trustedbsd/base/sys/conf/files#23 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acdebug.h#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acdisasm.h#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acglobal.h#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/aclocal.h#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acmacros.h#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acnamesp.h#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acparser.h#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/actables.h#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/actbl.h#3 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/actypes.h#6 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/amlcode.h#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/amlresrc.h#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbcmds.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbdisply.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbexec.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbxface.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmbuffer.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmnames.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmopcode.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmresrc.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmresrcl.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmresrcs.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmutils.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmwalk.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dsmethod.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dsobject.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dsutils.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dswload.c#6 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dswstate.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exconfig.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/excreate.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exdump.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exmisc.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exoparg1.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exoparg2.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exresnte.c#6 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exresolv.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exresop.c#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exstore.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exutils.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsdump.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsdumpdv.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nseval.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsload.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsnames.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsxfeval.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsxfobj.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psargs.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psfind.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psopcode.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psutils.c#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psxface.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/rsio.c#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/rsirq.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/rslist.c#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbconvrt.c#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbgetall.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbinstal.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbrsdt.c#1 branch .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbutils.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbxface.c#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbxfroot.c#4 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/utcopy.c#5 integrate .. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/utxface.c#5 integrate .. //depot/projects/trustedbsd/base/sys/dev/sound/isa/sb16.c#3 integrate .. //depot/projects/trustedbsd/base/sys/dev/usb/uvisor.c#1 branch .. //depot/projects/trustedbsd/base/sys/kern/init_sysent.c#12 integrate .. //depot/projects/trustedbsd/base/sys/kern/syscalls.c#12 integrate .. //depot/projects/trustedbsd/base/sys/kern/syscalls.master#12 integrate .. //depot/projects/trustedbsd/base/sys/kern/uipc_mbuf.c#7 integrate .. //depot/projects/trustedbsd/base/sys/kern/uipc_syscalls.c#13 integrate .. //depot/projects/trustedbsd/base/sys/kern/vfs_syscalls.c#19 integrate .. //depot/projects/trustedbsd/base/sys/modules/Makefile#17 integrate .. //depot/projects/trustedbsd/base/sys/modules/uvisor/Makefile#1 branch .. //depot/projects/trustedbsd/base/sys/pci/if_rl.c#10 integrate .. //depot/projects/trustedbsd/base/sys/sys/mbuf.h#8 integrate .. //depot/projects/trustedbsd/base/sys/sys/syscall.h#13 integrate .. //depot/projects/trustedbsd/base/sys/sys/syscall.mk#13 integrate .. //depot/projects/trustedbsd/base/sys/sys/sysproto.h#14 integrate .. //depot/projects/trustedbsd/base/usr.bin/sed/compile.c#6 integrate Differences ... ==== //depot/projects/trustedbsd/base/crypto/openssl/CHANGES#4 (text+ko) ==== @@ -2,6 +2,58 @@ OpenSSL CHANGES _______________ + Changes between 0.9.6d and 0.9.6e [30 Jul 2002] + + *) Fix cipher selection routines: ciphers without encryption had no flags + for the cipher strength set and where therefore not handled correctly + by the selection routines (PR #130). + [Lutz Jaenicke] + + *) Fix EVP_dsa_sha macro. + [Nils Larsch] + + *) New option + SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS + for disabling the SSL 3.0/TLS 1.0 CBC vulnerability countermeasure + that was added in OpenSSL 0.9.6d. + + As the countermeasure turned out to be incompatible with some + broken SSL implementations, the new option is part of SSL_OP_ALL. + SSL_OP_ALL is usually employed when compatibility with weird SSL + implementations is desired (e.g. '-bugs' option to 's_client' and + 's_server'), so the new option is automatically set in many + applications. + [Bodo Moeller] + + *) Changes in security patch: + + Changes marked "(CHATS)" were sponsored by the Defense Advanced + Research Projects Agency (DARPA) and Air Force Research Laboratory, + Air Force Materiel Command, USAF, under agreement number + F30602-01-2-0537. + + *) Add various sanity checks to asn1_get_length() to reject + the ASN1 length bytes if they exceed sizeof(long), will appear + negative or the content length exceeds the length of the + supplied buffer. + [Steve Henson, Adi Stav <stav@mercury.co.il>, James Yonan <jim@ntlp.com>] + + *) Assertions for various potential buffer overflows, not known to + happen in practice. + [Ben Laurie (CHATS)] + + *) Various temporary buffers to hold ASCII versions of integers were + too small for 64 bit platforms. (CAN-2002-0655) + [Matthew Byng-Maddick <mbm@aldigital.co.uk> and Ben Laurie (CHATS)> + + *) Remote buffer overflow in SSL3 protocol - an attacker could + supply an oversized session ID to a client. (CAN-2002-0656) + [Ben Laurie (CHATS)] + + *) Remote buffer overflow in SSL2 protocol - an attacker could + supply an oversized client master key. (CAN-2002-0656) + [Ben Laurie (CHATS)] + Changes between 0.9.6c and 0.9.6d [9 May 2002] *) Fix crypto/asn1/a_sign.c so that 'parameters' is omitted (not ==== //depot/projects/trustedbsd/base/crypto/openssl/Configure#4 (text+ko) ==== @@ -144,6 +144,7 @@ "solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", "solaris-sparcv8-gcc","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", "solaris-sparcv9-gcc","gcc:-mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W -DULTRASPARC::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +"solaris64-sparcv9-gcc31","gcc:-mcpu=ultrasparc -m64 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DULTRASPARC::-D_REENTRANT:-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::asm/md5-sparcv9.o::::::dlfcn:solaris-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", # gcc pre-2.8 doesn't understand -mcpu=ultrasparc, so fall down to -mv8 # but keep the assembler modules. "solaris-sparcv9-gcc27","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W -DULTRASPARC::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus-gcc27.o:::asm/md5-sparcv8plus-gcc27.o::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", @@ -169,10 +170,10 @@ "linux-sparcv7","gcc:-DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::", # Ray Miller <ray.miller@computing-services.oxford.ac.uk> has patiently # assisted with debugging of following two configs. -"linux-sparcv8","gcc:-mv8 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o::::", +"linux-sparcv8","gcc:-mv8 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", # it's a real mess with -mcpu=ultrasparc option under Linux, but # -Wa,-Av8plus should do the trick no matter what. -"linux-sparcv9","gcc:-mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DULTRASPARC -DBN_DIV2W::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:linux-shared:-fPIC:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +"linux-sparcv9","gcc:-mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DULTRASPARC -DBN_DIV2W::-D_REENTRANT:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", # !!!Folowing can't be even tested yet!!! # We have to wait till 64-bit glibc for SPARC is operational!!! #"linux64-sparcv9","sparc64-linux-gcc:-m64 -mcpu=v9 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DULTRASPARC -DBN_DIV2W::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::asm/md5-sparcv9.o:", @@ -228,6 +229,7 @@ "hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY:::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:+Z::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", "hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W:::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:-fPIC::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", "hpux64-parisc-cc","cc:-Ae +DD64 +O3 +ESlit -z -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT:-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dlfcn:hpux64-shared:+Z::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +"hpux64-parisc-gcc","gcc:-DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT:-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dlfcn:hpux64-shared:-fpic::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", # More attempts at unified 10.X and 11.X targets for HP C compiler. # @@ -335,7 +337,7 @@ # The intel boxes :-), It would be worth seeing if bsdi-gcc can use the # bn86-elf.o file file since it is hand tweaked assembler. "linux-elf", "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall::-D_REENTRANT:-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", -"debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT:-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", +"debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT:-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)", "debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT:-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn", "linux-aout", "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall::(unknown)::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}", "linux-mipsel", "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::(unknown)::BN_LLONG:::", @@ -435,7 +437,7 @@ "sco5-cc-pentium", "cc:-Kpentium::(unknown):-lsocket:${x86_gcc_des} ${x86_gcc_opts}:::", # des options? "sco5-gcc", "gcc:-O3 -fomit-frame-pointer::(unknown):-lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::", # the SCO assembler doesn't seem to like our assembler files ... "sco5-cc-shared","cc:-belf:::-lsocket -lresolv -lnsl:MD2_CHAR RC4_INDEX ${x86_gcc_des}::::::::::dlfcn:svr3-shared:-Kpic", -"sco5-gcc-shared","gcc:-O3 -DFILIO_H -fomit-frame-pointer:::-lsocket -lresolv -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::dlfcn:svr3-shared:-fPIC", # the SCO assembler doesn't seem to like our assembler files ... +"sco5-gcc-shared","gcc:-O3 -fomit-frame-pointer:::-lsocket -lresolv -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::dlfcn:svr3-shared:-fPIC", # the SCO assembler doesn't seem to like our assembler files ... # Sinix/ReliantUNIX RM400 # NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g */ @@ -470,6 +472,9 @@ # and its library files in util/pl/*) "Mingw32", "gcc:-DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32", +# UWIN +"UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall::::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32", + # Cygwin "Cygwin-pre1.3", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O2 -m486 -Wall::(unknown)::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32", "Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O2 -m486 -Wall::::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32:cygwin-shared:::.dll", @@ -488,7 +493,7 @@ ##### MacOS X (a.k.a. Rhapsody or Darwin) setup "rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown)::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::", -"darwin-ppc-cc","cc:-O3 -D_DARWIN -DB_ENDIAN::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::::::::::darwin-shared:-fPIC:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib", +"darwin-ppc-cc","cc:-O3 -D_DARWIN -DB_ENDIAN -fno-common::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::::::::::darwin-shared:-fPIC::.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib", ##### Sony NEWS-OS 4.x "newsos4-gcc","gcc:-O -DB_ENDIAN -DNEWS4::(unknown):-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::", @@ -899,6 +904,10 @@ $cflags.=" -DRMD160_ASM"; } +# "Stringify" the C flags string. This permits it to be made part of a string +# and works as well on command lines. +$cflags =~ s/([\\\"])/\\\1/g; + my $version = "unknown"; my $major = "unknown"; my $minor = "unknown"; @@ -981,13 +990,21 @@ if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/) { my $sotmp = $1; - s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/ + s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/; + } + elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/) + { + s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/; } elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/) { my $sotmp = $1; s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/; } + elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/) + { + s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/; + } s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/; print OUT $_."\n"; } ==== //depot/projects/trustedbsd/base/crypto/openssl/FAQ#4 (text+ko) ==== @@ -38,6 +38,8 @@ * Why does the OpenSSL compilation fail on Alpha Tru64 Unix? * Why does the OpenSSL compilation fail with "ar: command not found"? * Why does the OpenSSL compilation fail on Win32 with VC++? +* What is special about OpenSSL on Redhat? +* Why does the OpenSSL test suite fail on MacOS X? [PROG] Questions about programming with OpenSSL @@ -59,7 +61,7 @@ * Which is the current version of OpenSSL? The current version is available from <URL: http://www.openssl.org>. -OpenSSL 0.9.6d was released on 9 May, 2002. +OpenSSL 0.9.6e was released on 30 May, 2002. In addition to the current stable release, you can also access daily snapshots of the OpenSSL development version at <URL: @@ -215,8 +217,11 @@ installing the SUNski package from Sun patch 105710-01 (Sparc) which adds a /dev/random device and make sure it gets used, usually through $RANDFILE. There are probably similar patches for the other Solaris -versions. However, be warned that /dev/random is usually a blocking -device, which may have some effects on OpenSSL. +versions. An official statement from Sun with respect to /dev/random +support can be found at + http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsrdb/27606&zone_32=SUNWski +However, be warned that /dev/random is usually a blocking device, which +may have some effects on OpenSSL. * Why do I get an "unable to write 'random state'" error message? @@ -451,6 +456,52 @@ and the changes are only valid for the current DOS session. +* What is special about OpenSSL on Redhat? + +Red Hat Linux (release 7.0 and later) include a preinstalled limited +version of OpenSSL. For patent reasons, support for IDEA, RC5 and MDC2 +is disabled in this version. The same may apply to other Linux distributions. +Users may therefore wish to install more or all of the features left out. + +To do this you MUST ensure that you do not overwrite the openssl that is in +/usr/bin on your Red Hat machine. Several packages depend on this file, +including sendmail and ssh. /usr/local/bin is a good alternative choice. The +libraries that come with Red Hat 7.0 onwards have different names and so are +not affected. (eg For Red Hat 7.2 they are /lib/libssl.so.0.9.6b and +/lib/libcrypto.so.0.9.6b with symlinks /lib/libssl.so.2 and +/lib/libcrypto.so.2 respectively). + +Please note that we have been advised by Red Hat attempting to recompile the +openssl rpm with all the cryptography enabled will not work. All other +packages depend on the original Red Hat supplied openssl package. It is also +worth noting that due to the way Red Hat supplies its packages, updates to +openssl on each distribution never change the package version, only the +build number. For example, on Red Hat 7.1, the latest openssl package has +version number 0.9.6 and build number 9 even though it contains all the +relevant updates in packages up to and including 0.9.6b. + +A possible way around this is to persuade Red Hat to produce a non-US +version of Red Hat Linux. + +FYI: Patent numbers and expiry dates of US patents: +MDC-2: 4,908,861 13/03/2007 +IDEA: 5,214,703 25/05/2010 +RC5: 5,724,428 03/03/2015 + + +* Why does the OpenSSL test suite fail on MacOS X? + +If the failure happens when running 'make test' and the RC4 test fails, +it's very probable that you have OpenSSL 0.9.6b delivered with the +operating system (you can find out by running '/usr/bin/openssl version') +and that you were trying to build OpenSSL 0.9.6d. The problem is that +the loader ('ld') in MacOS X has a misfeature that's quite difficult to +go around and has linked the programs "openssl" and the test programs +with /usr/lib/libcrypto.dylib and /usr/lib/libssl.dylib instead of the +libraries you just built. +Look in the file PROBLEMS for a more detailed explanation and for possible +solutions. + [PROG] ======================================================================== * Is OpenSSL thread-safe? ==== //depot/projects/trustedbsd/base/crypto/openssl/INSTALL#3 (text+ko) ==== @@ -128,8 +128,11 @@ the failure that aren't problems in OpenSSL itself (like missing standard headers). If it is a problem with OpenSSL itself, please report the problem to <openssl-bugs@openssl.org> (note that your - message will be forwarded to a public mailing list). Include the - output of "make report" in your message. + message will be recorded in the request tracker publicly readable + via http://www.openssl.org/rt2.html and will be forwarded to a public + mailing list). Include the output of "make report" in your message. + Please check out the request tracker. Maybe the bug was already + reported or has already been fixed. [If you encounter assembler error messages, try the "no-asm" configuration option as an immediate fix.] @@ -147,7 +150,8 @@ try removing any compiler optimization flags from the CFLAGS line in Makefile.ssl and run "make clean; make". Please send a bug report to <openssl-bugs@openssl.org>, including the output of - "make report". + "make report" in order to be added to the request tracker at + http://www.openssl.org/rt2.html. 4. If everything tests ok, install OpenSSL with ==== //depot/projects/trustedbsd/base/crypto/openssl/Makefile.org#4 (text+ko) ==== @@ -420,6 +420,7 @@ -b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ +h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ -Fl lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \ + chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \ libs="$$libs -L. -l$$i"; \ done @@ -430,6 +431,7 @@ -b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ +h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ +forceload lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \ + chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \ libs="$$libs -L. -l$$i"; \ done @@ -545,7 +547,7 @@ tests: rehash @(cd test && echo "testing..." && \ - $(MAKE) CC='${CC}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SDIRS='${SDIRS}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PERL='${PERL}' EXE_EXT='${EXE_EXT}' tests ); + $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' TESTS='${TESTS}' EXE_EXT='${EXE_EXT}' SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' OPENSSL_DEBUG_MEMORY=on tests ); @apps/openssl version -a report: @@ -556,7 +558,7 @@ do \ if [ -d "$$i" ]; then \ (cd $$i && echo "making dependencies $$i..." && \ - $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' depend ) || exit 1; \ + $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' PERL='${PERL}' depend ) || exit 1; \ fi; \ done; @@ -601,20 +603,26 @@ update: depend errors stacks util/libeay.num util/ssleay.num crypto/objects/obj_dat.h TABLE +# Build distribution tar-file. As the list of files returned by "find" is +# pretty long, on several platforms a "too many arguments" error or similar +# would occur. Therefore the list of files is temporarily stored into a file +# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal +# tar does not support the --files-from option. tar: - @$(TAR) $(TARFLAGS) -cvf - \ - `find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort` |\ + find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \ + $(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \ tardy --user_number=0 --user_name=openssl \ --group_number=0 --group_name=openssl \ --prefix=openssl-$(VERSION) - |\ gzip --best >../$(TARFILE).gz; \ + rm -f ../$(TARFILE).list; \ ls -l ../$(TARFILE).gz dist: $(PERL) Configure dist @$(MAKE) dist_pem_h @$(MAKE) SDIRS='${SDIRS}' clean - @$(MAKE) tar + @$(MAKE) TAR='${TAR}' TARFLAGS='${TARFLAGS}' tar dist_pem_h: (cd crypto/pem; $(MAKE) CC='${CC}' SDIRS='${SDIRS}' CFLAG='${CFLAG}' pem.h; $(MAKE) clean) @@ -656,7 +664,7 @@ ( echo installing $$i; \ if [ "$(PLATFORM)" != "Cygwin" ]; then \ cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/lib; \ - chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \ + chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \ else \ c=`echo $$i | sed 's/^lib/cyg/'`; \ cp $$c $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$c; \ @@ -681,18 +689,20 @@ fn=`basename $$i .pod`; \ if [ "$$fn" = "config" ]; then sec=5; else sec=1; fi; \ echo "installing man$$sec/`basename $$i .pod`.$$sec"; \ - (cd `dirname $$i`; \ - $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \ - --release=$(VERSION) `basename $$i`) \ + (cd `$(PERL) util/dirname.pl $$i`; \ + sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \ + --section=$$sec --center=OpenSSL \ + --release=$(VERSION) `basename $$i`") \ > $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \ done @for i in doc/crypto/*.pod doc/ssl/*.pod; do \ fn=`basename $$i .pod`; \ if [ "$$fn" = "des_modes" ]; then sec=7; else sec=3; fi; \ echo "installing man$$sec/`basename $$i .pod`.$$sec"; \ - (cd `dirname $$i`; \ - $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \ - --release=$(VERSION) `basename $$i`) \ + (cd `$(PERL) util/dirname.pl $$i`; \ + sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \ + --section=$$sec --center=OpenSSL \ + --release=$(VERSION) `basename $$i`") \ > $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \ done ==== //depot/projects/trustedbsd/base/crypto/openssl/Makefile.ssl#4 (text+ko) ==== @@ -4,7 +4,7 @@ ## Makefile for OpenSSL ## -VERSION=0.9.6d +VERSION=0.9.6e MAJOR=0 MINOR=9.6 SHLIB_VERSION_NUMBER=0.9.6 @@ -64,7 +64,7 @@ EXE_EXT= AR=ar r RANLIB= /usr/bin/ranlib -PERL= /usr/local/bin/perl +PERL= /usr/local/bin/perl5 TAR= tar TARFLAGS= --no-recursion @@ -422,6 +422,7 @@ -b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ +h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ -Fl lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \ + chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \ libs="$$libs -L. -l$$i"; \ done @@ -432,6 +433,7 @@ -b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ +h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \ +forceload lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \ + chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \ libs="$$libs -L. -l$$i"; \ done @@ -547,7 +549,7 @@ tests: rehash @(cd test && echo "testing..." && \ - $(MAKE) CC='${CC}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SDIRS='${SDIRS}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PERL='${PERL}' EXE_EXT='${EXE_EXT}' tests ); + $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' TESTS='${TESTS}' EXE_EXT='${EXE_EXT}' SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' OPENSSL_DEBUG_MEMORY=on tests ); @apps/openssl version -a report: @@ -558,7 +560,7 @@ do \ if [ -d "$$i" ]; then \ (cd $$i && echo "making dependencies $$i..." && \ - $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' depend ) || exit 1; \ + $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' PERL='${PERL}' depend ) || exit 1; \ fi; \ done; @@ -603,20 +605,26 @@ update: depend errors stacks util/libeay.num util/ssleay.num crypto/objects/obj_dat.h TABLE +# Build distribution tar-file. As the list of files returned by "find" is +# pretty long, on several platforms a "too many arguments" error or similar +# would occur. Therefore the list of files is temporarily stored into a file +# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal +# tar does not support the --files-from option. tar: - @$(TAR) $(TARFLAGS) -cvf - \ - `find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort` |\ + find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \ + $(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \ tardy --user_number=0 --user_name=openssl \ --group_number=0 --group_name=openssl \ --prefix=openssl-$(VERSION) - |\ gzip --best >../$(TARFILE).gz; \ + rm -f ../$(TARFILE).list; \ ls -l ../$(TARFILE).gz dist: $(PERL) Configure dist @$(MAKE) dist_pem_h @$(MAKE) SDIRS='${SDIRS}' clean - @$(MAKE) tar + @$(MAKE) TAR='${TAR}' TARFLAGS='${TARFLAGS}' tar dist_pem_h: (cd crypto/pem; $(MAKE) CC='${CC}' SDIRS='${SDIRS}' CFLAG='${CFLAG}' pem.h; $(MAKE) clean) @@ -658,7 +666,7 @@ ( echo installing $$i; \ if [ "$(PLATFORM)" != "Cygwin" ]; then \ cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/lib; \ - chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \ + chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \ else \ c=`echo $$i | sed 's/^lib/cyg/'`; \ cp $$c $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$c; \ @@ -683,18 +691,20 @@ fn=`basename $$i .pod`; \ if [ "$$fn" = "config" ]; then sec=5; else sec=1; fi; \ echo "installing man$$sec/`basename $$i .pod`.$$sec"; \ - (cd `dirname $$i`; \ - $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \ - --release=$(VERSION) `basename $$i`) \ + (cd `$(PERL) util/dirname.pl $$i`; \ + sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \ + --section=$$sec --center=OpenSSL \ + --release=$(VERSION) `basename $$i`") \ > $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \ done @for i in doc/crypto/*.pod doc/ssl/*.pod; do \ fn=`basename $$i .pod`; \ if [ "$$fn" = "des_modes" ]; then sec=7; else sec=3; fi; \ echo "installing man$$sec/`basename $$i .pod`.$$sec"; \ - (cd `dirname $$i`; \ - $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \ - --release=$(VERSION) `basename $$i`) \ + (cd `$(PERL) util/dirname.pl $$i`; \ + sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \ + --section=$$sec --center=OpenSSL \ + --release=$(VERSION) `basename $$i`") \ > $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \ done ==== //depot/projects/trustedbsd/base/crypto/openssl/NEWS#4 (text+ko) ==== @@ -56,7 +56,7 @@ o Bug fixes for Win32, HP/UX and Irix. o Bug fixes in BIGNUM, SSL, PKCS#7, PKCS#12, X.509, CONF and memory checking routines. - o Bug fixes for RSA operations in threaded enviroments. + o Bug fixes for RSA operations in threaded environments. o Bug fixes in misc. openssl applications. o Remove a few potential memory leaks. o Add tighter checks of BIGNUM routines. ==== //depot/projects/trustedbsd/base/crypto/openssl/README#4 (text+ko) ==== @@ -1,5 +1,5 @@ - OpenSSL 0.9.6d 9 May 2002 + OpenSSL 0.9.6e 30 July 2002 Copyright (c) 1998-2002 The OpenSSL Project Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson @@ -122,6 +122,13 @@ lists the functions; you will probably have to look at the code to work out how to use them. Look at the example programs. + PROBLEMS + -------- + + For some platforms, there are some known problems that may affect the user + or application author. We try to collect those in doc/PROBLEMS, with current + thoughts on how they should be solved in a future of OpenSSL. + SUPPORT ------- @@ -146,11 +153,13 @@ - Problem Description (steps that will reproduce the problem, if known) - Stack Traceback (if the application dumps core) - Report the bug to the OpenSSL project at: + Report the bug to the OpenSSL project via the Request Tracker + (http://www.openssl.org/rt2.html) by mail to: openssl-bugs@openssl.org - Note that mail to openssl-bugs@openssl.org is forwarded to a public + Note that mail to openssl-bugs@openssl.org is recorded in the publicly + readable request tracker database and is forwarded to a public mailing list. Confidential mail may be sent to openssl-security@openssl.org (PGP key available from the key servers). @@ -164,7 +173,9 @@ textual explanation of what your patch does. Note: For legal reasons, contributions from the US can be accepted only - if a copy of the patch is sent to crypt@bxa.doc.gov + if a TSA notification and a copy of the patch is sent to crypt@bis.doc.gov; + see http://www.bis.doc.gov/Encryption/PubAvailEncSourceCodeNofify.html [sic] + and http://w3.access.gpo.gov/bis/ear/pdf/740.pdf (EAR Section 740.13(e)). The preferred format for changes is "diff -u" output. You might >>> TRUNCATED FOR MAIL (1000 lines) <<< To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe p4-projects" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200207301948.g6UJmqKb049455>