PERFORCE change 15214 for review
Robert Watson
rwatson at freebsd.org
Tue Jul 30 19:48:52 GMT 2002
http://people.freebsd.org/~peter/p4db/chv.cgi?CH=15214
Change 15214 by rwatson at rwatson_tislabs on 2002/07/30 12:48:06
Integ the trustedbsd_base tree to pull in new OpenSSL, as well
as the mac_policy() system call.
Affected files ...
.. //depot/projects/trustedbsd/base/crypto/openssl/CHANGES#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/Configure#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/FAQ#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/INSTALL#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/Makefile.org#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/Makefile.ssl#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/NEWS#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/PROBLEMS#1 branch
.. //depot/projects/trustedbsd/base/crypto/openssl/README#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/CA.pl#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/Makefile.ssl#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/apps.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/asn1pars.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/ca.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/der_chop#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/pkcs7.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/apps/x509.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/config#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/Makefile.ssl#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_bitstr.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_enum.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_int.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_set.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/a_utctm.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/asn1_lib.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/d2i_dhp.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/d2i_dsap.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/d2i_r_pr.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/t_pkey.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/asn1/x_pubkey.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bio/b_print.c#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bio/bf_nbio.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bio/bss_bio.c#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn.h#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_div.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_gcd.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_mont.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/bn/bn_mul.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/conf/Makefile.ssl#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/conf/conf_def.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/cryptlib.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/cryptlib.h#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/des/des.h#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/dsa/dsa_asn1.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/dso/dso_dlfcn.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/ebcdic.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/bio_enc.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/c_allc.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/c_alld.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/evp/evp.h#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/objects/o_names.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/objects/obj_dat.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/opensslv.h#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pem/pem2.h#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pem/pem_lib.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/perlasm/x86nasm.pl#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pkcs12/pkcs12.h#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pkcs7/pk7_doit.c#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/pkcs7/verify.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/rsa/rsa_eay.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/txt_db/txt_db.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/crypto/x509v3/v3_ia5.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/demos/maurice/loadkeys.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/apps/crl2pkcs7.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/apps/smime.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/BN_rand.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/DH_get_ex_new_index.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/EVP_DigestInit.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/EVP_SignInit.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/EVP_VerifyInit.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/RSA_check_key.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/err.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/crypto/rsa.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_sess_set_cache_size.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_sess_set_get_cb.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_set_cert_store.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_set_client_cert_cb.pod#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_CTX_set_options.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_accept.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_connect.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_do_handshake.pod#1 branch
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_get_error.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_set_connect_state.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/SSL_write.pod#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/doc/ssl/ssl.pod#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/e_os.h#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/Makefile.ssl#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s2_clnt.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s2_lib.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s2_srvr.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_clnt.c#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_enc.c#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_lib.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/s3_srvr.c#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl.h#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_asn1.c#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_err.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_locl.h#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/ssl_sess.c#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/ssl/t1_enc.c#4 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/test/Makefile.ssl#3 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/tools/c_rehash#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/util/dirname.pl#1 branch
.. //depot/projects/trustedbsd/base/crypto/openssl/util/domd#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/util/mk1mf.pl#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/util/pl/BC-32.pl#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/util/pl/VC-32.pl#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/util/pod2man.pl#2 integrate
.. //depot/projects/trustedbsd/base/crypto/openssl/util/pod2mantest#1 branch
.. //depot/projects/trustedbsd/base/crypto/openssl/util/pod2mantest.pod#1 branch
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/Makefile#8 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_ctrl.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_base64.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_buffer.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_cipher.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_md.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_null.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_f_ssl.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_find_type.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_new_bio_pair.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_push.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_read.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_accept.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_bio.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_connect.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_fd.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_file.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_mem.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_null.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_s_socket.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_set_callback.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BIO_should_retry.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_CTX_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_CTX_start.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_add.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_add_word.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_bn2bin.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_cmp.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_copy.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_generate_prime.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_mod_inverse.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_mod_mul_montgomery.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_mod_mul_reciprocal.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_num_bytes.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_rand.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_set_bit.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/BN_zero.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/CA.pl.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/CRYPTO_set_ex_data.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_generate_key.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_generate_parameters.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_get_ex_new_index.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_set_method.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DH_size.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_SIG_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_do_sign.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_dup_DH.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_generate_key.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_generate_parameters.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_get_ex_new_index.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_set_method.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_sign.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/DSA_size.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_GET_LIB.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_clear_error.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_error_string.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_get_error.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_load_crypto_strings.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_load_strings.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_print_errors.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_put_error.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ERR_remove_state.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_DigestInit.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_EncryptInit.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_OpenInit.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_SealInit.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_SignInit.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/EVP_VerifyInit.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/OPENSSL_VERSION_NUMBER.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/OpenSSL_add_all_algorithms.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_add.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_bytes.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_cleanup.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_egd.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_load_file.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RAND_set_rand_method.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_blinding_on.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_check_key.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_generate_key.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_get_ex_new_index.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_padding_add_PKCS1_type_1.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_print.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_private_encrypt.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_public_encrypt.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_set_method.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_sign.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_sign_ASN1_OCTET_STRING.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/RSA_size.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CIPHER_get_name.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_COMP_add_compression_method.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_add_extra_chain_cert.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_add_session.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_ctrl.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_flush_sessions.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_free.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_get_ex_new_index.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_get_verify_mode.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_load_verify_locations.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sess_number.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sess_set_cache_size.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sess_set_get_cb.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_sessions.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_cert_store.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_cert_verify_callback.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_cipher_list.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_client_CA_list.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_client_cert_cb.3#1 branch
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_default_passwd_cb.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_info_callback.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_mode.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_options.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_quiet_shutdown.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_session_cache_mode.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_session_id_context.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_ssl_version.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_timeout.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_tmp_dh_callback.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_tmp_rsa_callback.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_set_verify.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_CTX_use_certificate.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_SESSION_free.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_SESSION_get_ex_new_index.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_SESSION_get_time.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_accept.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_alert_type_string.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_clear.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_connect.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_do_handshake.3#1 branch
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_free.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_SSL_CTX.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_ciphers.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_client_CA_list.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_current_cipher.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_default_timeout.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_error.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_ex_data_X509_STORE_CTX_idx.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_ex_new_index.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_fd.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_peer_cert_chain.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_peer_certificate.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_rbio.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_session.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_verify_result.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_get_version.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_library_init.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_load_client_CA_file.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_new.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_pending.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_read.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_rstate_string.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_session_reused.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_bio.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_connect_state.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_fd.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_session.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_shutdown.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_set_verify_result.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_shutdown.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_state_string.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_want.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/SSL_write.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/asn1parse.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/bio.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/blowfish.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/bn.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/bn_internal.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/buffer.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ca.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ciphers.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/config.5#1 branch
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/crl.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/crl2pkcs7.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/crypto.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/d2i_DHparams.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/d2i_RSAPublicKey.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/d2i_SSL_SESSION.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/des.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/des_modes.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dgst.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dh.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dhparam.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dsa.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dsa.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/dsaparam.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/enc.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/err.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/evp.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/gendsa.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/genrsa.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/hmac.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/lh_stats.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/lhash.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/md5.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/mdc2.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/nseq.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/openssl.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/passwd.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/pkcs12.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/pkcs7.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/pkcs8.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rand.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rand.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rc4.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/req.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ripemd.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rsa.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rsa.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/rsautl.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/s_client.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/s_server.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/sess_id.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/sha.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/smime.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/speed.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/spkac.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/ssl.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/threads.3#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/verify.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/version.1#2 integrate
.. //depot/projects/trustedbsd/base/secure/lib/libcrypto/man/x509.1#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/README#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/cvs-supfile#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/doc-supfile#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/gnats-supfile#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/ports-supfile#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/stable-supfile#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/standard-supfile#2 integrate
.. //depot/projects/trustedbsd/base/share/examples/cvsup/www-supfile#2 integrate
.. //depot/projects/trustedbsd/base/sys/conf/files#23 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acdebug.h#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acdisasm.h#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acglobal.h#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/aclocal.h#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acmacros.h#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acnamesp.h#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/acparser.h#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/actables.h#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/actbl.h#3 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/actypes.h#6 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/amlcode.h#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/amlresrc.h#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbcmds.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbdisply.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbexec.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dbxface.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmbuffer.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmnames.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmopcode.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmresrc.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmresrcl.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmresrcs.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmutils.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dmwalk.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dsmethod.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dsobject.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dsutils.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dswload.c#6 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/dswstate.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exconfig.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/excreate.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exdump.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exmisc.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exoparg1.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exoparg2.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exresnte.c#6 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exresolv.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exresop.c#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exstore.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/exutils.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsdump.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsdumpdv.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nseval.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsload.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsnames.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsxfeval.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/nsxfobj.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psargs.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psfind.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psopcode.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psutils.c#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/psxface.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/rsio.c#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/rsirq.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/rslist.c#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbconvrt.c#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbgetall.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbinstal.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbrsdt.c#1 branch
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbutils.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbxface.c#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/tbxfroot.c#4 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/utcopy.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/contrib/dev/acpica/utxface.c#5 integrate
.. //depot/projects/trustedbsd/base/sys/dev/sound/isa/sb16.c#3 integrate
.. //depot/projects/trustedbsd/base/sys/dev/usb/uvisor.c#1 branch
.. //depot/projects/trustedbsd/base/sys/kern/init_sysent.c#12 integrate
.. //depot/projects/trustedbsd/base/sys/kern/syscalls.c#12 integrate
.. //depot/projects/trustedbsd/base/sys/kern/syscalls.master#12 integrate
.. //depot/projects/trustedbsd/base/sys/kern/uipc_mbuf.c#7 integrate
.. //depot/projects/trustedbsd/base/sys/kern/uipc_syscalls.c#13 integrate
.. //depot/projects/trustedbsd/base/sys/kern/vfs_syscalls.c#19 integrate
.. //depot/projects/trustedbsd/base/sys/modules/Makefile#17 integrate
.. //depot/projects/trustedbsd/base/sys/modules/uvisor/Makefile#1 branch
.. //depot/projects/trustedbsd/base/sys/pci/if_rl.c#10 integrate
.. //depot/projects/trustedbsd/base/sys/sys/mbuf.h#8 integrate
.. //depot/projects/trustedbsd/base/sys/sys/syscall.h#13 integrate
.. //depot/projects/trustedbsd/base/sys/sys/syscall.mk#13 integrate
.. //depot/projects/trustedbsd/base/sys/sys/sysproto.h#14 integrate
.. //depot/projects/trustedbsd/base/usr.bin/sed/compile.c#6 integrate
Differences ...
==== //depot/projects/trustedbsd/base/crypto/openssl/CHANGES#4 (text+ko) ====
@@ -2,6 +2,58 @@
OpenSSL CHANGES
_______________
+ Changes between 0.9.6d and 0.9.6e [30 Jul 2002]
+
+ *) Fix cipher selection routines: ciphers without encryption had no flags
+ for the cipher strength set and where therefore not handled correctly
+ by the selection routines (PR #130).
+ [Lutz Jaenicke]
+
+ *) Fix EVP_dsa_sha macro.
+ [Nils Larsch]
+
+ *) New option
+ SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS
+ for disabling the SSL 3.0/TLS 1.0 CBC vulnerability countermeasure
+ that was added in OpenSSL 0.9.6d.
+
+ As the countermeasure turned out to be incompatible with some
+ broken SSL implementations, the new option is part of SSL_OP_ALL.
+ SSL_OP_ALL is usually employed when compatibility with weird SSL
+ implementations is desired (e.g. '-bugs' option to 's_client' and
+ 's_server'), so the new option is automatically set in many
+ applications.
+ [Bodo Moeller]
+
+ *) Changes in security patch:
+
+ Changes marked "(CHATS)" were sponsored by the Defense Advanced
+ Research Projects Agency (DARPA) and Air Force Research Laboratory,
+ Air Force Materiel Command, USAF, under agreement number
+ F30602-01-2-0537.
+
+ *) Add various sanity checks to asn1_get_length() to reject
+ the ASN1 length bytes if they exceed sizeof(long), will appear
+ negative or the content length exceeds the length of the
+ supplied buffer.
+ [Steve Henson, Adi Stav <stav at mercury.co.il>, James Yonan <jim at ntlp.com>]
+
+ *) Assertions for various potential buffer overflows, not known to
+ happen in practice.
+ [Ben Laurie (CHATS)]
+
+ *) Various temporary buffers to hold ASCII versions of integers were
+ too small for 64 bit platforms. (CAN-2002-0655)
+ [Matthew Byng-Maddick <mbm at aldigital.co.uk> and Ben Laurie (CHATS)>
+
+ *) Remote buffer overflow in SSL3 protocol - an attacker could
+ supply an oversized session ID to a client. (CAN-2002-0656)
+ [Ben Laurie (CHATS)]
+
+ *) Remote buffer overflow in SSL2 protocol - an attacker could
+ supply an oversized client master key. (CAN-2002-0656)
+ [Ben Laurie (CHATS)]
+
Changes between 0.9.6c and 0.9.6d [9 May 2002]
*) Fix crypto/asn1/a_sign.c so that 'parameters' is omitted (not
==== //depot/projects/trustedbsd/base/crypto/openssl/Configure#4 (text+ko) ====
@@ -144,6 +144,7 @@
"solaris-sparcv7-gcc","gcc:-O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
"solaris-sparcv8-gcc","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
"solaris-sparcv9-gcc","gcc:-mcpu=ultrasparc -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W -DULTRASPARC::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
+"solaris64-sparcv9-gcc31","gcc:-mcpu=ultrasparc -m64 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DULTRASPARC::-D_REENTRANT:-lsocket -lnsl -ldl:SIXTY_FOUR_BIT_LONG RC4_CHAR RC4_CHUNK DES_INT DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::asm/md5-sparcv9.o::::::dlfcn:solaris-shared:-fPIC:-m64:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
# gcc pre-2.8 doesn't understand -mcpu=ultrasparc, so fall down to -mv8
# but keep the assembler modules.
"solaris-sparcv9-gcc27","gcc:-mv8 -O3 -fomit-frame-pointer -Wall -DB_ENDIAN -DBN_DIV2W -DULTRASPARC::-D_REENTRANT:-lsocket -lnsl -ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus-gcc27.o:::asm/md5-sparcv8plus-gcc27.o::::::dlfcn:solaris-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
@@ -169,10 +170,10 @@
"linux-sparcv7","gcc:-DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::",
# Ray Miller <ray.miller at computing-services.oxford.ac.uk> has patiently
# assisted with debugging of following two configs.
-"linux-sparcv8","gcc:-mv8 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o::::",
+"linux-sparcv8","gcc:-mv8 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DBN_DIV2W::-D_REENTRANT:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8.o:::::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
# it's a real mess with -mcpu=ultrasparc option under Linux, but
# -Wa,-Av8plus should do the trick no matter what.
-"linux-sparcv9","gcc:-mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DULTRASPARC -DBN_DIV2W::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:linux-shared:-fPIC:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
+"linux-sparcv9","gcc:-mcpu=ultrasparc -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -Wa,-Av8plus -DULTRASPARC -DBN_DIV2W::-D_REENTRANT:-ldl:BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:asm/sparcv8plus.o:::asm/md5-sparcv8plus.o::::::dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
# !!!Folowing can't be even tested yet!!!
# We have to wait till 64-bit glibc for SPARC is operational!!!
#"linux64-sparcv9","sparc64-linux-gcc:-m64 -mcpu=v9 -DB_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall -DULTRASPARC -DBN_DIV2W::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR::::asm/md5-sparcv9.o:",
@@ -228,6 +229,7 @@
"hpux-parisc-cc-o4","cc:-Ae +O4 +ESlit -z -DB_ENDIAN -DBN_DIV2W -DMD32_XARRAY:::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:+Z::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
"hpux-parisc-gcc","gcc:-O3 -DB_ENDIAN -DBN_DIV2W:::-ldld:BN_LLONG DES_PTR DES_UNROLL DES_RISC1::::::::::dl:hpux-shared:-fPIC::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
"hpux64-parisc-cc","cc:-Ae +DD64 +O3 +ESlit -z -DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT:-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dlfcn:hpux64-shared:+Z::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
+"hpux64-parisc-gcc","gcc:-DB_ENDIAN -DMD32_XARRAY::-D_REENTRANT:-ldl:SIXTY_FOUR_BIT_LONG MD2_CHAR RC4_INDEX RC4_CHAR DES_UNROLL DES_RISC1 DES_INT::::::::::dlfcn:hpux64-shared:-fpic::.sl.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
# More attempts at unified 10.X and 11.X targets for HP C compiler.
#
@@ -335,7 +337,7 @@
# The intel boxes :-), It would be worth seeing if bsdi-gcc can use the
# bn86-elf.o file file since it is hand tweaked assembler.
"linux-elf", "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall::-D_REENTRANT:-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
-"debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT:-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC:.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
+"debug-linux-elf","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT:-lefence -ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn:linux-shared:-fPIC::.so.\$(SHLIB_MAJOR).\$(SHLIB_MINOR)",
"debug-linux-elf-noefence","gcc:-DBN_DEBUG -DREF_CHECK -DCONF_DEBUG -DBN_CTX_DEBUG -DCRYPTO_MDEBUG -DL_ENDIAN -DTERMIO -g -m486 -Wall::-D_REENTRANT:-ldl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_elf_asm}:dlfcn",
"linux-aout", "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -m486 -Wall::(unknown)::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:${x86_out_asm}",
"linux-mipsel", "gcc:-DL_ENDIAN -DTERMIO -O3 -fomit-frame-pointer -Wall::(unknown)::BN_LLONG:::",
@@ -435,7 +437,7 @@
"sco5-cc-pentium", "cc:-Kpentium::(unknown):-lsocket:${x86_gcc_des} ${x86_gcc_opts}:::", # des options?
"sco5-gcc", "gcc:-O3 -fomit-frame-pointer::(unknown):-lsocket:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}:::", # the SCO assembler doesn't seem to like our assembler files ...
"sco5-cc-shared","cc:-belf:::-lsocket -lresolv -lnsl:MD2_CHAR RC4_INDEX ${x86_gcc_des}::::::::::dlfcn:svr3-shared:-Kpic",
-"sco5-gcc-shared","gcc:-O3 -DFILIO_H -fomit-frame-pointer:::-lsocket -lresolv -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::dlfcn:svr3-shared:-fPIC", # the SCO assembler doesn't seem to like our assembler files ...
+"sco5-gcc-shared","gcc:-O3 -fomit-frame-pointer:::-lsocket -lresolv -lnsl:BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::dlfcn:svr3-shared:-fPIC", # the SCO assembler doesn't seem to like our assembler files ...
# Sinix/ReliantUNIX RM400
# NOTE: The CDS++ Compiler up to V2.0Bsomething has the IRIX_CC_BUG optimizer problem. Better use -g */
@@ -470,6 +472,9 @@
# and its library files in util/pl/*)
"Mingw32", "gcc:-DL_ENDIAN -fomit-frame-pointer -O3 -m486 -Wall::::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32",
+# UWIN
+"UWIN", "cc:-DTERMIOS -DL_ENDIAN -O -Wall::::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32",
+
# Cygwin
"Cygwin-pre1.3", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O2 -m486 -Wall::(unknown)::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32",
"Cygwin", "gcc:-DTERMIOS -DL_ENDIAN -fomit-frame-pointer -O2 -m486 -Wall::::BN_LLONG ${x86_gcc_des} ${x86_gcc_opts}::::::::::win32:cygwin-shared:::.dll",
@@ -488,7 +493,7 @@
##### MacOS X (a.k.a. Rhapsody or Darwin) setup
"rhapsody-ppc-cc","cc:-O3 -DB_ENDIAN::(unknown)::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::",
-"darwin-ppc-cc","cc:-O3 -D_DARWIN -DB_ENDIAN::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::::::::::darwin-shared:-fPIC:.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
+"darwin-ppc-cc","cc:-O3 -D_DARWIN -DB_ENDIAN -fno-common::-D_REENTRANT::BN_LLONG RC4_CHAR RC4_CHUNK DES_UNROLL BF_PTR:::::::::::darwin-shared:-fPIC::.\$(SHLIB_MAJOR).\$(SHLIB_MINOR).dylib",
##### Sony NEWS-OS 4.x
"newsos4-gcc","gcc:-O -DB_ENDIAN -DNEWS4::(unknown):-lmld -liberty:BN_LLONG RC4_CHAR RC4_CHUNK DES_PTR DES_RISC1 DES_UNROLL BF_PTR::::",
@@ -899,6 +904,10 @@
$cflags.=" -DRMD160_ASM";
}
+# "Stringify" the C flags string. This permits it to be made part of a string
+# and works as well on command lines.
+$cflags =~ s/([\\\"])/\\\1/g;
+
my $version = "unknown";
my $major = "unknown";
my $minor = "unknown";
@@ -981,13 +990,21 @@
if ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*$/)
{
my $sotmp = $1;
- s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/
+ s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp/;
+ }
+ elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.dylib$/)
+ {
+ s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.dylib/;
}
elsif ($shared_extension ne "" && $shared_extension =~ /^\.s([ol])\.[^\.]*\.[^\.]*$/)
{
my $sotmp = $1;
s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.s$sotmp.\$(SHLIB_MAJOR) .s$sotmp/;
}
+ elsif ($shared_extension ne "" && $shared_extension =~ /^\.[^\.]*\.[^\.]*\.dylib$/)
+ {
+ s/^SHARED_LIBS_LINK_EXTS=.*/SHARED_LIBS_LINK_EXTS=.\$(SHLIB_MAJOR).dylib .dylib/;
+ }
s/^SHARED_LDFLAGS=.*/SHARED_LDFLAGS=$shared_ldflag/;
print OUT $_."\n";
}
==== //depot/projects/trustedbsd/base/crypto/openssl/FAQ#4 (text+ko) ====
@@ -38,6 +38,8 @@
* Why does the OpenSSL compilation fail on Alpha Tru64 Unix?
* Why does the OpenSSL compilation fail with "ar: command not found"?
* Why does the OpenSSL compilation fail on Win32 with VC++?
+* What is special about OpenSSL on Redhat?
+* Why does the OpenSSL test suite fail on MacOS X?
[PROG] Questions about programming with OpenSSL
@@ -59,7 +61,7 @@
* Which is the current version of OpenSSL?
The current version is available from <URL: http://www.openssl.org>.
-OpenSSL 0.9.6d was released on 9 May, 2002.
+OpenSSL 0.9.6e was released on 30 May, 2002.
In addition to the current stable release, you can also access daily
snapshots of the OpenSSL development version at <URL:
@@ -215,8 +217,11 @@
installing the SUNski package from Sun patch 105710-01 (Sparc) which
adds a /dev/random device and make sure it gets used, usually through
$RANDFILE. There are probably similar patches for the other Solaris
-versions. However, be warned that /dev/random is usually a blocking
-device, which may have some effects on OpenSSL.
+versions. An official statement from Sun with respect to /dev/random
+support can be found at
+ http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsrdb/27606&zone_32=SUNWski
+However, be warned that /dev/random is usually a blocking device, which
+may have some effects on OpenSSL.
* Why do I get an "unable to write 'random state'" error message?
@@ -451,6 +456,52 @@
and the changes are only valid for the current DOS session.
+* What is special about OpenSSL on Redhat?
+
+Red Hat Linux (release 7.0 and later) include a preinstalled limited
+version of OpenSSL. For patent reasons, support for IDEA, RC5 and MDC2
+is disabled in this version. The same may apply to other Linux distributions.
+Users may therefore wish to install more or all of the features left out.
+
+To do this you MUST ensure that you do not overwrite the openssl that is in
+/usr/bin on your Red Hat machine. Several packages depend on this file,
+including sendmail and ssh. /usr/local/bin is a good alternative choice. The
+libraries that come with Red Hat 7.0 onwards have different names and so are
+not affected. (eg For Red Hat 7.2 they are /lib/libssl.so.0.9.6b and
+/lib/libcrypto.so.0.9.6b with symlinks /lib/libssl.so.2 and
+/lib/libcrypto.so.2 respectively).
+
+Please note that we have been advised by Red Hat attempting to recompile the
+openssl rpm with all the cryptography enabled will not work. All other
+packages depend on the original Red Hat supplied openssl package. It is also
+worth noting that due to the way Red Hat supplies its packages, updates to
+openssl on each distribution never change the package version, only the
+build number. For example, on Red Hat 7.1, the latest openssl package has
+version number 0.9.6 and build number 9 even though it contains all the
+relevant updates in packages up to and including 0.9.6b.
+
+A possible way around this is to persuade Red Hat to produce a non-US
+version of Red Hat Linux.
+
+FYI: Patent numbers and expiry dates of US patents:
+MDC-2: 4,908,861 13/03/2007
+IDEA: 5,214,703 25/05/2010
+RC5: 5,724,428 03/03/2015
+
+
+* Why does the OpenSSL test suite fail on MacOS X?
+
+If the failure happens when running 'make test' and the RC4 test fails,
+it's very probable that you have OpenSSL 0.9.6b delivered with the
+operating system (you can find out by running '/usr/bin/openssl version')
+and that you were trying to build OpenSSL 0.9.6d. The problem is that
+the loader ('ld') in MacOS X has a misfeature that's quite difficult to
+go around and has linked the programs "openssl" and the test programs
+with /usr/lib/libcrypto.dylib and /usr/lib/libssl.dylib instead of the
+libraries you just built.
+Look in the file PROBLEMS for a more detailed explanation and for possible
+solutions.
+
[PROG] ========================================================================
* Is OpenSSL thread-safe?
==== //depot/projects/trustedbsd/base/crypto/openssl/INSTALL#3 (text+ko) ====
@@ -128,8 +128,11 @@
the failure that aren't problems in OpenSSL itself (like missing
standard headers). If it is a problem with OpenSSL itself, please
report the problem to <openssl-bugs at openssl.org> (note that your
- message will be forwarded to a public mailing list). Include the
- output of "make report" in your message.
+ message will be recorded in the request tracker publicly readable
+ via http://www.openssl.org/rt2.html and will be forwarded to a public
+ mailing list). Include the output of "make report" in your message.
+ Please check out the request tracker. Maybe the bug was already
+ reported or has already been fixed.
[If you encounter assembler error messages, try the "no-asm"
configuration option as an immediate fix.]
@@ -147,7 +150,8 @@
try removing any compiler optimization flags from the CFLAGS line
in Makefile.ssl and run "make clean; make". Please send a bug
report to <openssl-bugs at openssl.org>, including the output of
- "make report".
+ "make report" in order to be added to the request tracker at
+ http://www.openssl.org/rt2.html.
4. If everything tests ok, install OpenSSL with
==== //depot/projects/trustedbsd/base/crypto/openssl/Makefile.org#4 (text+ko) ====
@@ -420,6 +420,7 @@
-b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
+h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
-Fl lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \
+ chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \
libs="$$libs -L. -l$$i"; \
done
@@ -430,6 +431,7 @@
-b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
+h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
+forceload lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \
+ chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \
libs="$$libs -L. -l$$i"; \
done
@@ -545,7 +547,7 @@
tests: rehash
@(cd test && echo "testing..." && \
- $(MAKE) CC='${CC}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SDIRS='${SDIRS}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PERL='${PERL}' EXE_EXT='${EXE_EXT}' tests );
+ $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' TESTS='${TESTS}' EXE_EXT='${EXE_EXT}' SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' OPENSSL_DEBUG_MEMORY=on tests );
@apps/openssl version -a
report:
@@ -556,7 +558,7 @@
do \
if [ -d "$$i" ]; then \
(cd $$i && echo "making dependencies $$i..." && \
- $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' depend ) || exit 1; \
+ $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' PERL='${PERL}' depend ) || exit 1; \
fi; \
done;
@@ -601,20 +603,26 @@
update: depend errors stacks util/libeay.num util/ssleay.num crypto/objects/obj_dat.h TABLE
+# Build distribution tar-file. As the list of files returned by "find" is
+# pretty long, on several platforms a "too many arguments" error or similar
+# would occur. Therefore the list of files is temporarily stored into a file
+# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal
+# tar does not support the --files-from option.
tar:
- @$(TAR) $(TARFLAGS) -cvf - \
- `find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort` |\
+ find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \
+ $(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \
tardy --user_number=0 --user_name=openssl \
--group_number=0 --group_name=openssl \
--prefix=openssl-$(VERSION) - |\
gzip --best >../$(TARFILE).gz; \
+ rm -f ../$(TARFILE).list; \
ls -l ../$(TARFILE).gz
dist:
$(PERL) Configure dist
@$(MAKE) dist_pem_h
@$(MAKE) SDIRS='${SDIRS}' clean
- @$(MAKE) tar
+ @$(MAKE) TAR='${TAR}' TARFLAGS='${TARFLAGS}' tar
dist_pem_h:
(cd crypto/pem; $(MAKE) CC='${CC}' SDIRS='${SDIRS}' CFLAG='${CFLAG}' pem.h; $(MAKE) clean)
@@ -656,7 +664,7 @@
( echo installing $$i; \
if [ "$(PLATFORM)" != "Cygwin" ]; then \
cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/lib; \
- chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \
+ chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \
else \
c=`echo $$i | sed 's/^lib/cyg/'`; \
cp $$c $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$c; \
@@ -681,18 +689,20 @@
fn=`basename $$i .pod`; \
if [ "$$fn" = "config" ]; then sec=5; else sec=1; fi; \
echo "installing man$$sec/`basename $$i .pod`.$$sec"; \
- (cd `dirname $$i`; \
- $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \
- --release=$(VERSION) `basename $$i`) \
+ (cd `$(PERL) util/dirname.pl $$i`; \
+ sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \
+ --section=$$sec --center=OpenSSL \
+ --release=$(VERSION) `basename $$i`") \
> $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \
done
@for i in doc/crypto/*.pod doc/ssl/*.pod; do \
fn=`basename $$i .pod`; \
if [ "$$fn" = "des_modes" ]; then sec=7; else sec=3; fi; \
echo "installing man$$sec/`basename $$i .pod`.$$sec"; \
- (cd `dirname $$i`; \
- $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \
- --release=$(VERSION) `basename $$i`) \
+ (cd `$(PERL) util/dirname.pl $$i`; \
+ sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \
+ --section=$$sec --center=OpenSSL \
+ --release=$(VERSION) `basename $$i`") \
> $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \
done
==== //depot/projects/trustedbsd/base/crypto/openssl/Makefile.ssl#4 (text+ko) ====
@@ -4,7 +4,7 @@
## Makefile for OpenSSL
##
-VERSION=0.9.6d
+VERSION=0.9.6e
MAJOR=0
MINOR=9.6
SHLIB_VERSION_NUMBER=0.9.6
@@ -64,7 +64,7 @@
EXE_EXT=
AR=ar r
RANLIB= /usr/bin/ranlib
-PERL= /usr/local/bin/perl
+PERL= /usr/local/bin/perl5
TAR= tar
TARFLAGS= --no-recursion
@@ -422,6 +422,7 @@
-b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
+h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
-Fl lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \
+ chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \
libs="$$libs -L. -l$$i"; \
done
@@ -432,6 +433,7 @@
-b -z -o lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
+h lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} \
+forceload lib$$i.a $$libs ${EX_LIBS} -lc ) || exit 1; \
+ chmod a=rx lib$$i.sl.${SHLIB_MAJOR}.${SHLIB_MINOR} ; \
libs="$$libs -L. -l$$i"; \
done
@@ -547,7 +549,7 @@
tests: rehash
@(cd test && echo "testing..." && \
- $(MAKE) CC='${CC}' CFLAG='${CFLAG}' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SDIRS='${SDIRS}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PERL='${PERL}' EXE_EXT='${EXE_EXT}' tests );
+ $(MAKE) CC='${CC}' PLATFORM='${PLATFORM}' CFLAG='${CFLAG}' SDIRS='$(SDIRS)' INSTALLTOP='${INSTALLTOP}' PEX_LIBS='${PEX_LIBS}' EX_LIBS='${EX_LIBS}' BN_ASM='${BN_ASM}' DES_ENC='${DES_ENC}' BF_ENC='${BF_ENC}' CAST_ENC='${CAST_ENC}' RC4_ENC='${RC4_ENC}' RC5_ENC='${RC5_ENC}' SHA1_ASM_OBJ='${SHA1_ASM_OBJ}' MD5_ASM_OBJ='${MD5_ASM_OBJ}' RMD160_ASM_OBJ='${RMD160_ASM_OBJ}' AR='${AR}' PROCESSOR='${PROCESSOR}' PERL='${PERL}' RANLIB='${RANLIB}' TESTS='${TESTS}' EXE_EXT='${EXE_EXT}' SHARED_LIBS='${SHARED_LIBS}' SHLIB_EXT='${SHLIB_EXT}' SHLIB_TARGET='${SHLIB_TARGET}' OPENSSL_DEBUG_MEMORY=on tests );
@apps/openssl version -a
report:
@@ -558,7 +560,7 @@
do \
if [ -d "$$i" ]; then \
(cd $$i && echo "making dependencies $$i..." && \
- $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' depend ) || exit 1; \
+ $(MAKE) SDIRS='${SDIRS}' DEPFLAG='${DEPFLAG}' PERL='${PERL}' depend ) || exit 1; \
fi; \
done;
@@ -603,20 +605,26 @@
update: depend errors stacks util/libeay.num util/ssleay.num crypto/objects/obj_dat.h TABLE
+# Build distribution tar-file. As the list of files returned by "find" is
+# pretty long, on several platforms a "too many arguments" error or similar
+# would occur. Therefore the list of files is temporarily stored into a file
+# and read directly, requiring GNU-Tar. Call "make TAR=gtar dist" if the normal
+# tar does not support the --files-from option.
tar:
- @$(TAR) $(TARFLAGS) -cvf - \
- `find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort` |\
+ find * \! -path CVS/\* \! -path \*/CVS/\* \! -name CVS \! -name .cvsignore \! -name STATUS \! -name TABLE | sort > ../$(TARFILE).list; \
+ $(TAR) $(TARFLAGS) --files-from ../$(TARFILE).list -cvf - | \
tardy --user_number=0 --user_name=openssl \
--group_number=0 --group_name=openssl \
--prefix=openssl-$(VERSION) - |\
gzip --best >../$(TARFILE).gz; \
+ rm -f ../$(TARFILE).list; \
ls -l ../$(TARFILE).gz
dist:
$(PERL) Configure dist
@$(MAKE) dist_pem_h
@$(MAKE) SDIRS='${SDIRS}' clean
- @$(MAKE) tar
+ @$(MAKE) TAR='${TAR}' TARFLAGS='${TARFLAGS}' tar
dist_pem_h:
(cd crypto/pem; $(MAKE) CC='${CC}' SDIRS='${SDIRS}' CFLAG='${CFLAG}' pem.h; $(MAKE) clean)
@@ -658,7 +666,7 @@
( echo installing $$i; \
if [ "$(PLATFORM)" != "Cygwin" ]; then \
cp $$i $(INSTALL_PREFIX)$(INSTALLTOP)/lib; \
- chmod 644 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \
+ chmod 555 $(INSTALL_PREFIX)$(INSTALLTOP)/lib/$$i; \
else \
c=`echo $$i | sed 's/^lib/cyg/'`; \
cp $$c $(INSTALL_PREFIX)$(INSTALLTOP)/bin/$$c; \
@@ -683,18 +691,20 @@
fn=`basename $$i .pod`; \
if [ "$$fn" = "config" ]; then sec=5; else sec=1; fi; \
echo "installing man$$sec/`basename $$i .pod`.$$sec"; \
- (cd `dirname $$i`; \
- $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \
- --release=$(VERSION) `basename $$i`) \
+ (cd `$(PERL) util/dirname.pl $$i`; \
+ sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \
+ --section=$$sec --center=OpenSSL \
+ --release=$(VERSION) `basename $$i`") \
> $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \
done
@for i in doc/crypto/*.pod doc/ssl/*.pod; do \
fn=`basename $$i .pod`; \
if [ "$$fn" = "des_modes" ]; then sec=7; else sec=3; fi; \
echo "installing man$$sec/`basename $$i .pod`.$$sec"; \
- (cd `dirname $$i`; \
- $(PERL) ../../util/pod2man.pl --section=$$sec --center=OpenSSL \
- --release=$(VERSION) `basename $$i`) \
+ (cd `$(PERL) util/dirname.pl $$i`; \
+ sh -c "$(PERL) `cd ../../util; ./pod2mantest ignore` \
+ --section=$$sec --center=OpenSSL \
+ --release=$(VERSION) `basename $$i`") \
> $(INSTALL_PREFIX)$(MANDIR)/man$$sec/`basename $$i .pod`.$$sec; \
done
==== //depot/projects/trustedbsd/base/crypto/openssl/NEWS#4 (text+ko) ====
@@ -56,7 +56,7 @@
o Bug fixes for Win32, HP/UX and Irix.
o Bug fixes in BIGNUM, SSL, PKCS#7, PKCS#12, X.509, CONF and
memory checking routines.
- o Bug fixes for RSA operations in threaded enviroments.
+ o Bug fixes for RSA operations in threaded environments.
o Bug fixes in misc. openssl applications.
o Remove a few potential memory leaks.
o Add tighter checks of BIGNUM routines.
==== //depot/projects/trustedbsd/base/crypto/openssl/README#4 (text+ko) ====
@@ -1,5 +1,5 @@
- OpenSSL 0.9.6d 9 May 2002
+ OpenSSL 0.9.6e 30 July 2002
Copyright (c) 1998-2002 The OpenSSL Project
Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
@@ -122,6 +122,13 @@
lists the functions; you will probably have to look at the code to work out
how to use them. Look at the example programs.
+ PROBLEMS
+ --------
+
+ For some platforms, there are some known problems that may affect the user
+ or application author. We try to collect those in doc/PROBLEMS, with current
+ thoughts on how they should be solved in a future of OpenSSL.
+
SUPPORT
-------
@@ -146,11 +153,13 @@
- Problem Description (steps that will reproduce the problem, if known)
- Stack Traceback (if the application dumps core)
- Report the bug to the OpenSSL project at:
+ Report the bug to the OpenSSL project via the Request Tracker
+ (http://www.openssl.org/rt2.html) by mail to:
openssl-bugs at openssl.org
- Note that mail to openssl-bugs at openssl.org is forwarded to a public
+ Note that mail to openssl-bugs at openssl.org is recorded in the publicly
+ readable request tracker database and is forwarded to a public
mailing list. Confidential mail may be sent to openssl-security at openssl.org
(PGP key available from the key servers).
@@ -164,7 +173,9 @@
textual explanation of what your patch does.
Note: For legal reasons, contributions from the US can be accepted only
- if a copy of the patch is sent to crypt at bxa.doc.gov
+ if a TSA notification and a copy of the patch is sent to crypt at bis.doc.gov;
+ see http://www.bis.doc.gov/Encryption/PubAvailEncSourceCodeNofify.html [sic]
+ and http://w3.access.gpo.gov/bis/ear/pdf/740.pdf (EAR Section 740.13(e)).
The preferred format for changes is "diff -u" output. You might
>>> TRUNCATED FOR MAIL (1000 lines) <<<
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list