| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
| |
Signed-off-by: Matías Fonzo <[email protected]>
|
|
|
|
|
| |
Signed-off-by: François Andriot <[email protected]>
Signed-off-by: Slávek Banko <[email protected]>
|
|
|
|
| |
Signed-off-by: Michele Calgaro <[email protected]>
|
|
|
|
|
|
|
|
|
|
| |
The first argument of the OPENSSL_init_ssl and OPENSSL_init_crypto
functions must be a 64-bit int, not a 32-bit int, as this caused
unpredictable OpenSSL behavior.
This resolves bug 3024.
Signed-off-by: Slávek Banko <[email protected]>
|
|
|
|
| |
Signed-off-by: Chris <[email protected]>
|
|
|
|
|
|
|
|
| |
is a fork of OpenSSL 1.0.1b)
This resolves issue #28.
Signed-off-by: Mavridis Philippe <[email protected]>
|
|
|
|
|
|
| |
This prevents finding an incorrect architecture on multi-arch systems.
Signed-off-by: Slávek Banko <[email protected]>
|
|
|
|
| |
Signed-off-by: Slávek Banko <[email protected]>
|
|
|
|
|
|
| |
This relates to bug 2961.
Signed-off-by: Michele Calgaro <[email protected]>
|
|
|
|
| |
Signed-off-by: Michele Calgaro <[email protected]>
|
|
|
|
| |
Signed-off-by: Slávek Banko <[email protected]>
|
|
|
|
|
|
|
| |
This enables TLS protocols newer than v1.0
This resolves bug 2764
Signed-off-by: Slávek Banko <[email protected]>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Some KOpenSSLProxy methods have been renamed to be consistent
with OpenSSL 1.1 API names and to prevent hidden API changes.
To ensure API / ABI compatibility, the original methods are
still included but have been marked as deprecated.
+ SSLv23_client_method => TLS_client_method
+ X509_STORE_CTX_set_chain => X509_STORE_CTX_set0_untrusted
+ sk_dup => OPENSSL_sk_dup
+ sk_free => OPENSSL_sk_free
+ sk_new => OPENSSL_sk_new
+ sk_num => OPENSSL_sk_num
+ sk_pop => OPENSSL_sk_pop
+ sk_push => OPENSSL_sk_push
+ sk_value => OPENSSL_sk_value
Additional methods have been added to KOpenSSLProxy to support
the new OpenSSL 1.1 API functions that provide access to the
(now) opaque SSL structures. Compatibility with OpenSSL < 1.1
is handled internally in KOpenSSLProxy.
+ BIO_get_data
+ DSA_get0_key
+ DSA_get0_pqg
+ EVP_PKEY_base_id
+ EVP_PKEY_get0_DSA
+ EVP_PKEY_get0_RSA
+ RSA_get0_key
+ X509_CRL_get0_lastUpdate
+ X509_CRL_get0_nextUpdate
+ X509_OBJECT_get0_X509
+ X509_OBJECT_get_type
+ X509_STORE_CTX_get_current_cert
+ X509_STORE_CTX_get_error
+ X509_STORE_CTX_get_error_depth
+ X509_STORE_CTX_set_error
+ X509_STORE_get0_objects
+ X509_STORE_set_verify_cb
+ X509_get0_signature
+ X509_getm_notAfter
+ X509_getm_notBefore
+ X509_subject_name_cmp
+ _SSL_session_reused
+ _SSL_set_options
Method "KSSL::setSession" has been renamed to "KSSL::takeSession"
and its functionality has changed: the session is now transferred
from the argument object to the invoked object. Since it is only
used internally in TDE and the functionality is different, the
method with the previous name has not been preserved.
Signed-off-by: Slávek Banko <[email protected]>
Signed-off-by: Michele Calgaro <[email protected]>
|
|
|
|
| |
This fixes certificate dates beyond year 2049.
|
|
|
|
| |
KSSLCertificate object
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
This relates to Bug 1655
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|