Ondřej Surý
843d389661
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
Tinderbox User
ffbe6b9537
update copyright notice / whitespace
2017-09-19 23:46:23 +00:00
Mukund Sivaraman
d5707676e4
Don't use memset() to wipe memory ( #45947 )
2017-09-19 16:16:45 +05:30
Mark Andrews
3d38cfaf8a
add more LIBRESSL_VERSION_NUMBER checks
2016-11-01 12:24:22 +11:00
Mark Andrews
1fce0951ed
4497. [port] Add support for OpenSSL 1.1.0. [RT #41284 ]
2016-10-31 10:04:37 +11:00
Mark Andrews
8eceb0bffe
4461. [bug] win32: not all external data was properly marked
...
as external data for windows dll. [RT #43161 ]
2016-09-07 14:12:11 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Tinderbox User
161b5249b9
update copyright notice / whitespace
2015-08-19 23:45:23 +00:00
Evan Hunt
420a43c8d8
[master] timing safe memory comparisons
...
4183. [cleanup] Use timing-safe memory comparisons in cryptographic
code. Also, the timing-safe comparison functions have
been renamed to avoid possible confusion with
memcmp(). [RT #40148 ]
2015-08-17 18:26:44 -07:00
Mark Andrews
80169c379d
3957. [bug] "dnssec-keygen -S" failed for ECCGOST, ECDSAP256SHA256
...
and ECDSAP384SHA384. [RT #37183 ]
2014-09-29 10:18:54 +10:00
Francis Dupont
83bb42c635
fix opensslgost_link.c when OPENSSL is not defined
2014-03-08 19:32:34 +01:00
Evan Hunt
3249da26fc
[master] rationalize external key handling
...
3723. [cleanup] Imported keys are now handled the same way
regardless of DNSSEC algorithm. [RT #35215 ]
2014-01-30 17:49:32 -08:00
Evan Hunt
12bf5d4796
[master] address several issues with native pkcs11
2014-01-18 11:51:07 -08:00
Francis Dupont
6972eaffdb
fix external key handling
2014-01-17 17:12:20 +01:00
Tinderbox User
bf0266f286
update copyright notice
2014-01-14 23:46:22 +00:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00
Tinderbox User
431a83fb29
update copyright notice
2014-01-09 23:46:35 +00:00
Evan Hunt
e851ea8260
[master] replace memcpy() with memmove().
...
3698. [cleanup] Replaced all uses of memcpy() with memmove().
[RT #35120 ]
2014-01-08 16:39:05 -08:00
Tinderbox User
63737247d1
update copyright notice
2013-09-05 23:46:16 +00:00
Mark Andrews
0c91911b4d
3642. [func] Allow externally generated DNSKEY to be imported
...
into the DNSKEY management framework. A new tool
dnssec-importkey is used to this. [RT #34698 ]
2013-09-04 13:53:02 +10:00
Evan Hunt
0e37e9e3d7
[master] silence noisy OpenSSL logging
...
3402. [bug] Correct interface numbers for IPv4 and IPv6 interfaces.
2012-10-24 12:58:16 -07:00
Mark Andrews
6eb6af6732
3354. [func] Improve OpenSSL error logging. [RT #29932 ]
2012-07-23 15:08:21 +10:00
Tinderbox User
ef1963d83d
update copyright notice
2012-06-15 23:45:49 +00:00
Mark Andrews
7865ea9545
3339. [func] Allow the maximum supported rsa exponent size to be specified: "max-rsa-exponent-size <value>;" [RT #29228 ]
2012-06-14 15:44:20 +10:00
Automatic Updater
c674aacfd6
update copyright notice
2011-01-19 23:47:12 +00:00
Mark Andrews
f862994cbd
explicitly initialise dump and restore
2011-01-19 03:09:14 +00:00
Automatic Updater
a094c46640
update copyright notice
2010-12-23 23:47:08 +00:00
Mark Andrews
37dee1ff94
2999. [func] Add GOST support (RFC 5933). [RT #20639 ]
2010-12-23 04:08:00 +00:00
