mirrors/openssl
0
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2024-11-27 12:04:38 +08:00
Code Issues Packages Projects Releases Wiki Activity
3b061a00e3
openssl/apps
History
Rich Salz 3b061a00e3 RT2547: Tighten perms on generated privkey files 
When generating a private key, try to make the output file be readable
only by the owner.  Put it in CHANGES file since it might be noticeable.

Add "int private" flag to apps that write private keys, and check that it's
set whenever we do write a private key.  Checked via assert so that this
bug (security-related) gets fixed.  Thanks to Viktor for help in tracing
the code-paths where private keys are written.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2015-06-15 18:26:56 -04:00
..
demoCA Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
demoSRP Missing SRP files. 2011-03-16 11:50:33 +00:00
app_rand.c Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
apps.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
apps.h RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
asn1pars.c fix asn1parse -inform 2015-05-29 12:09:25 +01:00
ca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
ca-key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
ca-req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
ca.c Fix argument processing error from the option parsing change over. 2015-06-15 11:36:32 +10:00
CA.com Corrections to the VMS build system. 2011-03-25 16:20:35 +00:00
CA.pl.in GH271: Warning on </dev/null to CA.pl 2015-05-04 15:07:52 -04:00
cert.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
ciphers.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
client.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
cms.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
crl2p7.c Restore module loading 2015-05-29 12:41:50 +02:00
crl.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
dgst.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
dh1024.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh2048.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh4096.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dhparam.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
dsa512.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
dsa1024.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
dsa-ca.pem Fix the gendsa program and add it to the app list. The progs.h file is 1999-01-09 17:29:34 +00:00
dsa-pca.pem Fix the gendsa program and add it to the app list. The progs.h file is 1999-01-09 17:29:34 +00:00
dsa.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
dsap.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
dsaparam.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
ec.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
ecparam.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
enc.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
engine.c Restore module loading 2015-05-29 12:41:50 +02:00
errstr.c Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
gendsa.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
genpkey.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
genrsa.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
install-apps.com After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS 2011-03-19 10:58:14 +00:00
makeapps.com Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
Makefile When making libcrypto from apps or test, make sure to include engines 2015-06-10 02:01:49 +02:00
nseq.c Restore module loading 2015-05-29 12:41:50 +02:00
ocsp.c RT832: Use REUSEADDR in ocsp responder 2015-06-02 12:22:38 -04:00
openssl-vms.cnf RT3067: simplify patch 2014-09-24 15:35:02 +02:00
openssl.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
openssl.cnf RT2626: Change default_bits from 1K to 2K 2014-09-08 17:21:04 -04:00
opt.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
passwd.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
pca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
pca-key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
pca-req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
pkcs7.c Restore module loading 2015-05-29 12:41:50 +02:00
pkcs8.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
pkcs12.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
pkey.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
pkeyparam.c Restore module loading 2015-05-29 12:41:50 +02:00
pkeyutl.c Restore module loading 2015-05-29 12:41:50 +02:00
prime.c Restore module loading 2015-05-29 12:41:50 +02:00
privkey.pem PR: 1644 2009-09-06 15:49:46 +00:00
progs.h Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
progs.pl Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
rand.c Restore module loading 2015-05-29 12:41:50 +02:00
req.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
req.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
rsa8192.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
rsa.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
rsautl.c Restore module loading 2015-05-29 12:41:50 +02:00
s512-key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s512-req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s1024key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s1024req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s_apps.h memset, memcpy, sizeof consistency fixes 2015-05-05 22:18:59 -04:00
s_cb.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
s_client.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
s_server.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00
s_socket.c Use bio_err not stderr in apps. 2015-06-09 12:48:55 -04:00
s_time.c Use bio_err not stderr in apps. 2015-06-09 12:48:55 -04:00
server2.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
server.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
server.srl Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
sess_id.c free NULL cleanup -- coda 2015-05-01 14:37:16 -04:00
smime.c Restore module loading 2015-05-29 12:41:50 +02:00
speed.c Use bio_err not stderr in apps. 2015-06-09 12:48:55 -04:00
spkac.c Restore module loading 2015-05-29 12:41:50 +02:00
srp.c Restore module loading 2015-05-29 12:41:50 +02:00
testCA.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
testdsa.h Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
testrsa.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
timeouts.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ts.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
tsget PR: 2031 2009-09-07 17:57:18 +00:00
verify.c Standardize handling of #ifdef'd options. 2015-06-02 12:40:24 -04:00
version.c Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
vms_decc_init.c Use safer sizeof variant in malloc 2015-05-04 15:00:13 -04:00
winrand.c Big apps cleanup (option-parsing, etc) 2015-04-24 15:26:15 -04:00
x509.c RT2547: Tighten perms on generated privkey files 2015-06-15 18:26:56 -04:00