aboutsummaryrefslogtreecommitdiffstats
path: root/apps/ocsp.c
Commit message (Collapse)AuthorAgeFilesLines
* Load OCSP responder key before waiting for an incomingDr. Stephen Henson2001-08-231-25/+27
| | | | | | | connection so it can prompt for pass phrase on startup instead of after the first connection. Add -port switch to usage message.
* Allow OCSP server to handle multiple requests.Dr. Stephen Henson2001-07-131-36/+93
| | | | Document new OCSP options.
* Initial OCSP server support, using index.txt format.Dr. Stephen Henson2001-07-121-20/+404
| | | | | | | This can process internal requests or behave like a mini responder. Todo: documentation, update usage info.
* Extend all the loading functions to take an engine pointer, a passRichard Levitte2001-05-301-6/+15
| | | | | | | | | | | | | | string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
* New function and options to check OCSP response validity.Dr. Stephen Henson2001-02-241-3/+52
|
* Fix typo.Dr. Stephen Henson2001-02-201-1/+1
|
* Initial OCSP SSL support.Dr. Stephen Henson2001-02-141-3/+14
|
* New function OCSP_parse_url() and -url option for ocsp utility.Dr. Stephen Henson2001-02-131-2/+24
| | | | Doesn't handle SSL URLs yet.
* Modify OCSP nonce behaviour.Dr. Stephen Henson2001-02-121-3/+8
|
* Add missing \n's to ocsp usage message.Dr. Stephen Henson2001-02-091-9/+9
|
* Allow various options to be included for signing and verify ofDr. Stephen Henson2001-02-081-29/+83
| | | | | | | | | OCSP responses. Documentation to follow... Urgh.. this conflicted with the -VAfile patch I hope I haven't broken it.
* Add the -VAfile option to 'openssl ocsp'. This option will give theRichard Levitte2001-02-081-1/+17
| | | | | | | client code certificates to use to only check response signatures. I'm not entirely sure if the way I just implemented the verification is the right way to do it, and would be happy if someone would like to review this.
* Various function for commmon operations.Dr. Stephen Henson2001-02-021-1/+1
|
* Fixes to various ASN1_INTEGER routines for negative case.Dr. Stephen Henson2001-01-191-1/+1
| | | | Enhance s2i_ASN1_INTEGER().
* Additional functionality in ocsp utility: print summaryDr. Stephen Henson2001-01-191-16/+121
| | | | | | | of status info. Check nonce values. Option to disable verify. Update usage message. Rename status to string functions and make them global.
* Implement remaining OCSP verify checks inDr. Stephen Henson2001-01-181-0/+2
| | | | accordance with RFC2560.
* Initial OCSP certificate verify. Not complete,Dr. Stephen Henson2001-01-171-0/+37
| | | | it just supports a "trusted OCSP global root CA".
* Preliminary ocsp utility documentation.Dr. Stephen Henson2001-01-141-0/+3
| | | | Fix ocsp usage message.
* New OCSP utility. This can generate, parse and printDr. Stephen Henson2001-01-131-0/+452
OCSP requests. It can also query reponders and parse or print out responses. Still needs some more work: OCSP response checks and of course documentation.
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-14 06:29:05 +0000