aboutsummaryrefslogtreecommitdiffstats
path: root/apps/x509.c
Commit message (Collapse)AuthorAgeFilesLines
* Add new test option set the version in generated certificates: thisDr. Stephen Henson2012-11-301-0/+18
| | | | | is needed to test some profiles/protocols which reject certificates with unsupported versions.
* option to output corrupted signature in certificates for testing purposesDr. Stephen Henson2012-11-251-1/+6
|
* update usage messagesDr. Stephen Henson2012-11-191-0/+3
|
* New functions to check a hostname email or IP address against aDr. Stephen Henson2012-10-081-0/+19
| | | | | certificate. Add options to s_client, s_server and x509 utilities to print results of checks.
* New -force_pubkey option to x509 utility to supply a different publicDr. Stephen Henson2011-10-071-5/+23
| | | | | key to the one in a request. This is useful for cases where the public key cannot be used for signing e.g. DH.
* use keyformat for -x509toreq, don't hard code PEMDr. Stephen Henson2011-09-231-1/+1
|
* apps/x590.c: harmonize usage of STDout and out_err.Andy Polyakov2010-12-121-2/+2
| | | | PR: 2323
* Fix warnings.Ben Laurie2010-06-121-2/+0
|
* new sigopt and PSS support for req and x509 utilitiesDr. Stephen Henson2010-03-121-7/+25
|
* oopsDr. Stephen Henson2010-03-071-1/+0
|
* The OID sanity check was incorrect. It should only disallow *leading* 0x80Dr. Stephen Henson2010-03-071-0/+1
| | | | values.
* PR: 2136Dr. Stephen Henson2010-01-121-0/+29
| | | | | | | Submitted by: Willy Weisz <weisz@vcpc.univie.ac.at> Add options to output hash using older algorithm compatible with OpenSSL versions before 1.0.0
* Use new X509_STORE_set_verify_cb function instead of old macro.Dr. Stephen Henson2009-10-181-1/+1
|
* Update from 1.0.0-stableDr. Stephen Henson2009-07-271-3/+3
|
* Updates from 1.0.0-stable.Dr. Stephen Henson2009-07-141-2/+2
|
* Use new time routines to avoid possible overflow.Dr. Stephen Henson2009-07-131-1/+1
|
* Update from 1.0.0-stable.Dr. Stephen Henson2009-06-261-0/+1
|
* Typo in usage message.Dr. Stephen Henson2009-03-231-1/+1
|
* Updatde from stable branch.Dr. Stephen Henson2009-01-071-1/+1
|
* More type-checking.Ben Laurie2008-06-041-3/+4
|
* Support for certificate status TLS extension.Dr. Stephen Henson2007-09-261-2/+9
|
* Add support for default public key digest type ctrl.Dr. Stephen Henson2006-05-071-30/+7
|
* Remove link between digests and signature algorithms.Dr. Stephen Henson2006-04-191-0/+2
| | | | | Use cross reference table in ASN1_item_sign(), ASN1_item_verify() to eliminate the need for algorithm specific code.
* Remove ASN1_METHOD code replace with new ASN1 alternative.Dr. Stephen Henson2005-08-201-8/+7
|
* makeNils Larsch2005-07-161-0/+4
| | | | | | | | ./configure no-deprecated [no-dsa] [no-dh] [no-ec] [no-rsa] make depend all test work again PR: 1159
* some const fixesNils Larsch2005-04-051-2/+2
|
* use SHA-1 as the default digest for the apps/openssl commandsNils Larsch2005-04-021-1/+1
|
* Give everything prototypes (well, everything that's actually used).Ben Laurie2005-03-311-2/+1
|
* Use X509_cmp_time() in -checkend option, to support GeneralizedTime.Dr. Stephen Henson2004-12-051-2/+2
|
* Fix x509.c so it creates serial number file again if noDr. Stephen Henson2004-11-131-2/+5
| | | | serial number is supplied on command line.
* Make self signing option of 'x509' use random serial numbers too.Dr. Stephen Henson2004-05-121-3/+7
|
* New option to 'x509' -next_serial. This outputs the certificateDr. Stephen Henson2004-04-211-1/+22
| | | | | | serial number plus 1 to the output file. Its purpose is to allow serial number files to be initialized when random serial numbers are used.
* Use X509_get_serialNumber() instead of accessing internals in x509.cDr. Stephen Henson2004-04-211-1/+2
|
* header cleanup in apps/Geoff Thorpe2004-04-191-0/+2
|
* Use BUF_strlcpy() instead of strcpy().Richard Levitte2003-12-271-6/+8
| | | | | | | Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
* In order to get the expected self signed error whenDr. Stephen Henson2003-09-211-1/+1
| | | | | calling X509_verify_cert() in x509.c the cert should not be added to the trusted store.
* Add -issuer_hash and make -subject_hash the default way to get theRichard Levitte2003-07-031-6/+15
| | | | | | subject hash, with -hash a synonym kept around for backward compatibility reasons. PR: 650
* Convert save_serial() to work like save_index(), and add aRichard Levitte2003-04-041-1/+1
| | | | rotate_serial() that works like rotate_index().
* Remove unused variable.Richard Levitte2003-04-031-1/+0
|
* Make it possible to have multiple active certificates with the sameRichard Levitte2003-04-031-70/+8
| | | | subject.
* No need to test -setalias twice.Richard Levitte2003-03-311-6/+0
| | | | PR: 556
* Add the possibility to build without the ENGINE framework.Richard Levitte2003-01-301-0/+8
| | | | PR: 287
* EXIT() may mean return(). That's confusing, so let's have it really meanRichard Levitte2002-12-031-1/+1
| | | | | | exit() in whatever way works for the intended platform, and define OPENSSL_EXIT() to have the old meaning (the name is of course because it's only used in the openssl program)
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-131-3/+4
|
* Variables on the stack must be initialized or we can't depend on anyRichard Levitte2002-11-111-1/+1
| | | | initial value. For errline/errorline, we did depend on that, erroneously
* -CAserial does take a filename argument.Richard Levitte2002-11-081-1/+1
| | | | PR: 332
* get rid of EVP_PKEY_ECDSA (now we have EVP_PKEY_EC instead)Bodo Möller2002-08-121-3/+3
| | | | Submitted by: Nils Larsch
* Make it possible to load keys from stdin, and restore thatRichard Levitte2002-08-011-6/+7
| | | | | functionality in the programs that had that before. Part fo PR 164
* Only use DSA-functions if available.Lutz Jänicke2002-07-291-1/+5
| | | | | | Submitted by: "Hellan,Kim KHE" <KHE@kmd.dk> Reviewed by: PR: 167
* CAformat should not be used for CA key format.Richard Levitte2002-05-301-1/+1
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-08-12 18:23:49 +0000