aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/asn1/t_x509.c
Commit message (Collapse)AuthorAgeFilesLines
* Move certificate request and CRL routines to x509 dir.Dr. Stephen Henson2015-09-221-357/+0
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Move functions.Dr. Stephen Henson2015-09-221-193/+0
| | | | | | Move various functions tagged onto t_x509.c to more appropriate places. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Embed various signature algorithms.Dr. Stephen Henson2015-09-171-2/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Embed X509_CINFDr. Stephen Henson2015-09-161-5/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Check ASN1_INTEGER_get for errors.Dr. Stephen Henson2015-06-061-1/+7
| | | | | | | | Check return value when calling ASN1_INTEGER_get to retrieve a certificate serial number. If an error occurs (which will be caused by the value being out of range) revert to hex dump of serial number. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Identify and move common internal libcrypto header filesRichard Levitte2015-05-141-1/+1
| | | | | | | | | | | | | There are header files in crypto/ that are used by a number of crypto/ submodules. Move those to crypto/include/internal and adapt the affected source code and Makefiles. The header files that got moved are: crypto/cryptolib.h crypto/md32_common.h Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove goto inside an if(0) blockRich Salz2015-05-011-6/+5
| | | | | | | There were a dozen-plus instances of this construct: if (0) { label: ..... } Reviewed-by: Tim Hudson <tjh@openssl.org>
* free null cleanup finaleRich Salz2015-05-011-4/+2
| | | | | | Don't check for NULL before calling OPENSSL_free Reviewed-by: Richard Levitte <levitte@openssl.org>
* remove malloc castsRich Salz2015-04-281-1/+1
| | | | | | | Following ANSI C rules, remove the casts from calls to OPENSSL_malloc and OPENSSL_realloc. Reviewed-by: Richard Levitte <levitte@openssl.org>
* Move some ASN.1 internals to asn1_int.hDr. Stephen Henson2015-03-241-1/+1
| | | | | | | | Move ASN.1 internals used across multiple directories into new internal header file asn1_int.h remove crypto/Makefile hack which allowed other directories to include "asn1_locl.h" Reviewed-by: Matt Caswell <matt@openssl.org>
* Dead code removal: #if 0 asn1, pkcs7Rich Salz2015-01-301-8/+0
| | | | | | | Keep one #if 0 but rename the symbol to be more descriptive of what it's doing (you can disable support for old broken Netscape software). Reviewed-by: Tim Hudson <tjh@openssl.org>
* Use inner algorithm when printing certificate.Rob Stradling2015-01-221-1/+1
| | | | | | Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-447/+453
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Fix strange formatting by indentMatt Caswell2015-01-221-1/+2
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Cleanup OPENSSL_NO_xxx, part 1master-pre-reformatRich Salz2015-01-141-1/+1
| | | | | | | | | | OPENSSL_NO_RIPEMD160, OPENSSL_NO_RIPEMD merged into OPENSSL_NO_RMD160 OPENSSL_NO_FP_API merged into OPENSSL_NO_STDIO Two typo's on #endif comments fixed: OPENSSL_NO_ECB fixed to OPENSSL_NO_OCB OPENSSL_NO_HW_SureWare fixed to OPENSSL_NO_HW_SUREWARE Reviewed-by: Richard Levitte <levitte@openssl.org>
* Memory leak and NULL dereference fixes.Dr. Stephen Henson2014-06-271-0/+2
| | | | PR#3403
* print out issuer and subject unique identifier fields in certificatesDr. Stephen Henson2012-06-121-0/+18
|
* fix warningDr. Stephen Henson2012-01-151-1/+1
|
* asn1/t_x509.c: fix serial number print, harmonize with a_int.c.Andy Polyakov2012-01-111-2/+2
| | | | | PR: 2675 Submitted by: Annie Yousar
* fix signature printing routinesDr. Stephen Henson2010-10-041-0/+2
|
* print outermost signature algorithm parameters tooDr. Stephen Henson2010-03-071-2/+7
|
* fix indent, newlineDr. Stephen Henson2010-03-061-0/+2
|
* Add algorithm specific signature printing. An individual ASN1 method canDr. Stephen Henson2010-03-061-5/+28
| | | | | | | | | | | now print out signatures instead of the standard hex dump. More complex signatures (e.g. PSS) can print out more meaningful information. Sample DSA version included that prints out the signature parameters r, s. [Note EVP_PKEY_ASN1_METHOD is an application opaque structure so adding new fields in the middle has no compatibility issues]
* Audit libcrypto for unchecked return values: fix all cases enounteredDr. Stephen Henson2009-09-231-3/+6
|
* PR: 2004Dr. Stephen Henson2009-08-101-1/+1
| | | | | | | Submitted by: Peter Sylvester <peter.sylvester@edelweb.fr> Approved by: steve@openssl.org Handle fractional seconds properly in ASN1_GENERALIZEDTIME_print
* Don't use clobbered 'i' for checking UTCTime and GeneralizedTime length.Dr. Stephen Henson2008-11-051-2/+2
|
* Make sure not to read beyond end of bufferBodo Möller2008-07-161-6/+7
|
* Source readability fix, which incidentally works around XLC compiler bug.Andy Polyakov2007-12-291-5/+4
|
* remove unreachable codeNils Larsch2007-02-101-13/+2
|
* Gather printing routines into EVP_PKEY_ASN1_METHOD.Dr. Stephen Henson2006-03-221-26/+2
|
* fix problems found by coverity: remove useless codeNils Larsch2006-03-151-2/+0
|
* constify some print and ts functionsNils Larsch2006-03-051-8/+9
|
* RFC 3161 compliant time stamp request creation, response generationUlf Möller2006-02-121-2/+15
| | | | | | | and response verification. Submitted by: Zoltan Glozik <zglozik@opentsa.org> Reviewed by: Ulf Moeller
* ecc api cleanup; summary:Nils Larsch2005-05-161-1/+1
| | | | | | | | | | - hide the EC_KEY structure definition in ec_lcl.c + add some functions to use/access the EC_KEY fields - change the way how method specific data (ecdsa/ecdh) is attached to a EC_KEY - add ECDSA_sign_ex and ECDSA_do_sign_ex functions with additional parameters for pre-computed values - rebuild libeay.num from 0.9.7
* Fix more error codes.Bodo Möller2005-05-111-1/+1
| | | | | (Also improve util/ck_errf.pl script, and occasionally fix source code formatting.)
* free() -> OPENSSL_free()Richard Levitte2002-11-131-2/+2
|
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-131-3/+6
|
* use a generic EC_KEY structure (EC keys are not ECDSA specific)Bodo Möller2002-08-071-6/+6
| | | | Submitted by: Nils Larsch
* ECDSA supportBodo Möller2002-02-131-0/+11
| | | | Submitted by: Nils Larsch <nla@trustcenter.de>
* Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()Dr. Stephen Henson2001-10-161-2/+2
| | | | | | with existing code. Modify library to use digest *_ex() functions.
* Another empty X509_NAME fix.Dr. Stephen Henson2001-06-261-0/+2
|
* Handle empty X509_NAME in printing routines.Dr. Stephen Henson2001-06-261-2/+2
|
* Change all calls to low level digest routines in the library andDr. Stephen Henson2001-06-191-8/+3
| | | | | | | | | | applications to use EVP. Add missing calls to HMAC_cleanup() and don't assume HMAC_CTX can be copied using memcpy(). Note: this is almost identical to the patch submitted to openssl-dev by Verdon Walker <VWalker@novell.com> except some redundant EVP_add_digest_()/EVP_cleanup() calls were removed and some changes made to avoid compiler warnings.
* Overhaul the display of certificate details inDr. Stephen Henson2001-03-151-1/+1
| | | | | | | | | | | the 'ca' utility. This can now be extensively customised in the configuration file and handles multibyte strings and extensions properly. This is required when extensions copying from certificate requests is supported: the user must be able to view the extensions before allowing a certificate to be issued.
* Document the -certopt option to the x509 utility.Dr. Stephen Henson2001-03-151-2/+4
| | | | | | | Add no_issuer option. Fix X509_print_ex() so it prints out newlines when certain fields are omitted.
* Print out OID of unknown signature or public keyDr. Stephen Henson2001-02-241-6/+11
| | | | algorithms.
* Make all configuration macros available for application by makingRichard Levitte2001-02-191-5/+5
| | | | | | | | | | | | sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
* New function X509V3_extensions_print() this removes extension duplicationDr. Stephen Henson2000-12-141-27/+4
| | | | | | | | | from the print routines. Reorganisation of OCSP code: initial print routines in ocsp_prn.c. Doesn't work fully because OCSP extensions aren't reimplemented yet. Implement some ASN1 functions needed to compile OCSP code.
* New function X509_signature_print() to remove some duplicateDr. Stephen Henson2000-12-141-15/+22
| | | | code from certificate, CRL and request printing routines.
* The majority of the OCSP code from CertCo.Richard Levitte2000-10-271-0/+50
|