aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/cmp
Commit message (Expand)AuthorAgeFilesLines
* cmp_msg.c: Use issuer of reference cert as default issuer entry in certTemplateDr. David von Oheimb2020-11-111-3/+4
* Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre2020-10-154-5/+5
* Run the withlibctx.pl scriptMatt Caswell2020-10-013-11/+11
* Fix safestack issues in conf.hMatt Caswell2020-09-131-2/+0
* Fix safestack issues in crmf.hMatt Caswell2020-09-133-7/+0
* Fix safestack issues in x509_vfy.hMatt Caswell2020-09-131-2/+0
* Fix safestack issues in cmp.hMatt Caswell2020-09-136-14/+0
* Fix safestack issues in asn1.hMatt Caswell2020-09-136-7/+0
* Fix safestack issues in x509v3.hMatt Caswell2020-09-132-3/+0
* Fix safestack issues in x509.hMatt Caswell2020-09-137-12/+0
* bugfix in apps/cmp.c and cmp_client.c: inconsistencies on retrieving extraCer...Dr. David von Oheimb2020-09-101-7/+8
* bugfix in ossl_cmp_msg_protect(): set senderKID and extend extraCerts also fo...Dr. David von Oheimb2020-09-101-12/+12
* bugfix in ossl_cmp_msg_add_extraCerts(): should include cert chain when using...Dr. David von Oheimb2020-09-101-1/+2
* Clean up CMP chain building for CMP signer, TLS client, and newly enrolled certsDr. David von Oheimb2020-09-104-40/+67
* Allow unauthenticated CMP server if missing -trusted, -srvcert, and -secret o...Dr. David von Oheimb2020-09-081-0/+8
* OSSL_CMP_CTX: rename field and its getter/setter from 'untrusted_certs' to 'u...Dr. David von Oheimb2020-09-055-28/+28
* Strengthen chain building for CMPDr. David von Oheimb2020-09-055-33/+58
* Add OSSL_CMP_CTX_get1_newChain() and related CLI option -chainoutDr. David von Oheimb2020-09-052-0/+32
* Add -verbosity option to apps/cmp.c and add log output also in crypto/cmpDr. David von Oheimb2020-09-014-14/+35
* Use in CMP+CRMF libctx and propq param added to sign/verify/HMAC/decryptDr. David von Oheimb2020-08-2110-198/+213
* cmp_msg.c: Copy libctx and propq of CMP_CTX to newly enrolled certificateDr. David von Oheimb2020-08-211-0/+3
* cmp_util.c: Add OPENSSL_CTX parameter to ossl_cmp_build_cert_chain(), improve...Dr. David von Oheimb2020-08-214-11/+16
* cmp_hdr.c: Adapt ossl_cmp_hdr_init() to use OPENSSL_CTX for random number gen...Dr. David von Oheimb2020-08-211-20/+9
* crypto/cmp: Prevent misleading errors in case x509v3_cache_extensions() failsDr. David von Oheimb2020-08-212-6/+14
* Add OPENSSL_CTX parameter to OSSL_CRMF_pbmp_new() and improve its docDr. David von Oheimb2020-08-212-4/+4
* Add libctx and propq parameters to OSSL_CMP_{SRV_},CTX_new() and ossl_cmp_moc...Dr. David von Oheimb2020-08-213-4/+11
* cmp_vfy.c: Fix bug: must verify msg signature also in 3GPP modeDr. David von Oheimb2020-08-211-14/+14
* Introduce X509_add_cert[s] simplifying various additions to cert listsDr. David von Oheimb2020-08-126-74/+34
* Add OSSL_CMP_MSG_write(), use it in apps/cmp.cDr. David von Oheimb2020-07-301-0/+18
* Export ossl_cmp_msg_load() as OSSL_CMP_MSG_read(), use it in apps/cmp.cDr. David von Oheimb2020-07-302-3/+4
* Export crm_new() of cmp_msg.c under the name OSSL_CMP_CTX_setup_CRM()Dr. David von Oheimb2020-07-301-12/+10
* Streamline the CMP request session API, adding the generalized OSSL_CMP_exec_...Dr. David von Oheimb2020-07-305-52/+42
* Constify X509_check_akid and prefer using X509_get0_serialNumber over X509_ge...Dr. David von Oheimb2020-07-161-2/+2
* Add X509_self_signed(), extending and improving documenation and testsDr. David von Oheimb2020-07-011-4/+4
* Fix CMP -days option range checking and test failing with enable-ubsanDr. David von Oheimb2020-06-223-11/+19
* Move part of OSSL_CMP_validate_msg() to ossl_cmp_msg_check_update()Dr. David von Oheimb2020-06-132-79/+90
* Bug fix in ossl_cmp_hdr_init(): sould not remember recipient as expected senderDr. David von Oheimb2020-06-131-4/+0
* Bug fix in ossl_cmp_certRep_new(): must allocate empty extraCerts stackDr. David von Oheimb2020-06-131-2/+6
* Make CMP server use same protection for response as for requestDr. David von Oheimb2020-06-135-30/+37
* Fill in transactionID on any error in OSSL_CMP_SRV_process_request()Dr. David von Oheimb2020-06-131-6/+10
* Improve ossl_cmp_msg_check_received() and rename to ossl_cmp_msg_check_update()Dr. David von Oheimb2020-06-134-33/+32
* Improve cert checking diagnostics of OSSL_CMP_validate_msg()Dr. David von Oheimb2020-06-131-26/+45
* Remove misleading diagnostics on pinned sender cert in OSSL_CMP_validate_msg()Dr. David von Oheimb2020-06-131-3/+0
* Correct error reason of verify_signature() in cmp_vfy.cDr. David von Oheimb2020-06-132-1/+3
* Allow subject of CMP -oldcert as sender unless protection cert is givenDr. David von Oheimb2020-06-131-4/+5
* Check expected sender not only for signature-protected CMP messagesDr. David von Oheimb2020-06-131-20/+19
* Streamline the approach to set CMP message recipient and expected senderDr. David von Oheimb2020-06-133-13/+16
* Fix too strict checks of ossl_cmp_calc_protection()Dr. David von Oheimb2020-06-131-4/+4
* Move decl of OSSL_CRMF_CERTID_dup from {crmf,cmp}_local.h to include/openssl/...Dr. David von Oheimb2020-05-241-1/+0
* Rename OSSL_CMP_CTX_set1_clCert() to OSSL_CMP_CTX_set1_cert()Dr. David von Oheimb2020-05-135-17/+17