aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_cmp.c
Commit message (Collapse)AuthorAgeFilesLines
* Add X509_get0_serialNumber() and constify OCSP_cert_to_id()Dr. Stephen Henson2016-08-191-0/+5
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* Ignore the serial number for now and just do the rest.Richard J. Moore2016-07-301-1/+1
| | | | | Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1367)
* Make some more X509 functions const.Richard J. Moore2016-07-301-3/+3
| | | | | Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1367)
* Constify ...FdaSilvaYY2016-07-251-3/+3
| | | | | | | | X509_REVOKED_get0_extensions X509_check_private_key Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1300)
* Copyright consolidation 09/10Rich Salz2016-05-171-54/+6
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Avoid overflow issues in X509_cmp.David Benjamin2016-04-291-3/+4
| | | | | | | | | The length is a long, so returning the difference does not quite work. Thanks to Torbjörn Granlund for noticing. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Richard Levitte <levitte@openssl.org>
* Make X509_PUBKEY opaqueDr. Stephen Henson2016-03-221-7/+0
| | | | Reviewed-by: Matt Caswell <matt@openssl.org>
* GH601: Various spelling fixes.FdaSilvaYY2016-02-051-1/+1
| | | | | Signed-off-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Remove /* foo.c */ commentsRich Salz2016-01-261-1/+0
| | | | | | | | | | | | This was done by the following find . -name '*.[ch]' | /tmp/pl where /tmp/pl is the following three-line script: print unless $. == 1 && m@/\* .*\.[ch] \*/@; close ARGV if eof; # Close file to reset $. And then some hand-editing of other files. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Check Suite-B constraints with EE DANE recordsViktor Dukhovni2016-01-201-4/+15
| | | | | | | | | | | | | | When DANE-EE(3) matches or either of DANE-EE/PKIX-EE fails, we don't build a chain at all, but rather succeed or fail with just the leaf certificate. In either case also check for Suite-B violations. As unlikely as it may seem that anyone would enable both DANE and Suite-B, we should do what the application asks. Took the opportunity to eliminate the "cb" variables in x509_vfy.c, just call ctx->verify_cb(ok, ctx) Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* make EVP_PKEY opaqueDr. Stephen Henson2016-01-201-2/+2
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Use X509_get0_pubkey where appropriateDr. Stephen Henson2015-12-311-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* New function X509_get0_pubkeyDr. Stephen Henson2015-12-141-7/+11
| | | | Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Cleanup: fix all sources that used EVP_MD_CTX_(create|init|destroy)Richard Levitte2015-12-071-4/+4
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Adjust all accesses to EVP_MD_CTX to use accessor functions.Richard Levitte2015-12-071-14/+17
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* embed certificate serial number and signature fieldsDr. Stephen Henson2015-10-151-5/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Embed various signature algorithms.Dr. Stephen Henson2015-09-171-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Embed X509_CINFDr. Stephen Henson2015-09-161-26/+24
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* X509_CRL_INFO embedDr. Stephen Henson2015-09-161-2/+2
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Add X509_up_ref function.Dr. Stephen Henson2015-08-311-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Identify and move common internal libcrypto header filesRichard Levitte2015-05-141-1/+1
| | | | | | | | | | | | | There are header files in crypto/ that are used by a number of crypto/ submodules. Move those to crypto/include/internal and adapt the affected source code and Makefiles. The header files that got moved are: crypto/cryptolib.h crypto/md32_common.h Reviewed-by: Rich Salz <rsalz@openssl.org>
* free NULL cleanupRich Salz2015-03-281-4/+2
| | | | | | | | | EVP_.*free; this gets: EVP_CIPHER_CTX_free EVP_PKEY_CTX_free EVP_PKEY_asn1_free EVP_PKEY_asn1_set_free EVP_PKEY_free EVP_PKEY_free_it EVP_PKEY_meth_free; and also EVP_CIPHER_CTX_cleanup Reviewed-by: Kurt Roeckx <kurt@openssl.org>
* make X509_NAME opaqueDr. Stephen Henson2015-03-251-0/+1
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Remove old ASN.1 code.Dr. Stephen Henson2015-03-231-1/+1
| | | | | | | | | Remove old M_ASN1_ macros and replace any occurences with the corresponding function. Remove d2i_ASN1_bytes, d2i_ASN1_SET, i2d_ASN1_SET: no longer used internally. Reviewed-by: Rich Salz <rsalz@openssl.org>
* OPENSSL_NO_xxx cleanup: SHARich Salz2015-01-271-4/+0
| | | | | | | | | | | | | | | Remove support for SHA0 and DSS0 (they were broken), and remove the ability to attempt to build without SHA (it didn't work). For simplicity, remove the option of not building various SHA algorithms; you could argue that SHA_224/256/384/512 should be kept, since they're like crypto algorithms, but I decided to go the other way. So these options are gone: GENUINE_DSA OPENSSL_NO_SHA0 OPENSSL_NO_SHA OPENSSL_NO_SHA1 OPENSSL_NO_SHA224 OPENSSL_NO_SHA256 OPENSSL_NO_SHA384 OPENSSL_NO_SHA512 Reviewed-by: Richard Levitte <levitte@openssl.org>
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-368/+354
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Compare encodings in X509_cmp as well as hash.Dr. Stephen Henson2014-01-261-1/+14
|
* Make no-ec compilation work.Dr. Stephen Henson2013-08-171-0/+16
|
* Rename Suite B functions for consistency.Dr. Stephen Henson2012-08-031-3/+19
| | | | | | New function X509_chain_up_ref to dup and up the reference count of a STACK_OF(X509): replace equivalent functionality in several places by the equivalent call.
* add suite B chain validation flags and associated verify errorsDr. Stephen Henson2012-08-031-0/+124
|
* Fix some warnings caused by __owur. Temporarily (I hope) remove the moreBen Laurie2011-11-141-6/+6
| | | | aspirational __owur annotations.
* allow MD5 use for computing old format hash linksDr. Stephen Henson2011-06-221-2/+7
|
* PR: 2250Dr. Stephen Henson2010-05-031-2/+1
| | | | | | Submitted By: Ger Hobbelt <ger@hobbelt.com> Don't overwrite return value with strlen(f).
* PR: 2136Dr. Stephen Henson2010-01-121-0/+14
| | | | | | | Submitted by: Willy Weisz <weisz@vcpc.univie.ac.at> Add options to output hash using older algorithm compatible with OpenSSL versions before 1.0.0
* Audit libcrypto for unchecked return values: fix all cases enounteredDr. Stephen Henson2009-09-231-7/+15
|
* Update from 1.0.0-stable.Dr. Stephen Henson2009-05-301-3/+3
|
* PR: 1843Dr. Stephen Henson2009-02-161-1/+1
| | | | Use correct array size for SHA1 hash.
* Update certificate hash line format to handle canonical formatDr. Stephen Henson2009-01-151-1/+17
| | | | and avoid MD5 dependency.
* Cache some CRL related extensions.Dr. Stephen Henson2006-07-241-0/+7
|
* Store canonical encodings of Name structures. Update X509_NAME_cmp() to useDr. Stephen Henson2006-07-181-141/+18
| | | | them.
* Update EVP_PKEY_cmp() and X509_check_private() to return sensible values andDr. Stephen Henson2006-04-281-22/+14
| | | | handle unsupported key types.
* Perform partial comparison of different character types in X509_NAME_cmp().Dr. Stephen Henson2004-12-011-12/+28
|
* Add functionality to help making self-signed certificate.Richard Levitte2003-04-031-44/+18
|
* Security fixes brought forward from 0.9.7.Ben Laurie2002-11-131-4/+5
|
* Add header ctype.hDr. Stephen Henson2002-11-131-0/+1
|
* X509_NAME_cmp() now compares PrintableString and emailAddress with a value ↵Richard Levitte2002-11-091-3/+106
| | | | | | | of type ia5String correctly. PR: 244
* use a generic EC_KEY structure (EC keys are not ECDSA specific)Bodo Möller2002-08-071-3/+4
| | | | Submitted by: Nils Larsch
* ECDSA supportBodo Möller2002-02-131-0/+16
| | | | Submitted by: Nils Larsch <nla@trustcenter.de>
* Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()Dr. Stephen Henson2001-10-161-3/+3
| | | | | | with existing code. Modify library to use digest *_ex() functions.
* Really add the EVP and all of the DES changes.Ben Laurie2001-07-301-0/+2
|
generated by cgit v1.2.3 (git 2.39.1) at 2024-07-22 02:56:43 +0000