aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_set.c
Commit message (Collapse)AuthorAgeFilesLines
* Add support for custom signature parametersDr. Stephen Henson2017-04-251-0/+77
| | | | | | | | | | | | | | | | | | Many signature types define the digest and public key type by a single OID such as ecdsa_with_sha256. Some types (RSA-PSS for example) use a single OID to indicate the signature scheme and additional parameters are encoded in the AlgorithmIdentifier. Add an X509_SIG_INFO structure to contain details about the signature type: specifically the digest algorithm, public key algorithm, security bits and various flags. This supports both existing algorithms and more complex types. Add accessors for the structure and a special case that retrieves signature information from a certificate. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/3301)
* Add support for reference counting using C11 atomicsKurt Roeckx2016-11-171-1/+1
| | | | | | | Reviewed-by: Andy Polyakov <appro@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> GH: #1500
* Add X509_getm_notBefore, X509_getm_notAfterDr. Stephen Henson2016-08-211-4/+2
| | | | | | | | Add mutable versions of X509_get0_notBefore and X509_get0_notAfter. Rename X509_SIG_get0_mutable to X509_SIG_getm. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Constify certificate and CRL time routines.Dr. Stephen Henson2016-08-191-3/+15
| | | | | | Update certificate and CRL time routines to match new standard. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Avoid duplicated code.Dr. Stephen Henson2016-08-191-19/+13
| | | | | | | The certificate and CRL time setting functions used similar code, combine into a single utility function. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Convert X509* functions to use const gettersDr. Stephen Henson2016-08-171-3/+4
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Make some more X509 functions const.Richard J. Moore2016-07-301-3/+3
| | | | | Reviewed-by: Stephen Henson <steve@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1367)
* Copyright consolidation 09/10Rich Salz2016-05-171-54/+6
| | | | Reviewed-by: Richard Levitte <levitte@openssl.org>
* Unify <TYPE>_up_ref methods signature and behaviour.FdaSilvaYY2016-05-161-2/+8
| | | | | | | | | Add a status return value instead of void. Add some sanity checks on reference counter value. Update the docs. Reviewed-by: Rich Salz <rsalz@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org>
* Convert CRYPTO_LOCK_X509_* to new multi-threading APIAlessandro Ghedini2016-03-081-1/+2
| | | | | Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove /* foo.c */ commentsRich Salz2016-01-261-1/+0
| | | | | | | | | | | | This was done by the following find . -name '*.[ch]' | /tmp/pl where /tmp/pl is the following three-line script: print unless $. == 1 && m@/\* .*\.[ch] \*/@; close ARGV if eof; # Close file to reset $. And then some hand-editing of other files. Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
* Add new X509 accessorsDr. Stephen Henson2015-11-141-0/+18
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* embed certificate serial number and signature fieldsDr. Stephen Henson2015-10-151-10/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* header includesDr. Stephen Henson2015-09-221-0/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Embed various signature algorithms.Dr. Stephen Henson2015-09-171-1/+1
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Embed X509_CINFDr. Stephen Henson2015-09-161-24/+24
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Change X509_VAL in X509 structure to embedded.Dr. Stephen Henson2015-09-161-10/+10
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Replace X509 macros with functionsDr. Stephen Henson2015-09-061-0/+25
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* Add X509_up_ref function.Dr. Stephen Henson2015-08-311-0/+5
| | | | Reviewed-by: Rich Salz <rsalz@openssl.org>
* Identify and move common internal libcrypto header filesRichard Levitte2015-05-141-1/+1
| | | | | | | | | | | | | There are header files in crypto/ that are used by a number of crypto/ submodules. Move those to crypto/include/internal and adapt the affected source code and Makefiles. The header files that got moved are: crypto/cryptolib.h crypto/md32_common.h Reviewed-by: Rich Salz <rsalz@openssl.org>
* Remove old ASN.1 code.Dr. Stephen Henson2015-03-231-8/+8
| | | | | | | | | Remove old M_ASN1_ macros and replace any occurences with the corresponding function. Remove d2i_ASN1_bytes, d2i_ASN1_SET, i2d_ASN1_SET: no longer used internally. Reviewed-by: Rich Salz <rsalz@openssl.org>
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-81/+77
| | | | Reviewed-by: Tim Hudson <tjh@openssl.org>
* RT1909: Omit version for v1 certificatesGeoff Keating2014-09-091-0/+6
| | | | | | | When calling X509_set_version to set v1 certificate, that should mean that the version number field is omitted. Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
* use const ASN1_TIME *Nils Larsch2006-12-111-2/+2
|
* Make NEG_PUBKEY_BUG on by default.Dr. Stephen Henson2000-07-261-8/+8
| | | | | | ASN1_TIME fixes. New function c2i_ASN1_OBJECT().
* Replace the macros in asn1.h with function equivalents. Also make UTF8StringsDr. Stephen Henson1999-10-201-7/+7
| | | | tolerated in certificates.
* Change #include filenames from <foo.h> to <openssl.h>.Bodo Möller1999-04-231-4/+4
| | | | | | Submitted by: Reviewed by: PR:
* Change functions to ANSI C.Ulf Möller1999-04-191-21/+7
|
* Import of old SSLeay release: SSLeay 0.9.0bRalf S. Engelschall1998-12-211-1/+1
|
* Import of old SSLeay release: SSLeay 0.8.1bRalf S. Engelschall1998-12-211-0/+164