aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_vfy.c
Commit message (Expand)AuthorAgeFilesLines
...
* Use safer sizeof variant in mallocRich Salz2015-05-041-2/+1
* free NULL cleanup -- codaRich Salz2015-05-011-4/+2
* Remove goto inside an if(0) blockRich Salz2015-05-011-5/+5
* free NULL cleanup 5aRich Salz2015-04-301-18/+11
* remove malloc castsRich Salz2015-04-281-1/+2
* free NULL cleanupRich Salz2015-03-281-4/+2
* Fix verify algorithm.Dr. Stephen Henson2015-03-241-0/+8
* Add flag to inhibit checking for alternate certificate chains. Setting thisMatt Caswell2015-02-251-2/+4
* In certain situations the server provided certificate chain may no longer beMatt Caswell2015-02-251-70/+105
* Remove obsolete IMPLEMENT_ASN1_SET_OFDr. Stephen Henson2015-02-091-4/+0
* Final (for me, for now) dead code cleanupRich Salz2015-02-081-6/+0
* util/mkstack.pl now generates entire safestack.hRich Salz2015-02-061-6/+0
* OPENSSL_NO_xxx cleanup: RFC3779Rich Salz2015-01-271-2/+0
* OPENSSL_NO_xxx cleanup: many removalsRich Salz2015-01-271-4/+0
* More comment realignmentmaster-post-reformatMatt Caswell2015-01-221-9/+9
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-2189/+2080
* Further comment changes for reformat (master)Matt Caswell2015-01-221-8/+9
* Further comment amendments to preserve formatting prior to source reformatMatt Caswell2015-01-061-1/+2
* RT2841: Extra return in check_issuedPaul Suhler2014-09-081-1/+0
* RT2751: Declare get_issuer_sk() earlier.Rich Salz2014-08-151-0/+1
* Update API to use (char *) for email addresses and hostnamesViktor Dukhovni2014-07-071-2/+2
* Set optional peername when X509_check_host() succeeds.Viktor Dukhovni2014-07-061-1/+2
* One more typo when changing !result to result <= 0Viktor Dukhovni2014-06-231-1/+1
* Fix typo in last commitViktor Dukhovni2014-06-221-1/+1
* Multiple verifier reference identities.Viktor Dukhovni2014-06-221-1/+16
* X509_check_mumble() failure is <= 0, not just 0Viktor Dukhovni2014-06-221-3/+3
* Drop hostlen from X509_VERIFY_PARAM_ID.Viktor Dukhovni2014-06-221-2/+1
* Don't use expired certificates if possible.Dr. Stephen Henson2014-05-251-5/+17
* Rename vpm_int.h to x509_lcl.hDr. Stephen Henson2014-05-251-1/+1
* Fixes to host checking.Viktor Dukhovni2014-05-211-1/+2
* For self signed root only indicate one error.Dr. Stephen Henson2014-03-031-2/+5
* Include TA in checks/callback with partial chains.Dr. Stephen Henson2014-02-141-1/+1
* Don't do loop detection for self signed check.Dr. Stephen Henson2014-02-141-0/+2
* Fix bug in X509_V_FLAG_IGNORE_CRITICAL CRL handling.Dr. Stephen Henson2014-01-091-3/+2
* Add opaque ID structure.Dr. Stephen Henson2013-12-131-3/+5
* Fix for partial chain notification.Dr. Stephen Henson2013-12-131-1/+5
* Partial path fix.Dr. Stephen Henson2013-09-081-11/+8
* Fix verify loop with CRL checking.Dr. Stephen Henson2013-07-121-0/+11
* Fix warning.Ben Laurie2013-01-061-1/+1
* Make partial chain checking work if we only have the EE certificate inDr. Stephen Henson2012-12-211-0/+41
* New verify flag to return success if we have any certificate in theDr. Stephen Henson2012-12-131-0/+9
* Fix two bugs which affect delta CRL handling:Dr. Stephen Henson2012-12-061-2/+2
* Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson2012-12-051-0/+35
* initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson2012-12-041-0/+119
* Rename Suite B functions for consistency.Dr. Stephen Henson2012-08-031-12/+5
* add suite B chain validation flags and associated verify errorsDr. Stephen Henson2012-08-031-0/+20
* don't do loop check for single self signed certificateDr. Stephen Henson2012-03-051-0/+3
* PR: 2606Dr. Stephen Henson2011-09-231-1/+1
* Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the pastDr. Stephen Henson2011-09-061-0/+4
* avoid verification loops in trusted store when path buildingDr. Stephen Henson2010-12-251-0/+15