aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_vfy.h
Commit message (Expand)AuthorAgeFilesLines
* Check that the subject name in a proxy cert complies to RFC 3820Richard Levitte2016-06-291-0/+2
* Ensure verify error is set when X509_verify_cert() failsViktor Dukhovni2016-05-191-2/+5
* Fix X509_STORE_CTX_cleanup()Viktor Dukhovni2016-01-021-1/+1
* Add flag to inhibit checking for alternate certificate chains. Setting thisMatt Caswell2015-04-201-0/+6
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-391/+386
* indent has problems with comments that are on the right hand side of a line.Matt Caswell2015-01-221-34/+65
* More indent fixes for STACK_OFMatt Caswell2015-01-221-1/+1
* Fix indent issue with functions using STACK_OFMatt Caswell2015-01-221-2/+2
* mark all block comments that need format preserving so thatTim Hudson2015-01-221-1/+1
* Update API to use (char *) for email addresses and hostnamesViktor Dukhovni2014-07-071-3/+3
* New peername element in X509_VERIFY_PARAM_IDViktor Dukhovni2014-07-071-0/+1
* Multiple verifier reference identities.Viktor Dukhovni2014-07-071-0/+2
* Fixes to host checking.Viktor Dukhovni2014-05-211-0/+2
* verify parameter enumeration functionsDr. Stephen Henson2013-12-131-0/+3
* Add opaque ID structure.Dr. Stephen Henson2013-12-131-6/+3
* New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson2013-01-171-0/+5
* add suite B chain validation flags and associated verify errorsDr. Stephen Henson2012-12-261-0/+14
* Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson2012-12-191-0/+20
* New verify flag to return success if we have any certificate in the trustedDr. Stephen Henson2012-12-141-0/+2
* add -trusted_first option and verify flag (backport from HEAD)Dr. Stephen Henson2012-09-261-0/+2
* Add missing functions to allow access to newer X509_STORE_CTX statusDr. Stephen Henson2009-10-311-0/+3
* Add new function X509_STORE_set_verify_cb and use it in appsDr. Stephen Henson2009-10-181-0/+3
* Allow checking of self-signed certifictes if a flag is set.Dr. Stephen Henson2009-06-261-0/+3
* Initial support for delta CRLs. If "use deltas" flag is set attempt to findDr. Stephen Henson2008-09-011-0/+2
* Add support for CRLs partitioned by reason code.Dr. Stephen Henson2008-08-291-0/+4
* Initial support for CRL path validation. This supports distinct certificateDr. Stephen Henson2008-08-131-0/+4
* Initial support for name constraints certificate extension.Dr. Stephen Henson2008-08-081-0/+7
* Add RFC 3779 support.Ben Laurie2006-11-271-0/+1
* Overhaul of by_dir code to handle dynamic loading of CRLs.Dr. Stephen Henson2006-09-171-0/+2
* Support for AKID in CRLs and partial support for IDP. Overhaul of CRLDr. Stephen Henson2006-09-141-0/+2
* Fixes for new CRL/cert callbacks. Update CRL processing code to use newDr. Stephen Henson2006-09-111-2/+2
* Add verify callback functions to lookup a STACK of matching certs or CRLsDr. Stephen Henson2006-09-101-0/+6
* Two new verify flags functions.Dr. Stephen Henson2005-09-021-0/+3
* Added restrictions on the use of proxy certificates, as they may poseRichard Levitte2005-04-091-8/+11
* Add functionality needed to process proxy certificates.Richard Levitte2004-12-281-3/+5
* Make an explicit check during certificate validation to see that theRichard Levitte2004-11-291-3/+4
* Don't use C++ reserved work "explicit".Dr. Stephen Henson2004-10-011-1/+1
* Make -Werror happy again.Geoff Thorpe2004-09-181-0/+1
* New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson2004-09-061-20/+85
* Delete obsolete and unimplemented function.Dr. Stephen Henson2004-05-191-4/+0
* X509_policy_lib_init is declared but not defined, so it raises havocRichard Levitte2004-05-191-0/+2
* Don't use C++ reserved word.Dr. Stephen Henson2004-04-011-1/+1
* Allow CRLs to be passed into X509_STORE_CTX. This is useful when theDr. Stephen Henson2004-03-271-0/+2
* Fix loads of warnings in policy code.Dr. Stephen Henson2004-03-251-1/+1
* Initial support for certificate policy checking and evaluation.Dr. Stephen Henson2004-03-231-0/+38
* Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson2004-03-051-5/+14
* Make sure we get the definition of a number of OPENSSL_NO_* macros.Richard Levitte2003-03-201-0/+1
* Reject certificates with unhandled critical extensions.Dr. Stephen Henson2001-10-211-0/+2
* Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe2001-09-011-1/+1
* More typedef'd struct names as search targetsBodo Möller2001-08-061-2/+2