aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/x509
Commit message (Expand)AuthorAgeFilesLines
* Fix: some patches related to error exitingPeiwei Hu2022-01-072-3/+6
* v2i_AUTHORITY_KEYID(): Improve error reporting on parsing config values/optionsDr. David von Oheimb2022-01-072-11/+25
* Fix typosDimitris Apostolou2022-01-054-4/+4
* add OSSL_STACK_OF_X509_free() for commonly used patternDr. David von Oheimb2021-12-213-7/+12
* Fix infinite verification loops due to has_san_idTobias Nießen2021-12-141-1/+1
* remove redundant ERR_raisex20182021-12-101-3/+1
* check the return value of BIO_new() in t_x509.c:471 & cmp_vfy.c:36x20182021-12-101-0/+4
* CMP check_msg_find_cert(): improve diagnostics on transactionID mismatchDr. David von Oheimb2021-12-091-2/+2
* X509V3_set_ctx(): Clarify subject/req parameter for constructing SAN email ad...Dr. David von Oheimb2021-12-071-6/+5
* X509V3_set_ctx(): Clarify use of subject/req parameter for constructing SKID ...Dr. David von Oheimb2021-12-071-3/+3
* Add and use HAS_CASE_PREFIX(), CHECK_AND_SKIP_CASE_PREFIX(), and HAS_CASE_SUF...Dr. David von Oheimb2021-11-171-2/+2
* Add and use HAS_PREFIX() and CHECK_AND_SKIP_PREFIX() for checking if string h...Dr. David von Oheimb2021-11-175-21/+19
* x509: use safe maths calls for overflow detectionPauli2021-11-121-4/+7
* X509: Fix handling of AKID and SKID extensions according to configurationDr. David von Oheimb2021-11-112-7/+24
* x509: remove dead call to strlen()Pauli2021-11-091-2/+0
* Fix: invoking X509_self_signed improperlyPW Hu2021-11-092-4/+8
* Fix: invoking x509_name_cannon improperlyPW Hu2021-11-091-2/+2
* APPS/x509: Fix generation of AKID via v2i_AUTHORITY_KEYID()Dr. David von Oheimb2021-11-081-6/+19
* fix some code with obvious wrong coding stylex20182021-10-286-15/+13
* X509_PUBKEY_dup: Do not just up-ref the EVP_PKEYTomas Mraz2021-10-251-3/+17
* X509_dup: Avoid duplicating the embedded EVP_PKEYTomas Mraz2021-10-251-17/+2
* Fix nc_email to check ASN1 strings with NULL byte in the middleNikita Ivanov2021-09-131-0/+3
* Prioritise DANE TLSA issuer certs over peer certsViktor Dukhovni2021-09-031-8/+12
* Ensure that we check the ASN.1 type of an "otherName" before using itMatt Caswell2021-08-311-5/+12
* Fix the error handling in i2v_AUTHORITY_KEYIDMatt Caswell2021-08-241-7/+26
* Fix append_ia5 function to not assume NUL terminated stringsMatt Caswell2021-08-241-4/+12
* Fix the name constraints code to not assume NUL terminated stringsMatt Caswell2021-08-241-42/+93
* Fix printing of PROXY_CERT_INFO_EXTENSION to not assume NUL terminated stringsMatt Caswell2021-08-241-1/+2
* Fix GENERAL_NAME_print to not assume NUL terminated stringsMatt Caswell2021-08-241-5/+10
* Fix POLICYINFO printing to not assume NUL terminated stringsMatt Caswell2021-08-241-3/+6
* Fix i2v_GENERAL_NAME to not assume NUL terminated stringsMatt Caswell2021-08-242-16/+50
* Avoid freeing the conf lhashes in X509_V3_EXT*_add_confTomas Mraz2021-08-061-0/+5
* Fix ipv4_from_asc behavior on invalid Ip addressesAmir Mohammadi2021-08-061-2/+6
* Update copyright yearMatt Caswell2021-07-291-1/+1
* Fix a read buffer overrun in X509_aux_print().Ingo Schwarze2021-07-201-2/+2
* Fix bug in X509_print_exRich Salz2021-07-081-4/+6
* x509: improve error reportingPauli2021-06-301-11/+8
* coverity #1486531: return error properly from x509_pubkey_ex_new_ex()Tomas Mraz2021-06-291-0/+1
* x509: address NULL dereference and memory leaksPauli2021-06-262-10/+17
* cross-reference the DH and RSA SECLEVEL to level of security mappingsHubert Kario2021-06-231-0/+4
* Update copyright yearMatt Caswell2021-06-173-3/+3
* X509_digest_sig(): Improve default hash for EdDSA and allow to return the cho...Dr. David von Oheimb2021-06-161-8/+32
* Add a generic SubjectPublicKeyInfo decoderMatt Caswell2021-06-141-0/+17
* d2i_X509: revert calling X509v3_cache_extensions()Dr. David von Oheimb2021-06-121-24/+1
* Add support for ISO 8601 datetime formatWilliam Edmisten2021-06-111-2/+2
* Simplify error reporting in X509_PUBKEY_get0()Matt Caswell2021-06-081-20/+8
* Actually use a legacy route in pem_read_bio_key_legacy()Matt Caswell2021-06-081-11/+11
* Only use the legacy route to decode a public key if we have toMatt Caswell2021-06-081-2/+19
* Ensure that we consume all the data when decoding an SPKIMatt Caswell2021-06-081-2/+13
* Use the right class/tag when decoding an embedded keyMatt Caswell2021-06-081-1/+25