aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/x509
Commit message (Expand)AuthorAgeFilesLines
* Changing X509at_get0_data_by_OBJ to expect const stack of X509_ATTRIBUTEAkshit Akhoury2020-10-151-1/+1
* Rename some occurrences of 'library_context' and 'lib_ctx' to 'libctx'Dr. Matthias St. Pierre2020-10-151-2/+2
* Rename OPENSSL_CTX prefix to OSSL_LIB_CTXDr. Matthias St. Pierre2020-10-1511-30/+30
* vms: move otherwise dead code into the VMS relevant path.Pauli2020-10-121-2/+5
* Adapt some code to OSSL_ENCODER_to_data() / OSSL_DECODER_from_data()Richard Levitte2020-10-101-7/+7
* Allow to continue on UNABLE_TO_VERIFY_LEAF_SIGNATUREAndré Klitzing2020-10-081-3/+9
* Fix memory leak in req_cb() of x_req.c - handle distinguishing_id also with N...Dr. David von Oheimb2020-10-011-2/+0
* Fix some things the rename script didn't quite get rightMatt Caswell2020-10-013-7/+6
* Run the withlibctx.pl scriptMatt Caswell2020-10-019-116/+98
* Prune low-level ASN.1 parse errors from error queue in der2key_decode() etc.Dr. David von Oheimb2020-09-301-6/+6
* Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()Dr. David von Oheimb2020-09-261-0/+1
* ENCODER: Adapt calls to the changed OSSL_ENCODER_CTX_new_by_EVP_PKEY()Richard Levitte2020-09-201-6/+13
* Rename check_chain_extensions to check_chainTomas Mraz2020-09-172-4/+4
* Disallow certs with explicit curve in verification chainTomas Mraz2020-09-172-0/+37
* free memory use on error in cert verifyPauli2020-09-161-0/+1
* Ignore unused return values from some sk_*() macrosMatt Caswell2020-09-133-3/+3
* Fix safestack issues in conf.hMatt Caswell2020-09-1320-40/+0
* Fix safestack issues in asn1t.hMatt Caswell2020-09-131-2/+0
* Fix safestack issues in x509_vfy.hMatt Caswell2020-09-133-7/+0
* Fix safestack issues in asn1.hMatt Caswell2020-09-1315-26/+0
* Fix stacks of OPENSSL_STRING, OPENSSL_CSTRING and OPENSSL_BLOCKMatt Caswell2020-09-134-6/+0
* Fix safestack issues in x509v3.hMatt Caswell2020-09-1323-41/+0
* Fix safestack issues in x509.hMatt Caswell2020-09-1325-40/+0
* check_chain_extensions(): Require X.509 v3 if extensions are presentDr. David von Oheimb2020-09-112-0/+6
* check_chain_extensions(): Change exclusion condition w.r.t. RFC 6818 section 2Dr. David von Oheimb2020-09-111-2/+5
* x509_vfy.c: Make sure that strict checks are not done for self-issued EE certsDr. David von Oheimb2020-09-111-6/+9
* check_chain_extensions(): Add check that CA cert includes key usage extensionDr. David von Oheimb2020-09-112-4/+10
* check_chain_extensions(): Add check that on empty Subject the SAN must be mar...Dr. David von Oheimb2020-09-113-6/+9
* check_chain_extensions(): Add check that AKID and SKID are not marked criticalDr. David von Oheimb2020-09-113-7/+25
* check_chain_extensions(): Add check that Basic Constraints of CA cert are mar...Dr. David von Oheimb2020-09-113-2/+13
* Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set...Dr. David von Oheimb2020-09-117-86/+234
* X509_NAME_cmp: restrict normal return values to {-1,0,1} to avoid confusion w...Dr. David von Oheimb2020-09-101-19/+19
* X509_NAME_oneline(): Fix output of multi-valued RDNs, escaping '/' and '+' in...Dr. David von Oheimb2020-09-101-10/+16
* X509_STORE_CTX_print_verify_cb(): add AKID and SKID output for (non-)trusted ...Dr. David von Oheimb2020-09-052-7/+21
* STORE: Move the built-in 'file:' loader to become an engine moduleRichard Levitte2020-09-031-1/+1
* RFC 8398: EAI comparisonDmitry Belyavskiy2020-08-261-2/+16
* RFC 8398: Name constraints validationDmitry Belyavskiy2020-08-261-5/+68
* crypto/x509/v3_utl.c: Fix IPv6 output in ipaddr_to_asc()Richard Levitte2020-08-261-3/+11
* STORE: Modify to support loading with provider based loadersRichard Levitte2020-08-241-0/+9
* Rename OSSL_SERIALIZER / OSSL_DESERIALIZER to OSSL_ENCODE / OSSL_DECODERichard Levitte2020-08-211-13/+13
* Add libctx and propq param to ASN.1 sign/verify/HMAC/decryptDr. David von Oheimb2020-08-211-60/+7
* x_x509.c: Simplify X509_new_with_libctx() using x509_set0_libctx()Dr. David von Oheimb2020-08-211-4/+1
* Make sure x509v3_cache_extensions() does not modify the error queueDr. David von Oheimb2020-08-211-0/+2
* X509: Add d2i_PUBKEY_ex(), which take a libctx and propqRichard Levitte2020-08-201-8/+47
* Remove needless #ifndef OPENSSL_NO_SOCK for X509_{CRL_}load_httpDr. David von Oheimb2020-08-131-4/+0
* Introduce X509_add_cert[s] simplifying various additions to cert listsDr. David von Oheimb2020-08-123-48/+66
* Add libctx support to PKCS7.Shane Lontis2020-08-091-2/+13
* Add internal method x509_set0_libctx().Shane Lontis2020-08-091-0/+14
* Update copyright yearMatt Caswell2020-08-061-1/+1
* Add 'section=...' info in error output of X509V3_EXT_nconf() as far as approp...Dr. David von Oheimb2020-08-041-12/+31
generated by cgit v1.2.3 (git 2.39.1) at 2024-09-16 23:38:00 +0000