projects
/
oweals
/
openssl.git
/ history
commit
grep
author
committer
pickaxe
?
search:
re
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
first ⋅ prev ⋅
next
Add SSL_DANE typedef for consistency.
[oweals/openssl.git]
/
crypto
/
x509
/
x509_vfy.c
2016-04-08
Rich Salz
Add SSL_DANE typedef for consistency.
blob
|
commitdiff
|
raw
2016-04-03
Viktor Dukhovni
Move peer chain security checks into x509_vfy.c
blob
|
commitdiff
|
raw
|
diff to current
2016-04-03
Viktor Dukhovni
Tidy up x509_vfy callback handling
blob
|
commitdiff
|
raw
|
diff to current
2016-03-30
Viktor Dukhovni
Require intermediate CAs to have basicConstraints CA...
blob
|
commitdiff
|
raw
|
diff to current
2016-03-21
Viktor Dukhovni
Add a comment on dane_verify() logic
blob
|
commitdiff
|
raw
|
diff to current
2016-03-08
Alessandro Ghedini
Convert CRYPTO_LOCK_X509_* to new multi-threading API
blob
|
commitdiff
|
raw
|
diff to current
2016-02-10
Viktor Dukhovni
Deprecate the -issuer_checks debugging option
blob
|
commitdiff
|
raw
|
diff to current
2016-02-08
Viktor Dukhovni
Suppress DANE TLSA reflection when verification fails
blob
|
commitdiff
|
raw
|
diff to current
2016-02-05
FdaSilvaYY
GH601: Various spelling fixes.
blob
|
commitdiff
|
raw
|
diff to current
2016-02-05
Viktor Dukhovni
Ensure correct chain depth for policy checks with DANE...
blob
|
commitdiff
|
raw
|
diff to current
2016-02-05
Viktor Dukhovni
Long overdue cleanup of X509 policy tree verification
blob
|
commitdiff
|
raw
|
diff to current
2016-02-01
Viktor Dukhovni
Compat self-signed trust with reject-only aux data
blob
|
commitdiff
|
raw
|
diff to current
2016-02-01
Viktor Dukhovni
Check chain extensions also for trusted certificates
blob
|
commitdiff
|
raw
|
diff to current
2016-01-26
Rich Salz
Remove /* foo.c */ comments
blob
|
commitdiff
|
raw
|
diff to current
2016-01-20
Viktor Dukhovni
Check Suite-B constraints with EE DANE records
blob
|
commitdiff
|
raw
|
diff to current
2016-01-18
Viktor Dukhovni
Drop cached certificate signature validity flag
blob
|
commitdiff
|
raw
|
diff to current
2016-01-15
Dr. Stephen Henson
Add lookup_certs for a trusted stack.
blob
|
commitdiff
|
raw
|
diff to current
2016-01-14
Viktor Dukhovni
Cosmetic polish for last-resort depth 0 check
blob
|
commitdiff
|
raw
|
diff to current
2016-01-14
Viktor Dukhovni
Fix last-resort depth 0 check when the chain has multip...
blob
|
commitdiff
|
raw
|
diff to current
2016-01-14
Viktor Dukhovni
Always initialize X509_STORE_CTX get_crl pointer
blob
|
commitdiff
|
raw
|
diff to current
2016-01-07
Viktor Dukhovni
DANE support for X509_verify_cert()
blob
|
commitdiff
|
raw
|
diff to current
2016-01-06
Viktor Dukhovni
DANE support structures, constructructors and accessors
blob
|
commitdiff
|
raw
|
diff to current
2016-01-03
Viktor Dukhovni
Fix X509_STORE_CTX_cleanup()
blob
|
commitdiff
|
raw
|
diff to current
2016-01-03
Viktor Dukhovni
X509_verify_cert() cleanup
blob
|
commitdiff
|
raw
|
diff to current
2015-12-14
Dr. Stephen Henson
New function X509_get0_pubkey
blob
|
commitdiff
|
raw
|
diff to current
2015-12-01
Rich Salz
ex_data part 2: doc fixes and CRYPTO_free_ex_index.
blob
|
commitdiff
|
raw
|
diff to current
2015-11-26
Dr. Stephen Henson
Remove X509_VERIFY_PARAM_ID
blob
|
commitdiff
|
raw
|
diff to current
2015-11-09
Matt Caswell
Continue standardising malloc style for libcrypto
blob
|
commitdiff
|
raw
|
diff to current
2015-10-15
Dr. Stephen Henson
embed CRL serial number and signature fields
blob
|
commitdiff
|
raw
|
diff to current
2015-09-05
mrpre
In X509_STORE_CTX_init, cleanup on failure
blob
|
commitdiff
|
raw
|
diff to current
2015-09-05
David Woodhouse
RT3951: Add X509_V_FLAG_NO_CHECK_TIME to suppress time...
blob
|
commitdiff
|
raw
|
diff to current
2015-09-03
David Woodhouse
Revert "OPENSSL_NO_xxx cleanup: RFC3779"
blob
|
commitdiff
|
raw
|
diff to current
2015-09-03
Rich Salz
Add and use OPENSSL_zalloc
blob
|
commitdiff
|
raw
|
diff to current
2015-09-02
Dr. Stephen Henson
make X509_CRL opaque
blob
|
commitdiff
|
raw
|
diff to current
2015-09-02
Viktor Dukhovni
Better handling of verify param id peername field
blob
|
commitdiff
|
raw
|
diff to current
2015-08-31
Dr. Stephen Henson
Add X509_up_ref function.
blob
|
commitdiff
|
raw
|
diff to current
2015-08-31
Dr. Stephen Henson
Add X509_CRL_up_ref function
blob
|
commitdiff
|
raw
|
diff to current
2015-08-28
Alessandro Ghedini
GH354: Memory leak fixes
blob
|
commitdiff
|
raw
|
diff to current
2015-08-13
Ismo Puustinen
GH364: Free memory on an error path
blob
|
commitdiff
|
raw
|
diff to current
2015-08-10
Rich Salz
RT3999: Remove sub-component version strings
blob
|
commitdiff
|
raw
|
diff to current
2015-07-07
Matt Caswell
Extend -show_chain option to verify to show more info
blob
|
commitdiff
|
raw
|
diff to current
2015-07-07
Matt Caswell
Reject calls to X509_verify_cert that have not been...
blob
|
commitdiff
|
raw
|
diff to current
2015-07-07
Matt Caswell
Fix alternate chains certificate forgery issue
blob
|
commitdiff
|
raw
|
diff to current
2015-06-11
Emilia Kasper
Fix length checks in X509_cmp_time to avoid out-of...
blob
|
commitdiff
|
raw
|
diff to current
2015-05-14
Richard Levitte
Identify and move common internal libcrypto header...
blob
|
commitdiff
|
raw
|
diff to current
2015-05-06
Gunnar Kudrjavets
Initialize potentially uninitialized local variables
blob
|
commitdiff
|
raw
|
diff to current
2015-05-06
Rich Salz
memset, memcpy, sizeof consistency fixes
blob
|
commitdiff
|
raw
|
diff to current
2015-05-04
Rich Salz
Use safer sizeof variant in malloc
blob
|
commitdiff
|
raw
|
diff to current
2015-05-01
Rich Salz
free NULL cleanup -- coda
blob
|
commitdiff
|
raw
|
diff to current
2015-05-01
Rich Salz
Remove goto inside an if(0) block
blob
|
commitdiff
|
raw
|
diff to current
2015-04-30
Rich Salz
free NULL cleanup 5a
blob
|
commitdiff
|
raw
|
diff to current
2015-04-28
Rich Salz
remove malloc casts
blob
|
commitdiff
|
raw
|
diff to current
2015-03-28
Rich Salz
free NULL cleanup
blob
|
commitdiff
|
raw
|
diff to current
2015-03-24
Dr. Stephen Henson
Fix verify algorithm.
blob
|
commitdiff
|
raw
|
diff to current
2015-02-25
Matt Caswell
Add flag to inhibit checking for alternate certificate...
blob
|
commitdiff
|
raw
|
diff to current
2015-02-25
Matt Caswell
In certain situations the server provided certificate...
blob
|
commitdiff
|
raw
|
diff to current
2015-02-09
Dr. Stephen Henson
Remove obsolete IMPLEMENT_ASN1_SET_OF
blob
|
commitdiff
|
raw
|
diff to current
2015-02-08
Rich Salz
Final (for me, for now) dead code cleanup
blob
|
commitdiff
|
raw
|
diff to current
2015-02-06
Rich Salz
util/mkstack.pl now generates entire safestack.h
blob
|
commitdiff
|
raw
|
diff to current
2015-01-27
Rich Salz
OPENSSL_NO_xxx cleanup: RFC3779
blob
|
commitdiff
|
raw
|
diff to current
2015-01-27
Rich Salz
OPENSSL_NO_xxx cleanup: many removals
blob
|
commitdiff
|
raw
|
diff to current
2015-01-22
Matt Caswell
More comment realignment
master-post-reformat
blob
|
commitdiff
|
raw
|
diff to current
2015-01-22
Matt Caswell
Run util/openssl-format-source -v -c .
blob
|
commitdiff
|
raw
|
diff to current
2015-01-22
Matt Caswell
Further comment changes for reformat (master)
blob
|
commitdiff
|
raw
|
diff to current
2015-01-06
Matt Caswell
Further comment amendments to preserve formatting prior...
blob
|
commitdiff
|
raw
|
diff to current
2014-09-08
Paul Suhler
RT2841: Extra return in check_issued
blob
|
commitdiff
|
raw
|
diff to current
2014-08-15
Rich Salz
RT2751: Declare get_issuer_sk() earlier.
blob
|
commitdiff
|
raw
|
diff to current
2014-07-07
Viktor Dukhovni
Update API to use (char *) for email addresses and...
blob
|
commitdiff
|
raw
|
diff to current
2014-07-05
Viktor Dukhovni
Set optional peername when X509_check_host() succeeds.
blob
|
commitdiff
|
raw
|
diff to current
2014-06-23
Viktor Dukhovni
One more typo when changing !result to result <= 0
blob
|
commitdiff
|
raw
|
diff to current
2014-06-23
Viktor Dukhovni
Fix typo in last commit
blob
|
commitdiff
|
raw
|
diff to current
2014-06-23
Viktor Dukhovni
Multiple verifier reference identities.
blob
|
commitdiff
|
raw
|
diff to current
2014-06-23
Viktor Dukhovni
X509_check_mumble() failure is <= 0, not just 0
blob
|
commitdiff
|
raw
|
diff to current
2014-06-22
Viktor Dukhovni
Drop hostlen from X509_VERIFY_PARAM_ID.
blob
|
commitdiff
|
raw
|
diff to current
2014-05-25
Dr. Stephen Henson
Don't use expired certificates if possible.
blob
|
commitdiff
|
raw
|
diff to current
2014-05-25
Dr. Stephen Henson
Rename vpm_int.h to x509_lcl.h
blob
|
commitdiff
|
raw
|
diff to current
2014-05-21
Viktor Dukhovni
Fixes to host checking.
blob
|
commitdiff
|
raw
|
diff to current
2014-03-03
Dr. Stephen Henson
For self signed root only indicate one error.
blob
|
commitdiff
|
raw
|
diff to current
2014-02-14
Dr. Stephen Henson
Include TA in checks/callback with partial chains.
blob
|
commitdiff
|
raw
|
diff to current
2014-02-14
Dr. Stephen Henson
Don't do loop detection for self signed check.
blob
|
commitdiff
|
raw
|
diff to current
2014-01-09
Dr. Stephen Henson
Fix bug in X509_V_FLAG_IGNORE_CRITICAL CRL handling.
blob
|
commitdiff
|
raw
|
diff to current
2013-12-13
Dr. Stephen Henson
Add opaque ID structure.
blob
|
commitdiff
|
raw
|
diff to current
2013-12-13
Dr. Stephen Henson
Fix for partial chain notification.
blob
|
commitdiff
|
raw
|
diff to current
2013-09-08
Dr. Stephen Henson
Partial path fix.
blob
|
commitdiff
|
raw
|
diff to current
2013-07-12
Dr. Stephen Henson
Fix verify loop with CRL checking.
blob
|
commitdiff
|
raw
|
diff to current
2013-01-06
Ben Laurie
Fix warning.
blob
|
commitdiff
|
raw
|
diff to current
2012-12-21
Dr. Stephen Henson
Make partial chain checking work if we only have the...
blob
|
commitdiff
|
raw
|
diff to current
2012-12-13
Dr. Stephen Henson
New verify flag to return success if we have any certif...
blob
|
commitdiff
|
raw
|
diff to current
2012-12-06
Dr. Stephen Henson
Fix two bugs which affect delta CRL handling:
blob
|
commitdiff
|
raw
|
diff to current
2012-12-05
Dr. Stephen Henson
Integrate host, email and IP address checks into X509_v...
blob
|
commitdiff
|
raw
|
diff to current
2012-12-04
Dr. Stephen Henson
initial support for delta CRL generations by diffing...
blob
|
commitdiff
|
raw
|
diff to current
2012-08-03
Dr. Stephen Henson
Rename Suite B functions for consistency.
blob
|
commitdiff
|
raw
|
diff to current
2012-08-03
Dr. Stephen Henson
add suite B chain validation flags and associated verif...
blob
|
commitdiff
|
raw
|
diff to current
2012-03-05
Dr. Stephen Henson
don't do loop check for single self signed certificate
blob
|
commitdiff
|
raw
|
diff to current
2011-09-23
Dr. Stephen Henson
PR: 2606
blob
|
commitdiff
|
raw
|
diff to current
2011-09-06
Dr. Stephen Henson
Initialise X509_STORE_CTX properly so CRLs with nextUpd...
blob
|
commitdiff
|
raw
|
diff to current
2010-12-25
Dr. Stephen Henson
avoid verification loops in trusted store when path...
blob
|
commitdiff
|
raw
|
diff to current
2010-11-02
Dr. Stephen Henson
Submitted by: Jonathan Dixon <joth@chromium.org>
blob
|
commitdiff
|
raw
|
diff to current
2010-02-25
Dr. Stephen Henson
add -trusted_first option and verify flag
blob
|
commitdiff
|
raw
|
diff to current
2010-02-25
Dr. Stephen Henson
tidy verify code. xn not used any more and check for...
blob
|
commitdiff
|
raw
|
diff to current
next