 Rich Salz
|
12a765a523
Explicitly test against NULL; do not use !p or similar
|
vor 5 Jahren |
 Dr. Matthias St. Pierre
|
706457b7bd
Reorganize local header files
|
vor 5 Jahren |
|
Dr. Matthias St. Pierre
|
25f2138b0a
Reorganize private crypto header files
|
vor 5 Jahren |
 opensslonzos-github
|
48102247ff
Add missing EBCDIC strings
|
vor 5 Jahren |
 Shane Lontis
|
faa9dcd4d4
Rename X509_STORE ptr stored in opaque struct X509_STORE_CTX
|
vor 5 Jahren |
 Ken Goldman
|
baba154510
Admit unknown pkey types at security level 0
|
vor 6 Jahren |
 Richard Levitte
|
3e4b43b9e5
Following the license change, modify the boilerplates in crypto/x509/
|
vor 6 Jahren |
 Viktor Dukhovni
|
dc5831da59
Apply self-imposed path length also to root CAs
|
vor 6 Jahren |
|
Viktor Dukhovni
|
ed422a2d01
Only CA certificates can be self-issued
|
vor 6 Jahren |
|
Viktor Dukhovni
|
55a6250f1e
Skip CN DNS name constraint checks when not needed
|
vor 6 Jahren |
 Matt Caswell
|
6ec5fce25e
Update copyright year
|
vor 6 Jahren |
 FdaSilvaYY
|
7fcdbd839c
X509: add more error codes on malloc or sk_TYP_push failure
|
vor 6 Jahren |
 Pauli
|
f32b0abe26
Remove unnecessary #include <openssl/lhash.h> directives.
|
vor 7 Jahren |
 David Benjamin
|
8545051c36
Guard against DoS in name constraints handling.
|
vor 7 Jahren |
 Rich Salz
|
176db6dc51
Use "" not <> for internal/ includes
|
vor 7 Jahren |
|
Pauli
|
a1df06b363
This has been added to avoid the situation where some host ctype.h functions
|
vor 7 Jahren |
|
Matt Caswell
|
24664a3bf5
Remove OPENSSL_assert() from crypto/x509
|
vor 7 Jahren |
 Dr. Stephen Henson
|
c3c8823c87
Use X509_get_signature_info() when checking security levels.
|
vor 7 Jahren |
 Emilia Kasper
|
80770da39e
X509 time: tighten validation per RFC 5280
|
vor 7 Jahren |
|
Viktor Dukhovni
|
c53f7355b9
Restore last-resort expired untrusted intermediate issuers
|
vor 8 Jahren |
|
Viktor Dukhovni
|
4a7b3a7b4d
Un-delete still documented X509_STORE_CTX_set_verify
|
vor 8 Jahren |
|
Matt Caswell
|
8b7c51a0e4
Add some sanity checks when checking CRL scores
|
vor 8 Jahren |
|
Dr. Stephen Henson
|
568ce3a583
Constify certificate and CRL time routines.
|
vor 8 Jahren |
 klemens
|
6025001707
spelling fixes, just comments and readme.
|
vor 8 Jahren |
|
Richard Levitte
|
790555d675
Don't check any revocation info on proxy certificates
|
vor 8 Jahren |
|
Dr. Stephen Henson
|
e032117db2
Fix CRL time comparison.
|
vor 8 Jahren |
|
Dr. Stephen Henson
|
fc9d1ef39c
Remove current_method from X509_STORE_CTX
|
vor 8 Jahren |
|
Richard Levitte
|
0a5fe2eb94
Add setter and getter for X509_STORE's check_policy
|
vor 8 Jahren |
|
Richard Levitte
|
1060a50b6d
Add getters / setters for the X509_STORE_CTX and X509_STORE functions
|
vor 8 Jahren |
|
Dr. Stephen Henson
|
626aa24849
Use newest CRL.
|
vor 8 Jahren |
