vl-loz
|
4a469cba27
Add X509_STORE_CTX_set_get_crl and X509_STORE_CTX_set_current_reasons
|
1 year ago |
Petr Mikhalicin
|
4e5f3d6913
Fix checking return code of EVP_PKEY_get_int_param at check_curve
|
1 year ago |
Todd Short
|
3c95ef22df
RFC7250 (RPK) support
|
3 years ago |
Matt Caswell
|
e4142ec43b
Ensure that EXFLAG_INVALID_POLICY is checked even in leaf certs
|
1 year ago |
Richard Levitte
|
e077455e9e
Stop raising ERR_R_MALLOC_FAILURE in most places
|
2 years ago |
David von Oheimb
|
4fdc16af05
X509_STORE_CTX_set_default(): improve error handling, also in its use
|
2 years ago |
Ryan Kelley
|
c92c3dfb99
Moving notify check after the no time check
|
2 years ago |
Dr. David von Oheimb
|
c34e78766f
x509_lu.c and x509_vfy.c: improve coding style, comments, and related doc
|
2 years ago |
Dr. David von Oheimb
|
c633b973f6
crypto/x509/x509_vfy.c: Improve coding style
|
2 years ago |
Dr. David von Oheimb
|
1f00dc4f8c
x509_vfy.c: Revert the core of #14094 regarding chain_build() error reporting
|
2 years ago |
Dr. David von Oheimb
|
0ce8271c20
X509{,_LOOKUP}: Improve distinction between not found and fatal/internal error
|
3 years ago |
Matt Caswell
|
fecb3aae22
Update copyright year
|
2 years ago |
Matt Caswell
|
4aa8285026
Ensure X509_STORE_CTX_purpose_inherit handles a 0 default purpose
|
2 years ago |
Dr. David von Oheimb
|
79b2a2f2ee
add OSSL_STACK_OF_X509_free() for commonly used pattern
|
2 years ago |
Tobias Nießen
|
6894e20b50
Fix infinite verification loops due to has_san_id
|
3 years ago |
PW Hu
|
64c428c350
Fix: invoking X509_self_signed improperly
|
3 years ago |
x2018
|
1287dabd0b
fix some code with obvious wrong coding style
|
3 years ago |
Viktor Dukhovni
|
661de442e4
Prioritise DANE TLSA issuer certs over peer certs
|
3 years ago |
Hubert Kario
|
657489e812
cross-reference the DH and RSA SECLEVEL to level of security mappings
|
3 years ago |
Dr. David von Oheimb
|
f9ac6f6956
Improve the documentation of cert path building and validation
|
3 years ago |
Dr. David von Oheimb
|
f1343f45d6
x509_vfy.c: Improve a couple of internally documenting comments
|
3 years ago |
Pauli
|
69e21cb648
x509: remove TODOs
|
3 years ago |
Tomas Mraz
|
ed576acdf5
Rename all getters to use get/get0 in name
|
3 years ago |
Matt Caswell
|
3bcc933ec4
Teach EVP_PKEYs to say whether they were decoded from explicit params
|
3 years ago |
Dr. David von Oheimb
|
558f2a0146
X509 build_chain(): Fix two potential memory leaks on issuer variable
|
3 years ago |
Dr. David von Oheimb
|
fc48b5c825
X509 build_chain(): Make the variable 'curr' local to the loop body
|
3 years ago |
Dr. David von Oheimb
|
e2abc685b7
X509 build_chain(): Rename variable 'depth' to 'max_depth'
|
3 years ago |
Dr. David von Oheimb
|
aaa584cee7
X509 build_chain(): Restrict scope of 'self_signed' variable
|
3 years ago |
David Benjamin
|
cdf63a3736
Add X509 version constants.
|
3 years ago |
Dr. David von Oheimb
|
1c0eede982
Improve ossl_cmp_build_cert_chain(); publish it as X509_build_chain()
|
3 years ago |