Shane Lontis
|
e6c2f96489
Fix more certificate related lib_ctx settings.
|
3 éve |
Shane Lontis
|
4669015d7b
Add ossl_ x509 symbols
|
3 éve |
Shane Lontis
|
adf7e6d1d6
Add ossl_asn1 symbols
|
3 éve |
Dr. David von Oheimb
|
4ef70dbcf4
Code cleanup mostly in crypto/x509/v3_purp.c
|
3 éve |
Dr. David von Oheimb
|
c1be4d617c
Rename internal X509_add_cert_new() to ossl_x509_add_cert_new()
|
3 éve |
Dr. David von Oheimb
|
0b3139e815
chain_build(): Call verify_cb_cert() if a preliminary error has become final
|
3 éve |
Dr. David von Oheimb
|
adc11e1b9c
x509_vfy: fix mem leaks in chain_build() on malloc error Coverify CID 1473068
|
3 éve |
Benjamin Kaduk
|
63ae847679
x509_vfy: remove redundant stack allocation
|
3 éve |
Dr. David von Oheimb
|
c926a5ecb7
X509_STORE_CTX_cleanup(): Use internally so no need to call explicitly
|
3 éve |
Dr. David von Oheimb
|
d1e85cdf79
x509_vfy.c: Make chain_build() error diagnostics to the point
|
3 éve |
Dr. David von Oheimb
|
7e365d51a1
x509_vfy.c: Sort out return values 0 vs. -1 (failure/internal error)
|
3 éve |
Dr. David von Oheimb
|
364246a986
X509_get_pubkey_parameters(): Correct failure behavior and its use
|
3 éve |
Dr. David von Oheimb
|
579262af14
x509_vfy.c: Fix various coding style and documentation style nits
|
3 éve |
Dr. David von Oheimb
|
11ddbf8459
Add X509_STORE_CTX_verify(), which takes the first untrusted cert as default target
|
3 éve |
Dr. David von Oheimb
|
88444854af
x509_vfy.c: Improve coding style and comments all over the file
|
4 éve |
Dr. David von Oheimb
|
d53b437f99
Allow NULL arg to OPENSSL_sk_{dup,deep_copy} returning empty stack
|
3 éve |
Richard Levitte
|
4333b89f50
Update copyright year
|
3 éve |
Shane Lontis
|
5b5eea4b60
Deprecate EC_KEY + Update ec apps to use EVP_PKEY
|
4 éve |
Dr. David von Oheimb
|
07b6068d24
x509_vfy.c: Rename CHECK_CB() to the more intuitively readable CB_FAIL_IF()
|
3 éve |
Dr. David von Oheimb
|
c476c06f50
find_issuer(): When returning an expired issuer, take the most recently expired one
|
3 éve |
Dr. David von Oheimb
|
4dd009180a
x509_vfy.c: Fix a regression in find_issuer()
|
3 éve |
Dr. David von Oheimb
|
bf973d0697
Add X509_NAME_hash_ex() to be able to check if it failed due to unsupported SHA1
|
3 éve |
Dr. David von Oheimb
|
e99505b4d0
x509_vfy.c: Improve comments (correcting typos etc.)
|
4 éve |
Dr. David von Oheimb
|
3bed88a397
x509_vfy.c: Restore rejection of expired trusted (root) certificate
|
4 éve |
Pauli
|
7b42408756
remove unused assignments
|
4 éve |
Ankita Shetty
|
5811387bac
x509_vfy.c: Remove superfluous assignment to 'ret' in check_chain()
|
4 éve |
Richard Levitte
|
9311d0c471
Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call
|
4 éve |
David von Oheimb
|
3309c4b716
x509_vfy.c: Call verification callback individually per strict check in check_chain()
|
4 éve |
David von Oheimb
|
6e5e118c2a
x509_vfy.c: Introduce CHECK_CB macro simplifying use of cert verification cb function
|
4 éve |
Dr. Matthias St. Pierre
|
b425001010
Rename OPENSSL_CTX prefix to OSSL_LIB_CTX
|
4 éve |