Matt Caswell
|
da1c088f59
Copyright year updates
|
1 year ago |
3lswear
|
945fde53a3
Check i2d_X509_NAME return in X509_NAME_hash_ex/old
|
1 year ago |
Wim Decroix
|
ec59752835
X509_NAME_cmp fix for empty name
|
1 year ago |
Richard Levitte
|
e077455e9e
Stop raising ERR_R_MALLOC_FAILURE in most places
|
2 years ago |
Dr. David von Oheimb
|
aaabe58072
X509: clean up doc and implementation of X509{,_REQ}_check_private_key()
|
2 years ago |
Bernd Edlinger
|
b7e28c0bb1
Fix a memory leak in X509_issuer_and_serial_hash
|
2 years ago |
PW Hu
|
64c428c350
Fix: invoking X509_self_signed improperly
|
3 years ago |
Pauli
|
10af976962
x509: improve error reporting
|
3 years ago |
David Benjamin
|
cdf63a3736
Add X509 version constants.
|
3 years ago |
Tomas Mraz
|
74bcbea76f
X509_NAME_cmp: if canon_enclen is 0 for both names return 0
|
3 years ago |
Shane Lontis
|
e72dbd8e13
Fix usages of const EVP_MD.
|
3 years ago |
Pauli
|
72ded6f2a9
x509: coverity 1472673 & 1472693 - dereference after null checks
|
3 years ago |
Dr. David von Oheimb
|
0dca5ede0d
Make more use of X509_add_certs(); minor related code & comments cleanup
|
3 years ago |
Dr. David von Oheimb
|
c1be4d617c
Rename internal X509_add_cert_new() to ossl_x509_add_cert_new()
|
3 years ago |
Dr. David von Oheimb
|
daf1300b80
Add internal X509_add_certs_new(), which simplifies matters
|
3 years ago |
Matt Caswell
|
8130d654d1
Fix Null pointer deref in X509_issuer_and_serial_hash()
|
3 years ago |
Dr. David von Oheimb
|
d53b437f99
Allow NULL arg to OPENSSL_sk_{dup,deep_copy} returning empty stack
|
3 years ago |
Richard Levitte
|
4333b89f50
Update copyright year
|
3 years ago |
Tomas Mraz
|
0c8e98e615
Avoid using OSSL_PKEY_PARAM_GROUP_NAME when the key might be legacy
|
3 years ago |
Shane Lontis
|
5b5eea4b60
Deprecate EC_KEY + Update ec apps to use EVP_PKEY
|
4 years ago |
Dr. David von Oheimb
|
f2a0458731
X509_cmp(): Fix comparison in case x509v3_cache_extensions() failed to due to invalid cert
|
3 years ago |
Dr. David von Oheimb
|
bf973d0697
Add X509_NAME_hash_ex() to be able to check if it failed due to unsupported SHA1
|
3 years ago |
Dr. David von Oheimb
|
3bed88a397
x509_vfy.c: Restore rejection of expired trusted (root) certificate
|
3 years ago |
Richard Levitte
|
9311d0c471
Convert all {NAME}err() in crypto/ to their corresponding ERR_raise() call
|
4 years ago |
Matt Caswell
|
e6623cfbff
Fix safestack issues in x509.h
|
4 years ago |
Dr. David von Oheimb
|
bc64c5a69b
X509_NAME_cmp: restrict normal return values to {-1,0,1} to avoid confusion with -2 for error
|
4 years ago |
Dr. David von Oheimb
|
eeccc23723
Introduce X509_add_cert[s] simplifying various additions to cert lists
|
4 years ago |
Dr. David von Oheimb
|
c74aaa3920
Rename EVP_PKEY_cmp() to EVP_PKEY_eq() and EVP_PKEY_cmp_parameters() to EVP_PKEY_parameters_eq()
|
4 years ago |
Rich Salz
|
852c2ed260
In OpenSSL builds, declare STACK for datatypes ...
|
4 years ago |
Dr. David von Oheimb
|
e0331eb8b8
Prevent crash in X509_NAME_cmp() etc. when cert has no issuer or no serialNumber
|
4 years ago |