 Dr. David von Oheimb
|
07e84e67a6
ee-self-signed.pem: Restore original version, adding -attime to 25-test_verify.t
|
3 éve |
|
Dr. David von Oheimb
|
97b59744f2
cleanup where purpose is not needed in 25-test_verify.t
|
3 éve |
 Matt Caswell
|
a28d06f3e9
Update copyright year
|
3 éve |
|
Dr. David von Oheimb
|
199df4a93f
check_sig_alg_match(): weaken sig nid comparison to allow RSA{,PSS} key verify RSA-PSS
|
3 éve |
|
Dr. David von Oheimb
|
3bed88a397
x509_vfy.c: Restore rejection of expired trusted (root) certificate
|
4 éve |
|
Dr. David von Oheimb
|
4ff993d791
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
|
4 éve |
 Tomas Mraz
|
cccf532fef
Disallow certs with explicit curve in verification chain
|
4 éve |
|
Dr. David von Oheimb
|
1e41dadfa7
Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c
|
4 éve |
|
Dr. David von Oheimb
|
0e7b1383e1
Fix issue 1418 by moving check of KU_KEY_CERT_SIGN and weakening check_issued()
|
4 éve |
|
Dr. David von Oheimb
|
da1f88bf53
Add four more verify test cases on the self-signed Ed25519 and self-issed X25519 certs
|
4 éve |
|
Dr. David von Oheimb
|
ade08735f9
Improve documentation, layout, and code comments regarding self-issued certs etc.
|
4 éve |
|
Matt Caswell
|
33388b44b6
Update copyright year
|
4 éve |
|
Tomas Mraz
|
3cb55fe47c
Add test cases for the non CA certificate with pathlen:0
|
4 éve |
 Richard Levitte
|
fda127beb2
TEST: Adapt all applicable tests to the new distinguishing ID
|
4 éve |
 Kurt Roeckx
|
b744f915ca
Stop accepting certificates signed using SHA1 at security level 1
|
4 éve |
 Shane Lontis
|
10c25644e3
EC only uses approved curves in FIPS mode.
|
5 éve |
|
Matt Caswell
|
fd3a904636
Skip the correct number of tests if SM2 is disabled
|
5 éve |
 Paul Yang
|
317ba78fe1
Add test cases for SM2 cert verification
|
5 éve |
 Bernd Edlinger
|
1f483a69bc
Fix cert with rsa instead of rsaEncryption as public key algorithm
|
5 éve |
|
Richard Levitte
|
909f1a2e51
Following the license change, modify the boilerplates in test/
|
6 éve |
|
Matt Caswell
|
83cf7abf8e
Update copyright year
|
6 éve |
 Viktor Dukhovni
|
d02d80b2e8
Limit scope of CN name constraints
|
6 éve |
 Josh Soref
|
46f4e1bec5
Many spelling fixes/typo's corrected.
|
7 éve |
 David Benjamin
|
8545051c36
Guard against DoS in name constraints handling.
|
7 éve |
 Dr. Stephen Henson
|
978b700bf9
no-ec fix
|
7 éve |
|
Dr. Stephen Henson
|
4328dd4158
Add Ed25519 verify test.
|
7 éve |
|
Dr. Stephen Henson
|
451a0c3dc8
Add PSS certificate signature tests
|
7 éve |
|
Dr. Stephen Henson
|
d83b7e1a58
Extend mkcert.sh to support nameConstraints generation and more complex
|
8 éve |
|
Richard Levitte
|
aa951ef3d7
Add verification of proxy certs to 25-test_verify.t
|
8 éve |
 Rich Salz
|
596d6b7e1c
Unified copyright for test recipes
|
8 éve |
