 Matt Caswell
|
6e629b5be4
Add some sanity checks when checking CRL scores
|
il y a 8 ans |
 Richard Levitte
|
1228ae7738
Don't check any revocation info on proxy certificates
|
il y a 8 ans |
 Dr. Stephen Henson
|
3dc160e9be
Fix CRL time comparison.
|
il y a 8 ans |
|
Dr. Stephen Henson
|
325da8231c
Use newest CRL.
|
il y a 8 ans |
|
Richard Levitte
|
30aeb31281
Fix proxy certificate pathlength verification
|
il y a 8 ans |
|
Richard Levitte
|
338fb1688f
Check that the subject name in a proxy cert complies to RFC 3820
|
il y a 8 ans |
 Viktor Dukhovni
|
5553a12735
Ensure verify error is set when X509_verify_cert() fails
|
il y a 8 ans |
|
Viktor Dukhovni
|
a3baa17105
Fix missing ok=0 with locally blacklisted CAs
|
il y a 8 ans |
|
Viktor Dukhovni
|
a3d74afcae
Fix X509_STORE_CTX_cleanup()
|
il y a 8 ans |
|
Viktor Dukhovni
|
39c76ceb2d
Better handling of verify param id peername field
|
il y a 9 ans |
 Alessandro Ghedini
|
c8491de393
GH354: Memory leak fixes
|
il y a 9 ans |
 Rich Salz
|
56353962e7
Fix 1.0.2 build break
|
il y a 9 ans |
 Ismo Puustinen
|
25efcb44ac
GH364: Free memory on an error path
|
il y a 9 ans |
|
Matt Caswell
|
692f07c3e0
Reject calls to X509_verify_cert that have not been reinitialised
|
il y a 9 ans |
|
Matt Caswell
|
21376d8ae3
Fix alternate chains certificate forgery issue
|
il y a 9 ans |
 Emilia Kasper
|
9bc3665ac9
Fix length checks in X509_cmp_time to avoid out-of-bounds reads.
|
il y a 9 ans |
 Rich Salz
|
f34b095fab
Add NULL checks from master
|
il y a 9 ans |
|
Matt Caswell
|
937a766982
Revert "Fix verify algorithm."
|
il y a 9 ans |
|
Dr. Stephen Henson
|
47daa155a3
Fix verify algorithm.
|
il y a 9 ans |
|
Matt Caswell
|
dfd3322d72
Add flag to inhibit checking for alternate certificate chains. Setting this
|
il y a 9 ans |
|
Matt Caswell
|
6281abc796
In certain situations the server provided certificate chain may no longer be
|
il y a 9 ans |
|
Matt Caswell
|
83975c80bb
Re-align some comments after running the reformat script.
|
il y a 9 ans |
|
Matt Caswell
|
ae5c8664e5
Run util/openssl-format-source -v -c .
|
il y a 9 ans |
|
Matt Caswell
|
c695ebe2a0
Additional comment changes for reformat of 1.0.2
|
il y a 9 ans |
|
Matt Caswell
|
e19d4a99b8
Further comment amendments to preserve formatting prior to source reformat
|
il y a 9 ans |
 Paul Suhler
|
b8d687bb56
RT2841: Extra return in check_issued
|
il y a 10 ans |
 Viktor Dukhovni
|
e83c913723
Update API to use (char *) for email addresses and hostnames
|
il y a 10 ans |
|
Viktor Dukhovni
|
55fe56837a
Set optional peername when X509_check_host() succeeds.
|
il y a 10 ans |
 Viktor Dukhovni
|
41e3ebd5ab
One more typo when changing !result to result <= 0
|
il y a 10 ans |
|
Viktor Dukhovni
|
9624b50d51
Fix typo in last commit
|
il y a 10 ans |
