 Richard Levitte
|
338fb1688f
Check that the subject name in a proxy cert complies to RFC 3820
|
vor 8 Jahren |
 Viktor Dukhovni
|
5553a12735
Ensure verify error is set when X509_verify_cert() fails
|
vor 8 Jahren |
|
Viktor Dukhovni
|
a3d74afcae
Fix X509_STORE_CTX_cleanup()
|
vor 8 Jahren |
 Matt Caswell
|
dfd3322d72
Add flag to inhibit checking for alternate certificate chains. Setting this
|
vor 9 Jahren |
|
Matt Caswell
|
ae5c8664e5
Run util/openssl-format-source -v -c .
|
vor 9 Jahren |
|
Matt Caswell
|
65a6a1ff45
indent has problems with comments that are on the right hand side of a line.
|
vor 9 Jahren |
|
Matt Caswell
|
4ce632fb45
More indent fixes for STACK_OF
|
vor 9 Jahren |
|
Matt Caswell
|
7b1ac23412
Fix indent issue with functions using STACK_OF
|
vor 9 Jahren |
 Tim Hudson
|
6977c7e2ba
mark all block comments that need format preserving so that
|
vor 9 Jahren |
 Viktor Dukhovni
|
e83c913723
Update API to use (char *) for email addresses and hostnames
|
vor 10 Jahren |
|
Viktor Dukhovni
|
1eb57ae2b7
New peername element in X509_VERIFY_PARAM_ID
|
vor 10 Jahren |
|
Viktor Dukhovni
|
449d864515
Multiple verifier reference identities.
|
vor 10 Jahren |
 Viktor Dukhovni
|
a2219f6be3
Fixes to host checking.
|
vor 10 Jahren |
 Dr. Stephen Henson
|
3a0c71541b
verify parameter enumeration functions
|
vor 14 Jahren |
|
Dr. Stephen Henson
|
adc6bd73e3
Add opaque ID structure.
|
vor 10 Jahren |
|
Dr. Stephen Henson
|
75f535315a
New functions to set lookup_crls callback and to retrieve internal X509_STORE
|
vor 12 Jahren |
|
Dr. Stephen Henson
|
ba8bdea771
add suite B chain validation flags and associated verify errors
|
vor 11 Jahren |
|
Dr. Stephen Henson
|
70cd3c6b95
Integrate host, email and IP address checks into X509_verify.
|
vor 11 Jahren |
|
Dr. Stephen Henson
|
9a1f59cd31
New verify flag to return success if we have any certificate in the trusted
|
vor 11 Jahren |
|
Dr. Stephen Henson
|
9d2006d8ed
add -trusted_first option and verify flag (backport from HEAD)
|
vor 12 Jahren |
|
Dr. Stephen Henson
|
4a7f7171f5
Add missing functions to allow access to newer X509_STORE_CTX status
|
vor 15 Jahren |
|
Dr. Stephen Henson
|
c679fb298e
Add new function X509_STORE_set_verify_cb and use it in apps
|
vor 15 Jahren |
|
Dr. Stephen Henson
|
710c1c34d1
Allow checking of self-signed certifictes if a flag is set.
|
vor 15 Jahren |
|
Dr. Stephen Henson
|
d43c4497ce
Initial support for delta CRLs. If "use deltas" flag is set attempt to find
|
vor 16 Jahren |
|
Dr. Stephen Henson
|
4b96839f06
Add support for CRLs partitioned by reason code.
|
vor 16 Jahren |
|
Dr. Stephen Henson
|
9d84d4ed5e
Initial support for CRL path validation. This supports distinct certificate
|
vor 16 Jahren |
|
Dr. Stephen Henson
|
e9746e03ee
Initial support for name constraints certificate extension.
|
vor 16 Jahren |
 Ben Laurie
|
96ea4ae91c
Add RFC 3779 support.
|
vor 18 Jahren |
|
Dr. Stephen Henson
|
5d20c4fb35
Overhaul of by_dir code to handle dynamic loading of CRLs.
|
vor 18 Jahren |
|
Dr. Stephen Henson
|
bc7535bc7f
Support for AKID in CRLs and partial support for IDP. Overhaul of CRL
|
vor 18 Jahren |
