 Matt Caswell
|
b6ae56fd27
Add some additional test certificates/keys
|
4 jaren geleden |
 Dr. David von Oheimb
|
4ff993d791
Implement treatment of id-pkix-ocsp-no-check extension for OCSP_basic_verify()
|
4 jaren geleden |
 Tomas Mraz
|
cf61b97d5f
Generate a certificate with critical id-pkix-ocsp-nocheck extension
|
4 jaren geleden |
|
Tomas Mraz
|
627ddf7b5b
Correct certificate and key names for explicit ec param test
|
4 jaren geleden |
|
Tomas Mraz
|
cccf532fef
Disallow certs with explicit curve in verification chain
|
4 jaren geleden |
|
Matt Caswell
|
5cd9962272
Fix a test_verify failure
|
4 jaren geleden |
|
Dr. David von Oheimb
|
ef8980176d
Deprecate -nodes in favor of -noenc in pkcs12 and req app
|
4 jaren geleden |
|
Dr. David von Oheimb
|
0e7b1383e1
Fix issue 1418 by moving check of KU_KEY_CERT_SIGN and weakening check_issued()
|
4 jaren geleden |
|
Tomas Mraz
|
3cb55fe47c
Add test cases for the non CA certificate with pathlen:0
|
4 jaren geleden |
 Kurt Roeckx
|
77c4d39724
Generate new Ed488 certificates
|
4 jaren geleden |
|
Kurt Roeckx
|
4d9e8c9554
Create a new embeddedSCTs1 that's signed using SHA256
|
4 jaren geleden |
|
Matt Caswell
|
39d9ea5e50
Add Restricted PSS certificate and key
|
5 jaren geleden |
|
Matt Caswell
|
83c81eebed
Add some test brainpool certificates
|
6 jaren geleden |
 Viktor Dukhovni
|
d02d80b2e8
Limit scope of CN name constraints
|
6 jaren geleden |
 Dr. Stephen Henson
|
9bf45ba4ca
Add certificates with PSS signatures
|
7 jaren geleden |
|
Dr. Stephen Henson
|
d83b7e1a58
Extend mkcert.sh to support nameConstraints generation and more complex
|
8 jaren geleden |
|
Dr. Stephen Henson
|
b58614d7f5
Fix generation of expired CA certificate.
|
8 jaren geleden |
 Richard Levitte
|
71c8cd2085
Make it possible to generate proxy certs with test/certs/mkcert.sh
|
8 jaren geleden |
|
Viktor Dukhovni
|
fbb82a60dc
Move peer chain security checks into x509_vfy.c
|
8 jaren geleden |
|
Viktor Dukhovni
|
4d9e33acb2
Require intermediate CAs to have basicConstraints CA:true.
|
8 jaren geleden |
|
Viktor Dukhovni
|
1d85277235
Add tests for non-ca trusted roots and intermediates
|
8 jaren geleden |
|
Viktor Dukhovni
|
33cc5dde47
Compat self-signed trust with reject-only aux data
|
8 jaren geleden |
|
Viktor Dukhovni
|
0daccd4dc1
Check chain extensions also for trusted certificates
|
8 jaren geleden |
|
Viktor Dukhovni
|
8478351737
Scripts to generate verify test certs
|
8 jaren geleden |
