Commit History

Autor SHA1 Mensaxe Data
  Ben Kaduk eb48052ec9 Fix more OCSP_resp_get0_signer() nits %!s(int64=7) %!d(string=hai) anos
  Benjamin Kaduk ce5886dda8 Add an API to get the signer of an OCSP response %!s(int64=7) %!d(string=hai) anos
  David von Oheimb 121738d1cb Fix OCSP_basic_verify() cert chain construction in case bs->certs is NULL %!s(int64=7) %!d(string=hai) anos
  Rich Salz b1322259d9 Copyright consolidation 09/10 %!s(int64=8) %!d(string=hai) anos
  Benjamin Kaduk 9547982e8c Remove dead-code infinite loop %!s(int64=8) %!d(string=hai) anos
  Richard Levitte d32f5d8733 Restore OCSP_basic_verify() error return semantics %!s(int64=8) %!d(string=hai) anos
  Richard Levitte 64a1385a83 Small OCSP fixup %!s(int64=8) %!d(string=hai) anos
  Rich Salz f0e0fd51fd Make many X509_xxx types opaque. %!s(int64=8) %!d(string=hai) anos
  Rich Salz a773b52a61 Remove unused parameters from internal functions %!s(int64=8) %!d(string=hai) anos
  FdaSilvaYY 0d4fb84390 GH601: Various spelling fixes. %!s(int64=8) %!d(string=hai) anos
  Rich Salz 349807608f Remove /* foo.c */ comments %!s(int64=9) %!d(string=hai) anos
  Dr. Stephen Henson 8382fd3a93 Use X509_get0_pubkey where appropriate %!s(int64=9) %!d(string=hai) anos
  Dr. Stephen Henson af170194a8 embed OCSP_CERTID %!s(int64=9) %!d(string=hai) anos
  Dr. Stephen Henson a332635ea0 Embed various OCSP fields. %!s(int64=9) %!d(string=hai) anos
  Dr. Stephen Henson a8d8e06b0a Avoid direct X509 structure access %!s(int64=9) %!d(string=hai) anos
  Rich Salz 75ebbd9aa4 Use p==NULL not !p (in if statements, mainly) %!s(int64=9) %!d(string=hai) anos
  Rich Salz 222561fe8e free NULL cleanup 5a %!s(int64=9) %!d(string=hai) anos
  Dr. Stephen Henson 4ca5efc287 Make OCSP response verification more flexible. %!s(int64=9) %!d(string=hai) anos
  Dr. Stephen Henson 6ef869d7d0 Make OCSP structures opaque. %!s(int64=9) %!d(string=hai) anos
  Matt Caswell 0f113f3ee4 Run util/openssl-format-source -v -c . %!s(int64=9) %!d(string=hai) anos
  Rich Salz b2aa38a980 RT2560: missing NULL check in ocsp_req_find_signer %!s(int64=10) %!d(string=hai) anos
  Dr. Stephen Henson b48310627d Don't try and verify signatures if key is NULL (CVE-2013-0166) %!s(int64=11) %!d(string=hai) anos
  Dr. Stephen Henson 0028a23b9f revert OCSP_basic_verify changes: they aren't needed now we support partial chain verification and can pass verify options to ocsp utility %!s(int64=12) %!d(string=hai) anos
  Dr. Stephen Henson e9754726d2 Check chain is not NULL before assuming we have a validated chain. %!s(int64=12) %!d(string=hai) anos
  Dr. Stephen Henson 2a21cdbe6b Use new partial chain flag instead of modifying input parameters. %!s(int64=12) %!d(string=hai) anos
  Ben Laurie ec40e5ff42 Tabification. Remove accidental duplication. %!s(int64=12) %!d(string=hai) anos
  Ben Laurie 30c278aa6b Fix OCSP checking. %!s(int64=12) %!d(string=hai) anos
  Dr. Stephen Henson 2fceff5ba3 PR: 2803 %!s(int64=12) %!d(string=hai) anos
  Ben Laurie 0eab41fb78 If we're going to return errors (no matter how stupid), then we should %!s(int64=16) %!d(string=hai) anos
  Dr. Stephen Henson 2e5975285e Update obsolete email address... %!s(int64=16) %!d(string=hai) anos