 Viktor Dukhovni
|
55a6250f1e
Skip CN DNS name constraint checks when not needed
|
6 anni fa |
 Matt Caswell
|
6ec5fce25e
Update copyright year
|
6 anni fa |
 FdaSilvaYY
|
7fcdbd839c
X509: add more error codes on malloc or sk_TYP_push failure
|
6 anni fa |
 Pauli
|
f32b0abe26
Remove unnecessary #include <openssl/lhash.h> directives.
|
7 anni fa |
 David Benjamin
|
8545051c36
Guard against DoS in name constraints handling.
|
7 anni fa |
 Rich Salz
|
176db6dc51
Use "" not <> for internal/ includes
|
7 anni fa |
|
Pauli
|
a1df06b363
This has been added to avoid the situation where some host ctype.h functions
|
7 anni fa |
|
Matt Caswell
|
24664a3bf5
Remove OPENSSL_assert() from crypto/x509
|
7 anni fa |
 Dr. Stephen Henson
|
c3c8823c87
Use X509_get_signature_info() when checking security levels.
|
7 anni fa |
 Emilia Kasper
|
80770da39e
X509 time: tighten validation per RFC 5280
|
7 anni fa |
|
Viktor Dukhovni
|
c53f7355b9
Restore last-resort expired untrusted intermediate issuers
|
8 anni fa |
|
Viktor Dukhovni
|
4a7b3a7b4d
Un-delete still documented X509_STORE_CTX_set_verify
|
8 anni fa |
|
Matt Caswell
|
8b7c51a0e4
Add some sanity checks when checking CRL scores
|
8 anni fa |
|
Dr. Stephen Henson
|
568ce3a583
Constify certificate and CRL time routines.
|
8 anni fa |
 klemens
|
6025001707
spelling fixes, just comments and readme.
|
8 anni fa |
 Richard Levitte
|
790555d675
Don't check any revocation info on proxy certificates
|
8 anni fa |
|
Dr. Stephen Henson
|
e032117db2
Fix CRL time comparison.
|
8 anni fa |
|
Dr. Stephen Henson
|
fc9d1ef39c
Remove current_method from X509_STORE_CTX
|
8 anni fa |
|
Richard Levitte
|
0a5fe2eb94
Add setter and getter for X509_STORE's check_policy
|
8 anni fa |
|
Richard Levitte
|
1060a50b6d
Add getters / setters for the X509_STORE_CTX and X509_STORE functions
|
8 anni fa |
|
Dr. Stephen Henson
|
626aa24849
Use newest CRL.
|
8 anni fa |
|
Viktor Dukhovni
|
5ae4ceb92c
Perform DANE-EE(3) name checks by default
|
8 anni fa |
|
Dr. Stephen Henson
|
5bd5dcd496
Add nameConstraints commonName checking.
|
8 anni fa |
|
Richard Levitte
|
8e21938ce3
Remove the envvar hack to enable proxy cert processing
|
8 anni fa |
|
FdaSilvaYY
|
02e112a885
Whitespace cleanup in crypto
|
8 anni fa |
|
Richard Levitte
|
ed17c7c146
Fix proxy certificate pathlength verification
|
8 anni fa |
|
Richard Levitte
|
c8223538cb
Check that the subject name in a proxy cert complies to RFC 3820
|
8 anni fa |
|
Viktor Dukhovni
|
f3e235ed6f
Ensure verify error is set when X509_verify_cert() fails
|
8 anni fa |
|
Rich Salz
|
6ddbb4cd92
X509_STORE_CTX accessors.
|
8 anni fa |
|
Rich Salz
|
b1322259d9
Copyright consolidation 09/10
|
8 anni fa |
