 FdaSilvaYY
|
dccd20d1b5
fix tab-space mixed indentation
|
8 years ago |
 Viktor Dukhovni
|
7b7eb4725e
Drop duplicate ctx->verify_cb assignment
|
8 years ago |
|
Viktor Dukhovni
|
c965487373
Implement X509_STORE_CTX_set_current_cert() accessor
|
8 years ago |
|
Viktor Dukhovni
|
69664d6af0
Future proof build_chain() in x509_vfy.c
|
8 years ago |
|
Viktor Dukhovni
|
51227177b1
Added missing X509_STORE_CTX_set_error_depth() accessor
|
8 years ago |
 Rich Salz
|
9021a5dfb3
Rename some lowercase API's
|
8 years ago |
 Dr. Stephen Henson
|
4dba585f79
Add X509_STORE_CTX_set0_untrusted function.
|
8 years ago |
|
Rich Salz
|
f0e0fd51fd
Make many X509_xxx types opaque.
|
8 years ago |
|
Rich Salz
|
b9aec69ace
Add SSL_DANE typedef for consistency.
|
8 years ago |
|
Viktor Dukhovni
|
fbb82a60dc
Move peer chain security checks into x509_vfy.c
|
8 years ago |
|
Viktor Dukhovni
|
70dd3c6593
Tidy up x509_vfy callback handling
|
8 years ago |
|
Viktor Dukhovni
|
4d9e33acb2
Require intermediate CAs to have basicConstraints CA:true.
|
8 years ago |
|
Viktor Dukhovni
|
89ff989d01
Add a comment on dane_verify() logic
|
8 years ago |
 Alessandro Ghedini
|
c001ce3313
Convert CRYPTO_LOCK_X509_* to new multi-threading API
|
8 years ago |
|
Viktor Dukhovni
|
d33def6624
Deprecate the -issuer_checks debugging option
|
8 years ago |
|
Viktor Dukhovni
|
c0a445a9f2
Suppress DANE TLSA reflection when verification fails
|
8 years ago |
|
FdaSilvaYY
|
0d4fb84390
GH601: Various spelling fixes.
|
8 years ago |
|
Viktor Dukhovni
|
3921ded79a
Ensure correct chain depth for policy checks with DANE bare key TA
|
8 years ago |
|
Viktor Dukhovni
|
895c2f84a6
Long overdue cleanup of X509 policy tree verification
|
8 years ago |
|
Viktor Dukhovni
|
33cc5dde47
Compat self-signed trust with reject-only aux data
|
8 years ago |
|
Viktor Dukhovni
|
0daccd4dc1
Check chain extensions also for trusted certificates
|
8 years ago |
 Rich Salz
|
349807608f
Remove /* foo.c */ comments
|
9 years ago |
|
Viktor Dukhovni
|
6e32825631
Check Suite-B constraints with EE DANE records
|
8 years ago |
|
Viktor Dukhovni
|
0e76014e58
Drop cached certificate signature validity flag
|
8 years ago |
|
Dr. Stephen Henson
|
c864e7611f
Add lookup_certs for a trusted stack.
|
8 years ago |
|
Viktor Dukhovni
|
497ecc0d7d
Cosmetic polish for last-resort depth 0 check
|
8 years ago |
|
Viktor Dukhovni
|
bdcadca24e
Fix last-resort depth 0 check when the chain has multiple certificates
|
8 years ago |
|
Viktor Dukhovni
|
311f27852a
Always initialize X509_STORE_CTX get_crl pointer
|
8 years ago |
|
Viktor Dukhovni
|
170b735820
DANE support for X509_verify_cert()
|
9 years ago |
|
Viktor Dukhovni
|
919ba00942
DANE support structures, constructructors and accessors
|
9 years ago |
