summaryrefslogtreecommitdiff
path: root/lib/libcrypto/x509
AgeCommit message (Expand)Author
2022-07-12Remove mkerr.pl remnants from LibreSSLKlemens Nanni
2022-07-07Expose new API in headers.Theo Buehler
2022-07-05Add missing X509_V_ERR_ strings using the ones from OpenSSL.Theo Buehler
2022-07-04Prepare to provide X509_VERIFY_PARAM_get_time()Theo Buehler
2022-06-28Take away bogus error assignment before callback call.Bob Beck
2022-06-28Fix the legacy verifier callback behaviour for untrusted certs.Bob Beck
2022-06-27Correct misleading comment for URI parsingBob Beck
2022-06-27Add function to free all of the issuer cache.Bob Beck
2022-06-27Allow security_level to mestastasize into the verifierTheo Buehler
2022-06-27Prepare to provide X509_VERIFY_PARAM_set_auth_level()Theo Buehler
2022-06-26Fix URI name constraints, allow for URI's with no host part.Bob Beck
2022-06-26whitespaceTheo Buehler
2022-06-25Move leaf certificate checks to the last thing after chain validation.Bob Beck
2022-05-25Remove an unnecessary XXX comment. The suggested check is part ofTheo Buehler
2022-05-20Don't pass uninitialized pointer to ASN1_STRING_to_UTF8()Theo Buehler
2022-05-17Rewrite make_addressRange() using CBSTheo Buehler
2022-05-17Simplify make_addressPrefix()Theo Buehler
2022-05-12Small readability tweak suggested by jsingTheo Buehler
2022-05-12Rewrite and fix X509v3_asid_subset()Theo Buehler
2022-05-10X509_check_ca() has 5 return values but still can't failTheo Buehler
2022-05-09Simplify X509_ATTRIBUTE ASN.1 encoding.Joel Sing
2022-04-21Clarify comments at the start of {asid,addr}_validate_path_internal()Theo Buehler
2022-04-21Avoid expensive RFC 3779 checks during cert verificationTheo Buehler
2022-04-21Fix X509_get_extension_flags()Theo Buehler
2022-04-12KNF for a brace and zap trailing blank lineTheo Buehler
2022-03-26name constraints: be more careful with NULsTheo Buehler
2022-03-16Make gcc 4 happier about x509_addr.cTheo Buehler
2022-03-14Allow constraints of the form @domain.comTheo Buehler
2022-03-14Rework ownership handling in x509_constraints_validate()Theo Buehler
2022-03-13Relax the check of x509_constraints_dirname()Theo Buehler
2022-03-13Add x509_constraints_validate() to x509_internal.hTheo Buehler
2022-03-13Check name constraints using the proper APITheo Buehler
2022-03-13style tweakTheo Buehler
2022-03-13Add missing error check after strdup()Theo Buehler
2022-03-03Pull a len == 0 check up before malloc(len) to avoid implementationTheo Buehler
2022-03-02Unwrap a lineTheo Buehler
2022-02-24Get rid of SHA1 for comparing CRL's - use SHA512 just like we do for certs.Bob Beck
2022-02-11Fix length check of IP addresses for name constraintsTheo Buehler
2022-02-11Add missing error check for a2i_GENERAL_NAME()Theo Buehler
2022-02-11Fix a double free in v2i_NAME_CONSTRAINTS()Theo Buehler
2022-02-04Remove a strange inheritance check from addr_validate_path_internal()Theo Buehler
2022-01-22X509_GET_PUBKEY(3) return value check in libcryptoKinichiro Inoguchi
2022-01-22X509_GET_PUBKEY(3) return value check in libcryptoKinichiro Inoguchi
2022-01-14Remove header guard around RFC 3779 declarationsTheo Buehler
2022-01-14Remove name_cmp from public visibilityTheo Buehler
2022-01-14Garbage collect the app_items field of ASN1_ADBTheo Buehler
2022-01-14Remove X509_OBJECT_free_contentsTheo Buehler
2022-01-14Unifdef LIBRESSL_OPAQUE_* and LIBRESSL_NEXT_APITheo Buehler
2022-01-10Remove a few unused defines from x509.hTheo Buehler
2022-01-08x509_cpols.c will need to include x509_lcl.h soonTheo Buehler
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 02:19:22 +0000