summaryrefslogtreecommitdiff
path: root/lib/libssl/ssl_cert.c
AgeCommit message (Expand)Author
2024-02-03Remove GOST and STREEBOG support from libssl.Bob Beck
2023-07-08Hide all public symbols in libsslBob Beck
2023-05-26Move verified_chain from SSL to SSL_HANDSHAKETheo Buehler
2022-11-26Make internal header file names consistentTheo Buehler
2022-10-02Get rid of SSL_CTX_INTERNAL and SSL_INTERNAL.Joel Sing
2022-07-07Unifdef LIBRESSL_HAS_SECURITY_LEVEL and remove some workaroundsTheo Buehler
2022-07-02Call certificate variables cert and certs, rather than x and skJoel Sing
2022-06-29Make ssl_cert_add{0,1}_chain_cert() take ssl/ctxTheo Buehler
2022-06-29ssl_cert_set{0,1}_chain() take ssl/ctxTheo Buehler
2022-06-29Refactor use_certificate_chain_* to take ssl/ctx instead of a certTheo Buehler
2022-06-29Make sure the verifier checks the security level in cert chainsTheo Buehler
2022-06-28Copy the security level stuff in ssl_cert_dup()Theo Buehler
2022-06-28Set up the default callback in SSL_CERTTheo Buehler
2022-02-05Bye bye S3I.Joel Sing
2022-01-28Error check for sk_push in libsslKinichiro Inoguchi
2022-01-08Merge SESS_CERT into SSL_SESSION.Joel Sing
2022-01-08Rename CERT to SSL_CERT and CERT_PKEY to SSL_CERT_PKEY.Joel Sing
2022-01-07Rename dh_tmp to dhe_params.Joel Sing
2022-01-07Stop attempting to duplicate the public and private key of dh_tmp.Joel Sing
2022-01-06Convert legacy TLS client to tls_key_share.Joel Sing
2021-11-29Stop using BIO_s_file_inernal() in libssl.Theo Buehler
2021-11-26Stop reaching into EVP_PKEY in the rest of libssl.Theo Buehler
2021-10-23Add SSL_get0_verified_chain - needed by some new stuffBob Beck
2021-10-23Unhandroll X509_up_ref()Theo Buehler
2021-10-23Change ssl_verify_cert_chain() for compatibility with opaqueTheo Buehler
2021-06-11Indent all labels with a single space.Joel Sing
2021-04-21Clean up TLSv1.2 certificate request handshake data.Joel Sing
2021-03-27Garbage collect s->internal->typeTheo Buehler
2020-11-20fix another misleading line break and indentTheo Buehler
2020-11-20fix confusing line break and indentTheo Buehler
2020-06-05Handle GOST in ssl_cert_dup().Joel Sing
2020-05-19Replace SSL_PKEY_RSA_ENC/SSL_PKEY_RSA_SIGN with SSL_PKEY_RSA.Joel Sing
2019-05-15s3 is never NULL since s2 (formerly used for SSLv2) does not exist, so there isBrent Cook
2019-04-13Avoid leak in SSL_dup_CA_list()Theo Buehler
2019-03-25Strip out all of the pkey to sigalg and sigalg to pkey linkages.Joel Sing
2019-03-25Add a chain member to CERT_PKEY and provide functions for manipulating it.Joel Sing
2018-11-19Revert previous - the default sigalg for RSA key exchange is {sha1,rsa}.Joel Sing
2018-11-16Unbreak legacy ciphers for prior to 1.1 by setting having a legacyBob Beck
2018-11-10Stop keeping track of sigalgs by guessing it from digest and pkey,Bob Beck
2018-11-08Stop pretending that a cert member in a SSL and SSL_CTX can be NULL.Joel Sing
2018-11-05Mop up ecdh_tmp, since it is no longer used.Joel Sing
2018-04-25OpenSSL started adding const to functions all over the place. Make allTheo Buehler
2017-08-12Remove support for DSS/DSA, since we removed the cipher suites a whileJoel Sing
2017-08-10Clean up the EC key/curve configuration handling.Joel Sing
2017-02-07Change SSLerror() back to taking two args, with the first one being an SSL *.Bob Beck
2017-01-29Send the function codes from the error functions to the bit bucket,Bob Beck
2017-01-26Finish the fallout of the SSLerr->SSLerror cleanup to get rid of the uglyBob Beck
2017-01-26Send the error function codes to rot in the depths of hell where they belongBob Beck
2017-01-24sk_free() checks for NULL so do not bother doing it from the callers.Joel Sing
2017-01-24sk_pop_free() checks for NULL so do not bother doing it from the callers.Joel Sing