summaryrefslogtreecommitdiff
path: root/usr.sbin/rpki-client/cert.c
AgeCommit message (Expand)Author
2022-05-31I made non-trivial contributions to these files.Theo Buehler
2022-05-31Prepare rewrite of rsc.c with templated ASN.1Theo Buehler
2022-05-15whitespace spotted during read-thruTheo de Raadt
2022-05-12Align parsing of ipAddrBlock with autnomousSysNumTheo Buehler
2022-05-12Tidy up IP handlingTheo Buehler
2022-05-12Refactor parsing of autonomousSysNum. Adjust code so that the allocationClaudio Jeker
2022-05-11Cache X509v3 extensions as soon as we have a certTheo Buehler
2022-05-11Fix doc comment of sbgp_asrange()Theo Buehler
2022-05-11Move sbgp_addr() down to the other sbgp_addr_* functions.Theo Buehler
2022-05-11Deserialize ASIdentifiers in libcryptoTheo Buehler
2022-05-10Fix a couple of typos in doc comments, bunch of KNF (whitespace) tweaksTheo Buehler
2022-05-10Deserialize IPAddrBlocks in libcryptoTheo Buehler
2022-05-10Fix leaks due to incorrect early returns rather than proper cleanup.Theo Buehler
2022-04-21Further refactor and cleanup filemode.c mainly remove the copies ofClaudio Jeker
2022-04-21The filemode code is enough different from the regular parser code that itClaudio Jeker
2022-04-12Add a colon to warning for consistencyTheo Buehler
2022-04-12Shuffle sbgp_sia() a bit down to a place where it makes more senseTheo Buehler
2022-04-12Generalize sbgp_sia_location() to x509_location()Theo Buehler
2022-04-11Simplify SIA extension parsing furtherTheo Buehler
2022-04-11Merge sbgp_sia() and sbgp_sia_resource()Theo Buehler
2022-04-11Simplify cert_parse_pre()Theo Buehler
2022-04-11Let the templated ASN.1 parse the SIA extensionTheo Buehler
2022-04-05Fix two missing checks in the SIA extensionTheo Buehler
2022-04-04Remove two more FIXMEs: to get there, we rely on the OID already.Theo Buehler
2022-04-02Split certificate parsing in two steps. cert_parse_pre() which doesClaudio Jeker
2022-04-01Change x509_get_aki(), x509_get_ski(), x509_get_aia(), and x509_get_crl()Claudio Jeker
2022-04-01Move the TA specific checks from cert_parse_inner() to ta_parse() andClaudio Jeker
2022-04-01Fix error message from d2i_X509_bio() to d2i_X509()Theo Buehler
2022-02-04More consistency in the return code docs.Theo Buehler
2022-02-04Document certificate_policies() in a comment.Theo Buehler
2022-02-04Ensure that certificate policies follow RFC 7318Theo Buehler
2022-01-20Move the notBefore and notAfter checks from proc_parser_root_cert()Claudio Jeker
2022-01-18Use X509_get0_pubkey() for opk and remove the EVP_PKEY_free(opk).Claudio Jeker
2022-01-18Change cert_parse() and ta_parse() to no longer take a x509 handle asClaudio Jeker
2022-01-18Cleanup the scattered OBJ_txt2obj() calls and move them intoClaudio Jeker
2021-12-26fix spelling of inheritanceTheo Buehler
2021-12-26Check ipAddrBlock and autonomousSysNum for criticalityTheo Buehler
2021-11-05Simplify how IP addresses and AS numbers are passed between processes.Claudio Jeker
2021-11-04Instead of passing tal descriptions around just pass a tal id andClaudio Jeker
2021-11-02Only add CA certificates to the auth tree, skip BGPsec certificates.Claudio Jeker
2021-11-01Further simplify cert and auth handling. Move common code into auth_insertClaudio Jeker
2021-10-28Don't exit in certain cases on failures to parse x509 objects.Bob Beck
2021-10-27Add limits on size of certain untrusted inputsBob Beck
2021-10-26Also move the cert parser code away from using BIO.Claudio Jeker
2021-10-23Finnally move away from blocking reads in rpki-client. The code was aClaudio Jeker
2021-10-15zap 3 commentsJob Snijders
2021-10-12Emit SKI in the JSON output and improve flow in x509_get_pubkey()Job Snijders
2021-10-11Add support for BGPsec Router Certificates (RFC 8209)Job Snijders
2021-10-07Make sure BGPsec router certs don't have a SIAJob Snijders
2021-10-07Clarify error messageJob Snijders
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-13 22:20:15 +0000