diff options
| author | Shane Lontis <shane.lontis@oracle.com> | 2020-07-24 22:53:27 +1000 |
|---|---|---|
| committer | Shane Lontis <shane.lontis@oracle.com> | 2020-07-24 22:53:27 +1000 |
| commit | 6725682d77510bf6d499957897d7be124d603f40 (patch) | |
| tree | 447e5bce5607b4873f7f018df1b2e4c21a394e92 /doc/man7 | |
| parent | ae89578be2930c726d6ef56451233757a89f224f (diff) | |
Add X509 related libctx changes.
- In order to not add many X509_XXXX_with_libctx() functions the libctx and propq may be stored in the X509 object via a call to X509_new_with_libctx().
- Loading via PEM_read_bio_X509() or d2i_X509() should pass in a created cert using X509_new_with_libctx().
- Renamed some XXXX_ex() to XXX_with_libctx() for X509 API's.
- Removed the extra parameters in check_purpose..
- X509_digest() has been modified so that it expects a const EVP_MD object() and then internally it does the fetch when it needs to (via ASN1_item_digest_with_libctx()).
- Added API's that set the libctx when they load such as X509_STORE_new_with_libctx() so that the cert chains can be verified.
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12153)
Diffstat (limited to 'doc/man7')
| -rw-r--r-- | doc/man7/x509.pod | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/doc/man7/x509.pod b/doc/man7/x509.pod index 095203c912..b2d2902744 100644 --- a/doc/man7/x509.pod +++ b/doc/man7/x509.pod @@ -52,6 +52,7 @@ L<X509_NAME_add_entry_by_txt(3)>, L<X509_NAME_add_entry_by_NID(3)>, L<X509_NAME_print_ex(3)>, L<X509_NAME_new(3)>, +L<PEM_X509_INFO_read(3)>, L<d2i_X509(3)>, L<d2i_X509_ALGOR(3)>, L<d2i_X509_CRL(3)>, @@ -62,7 +63,7 @@ L<crypto(7)> =head1 COPYRIGHT -Copyright 2003-2017 The OpenSSL Project Authors. All Rights Reserved. +Copyright 2003-2020 The OpenSSL Project Authors. All Rights Reserved. Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy |