summaryrefslogtreecommitdiffstats
path: root/apps/ca.c
AgeCommit message (Collapse)Author
2010-03-14free up sigopts STACKDr. Stephen Henson
2010-03-14clear bogus errors in ca utilityDr. Stephen Henson
2010-03-14add -sigopt option to ca utilityDr. Stephen Henson
2009-12-02Replace the broken SPKAC certification with the correct version.Dr. Stephen Henson
2009-10-04Fix warnings about ignoring fgets return valueDr. Stephen Henson
2009-09-02PR: 2013Dr. Stephen Henson
Submitted by: steve@openssl.org Include a flag ASN1_STRING_FLAG_MSTRING when a multi string type is created. This makes it possible to tell if the underlying type is UTCTime, GeneralizedTime or Time when the structure is reused and X509_time_adj_ex() can handle each case in an appropriate manner. Add error checking to CRL generation in ca utility when nextUpdate is being set.
2009-07-27Update from 1.0.0-stableDr. Stephen Henson
2009-03-09PR: 1854Dr. Stephen Henson
Submitted by: Oliver Martin <oliver@volatilevoid.net> Reviewed by: steve@openssl.org Support GeneralizedTime in ca utility.
2008-12-22Incidentally http://cvs.openssl.org/chngview?cn=17710 also made it possibleAndy Polyakov
to build the library without -D_CRT_NONSTDC_NO_DEPRECATE. This commit expands it even to apps catalog and actually omits the macro in question from Configure.
2008-10-07Experimental new date handling routines. These fix issues with X509_time_adj()Dr. Stephen Henson
and should avoid any OS date limitations such as the year 2038 bug.
2008-06-04More type-checking.Ben Laurie
2008-06-02Avoid case in ca.c fix.Dr. Stephen Henson
2008-06-02Revert, doesn't fix warning :-(Dr. Stephen Henson
2008-06-02Avoid cast with wrapper function.Dr. Stephen Henson
2008-05-31Stop const mismatch warning.Dr. Stephen Henson
2008-05-26LHASH revamp. make depend.Ben Laurie
2008-03-16Fix some warnings.Dr. Stephen Henson
2007-04-04Return an error if the serial number is badly formed. (Coverity ID 116).Ben Laurie
2006-11-27Add RFC 3779 support.Ben Laurie
2006-07-25Support for multiple CRLs with same issuer name in X509_STORE. ModifyDr. Stephen Henson
verify logic to try to use an unexpired CRL if possible.
2006-05-07Add support for default public key digest type ctrl.Dr. Stephen Henson
2006-04-19Remove link between digests and signature algorithms.Dr. Stephen Henson
Use cross reference table in ASN1_item_sign(), ASN1_item_verify() to eliminate the need for algorithm specific code.
2005-11-04Eliminate dependency on read/write/stat in apps under _WIN32.Andy Polyakov
2005-09-30successfully updating the db shouldn't result in an error messageNils Larsch
2005-07-04Update from stable branch.Dr. Stephen Henson
2005-04-15const fixesNils Larsch
2005-04-05some const fixesNils Larsch
2004-11-11Use the default_md config file value when signing CRLs.Dr. Stephen Henson
PR:662
2004-08-06Call setup_engine after autoconfig.Dr. Stephen Henson
2004-04-20Reduce chances of issuer and serial number duplication by use of randomDr. Stephen Henson
initial serial numbers. PR: 842
2004-04-15Clear error if unique_subject lookup fails.Dr. Stephen Henson
2003-12-27Use BUF_strlcpy() instead of strcpy().Richard Levitte
Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-11-28Move another common functionality (reproduced so far with cut'n'paste)Richard Levitte
to apps.c, and give it the hopefully descriptive name parse_yesno().
2003-11-28Move do_subject() to apps.c and rename it to parse_name(). TheRichard Levitte
rationale behind the move is that it's use by several applications. The rationale behind the name change is that it describes what the function does a bit better.
2003-11-28Allow multi-valued rdns in subjects. This adds the -multivalue-rdn optionRichard Levitte
to 'openssl req' and 'openssl ca'. PR: 779 Submitted by: Michael Bell <michael.bell@cms.hu-berlin.de> Reviewed by: Richard Levitte (there will be some follow-up changes)
2003-11-28Netware-specific changes,Richard Levitte
PR: 780 Submitted by: Verdon Walker <VWalker@novell.com> Reviewed by: Richard Levitte
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe
I have tried to convert 'len' type variable declarations to unsigned as a means to address these warnings when appropriate, but when in doubt I have used casts in the comparisons instead. The better solution (that would get us all lynched by API users) would be to go through and convert all the function prototypes and structure definitions to use unsigned variables except when signed is necessary. The proliferation of (signed) "int" for strictly non-negative uses is unfortunate.
2003-09-09Generalise the definition of strcasecmp() and strncasecmp() forRichard Levitte
platforms that don't (necessarely) have it. In the case of VMS, this means moving a couple of functions from apps/ to crypto/ and make them general (although only used privately).
2003-06-19Implement CRL numbers.Richard Levitte
Contributed in whole by Laurent Genier <Laurent.Genier@intrinsec.com> PR: 644
2003-04-04Convert save_serial() to work like save_index(), and add aRichard Levitte
rotate_serial() that works like rotate_index().
2003-04-04Add documentation on the added functionality in 'openssl ca'.Richard Levitte
2003-04-03Correct a lot of printing calls. Remove extra arguments...Richard Levitte
2003-04-03Implement self-signing in 'openssl ca'. This makes it easier to haveRichard Levitte
the CA certificate part of the CA database, and combined with 'unique_subject=no', it should make operations like CA certificate roll-over easier.
2003-04-03Reset the version number of the issuer certificate? I believe thisRichard Levitte
hasn't been tested in a long while...
2003-04-03Conditionalise all debug strings.Richard Levitte
2003-04-03Make it possible to have multiple active certificates with the sameRichard Levitte
subject.
2003-01-30Add the possibility to build without the ENGINE framework.Richard Levitte
PR: 287
2003-01-30cert_sk isn't always allocated, so freeing it may cause a crash.Richard Levitte
PR: 481
2003-01-09Typo.Dr. Stephen Henson
2003-01-09NULL tofree when it is freed to avoid double free.Dr. Stephen Henson
Make sure key is not NULL before freeing it.