summaryrefslogtreecommitdiffstats
path: root/apps/ocsp.c
AgeCommit message (Collapse)Author
2007-09-26Support for certificate status TLS extension.Dr. Stephen Henson
2007-08-12Fix warnings.Dr. Stephen Henson
2007-05-16PR: 1516Dr. Stephen Henson
Revert change in 1516 because it breaks Windows build. Use a modified version of the headers from s_client.c which has used similar functionality without any problems.
2007-04-04Don't free a NULL. Coverity ID 112.Ben Laurie
2007-04-04Die if serial number is invalid.Ben Laurie
2007-03-29Apply a more modern way to get the definition of select(), except for VMS.Richard Levitte
Submitted by Corinna Vinschen <vinschen@redhat.com>
2006-12-25Needed definition of _XOPEN_SOURCE_EXTENDED so DEC C on VMS will seeRichard Levitte
the declarations of fd_set, select() and so on.
2006-12-13properly initialize SSL context, check return valueNils Larsch
2006-08-20According to documentation, including time.h declares select() onRichard Levitte
OpenVMS, and possibly more. Ref: http://h71000.www7.hp.com/doc/82final/6529/6529pro_019.html#r_select
2006-07-17WIN32 fixes signed/unsigned issues and slightly socket semantics.Dr. Stephen Henson
2006-07-17Add -timeout option to ocsp utility.Dr. Stephen Henson
2004-05-17Remove some unnecessary recursive includes from the internal apps.h header,Geoff Thorpe
and include bn.h in those C files that need bignum functionality.
2003-09-03New -ignore_err option in ocsp application to stop the serverDr. Stephen Henson
exiting on the first error in a request.
2003-04-03Correct a lot of printing calls. Remove extra arguments...Richard Levitte
2003-04-03Make it possible to have multiple active certificates with the sameRichard Levitte
subject.
2003-03-26Update ocsp usage message and docs.Dr. Stephen Henson
2003-02-14Pay attention to disabled SSL versions.Richard Levitte
PR: 500
2003-02-14Make it possible to disable OCSP, the speed application, and the use of sockets.Richard Levitte
PR: 358
2002-12-03EXIT() may mean return(). That's confusing, so let's have it really meanRichard Levitte
exit() in whatever way works for the intended platform, and define OPENSSL_EXIT() to have the old meaning (the name is of course because it's only used in the openssl program)
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie
2002-10-11BN_bn2hex() returns "0" instead of "00" for zero. This disrputs theRichard Levitte
requirement that the serial number always be an even amount of characters. PR: 248
2002-08-01Make it possible to load keys from stdin, and restore thatRichard Levitte
functionality in the programs that had that before. Part fo PR 164
2002-08-01Cut'n'paste error with other reposnder certificates cleared.Richard Levitte
PR: 190
2002-07-10Reorder inclusion of header files:Lutz Jänicke
des_old.h redefines crypt: #define crypt(b,s)\ DES_crypt((b),(s)) This scheme leads to failure, if header files with the OS's true definition of crypt() are processed _after_ des_old.h was processed. This is e.g. the case on HP-UX with unistd.h. As evp.h now again includes des.h (which includes des_old.h), this problem only came up after this modification. Solution: move header files (indirectly) including e_os.h before the header files (indirectly) including evp.h. Submitted by: Reviewed by: PR:
2002-06-13Fix ext_dat.h extension ordering.Dr. Stephen Henson
Reinstate -reqout code. Avoid coredump in ocsp if setup_verify fails. Fix typo in ocsp usage message.
2002-02-22Config code updates.Dr. Stephen Henson
CONF_modules_unload() now calls CONF_modules_finish() automatically. Default use of section openssl_conf moved to CONF_modules_load() Load config file in several openssl utilities. Most utilities now load modules from the config file, though in a few (such as version) this isn't done because it couldn't be used for anything. In the case of ca and req the config file used is the same as the utility itself: that is the -config command line option can be used to specify an alternative file.
2001-08-23Load OCSP responder key before waiting for an incomingDr. Stephen Henson
connection so it can prompt for pass phrase on startup instead of after the first connection. Add -port switch to usage message.
2001-07-13Allow OCSP server to handle multiple requests.Dr. Stephen Henson
Document new OCSP options.
2001-07-12Initial OCSP server support, using index.txt format.Dr. Stephen Henson
This can process internal requests or behave like a mini responder. Todo: documentation, update usage info.
2001-05-30Extend all the loading functions to take an engine pointer, a passRichard Levitte
string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
2001-02-24New function and options to check OCSP response validity.Dr. Stephen Henson
2001-02-20Fix typo.Dr. Stephen Henson
2001-02-14Initial OCSP SSL support.Dr. Stephen Henson
2001-02-13New function OCSP_parse_url() and -url option for ocsp utility.Dr. Stephen Henson
Doesn't handle SSL URLs yet.
2001-02-12Modify OCSP nonce behaviour.Dr. Stephen Henson
2001-02-09Add missing \n's to ocsp usage message.Dr. Stephen Henson
2001-02-08Allow various options to be included for signing and verify ofDr. Stephen Henson
OCSP responses. Documentation to follow... Urgh.. this conflicted with the -VAfile patch I hope I haven't broken it.
2001-02-08Add the -VAfile option to 'openssl ocsp'. This option will give theRichard Levitte
client code certificates to use to only check response signatures. I'm not entirely sure if the way I just implemented the verification is the right way to do it, and would be happy if someone would like to review this.
2001-02-02Various function for commmon operations.Dr. Stephen Henson
2001-01-19Fixes to various ASN1_INTEGER routines for negative case.Dr. Stephen Henson
Enhance s2i_ASN1_INTEGER().
2001-01-19Additional functionality in ocsp utility: print summaryDr. Stephen Henson
of status info. Check nonce values. Option to disable verify. Update usage message. Rename status to string functions and make them global.
2001-01-18Implement remaining OCSP verify checks inDr. Stephen Henson
accordance with RFC2560.
2001-01-17Initial OCSP certificate verify. Not complete,Dr. Stephen Henson
it just supports a "trusted OCSP global root CA".
2001-01-14Preliminary ocsp utility documentation.Dr. Stephen Henson
Fix ocsp usage message.
2001-01-13New OCSP utility. This can generate, parse and printDr. Stephen Henson
OCSP requests. It can also query reponders and parse or print out responses. Still needs some more work: OCSP response checks and of course documentation.