summaryrefslogtreecommitdiffstats
path: root/apps
AgeCommit message (Expand)Author
2013-05-15RFC6689 support: add missing commit (git noob alert).Andy Polyakov
2013-03-28Call RAND_cleanup in openssl application.Dr. Stephen Henson
2013-02-25New -force_pubkey option to x509 utility to supply a different publicDr. Stephen Henson
2013-01-18-named_curve option handled automatically now.Dr. Stephen Henson
2013-01-18Add code to download CRLs based on CRLDP extension.Dr. Stephen Henson
2013-01-18cipher is not used in s_server any more.Dr. Stephen Henson
2013-01-18New option to add CRLs for s_client and s_server.Dr. Stephen Henson
2013-01-17initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson
2013-01-17Typo (PR2959).Dr. Stephen Henson
2013-01-17add option to get a certificate or CRL from a URLDr. Stephen Henson
2013-01-15make updateDr. Stephen Henson
2013-01-07Change default bits to 1024Dr. Stephen Henson
2012-12-30add support for separate verify can chain stores to s_client (backport from H...Dr. Stephen Henson
2012-12-30add -chain options to s_client (backrpot from HEAD)Dr. Stephen Henson
2012-12-30remove unused cipher functionality from s_clientDr. Stephen Henson
2012-12-29make JPAKE work again, fix memory leaksDr. Stephen Henson
2012-12-29Delegate command line handling for many common options in s_client/s_server toDr. Stephen Henson
2012-12-26SSL/TLS record tracing code (backport from HEAD).Dr. Stephen Henson
2012-12-26Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-12-26add Suite B verification flagsDr. Stephen Henson
2012-12-26contifyDr. Stephen Henson
2012-12-26new ctrl to retrive value of received temporary key in server key exchange me...Dr. Stephen Henson
2012-12-26store and print out message digest peer signed with in TLS 1.2Dr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26New -valid option to add a certificate to the ca index.txt that is valid and ...Dr. Stephen Henson
2012-12-26Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26cert_flags is unsignedDr. Stephen Henson
2012-12-26add support for client certificate callbak, fix memory leakDr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-12-23add missing \nDr. Stephen Henson
2012-12-20Backport enhancements to OCSP utility from HEAD:Dr. Stephen Henson
2012-12-20revert, missing commit messageDr. Stephen Henson
2012-12-20apps/ocsp.cDr. Stephen Henson
2012-12-19Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-19Return success when the responder is active.Dr. Stephen Henson
2012-12-19Backport X509 hostname, IP address and email checking code from HEAD.Dr. Stephen Henson
2012-12-14New verify flag to return success if we have any certificate in the trustedDr. Stephen Henson
2012-12-14Backport OCSP fixes.Ben Laurie
2012-12-13Make verify return errors.Ben Laurie
2012-12-04check mval for NULL tooDr. Stephen Henson
2012-12-03fix leakDr. Stephen Henson
2012-11-21PR: 2908Dr. Stephen Henson
2012-11-20fix leaksDr. Stephen Henson
2012-09-26add -trusted_first option and verify flag (backport from HEAD)Dr. Stephen Henson