Age | Commit message (Collapse) | Author | |
---|---|---|---|
2012-12-16 | add -rmd option to set OCSP response signing digest | Dr. Stephen Henson | |
2012-12-15 | Return success when the responder is active. | Dr. Stephen Henson | |
Don't verify our own responses. | |||
2012-12-15 | typo | Dr. Stephen Henson | |
2012-12-14 | Add support for '-' as input and output filenames in ocsp utility. | Dr. Stephen Henson | |
Recognise verification arguments. | |||
2012-12-14 | oops, revert, committed in error | Dr. Stephen Henson | |
2012-12-14 | apps/ocsp.c | Dr. Stephen Henson | |
2012-12-13 | New verify flag to return success if we have any certificate in the | Dr. Stephen Henson | |
trusted store instead of the default which is to return an error if we can't build the complete chain. | |||
2012-12-12 | add -crl_download option to s_server | Dr. Stephen Henson | |
2012-12-12 | add -cert_chain option to s_client | Dr. Stephen Henson | |
2012-12-11 | Make openssl verify return errors. | Ben Laurie | |
2012-12-09 | add -badsig option to ocsp utility too. | Dr. Stephen Henson | |
2012-12-07 | Fix OCSP checking. | Ben Laurie | |
2012-12-06 | Add code to download CRLs based on CRLDP extension. | Dr. Stephen Henson | |
Just a sample, real world applications would have to be cleverer. | |||
2012-12-06 | remove print_ssl_cert_checks() from openssl application: it is no longer used | Dr. Stephen Henson | |
2012-12-05 | Integrate host, email and IP address checks into X509_verify. | Dr. Stephen Henson | |
Add new verify options to set checks. Remove previous -check* commands from s_client and s_server. | |||
2012-12-04 | don't print verbose policy check messages when -quiet is selected even on error | Dr. Stephen Henson | |
2012-12-04 | initial support for delta CRL generations by diffing two full CRLs | Dr. Stephen Henson | |
2012-12-04 | make -subj always override config file | Dr. Stephen Henson | |
2012-12-04 | check mval for NULL too | Dr. Stephen Henson | |
2012-12-03 | fix leak | Dr. Stephen Henson | |
2012-12-03 | oops, really check brief mode only ;-) | Dr. Stephen Henson | |
2012-12-03 | don't check errno is zero, just print out message | Dr. Stephen Henson | |
2012-12-03 | if no error code and -brief selected print out connection closed instead of ↵ | Dr. Stephen Henson | |
read error | |||
2012-12-02 | add -badsig option to corrupt CRL signatures for testing too | Dr. Stephen Henson | |
2012-12-02 | New option to add CRLs for s_client and s_server. | Dr. Stephen Henson | |
2012-12-02 | add option to get a certificate or CRL from a URL | Dr. Stephen Henson | |
2012-11-30 | Add new test option set the version in generated certificates: this | Dr. Stephen Henson | |
is needed to test some profiles/protocols which reject certificates with unsupported versions. | |||
2012-11-26 | Print out point format list for clients too. | Dr. Stephen Henson | |
2012-11-26 | set cmdline flag in s_server | Dr. Stephen Henson | |
2012-11-25 | option to output corrupted signature in certificates for testing purposes | Dr. Stephen Henson | |
2012-11-23 | Don't display messages about verify depth in s_server if -quiet it set. | Dr. Stephen Henson | |
Add support for separate verify and chain stores in s_client. | |||
2012-11-22 | Add support for printing out and retrieving EC point formats extension. | Dr. Stephen Henson | |
2012-11-21 | support -quiet with -msg or -trace | Dr. Stephen Henson | |
2012-11-21 | only use a default curve if not already set | Dr. Stephen Henson | |
2012-11-21 | PR: 2908 | Dr. Stephen Henson | |
Submitted by: Dmitry Belyavsky <beldmit@gmail.com> Fix DH double free if parameter generation fails. | |||
2012-11-20 | fix printout of expiry days if -enddate is used in ca | Dr. Stephen Henson | |
2012-11-20 | fix leaks | Dr. Stephen Henson | |
2012-11-19 | with -rev close connection if client sends "CLOSE" | Dr. Stephen Henson | |
2012-11-19 | update usage messages | Dr. Stephen Henson | |
2012-11-19 | make depend | Dr. Stephen Henson | |
2012-11-19 | don't call gethostbyname if OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is set | Dr. Stephen Henson | |
2012-11-19 | remove obsolete code | Dr. Stephen Henson | |
2012-11-18 | add -naccept <n> option to s_server to automatically exit after <n> connections | Dr. Stephen Henson | |
2012-11-17 | fix error messages | Dr. Stephen Henson | |
2012-11-17 | Delegate command line handling for many common options in s_client/s_server | Dr. Stephen Henson | |
to the SSL_CONF APIs. This is complicated a little because the SSL_CTX structure is not available when the command line is processed: so just check syntax of commands initially and store them, ready to apply later. | |||
2012-11-16 | new command line option -stdname to ciphers utility | Dr. Stephen Henson | |
2012-11-05 | contify | Dr. Stephen Henson | |
2012-10-11 | oops, fix compilation errors in s_server | Dr. Stephen Henson | |
2012-10-08 | New functions to check a hostname email or IP address against a | Dr. Stephen Henson | |
certificate. Add options to s_client, s_server and x509 utilities to print results of checks. | |||
2012-09-28 | md5-sparcv9.pl: more accurate performance result. | Andy Polyakov | |