summaryrefslogtreecommitdiffstats
path: root/apps
AgeCommit message (Collapse)Author
2012-12-16add -rmd option to set OCSP response signing digestDr. Stephen Henson
2012-12-15Return success when the responder is active.Dr. Stephen Henson
Don't verify our own responses.
2012-12-15typoDr. Stephen Henson
2012-12-14Add support for '-' as input and output filenames in ocsp utility.Dr. Stephen Henson
Recognise verification arguments.
2012-12-14oops, revert, committed in errorDr. Stephen Henson
2012-12-14apps/ocsp.cDr. Stephen Henson
2012-12-13New verify flag to return success if we have any certificate in theDr. Stephen Henson
trusted store instead of the default which is to return an error if we can't build the complete chain.
2012-12-12add -crl_download option to s_serverDr. Stephen Henson
2012-12-12add -cert_chain option to s_clientDr. Stephen Henson
2012-12-11Make openssl verify return errors.Ben Laurie
2012-12-09add -badsig option to ocsp utility too.Dr. Stephen Henson
2012-12-07Fix OCSP checking.Ben Laurie
2012-12-06Add code to download CRLs based on CRLDP extension.Dr. Stephen Henson
Just a sample, real world applications would have to be cleverer.
2012-12-06remove print_ssl_cert_checks() from openssl application: it is no longer usedDr. Stephen Henson
2012-12-05Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
Add new verify options to set checks. Remove previous -check* commands from s_client and s_server.
2012-12-04don't print verbose policy check messages when -quiet is selected even on errorDr. Stephen Henson
2012-12-04initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson
2012-12-04make -subj always override config fileDr. Stephen Henson
2012-12-04check mval for NULL tooDr. Stephen Henson
2012-12-03fix leakDr. Stephen Henson
2012-12-03oops, really check brief mode only ;-)Dr. Stephen Henson
2012-12-03don't check errno is zero, just print out messageDr. Stephen Henson
2012-12-03if no error code and -brief selected print out connection closed instead of ↵Dr. Stephen Henson
read error
2012-12-02add -badsig option to corrupt CRL signatures for testing tooDr. Stephen Henson
2012-12-02New option to add CRLs for s_client and s_server.Dr. Stephen Henson
2012-12-02add option to get a certificate or CRL from a URLDr. Stephen Henson
2012-11-30Add new test option set the version in generated certificates: thisDr. Stephen Henson
is needed to test some profiles/protocols which reject certificates with unsupported versions.
2012-11-26Print out point format list for clients too.Dr. Stephen Henson
2012-11-26set cmdline flag in s_serverDr. Stephen Henson
2012-11-25option to output corrupted signature in certificates for testing purposesDr. Stephen Henson
2012-11-23Don't display messages about verify depth in s_server if -quiet it set.Dr. Stephen Henson
Add support for separate verify and chain stores in s_client.
2012-11-22Add support for printing out and retrieving EC point formats extension.Dr. Stephen Henson
2012-11-21support -quiet with -msg or -traceDr. Stephen Henson
2012-11-21only use a default curve if not already setDr. Stephen Henson
2012-11-21PR: 2908Dr. Stephen Henson
Submitted by: Dmitry Belyavsky <beldmit@gmail.com> Fix DH double free if parameter generation fails.
2012-11-20fix printout of expiry days if -enddate is used in caDr. Stephen Henson
2012-11-20fix leaksDr. Stephen Henson
2012-11-19with -rev close connection if client sends "CLOSE"Dr. Stephen Henson
2012-11-19update usage messagesDr. Stephen Henson
2012-11-19make dependDr. Stephen Henson
2012-11-19don't call gethostbyname if OPENSSL_SSL_DEBUG_BROKEN_PROTOCOL is setDr. Stephen Henson
2012-11-19remove obsolete codeDr. Stephen Henson
2012-11-18add -naccept <n> option to s_server to automatically exit after <n> connectionsDr. Stephen Henson
2012-11-17fix error messagesDr. Stephen Henson
2012-11-17Delegate command line handling for many common options in s_client/s_serverDr. Stephen Henson
to the SSL_CONF APIs. This is complicated a little because the SSL_CTX structure is not available when the command line is processed: so just check syntax of commands initially and store them, ready to apply later.
2012-11-16new command line option -stdname to ciphers utilityDr. Stephen Henson
2012-11-05contifyDr. Stephen Henson
2012-10-11oops, fix compilation errors in s_serverDr. Stephen Henson
2012-10-08New functions to check a hostname email or IP address against aDr. Stephen Henson
certificate. Add options to s_client, s_server and x509 utilities to print results of checks.
2012-09-28md5-sparcv9.pl: more accurate performance result.Andy Polyakov