Age | Commit message (Collapse) | Author |
|
RT#4081
Reviewed-by: Rich Salz <rsalz@openssl.org>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(cherry picked from commit 070c23325af4526c9a8532a60d63522c58d5554b)
|
|
Reviewed-by: Tim Hudson <tjh@openssl.org>
|
|
PR#2783
(cherry picked from commit b36f35cda964544a15d53d3fdfec9b2bab8cacb1)
|
|
|
|
of assuming they will always suceed.
|
|
http://eprint.iacr.org/2011/232.pdf
Thanks to the original authors Billy Bob Brumley and Nicola Tuveri for
bringing this to our attention.
|
|
it manually. Make OCSP_CERTID_dup() a real function instead of a macro.
|
|
(Also improve util/ck_errf.pl script, and occasionally
fix source code formatting.)
|
|
Notified by Paul Siegel <psiegel@corestreet.com>
|
|
with existing code.
Modify library to use digest *_ex() functions.
|
|
properly and supports several flags.
|
|
or serial number.
|
|
sure they are available in opensslconf.h, by giving them names starting
with "OPENSSL_" to avoid conflicts with other packages and by making
sure e_os2.h will cover all platform-specific cases together with
opensslconf.h.
I've checked fairly well that nothing breaks with this (apart from
external software that will adapt if they have used something like
NO_KRB5), but I can't guarantee it completely, so a review of this
change would be a good thing.
|
|
Doesn't handle SSL URLs yet.
|
|
Delete obsolete OCSP functions.
Largely untested at present...
|
|
|
|
it just supports a "trusted OCSP global root CA".
|
|
and subject to addition, modifcation or deletion.
Add two OCSP nonce utility functions.
Fix typo in status code name.
|
|
application needs.
Add OCSP library name to error code.
|
|
Remove extensions argument from various functions
because it is not needed with the new extension
code.
New function OCSP_cert_to_id() to convert a pair
of certificates into an OCSP_CERTID.
New simple OCSP HTTP function. This is rather primitive
but just about adequate to send OCSP requests and
parse the response.
Fix typo in CRL distribution points extension.
Fix ASN1 code so it adds a final null to constructed
strings.
|
|
obsolete code. Delete some redundant files.
|
|
from the print routines.
Reorganisation of OCSP code: initial print routines in ocsp_prn.c. Doesn't
work fully because OCSP extensions aren't reimplemented yet.
Implement some ASN1 functions needed to compile OCSP code.
|
|
|
|
|