index
:
openssl
OpenSSL-engine-0_9_6-stable
OpenSSL-fips-0_9_7-stable
OpenSSL-fips-0_9_8-stable
OpenSSL-fips-1_2-stable
OpenSSL-fips-2_0-dev
OpenSSL-fips-2_0-stable
OpenSSL-fips2-0_9_7-stable
OpenSSL_0_9_6-stable
OpenSSL_0_9_7-stable
OpenSSL_0_9_8-stable
OpenSSL_0_9_8fg-stable
OpenSSL_1_0_0-stable
OpenSSL_1_0_1-stable
OpenSSL_1_0_2-stable
OpenSSL_1_1_0-stable
OpenSSL_1_1_1-stable
SSLeay
feature/dtls-1.3
feature/ech
feature/quic-server
master
openssl-3.0
openssl-3.1
openssl-3.2
openssl-3.3
tls1.3-draft-18
tls1.3-draft-19
Mirror of https://github.com/openssl/openssl
matthias
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
crypto
/
x509
/
x509_txt.c
Age
Commit message (
Expand
)
Author
2023-03-15
doc/man3/X509_STORE_CTX_get_error.pod: make order consistent, add some missin...
Dr. David von Oheimb
2023-03-14
Update copyright year
Matt Caswell
2023-01-23
X509_V_ERR_INVALID_PURPOSE: fix misleading text; Fix omission in X509_VERIFY_...
Dr. David von Oheimb
2020-09-17
Disallow certs with explicit curve in verification chain
Tomas Mraz
2020-09-11
check_chain_extensions(): Require X.509 v3 if extensions are present
Dr. David von Oheimb
2020-09-11
check_chain_extensions(): Add check that CA cert includes key usage extension
Dr. David von Oheimb
2020-09-11
check_chain_extensions(): Add check that on empty Subject the SAN must be mar...
Dr. David von Oheimb
2020-09-11
check_chain_extensions(): Add check that AKID and SKID are not marked critical
Dr. David von Oheimb
2020-09-11
check_chain_extensions(): Add check that Basic Constraints of CA cert are mar...
Dr. David von Oheimb
2020-09-11
Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set...
Dr. David von Oheimb
2020-07-01
Refactor (without semantic changes) crypto/x509/{v3_purp.c,x509_vfy.c}
Dr. David von Oheimb
2020-07-01
Improve documentation, layout, and code comments regarding self-issued certs ...
Dr. David von Oheimb
2020-04-23
Update copyright year
Matt Caswell
2020-01-23
Update man3/verify documentation, error text
Rich Salz
2018-12-19
X509_check_issued: check that signature algo matches signing key algo
Richard Levitte
2018-12-06
Following the license change, modify the boilerplates in crypto/x509/
Richard Levitte
2017-10-18
Remove parentheses of return.
KaoruToda
2017-09-29
Remove unnecessary #include <openssl/lhash.h> directives.
Pauli
2017-04-12
OCSP Updates: error codes and multiple certificates
Todd Short
2016-06-20
Check that the subject name in a proxy cert complies to RFC 3820
Richard Levitte
2016-05-19
When strict SCT fails record verification failure
Viktor Dukhovni
2016-05-18
Ensure verify error is set when X509_verify_cert() fails
Viktor Dukhovni
2016-05-17
Copyright consolidation 09/10
Rich Salz
2016-04-03
Move peer chain security checks into x509_vfy.c
Viktor Dukhovni
2016-02-10
Deprecate the -issuer_checks debugging option
Viktor Dukhovni
2016-02-08
Suppress DANE TLSA reflection when verification fails
Viktor Dukhovni
2016-01-26
Remove /* foo.c */ comments
Rich Salz
2015-05-14
Identify and move common internal libcrypto header files
Richard Levitte
2015-01-22
Run util/openssl-format-source -v -c .
Matt Caswell
2012-12-05
Integrate host, email and IP address checks into X509_verify.
Dr. Stephen Henson
2012-08-03
add suite B chain validation flags and associated verify errors
Dr. Stephen Henson
2010-12-25
avoid verification loops in trusted store when path building
Dr. Stephen Henson
2008-08-29
Add support for CRLs partitioned by reason code.
Dr. Stephen Henson
2008-08-08
Initial support for name constraints certificate extension.
Dr. Stephen Henson
2007-05-19
Typo in x509_txt.c.
Andy Polyakov
2006-11-27
Add RFC 3779 support.
Ben Laurie
2006-09-14
Support for AKID in CRLs and partial support for IDP. Overhaul of CRL
Dr. Stephen Henson
2005-04-09
Added restrictions on the use of proxy certificates, as they may pose
Richard Levitte
2004-12-28
Add functionality needed to process proxy certificates.
Richard Levitte
2004-11-29
Make an explicit check during certificate validation to see that the
Richard Levitte
2004-09-06
New X509_VERIFY_PARAM structure and associated functionality.
Dr. Stephen Henson
2004-03-05
Various X509 fixes. Disable broken certificate workarounds
Dr. Stephen Henson
2003-12-27
Use BUF_strlcpy() instead of strcpy().
Richard Levitte
2001-10-21
Reject certificates with unhandled critical extensions.
Dr. Stephen Henson
2001-10-08
Small documentation fixes (Howard Lum <howard@pumpkin.canada.sun.com>)
Lutz Jänicke
2001-05-07
Initial CRL based revocation checking.
Dr. Stephen Henson
2000-09-05
*BIG* verify code reorganisation.
Dr. Stephen Henson
1999-11-27
Add trust setting support to the verify code. It now checks the
Dr. Stephen Henson
1999-11-24
Initial chain verify code: not tested probably not working
Dr. Stephen Henson
1999-09-11
Initial support for MacOS.
Andy Polyakov
[next]