summaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_vfy.c
AgeCommit message (Expand)Author
2011-09-23PR: 2606Dr. Stephen Henson
2011-09-06Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the pastDr. Stephen Henson
2011-06-09Fix warnings.Ben Laurie
2010-11-02Submitted by: Jonathan Dixon <joth@chromium.org>Dr. Stephen Henson
2009-11-17PR: 2103Dr. Stephen Henson
2009-10-31Add missing functions to allow access to newer X509_STORE_CTX statusDr. Stephen Henson
2009-10-23If not checking all certificates don't attempt to find a CRLDr. Stephen Henson
2009-10-22Need to check <= 0 here.Dr. Stephen Henson
2009-09-04Oops, s can be NULLDr. Stephen Henson
2009-09-02PR: 2013Dr. Stephen Henson
2009-06-26Allow checking of self-signed certifictes if a flag is set.Dr. Stephen Henson
2009-06-15Update from 0.9.8-stable.Dr. Stephen Henson
2009-04-15PR: 1899Dr. Stephen Henson
2008-10-07Experimental new date handling routines. These fix issues with X509_time_adj()Dr. Stephen Henson
2008-09-15Fix build warnings.Geoff Thorpe
2008-09-07Fix warning.Ben Laurie
2008-09-01Initial support for delta CRLs. If "use deltas" flag is set attempt to findDr. Stephen Henson
2008-08-29Add support for CRLs partitioned by reason code.Dr. Stephen Henson
2008-08-20Initial indirect CRL support.Dr. Stephen Henson
2008-08-13Initial support for CRL path validation. This supports distinct certificateDr. Stephen Henson
2008-08-12Initial code to support distinct certificate and CRL signing keys where theDr. Stephen Henson
2008-08-12Support for policy mappings extension.Dr. Stephen Henson
2008-08-08Initial support for name constraints certificate extension.Dr. Stephen Henson
2008-08-04Add support for nameRelativeToCRLIssuer field in distribution point nameDr. Stephen Henson
2008-07-30Initial support for alternative CRL issuing certificates.Dr. Stephen Henson
2008-07-13X509 verification fixes.Dr. Stephen Henson
2008-02-28Avoid warnings.Dr. Stephen Henson
2007-09-07Change safestack reimplementation to match 0.9.8.Dr. Stephen Henson
2007-02-07After objects have been freed, NULLify the pointers so there will be no doubleRichard Levitte
2007-01-21Constify version strings and some structures.Dr. Stephen Henson
2006-12-11use const ASN1_TIME *Nils Larsch
2006-12-06Fix change to OPENSSL_NO_RFC3779Dr. Stephen Henson
2006-11-27Add RFC 3779 support.Ben Laurie
2006-09-21Tidy up CRL handling by checking for critical extensions when it isDr. Stephen Henson
2006-09-17Overhaul of by_dir code to handle dynamic loading of CRLs.Dr. Stephen Henson
2006-09-14Support for AKID in CRLs and partial support for IDP. Overhaul of CRLDr. Stephen Henson
2006-09-11Fixes for new CRL/cert callbacks. Update CRL processing code to use newDr. Stephen Henson
2006-09-10Add verify callback functions to lookup a STACK of matching certs or CRLsDr. Stephen Henson
2006-07-25Support for multiple CRLs with same issuer name in X509_STORE. ModifyDr. Stephen Henson
2005-06-05Old typo...Richard Levitte
2005-05-27Assing check_{cert,crl}_time to 'ok' variable so it returns errors onDr. Stephen Henson
2005-05-11Fix more error codes.Bodo Möller
2005-04-20Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts.Dr. Stephen Henson
2005-04-19Various Win32 and other fixes for warnings and compilation errors.Dr. Stephen Henson
2005-04-10Move allow_proxy_certs declaration to start of function.Dr. Stephen Henson
2005-04-09Added restrictions on the use of proxy certificates, as they may poseRichard Levitte
2005-03-31Give everything prototypes (well, everything that's actually used).Ben Laurie
2005-01-17Changes concering RFC 3820 (proxy certificates) integration:Richard Levitte
2004-12-28Add functionality needed to process proxy certificates.Richard Levitte
2004-12-05Add lots of checks for memory allocation failure, error codes to indicateDr. Stephen Henson