summaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_vfy.h
AgeCommit message (Expand)Author
2016-06-29Check that the subject name in a proxy cert complies to RFC 3820Richard Levitte
2016-05-19Ensure verify error is set when X509_verify_cert() failsViktor Dukhovni
2016-01-02Fix X509_STORE_CTX_cleanup()Viktor Dukhovni
2015-04-20Add flag to inhibit checking for alternate certificate chains. Setting thisMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22indent has problems with comments that are on the right hand side of a line.Matt Caswell
2015-01-22More indent fixes for STACK_OFMatt Caswell
2015-01-22Fix indent issue with functions using STACK_OFMatt Caswell
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2014-07-07Update API to use (char *) for email addresses and hostnamesViktor Dukhovni
2014-07-07New peername element in X509_VERIFY_PARAM_IDViktor Dukhovni
2014-07-07Multiple verifier reference identities.Viktor Dukhovni
2014-05-21Fixes to host checking.Viktor Dukhovni
2013-12-13verify parameter enumeration functionsDr. Stephen Henson
2013-12-13Add opaque ID structure.Dr. Stephen Henson
2013-01-17New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson
2012-12-26add suite B chain validation flags and associated verify errorsDr. Stephen Henson
2012-12-19Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-14New verify flag to return success if we have any certificate in the trustedDr. Stephen Henson
2012-09-26add -trusted_first option and verify flag (backport from HEAD)Dr. Stephen Henson
2009-10-31Add missing functions to allow access to newer X509_STORE_CTX statusDr. Stephen Henson
2009-10-18Add new function X509_STORE_set_verify_cb and use it in appsDr. Stephen Henson
2009-06-26Allow checking of self-signed certifictes if a flag is set.Dr. Stephen Henson
2008-09-01Initial support for delta CRLs. If "use deltas" flag is set attempt to findDr. Stephen Henson
2008-08-29Add support for CRLs partitioned by reason code.Dr. Stephen Henson
2008-08-13Initial support for CRL path validation. This supports distinct certificateDr. Stephen Henson
2008-08-08Initial support for name constraints certificate extension.Dr. Stephen Henson
2006-11-27Add RFC 3779 support.Ben Laurie
2006-09-17Overhaul of by_dir code to handle dynamic loading of CRLs.Dr. Stephen Henson
2006-09-14Support for AKID in CRLs and partial support for IDP. Overhaul of CRLDr. Stephen Henson
2006-09-11Fixes for new CRL/cert callbacks. Update CRL processing code to use newDr. Stephen Henson
2006-09-10Add verify callback functions to lookup a STACK of matching certs or CRLsDr. Stephen Henson
2005-09-02Two new verify flags functions.Dr. Stephen Henson
2005-04-09Added restrictions on the use of proxy certificates, as they may poseRichard Levitte
2004-12-28Add functionality needed to process proxy certificates.Richard Levitte
2004-11-29Make an explicit check during certificate validation to see that theRichard Levitte
2004-10-01Don't use C++ reserved work "explicit".Dr. Stephen Henson
2004-09-18Make -Werror happy again.Geoff Thorpe
2004-09-06New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson
2004-05-19Delete obsolete and unimplemented function.Dr. Stephen Henson
2004-05-19X509_policy_lib_init is declared but not defined, so it raises havocRichard Levitte
2004-04-01Don't use C++ reserved word.Dr. Stephen Henson
2004-03-27Allow CRLs to be passed into X509_STORE_CTX. This is useful when theDr. Stephen Henson
2004-03-25Fix loads of warnings in policy code.Dr. Stephen Henson
2004-03-23Initial support for certificate policy checking and evaluation.Dr. Stephen Henson
2004-03-05Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson
2003-03-20Make sure we get the definition of a number of OPENSSL_NO_* macros.Richard Levitte
2001-10-21Reject certificates with unhandled critical extensions.Dr. Stephen Henson
2001-09-01Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe
2001-08-06More typedef'd struct names as search targetsBodo Möller