summaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_vfy.h
AgeCommit message (Expand)Author
2015-02-25Add flag to inhibit checking for alternate certificate chains. Setting thisMatt Caswell
2015-01-27"#if 0" removal: header filesRich Salz
2015-01-27OPENSSL_NO_xxx cleanup: many removalsRich Salz
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22indent has problems with comments that are on the right hand side of a line.Matt Caswell
2015-01-22More indent fixes for STACK_OFMatt Caswell
2015-01-22Fix indent issue with functions using STACK_OFMatt Caswell
2014-12-30mark all block comments that need format preserving so thatTim Hudson
2014-07-07Update API to use (char *) for email addresses and hostnamesViktor Dukhovni
2014-07-06New peername element in X509_VERIFY_PARAM_IDViktor Dukhovni
2014-06-22Multiple verifier reference identities.Viktor Dukhovni
2014-05-21Fixes to host checking.Viktor Dukhovni
2013-12-13Add opaque ID structure.Dr. Stephen Henson
2012-12-13New verify flag to return success if we have any certificate in theDr. Stephen Henson
2012-12-05Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-11-27New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson
2012-08-03add suite B chain validation flags and associated verify errorsDr. Stephen Henson
2010-12-25avoid verification loops in trusted store when path buildingDr. Stephen Henson
2010-02-25add -trusted_first option and verify flagDr. Stephen Henson
2010-02-25verify parameter enumeration functionsDr. Stephen Henson
2009-10-31Add missing functions to allow access to newer X509_STORE_CTX statusDr. Stephen Henson
2009-10-18Add "missing" function X509_STORE_set_verify_cb().Dr. Stephen Henson
2009-06-26Update from 1.0.0-stable.Dr. Stephen Henson
2008-09-01Initial support for delta CRLs. If "use deltas" flag is set attempt to findDr. Stephen Henson
2008-08-29Add support for CRLs partitioned by reason code.Dr. Stephen Henson
2008-08-13Initial support for CRL path validation. This supports distinct certificateDr. Stephen Henson
2008-08-08Initial support for name constraints certificate extension.Dr. Stephen Henson
2006-11-27Add RFC 3779 support.Ben Laurie
2006-09-17Overhaul of by_dir code to handle dynamic loading of CRLs.Dr. Stephen Henson
2006-09-14Support for AKID in CRLs and partial support for IDP. Overhaul of CRLDr. Stephen Henson
2006-09-11Fixes for new CRL/cert callbacks. Update CRL processing code to use newDr. Stephen Henson
2006-09-10Add verify callback functions to lookup a STACK of matching certs or CRLsDr. Stephen Henson
2005-09-02Two new verify flags functions.Dr. Stephen Henson
2005-04-09Added restrictions on the use of proxy certificates, as they may poseRichard Levitte
2004-12-28Add functionality needed to process proxy certificates.Richard Levitte
2004-11-29Make an explicit check during certificate validation to see that theRichard Levitte
2004-10-01Don't use C++ reserved work "explicit".Dr. Stephen Henson
2004-09-18Make -Werror happy again.Geoff Thorpe
2004-09-06New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson
2004-05-19Delete obsolete and unimplemented function.Dr. Stephen Henson
2004-05-19X509_policy_lib_init is declared but not defined, so it raises havocRichard Levitte
2004-04-01Don't use C++ reserved word.Dr. Stephen Henson
2004-03-27Allow CRLs to be passed into X509_STORE_CTX. This is useful when theDr. Stephen Henson
2004-03-25Fix loads of warnings in policy code.Dr. Stephen Henson
2004-03-23Initial support for certificate policy checking and evaluation.Dr. Stephen Henson
2004-03-05Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson
2003-03-20Make sure we get the definition of a number of OPENSSL_NO_* macros.Richard Levitte
2001-10-21Reject certificates with unhandled critical extensions.Dr. Stephen Henson
2001-09-01Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe
2001-08-06More typedef'd struct names as search targetsBodo Möller