summaryrefslogtreecommitdiffstats
path: root/crypto/x509
AgeCommit message (Expand)Author
2020-12-21Fix NULL pointer access caused by X509_ATTRIBUTE_create()Ingo Schwarze
2020-12-08Update copyright yearMatt Caswell
2020-12-03x509_vfy.c: Restore rejection of expired trusted (root) certificateDr. David von Oheimb
2020-10-26Allow to continue on UNABLE_TO_VERIFY_LEAF_SIGNATUREAndré Klitzing
2020-10-15Changing X509at_get0_data_by_OBJ to expect const stack of X509_ATTRIBUTEAkshit Akhoury
2020-09-22Update copyright yearMatt Caswell
2020-09-21Disallow certs with explicit curve in verification chainTomas Mraz
2020-07-16x509_vfy.c: Improve key usage checks in internal_verify() of cert chainsDr. David von Oheimb
2020-07-16Fix issue 1418 by moving check of KU_KEY_CERT_SIGN and weakening check_issued()Dr. David von Oheimb
2020-05-26Coverity 1463830: Resource leaks (RESOURCE_LEAK)Pauli
2020-05-19Fix some places where X509_up_ref is usedBernd Edlinger
2020-04-21Add setter equivalents to X509_REQ_get0_signatureDirk-Willem van Gulik
2020-04-06Set X509_V_ERR_INVALID_EXTENSION error for invalid basic constraintsTomas Mraz
2020-03-22Fix error handling in x509v3_cache_extensions and related functionsBernd Edlinger
2020-03-11Revert "Stop accepting certificates signed using SHA1 at security level 1"Matt Caswell
2020-02-05Stop accepting certificates signed using SHA1 at security level 1Kurt Roeckx
2019-09-27Reorganize local header filesDr. Matthias St. Pierre
2019-09-27Reorganize private crypto header filesDr. Matthias St. Pierre
2019-09-10Update copyright yearMatt Caswell
2019-09-05Fix error handling in x509_lu.cBernd Edlinger
2019-08-17Fix error handling in X509_chain_up_refBernd Edlinger
2019-08-14Add missing EBCDIC stringsopensslonzos-github
2019-07-18Cleanup use of X509 STORE locksShane Lontis
2019-07-15Fix wrong lock claimed in x509 dir lookup.Krists Krilovs
2019-07-08Avoid NULL pointer dereference. Fixes #9043.Dmitry Belyavskiy
2019-07-02Check for V_ASN1_BOOLEAN/V_ASN1_NULL in X509_ATTRIBUTE_get0_dataBernd Edlinger
2019-05-28Update copyright yearRichard Levitte
2019-04-09Fix crash in X509_STORE_CTX_get_by_subjectMatt Caswell
2019-02-26Update copyright yearMatt Caswell
2019-01-31Fix a crash in reuse of i2d_X509_PUBKEYBernd Edlinger
2019-01-31Fixed d2i_X509 in-place not re-hashing the ex_flagsBernd Edlinger
2019-01-31Fix a memory leak with di2_X509_CRL reuseBernd Edlinger
2018-12-20Admit unknown pkey types at security level 0Ken Goldman
2018-10-18Apply self-imposed path length also to root CAsViktor Dukhovni
2018-10-18Only CA certificates can be self-issuedViktor Dukhovni
2018-09-24Use secure_getenv(3) when available.Pauli
2018-09-11Update copyright yearMatt Caswell
2018-08-17Avoid shadowing 'free' in X509_LOOKUP_met_set_freeBenjamin Kaduk
2018-08-07Harmonize use of sk_TYPE_find's return value.Andy Polyakov
2018-08-07x509/x509name.c: fix potential crash in X509_NAME_get_text_by_OBJ.Andy Polyakov
2018-06-20Update copyright yearMatt Caswell
2018-06-11Add support for RSA-PSS to X509_certificate_type()Todd Short
2018-05-30Add APIs for custom X509_LOOKUP_METHOD creationMingtao Yang
2018-05-29Update copyright yearMatt Caswell
2018-05-23Skip CN DNS name constraint checks when not neededViktor Dukhovni
2018-05-21Fix undefined behaviour in X509_NAME_cmp()Matt Caswell
2018-05-20Restore check of |*xn| against |name| in X509_NAME_setRichard Levitte
2018-05-11Use void in all function definitions that do not take any argumentsKurt Roeckx
2018-05-02Make X509_VERIFY_PARAM_get_hostflags() take a const argMatt Caswell
2018-05-01Add getter for X509_VERIFY_PARAM_get_hostflagsMatt Caswell