summaryrefslogtreecommitdiffstats
path: root/crypto/x509
AgeCommit message (Collapse)Author
2005-05-15Make -CSP option work again in pkcs12 utility by checking forDr. Stephen Henson
attribute in EVP_PKEY structure.
2005-05-11Fix more error codes.Bodo Möller
(Also improve util/ck_errf.pl script, and occasionally fix source code formatting.)
2005-04-20Rename typed version of M_ASN1_get M_ASN1_get_x to avoid conflicts.Dr. Stephen Henson
Remove more bogus shadow warnings.
2005-04-19Various Win32 and other fixes for warnings and compilation errors.Dr. Stephen Henson
Fix Win32 build system to use 'Makefile' instead of 'Makefile.ssl'.
2005-04-12Rebuild error codes.Dr. Stephen Henson
2005-04-11Add emacs cache files to .cvsignore.Richard Levitte
2005-04-10Move allow_proxy_certs declaration to start of function.Dr. Stephen Henson
2005-04-09Added restrictions on the use of proxy certificates, as they may poseRichard Levitte
a security threat on unexpecting applications. Document and test.
2005-03-31Consistency.Ben Laurie
2005-03-31Give everything prototypes (well, everything that's actually used).Ben Laurie
2005-03-30Blow away Makefile.ssl.Ben Laurie
2005-03-30Constification.Ben Laurie
2005-01-17Changes concering RFC 3820 (proxy certificates) integration:Richard Levitte
- Enforce that there should be no policy settings when the language is one of id-ppl-independent or id-ppl-inheritAll. - Add functionality to ssltest.c so that it can process proxy rights and check that they are set correctly. Rights consist of ASCII letters, and the condition is a boolean expression that includes letters, parenthesis, &, | and ^. - Change the proxy certificate configurations so they get proxy rights that are understood by ssltest.c. - Add a script that tests proxy certificates with SSL operations. Other changes: - Change the copyright end year in mkerr.pl. - make update.
2004-12-28Add functionality needed to process proxy certificates.Richard Levitte
2004-12-09Automatically mark the CRL cached encoding as invalid when some operationsDr. Stephen Henson
are performed.
2004-12-05Add lots of checks for memory allocation failure, error codes to indicateDr. Stephen Henson
failure and freeing up memory if a failure occurs. PR:620
2004-12-04In by_file.c check last error for no start line, not first error.Dr. Stephen Henson
2004-12-01Perform partial comparison of different character types in X509_NAME_cmp().Dr. Stephen Henson
2004-11-29Make an explicit check during certificate validation to see that theRichard Levitte
CA setting in each certificate on the chain is correct. As a side- effect always do the following basic checks on extensions, not just when there's an associated purpose to the check: - if there is an unhandled critical extension (unless the user has chosen to ignore this fault) - if the path length has been exceeded (if one is set at all) - that certain extensions fit the associated purpose (if one has been given)
2004-11-02Don't use $(EXHEADER) directly in for loops, as most shells will breakRichard Levitte
if $(EXHEADER) is empty. Notified by many, solution suggested by Carson Gaspar <carson@taltos.org>
2004-10-04Fix race condition when CRL checking is enabled.Dr. Stephen Henson
2004-10-01Don't use C++ reserved work "explicit".Dr. Stephen Henson
2004-09-18Make -Werror happy again.Geoff Thorpe
2004-09-10When looking for request extensions in a certificate look firstDr. Stephen Henson
for the PKCS#9 OID then the non standard MS OID.
2004-09-10make updateRichard Levitte
2004-09-06New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson
This tidies up verify parameters and adds support for integrated policy checking. Add support for policy related command line options. Currently only in smime application. WARNING: experimental code subject to change.
2004-05-19Delete obsolete and unimplemented function.Dr. Stephen Henson
2004-05-19X509_policy_lib_init is declared but not defined, so it raises havocRichard Levitte
when trying to build a shared library on VMS or Windows...
2004-05-17After the latest round of header-hacking, regenerate the dependencies inGeoff Thorpe
the Makefiles. NB: this commit is probably going to generate a huge posting and it is highly uninteresting to read.
2004-04-19make updateGeoff Thorpe
2004-04-19(oops) Apologies all, that last header-cleanup commit was from the wrongGeoff Thorpe
tree. This further reduces header interdependencies, and makes some associated cleanups.
2004-04-01Don't use C++ reserved word.Dr. Stephen Henson
2004-03-27Allow CRLs to be passed into X509_STORE_CTX. This is useful when theDr. Stephen Henson
verified structure can contain its own CRLs (such as PKCS#7 signedData). Tidy up some of the verify code.
2004-03-25Fix loads of warnings in policy code.Dr. Stephen Henson
I'll remember to try to compile this with warnings enabled next time :-)
2004-03-23Initial support for certificate policy checking and evaluation.Dr. Stephen Henson
This is currently *very* experimental and needs to be more fully integrated with the main verification code.
2004-03-15Constify d2i, s2i, c2i and r2i functions and other associatedRichard Levitte
functions and macros. This change has associated tags: LEVITTE_before_const and LEVITTE_after_const. Those will be removed when this change has been properly reviewed.
2004-03-05Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson
when X509_V_FLAG_X509_STRICT is set. Check for CRLSign in CRL issuer certificates. Reject CRLs with unhandled (any) critical extensions.
2004-01-22Typo...Richard Levitte
2004-01-10Adding a slash between the directoryt and the file is a problem withRichard Levitte
VMS. The C RTL can handle it well if the "directory" is a logical name with no colon, therefore ending being 'logname/file'. However, if the given logical names actually has a colon, or if you use a full VMS-syntax directory, you end up with 'logname:/file' or 'dev:[dir1.dir2]/file', and that isn't handled in any good way. So, on VMS, we need to check if the directory string ends with a separator (one of ':', ']' or '>' (< and > can be used instead [ and ])), and handle that by not inserting anything between the directory spec and the file name. In all other cases, it's assumed the directory spec is a logical name, so we need to place a colon between it and the file. Notified by Kevin Greaney <kevin.greaney@hp.com>.
2003-12-27Use sh explicitely to run point.shRichard Levitte
This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-12-27Use BUF_strlcpy() instead of strcpy().Richard Levitte
Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-11-281024 is the export key bits limit according to current regulations, not 512.Richard Levitte
PR: 771 Submitted by: c zhang <czhang2005@hotmail.com>
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe
I have tried to convert 'len' type variable declarations to unsigned as a means to address these warnings when appropriate, but when in doubt I have used casts in the comparisons instead. The better solution (that would get us all lynched by API users) would be to go through and convert all the function prototypes and structure definitions to use unsigned variables except when signed is necessary. The proliferation of (signed) "int" for strictly non-negative uses is unfortunate.
2003-10-24Remove duplicate prototypes have already been (correctly) added to rsa.h,Geoff Thorpe
as this is already included by x509.h anyway.
2003-09-30ASN1 parse fix and release file changes.Dr. Stephen Henson
2003-07-23Avoid clashes with Win32 names in WinCrypt.hDr. Stephen Henson
2003-06-19We set the export flag for 512 *bit* keys, not 512 *byte* ones.Richard Levitte
PR: 587
2003-06-11Add an entry for X509_TRUST_OBJECT_SIGN in trstandard[].Richard Levitte
PR: 617
2003-06-04Really get X509_CRL_CHECK_ALL right this time...Dr. Stephen Henson
2003-04-22fix typoBodo Möller
Submitted by: Nils Larsch
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-23 20:09:46 +0000