summaryrefslogtreecommitdiffstats
path: root/crypto/x509
AgeCommit message (Expand)Author
2014-06-22X509_check_mumble() failure is <= 0, not just 0Viktor Dukhovni
2014-06-22Drop hostlen from X509_VERIFY_PARAM_ID.Viktor Dukhovni
2014-05-25Don't use expired certificates if possible.Dr. Stephen Henson
2014-05-25Rename vpm_int.h to x509_lcl.hDr. Stephen Henson
2014-05-21Fixes to host checking.Viktor Dukhovni
2014-03-03For self signed root only indicate one error.Dr. Stephen Henson
2014-02-24x509/by_dir.c: fix run-away pointer (and potential SEGV)Andy Polyakov
2014-02-19make dependDr. Stephen Henson
2014-02-14Include TA in checks/callback with partial chains.Dr. Stephen Henson
2014-02-14Don't do loop detection for self signed check.Dr. Stephen Henson
2014-01-26Compare encodings in X509_cmp as well as hash.Dr. Stephen Henson
2014-01-09Fix bug in X509_V_FLAG_IGNORE_CRITICAL CRL handling.Dr. Stephen Henson
2013-12-13Add opaque ID structure.Dr. Stephen Henson
2013-12-13Fix for partial chain notification.Dr. Stephen Henson
2013-09-08Partial path fix.Dr. Stephen Henson
2013-08-17Make no-ec compilation work.Dr. Stephen Henson
2013-07-12Fix verify loop with CRL checking.Dr. Stephen Henson
2013-06-05Reencode with X509_CRL_ctx_sign too.Dr. Stephen Henson
2013-05-02Reencode certificates in X509_sign_ctx.Dr. Stephen Henson
2013-01-19Make "make depend" work on MacOS out of the box.Ben Laurie
2013-01-06Fix warning.Ben Laurie
2012-12-21Make partial chain checking work if we only have the EE certificate inDr. Stephen Henson
2012-12-13New verify flag to return success if we have any certificate in theDr. Stephen Henson
2012-12-06Fix two bugs which affect delta CRL handling:Dr. Stephen Henson
2012-12-05Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-04initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson
2012-11-29add wrapper function for certificate downloadDr. Stephen Henson
2012-11-28Generalise OCSP I/O functions to support dowloading of other ASN1Dr. Stephen Henson
2012-11-27New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson
2012-08-03Rename Suite B functions for consistency.Dr. Stephen Henson
2012-08-03add suite B chain validation flags and associated verify errorsDr. Stephen Henson
2012-07-19Don't ignore (\!) reference count in X509_STORE_freeDr. Stephen Henson
2012-06-13New functions to retrieve certificate signatures and signature OID NID.Dr. Stephen Henson
2012-06-12print out issuer and subject unique identifier fields in certificatesDr. Stephen Henson
2012-04-16Minor compatibility fixes.Andy Polyakov
2012-03-05don't do loop check for single self signed certificateDr. Stephen Henson
2011-11-14Fix some warnings caused by __owur. Temporarily (I hope) remove the moreBen Laurie
2011-10-06? crypto/aes/aes-armv4.SDr. Stephen Henson
2011-09-23PR: 2606Dr. Stephen Henson
2011-09-06Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the pastDr. Stephen Henson
2011-06-22allow MD5 use for computing old format hash linksDr. Stephen Henson
2011-01-26Change AR to ARX to allow exclusion of fips object modulesDr. Stephen Henson
2010-12-25avoid verification loops in trusted store when path buildingDr. Stephen Henson
2010-11-02Submitted by: Jonathan Dixon <joth@chromium.org>Dr. Stephen Henson
2010-10-03Add call to ENGINE_register_all_complete() to ENGINE_load_builtin_engines(),Dr. Stephen Henson
2010-05-03PR: 2250Dr. Stephen Henson
2010-03-14add X509_CRL_sign_ctx functionDr. Stephen Henson
2010-03-11RSA PSS ASN1 signing methodDr. Stephen Henson
2010-03-11New function X509_ALGOR_set_md() to set X509_ALGOR (DigestAlgorithmIdentifier)Dr. Stephen Henson
2010-03-06Add algorithm specific signature printing. An individual ASN1 method canDr. Stephen Henson