summaryrefslogtreecommitdiffstats
path: root/crypto/x509
AgeCommit message (Expand)Author
2014-07-07Update API to use (char *) for email addresses and hostnamesViktor Dukhovni
2014-07-07Set optional peername when X509_check_host() succeeds.Viktor Dukhovni
2014-07-07New peername element in X509_VERIFY_PARAM_IDViktor Dukhovni
2014-07-07One more typo when changing !result to result <= 0Viktor Dukhovni
2014-07-07Fix typo in last commitViktor Dukhovni
2014-07-07Multiple verifier reference identities.Viktor Dukhovni
2014-06-25X509_check_mumble() failure is <= 0, not just 0Viktor Dukhovni
2014-06-25Drop hostlen from X509_VERIFY_PARAM_ID.Viktor Dukhovni
2014-05-21Fixes to host checking.Viktor Dukhovni
2014-03-03For self signed root only indicate one error.Dr. Stephen Henson
2014-02-24x509/by_dir.c: fix run-away pointer (and potential SEGV)Andy Polyakov
2014-02-14Include TA in checks/callback with partial chains.Dr. Stephen Henson
2014-02-14Add cert_self_signed function to simplify verifyDr. Stephen Henson
2014-02-14Simplify X509_STORE_CTX_get1_chain (from master).Dr. Stephen Henson
2014-02-01Remove redundant accessor (you can do the same thing, and more, withBen Laurie
2014-02-01Add more accessors.Ben Laurie
2014-02-01Add accessor for x509.cert_info.Ben Laurie
2014-01-27Compare encodings in X509_cmp as well as hash.Dr. Stephen Henson
2014-01-23make updateDr. Stephen Henson
2014-01-09Fix bug in X509_V_FLAG_IGNORE_CRITICAL CRL handling.Dr. Stephen Henson
2013-12-13verify parameter enumeration functionsDr. Stephen Henson
2013-12-13Add opaque ID structure.Dr. Stephen Henson
2013-12-13Fix for partial chain notification.Dr. Stephen Henson
2013-12-01make updateDr. Stephen Henson
2013-09-08Partial path fix.Dr. Stephen Henson
2013-08-19Make no-ec compilation work.Dr. Stephen Henson
2013-08-06Fix verify loop with CRL checking.Dr. Stephen Henson
2013-06-05Reencode with X509_CRL_ctx_sign too.Dr. Stephen Henson
2013-05-02Reencode certificates in X509_sign_ctx.Dr. Stephen Henson
2013-01-17initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson
2013-01-17New functions to set lookup_crls callback and to retrieve internal X509_STOREDr. Stephen Henson
2013-01-16print out issuer and subject unique identifier fields in certificatesDr. Stephen Henson
2013-01-15add wrapper function for certificate downloadDr. Stephen Henson
2013-01-15Generalise OCSP I/O functions to support dowloading of other ASN1Dr. Stephen Henson
2013-01-06Fix warning.Ben Laurie
2012-12-26Add missing prototype to x509.hDr. Stephen Henson
2012-12-26New function X509_chain_up_ref to dup and up the reference count ofDr. Stephen Henson
2012-12-26add suite B chain validation flags and associated verify errorsDr. Stephen Henson
2012-12-26New functions to retrieve certificate signatures and signature OID NID.Dr. Stephen Henson
2012-12-26Revert incompatible OCSP_basic_verify changes.Dr. Stephen Henson
2012-12-19Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson
2012-12-14New verify flag to return success if we have any certificate in the trustedDr. Stephen Henson
2012-12-14Backport OCSP fixes.Ben Laurie
2012-12-06Fix two bugs which affect delta CRL handling:Dr. Stephen Henson
2012-09-26add -trusted_first option and verify flag (backport from HEAD)Dr. Stephen Henson
2012-07-19Don't ignore (!) reference count in X509_STORE_free.Dr. Stephen Henson
2012-06-03Reduce version skew: trivia (I hope).Ben Laurie
2012-04-16Minor compatibility fixes [from HEAD].Andy Polyakov
2011-10-09Backport PSS signature support from HEAD.Dr. Stephen Henson
2011-10-09Backport of password based CMS support from HEAD.Dr. Stephen Henson