Age | Commit message (Collapse) | Author |
|
Reduces number of silly casts in OpenSSL code and likely most
applications. Consistent with (char *) for "peername" value from
X509_check_host() and X509_VERIFY_PARAM_get0_peername().
(cherry picked from commit 297c67fcd817ea643de2fdeff4e434b050d571e2)
|
|
Pass address of X509_VERIFY_PARAM_ID peername to X509_check_host().
Document modified interface.
(cherry picked from commit ced3d9158a7a8c676be504bb6cd3b5ffb7cc7f13)
|
|
Declaration, memory management, accessor and documentation.
(cherry picked from commit 6e661d458f5aa8f52bf3d9098bd10025de5f08ea)
|
|
(cherry picked from commit eef1827f89ebb82d3bcb5391fa15e05061bab4b2)
|
|
(cherry picked from commit 90b70a6a6b4df267fea2724c7af37d93366a1fec)
|
|
Implemented as STACK_OF(OPENSSL_STRING).
(cherry picked from commit 8abffa4a73fcbf6536e0a42d736ed9211a8204ea)
|
|
(cherry picked from commit a48fb0400c9c45d56144966b774998ebe37804ef)
|
|
Just store NUL-terminated strings. This works better when we add
support for multiple hostnames.
(cherry picked from commit b3012c698a086937319ed413a113ed7bec1edd1a)
|
|
Fixes to host checking wild card support and add support for
setting host checking flags when verifying a certificate
chain.
(cherry picked from commit 397a8e747dc3f964196caed5ca4e08d4b598362a)
|
|
|
|
when adding duplicates in add_cert_dir.
PR: 3261
Reported by: Marian Done
(cherry picked from commit 758954e0d8232d370ed72b7f86640e40443e1778)
|
|
When a chain is complete and ends in a trusted root checks are also
performed on the TA and the callback notified with ok==1. For
consistency do the same for chains where the TA is not self signed.
(cherry picked from commit 385b3486661628f3f806205752bf968b8114b347)
|
|
(from master)
|
|
|
|
X509_ALGOR_[gs]et0()).
|
|
|
|
|
|
(cherry picked from commit ec492c8a5a1491949166c4b37df8666741180f4d)
|
|
|
|
(cherry picked from commit 8f4077ca69076cebaca51b7b666db1ed49e46b9e)
|
|
(cherry picked from commit 9b3d75706ef0114362f04665a3c745bfef59d023)
Conflicts:
crypto/x509/x509_vpm.c
|
|
Move the IP, email and host checking fields from the public
X509_VERIFY_PARAM structure into an opaque X509_VERIFY_PARAM_ID
structure. By doing this the structure can be modified in future
without risk of breaking any applications.
|
|
For consistency with other cases if we are performing
partial chain verification with just one certificate
notify the callback with ok==1.
|
|
|
|
When verifying a partial path always check to see if the EE certificate
is explicitly trusted: the path could contain other untrusted certificates.
(cherry picked from commit 52073b76753815ef1dcc3ab3f9dba75803f717f4)
|
|
(cherry picked from commit 14536c8c9c0abb894afcadb9a58b4b29fc8f7a4d)
|
|
PR #3090
Reported by: Franck Youssef <fry@open.ch>
If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.
This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
(cherry picked from commit 4b26645c1a71cf9ce489e4f79fc836760b670ffe)
|
|
(cherry picked from commit 96940f4f2d0300c033379a87db0ff19e598c6264)
|
|
Reencode certificates in X509_sign_ctx as well as X509_sign.
This was causing a problem in the x509 application when it modified an
existing certificate.
(cherry picked from commit c6d8adb8a45186617e0a8e2c09469bd164b92b31)
|
|
|
|
from X509_STORE_CTX.
|
|
|
|
|
|
structures using HTTP. Add wrapper function to handle CRL download.
|
|
|
|
|
|
a STACK_OF(X509): replace equivalent functionality in several places
by the equivalent call.
(backport from HEAD)
|
|
(backport from HEAD)
|
|
(backport from HEAD)
|
|
Make partial chain chekcing work with EE certificates only.
Remove unneeded -trust_other option from tocsp.
(Backport from HEAD)
|
|
Add new verify options to set checks.
(backport from HEAD)
|
|
store instead of the default which is to return an error if we can't build
the complete chain. [backport from HEAD]
|
|
|
|
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
|
|
|
|
|
|
|
|
PR: 2790
Submitted by: Alexei Khlebnikov
|
|
|
|
|