summaryrefslogtreecommitdiffstats
path: root/crypto/x509v3/v3_purp.c
AgeCommit message (Expand)Author
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2014-04-15Extension checking fixes.Dr. Stephen Henson
2014-02-14Include self-signed flag in certificates by checking SKID/AKID as wellDr. Stephen Henson
2012-12-19Check chain is not NULL before assuming we have a validated chain. TheDr. Stephen Henson
2012-12-14Backport OCSP fixes.Ben Laurie
2012-12-06Fix two bugs which affect delta CRL handling:Dr. Stephen Henson
2012-04-06Backport: allow key agreement in SSL/TLS certificates (from HEAD)Dr. Stephen Henson
2008-11-05Update obsolete email address...Dr. Stephen Henson
2008-10-22Create function of the form OBJ_bsearch_xxx() in bsearch typesafe macrosDr. Stephen Henson
2008-10-12Type-checked (and modern C compliant) OBJ_bsearch.Ben Laurie
2008-09-01Initial support for delta CRLs. If "use deltas" flag is set attempt to findDr. Stephen Henson
2008-08-29Add support for CRLs partitioned by reason code.Dr. Stephen Henson
2008-08-12Support for policy mappings extension.Dr. Stephen Henson
2008-08-08Initial support for name constraints certificate extension.Dr. Stephen Henson
2008-08-04Add support for nameRelativeToCRLIssuer field in distribution point nameDr. Stephen Henson
2008-07-13We support inhibit any policy extension, add to table.Dr. Stephen Henson
2008-07-13X509 verification fixes.Dr. Stephen Henson
2006-12-18fix orderNils Larsch
2006-12-06Fix change to OPENSSL_NO_RFC3779Dr. Stephen Henson
2006-11-27Add RFC 3779 support.Ben Laurie
2006-09-14Support for AKID in CRLs and partial support for IDP. Overhaul of CRLDr. Stephen Henson
2006-07-24Cache some CRL related extensions.Dr. Stephen Henson
2006-02-12RFC 3161 compliant time stamp request creation, response generationUlf Möller
2005-04-09Added restrictions on the use of proxy certificates, as they may poseRichard Levitte
2004-12-28Add functionality needed to process proxy certificates.Richard Levitte
2004-12-03V1 certificates that aren't self signed can't be accepted as CAs.Dr. Stephen Henson
2004-11-30Split X509_check_ca() into a small self and an internal functionRichard Levitte
2004-11-29Make an explicit check during certificate validation to see that theRichard Levitte
2004-03-05Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe
2003-01-29DVCS (see RFC 3029) was missing among the possible purposes.Richard Levitte
2002-01-27Undo previous change, X509_check_issued() was correct.Bodo Möller
2002-01-26Apply a small patch from Diego R. Lopez <diego.lopez@rediris.es>,Richard Levitte
2001-10-21Reject certificates with unhandled critical extensions.Dr. Stephen Henson
2001-05-10Purpose and trust setting functions for X509_STORE.Dr. Stephen Henson
2001-02-19Make all configuration macros available for application by makingRichard Levitte
2001-02-01Tolerate some "variations" used in someDr. Stephen Henson
2001-01-17Initial OCSP certificate verify. Not complete,Dr. Stephen Henson
2000-12-08Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson
2000-09-05*BIG* verify code reorganisation.Dr. Stephen Henson
2000-06-01There have been a number of complaints from a number of sources that namesRichard Levitte
2000-06-01The previous commit to crypto/stack/*.[ch] pulled the type-safety stringsGeoff Thorpe
2000-05-04Fix for SSL server purpose checkingDr. Stephen Henson
2000-03-07New compatability trust and purpose settings.Dr. Stephen Henson
2000-02-26More get0 et al. changes. Also provide fgrep targets in CHANGESBodo Möller
2000-02-26Rename functions for new convention.Dr. Stephen Henson
2000-02-07Rename the X509V3_*_d2i functions to X509_get_ext_d2i() etc.Dr. Stephen Henson
2000-01-21Some more ifdefs for no-xxx options.Ulf Möller
1999-12-03Fix a bug in the modified purpose code: it wasn't updated to use theDr. Stephen Henson
1999-12-02Change the trust and purpose code so it doesn't need initDr. Stephen Henson