summaryrefslogtreecommitdiffstats
path: root/crypto/x509v3
AgeCommit message (Expand)Author
2015-03-12Fix missing return checks in v3_cpols.cMatt Caswell
2015-02-10Fix hostname validation in the command-line tool to honour negative return va...Emilia Kasper
2015-01-22Re-align some comments after running the reformat script.OpenSSL_1_0_2-post-reformatMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22More indent fixes for STACK_OFMatt Caswell
2015-01-22Additional comment changes for reformat of 1.0.2Matt Caswell
2015-01-22Further comment amendments to preserve formatting prior to source reformatMatt Caswell
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2015-01-12Allow multiple IDN xn-- indicatorsRich Salz
2015-01-06RT3662: Allow leading . in nameConstraintsDr. Stephen Henson
2014-09-08RT3031: Need to #undef some names for win32Robin Lee
2014-08-15Fix use after free bug.Istvan Noszticzius
2014-07-07Update API to use (char *) for email addresses and hostnamesViktor Dukhovni
2014-07-07Set optional peername when X509_check_host() succeeds.Viktor Dukhovni
2014-06-25More complete input validation of X509_check_mumbleViktor Dukhovni
2014-06-25Drop hostlen from X509_VERIFY_PARAM_ID.Viktor Dukhovni
2014-06-14Enforce _X509_CHECK_FLAG_DOT_SUBDOMAINS internal-onlyViktor Dukhovni
2014-06-12Client-side namecheck wildcards.Viktor Dukhovni
2014-06-12make updateDr. Stephen Henson
2014-06-11Separate the SCT List parser from the SCT List viewerRob Stradling
2014-05-21Fixes to host checking.Viktor Dukhovni
2014-04-15Extension checking fixes.Dr. Stephen Henson
2014-02-25Don't use BN_ULLONG in n2l8 use SCTS_TIMESTAMP.Dr. Stephen Henson
2014-02-25Fix for v3_scts.cDr. Stephen Henson
2014-02-25Parse non-v1 SCTs less awkwardly.Rob Stradling
2014-02-20make updateDr. Stephen Henson
2014-02-20fix WIN32 warningsDr. Stephen Henson
2014-02-20Show the contents of the RFC6962 Signed Certificate Timestamp List Certificat...Rob Stradling
2014-02-14Include self-signed flag in certificates by checking SKID/AKID as wellDr. Stephen Henson
2014-02-02Add extension free function.Ben Laurie
2012-12-26Portability fix: use BIO_snprintf and pick up strcasecmp alternativeDr. Stephen Henson
2012-12-26Oops, add missing v3nametest.cDr. Stephen Henson
2012-12-19Backport X509 hostname, IP address and email checking code from HEAD.Dr. Stephen Henson
2012-12-19Check chain is not NULL before assuming we have a validated chain. TheDr. Stephen Henson
2012-12-14Backport OCSP fixes.Ben Laurie
2012-12-06Fix two bugs which affect delta CRL handling:Dr. Stephen Henson
2012-04-06Backport: allow key agreement in SSL/TLS certificates (from HEAD)Dr. Stephen Henson
2012-02-23PR: 2696Dr. Stephen Henson
2012-01-04Prevent malformed RFC3779 data triggering an assertion failure (CVE-2011-4577)Dr. Stephen Henson
2012-01-04fix warningsDr. Stephen Henson
2011-10-09PR: 2482Dr. Stephen Henson
2011-06-03Backport libcrypto audit: check return values of EVP functions insteadDr. Stephen Henson
2011-01-03oops missed an assertDr. Stephen Henson
2011-01-03PR: 2411Dr. Stephen Henson
2011-01-03PR: 2410Dr. Stephen Henson
2010-10-11PR: 2295Dr. Stephen Henson
2010-06-15Fix warnings (From HEAD, original patch by Ben).Dr. Stephen Henson
2010-05-22PR: 2251Dr. Stephen Henson
2009-09-30PR: 2057Dr. Stephen Henson
2009-08-31Missing break.Dr. Stephen Henson