summaryrefslogtreecommitdiffstats
path: root/crypto/x509v3
AgeCommit message (Expand)Author
2016-06-10Fix an error path leak in do_ext_nconf()Matt Caswell
2016-05-19Ensure verify error is set when X509_verify_cert() failsViktor Dukhovni
2016-01-15NGX-2040 - fix wildcard match on punycode/IDNA DNS namesZi Lin
2015-12-18Remove the "eay" c-file-style indicatorsRichard Levitte
2015-11-09Fix missing malloc return value checksMatt Caswell
2015-10-15Fix self signed handling.Dr. Stephen Henson
2015-09-15RT4044: Remove .cvsignore files.Rich Salz
2015-09-15d2i: don't update input pointer on failureKurt Roeckx
2015-09-02Cleaner handling of "cnid" in do_x509_checkViktor Dukhovni
2015-07-14Conversion to UTF-8 where neededRichard Levitte
2015-06-03make updateDr. Stephen Henson
2015-05-23Fix the update target and remove duplicate file updatesRichard Levitte
2015-05-11Add missing NULL check in X509V3_parse_list()Kurt Cancemi
2015-05-07Fix typo in valid_starViktor Dukhovni
2015-05-05Remove libcrypto to libssl dependencyMatt Caswell
2015-04-16Code style: space after 'if'Viktor Dukhovni
2015-04-11do_dirname: Don't change gen on failuresKurt Roeckx
2015-03-12Fix missing return checks in v3_cpols.cMatt Caswell
2015-02-10Fix hostname validation in the command-line tool to honour negative return va...Emilia Kasper
2015-01-22Re-align some comments after running the reformat script.OpenSSL_1_0_2-post-reformatMatt Caswell
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2015-01-22More indent fixes for STACK_OFMatt Caswell
2015-01-22Additional comment changes for reformat of 1.0.2Matt Caswell
2015-01-22Further comment amendments to preserve formatting prior to source reformatMatt Caswell
2015-01-22mark all block comments that need format preserving so thatTim Hudson
2015-01-12Allow multiple IDN xn-- indicatorsRich Salz
2015-01-06RT3662: Allow leading . in nameConstraintsDr. Stephen Henson
2014-09-08RT3031: Need to #undef some names for win32Robin Lee
2014-08-15Fix use after free bug.Istvan Noszticzius
2014-07-07Update API to use (char *) for email addresses and hostnamesViktor Dukhovni
2014-07-07Set optional peername when X509_check_host() succeeds.Viktor Dukhovni
2014-06-25More complete input validation of X509_check_mumbleViktor Dukhovni
2014-06-25Drop hostlen from X509_VERIFY_PARAM_ID.Viktor Dukhovni
2014-06-14Enforce _X509_CHECK_FLAG_DOT_SUBDOMAINS internal-onlyViktor Dukhovni
2014-06-12Client-side namecheck wildcards.Viktor Dukhovni
2014-06-12make updateDr. Stephen Henson
2014-06-11Separate the SCT List parser from the SCT List viewerRob Stradling
2014-05-21Fixes to host checking.Viktor Dukhovni
2014-04-15Extension checking fixes.Dr. Stephen Henson
2014-02-25Don't use BN_ULLONG in n2l8 use SCTS_TIMESTAMP.Dr. Stephen Henson
2014-02-25Fix for v3_scts.cDr. Stephen Henson
2014-02-25Parse non-v1 SCTs less awkwardly.Rob Stradling
2014-02-20make updateDr. Stephen Henson
2014-02-20fix WIN32 warningsDr. Stephen Henson
2014-02-20Show the contents of the RFC6962 Signed Certificate Timestamp List Certificat...Rob Stradling
2014-02-14Include self-signed flag in certificates by checking SKID/AKID as wellDr. Stephen Henson
2014-02-02Add extension free function.Ben Laurie
2012-12-26Portability fix: use BIO_snprintf and pick up strcasecmp alternativeDr. Stephen Henson
2012-12-26Oops, add missing v3nametest.cDr. Stephen Henson
2012-12-19Backport X509 hostname, IP address and email checking code from HEAD.Dr. Stephen Henson