summaryrefslogtreecommitdiffstats
path: root/crypto
AgeCommit message (Expand)Author
2020-09-13Fix safestack issues in x509.hMatt Caswell
2020-09-12NonStop port updates for 3.0.0.Randall S. Becker
2020-09-12EVP: Add the internal convenience function evp_keymgmt_util_export()Richard Levitte
2020-09-12EC: Reimplement EVP_PKEY_CTX_set_ec_param_enc() to support providersRichard Levitte
2020-09-12keygen: add FIPS error state management to conditional self testsShane Lontis
2020-09-12FIPS: error mode is set from failed self tests and produced a limited number ...Pauli
2020-09-12Fix coverity issue: CID 1466482 - Resource leak in OSSL_STORE_SEARCH_by_key_f...Shane Lontis
2020-09-12Fix coverity issue: CID 1466483 - Improper use of Negative value in dh_ctrl.cShane Lontis
2020-09-12Fix coverity issue: CID 1466484 - Remove dead code in PKCS7_dataInit()Shane Lontis
2020-09-12Fix coverity issue: CID 1466485 - Explicit NULL dereference in OSSL_STORE_find()Shane Lontis
2020-09-12Fix coverity issue: CID 1466486 - Resource leak in OSSL_STOREShane Lontis
2020-09-12OSSL_DECODER 'decode' function must never be NULL.Richard Levitte
2020-09-11check_chain_extensions(): Require X.509 v3 if extensions are presentDr. David von Oheimb
2020-09-11check_chain_extensions(): Change exclusion condition w.r.t. RFC 6818 section 2Dr. David von Oheimb
2020-09-11x509_vfy.c: Make sure that strict checks are not done for self-issued EE certsDr. David von Oheimb
2020-09-11check_chain_extensions(): Add check that CA cert includes key usage extensionDr. David von Oheimb
2020-09-11check_chain_extensions(): Add check that on empty Subject the SAN must be mar...Dr. David von Oheimb
2020-09-11check_chain_extensions(): Add check that AKID and SKID are not marked criticalDr. David von Oheimb
2020-09-11check_chain_extensions(): Add check that Basic Constraints of CA cert are mar...Dr. David von Oheimb
2020-09-11Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set...Dr. David von Oheimb
2020-09-10apps_ui.c: Correct password prompt for ui_methodDr. David von Oheimb
2020-09-10STORE: Fix OSSL_STORE_attach() to check |ui_method| before useRichard Levitte
2020-09-10X509_NAME_cmp: restrict normal return values to {-1,0,1} to avoid confusion w...Dr. David von Oheimb
2020-09-10X509_NAME_oneline(): Fix output of multi-valued RDNs, escaping '/' and '+' in...Dr. David von Oheimb
2020-09-10Fix an EVP_MD_CTX leakMatt Caswell
2020-09-10Diverse build.info: Adjust pathsRichard Levitte
2020-09-10bugfix in apps/cmp.c and cmp_client.c: inconsistencies on retrieving extraCer...Dr. David von Oheimb
2020-09-10bugfix in ossl_cmp_msg_protect(): set senderKID and extend extraCerts also fo...Dr. David von Oheimb
2020-09-10bugfix in ossl_cmp_msg_add_extraCerts(): should include cert chain when using...Dr. David von Oheimb
2020-09-10Clean up CMP chain building for CMP signer, TLS client, and newly enrolled certsDr. David von Oheimb
2020-09-09ENCODER: Refactor provider implementations, and some cleanupRichard Levitte
2020-09-09In a non-shared build, don't include the md5 object files in legacy providerPauli
2020-09-09legacy: include MD5 code in legacy providerPauli
2020-09-08Allow unauthenticated CMP server if missing -trusted, -srvcert, and -secret o...Dr. David von Oheimb
2020-09-08Add 4 new OIDs for PKIX key purposes and 3 new CMP information typesDr. David von Oheimb
2020-09-08PEM: Make PEM_write_bio_PrivateKey_traditional() handle provider-native keysRichard Levitte
2020-09-08Add CMS AuthEnvelopedData with AES-GCM supportJakub Zelenka
2020-09-08OSSL_HTTP_parse_url(): add optional port number return parameter and strength...Dr. David von Oheimb
2020-09-08EVP: Move the functions and controls for setting and getting distidRichard Levitte
2020-09-08EVP: Expand the use of EVP_PKEY_CTX_md()Richard Levitte
2020-09-08EVP: Add support for delayed EVP_PKEY operation parametersRichard Levitte
2020-09-08New GOST PKCS12 standard supportDmitry Belyavskiy
2020-09-08EVP: Don't shadow EVP_PKEY_CTX_new* error recordsRichard Levitte
2020-09-08EVP: Preserve the EVP_PKEY id in a few more spotsRichard Levitte
2020-09-07Fix memory leaks in conf_def.cluxinyou
2020-09-05Slightly abstract ktls_start() to reduce OS-specific #ifdefs.John Baldwin
2020-09-05Fix the socket BIO control methods to use ktls_crypto_info_t.John Baldwin
2020-09-05X509_STORE_CTX_print_verify_cb(): add AKID and SKID output for (non-)trusted ...Dr. David von Oheimb
2020-09-05OSSL_CMP_CTX: rename field and its getter/setter from 'untrusted_certs' to 'u...Dr. David von Oheimb
2020-09-05Strengthen chain building for CMPDr. David von Oheimb