summaryrefslogtreecommitdiffstats
path: root/ssl/ssl_cert.c
AgeCommit message (Expand)Author
2015-01-22Run util/openssl-format-source -v -c .Matt Caswell
2014-11-27Remove redundant checks in ssl_cert_dup. This was causing spurious error mess...Matt Caswell
2014-08-28Custom extension revision.Dr. Stephen Henson
2014-08-28Revision of custom extension code.Dr. Stephen Henson
2014-06-10Remove experimental DANE code.Dr. Stephen Henson
2014-05-20Fix signed/unsigned warning.Ben Laurie
2014-04-21Fix SSL_CTX_get{first,next}_certificate.Kaspar Brand
2014-03-27Update chain building function.Dr. Stephen Henson
2014-03-25Allow duplicate certs in ssl_build_cert_chainEmilia Kasper
2014-02-23Only set current certificate to valid values.Dr. Stephen Henson
2014-02-23New chain building flags.Dr. Stephen Henson
2014-02-21ssl/ssl_cert.c: DANE update.Andy Polyakov
2014-02-08Add callbacks supporting generation and retrieval of supplemental data entrie...Scott Deboy
2014-02-02New ctrl to set current certificate.Dr. Stephen Henson
2013-11-13Allow match selecting of current certificate.Dr. Stephen Henson
2013-11-13Additional "chain_cert" functions.Rob Stradling
2013-07-31Cosmetic touchups.Trevor
2013-07-03Trying cherrypick:Trevor
2013-05-15RFC6689 support: add missing commit (git noob alert).Andy Polyakov
2012-12-26Add ctrl and utility functions to retrieve raw cipher list sent by client inDr. Stephen Henson
2012-12-26Add three Suite B modes to TLS code, supporting RFC6460.Dr. Stephen Henson
2012-12-26New function X509_chain_up_ref to dup and up the reference count ofDr. Stephen Henson
2012-12-26Make tls1_check_chain return a set of flags indicating checks passedDr. Stephen Henson
2012-12-26Add support for certificate stores in CERT structure. This makes itDr. Stephen Henson
2012-12-26Add new ctrl to retrieve client certificate types, print outDr. Stephen Henson
2012-12-26Separate client and server permitted signature algorithm support: by defaultDr. Stephen Henson
2012-12-26Add certificate callback. If set this is called whenever a certificateDr. Stephen Henson
2012-12-26Add new "valid_flags" field to CERT_PKEY structure which determines whatDr. Stephen Henson
2012-12-26Reorganise supported signature algorithm extension processing.Dr. Stephen Henson
2012-12-26Add support for application defined signature algorithms for use withDr. Stephen Henson
2012-12-26Make it possible to delete all certificates from an SSL structure.Dr. Stephen Henson
2012-06-27don't use pseudo digests for default values of keysDr. Stephen Henson
2012-05-29RFC 5878 support.Ben Laurie
2012-04-11use different variable for chain iterationDr. Stephen Henson
2012-04-06Add support for automatic ECDH temporary key parameter selection. WhenDr. Stephen Henson
2012-04-06New ctrls to retrieve supported signature algorithms and curves andDr. Stephen Henson
2012-04-06Add support for distinct certificate chains per key type and per SSLDr. Stephen Henson
2012-04-06Backport: code tidy (from HEAD)Dr. Stephen Henson
2012-04-06Backport: Revise ssl code to use CERT_PKEY structure when outputting a certif...Dr. Stephen Henson
2012-04-06Backport: tidy/enhance certificate chain output code (from HEAD)Dr. Stephen Henson
2011-05-11Backport TLS v1.2 support from HEAD.Dr. Stephen Henson
2010-03-24PR: 1731 and maybe 2197Dr. Stephen Henson
2009-06-30Redundant check: s->param is always non-NULL, it is set in SSL_new().Dr. Stephen Henson
2009-06-30Inherit parameters properly in SSL contexts: any parameters set shouldDr. Stephen Henson
2007-09-07Change safestack reimplementation to match 0.9.8.Dr. Stephen Henson
2007-02-17Reorganize the data used for SSL ciphersuite pattern matching.Bodo Möller
2006-06-14Thread-safety fixesBodo Möller
2006-02-24fix no-dh configure option; patch supplied by Peter MeerwaldNils Larsch
2005-08-08a ssl object needs it's own instance of a ecdh key; remove obsolete commentNils Larsch
2005-07-16makeNils Larsch
generated by cgit v1.2.3 (git 2.25.1) at 2024-07-12 05:59:47 +0000