aboutsummaryrefslogtreecommitdiff
path: root/apps/ca.c
AgeCommit message (Collapse)AuthorFilesLines
2010-03-14free up sigopts STACKDr. Stephen Henson1-0/+2
2010-03-14clear bogus errors in ca utilityDr. Stephen Henson1-0/+1
2010-03-14add -sigopt option to ca utilityDr. Stephen Henson1-20/+42
2009-12-02Replace the broken SPKAC certification with the correct version.Dr. Stephen Henson1-34/+2
2009-10-04Fix warnings about ignoring fgets return valueDr. Stephen Henson1-2/+12
2009-09-02PR: 2013Dr. Stephen Henson1-1/+6
Submitted by: steve@openssl.org Include a flag ASN1_STRING_FLAG_MSTRING when a multi string type is created. This makes it possible to tell if the underlying type is UTCTime, GeneralizedTime or Time when the structure is reused and X509_time_adj_ex() can handle each case in an appropriate manner. Add error checking to CRL generation in ca utility when nextUpdate is being set.
2009-07-27Update from 1.0.0-stableDr. Stephen Henson1-11/+11
2009-03-09PR: 1854Dr. Stephen Henson1-13/+8
Submitted by: Oliver Martin <oliver@volatilevoid.net> Reviewed by: steve@openssl.org Support GeneralizedTime in ca utility.
2008-12-22Incidentally http://cvs.openssl.org/chngview?cn=17710 also made it possibleAndy Polyakov1-0/+4
to build the library without -D_CRT_NONSTDC_NO_DEPRECATE. This commit expands it even to apps catalog and actually omits the macro in question from Configure.
2008-10-07Experimental new date handling routines. These fix issues with X509_time_adj()Dr. Stephen Henson1-2/+2
and should avoid any OS date limitations such as the year 2038 bug.
2008-06-04More type-checking.Ben Laurie1-10/+13
2008-06-02Avoid case in ca.c fix.Dr. Stephen Henson1-1/+1
2008-06-02Revert, doesn't fix warning :-(Dr. Stephen Henson1-4/+1
2008-06-02Avoid cast with wrapper function.Dr. Stephen Henson1-1/+4
2008-05-31Stop const mismatch warning.Dr. Stephen Henson1-1/+1
2008-05-26LHASH revamp. make depend.Ben Laurie1-4/+8
2008-03-16Fix some warnings.Dr. Stephen Henson1-2/+2
2007-04-04Return an error if the serial number is badly formed. (Coverity ID 116).Ben Laurie1-0/+2
2006-11-27Add RFC 3779 support.Ben Laurie1-0/+1
2006-07-25Support for multiple CRLs with same issuer name in X509_STORE. ModifyDr. Stephen Henson1-3/+16
verify logic to try to use an unexpired CRL if possible.
2006-05-07Add support for default public key digest type ctrl.Dr. Stephen Henson1-25/+11
2006-04-19Remove link between digests and signature algorithms.Dr. Stephen Henson1-0/+2
Use cross reference table in ASN1_item_sign(), ASN1_item_verify() to eliminate the need for algorithm specific code.
2005-11-04Eliminate dependency on read/write/stat in apps under _WIN32.Andy Polyakov1-11/+1
2005-09-30successfully updating the db shouldn't result in an error messageNils Larsch1-1/+0
2005-07-04Update from stable branch.Dr. Stephen Henson1-16/+40
2005-04-15const fixesNils Larsch1-5/+5
2005-04-05some const fixesNils Larsch1-11/+13
2004-11-11Use the default_md config file value when signing CRLs.Dr. Stephen Henson1-29/+18
PR:662
2004-08-06Call setup_engine after autoconfig.Dr. Stephen Henson1-4/+4
2004-04-20Reduce chances of issuer and serial number duplication by use of randomDr. Stephen Henson1-1/+4
initial serial numbers. PR: 842
2004-04-15Clear error if unique_subject lookup fails.Dr. Stephen Henson1-1/+3
2003-12-27Use BUF_strlcpy() instead of strcpy().Richard Levitte1-16/+23
Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-11-28Move another common functionality (reproduced so far with cut'n'paste)Richard Levitte1-17/+3
to apps.c, and give it the hopefully descriptive name parse_yesno().
2003-11-28Move do_subject() to apps.c and rename it to parse_name(). TheRichard Levitte1-137/+1
rationale behind the move is that it's use by several applications. The rationale behind the name change is that it describes what the function does a bit better.
2003-11-28Allow multi-valued rdns in subjects. This adds the -multivalue-rdn optionRichard Levitte1-17/+35
to 'openssl req' and 'openssl ca'. PR: 779 Submitted by: Michael Bell <michael.bell@cms.hu-berlin.de> Reviewed by: Richard Levitte (there will be some follow-up changes)
2003-11-28Netware-specific changes,Richard Levitte1-1/+1
PR: 780 Submitted by: Verdon Walker <VWalker@novell.com> Reviewed by: Richard Levitte
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe1-1/+2
I have tried to convert 'len' type variable declarations to unsigned as a means to address these warnings when appropriate, but when in doubt I have used casts in the comparisons instead. The better solution (that would get us all lynched by API users) would be to go through and convert all the function prototypes and structure definitions to use unsigned variables except when signed is necessary. The proliferation of (signed) "int" for strictly non-negative uses is unfortunate.
2003-09-09Generalise the definition of strcasecmp() and strncasecmp() forRichard Levitte1-10/+0
platforms that don't (necessarely) have it. In the case of VMS, this means moving a couple of functions from apps/ to crypto/ and make them general (although only used privately).
2003-06-19Implement CRL numbers.Richard Levitte1-4/+32
Contributed in whole by Laurent Genier <Laurent.Genier@intrinsec.com> PR: 644
2003-04-04Convert save_serial() to work like save_index(), and add aRichard Levitte1-43/+2
rotate_serial() that works like rotate_index().
2003-04-04Add documentation on the added functionality in 'openssl ca'.Richard Levitte1-0/+1
2003-04-03Correct a lot of printing calls. Remove extra arguments...Richard Levitte1-1/+1
2003-04-03Implement self-signing in 'openssl ca'. This makes it easier to haveRichard Levitte1-31/+59
the CA certificate part of the CA database, and combined with 'unique_subject=no', it should make operations like CA certificate roll-over easier.
2003-04-03Reset the version number of the issuer certificate? I believe thisRichard Levitte1-1/+1
hasn't been tested in a long while...
2003-04-03Conditionalise all debug strings.Richard Levitte1-0/+6
2003-04-03Make it possible to have multiple active certificates with the sameRichard Levitte1-341/+84
subject.
2003-01-30Add the possibility to build without the ENGINE framework.Richard Levitte1-0/+8
PR: 287
2003-01-30cert_sk isn't always allocated, so freeing it may cause a crash.Richard Levitte1-1/+2
PR: 481
2003-01-09Typo.Dr. Stephen Henson1-1/+1
2003-01-09NULL tofree when it is freed to avoid double free.Dr. Stephen Henson1-1/+4
Make sure key is not NULL before freeing it.