aboutsummaryrefslogtreecommitdiff
path: root/apps/x509.c
AgeCommit message (Collapse)AuthorFilesLines
2007-09-26Support for certificate status TLS extension.Dr. Stephen Henson1-2/+9
2006-05-07Add support for default public key digest type ctrl.Dr. Stephen Henson1-30/+7
2006-04-19Remove link between digests and signature algorithms.Dr. Stephen Henson1-0/+2
Use cross reference table in ASN1_item_sign(), ASN1_item_verify() to eliminate the need for algorithm specific code.
2005-08-20Remove ASN1_METHOD code replace with new ASN1 alternative.Dr. Stephen Henson1-8/+7
2005-07-16makeNils Larsch1-0/+4
./configure no-deprecated [no-dsa] [no-dh] [no-ec] [no-rsa] make depend all test work again PR: 1159
2005-04-05some const fixesNils Larsch1-2/+2
2005-04-02use SHA-1 as the default digest for the apps/openssl commandsNils Larsch1-1/+1
2005-03-31Give everything prototypes (well, everything that's actually used).Ben Laurie1-2/+1
2004-12-05Use X509_cmp_time() in -checkend option, to support GeneralizedTime.Dr. Stephen Henson1-2/+2
2004-11-13Fix x509.c so it creates serial number file again if noDr. Stephen Henson1-2/+5
serial number is supplied on command line.
2004-05-12Make self signing option of 'x509' use random serial numbers too.Dr. Stephen Henson1-3/+7
2004-04-21New option to 'x509' -next_serial. This outputs the certificateDr. Stephen Henson1-1/+22
serial number plus 1 to the output file. Its purpose is to allow serial number files to be initialized when random serial numbers are used.
2004-04-21Use X509_get_serialNumber() instead of accessing internals in x509.cDr. Stephen Henson1-1/+2
2004-04-19header cleanup in apps/Geoff Thorpe1-0/+2
2003-12-27Use BUF_strlcpy() instead of strcpy().Richard Levitte1-6/+8
Use BUF_strlcat() instead of strcat(). Use BIO_snprintf() instead of sprintf(). In some cases, keep better track of buffer lengths. This is part of a large change submitted by Markus Friedl <markus@openbsd.org>
2003-09-21In order to get the expected self signed error whenDr. Stephen Henson1-1/+1
calling X509_verify_cert() in x509.c the cert should not be added to the trusted store.
2003-07-03Add -issuer_hash and make -subject_hash the default way to get theRichard Levitte1-6/+15
subject hash, with -hash a synonym kept around for backward compatibility reasons. PR: 650
2003-04-04Convert save_serial() to work like save_index(), and add aRichard Levitte1-1/+1
rotate_serial() that works like rotate_index().
2003-04-03Remove unused variable.Richard Levitte1-1/+0
2003-04-03Make it possible to have multiple active certificates with the sameRichard Levitte1-70/+8
subject.
2003-03-31No need to test -setalias twice.Richard Levitte1-6/+0
PR: 556
2003-01-30Add the possibility to build without the ENGINE framework.Richard Levitte1-0/+8
PR: 287
2002-12-03EXIT() may mean return(). That's confusing, so let's have it really meanRichard Levitte1-1/+1
exit() in whatever way works for the intended platform, and define OPENSSL_EXIT() to have the old meaning (the name is of course because it's only used in the openssl program)
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie1-3/+4
2002-11-11Variables on the stack must be initialized or we can't depend on anyRichard Levitte1-1/+1
initial value. For errline/errorline, we did depend on that, erroneously
2002-11-08-CAserial does take a filename argument.Richard Levitte1-1/+1
PR: 332
2002-08-12get rid of EVP_PKEY_ECDSA (now we have EVP_PKEY_EC instead)Bodo Möller1-3/+3
Submitted by: Nils Larsch
2002-08-01Make it possible to load keys from stdin, and restore thatRichard Levitte1-6/+7
functionality in the programs that had that before. Part fo PR 164
2002-07-29Only use DSA-functions if available.Lutz Jänicke1-1/+5
Submitted by: "Hellan,Kim KHE" <KHE@kmd.dk> Reviewed by: PR: 167
2002-05-30CAformat should not be used for CA key format.Richard Levitte1-1/+1
2002-02-22Config code updates.Dr. Stephen Henson1-0/+3
CONF_modules_unload() now calls CONF_modules_finish() automatically. Default use of section openssl_conf moved to CONF_modules_load() Load config file in several openssl utilities. Most utilities now load modules from the config file, though in a few (such as version) this isn't done because it couldn't be used for anything. In the case of ca and req the config file used is the same as the utility itself: that is the -config command line option can be used to specify an alternative file.
2002-02-13ECDSA supportBodo Möller1-0/+10
Submitted by: Nils Larsch <nla@trustcenter.de>
2001-09-12Reduce the header dependencies on engine.h in apps/.Geoff Thorpe1-1/+0
2001-09-01Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe1-1/+5
See the commit log message for that for more information. NB: X509_STORE_CTX's use of "ex_data" support was actually misimplemented (initialisation by "memset" won't/can't/doesn't work). This fixes that but requires that X509_STORE_CTX_init() be able to handle errors - so its prototype has been changed to return 'int' rather than 'void'. All uses of that function throughout the source code have been tracked down and adjusted.
2001-06-28Modify apps to use NCONF code instead of old CONF code.Dr. Stephen Henson1-14/+15
Add new extension functions which work with NCONF. Tidy up extension config routines and remove redundant code. Fix NCONF_get_number(). Todo: more testing of apps to see they still work...
2001-06-23Use apps_shutdown() in all applications, in case someone decides notRichard Levitte1-0/+1
to go the monolith way (does anyone do that these days?). NOTE: a few applications are missing in this commit. I've a few more changes in them that I haven't tested yet.
2001-06-18Provide an application-common setup function for engines and use itRichard Levitte1-17/+1
everywhere.
2001-05-30Extend all the loading functions to take an engine pointer, a passRichard Levitte1-5/+7
string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
2001-03-08Bugfix: previously the serial number file could turn negativeBodo Möller1-8/+10
because an incompletely initialized ASN1_INTEGER was used.
2001-02-20Use new-style system-id macros everywhere possible. I hope I haven'tRichard Levitte1-2/+2
missed any. This compiles and runs on Linux, and external applications have no problems with it. The definite test will be to build this on VMS.
2001-02-20Fix warning.Ulf Möller1-1/+1
2001-02-19Make all configuration macros available for application by makingRichard Levitte1-5/+5
sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
2001-02-19New -set_serial options to 'req' and 'x509'.Dr. Stephen Henson1-26/+53
Remove the old broken bio read of serial numbers in the 'ca' index file. This would choke if a revoked certificate was specified with a negative serial number. Fix typo in uid.c
2001-02-06format stringsUlf Möller1-1/+1
2000-12-15If CONF_get_string returns NULL and we want to tolerate thisBodo Möller1-2/+9
(e.g., use a default), we have to call ERR_clear_error().
2000-10-28Add the possibility to use keys handled by engines in moreRichard Levitte1-3/+4
applications.
2000-10-27The majority of the OCSP code from CertCo.Richard Levitte1-0/+8
2000-10-26Merge the engine branch into the main trunk. All conflicts resolved.Richard Levitte1-0/+27
At the same time, add VMS support for Rijndael.
2000-10-06More code for X509_print_ex() support.Dr. Stephen Henson1-2/+8
2000-09-20On VMS, stdout may very well lead to a file that is written to in aRichard Levitte1-2/+16
record-oriented fashion. That means that every write() will write a separate record, which will be read separately by the programs trying to read from it. This can be very confusing. The solution is to put a BIO filter in the way that will buffer text until a linefeed is reached, and then write everything a line at a time, so every record written will be an actual line, not chunks of lines and not (usually doesn't happen, but I've seen it once) several lines in one record. Voila, BIO_f_linebuffer() is born. Since we're so close to release time, I'm making this VMS-only for now, just to make sure no code is needlessly broken by this. After the release, this BIO method will be enabled on all other platforms as well.
generated by cgit v1.1 at 2024-09-15 07:03:23 +0000