aboutsummaryrefslogtreecommitdiff
path: root/crypto/x509
AgeCommit message (Expand)AuthorFilesLines
2016-02-05Ensure correct chain depth for policy checks with DANE bare key TAViktor Dukhovni1-0/+19
2016-02-05Long overdue cleanup of X509 policy tree verificationViktor Dukhovni1-3/+7
2016-02-01unified build scheme: add build.info filesRichard Levitte1-0/+10
2016-01-31Compat self-signed trust with reject-only aux dataViktor Dukhovni2-29/+50
2016-01-31Check chain extensions also for trusted certificatesViktor Dukhovni3-44/+99
2016-01-30Add function to return internal enoding of X509_NAME.Dr. Stephen Henson1-0/+13
2016-01-29Templatize util/domdRich Salz1-2/+1
2016-01-29Make it possible to check for explicit auxiliary trustViktor Dukhovni1-1/+1
2016-01-27Comment side-effect only calls of X509_check_purposeViktor Dukhovni1-0/+1
2016-01-26Remove /* foo.c */ commentsRich Salz35-35/+0
2016-01-20Reject when explicit trust EKU are set and none match.Viktor Dukhovni1-0/+15
2016-01-20Check Suite-B constraints with EE DANE recordsViktor Dukhovni2-28/+46
2016-01-20Remove update tagsRich Salz1-2/+0
2016-01-20make EVP_PKEY opaqueDr. Stephen Henson3-5/+5
2016-01-18Drop cached certificate signature validity flagViktor Dukhovni2-6/+1
2016-01-17Remove some old makefile targetsRich Salz1-12/+0
2016-01-16Empty SNI names are not validViktor Dukhovni1-2/+2
2016-01-15Add lookup_certs for a trusted stack.Dr. Stephen Henson1-0/+21
2016-01-14Cosmetic polish for last-resort depth 0 checkViktor Dukhovni1-5/+5
2016-01-14Fix last-resort depth 0 check when the chain has multiple certificatesViktor Dukhovni1-4/+9
2016-01-14Always initialize X509_STORE_CTX get_crl pointerViktor Dukhovni1-0/+2
2016-01-12Move Makefiles to Makefile.inRich Salz2-587/+75
2016-01-12make updateRichard Levitte1-303/+364
2016-01-07mem functions cleanupRich Salz1-9/+10
2016-01-07DANE support for X509_verify_cert()Viktor Dukhovni2-9/+401
2016-01-07Only declare stacks in headersDr. Stephen Henson3-10/+13
2016-01-07Rename DECLARE*STACK_OF to DEFINE*STACK_OFDr. Stephen Henson2-3/+3
2016-01-05DANE support structures, constructructors and accessorsViktor Dukhovni2-0/+25
2016-01-03Fix X509_STORE_CTX_cleanup()Viktor Dukhovni1-17/+21
2016-01-03Drop incorrect id == -1 case from X509_check_trustViktor Dukhovni1-2/+1
2016-01-03X509_verify_cert() cleanupViktor Dukhovni2-343/+397
2015-12-31Use X509_get0_pubkey where appropriateDr. Stephen Henson3-6/+3
2015-12-16Rename some BUF_xxx to OPENSSL_xxxRich Salz2-5/+5
2015-12-14New function X509_get0_pubkeyDr. Stephen Henson4-24/+18
2015-12-09make updateDr. Stephen Henson1-50/+16
2015-12-07Cleanup: fix all sources that used EVP_MD_CTX_(create|init|destroy)Richard Levitte1-4/+4
2015-12-07Adjust all accesses to EVP_MD_CTX to use accessor functions.Richard Levitte1-14/+17
2015-12-01ex_data part 2: doc fixes and CRYPTO_free_ex_index.Rich Salz2-20/+0
2015-11-26Remove X509_VERIFY_PARAM_IDDr. Stephen Henson3-73/+49
2015-11-24Remove useless locking codeAlessandro Ghedini1-2/+0
2015-11-23Fix a few missed "if (!ptr)" cleanupsRich Salz1-3/+2
2015-11-23Patch containing TLS implementation for GOST 2012Dmitry Belyavsky1-0/+2
2015-11-17make updateRichard Levitte1-1/+1
2015-11-14Use accessors for X509_print_ex().Dr. Stephen Henson3-148/+85
2015-11-14Add new X509 accessorsDr. Stephen Henson2-0/+37
2015-11-09Continue standardising malloc style for libcryptoMatt Caswell7-23/+28
2015-11-05Rebuild error source files.Dr. Stephen Henson1-6/+6
2015-10-23Remove useless codeAlessandro Ghedini2-3/+0
2015-10-15embed CRL serial number and signature fieldsDr. Stephen Henson4-21/+16
2015-10-15embed certificate serial number and signature fieldsDr. Stephen Henson5-22/+18