aboutsummaryrefslogtreecommitdiff
path: root/crypto/x509v3/v3_purp.c
AgeCommit message (Expand)AuthorFilesLines
2008-08-29Add support for CRLs partitioned by reason code.Dr. Stephen Henson1-0/+10
2008-08-12Support for policy mappings extension.Dr. Stephen Henson1-0/+1
2008-08-08Initial support for name constraints certificate extension.Dr. Stephen Henson1-0/+5
2008-08-04Add support for nameRelativeToCRLIssuer field in distribution point nameDr. Stephen Henson1-2/+33
2008-07-13We support inhibit any policy extension, add to table.Dr. Stephen Henson1-1/+2
2008-07-13X509 verification fixes.Dr. Stephen Henson1-1/+2
2006-12-18fix orderNils Larsch1-1/+1
2006-12-06Fix change to OPENSSL_NO_RFC3779Dr. Stephen Henson1-2/+2
2006-11-27Add RFC 3779 support.Ben Laurie1-0/+10
2006-09-14Support for AKID in CRLs and partial support for IDP. Overhaul of CRLDr. Stephen Henson1-32/+49
2006-07-24Cache some CRL related extensions.Dr. Stephen Henson1-0/+1
2006-02-12RFC 3161 compliant time stamp request creation, response generationUlf Möller1-0/+37
2005-04-09Added restrictions on the use of proxy certificates, as they may poseRichard Levitte1-1/+3
2004-12-28Add functionality needed to process proxy certificates.Richard Levitte1-2/+22
2004-12-03V1 certificates that aren't self signed can't be accepted as CAs.Dr. Stephen Henson1-2/+0
2004-11-30Split X509_check_ca() into a small self and an internal functionRichard Levitte1-11/+16
2004-11-29Make an explicit check during certificate validation to see that theRichard Levitte1-27/+23
2004-03-05Various X509 fixes. Disable broken certificate workaroundsDr. Stephen Henson1-2/+3
2003-10-29A general spring-cleaning (in autumn) to fix up signed/unsigned warnings.Geoff Thorpe1-2/+2
2003-01-29DVCS (see RFC 3029) was missing among the possible purposes.Richard Levitte1-0/+4
2002-01-27Undo previous change, X509_check_issued() was correct.Bodo Möller1-1/+1
2002-01-26Apply a small patch from Diego R. Lopez <diego.lopez@rediris.es>,Richard Levitte1-1/+1
2001-10-21Reject certificates with unhandled critical extensions.Dr. Stephen Henson1-2/+52
2001-05-10Purpose and trust setting functions for X509_STORE.Dr. Stephen Henson1-0/+10
2001-02-19Make all configuration macros available for application by makingRichard Levitte1-1/+1
2001-02-01Tolerate some "variations" used in someDr. Stephen Henson1-2/+4
2001-01-17Initial OCSP certificate verify. Not complete,Dr. Stephen Henson1-2/+32
2000-12-08Merge from the ASN1 branch of new ASN1 codeDr. Stephen Henson1-2/+2
2000-09-05*BIG* verify code reorganisation.Dr. Stephen Henson1-2/+63
2000-06-01There have been a number of complaints from a number of sources that namesRichard Levitte1-7/+7
2000-06-01The previous commit to crypto/stack/*.[ch] pulled the type-safety stringsGeoff Thorpe1-25/+30
2000-05-04Fix for SSL server purpose checkingDr. Stephen Henson1-14/+18
2000-03-07New compatability trust and purpose settings.Dr. Stephen Henson1-1/+8
2000-02-26More get0 et al. changes. Also provide fgrep targets in CHANGESBodo Möller1-4/+4
2000-02-26Rename functions for new convention.Dr. Stephen Henson1-2/+2
2000-02-07Rename the X509V3_*_d2i functions to X509_get_ext_d2i() etc.Dr. Stephen Henson1-4/+4
2000-01-21Some more ifdefs for no-xxx options.Ulf Möller1-0/+2
1999-12-03Fix a bug in the modified purpose code: it wasn't updated to use theDr. Stephen Henson1-1/+1
1999-12-02Change the trust and purpose code so it doesn't need initDr. Stephen Henson1-28/+63
1999-11-29Add part of chain verify SSL support code: not complete or doing anythingDr. Stephen Henson1-15/+15
1999-11-27Add trust setting support to the verify code. It now checks theDr. Stephen Henson1-1/+1
1999-11-26New options to the -verify program which can be used for chain verification.Dr. Stephen Henson1-30/+50
1999-11-16New function X509_cmp().Dr. Stephen Henson1-1/+3
1999-11-04Allow additional information to be attached to aDr. Stephen Henson1-3/+3
1999-10-25Improve support for running everything as a monolithic application.Bodo Möller1-11/+42
1999-10-13Initial support for certificate purpose checking: this willDr. Stephen Henson1-0/+366