aboutsummaryrefslogtreecommitdiff
path: root/crypto/x509/x509_vfy.c
AgeCommit message (Expand)AuthorFilesLines
2016-12-21Work around language and compiler bug in memcpy, etc.David Benjamin1-6/+6
2016-12-21Add |X509_STORE_set0_additional_untrusted|.Adam Langley1-2/+36
2016-09-26Add some sanity checks when checking CRL scores and testsSteven Valdez1-2/+2
2016-08-02Use newest CRL.David Benjamin1-6/+18
2016-07-26Remove OPENSSL_ALLOW_PROXY_CERTS.David Benjamin1-6/+0
2016-07-21Drop cached certificate signature validity flagDavid Benjamin1-5/+1
2016-06-09Ensure verify error is set when X509_verify_cert() fails.David Benjamin1-4/+31
2016-03-25Fix build when using Visual Studio 2015 Update 1.Brian Smith1-2/+1
2016-02-25Fix missing ok=0 with cert verification.Steven Valdez1-9/+12
2016-02-25Revert "Fix missing ok=0 with cert verification."David Benjamin1-9/+6
2016-02-25Fix missing ok=0 with cert verification.Steven Valdez1-6/+9
2016-01-19Import “altchains” support.Adam Langley1-71/+119
2016-01-19OpenSSL reformat x509/, x509v3/, pem/ and asn1/.Adam Langley1-2134/+2031
2015-12-22Reject calls to X509_verify_cert that have not been reinitialisedDavid Benjamin1-9/+13
2015-12-15Remove the CRYPTO_EX_new callback.David Benjamin1-13/+4
2015-11-12Become partially -Wmissing-variable-declarations-clean.David Benjamin1-1/+0
2015-10-27Fix all sign/unsigned warnings with Clang and GCC.Adam Langley1-1/+1
2015-09-01Add X509_CRL_up_ref.David Benjamin1-3/+3
2015-08-17Fix a couple other leaks on failure in X509_verify_cert.David Benjamin1-2/+2
2015-08-17Fix leak on malloc failure in X509_verify_cert.David Benjamin1-1/+2
2015-07-20Reserve ex_data index zero for app_data.David Benjamin1-1/+2
2015-07-16Remove the func parameter to OPENSSL_PUT_ERROR.David Benjamin1-19/+19
2015-06-16Fix length checks in X509_cmp_time to avoid out-of-bounds reads.David Benjamin1-7/+47
2015-05-20Convert reference counts in crypto/Adam Langley1-3/+3
2015-04-15Remove hash table lookups from ex_data.David Benjamin1-5/+12
2015-04-13Eliminate unnecessary includes from low-level crypto modules.Brian Smith1-0/+1
2015-04-13Enable MSVC warning C4701, use of potentially uninitialized variable.Brian Smith1-0/+3
2015-02-17Remove X509_get_pubkey_parameters.David Benjamin1-50/+1
2015-02-13Update API to use (char *) for email addresses and hostnames.Adam Langley1-3/+3
2015-02-13Set optional peername when X509_check_host() succeeds.Adam Langley1-1/+2
2015-02-13Multiple verifier reference identities.Adam Langley1-1/+16
2015-02-13X509_check_mumble() failure is <= 0, not just 0.Adam Langley1-3/+3
2015-02-13Drop hostlen from X509_VERIFY_PARAM_ID.Adam Langley1-2/+1
2015-02-02Remove string.h from base.h.Adam Langley1-0/+1
2015-01-06Fix a couple of minor compiler warnings.Adam Langley1-1/+1
2014-11-19Add malloc failure tests.Adam Langley1-38/+25
2014-11-10Extra return in check_issued.Adam Langley1-1/+0
2014-08-07Add X509_up_ref and use it internally.David Benjamin1-3/+3
2014-08-04Remove OPENSSL_NO_CHAIN_VERIFYAlex Chernyakhovsky1-4/+0
2014-06-20Fixes to host checking.Adam Langley1-1/+2
2014-06-20For self signed root only indicate one error.Adam Langley1-2/+5
2014-06-20Include TA in checks/callback with partial chains.Adam Langley1-1/+1
2014-06-20Add cert_self_signed function to simplify verify.Adam Langley1-4/+14
2014-06-20Simplify X509_STORE_CTX_get1_chain.Adam Langley1-10/+3
2014-06-20Inital import.Adam Langley1-0/+2457