aboutsummaryrefslogtreecommitdiff
path: root/src/crypto/x509.c
AgeCommit message (Expand)AuthorFilesLines
2012-07-20[legal] Update FSF mailing address in GPL licence textsMichael Brown1-1/+2
2012-07-09[arp] Try to avoid discarding ARP cache entriesMichael Brown1-1/+1
2012-06-20[crypto] Allow an error margin on X.509 certificate validity periodsMichael Brown1-2/+2
2012-05-22[crypto] Require OCSP check if certificate provides an OCSP URIMichael Brown1-0/+12
2012-05-21[crypto] Return a NULL X.509 certificate if construction failsMichael Brown1-0/+1
2012-05-15[crypto] Add framework for OCSPMichael Brown1-3/+3
2012-05-14[crypto] Parse OCSPSigning key purpose, if presentMichael Brown1-0/+8
2012-05-14[crypto] Generalise x509_parse_bit_string() to asn1_bit_string()Michael Brown1-93/+16
2012-05-14[crypto] Generalise asn1_{digest,pubkey,signature}_algorithm()Michael Brown1-66/+13
2012-05-14[crypto] Generalise x509_parse_time() to asn1_generalized_time()Michael Brown1-116/+10
2012-05-14[crypto] Parse X.509 raw public key bit stringMichael Brown1-2/+8
2012-05-09[crypto] Reduce standard debugging outputMichael Brown1-47/+49
2012-05-08[crypto] Add x509_auto_append()Michael Brown1-0/+66
2012-05-08[crypto] Add x509_append_raw()Michael Brown1-0/+32
2012-05-08[crypto] Check that common name contains no NUL charactersMichael Brown1-0/+9
2012-05-08[crypto] Allow for X.509 certificates with no common nameMichael Brown1-3/+3
2012-05-04[crypto] Allow certificate chains to be long-lived data structuresMichael Brown1-116/+362
2012-05-04[crypto] Parse OCSP responder URI from X.509 certificateMichael Brown1-6/+142
2012-03-22[crypto] Parse X.509 extended key usage extensionMichael Brown1-0/+85
2012-03-22[crypto] Differentiate "untrusted root" and "incomplete chain" error casesMichael Brown1-1/+13
2012-03-22[crypto] Shrink raw certificate data to fit certificateMichael Brown1-0/+1
2012-03-22[crypto] Add previous certificate in chain as a parameter to parse_next()Michael Brown1-4/+6
2012-03-22[crypto] Parse X.509 certificate serial numberMichael Brown1-2/+29
2012-03-22[crypto] Generalise X.509 OID-identified algorithm to asn1.cMichael Brown1-95/+28
2012-03-21[crypto] Validate path length constraint in certificate chainMichael Brown1-0/+14
2012-03-19[tls] Check certificate validity period against current date and timeMichael Brown1-7/+41
2012-03-19[tls] Parse X.509 validity times into seconds since the EpochMichael Brown1-12/+14
2012-03-19[tls] Add full X.509 certificate parsingMichael Brown1-23/+1156
2012-03-18[tls] Use iPXE native RSA algorithmMichael Brown1-142/+14
2012-03-18[crypto] Add more ASN.1 functions for X.509 certificate parsingMichael Brown1-1/+1
2012-03-09[crypto] Upgrade AES and RSA code to upstream axTLS version 1.4.5Michael Brown1-0/+10
2011-08-12[tls] Accept certificates without a version numberMichael Brown1-1/+1
2010-04-19[build] Rename gPXE to iPXEMichael Brown1-2/+2
2009-05-18[legal] Add a selection of FILE_LICENCE declarationsMichael Brown1-0/+2
2009-02-10[tls] Use our own ASN.1 routines for certificate parsingMichael Brown1-0/+181