Commits · 51e7a4378a78bb0870a2cdc5c524c230c929ebcb · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL

Dec 13, 2012
- New verify flag to return success if we have any certificate in the · 51e7a437
  Dr. Stephen Henson authored Dec 13, 2012
```
trusted store instead of the default which is to return an error if
we can't build the complete chain.
```
  51e7a437
- Document -pubkey. · 74cc3b58
  Ben Laurie authored Dec 13, 2012
  
  74cc3b58
Dec 12, 2012
- Improve my 64-bit debug target. · e7cf2b10
  Ben Laurie authored Dec 12, 2012
  
  e7cf2b10
- add -crl_download option to s_server · 60938ae7
  Dr. Stephen Henson authored Dec 12, 2012
  
  60938ae7
- add -cert_chain option to s_client · 4e71d952
  Dr. Stephen Henson authored Dec 12, 2012
  
  4e71d952
Dec 11, 2012
- Make openssl verify return errors. · fefc111a
  Ben Laurie authored Dec 11, 2012
  
  fefc111a
- Update ignores. · b204ab65
  Ben Laurie authored Dec 11, 2012
  
  b204ab65
Dec 10, 2012
- Tabification. Remove accidental duplication. · ec40e5ff
  Ben Laurie authored Dec 10, 2012
  
  ec40e5ff
- revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 instead · b34aa49c
  Dr. Stephen Henson authored Dec 10, 2012
  
  b34aa49c
Dec 09, 2012
- add -badsig option to ocsp utility too. · 1e8b9e7e
  Dr. Stephen Henson authored Dec 09, 2012
  
  1e8b9e7e
- allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY mode · d372d365
  Dr. Stephen Henson authored Dec 09, 2012
  
  d372d365
Dec 07, 2012
- send out the raw SSL/TLS headers to the msg_callback and display them in SSL_trace · 36b5bb6f
  Dr. Stephen Henson authored Dec 07, 2012
  
  36b5bb6f
- Fix OCSP checking. · 30c278aa
  Ben Laurie authored Dec 07, 2012
  
  30c278aa
- typo · 083bec78
  Dr. Stephen Henson authored Dec 07, 2012
  
  083bec78
- really fix automatic ;-) · 1edf8f1b
  Dr. Stephen Henson authored Dec 07, 2012
  
  1edf8f1b
Dec 06, 2012
- documentation fixes · 65f2a565
  Dr. Stephen Henson authored Dec 06, 2012
  
  65f2a565
- fix handling of "automatic" in file mode · f1f5c70a
  Dr. Stephen Henson authored Dec 06, 2012
  
  f1f5c70a
- Add code to download CRLs based on CRLDP extension. · 0090a686
  Dr. Stephen Henson authored Dec 06, 2012
```
Just a sample, real world applications would have to be cleverer.
```
  0090a686
- remove print_ssl_cert_checks() from openssl application: it is no longer used · f5a7d5b1
  Dr. Stephen Henson authored Dec 06, 2012
  
  f5a7d5b1
- Fix two bugs which affect delta CRL handling: · abd2ed01
  Dr. Stephen Henson authored Dec 06, 2012
```
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
```
  abd2ed01
Dec 05, 2012
- Integrate host, email and IP address checks into X509_verify. · 3bf15e29
  Dr. Stephen Henson authored Dec 05, 2012
```
Add new verify options to set checks.

Remove previous -check* commands from s_client and s_server.
```
  3bf15e29
- aes-s390x.pl: fix XTS bugs in z196-specific code path. · 8df400cf
  Andy Polyakov authored Dec 05, 2012
  
  8df400cf
Dec 04, 2012
- don't print verbose policy check messages when -quiet is selected even on error · fbeb85ec
  Dr. Stephen Henson authored Dec 04, 2012
  
  fbeb85ec
- ghash-sparcv9.pl: shave off one more xmulx, improve T3 performance by 7%. · 3766e7cc
  Andy Polyakov authored Dec 04, 2012
  
  3766e7cc
- initial support for delta CRL generations by diffing two full CRLs · 2e8cb108
  Dr. Stephen Henson authored Dec 04, 2012
  
  2e8cb108
- make -subj always override config file · 256f9573
  Dr. Stephen Henson authored Dec 04, 2012
  
  256f9573
- check mval for NULL too · b6b094fb
  Dr. Stephen Henson authored Dec 04, 2012
  
  b6b094fb
Dec 03, 2012
- fix leak · 0db46a7d
  Dr. Stephen Henson authored Dec 03, 2012
  
  0db46a7d
- oops, really check brief mode only ;-) · 2537d469
  Dr. Stephen Henson authored Dec 03, 2012
  
  2537d469
- don't check errno is zero, just print out message · 5447f836
  Dr. Stephen Henson authored Dec 03, 2012
  
  5447f836
- if no error code and -brief selected print out connection closed instead of read error · 66d9f2e5
  Dr. Stephen Henson authored Dec 03, 2012
  
  66d9f2e5
Dec 02, 2012
- add -badsig option to corrupt CRL signatures for testing too · 139cd16c
  Dr. Stephen Henson authored Dec 02, 2012
  
  139cd16c
- New option to add CRLs for s_client and s_server. · fdb78f3d
  Dr. Stephen Henson authored Dec 02, 2012
  
  fdb78f3d
- add option to get a certificate or CRL from a URL · 95ea5318
  Dr. Stephen Henson authored Dec 02, 2012
  
  95ea5318
Dec 01, 2012
- return error if Suite B mode is selected and TLS 1.2 can't be used. Correct error coded · 4842dde8
  Dr. Stephen Henson authored Dec 01, 2012
  
  4842dde8
- cryptlib.c: fix logical error. · f91926a2
  Andy Polyakov authored Dec 01, 2012
  
  f91926a2
- aesni-x86_64.pl: CTR face lift, +25% on Bulldozer. · 9282c335
  Andy Polyakov authored Dec 01, 2012
  
  9282c335
- aes-s390x.pl: harmonize software-only code path [and minor optimization]. · c3cddeae
  Andy Polyakov authored Dec 01, 2012
  
  c3cddeae
Nov 30, 2012
- Add new test option set the version in generated certificates: this · df316fd4
  Dr. Stephen Henson authored Nov 30, 2012
```
is needed to test some profiles/protocols which reject certificates
with unsupported versions.
```
  df316fd4
Nov 29, 2012

PR: 2803 · 2fceff5b

Dr. Stephen Henson authored Nov 29, 2012

Submitted by: jean-etienne.schwartz@bull.net

In OCSP_basic_varify return an error if X509_STORE_CTX_init fails.

2fceff5b