Commits · 92821996de4a381635f5d048345c3b0f8fe9a30b · CYBER - Cyber Security / TS 103 523 MSP / TLMSP / TLMSP OpenSSL · GitLab

Dec 14, 2012
- oops, revert, committed in error · 92821996
  Dr. Stephen Henson authored Dec 14, 2012
  
  92821996
- apps/ocsp.c · 11e2957d
  Dr. Stephen Henson authored Dec 14, 2012
  
  11e2957d
- Documentation improvements by Chris Palmer (Google). · 3a778a29
  Ben Laurie authored Dec 14, 2012
  
  3a778a29
Dec 13, 2012
- fips/fipsld: improve cross-compile support. · 4d265478
  Andy Polyakov authored Dec 13, 2012
  
  4d265478
- Use new partial chain flag instead of modifying input parameters. · 2a21cdbe
  Dr. Stephen Henson authored Dec 13, 2012
  
  2a21cdbe
- New verify flag to return success if we have any certificate in the · 51e7a437
  Dr. Stephen Henson authored Dec 13, 2012
```
trusted store instead of the default which is to return an error if
we can't build the complete chain.
```
  51e7a437
- Document -pubkey. · 74cc3b58
  Ben Laurie authored Dec 13, 2012
  
  74cc3b58
Dec 12, 2012
- Improve my 64-bit debug target. · e7cf2b10
  Ben Laurie authored Dec 12, 2012
  
  e7cf2b10
- add -crl_download option to s_server · 60938ae7
  Dr. Stephen Henson authored Dec 12, 2012
  
  60938ae7
- add -cert_chain option to s_client · 4e71d952
  Dr. Stephen Henson authored Dec 12, 2012
  
  4e71d952
Dec 11, 2012
- Make openssl verify return errors. · fefc111a
  Ben Laurie authored Dec 11, 2012
  
  fefc111a
- Update ignores. · b204ab65
  Ben Laurie authored Dec 11, 2012
  
  b204ab65
Dec 10, 2012
- Tabification. Remove accidental duplication. · ec40e5ff
  Ben Laurie authored Dec 10, 2012
  
  ec40e5ff
- revert SUITEB128ONLY patch, anything wanting to use P-384 can use SUITEB128 instead · b34aa49c
  Dr. Stephen Henson authored Dec 10, 2012
  
  b34aa49c
Dec 09, 2012
- add -badsig option to ocsp utility too. · 1e8b9e7e
  Dr. Stephen Henson authored Dec 09, 2012
  
  1e8b9e7e
- allow ECDSA+SHA384 signature algorithm in SUITEB128ONLY mode · d372d365
  Dr. Stephen Henson authored Dec 09, 2012
  
  d372d365
Dec 07, 2012
- send out the raw SSL/TLS headers to the msg_callback and display them in SSL_trace · 36b5bb6f
  Dr. Stephen Henson authored Dec 07, 2012
  
  36b5bb6f
- Fix OCSP checking. · 30c278aa
  Ben Laurie authored Dec 07, 2012
  
  30c278aa
- typo · 083bec78
  Dr. Stephen Henson authored Dec 07, 2012
  
  083bec78
- really fix automatic ;-) · 1edf8f1b
  Dr. Stephen Henson authored Dec 07, 2012
  
  1edf8f1b
Dec 06, 2012
- documentation fixes · 65f2a565
  Dr. Stephen Henson authored Dec 06, 2012
  
  65f2a565
- fix handling of "automatic" in file mode · f1f5c70a
  Dr. Stephen Henson authored Dec 06, 2012
  
  f1f5c70a
- Add code to download CRLs based on CRLDP extension. · 0090a686
  Dr. Stephen Henson authored Dec 06, 2012
```
Just a sample, real world applications would have to be cleverer.
```
  0090a686
- remove print_ssl_cert_checks() from openssl application: it is no longer used · f5a7d5b1
  Dr. Stephen Henson authored Dec 06, 2012
  
  f5a7d5b1
- Fix two bugs which affect delta CRL handling: · abd2ed01
  Dr. Stephen Henson authored Dec 06, 2012
```
Use -1 to check all extensions in CRLs.
Always set flag for freshest CRL.
```
  abd2ed01
Dec 05, 2012
- Integrate host, email and IP address checks into X509_verify. · 3bf15e29
  Dr. Stephen Henson authored Dec 05, 2012
```
Add new verify options to set checks.

Remove previous -check* commands from s_client and s_server.
```
  3bf15e29
- aes-s390x.pl: fix XTS bugs in z196-specific code path. · 8df400cf
  Andy Polyakov authored Dec 05, 2012
  
  8df400cf
Dec 04, 2012
- don't print verbose policy check messages when -quiet is selected even on error · fbeb85ec
  Dr. Stephen Henson authored Dec 04, 2012
  
  fbeb85ec
- ghash-sparcv9.pl: shave off one more xmulx, improve T3 performance by 7%. · 3766e7cc
  Andy Polyakov authored Dec 04, 2012
  
  3766e7cc
- initial support for delta CRL generations by diffing two full CRLs · 2e8cb108
  Dr. Stephen Henson authored Dec 04, 2012
  
  2e8cb108
- make -subj always override config file · 256f9573
  Dr. Stephen Henson authored Dec 04, 2012
  
  256f9573
- check mval for NULL too · b6b094fb
  Dr. Stephen Henson authored Dec 04, 2012
  
  b6b094fb
Dec 03, 2012
- fix leak · 0db46a7d
  Dr. Stephen Henson authored Dec 03, 2012
  
  0db46a7d
- oops, really check brief mode only ;-) · 2537d469
  Dr. Stephen Henson authored Dec 03, 2012
  
  2537d469
- don't check errno is zero, just print out message · 5447f836
  Dr. Stephen Henson authored Dec 03, 2012
  
  5447f836
- if no error code and -brief selected print out connection closed instead of read error · 66d9f2e5
  Dr. Stephen Henson authored Dec 03, 2012
  
  66d9f2e5
Dec 02, 2012
- add -badsig option to corrupt CRL signatures for testing too · 139cd16c
  Dr. Stephen Henson authored Dec 02, 2012
  
  139cd16c
- New option to add CRLs for s_client and s_server. · fdb78f3d
  Dr. Stephen Henson authored Dec 02, 2012
  
  fdb78f3d
- add option to get a certificate or CRL from a URL · 95ea5318
  Dr. Stephen Henson authored Dec 02, 2012
  
  95ea5318
Dec 01, 2012
- return error if Suite B mode is selected and TLS 1.2 can't be used. Correct error coded · 4842dde8
  Dr. Stephen Henson authored Dec 01, 2012
  
  4842dde8