- 25 Jul, 2016 30 commits
-
-
Richard Levitte authored
This adds the functions X509_set_proxy_pathlen(), which sets the internal pc path length cache for a given X509 structure, along with X509_get_proxy_pathlen(), which retrieves it. Along with the previously added X509_set_proxy_flag(), this provides the tools needed to manipulate all the information cached on proxy certificates, allowing external code to do what's necessary to have them verified correctly by the libcrypto code. Reviewed-by:Rich Salz <rsalz@openssl.org>
-
Richard Levitte authored
Since there are a number of function pointers in X509_STORE that might lead to user code, it makes sense for them to be able to lock the store while they do their work. Reviewed-by: -
Richard Levitte authored
Reviewed-by: -
Richard Levitte authored
Reviewed-by: -
Richard Levitte authored
Reviewed-by: -
Richard Levitte authored
We only add setters for X509_STORE function pointers except for the verify callback function. The thought is that the function pointers in X509_STORE_CTX are a cache for the X509_STORE functions. Therefore, it's preferable if the user makes the changes in X509_STORE before X509_STORE_CTX_init is called, and otherwise use the verify callback to override any results from OpenSSL's internal calculations. Reviewed-by: -
Steffen Nurpmeso authored
Reviewed-by:
Matt Caswell <matt@openssl.org> Signed-off-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Break two long messages. Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Old inactive inherited code, a code relic for sure. Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
X509_REVOKED_get0_extensions X509_check_private_key Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
- X509_NAME_entry_count, X509_ATTRIBUTE_count - X509_NAME_add_entry_by_OBJ, X509_NAME_ENTRY_create_by_OBJ, X509_NAME_ENTRY_set_object Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
Reviewed-by:
-
FdaSilvaYY authored
simplify and reindent some related code. Reviewed-by:
-
Matt Caswell authored
Misc fixes impacting no-tls1_2. Also fixes no-dtls1_2. Reviewed-by: -
Matt Caswell authored
Also fixes some other options like no-dgram and no-sock. Reviewed-by: -
Matt Caswell authored
Ensure that we don't build/run the ct fuzzing code if no-ct is used. Reviewed-by:
-
- 24 Jul, 2016 2 commits
-
-
Jakub Zelenka authored
Reviewed-by:
Tim Hudson <tjh@openssl.org> Reviewed-by:
-
Jakub Zelenka authored
Reviewed-by:
Richard Levitte <levitte@openssl.org> Reviewed-by:
-
- 23 Jul, 2016 3 commits
-
-
Richard Levitte authored
Reviewed-by: -
Richard Levitte authored
This adds the function X509_set_proxy_flag(), which sets the internal flag EXFLAG_PROXY on a given X509 structure. Reviewed-by: -
Richard Levitte authored
RT#4619 Reviewed-by:
-
- 22 Jul, 2016 5 commits
-
-
Dr. Stephen Henson authored
If two CRLs are equivalent then use the one with a later lastUpdate field: this will result in the newest CRL available being used. RT#4615 Reviewed-by: -
Dr. Stephen Henson authored
RT#4511 Reviewed-by: -
Dr. Stephen Henson authored
TS_OBJ_print_bio() misuses OBJ_txt2obj: it should print the result as a null terminated buffer. The length value returned is the total length the complete text reprsentation would need not the amount of data written. CVE-2016-2180 Thanks to Shi Lei for reporting this bug. Reviewed-by: -
Emilia Kasper authored
Don't emit duplicate server/client sections when they are identical. Instead, just point to the same section. Reviewed-by: -
Emilia Kasper authored
Undo review mistake: I changed the wrong strcmp in a previous pull request. Add test. Reviewed-by:
-
