openbsd/src/lib/libcrypto/ocsp, branch libressl-v2.4.3

This commit was manufactured by cvs2git to create branch 'OPENBSD_6_0'.

2016-07-23T19:31:37+00:00

Clean up OCSP_check_validity() a bit more.

2016-07-16T16:14:28+00:00

- Return on first failure rather than continuing. - Don't compare times by comparing strings that possibly were not parsable as a time. ok deraadt@

remove unneeded duplicate call - spotted by jsing@

2016-07-05T03:24:38+00:00

Add several fixes from OpenSSL to make OCSP work with intermediate

2016-07-05T00:21:47+00:00

certificates provided in the response. - makes our newly added ocsp regress test pass too.. ok bcook@

Fix from kinichiro.inoguchi@gmail.com to ensure that OCSP uses

2016-06-25T16:10:26+00:00

Generalized Time on requests as per RFC6960

Fix the ocsp code to actually check for errors when comparing time values

2016-06-25T15:38:44+00:00

which was not being done due to a lack of checking of the return code for X509_cmp_time. Ensure that we only compare GERNERALIZEDTIME values because this is what is specified by RFC6960. Issue reported, and fix provided by Kazuki Yamaguchi ok bcook@

Use ASN1_item_dup() instead of ASN1_dup().

2015-09-26T17:38:41+00:00

ok bcook@

Expand ASN.1 template macros - no change in generated assembly.

2015-07-25T14:52:47+00:00

Drop stupid (int) casts for the arguments of malloc() and friends. This is

2015-07-19T18:29:31+00:00

not 16-bit MS-DOS anymore. ok bcook@ tedu@

Check return value of all used functions in OCSP_REQUEST_print(); covers

2015-07-16T02:16:19+00:00

Coverity CID 78796; ok beck@