openbsd/src/lib/libcrypto/x509, branch libressl-v2.3.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.3.2 2015-12-14T03:38:13+00:00 initialize ok to 0 2015-12-14T03:38:13+00:00 beck 2015-12-14T03:38:13+00:00 urn:sha1:545369100a8463914bf7c95aeeca1f420d169b55 ok guenther@ Stop supporing "legcay" time formats that OpenSSL supports. Rewrite the 2015-10-19T16:32:37+00:00 beck 2015-10-19T16:32:37+00:00 urn:sha1:6f20e3b7bc4e6801abfde111c397198fb23a59ec utctime and gentime wrappers accordingly. Along with some other cleanup. this also removes the need for timegm. ok bcook@ sthen@ jsing@ Convert a number of the old ASN1_{d2i,i2d}_{bio,fp}_of() macros to 2015-10-13T14:03:26+00:00 jsing 2015-10-13T14:03:26+00:00 urn:sha1:2c4986af365cae2c693ad8a02bcb6f1e4e6b80cb ASN1_item_{d2i,i2d}_{bio,fp}() function calls. ok beck@ doug@ Flense the greasy black guts of unreadble string parsing code out of three areas 2015-10-02T15:04:45+00:00 beck 2015-10-02T15:04:45+00:00 urn:sha1:0fdba47b730ef7a8d2107e42c5db7b2a3e008a8f in asn1 and x509 code, all dealing with an ASN1_TIME. This brings the parsing together in one function that converts into a struct tm. While we are at it this also brings us into conformance with RFC 5280 for times allowed in an X509 cert, as OpenSSL is very liberal with what it allows. input and fixes from deraadt@ jsing@ guethther@ and others. ok krw@, guenther@, jsing@ s/M_ASN1_TIME_free/ASN1_TIME_free/ 2015-09-30T17:49:59+00:00 jsing 2015-09-30T17:49:59+00:00 urn:sha1:40e8ba9c4d631b50c0d5d6298e3e88a1fc3b90a8 Replace M_ASN1_INTEGER_(new|free) with ASN1_INTEGER_(new|free) - this is 2015-09-30T17:30:16+00:00 jsing 2015-09-30T17:30:16+00:00 urn:sha1:56c28c591a2d58b6dda7237a4962fc6f6b0eca75 different from the macro expansion, but the result is the same. Also replace some ASN1_STRING_dup() with ASN1_INTEGER_dup(). ok beck@ doug@ Add support for disabling certificate and CRL validity checking. 2015-09-14T16:13:39+00:00 jsing 2015-09-14T16:13:39+00:00 urn:sha1:33cb993a8d2c13b5765b3a3f9538892658ae6665 Loosely based on changes in OpenSSL. ok beck@ Reorder functions for readability/consistency. 2015-09-13T15:59:30+00:00 jsing 2015-09-13T15:59:30+00:00 urn:sha1:e1e5c9f78b74257912dbabd424ccb6d6cf346746 Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generated 2015-07-29T14:58:34+00:00 jsing 2015-07-29T14:58:34+00:00 urn:sha1:2186614b2e5af6bbfcc1a9f8898ac11ea9c93faf assembly. ok bcook@ Now that it is safe to invoke X509_STORE_CTX_cleanup() if X509_STORE_CTX_init() 2015-07-19T05:42:55+00:00 miod 2015-07-19T05:42:55+00:00 urn:sha1:6b0eb980d3e214f7207eac97cd4b726560f55c02 fails, check its return value and correctly mop up after ourselves. ok beck@ doug@