openbsd/src/lib/libcrypto/x509, branch libressl-v2.6.5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.6.5 2017-08-27T01:39:26+00:00 Make the symbol for ASN1_time_tm_clamp_notafter visible so libtls 2017-08-27T01:39:26+00:00 beck 2017-08-27T01:39:26+00:00 urn:sha1:6c9bbaf00dfc219bed78108aaeebd92eed0c33ee can get at it, so libtls can also deal with notafter's past the realm of 32 bit time in portable Add ability to clamp a notafter to values representable in a 32 bit time_t 2017-08-13T19:47:49+00:00 beck 2017-08-13T19:47:49+00:00 urn:sha1:e7c9763a13ea6facc9ad918414f3bfa878788640 This will only be used in portable. As noted, necessary to make us conformant to RFC 5280 4.1.2.5. ok jsing@ bcook@ Revert previous change that forced consistency between return value and 2017-04-28T23:03:58+00:00 beck 2017-04-28T23:03:58+00:00 urn:sha1:0c57456f9f2117b8c7693bf23610ec60000f181a error code, since this breaks the documented API. Under certain circumstances this will result in incorrect successful certiticate verification (where a user supplied callback always returns 1, and later code checks the error code to potentially abort post verification) revert previous accidental commit 2017-04-28T22:46:40+00:00 beck 2017-04-28T22:46:40+00:00 urn:sha1:1a022d2b7f958fffe8e920e5510d226f01a2b3d0 *** empty log message *** 2017-04-28T22:38:51+00:00 beck 2017-04-28T22:38:51+00:00 urn:sha1:f3ff740b7de3b8362cbe53c139cf85019ce7378c Kill leak introduced with refactor 2017-02-05T02:33:21+00:00 beck 2017-02-05T02:33:21+00:00 urn:sha1:f71ca67a0db026e4122227bdfb78b501c3959263 ok jsing@ Send the function codes from the error functions to the bit bucket, 2017-01-29T17:49:23+00:00 beck 2017-01-29T17:49:23+00:00 urn:sha1:d1f47bd292f36094480caa49ada36b99a69c59b0 as was done earlier in libssl. Thanks inoguchi@ for noticing libssl had more reacharounds into this. ok jsing@ inoguchi@ fix bogus comment 2017-01-21T01:09:54+00:00 beck 2017-01-21T01:09:54+00:00 urn:sha1:d89d1ebb99d29f9fd1375b97b984e7093cf083db ok jsing@ Make return value of X509_verify_cert be consistent with the error code, 2017-01-21T01:07:25+00:00 beck 2017-01-21T01:07:25+00:00 urn:sha1:ba0fcad847ab1c8a18e417694f580450cb73ce38 with the caveat that we force V_OK when a user provided callback has us returning success. ok inoguchi@ jsing@ Rework internal_verify, mostly from OpenSSL. so we can progress 2017-01-20T00:37:40+00:00 beck 2017-01-20T00:37:40+00:00 urn:sha1:c3138c510097b9e2e5fa6d7ddbe246a9ad9c517b towards cleaning up the V_OK stuff. ok kinichiro@