openbsd/src/lib/libtls/tls_verify.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2018-02-05T00:52:24+00:00 Be consistent with the goto label names used in libtls code. 2018-02-05T00:52:24+00:00 jsing 2018-02-05T00:52:24+00:00 urn:sha1:bc472499298f03ebe5c71920633cfa2b20046c93 No change to generated assembly. Rework name verification code so that a match is indicated via an argument, 2017-04-10T17:11:13+00:00 jsing 2017-04-10T17:11:13+00:00 urn:sha1:2c72bbf2735f97ac7b152b55787c620ee18ae10f rather than return codes. More strictly follow RFC 6125, in particular only check the CN if there are no SAN identifiers present in the certificate (per section 6.4.4). Previous behaviour questioned by Daniel Stenberg <daniel at haxx dot se>. ok beck@ jca@ Avoid signed vs unsigned comparisons. 2016-11-04T15:32:40+00:00 jsing 2016-11-04T15:32:40+00:00 urn:sha1:299c27a5dccc05ae30853c4b791d163ec1db344b ok miod@ Add callback-based interface to libtls. 2016-09-04T12:26:43+00:00 bcook 2016-09-04T12:26:43+00:00 urn:sha1:4c3227121f5bf798fe9f6f79ae9a4c10d0e1f1e5 This allows working with buffers and callback functions instead of directly on sockets or file descriptors. Original patch from Tobias Pape <tobias_at_netshed.de>. ok beck@ Revert previous since it adds new symbols. 2016-08-02T07:47:11+00:00 jsing 2016-08-02T07:47:11+00:00 urn:sha1:fb78d4f6d57624a16bd22c0319a858faff7ab48b Requested by deraadt@ Instead of declaring a union in multiple places, move it to tls_internal.h. 2015-09-29T13:10:53+00:00 jsing 2015-09-29T13:10:53+00:00 urn:sha1:cd11a75d1ba630fdc614df713c4cdf04feab7c78 ok deraadt@ clean some ugly intendation warts 2015-09-29T10:17:04+00:00 deraadt 2015-09-29T10:17:04+00:00 urn:sha1:0955203c8ae992482b5992c6f6cfb1985575ae82 Do not match a wildcard against a name with no host part. 2015-09-11T13:12:29+00:00 beck 2015-09-11T13:12:29+00:00 urn:sha1:168cb0727cfcb60dd65b05be568017b6cad877b2 ok jsing@ add tls_peer functions for checking names and issuers of peer certificates. 2015-09-11T12:56:55+00:00 beck 2015-09-11T12:56:55+00:00 urn:sha1:27e5e00bb80457049b7e7613f43e8f1165402316 ok jsing@ Indent labels with a space so that diff -p is more friendly. 2015-09-09T19:49:07+00:00 jsing 2015-09-09T19:49:07+00:00 urn:sha1:a5cc87715bc46cc35410be393e19d5d05848b5a9 Requested by bluhm@