| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
|
| |
Some macros are still exposed, but apart from the loss of a very nice way
of saying "this is completely misdesigned, overengineered and not properly
thought through" the only thing we would have learned from it is that this
stuff is "probably useless".
|
|
|
|
|
|
|
| |
These were the last four RFC 3779 things that check_complete.pl x509v3
complained about. I will surely tweak and try to improve a few things
in the coming days, but the pages should now be stable enough that
review efforts will likely not be wasted. Any feedback appreciated.
|
|
|
|
|
|
| |
First RFC 3779 page without a BUG section. It could have one, but I'm
in a lenient mood right now. Maybe it's just that this is bad but not
quite as bad as EVP.
|
|
|
|
| |
Also note another bug in X509v3_asid_{canonize,is_canonical}(3).
|
|
|
|
| |
Let's just say there's room for improvement...
|
|
|
|
| |
ASRange and ASIdOrRange
|
|
|
|
|
|
|
|
| |
This documents the part of the API that allows building the two
extensions. It is all very complicated and the bug density is
quite high. Surely there's lots of room for improvement, but
I've been sitting way too long on versions of these. I'll never
finish. Let's fix and improve in tree.
|
|
|
|
|
| |
Mop up documentation mentioning it or any of its numerous accessors that
almost nothing ever used.
|
|
|
|
|
|
|
|
| |
X509_OBJECT_new(3) and X509_OBJECT_free(3); document them.
While here, stop talking about storing storing EVP_PKEY objects
and plain C strings in X509_OBJECT objects. LibreSSL never fully
supported that, and it certainly no longer supports that now.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
out of X509_LOOKUP_hash_dir(3) because both groups of functions
differ substantially in purpose and structure.
Rewrite the complete text of X509_load_cert_file(3) from scratch
for correctness and clarity.
This fixes several documentation errors:
1. The names of the constants were wrong, lacking the "X509_" prefix.
2. None of these functions support X509_FILETYPE_DEFAULT,
neither in OpenSSL nor in LibreSSL.
3. The memory cache does not contain X509_STORE objects;
instead, the X509_STORE object *is* the memory cache.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
and add a new manual page X509_LOOKUP_new(3)
|
| |
|
|
|
|
| |
documenting the X509_POLICY_TREE object and its sub-objects
|
|
|
|
|
| |
documenting ten functions related to X509_TRUST objects,
trust identifiers, and trust indices.
|
|
|
|
| |
related to X509_PURPOSE objects, purpose identifiers, and purpose indices
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
as in OpenSSL 1.1.1. I rewrote most of the text for clarity, precision,
and conciseness and added some additional information. A few sentences
from Paul Yang remain.
|
| |
|
|
|
|
| |
references were already given below RETURN VALUES right above
|
|
|
|
|
|
|
|
|
|
|
| |
group pages, and these link on to all their second-level subpages.
Only a handful of second-level pages have third-level subpages.
So all crypto pages can now be reached from the www.libressl.org
frontpage via at most four clicks, in most cases three clicks.
Also link back from leaf pages to their respective group pages
and add a couple of additional links between related pages.
Triggered by a question from deraadt@.
OK jmc@ tb@
|
|
|
|
| |
on the web, so fix up SSLeay HISTORY accordingly
|
| |
|
| |
|
| |
|
|
|
|
|
| |
X509_chain_up_ref(3). Merge the documentation from OpenSSL,
tweaked by me.
|
|
|
|
| |
related to X.509 with .Vt such that they can be searched for.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
Thanks to otto@ for making me aware of it.
If people know newer documents that are similarly readable and
interesting, please speak up. I hate sending people to the STANDARDS
only for more information. On the one hand, that's torture, and
on the other hand, if i read Gutmann correctly, the standards
sometimes provide bad advice, and often none at all.
|
|
|
|
| |
into X509_new(3). Add information about STANDARDS.
|
| |
|
| |
|
|
|
|
| |
Merge documentation of X509_up_ref(3) from OpenSSL.
|
| |
|
| |
|
|
|