summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/stack/stack.c (unfollow)
Commit message (Collapse)AuthorFilesLines
2021-11-01Rework x509attribute regress test in such a way that it doesn't needtb1-11/+7
to reach into opaque structs.
2021-11-01Unifdef LIBRESSL_NEW_API. Now that the library is bumped, this istb11-60/+10
no longer needed. ok jsing
2021-10-31Enable RFC 3779 code.tb1-1/+1
From job. Discussed at length with beck, claudio, job during h2k21
2021-10-31Make this test compile again after the damage done in libcryptotb1-19/+20
2021-10-31Hide struct internals under LIBRESSL_CRYPTO_INTERNAL so that othertb3-19/+19
parts of LibreSSL can no longer reach into them. discussed with beck, jsing
2021-10-31Various minor adjustments to make openssl(1) compile with opaquetb3-12/+23
structs in X509.
2021-10-31Bump majors after struct visibility changes, symbol removal and symboltb3-3/+3
addition.
2021-10-31Simplify some code by using X509_STORE_CTX_get_obj_by_subject()tb1-8/+8
ok beck jsing
2021-10-31Update Symbols.list to include API additionstb1-0/+10
2021-10-31libssl: stop reaching into the X509 struct and simplify some code bytb2-24/+6
using X509_get_key_usage(). ok beck jsing
2021-10-31Update Symbols.list for new API and API removal/renamingtb1-10/+33
2021-10-31Expose new API in headers and make X509 structs opaque.tb1-0/+3
2021-10-31Remove the unused X509_OBJECTS struct.tb1-8/+1
ok beck jsing
2021-10-31Remove the unused X509_CERT_PAIR struct and the assicated API.tb4-99/+4
ok beck jsing
2021-10-31Remove the unused X509_CERT_FILE_CTX struct.tb1-9/+1
ok beck jsing
2021-10-31Prepare to provide X509_STORE_CTX_get_obj_by_subject(), a wrappertb2-2/+22
around X509_STORE_get_by_subject() that eliminates the need of allocating an object on the heap by hand. ok beck inoguchi jsing
2021-10-31Switch various X509 API to use the new X509_LOOKUP_TYPE to matchtb2-29/+32
OpenSSL's signatures. ok beck inoguchi jsing
2021-10-31Provide the X509_LOOKUP_TYPE enum.tb1-6/+6
Remove the now unused X509_LU_{RETRY,FAIL,PKEY}. ok beck inoguchi jsing
2021-10-31Prepare definitions X509_STORE_set_verify{,_cb}_func() that work withtb1-3/+8
opaque structs. ok beck inoguchi jsing
2021-10-31Prepare to make various structs in x509_vfy.h opaque.tb1-26/+37
ok beck inoguchi jsing
2021-10-31Prepare regress for opaque structs in x509*.htb4-25/+18
2021-10-31Add explicit CBS_contains_zero_byte() check in CBS_strdup().jsing1-1/+6
If the CBS data contains a zero byte, then CBS_strdup() is only going to return part of the data - add an explicit CBS_contains_zero_byte() and treat such data as an error case. ok tb@
2021-10-30new manual page X509_CRL_METHOD_new(3)schwarze6-14/+245
documenting five functions to customize CRL handling
2021-10-29In x509/x509_purp.c rev. 1.11, tb@ fixed X509_check_purpose(3)schwarze1-8/+18
to fail if parsing of a certificate extension failed. Adjust the documentation accordingly. OK tb@
2021-10-29Actually error in X509_check_purpose() if x509v3_cache_extensions()tb1-2/+2
indicates failure. The previous "error return" X509_V_ERR_UNSPECIFIED translates to 1, i.e., success. This changes to the intended behavior of x509_purp.c r1.3 and matches OpenSSL. This will need various adjustments in the documentation. ok jsing
2021-10-29document the horrifying function X509_TRUST_set_default(3)schwarze1-3/+43
2021-10-29add missing .h file includederaadt1-2/+3
from Emil Engler
2021-10-29document X509_EXTENSION_dup(3);schwarze1-8/+20
while here, add the missing const qualifier to the obj argument of X509_EXTENSION_create_by_OBJ(3) and correct a typo in the argument name of X509_EXTENSION_get_data(3)
2021-10-29new manual page X509_REQ_print_ex(3),schwarze4-6/+184
also documenting X509_REQ_print(3) and X509_REQ_print_fp(3)
2021-10-28document X509_REQ_to_X509(3)schwarze1-7/+38
2021-10-28unwrap a linetb1-3/+2
2021-10-28document X509_to_X509_REQ(3)schwarze1-4/+26
2021-10-28sorttb1-2/+2
2021-10-28Mechanical KNF in preparation for changingbeck12-1583/+1653
2021-10-28Add headers normally contained in include/openssl, verbatim from 1.1.1beck2-0/+554
2021-10-28Import Certificate Transparency verbatim from OpenSSL 1.1.1beck13-0/+2321
This is not yet hooked up and will not compile. Follow on commits will KNF and then make it build. ok jsing@ tb@
2021-10-28openssl-ruby tests: rework for x509_alt.c r1.3 and r1.5.tb1-6/+9
ruby can no longer generate certs with bogus wildcards in it to check that they will fail to verify when creating TLS connections. It will throw an error. This change needs openssl-ruby-tests-20211024p0 or later to work.
2021-10-28Bring back r1.3, ok becktb1-3/+47
Original commit message from beck: Validate Subject Alternate Names when they are being added to certificates. With this change we will reject adding SAN DNS, EMAIL, and IP addresses that are malformed at certificate creation time. ok jsing@ tb@
2021-10-27Fix HISTORY section: 6.9 -> 7.0tb1-3/+3
2021-10-27new manual page X509_REQ_add_extensions(3)schwarze4-4/+148
documenting six functions for extensions in certification requests
2021-10-27add some .Xrs involving recently added pagesschwarze7-15/+22
2021-10-27minor tweaks to wording and punctuation,schwarze1-10/+19
and add .Xrs to relevant objects
2021-10-27Minor tweaks:schwarze1-9/+12
* Say "number of bytes" instead of "length of bytes". * Remove mention of a BUGS section that exists neither here nor in OpenSSL. * List all authors who contributed Copyright-worthy amounts of text. * Remove years from the Copyright line that saw no non-trivial changes. * Add the year 2014: that's when Emilia wrote the i2d_re_X509_tbs() text. * Improve merge comments.
2021-10-27Revert version 1.3 - not allowing the creation of bogus certificatesbeck1-47/+3
breaks the ruby regression tests that expect to make bogus certificates and see that they are rejected :( I am reverting this for now to make the regress tests pass, and will bring it back if we decide to patch the regress tests to remove the problem cases
2021-10-27Fix to correctly parse the 'to' time into the to_tmbeck1-2/+2
2021-10-27Add ASN1_TIME_diff from OpenSSL.beck4-5/+106
The symbol is not yet exposed and will show up with tb@'s forthcoming bump ok tb@ jsing@
2021-10-26Merge documentation for i2d_re_X509*_tbs(3) from OpenSSL 1.1tb1-4/+67
2021-10-26spelling fixes;jmc2-4/+4
2021-10-26install X509_get_extension_flags.3 and X509_SIG_get0.3tb1-1/+3
2021-10-26Remove a line documenting that X509_get_X509_PUBKEY(3) is missingtb1-2/+1
discussed with schwarze
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-05-11 23:01:23 +0000