openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Expand)	Author	Age	Files	Lines
*	remove prototypes with no matching function	jsg	2024-05-19	1	-2/+1
*	Eliminate the timegm(3) dependency in libcrypto	tb	2023-11-13	1	-3/+4
*	Allow IP addresses to be specified in a URI.	beck	2023-09-29	1	-2/+2
*	Stop relying on x509_verify.h being public	tb	2023-01-28	1	-3/+2
*	Refactor x509v3_cache_extensions	job	2023-01-20	1	-2/+2
*	Make internal header file names consistent	tb	2022-11-26	1	-2/+2
*	Revert "Check certificate extensions in trusted certificates"	beck	2022-11-17	1	-2/+1
*	Check certificate extensions in trusted certificates.	beck	2022-11-13	1	-1/+2
*	Start CBS-ifying the name constraints code.	beck	2022-11-11	1	-6/+6
*	Allow security_level to mestastasize into the verifier	tb	2022-06-27	1	-1/+2
*	Rework ownership handling in x509_constraints_validate()	tb	2022-03-14	1	-2/+3
*	Add x509_constraints_validate() to x509_internal.h	tb	2022-03-13	1	-1/+3
*	In some situations, the verifier would discard the error on an unvalidated	beck	2021-11-24	1	-2/+2
*	Cache sha512 hash and parsed not_before and not_after with X509 cert.	beck	2021-11-04	1	-3/+3
*	Move the now internal X.509-related structs into x509_lcl.h.	tb	2021-11-01	1	-1/+3
*	Validate Subject Alternate Names when they are being added to certificates.	beck	2021-10-26	1	-1/+3
*	Call the callback on success in new verifier in a compatible way	beck	2021-09-03	1	-1/+2
*	Get rid of historical code to extract the roots in the legacy case.	beck	2021-08-28	1	-3/+2
*	Remove the "dump_chain" flag and code. This was a workaround for a problem where	beck	2021-08-28	1	-2/+1
*	Pull roots out of the trust store in the legacy xsc when building chains	beck	2021-08-19	1	-1/+2
*	Add a bunch of workarond in the verifier to support partial chains and	beck	2021-07-10	1	-1/+4
*	Fix checks of memory caps of constraints names	tb	2021-03-12	1	-3/+4
*	Gracefully handle root certificates being both trusted and untrusted.	jsing	2021-01-05	1	-1/+2
*	KNF (whitespace)	tb	2020-11-18	1	-3/+3
*	Handle additional certificate error cases in new X.509 verifier.	jsing	2020-11-11	1	-1/+2
*	Deduplicate the time validation code between the legacy and new	beck	2020-09-15	1	-1/+4
*	Add new x509 certificate chain validator in x509_verify.c	beck	2020-09-13	1	-1/+36
*	Add x509_constraints.c - a new implementation of x509 name constraints, with	beck	2020-09-11	1	-0/+90