summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/x509/x509_set.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Drop superfluous parentheses in X509_set_version()tb2024-03-261-5/+5
|
* piuid and psuid have annoyed me for long enoughtb2024-03-261-7/+7
|
* Reject setting invalid versions for certs, CRLs and CSRstb2024-03-261-1/+7
| | | | | | | | | | | | The toolkit aspect bites again. Lots of invalid CRLs and CSRs are produced because people neither read the RFCs nor does the toolkit check anything it is fed. Reviewers apparently also aren't capable of remembering that they have three copy-pasted versions of the same API and that adding a version check to one of the might suggest adding one for the other two. This requires ruby-openssl 20240326p0 to pass ok beck job jsing
* Remove some redundant parenthesestb2023-06-231-17/+17
| | | | This file is already enough of an eyesore without them.
* Invalidate the DER cache earlier on in X509 setter functionsjob2023-04-251-1/+8
| | | | | | | Note that it is important to invalidate the cache before returning, as the return might bubble up an error. OK tb@ jsing@
* Introduce X509_get0_uids() accessor functionjob2023-02-231-1/+12
| | | | | | | By introducing X509_get0_uids(), one can add RPKI profile compliance checks to conform the absence of the issuerUID and subjectUID. OK tb@ jsing@
* libressl *_namespace.h: adjust *_ALIAS() to require a semicolontb2023-02-161-19/+19
| | | | | | | | | | LCRYPTO_ALIAS() and LSSL_ALIAS() contained a trailing semicolon. This does not conform to style(9), breaks editors and ctags and (most importantly) my workflow. Fix this by neutering them with asm("") so that -Wpedantic doesn't complain. There's precedent in libc's namespace.h fix suggested by & ok jsing
* Make internal header file names consistenttb2022-11-261-2/+2
| | | | | | | | | | | | | | | | Libcrypto currently has a mess of *_lcl.h, *_locl.h, and *_local.h names used for internal headers. Move all these headers we inherited from OpenSSL to *_local.h, reserving the name *_internal.h for our own code. Similarly, move dtls_locl.h and ssl_locl.h to dtls_local and ssl_local.h. constant_time_locl.h is moved to constant_time.h since it's special. Adjust all .c files in libcrypto, libssl and regress. The diff is mechanical with the exception of tls13_quic.c, where #include <ssl_locl.h> was fixed manually. discussed with jsing, no objection bcook
* Hide public symbols in libcrypto/x509 .c filesbeck2022-11-141-1/+19
| | | | ok tb@
* Move the now internal X.509-related structs into x509_lcl.h.tb2021-11-011-1/+3
| | | | | | | | Garbage collect the now unused LIBRESSL_CRYPTO_INTERNAL and LIBRESSL_OPAQUE_X509. Include "x509_lcl.h" where needed and fix a couple of unnecessary reacharounds. ok jsing
* Unifdef LIBRESSL_NEW_API. Now that the library is bumped, this istb2021-11-011-3/+1
| | | | | | no longer needed. ok jsing
* Prepare to provide X509_get_X509_PUBKEY() as a function.tb2021-10-211-1/+9
| | | | ok jsing
* Turn a number of #defines into proper functions with prototypes matchingtb2018-08-241-1/+13
| | | | | | those that OpenSSL has had for ages. ok jsing
* Provide X509_get0_tbs_sigalg().jsing2018-02-221-1/+7
|
* Provide X509_set1_notBefore() and X509_set1_notAfter().jsing2018-02-221-1/+13
|
* Provide X509_get0_extensions() and X509_get0_signature()jsing2018-02-171-1/+7
|
* Provide X509_get{0,m}_not{Before,After}().jsing2018-02-141-4/+32
|
* s/M_ASN1_TIME_free/ASN1_TIME_free/jsing2015-09-301-3/+3
|
* Replace M_ASN1_INTEGER_(new|free) with ASN1_INTEGER_(new|free) - this isjsing2015-09-301-4/+4
| | | | | | | different from the macro expansion, but the result is the same. Also replace some ASN1_STRING_dup() with ASN1_INTEGER_dup(). ok beck@ doug@
* Expand obsolete M_ASN1.*(cmp|dup|print|set) macros - no change in generatedjsing2015-07-291-4/+4
| | | | | | assembly. ok bcook@
* Only import cryptlib.h in the four source files that actually need it.jsing2014-07-111-3/+3
| | | | | | | | Remove the openssl public includes from cryptlib.h and add a small number of includes into the source files that actually need them. While here, also sort/group/tidy the includes. ok beck@ miod@
* tags as requested by miod and teduderaadt2014-06-121-1/+1
|
* KNF.jsing2014-04-201-38/+52
|
* blunt force knftedu2014-04-181-35/+25
|
* resolve conflicts, fix local changesdjm2010-10-011-2/+2
|
* openssl-engine-0.9.6 mergebeck2000-12-151-8/+8
|
* OpenSSL 0.9.5 mergebeck2000-03-191-7/+7
| | | | | | *warning* this bumps shared lib minors for libssl and libcrypto from 2.1 to 2.2 if you are using the ssl26 packages for ssh and other things to work you will need to get new ones (see ~beck/libsslsnap/<arch>) on cvs or ~beck/src-patent.tar.gz on cvs
* OpenSSL 0.9.4 mergebeck1999-09-291-25/+11
|
* Import of SSLeay-0.9.0b with RSA and IDEA stubbed + OpenBSD buildryker1998-10-051-0/+164
functionality for shared libs. Note that routines such as sslv2_init and friends that use RSA will not work due to lack of RSA in this library. Needs documentation and help from ports for easy upgrade to full functionality where legally possible.