summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/x509/x509_vfy.c (follow)
Commit message (Expand)AuthorAgeFilesLines
* Remove dead code.beck2023-06-081-13/+3
* Merge X509_VERIFY_PARAM_ID into X509_VERIFY_PARAMtb2023-05-281-13/+12
* Rename arguments of X509_STORE_CTX_init()tb2023-05-141-5/+5
* Rename the other_ctx in X509_STORE_CTX into trustedtb2023-05-081-10/+10
* X509_verify_cert(): Garbage collect the unused roots variabletb2023-05-081-4/+1
* Send x509_subject_cmp() to the attictb2023-04-301-9/+1
* Zap extra blank linetb2023-04-301-2/+1
* Enable policy checking by default now that we are DAG implementation based.beck2023-04-281-2/+2
* Unifdef LIBRESSL_HAS_POLICY_DAG and remove it from the Makefiletb2023-04-281-61/+1
* Make the new policy code in x509_policy.c to be selectable at compile time.beck2023-04-261-1/+41
* Use X509_STORE_CTX_get1_{certs,crls}() instead of an aliastb2023-04-251-3/+3
* Move the policy tree code to internal-onlytb2023-04-251-15/+1
* x509_vfy.c and x509_vpm.c don't need vpm_int.h anymoretb2023-04-161-2/+3
* More ProxyCertInfo tentacles go to the attictb2023-04-161-34/+4
* libressl *_namespace.h: adjust *_ALIAS() to require a semicolontb2023-02-161-56/+56
* spelling fixes; from paul tagliamontejmc2022-12-261-2/+2
* Retire X509_V_FLAG_CB_ISSUER_CHECKtb2022-12-011-16/+8
* Getters and setters for the check_issued() callbacktb2022-12-011-1/+23
* Make internal header file names consistenttb2022-11-261-2/+2
* Revert "Check certificate extensions in trusted certificates"beck2022-11-171-46/+3
* Hide public symbols in libcrypto/x509 .c filesbeck2022-11-141-1/+53
* Check certificate extensions in trusted certificates.beck2022-11-131-3/+46
* Switch loop bounds from size_t to int in check_hosts()tb2022-08-311-2/+2
* Allow security_level to mestastasize into the verifiertb2022-06-271-1/+142
* X509_GET_PUBKEY(3) return value check in libcryptoinoguchi2022-01-221-2/+3
* Bugfix in X509_get_pubkey_parameters(3):schwarze2021-11-261-3/+5
* Simplify the code in X509_get_pubkey_parameters(3)schwarze2021-11-261-8/+4
* In some situations, the verifier would discard the error on an unvalidatedbeck2021-11-241-2/+6
* Fix a bug in check_crl_time() that could result in incompleteschwarze2021-11-131-8/+8
* In X509_STORE_CTX, rename the X509_STORE store rather than ctx.tb2021-11-071-6/+6
* In X509_STORE_CTX rename the misnamed last_untrusted to num_untrustedtb2021-11-071-13/+13
* Cache sha512 hash and parsed not_before and not_after with X509 cert.beck2021-11-041-21/+35
* Move the now internal X.509-related structs into x509_lcl.h.tb2021-11-011-3/+1
* Add RFC 3779 checks to both legacy and new verifierjob2021-10-261-1/+11
* Prepare to provide a number of X509_STORE_CTX_* setters.tb2021-10-241-1/+38
* Prepare to provide X509_STORE_CTX_get_num_untrusted()tb2021-10-241-1/+7
* Call the callback on success in new verifier in a compatible waybeck2021-09-031-5/+17
* Get rid of historical code to extract the roots in the legacy case.beck2021-08-281-49/+2
* Pull roots out of the trust store in the legacy xsc when building chainsbeck2021-08-191-1/+10
* Fix two bugs in the legacy verifiertb2021-02-251-6/+10
* KNFtb2021-02-111-4/+7
* Plug a big memory leak in the new validatortb2020-11-181-1/+6
* Move freeing of the verify context to its natural place instead oftb2020-11-181-2/+2
* KNF (whitespace)tb2020-11-181-2/+2
* jumping into the x509 fray with a bunch of whitespace repairderaadt2020-09-261-6/+6
* KNF/whitespace nitstb2020-09-201-4/+5
* Deduplicate the time validation code between the legacy and newbeck2020-09-151-24/+2
* remove unneded variable "time1"beck2020-09-141-6/+6
* Correctly fix double free introduced on review.beck2020-09-141-1/+2
* Fix double free - review moved the pop_free of roots to x509_verify_ctx_freebeck2020-09-141-2/+1