openbsd - A mirror of https://github.com/libressl/openbsd.git

	Commit message (Collapse)	Author	Age	Files	Lines
*	Unroll DECLARE_ASN1_FUNCTIONS()	job	2021-09-02	1	-9/+56
\| \| \| \|	OK jsing@
*	Rename DEFINE_STACK_OF() to DECLARE_STACK_OF()	job	2021-09-02	1	-4/+4
\| \| \| \|	OK tb@ jsing@
*	Lay groundwork to support X.509 v3 extensions for IP Addresses and AS ↵	job	2021-09-02	1	-1/+144
\| \| \| \| \| \| \| \| \| \| \|	Identifiers These extensions are defined in RFC 3779 and used in the RPKI (RFC 6482, RFC 8360). Imported from OpenSSL 1.1.1j (aaf2fcb575cdf6491b98ab4829abf78a3dec8402b8b81efc8f23c00d443981bf) This changeset is a no-op, as there are 10+ issues and at least 2 security issues. Work will continue in-tree. OK tb@, discussed with beck@
*	Add new x509 certificate chain validator in x509_verify.c	beck	2020-09-13	1	-1/+3
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	The new validator finds multiple validated chains to handle the modern PKI cases which may frequently have multiple paths via different intermediates to different roots. It is loosely based on golang's x509 validator This includes integration so that the new validator can be used via X509_verify_cert() as well as a new api x509_verify() which will return multiple chains (similar to go). The new validator is not enabled by default with this commit, this will be changed in a follow on commit. The new public API is not yet exposed, and will be finalized and exposed with a man page and a library minor bump later. ok tb@ inoguchi@ jsing@
*	Collapse the x509v3 directory into x509.	jsing	2020-06-04	1	-0/+992
	This avoids the need to grep across directories to find functions and prepares for further rototilling and chainsawing. Discussed with tb@ (who also tested the release build)