summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/x509 (follow)
Commit message (Expand)AuthorAgeFilesLines
* name constraints: be more careful with NULstb2022-03-262-12/+25
* Make gcc 4 happier about x509_addr.ctb2022-03-161-6/+8
* Allow constraints of the form @domain.comtb2022-03-141-10/+17
* Rework ownership handling in x509_constraints_validate()tb2022-03-143-39/+49
* Relax the check of x509_constraints_dirname()tb2022-03-131-2/+6
* Add x509_constraints_validate() to x509_internal.htb2022-03-131-1/+3
* Check name constraints using the proper APItb2022-03-131-4/+21
* style tweaktb2022-03-131-2/+2
* Add missing error check after strdup()tb2022-03-131-2/+5
* Pull a len == 0 check up before malloc(len) to avoid implementationtb2022-03-031-5/+5
* Unwrap a linetb2022-03-021-3/+2
* Get rid of SHA1 for comparing CRL's - use SHA512 just like we do for certs.beck2022-02-242-5/+5
* Fix length check of IP addresses for name constraintstb2022-02-111-2/+3
* Add missing error check for a2i_GENERAL_NAME()tb2022-02-111-1/+3
* Fix a double free in v2i_NAME_CONSTRAINTS()tb2022-02-111-2/+3
* Remove a strange inheritance check from addr_validate_path_internal()tb2022-02-041-4/+1
* X509_GET_PUBKEY(3) return value check in libcryptoinoguchi2022-01-221-2/+3
* X509_GET_PUBKEY(3) return value check in libcryptoinoguchi2022-01-221-3/+4
* Remove header guard around RFC 3779 declarationstb2022-01-141-3/+1
* Remove name_cmp from public visibilitytb2022-01-142-2/+3
* Garbage collect the app_items field of ASN1_ADBtb2022-01-141-2/+1
* Remove X509_OBJECT_free_contentstb2022-01-142-19/+11
* Unifdef LIBRESSL_OPAQUE_* and LIBRESSL_NEXT_APItb2022-01-141-5/+1
* Remove a few unused defines from x509.htb2022-01-101-6/+1
* x509_cpols.c will need to include x509_lcl.h soontb2022-01-081-1/+2
* Add an essentially empty ocsp_local.h and include it in the filestb2022-01-071-1/+3
* minor tweaks, no code changetb2022-01-061-4/+3
* Prepare to provide X509_{set,get}_verify() and X509_STORE_get_verify_cb()tb2022-01-052-7/+37
* Unindent a few lines of code and avoid shadowed variables.tb2022-01-051-12/+7
* Rename {c,p}_{min,max} into {child,parent}_{min,max}tb2022-01-051-7/+8
* Two minor KNF tweakstb2022-01-051-5/+5
* Use child_aor and parent_aor instead of aorc and aorptb2022-01-051-15/+15
* Rename fp and fc into parent_af and child_af for readability.tb2022-01-051-24/+29
* Globally rename all IPAddressFamily *f into af since this is slightlytb2022-01-051-64/+65
* Add a helper function to turn unchecked (but sound) use oftb2022-01-051-13/+18
* Hoist IPAddressFamily_cmp() to the other IPAddressFamily functions.tb2022-01-051-29/+29
* Call x a cert for readability.tb2022-01-051-13/+13
* Now that i is free, rename j to i for use as loop variable intb2022-01-051-10/+10
* In addr_validate_path_internal() rename i to depth because that'stb2022-01-051-17/+15
* Turn the validation_err() macro into a functiontb2022-01-051-31/+44
* Move variable declarations in X509v3_addr_canonize() to the top oftb2022-01-051-17/+19
* Remove a bogus memcmp in range_should_be_prefix()tb2022-01-051-3/+6
* Polish X509v3_addr_subset() a bittb2022-01-051-15/+28
* Readability tweaks in addr_contains()tb2022-01-051-5/+13
* Fix a bug in addr_contains() introduced in OpenSSL commit be71c372tb2022-01-051-2/+2
* Readability tweaks in the print helper i2r_IPAddressOrRanges.tb2022-01-041-9/+17
* Consistently name variables with a _len suffix instead of mixingtb2022-01-041-35/+35
* Only check the parent to be canonical once we know it is non-NULL.tb2022-01-041-6/+5
* Refactor extract_min_max()tb2022-01-041-11/+28
* Remove checks that are duplicated in extract_min_max()tb2022-01-041-8/+1