summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/x509 (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* Fix URI name constraints, allow for URI's with no host part.beck2022-06-261-3/+12
* whitespacetb2022-06-261-2/+2
* Move leaf certificate checks to the last thing after chain validation.beck2022-06-251-19/+32
* Remove an unnecessary XXX comment. The suggested check is part oftb2022-05-251-5/+1
* Don't pass uninitialized pointer to ASN1_STRING_to_UTF8()tb2022-05-201-2/+2
* Rewrite make_addressRange() using CBStb2022-05-171-37/+104
* Simplify make_addressPrefix()tb2022-05-171-21/+23
* Small readability tweak suggested by jsingtb2022-05-121-1/+3
* Rewrite and fix X509v3_asid_subset()tb2022-05-121-12/+30
* X509_check_ca() has 5 return values but still can't failtb2022-05-101-3/+1
* Simplify X509_ATTRIBUTE ASN.1 encoding.jsing2022-05-092-23/+11
* Clarify comments at the start of {asid,addr}_validate_path_internal()tb2022-04-212-7/+7
* Avoid expensive RFC 3779 checks during cert verificationtb2022-04-213-16/+22
* Fix X509_get_extension_flags()tb2022-04-211-2/+2
* KNF for a brace and zap trailing blank linetb2022-04-121-3/+3
* name constraints: be more careful with NULstb2022-03-262-12/+25
* Make gcc 4 happier about x509_addr.ctb2022-03-161-6/+8
* Allow constraints of the form @domain.comtb2022-03-141-10/+17
* Rework ownership handling in x509_constraints_validate()tb2022-03-143-39/+49
* Relax the check of x509_constraints_dirname()libressl-v3.5.1tb2022-03-131-2/+6
* Add x509_constraints_validate() to x509_internal.htb2022-03-131-1/+3
* Check name constraints using the proper APItb2022-03-131-4/+21
* style tweaktb2022-03-131-2/+2
* Add missing error check after strdup()tb2022-03-131-2/+5
* Pull a len == 0 check up before malloc(len) to avoid implementationtb2022-03-031-5/+5
* Unwrap a linetb2022-03-021-3/+2
* Get rid of SHA1 for comparing CRL's - use SHA512 just like we do for certs.beck2022-02-242-5/+5
* Fix length check of IP addresses for name constraintstb2022-02-111-2/+3
* Add missing error check for a2i_GENERAL_NAME()tb2022-02-111-1/+3
* Fix a double free in v2i_NAME_CONSTRAINTS()tb2022-02-111-2/+3
* Remove a strange inheritance check from addr_validate_path_internal()tb2022-02-041-4/+1
* X509_GET_PUBKEY(3) return value check in libcryptoinoguchi2022-01-221-2/+3
* X509_GET_PUBKEY(3) return value check in libcryptoinoguchi2022-01-221-3/+4
* Remove header guard around RFC 3779 declarationstb2022-01-141-3/+1
* Remove name_cmp from public visibilitytb2022-01-142-2/+3
* Garbage collect the app_items field of ASN1_ADBtb2022-01-141-2/+1
* Remove X509_OBJECT_free_contentstb2022-01-142-19/+11
* Unifdef LIBRESSL_OPAQUE_* and LIBRESSL_NEXT_APItb2022-01-141-5/+1
* Remove a few unused defines from x509.htb2022-01-101-6/+1
* x509_cpols.c will need to include x509_lcl.h soontb2022-01-081-1/+2
* Add an essentially empty ocsp_local.h and include it in the filestb2022-01-071-1/+3
* minor tweaks, no code changetb2022-01-061-4/+3
* Prepare to provide X509_{set,get}_verify() and X509_STORE_get_verify_cb()tb2022-01-052-7/+37
* Unindent a few lines of code and avoid shadowed variables.tb2022-01-051-12/+7
* Rename {c,p}_{min,max} into {child,parent}_{min,max}tb2022-01-051-7/+8
* Two minor KNF tweakstb2022-01-051-5/+5
* Use child_aor and parent_aor instead of aorc and aorptb2022-01-051-15/+15
* Rename fp and fc into parent_af and child_af for readability.tb2022-01-051-24/+29
* Globally rename all IPAddressFamily *f into af since this is slightlytb2022-01-051-64/+65
* Add a helper function to turn unchecked (but sound) use oftb2022-01-051-13/+18