summaryrefslogtreecommitdiff
path: root/src/lib/libressl/ressl_verify.c (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Rename libressl to libtls to avoid confusion and to make it easier tojsing2014-10-311-225/+0
| | | | | | distinguish between LibreSSL (the project) and libressl (the library). Discussed with many.
* When verifying whether an IP address is in the commonName of ajca2014-10-061-1/+15
| | | | | | certificate, do not perform wildcard matching. Suggested by Richard Moore (rich@kde) ok tedu@
* If we have to match against a wildcard in a cert, verify that it containsjca2014-10-061-3/+23
| | | | | | at least a domain label before the tld, as in *.example.org. Suggested by Richard Moore (rich@kde) ok tedu@
* Add $OpenBSD$ tags.jsing2014-08-051-0/+1
|
* X509_NAME_get_text_by_NID() returns -1 on error so the typejsg2014-08-031-1/+1
| | | | | | the return value is stored in must be signed. Fixes a test for error. ok jsing@ guenther@
* Initial version of libressl - a library that provides a clean, simple,jsing2014-07-121-0/+190
consistent and secure-by-default API for SSL clients (and soon servers). This is a long way from complete and the interface will likely change substantially - committing now so that further work can happen in the tree. Initiated by tedu@ and inspired by discussions with tedu@, beck@ and other developers.