| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
| |
some regexp tweaks; the relevant parts of asn1.h are nearing completion
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
from the OpenSSL 1.1.1 branch, which is still under a free license,
mostly this commit:
commit d35c0ff30b31be9fd5dcf3d552a16feb8de464bc
Author: Dr. Stephen Henson <steve@openssl.org>
Date: Fri Oct 19 15:06:31 2012 +0000
fix ASN1_STRING_TABLE_add so it can override existing string table values
This fixes a segfault in ASN1_STRING_TABLE_add(3), which tried to change a
static const entry when called with an nid already in the default table,
and it switches the precedence of the two tables in ASN1_STRING_TABLE_get(3).
In addition, it changes behaviour in the following minor ways:
* Ignore negative minsize and maxsize arguments, not just -1.
* Ignore a zero mask and zero flags.
It's unclear whether these additional changes make the API absolutely
better, but we want compatibility with OpenSSL in these functions.
Tweaks & OK tb@.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* handle multiple qualifiers on the function return type
* handle function pointer type declarations
* handle unions inside structs
* handle forward struct declarations
* handle "typedef const"
* handle ASN1_F_, ASN1_R_, and X509V3_R_ error constants
* handle "#if defined" in the same way as "#ifdef"
* skip whitespace between "#" and "define"
* skip whitespace before C comments
* ignore TYPEDEF_D2I2D_OF
|
|
|
|
| |
This provides test coverage for SCT encoding/decoding.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
undocumented. It is an opaque struct used only internally, as a
sub-object of the public X509_VERIFY_PARAM type. All related API
functions take X509_VERIFY_PARAM arguments, so X509_VERIFY_PARAM_ID
is of no interest to the user.
|
|
|
|
|
|
|
|
|
|
| |
reducing the risk of accidental misparsing:
Require whitespace after the function return type (before the
asterisk indicating that the function returns a pointer, if any)
and do not accept whitespace between the function name and the
opening parenthesis of the parameter list. These changes are not
a problem because we want that style for KNF reasons anyway.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
in one of the public openssl/ header files are all documented.
Before attempting to read this code, make sure that you are
fully vaccinated against leaning toothpick syndrome.
Example usage:
./check_complete.pl x509_vfy
./check_complete.pl -v x509 | less
Intentionally not linked to the build.
jsing@ agrees with the general direction.
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
workaround for excessive malloc inspired by mariadb (just kidding).
|
| |
|
|
|
|
|
| |
for opaque DSA. I'll deal with that later. I also lobbed a KNF grenade
in here.
|
|
|
|
|
| |
work with opaque DH, but one step at a time. While here, add a bunch of
missing spaces to reduce the eyebleed.
|
|
|
|
|
| |
The remaining test needs some thinking (or disabling once we flip
the switch). It is currently marked with an XXX.
|
|
|
|
|
|
| |
As a side effect, this also tests various aspects of ASN1_STRING_new(3),
ASN1_STRING_set(3), ASN1_STRING_length_set(3), ASN1_STRING_get0_data(3),
ASN1_STRING_length(3), and ASN1_STRING_type(3).
|
|
|
|
|
| |
Related to the bugfixes in x509_req.c rev. 1.25.
OK tb@.
|
|
|
|
| |
to reach into opaque structs.
|
| |
|
|
|
|
|
| |
This test now fails with the legacy verifier, due to
X509_V_FLAG_TRUSTED_FIRST being enabled by default.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
when we succeed with a chain, and ensure we do not call the callback
twice when the caller doesn't expect it. A refactor of the end of
the legacy verify code in x509_vfy is probably overdue, but this
should be done based on a piece that works. the important bit here
is this allows the perl regression tests in tree to pass.
Changes the previously committed regress tests to test the success
case callbacks to be known to pass.
ok bluhm@ tb@
|
|
|
|
|
|
|
|
|
| |
order on success for both the legacy and the new verifier, This avoids
problems as seen in perl's regression tests for some of the crazy things
net:ssleay does.
This is currently marked as expected to fail, it will be expected to
succeed after a forthcoming commit from me.
|
| |
|
|
|
|
|
|
| |
generate certdirs by jsing, and make chicken sacrifies by tb.
ok tb@ jsing@
|