| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
| |
Found via a crash on bluhm's i386 regress test box
|
|
|
|
|
|
| |
Of note, the public APIs for this mean that the only way you can add a
CTLOG is by reading a configuration file from disk - there is no
programmatic way to do this.
|
|
|
|
|
| |
which was an implementation detail and has been deleted, so
delete the test
|
| |
|
|
|
|
|
|
| |
This will largely test curly and inconsistent APIs that are not covered by
other regress tests. Currently, this tests the wonder that is
SSL_get_peer_cert_chain().
|
| |
|
|
|
|
| |
CID 345150
|
|
|
|
| |
CID 345156
|
|
|
|
| |
CID 345152
|
|
|
|
| |
CID 345154
|
|
|
|
|
|
| |
_GFp and _GF2m variants.
CID 345155
|
|
|
|
| |
CID 345159
|
|
|
|
| |
CID 345158
|
| |
|
| |
|
|
|
|
| |
CID 345160
|
|
|
|
| |
CID 345141
|
|
|
|
| |
These are generated using the make-certs.sh script.
|
|
|
|
|
|
|
| |
This will allow us to generate a variety of client and server certificates,
including expired and revoked certificates, using both RSA and ECDSA.
Discussed with tb@
|
| |
|
|
|
|
| |
isn't public.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This exercises the code paths that are reached from the validator
and also tests that the public API behaves as expected. There is a
lot more that could be done here, but this test is already big enough.
Missing are tests for X509v3_{addr,asid}_validate_{path,resource_set}()
themselves.
One test failure is ignored and will be fixed in the near future
when a bad logic error in range_should_be_prefix() is fixed.
A consequence of this bug is that we will currently accept and generate
DER that doesn't conform to RFC 3779.
|
| |
|
| |
|
| |
|
|
|
|
|
|
| |
symbols according to the reason (internal, obsolete, postponed)
and according to the header file (asn1, objects, x509, ...).
Also, add some minor tweaks needed for <openssl/objects.h>.
|
| |
|
|
|
|
|
|
| |
related to templating macros) or intentionally undocumented.
Apart from NETSCAPE, PCTX, and low-level templating stuff,
all ASN.1 functions, types, and macros are now documented.
|
| |
|
|
|
|
| |
some regexp tweaks; the relevant parts of asn1.h are nearing completion
|
| |
|
| |
|
|
|
|
|
|
| |
also whack some sys/cdefs.h early includes which is such a brutally
bad pattern
ok bluhm mbuhl
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
from the OpenSSL 1.1.1 branch, which is still under a free license,
mostly this commit:
commit d35c0ff30b31be9fd5dcf3d552a16feb8de464bc
Author: Dr. Stephen Henson <steve@openssl.org>
Date: Fri Oct 19 15:06:31 2012 +0000
fix ASN1_STRING_TABLE_add so it can override existing string table values
This fixes a segfault in ASN1_STRING_TABLE_add(3), which tried to change a
static const entry when called with an nid already in the default table,
and it switches the precedence of the two tables in ASN1_STRING_TABLE_get(3).
In addition, it changes behaviour in the following minor ways:
* Ignore negative minsize and maxsize arguments, not just -1.
* Ignore a zero mask and zero flags.
It's unclear whether these additional changes make the API absolutely
better, but we want compatibility with OpenSSL in these functions.
Tweaks & OK tb@.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* handle multiple qualifiers on the function return type
* handle function pointer type declarations
* handle unions inside structs
* handle forward struct declarations
* handle "typedef const"
* handle ASN1_F_, ASN1_R_, and X509V3_R_ error constants
* handle "#if defined" in the same way as "#ifdef"
* skip whitespace between "#" and "define"
* skip whitespace before C comments
* ignore TYPEDEF_D2I2D_OF
|
|
|
|
| |
This provides test coverage for SCT encoding/decoding.
|
| |
|
|
|
|
| |
Reported by Ilya Shipitsine, discussed with jsing
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
| |
Other regress tests do it differently; just fix/thouch those that did not
mention any package name at all.
This helps grepping logs for SKIPPED to find instructions for the next run.
|