]> git.ipfire.org Git - thirdparty/openssl.git/history - crypto/x509/x509_vfy.c
Add X509 version constants.
[thirdparty/openssl.git] / crypto / x509 / x509_vfy.c
2021-04-28  David BenjaminAdd X509 version constants.
2021-04-20  Dr. David von OheimbImprove ossl_cmp_build_cert_chain(); publish it as...
2021-04-08  Shane LontisFix more certificate related lib_ctx settings.
2021-03-18  Shane LontisAdd ossl_ x509 symbols
2021-03-18  Shane LontisAdd ossl_asn1 symbols
2021-02-27  Dr. David von OheimbCode cleanup mostly in crypto/x509/v3_purp.c
2021-02-18  Dr. David von OheimbRename internal X509_add_cert_new() to ossl_x509_add_ce...
2021-02-18  Dr. David von Oheimbchain_build(): Call verify_cb_cert() if a preliminary...
2021-02-17  Dr. David von Oheimbx509_vfy: fix mem leaks in chain_build() on malloc...
2021-02-15  Benjamin Kadukx509_vfy: remove redundant stack allocation
2021-02-11  Dr. David von OheimbX509_STORE_CTX_cleanup(): Use internally so no need...
2021-02-11  Dr. David von Oheimbx509_vfy.c: Make chain_build() error diagnostics to...
2021-02-09  Dr. David von Oheimbx509_vfy.c: Sort out return values 0 vs. -1 (failure...
2021-02-09  Dr. David von OheimbX509_get_pubkey_parameters(): Correct failure behavior...
2021-02-09  Dr. David von Oheimbx509_vfy.c: Fix various coding style and documentation...
2021-02-06  Dr. David von OheimbAdd X509_STORE_CTX_verify(), which takes the first...
2021-02-04  Dr. David von Oheimbx509_vfy.c: Improve coding style and comments all over...
2021-02-04  Dr. David von OheimbAllow NULL arg to OPENSSL_sk_{dup,deep_copy} returning...
2021-01-28  Richard LevitteUpdate copyright year
2021-01-26  Shane LontisDeprecate EC_KEY + Update ec apps to use EVP_PKEY
2021-01-20  Dr. David von Oheimbx509_vfy.c: Rename CHECK_CB() to the more intuitively...
2021-01-14  Dr. David von Oheimbfind_issuer(): When returning an expired issuer, take...
2021-01-13  Dr. David von Oheimbx509_vfy.c: Fix a regression in find_issuer()
2021-01-13  Dr. David von OheimbAdd X509_NAME_hash_ex() to be able to check if it faile...
2020-12-04  Dr. David von Oheimbx509_vfy.c: Improve comments (correcting typos etc.)
2020-12-03  Dr. David von Oheimbx509_vfy.c: Restore rejection of expired trusted (root...
2020-12-03  Pauliremove unused assignments
2020-11-22  Ankita Shettyx509_vfy.c: Remove superfluous assignment to 'ret'...
2020-11-13  Richard LevitteConvert all {NAME}err() in crypto/ to their correspondi...
2020-11-06  David von Oheimbx509_vfy.c: Call verification callback individually...
2020-11-06  David von Oheimbx509_vfy.c: Introduce CHECK_CB macro simplifying use...
2020-10-15  Dr. Matthias St... Rename OPENSSL_CTX prefix to OSSL_LIB_CTX
2020-10-08  AndrĂ© KlitzingAllow to continue on UNABLE_TO_VERIFY_LEAF_SIGNATURE
2020-10-01  Matt CaswellRun the withlibctx.pl script
2020-09-17  Tomas MrazRename check_chain_extensions to check_chain
2020-09-17  Tomas MrazDisallow certs with explicit curve in verification...
2020-09-15  Paulifree memory use on error in cert verify
2020-09-13  Matt CaswellIgnore unused return values from some sk_*() macros
2020-09-13  Matt CaswellFix stacks of OPENSSL_STRING, OPENSSL_CSTRING and OPENS...
2020-09-13  Matt CaswellFix safestack issues in x509v3.h
2020-09-13  Matt CaswellFix safestack issues in x509.h
2020-09-11  Dr. David von Oheimbcheck_chain_extensions(): Require X.509 v3 if extension...
2020-09-11  Dr. David von Oheimbcheck_chain_extensions(): Change exclusion condition...
2020-09-11  Dr. David von Oheimbx509_vfy.c: Make sure that strict checks are not done...
2020-09-11  Dr. David von Oheimbcheck_chain_extensions(): Add check that CA cert includ...
2020-09-11  Dr. David von Oheimbcheck_chain_extensions(): Add check that on empty Subje...
2020-09-11  Dr. David von Oheimbcheck_chain_extensions(): Add check that AKID and SKID...
2020-09-11  Dr. David von Oheimbcheck_chain_extensions(): Add check that Basic Constrai...
2020-09-11  Dr. David von OheimbExtend X509 cert checks and error reporting in v3_...
2020-08-12  Dr. David von OheimbIntroduce X509_add_cert[s] simplifying various addition...
2020-07-24  Shane LontisAdd X509 related libctx changes.
2020-07-16  Dr. David von Oheimbx509_vfy.c: Improve key usage checks in internal_verify...
2020-07-01  Dr. David von OheimbAdd X509_self_signed(), extending and improving documen...
2020-07-01  Dr. David von OheimbFix issue 1418 by moving check of KU_KEY_CERT_SIGN...
2020-07-01  Dr. David von OheimbOptimization and safety precaution in find_issuer(...
2020-07-01  Dr. David von OheimbRefactor (without semantic changes) crypto/x509/{v3_pur...
2020-07-01  Dr. David von OheimbImprove documentation, layout, and code comments regard...
2020-05-25  PauliCoverity 1463830: Resource leaks (RESOURCE_LEAK)
2020-05-18  Bernd EdlingerFix some places where X509_up_ref is used
2020-04-30  Paulicoverity 1462560 Resource leak
2020-04-24  Rich SalzIn OpenSSL builds, declare STACK for datatypes ...
2020-04-16  Matt CaswellIntroduce an internal version of X509_check_issued()
2020-04-16  Matt CaswellCreate a libctx aware X509_verify_ex()
2020-04-08  Matt CaswellUse the libctx and propq from the X509_STORE_CTX
2020-04-08  Matt CaswellAdd X509_STORE_CTX_new_with_libctx()
2020-04-06  Tomas MrazSet X509_V_ERR_INVALID_EXTENSION error for invalid...
2020-03-23  Dr. David von OheimbConstify various mostly X509-related parameter types...
2020-03-21  Bernd EdlingerFix error handling in x509v3_cache_extensions and relat...
2019-12-04  Dr. David von Oheimbadd X509_cmp_timeframe() including its documentation
2019-10-09  Rich SalzExplicitly test against NULL; do not use !p or similar
2019-09-28  Dr. Matthias St... Reorganize local header files
2019-09-28  Dr. Matthias St... Reorganize private crypto header files
2019-08-14  opensslonzos-githubAdd missing EBCDIC strings
2019-07-31  Shane LontisRename X509_STORE ptr stored in opaque struct X509_STOR...
2018-12-20  Ken GoldmanAdmit unknown pkey types at security level 0
2018-12-06  Richard LevitteFollowing the license change, modify the boilerplates...
2018-10-18  Viktor DukhovniApply self-imposed path length also to root CAs
2018-10-18  Viktor DukhovniOnly CA certificates can be self-issued
2018-05-23  Viktor DukhovniSkip CN DNS name constraint checks when not needed
2018-05-01  Matt CaswellUpdate copyright year
2018-04-24  FdaSilvaYYX509: add more error codes on malloc or sk_TYP_push...
2017-09-28  PauliRemove unnecessary #include <openssl/lhash.h> directives.
2017-09-22  David BenjaminGuard against DoS in name constraints handling.
2017-08-22  Rich SalzUse "" not <> for internal/ includes
2017-08-21  PauliThis has been added to avoid the situation where some...
2017-08-21  Matt CaswellRemove OPENSSL_assert() from crypto/x509
2017-04-25  Dr. Stephen HensonUse X509_get_signature_info() when checking security...
2017-02-24  Emilia KasperX509 time: tighten validation per RFC 5280
2016-12-03  Viktor DukhovniRestore last-resort expired untrusted intermediate...
2016-08-24  Viktor DukhovniUn-delete still documented X509_STORE_CTX_set_verify
2016-08-22  Matt CaswellAdd some sanity checks when checking CRL scores
2016-08-19  Dr. Stephen HensonConstify certificate and CRL time routines.
2016-08-05  klemensspelling fixes, just comments and readme.
2016-08-03  Richard LevitteDon't check any revocation info on proxy certificates
2016-07-29  Dr. Stephen HensonFix CRL time comparison.
2016-07-26  Dr. Stephen HensonRemove current_method from X509_STORE_CTX
2016-07-25  Richard LevitteAdd setter and getter for X509_STORE's check_policy
2016-07-25  Richard LevitteAdd getters / setters for the X509_STORE_CTX and X509_S...
2016-07-22  Dr. Stephen HensonUse newest CRL.
2016-07-12  Viktor DukhovniPerform DANE-EE(3) name checks by default
next