summaryrefslogtreecommitdiffstats
path: root/crypto/x509/x509_vfy.c (follow)
Commit message (Expand)AuthorAgeFilesLines
...
* OPENSSL_NO_xxx cleanup: many removalsRich Salz2015-01-271-4/+0
* More comment realignmentmaster-post-reformatMatt Caswell2015-01-221-9/+9
* Run util/openssl-format-source -v -c .Matt Caswell2015-01-221-2189/+2080
* Further comment changes for reformat (master)Matt Caswell2015-01-221-8/+9
* Further comment amendments to preserve formatting prior to source reformatMatt Caswell2015-01-061-1/+2
* RT2841: Extra return in check_issuedPaul Suhler2014-09-091-1/+0
* RT2751: Declare get_issuer_sk() earlier.Rich Salz2014-08-151-0/+1
* Update API to use (char *) for email addresses and hostnamesViktor Dukhovni2014-07-071-2/+2
* Set optional peername when X509_check_host() succeeds.Viktor Dukhovni2014-07-051-1/+2
* One more typo when changing !result to result <= 0Viktor Dukhovni2014-06-231-1/+1
* Fix typo in last commitViktor Dukhovni2014-06-231-1/+1
* Multiple verifier reference identities.Viktor Dukhovni2014-06-231-1/+16
* X509_check_mumble() failure is <= 0, not just 0Viktor Dukhovni2014-06-231-3/+3
* Drop hostlen from X509_VERIFY_PARAM_ID.Viktor Dukhovni2014-06-231-2/+1
* Don't use expired certificates if possible.Dr. Stephen Henson2014-05-251-5/+17
* Rename vpm_int.h to x509_lcl.hDr. Stephen Henson2014-05-251-1/+1
* Fixes to host checking.Viktor Dukhovni2014-05-211-1/+2
* For self signed root only indicate one error.Dr. Stephen Henson2014-03-041-2/+5
* Include TA in checks/callback with partial chains.Dr. Stephen Henson2014-02-141-1/+1
* Don't do loop detection for self signed check.Dr. Stephen Henson2014-02-141-0/+2
* Fix bug in X509_V_FLAG_IGNORE_CRITICAL CRL handling.Dr. Stephen Henson2014-01-091-3/+2
* Add opaque ID structure.Dr. Stephen Henson2013-12-131-3/+5
* Fix for partial chain notification.Dr. Stephen Henson2013-12-131-1/+5
* Partial path fix.Dr. Stephen Henson2013-09-081-11/+8
* Fix verify loop with CRL checking.Dr. Stephen Henson2013-07-121-0/+11
* Fix warning.Ben Laurie2013-01-061-1/+1
* Make partial chain checking work if we only have the EE certificate inDr. Stephen Henson2012-12-211-0/+41
* New verify flag to return success if we have any certificate in theDr. Stephen Henson2012-12-131-0/+9
* Fix two bugs which affect delta CRL handling:Dr. Stephen Henson2012-12-061-2/+2
* Integrate host, email and IP address checks into X509_verify.Dr. Stephen Henson2012-12-051-0/+35
* initial support for delta CRL generations by diffing two full CRLsDr. Stephen Henson2012-12-041-0/+119
* Rename Suite B functions for consistency.Dr. Stephen Henson2012-08-031-12/+5
* add suite B chain validation flags and associated verify errorsDr. Stephen Henson2012-08-031-0/+20
* don't do loop check for single self signed certificateDr. Stephen Henson2012-03-051-0/+3
* PR: 2606Dr. Stephen Henson2011-09-231-1/+1
* Initialise X509_STORE_CTX properly so CRLs with nextUpdate date in the pastDr. Stephen Henson2011-09-061-0/+4
* avoid verification loops in trusted store when path buildingDr. Stephen Henson2010-12-251-0/+15
* Submitted by: Jonathan Dixon <joth@chromium.org>Dr. Stephen Henson2010-11-021-1/+1
* add -trusted_first option and verify flagDr. Stephen Henson2010-02-251-0/+15
* tidy verify code. xn not used any more and check for self signed more efficie...Dr. Stephen Henson2010-02-251-8/+14
* Experimental support for partial chain verification: if an intermediateDr. Stephen Henson2010-02-251-27/+33
* PR: 2103Dr. Stephen Henson2009-11-171-0/+1
* Add missing functions to allow access to newer X509_STORE_CTX statusDr. Stephen Henson2009-10-311-0/+15
* If not checking all certificates don't attempt to find a CRLDr. Stephen Henson2009-10-231-0/+5
* Need to check <= 0 here.Dr. Stephen Henson2009-10-231-1/+1
* Oops, s can be NULLDr. Stephen Henson2009-09-041-5/+3
* PR: 2013Dr. Stephen Henson2009-09-021-4/+8
* Update from 1.0.0-stable.Dr. Stephen Henson2009-06-261-3/+4
* Update from 0.9.8-stable.Dr. Stephen Henson2009-06-151-8/+5
* Updates from 1.0.0-stable.Dr. Stephen Henson2009-04-151-1/+1