aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2006-08-31Cache parse_cert() results.Rob Austein
svn path=/scripts/rcynic-prototype.pl; revision=250
2006-08-31Reenable other test cases.Rob Austein
svn path=/scripts/rcynic-prototype.pl; revision=249
2006-08-31Try to deal with some of the results of disallowing symlinksRob Austein
svn path=/scripts/rcynic-prototype.pl; revision=248
2006-08-31Lingering paranoiaRob Austein
svn path=/scripts/rcynic-prototype.pl; revision=247
2006-08-31CleanupRob Austein
svn path=/scripts/rcynic-prototype.pl; revision=246
2006-08-30rsync_cache()Rob Austein
svn path=/scripts/rcynic-prototype.pl; revision=245
2006-08-30Move CRL checks around. Better logging. Fix a few more bugs.Rob Austein
This version seems to run, albiet incredibly slowly. svn path=/scripts/rcynic-prototype.pl; revision=244
2006-08-29Apparently we need to fetch the CRL in order to verify the cert inRob Austein
which we found the CRL's URI. Ick. Have asked on list, deferring work briefly in the hope that someone will tell me that I'm wrong about this. svn path=/scripts/rcynic-prototype.pl; revision=243
2006-08-29Infinite URI loops, fun! Move trust anchors of tree we maintain,Rob Austein
clean up junk from previous passes when starting up. svn path=/scripts/rcynic-prototype.pl; revision=242
2006-08-29Not quite crawling yet, more like dragging itself along with one pinky.Rob Austein
svn path=/scripts/rcynic-prototype.pl; revision=241
2006-08-29Now far enough along to break in interesting (as opposed to totallyRob Austein
stupid) ways. svn path=/scripts/rcynic-prototype.pl; revision=240
2006-08-29checkpointRob Austein
svn path=/scripts/rcynic-prototype.pl; revision=239
2006-08-29CheckpointRob Austein
svn path=/scripts/rcynic-prototype.pl; revision=238
2006-08-26Notes on request extensionsRob Austein
svn path=/openssl/README; revision=237
2006-08-26updateRob Austein
svn path=/openssl/README; revision=234
2006-08-26Add inheritance and subset tests.Rob Austein
svn path=/openssl/README; revision=233
2006-08-26Allow inheritance in "resource sets" since verification of certificateRob Austein
requests will almost certainly require this. svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=232
2006-08-25Update primitive #6Rob Austein
svn path=/openssl/README; revision=231
2006-08-25Add resource-set-testRob Austein
svn path=/tests/resource-set/Makefile; revision=229
2006-08-25Debug previously unused paths through new path validation code.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=228
2006-08-25Notes on reading and writing resource sets.Rob Austein
svn path=/openssl/README; revision=227
2006-08-25Bring marker comments up to date.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/x509v3.h; revision=226
2006-08-24Clean up disused function codes, then "make update".Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3err.c; revision=225
2006-08-24Anything covers a null resource setRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=224
2006-08-24v3_*_validate_resource_set()Rob Austein
svn path=/openssl/README; revision=223
2006-08-22ReorganizeRob Austein
svn path=/scripts/master.sh; revision=222
2006-08-22ReorganizeRob Austein
svn path=/scripts/mirror-ripe.sh; revision=221
2006-08-22ReorganizeRob Austein
svn path=/scripts/mirror-apnic.sh; revision=220
2006-08-22reorganizeRob Austein
svn path=/scripts/check-hashes.sh; revision=219
2006-08-22rcs:* properties removedRob Austein
svn path=/scripts/check-hashes.sh; revision=218
2006-08-22# on 2006/08/18 00:25:02, sra did:Rob Austein
save awk svn path=/scripts/check-hashes.sh; revision=217
2006-08-22# on 2006/08/17 16:55:08, sra did:Rob Austein
Clean old tree svn path=/scripts/make-hashes.pl; revision=216
2006-08-22# on 2006/08/17 04:52:09, sra did:Rob Austein
Turn off -policy_print. svn path=/scripts/gen-verify-test.pl; revision=215
2006-08-22# on 2006/08/15 18:43:32, sra did:Rob Austein
allow veriable overrides svn path=/scripts/check-hashes.sh; revision=214
2006-08-22# on 2006/08/12 17:08:24, sra did:Rob Austein
whoops, need per directory hash buckets svn path=/scripts/make-hashes.pl; revision=213
2006-08-22# on 2006/08/12 14:13:18, sra did:Rob Austein
Put back SIA svn path=/scripts/uri.pl; revision=212
2006-08-22# on 2006/08/12 06:07:03, sra did:Rob Austein
cleanup svn path=/scripts/gen-verify-test.pl; revision=211
2006-08-22# on 2006/08/12 06:04:42, sra did:Rob Austein
crl->cdp svn path=/scripts/uri.pl; revision=210
2006-08-22# on 2006/08/12 05:58:14, sra did:Rob Austein
Initial revision svn path=/scripts/check-hashes.sh; revision=209
2006-08-22# on 2006/08/12 05:46:53, sra did:Rob Austein
doh, mkdir -p please svn path=/scripts/make-hashes.pl; revision=208
2006-08-22# on 2006/08/12 05:43:09, sra did:Rob Austein
hack for multiple directories svn path=/scripts/make-hashes.pl; revision=207
2006-08-22# on 2006/08/12 03:43:03, sra did:Rob Austein
CRLs get a "r" stuck into the suffix. svn path=/scripts/make-hashes.pl; revision=206
2006-08-22# on 2006/08/11 23:29:13, sra did:Rob Austein
Turn on certificate policy checking. svn path=/scripts/gen-verify-test.pl; revision=205
2006-08-22# on 2006/08/11 08:39:33, sra did:Rob Austein
Initial revision svn path=/scripts/make-hashes.pl; revision=204
2006-08-22# on 2006/08/10 21:52:37, sra did:Rob Austein
Missing note from previous edit: also check CRLs (thanks, RobL). svn path=/scripts/gen-verify-test.pl; revision=203
2006-08-22# on 2006/08/10 21:51:26, sra did:Rob Austein
Rewrite to: - Do DER->PEM conversion on the fly at test time rather than in the repository (where the next rsync will overwrite it); - Use the AIA URIs instead of SKI/AKI matching to build chains (this would work better if APNIC's AIA's weren't almost all broken...). svn path=/scripts/gen-verify-test.pl; revision=202
2006-08-22# on 2006/08/10 19:46:34, sra did:Rob Austein
strict svn path=/scripts/uri.pl; revision=201
2006-08-22# on 2006/08/10 19:46:24, sra did:Rob Austein
strict svn path=/scripts/gen-verify-test.pl; revision=200
2006-08-22# on 2006/08/10 07:05:08, sra did:Rob Austein
Limit output to fields I might want to use building cert chains. I guess the SIA would qualify under that description but it's not particularly relevant to what I'm doing at the moment. svn path=/scripts/uri.pl; revision=199
2006-08-22# on 2006/08/10 06:54:08, sra did:Rob Austein
*** empty log message *** svn path=/scripts/uri.pl; revision=198
generated by cgit v1.2.3 (git 2.25.1) at 2025-05-30 09:20:25 +0000