aboutsummaryrefslogtreecommitdiff
path: root/openssl/trunk/crypto/x509v3
AgeCommit message (Collapse)Author
2007-06-07Replace hacked OpenSSL code with OpenSSL 0.9.8e distribution.Rob Austein
svn path=/openssl/Makefile; revision=659
2006-11-13Back port tweaks to silence compiler warnings.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=464
2006-09-15Fix contributors' notice.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=275
2006-09-15API cleanups prior to handing code to OpenSSL project.Rob Austein
svn path=/openssl/README; revision=273
2006-09-13Update copyright notices. Minor cosmetic changes.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=270
2006-09-13Compile time conditionals, per Ben.Rob Austein
svn path=/openssl/trunk/Configure; revision=269
2006-08-26Add inheritance and subset tests.Rob Austein
svn path=/openssl/README; revision=233
2006-08-26Allow inheritance in "resource sets" since verification of certificateRob Austein
requests will almost certainly require this. svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=232
2006-08-25Debug previously unused paths through new path validation code.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=228
2006-08-25Bring marker comments up to date.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/x509v3.h; revision=226
2006-08-24Clean up disused function codes, then "make update".Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3err.c; revision=225
2006-08-24Anything covers a null resource setRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=224
2006-08-24v3_*_validate_resource_set()Rob Austein
svn path=/openssl/README; revision=223
2006-08-22Reorganize slightly to make canonical form functions global.Rob Austein
svn path=/openssl/README; revision=174
2006-08-17More corner cases.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=169
2006-08-17Catch a few corner cases in IPAddrBlocks_is_canonical().Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=168
2006-08-17Get rid of dependencies on inet_pton() and inet_ntop().Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=166
2006-08-17Checking a nonexistant extension for canonical form is not very useful.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=164
2006-08-17Refuse to encode overlapping ranges. Check for canonical form bothRob Austein
during path validation and via an assertion for extensions we generate. svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=163
2006-08-16Call asid_is_canonical() both from path validation and via anRob Austein
assertion on extensions we construct. svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=162
2006-08-16Rewrite asid_canonize() to be simpler and to reject overlapping input data.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=161
2006-08-16Tweaks to get null inheritance workingRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=160
2006-08-16Rewrite address extention path validation to work bottom up, usingRob Austein
cached extensions. svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=159
2006-08-16Clean up compiler warningsRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=158
2006-08-16Get rid of inherit_marker kludge. Clean up compiler warnings.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=157
2006-08-16Handle continuation from callback better.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=155
2006-08-16Cache RFC 3779 extensions in X509 structure so we don't have to expandRob Austein
them every time we check a certificate chain. Rewrite ASID path validation to use cached extensions, to allow null inheritance, and to start with the target certificate. Still need to rewrite address path validation. svn path=/openssl/README; revision=154
2006-08-15Handle policy check at trust anchorRob Austein
svn path=/openssl/trunk/crypto/x509v3/pcy_tree.c; revision=152
2006-08-11Add NID_certificate_policies to the list of supported extensions soRob Austein
that our certificates will stop throwing critical exception errors. This should be ok since "openssl verify" at least claims to be checking policies if given the (undocumented) -policy etc switches. (needs further testing). svn path=/openssl/trunk/crypto/x509v3/v3_purp.c; revision=149
2006-08-09Assertion caught memory leakRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=142
2006-08-04CheckpointRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=141
2006-08-04regenRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3err.c; revision=140
2006-08-02Doh, helps to compare with the right value.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=135
2006-08-01Have to set comparision function to use sk_find().Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=133
2006-08-01Fix double-free bugs.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=132
2006-08-01Add RFC 3779 extensions to supported list.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_purp.c; revision=131
2006-08-01CleanupRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=129
2006-08-01Rewrite path validation to use error callbacks properly and plugRob Austein
memory leaks. svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=128
2006-08-01Rewrite path validation to use error callbacks properly and to plugRob Austein
memory leaks. svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=127
2006-08-01v3_addr_validate_path()Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=122
2006-08-01TypoRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=121
2006-08-01CommentsRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=120
2006-08-01v3_asid_validate_path() et al.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=119
2006-08-01RFC 3779 validation functions.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/x509v3.h; revision=118
2006-07-27Update commentsRob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=109
2006-07-27Update header comment.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=108
2006-07-27Re-ran "make test; ./Configure debug-sra".Rob Austein
svn path=/openssl/trunk/Makefile; revision=104
2006-07-27Parse prefixes and ranges. Debug.Rob Austein
svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=103
2006-07-27Clean up memory leaks. Get unused bit calculation right in rangeRob Austein
generator. svn path=/openssl/trunk/crypto/x509v3/v3_addr.c; revision=101
2006-07-27Fix string parsing to handle ranges. More memory leak checking (viaRob Austein
assert() this time, what fun). svn path=/openssl/trunk/crypto/x509v3/v3_asid.c; revision=100