| Age | Commit message (Expand) | Author |
|---|
| 2014-03-06 | Clang found a few issues. | Rob Austein |
| 2014-02-27 | More router certificate checks. | Rob Austein |
| 2014-02-26 | Add EKU checks for BGPSEC router certificates, now that we have a | Rob Austein |
| 2014-01-22 | Add --help and long option names to rcynic. | Rob Austein |
| 2014-01-09 | Update more copyrights, clean up module doc blocks. | Rob Austein |
| 2013-12-19 | Rewrite all uses of readdir() to avoid using on dirent d_type field. | Rob Austein |
| 2013-11-23 | Emit better(?) error message when we hit can't open a TAL file. Fixes #113. | Rob Austein |
| 2013-11-22 | Conformance: Make sure CMS contains exactly one certificate and that | Rob Austein |
| 2013-11-22 | Check certificate policy for qualifiers: allow id-qt-cps with a | Rob Austein |
| 2013-11-22 | Add NIDs for OIDs OpenSSL doesn't know about, convert all use of | Rob Austein |
| 2013-11-07 | More precise checking of attributes in CMS SignerInfos. Fixes #644. | Rob Austein |
| 2013-11-07 | Check manifest validity dates against its EE certificate. Fixes #651. | Rob Austein |
| 2013-11-07 | Don't allow EKU in signed objects. Fixes #645. | Rob Austein |
| 2013-11-06 | Check ROA max prefix length against prefix length. Fixes #648. | Rob Austein |
| 2013-11-06 | Check certificates for non-null SAFI. While we're at it, check for | Rob Austein |
| 2013-11-06 | Check for manifestNumber too big. Fixes #652. | Rob Austein |
| 2013-11-06 | Check for certificate serial number too big. Fixes #642. | Rob Austein |
| 2013-11-06 | RFC 5280 restriction to 20 octets is 20 octets in two's complement, so | Rob Austein |
| 2013-07-30 | Log a warning if we accept an EE certificate when | Rob Austein |
| 2013-07-18 | GCC warning. | Rob Austein |
| 2013-06-27 | Report what we're doing before blocking select(). | Rob Austein |
| 2013-06-27 | Flip default for allow-object-not-in-manifest to false. | Rob Austein |
| 2013-06-27 | Don't whine about stale CRLs and manifests that are only stale because | Rob Austein |
| 2013-06-14 | Pruning now keys off the validation_status database rather than the | Rob Austein |
| 2013-06-14 | Experimental feature: skip rsync_tree() if we have a valid manifest | Rob Austein |
| 2013-06-07 | Nit | Rob Austein |
| 2013-06-07 | Forgot a globfree(). | Rob Austein |
| 2013-06-06 | Consolidate to a single event loop, queue up all TALs at start. This | Rob Austein |
| 2013-06-06 | Type signatures of rsync_*() and task_*() frameworkss should not be so | Rob Austein |
| 2013-06-06 | Reorganize TA handling code, add trust-anchor-directory directive. | Rob Austein |
| 2013-03-25 | The URI in a TAL MUST be a certificate matching the RPKI profile, | Rob Austein |
| 2013-03-21 | Examine both thisUpdate timestamp and number when comparing CRLs or | Rob Austein |
| 2013-03-11 | Check CRL issuer nae against issuing CA's subject name. Closes #459. | Rob Austein |
| 2013-01-29 | Check for empty RFC 3779 extensions. See #406. | Rob Austein |
| 2012-11-28 | Check signedObject URI when present. Closes #173. | Rob Austein |
| 2012-09-29 | Simplify loop. | Rob Austein |
| 2012-09-29 | Clean up AVL_PARANOIA code. | Rob Austein |
| 2012-09-19 | Move ASN.1 definitions for ROAs and Manifests to common header files | Rob Austein |
| 2012-09-14 | Disable AVL_PARANOIA code. | Rob Austein |
| 2012-09-14 | Add AVL index of validation_status database. | Rob Austein |
| 2012-07-30 | Add -x option to control "XML summary" file name from command line. | Rob Austein |
| 2012-06-26 | Certificate UID fields forbidden by RPKI profile. | Rob Austein |
| 2012-06-24 | RFC 6485 contradicts RFCs 2630 and 3370, which make rsaEncryption the | Rob Austein |
| 2012-06-23 | Check OID in CMS SignerInfo contentType attribute (conformance). | Rob Austein |
| 2012-06-22 | More CMS conformance checks, and fix a couple I got wrong yesterday. | Rob Austein |
| 2012-06-22 | Check CMS SignerInfo algorithm OIDs (conformance). | Rob Austein |
| 2012-06-22 | Check CMS for presence of CRLs (conformance). | Rob Austein |
| 2012-06-21 | Check for duplicate names in manifest (conformance). | Rob Austein |
| 2012-06-21 | Tighter checking of integer values in input data (conformance). | Rob Austein |
| 2012-06-15 | Handle all "partial transfer" (rsync code 23) errors the same way. | Rob Austein |
