| Age | Commit message (Expand) | Author |
|---|
| 2013-07-30 | Log a warning if we accept an EE certificate when | Rob Austein |
| 2013-07-18 | GCC warning. | Rob Austein |
| 2013-06-27 | Report what we're doing before blocking select(). | Rob Austein |
| 2013-06-27 | Flip default for allow-object-not-in-manifest to false. | Rob Austein |
| 2013-06-27 | Don't whine about stale CRLs and manifests that are only stale because | Rob Austein |
| 2013-06-14 | Pruning now keys off the validation_status database rather than the | Rob Austein |
| 2013-06-14 | Experimental feature: skip rsync_tree() if we have a valid manifest | Rob Austein |
| 2013-06-07 | Nit | Rob Austein |
| 2013-06-07 | Forgot a globfree(). | Rob Austein |
| 2013-06-06 | Consolidate to a single event loop, queue up all TALs at start. This | Rob Austein |
| 2013-06-06 | Type signatures of rsync_*() and task_*() frameworkss should not be so | Rob Austein |
| 2013-06-06 | Reorganize TA handling code, add trust-anchor-directory directive. | Rob Austein |
| 2013-03-25 | The URI in a TAL MUST be a certificate matching the RPKI profile, | Rob Austein |
| 2013-03-21 | Examine both thisUpdate timestamp and number when comparing CRLs or | Rob Austein |
| 2013-03-11 | Check CRL issuer nae against issuing CA's subject name. Closes #459. | Rob Austein |
| 2013-01-29 | Check for empty RFC 3779 extensions. See #406. | Rob Austein |
| 2012-11-28 | Check signedObject URI when present. Closes #173. | Rob Austein |
| 2012-09-29 | Simplify loop. | Rob Austein |
| 2012-09-29 | Clean up AVL_PARANOIA code. | Rob Austein |
| 2012-09-19 | Move ASN.1 definitions for ROAs and Manifests to common header files | Rob Austein |
| 2012-09-14 | Disable AVL_PARANOIA code. | Rob Austein |
| 2012-09-14 | Add AVL index of validation_status database. | Rob Austein |
| 2012-07-30 | Add -x option to control "XML summary" file name from command line. | Rob Austein |
| 2012-06-26 | Certificate UID fields forbidden by RPKI profile. | Rob Austein |
| 2012-06-24 | RFC 6485 contradicts RFCs 2630 and 3370, which make rsaEncryption the | Rob Austein |
| 2012-06-23 | Check OID in CMS SignerInfo contentType attribute (conformance). | Rob Austein |
| 2012-06-22 | More CMS conformance checks, and fix a couple I got wrong yesterday. | Rob Austein |
| 2012-06-22 | Check CMS SignerInfo algorithm OIDs (conformance). | Rob Austein |
| 2012-06-22 | Check CMS for presence of CRLs (conformance). | Rob Austein |
| 2012-06-21 | Check for duplicate names in manifest (conformance). | Rob Austein |
| 2012-06-21 | Tighter checking of integer values in input data (conformance). | Rob Austein |
| 2012-06-15 | Handle all "partial transfer" (rsync code 23) errors the same way. | Rob Austein |
| 2012-06-13 | Missing directory at repository site is not a transfer failure. | Rob Austein |
| 2012-03-21 | Shut up about skipped rsync connections when rsync is disabled. | Rob Austein |
| 2012-03-09 | Move AKI checks to precede signature check, as AKI checks are cheaper. | Rob Austein |
| 2012-03-09 | Fix fencepost error in walk_ctx_loop_next(). This closes #219. | Rob Austein |
| 2012-03-02 | Add keep-lockfile, to simplify process queuing. | Rob Austein |
| 2012-03-01 | Record failure when we can't even parse a trust anchor, much less | Rob Austein |
| 2012-02-26 | Allow configuration of authenticated and unauthenticated directories | Rob Austein |
| 2012-02-15 | Factor XML generation code out of main(), and don't overwrite old XML | Rob Austein |
| 2012-02-14 | Downgrade "AIA doesn't match issuer" to a warning. Closes #188. | Rob Austein |
| 2012-02-14 | Apparently an old version of the res-certs specification allowed | Rob Austein |
| 2012-02-03 | "Multiple rsync URIs in extension" should be warning, not error. | Rob Austein |
| 2012-02-02 | Tweak AIA/SIA/CRLDP checking again: don't accidently reject just for | Rob Austein |
| 2012-02-01 | AKI checks still weren't quite right. | Rob Austein |
| 2012-01-31 | Refactor CMS checks, which have gotten complex enough to be worth | Rob Austein |
| 2012-01-31 | AKI extension is optional for self-signed RPKI certificates. | Rob Austein |
| 2012-01-26 | Back out over-zealous change introduced as part of [4267] -- | Rob Austein |
| 2012-01-26 | Conformance: Check SKI value. | Rob Austein |
| 2012-01-26 | Conformance: Check CMS SID against EE SKI in ROAs. | Rob Austein |
