Commit Graph

468 Commits

Author SHA1 Message Date
Howard Chu
0e16b2ea55 ITS#6466 certificateListValidate: Empty Sequence-of is legal 2010-01-30 23:32:50 +00:00
Pierangelo Masarati
70a71edffb trim unwanted commit 2009-11-16 09:55:27 +00:00
Pierangelo Masarati
07dc23f5ee treat bervals as bervals (related to ITS#6378,ITS#6379) 2009-11-15 18:26:53 +00:00
Pierangelo Masarati
9cfa465107 handle embedded '\0' (ITS#6379) 2009-11-14 16:45:13 +00:00
Pierangelo Masarati
3e2ac1f6c0 improve previous commit 2009-08-04 14:26:40 +00:00
Pierangelo Masarati
38fa7e0621 be liberal in accepting CL (ITS#6241) 2009-08-04 14:14:17 +00:00
Pierangelo Masarati
20371c3eae note about OpenSSL being more liberal than OpenLDAP when there is garbage past the end of a certificateList 2009-08-03 14:07:49 +00:00
Howard Chu
076c1d23cf Fix attributeCertificateValidate 2009-08-01 01:11:15 +00:00
Howard Chu
e8d95fa072 Fix certificateListValidate parsing of CRL extensions 2009-08-01 00:39:41 +00:00
Howard Chu
dbc0fdba58 csnOrderingMatch should have a normalizer 2009-07-13 09:39:39 +00:00
Howard Chu
167f2d22ed ITS#6098 issuerUID and subjectUID are primitive, not constructed 2009-05-08 01:52:12 +00:00
Howard Chu
9309eb4b34 ITS#6036 zero out freed val 2009-03-26 16:58:44 +00:00
Kurt Zeilenga
4af9eb9715 Update copyright notices 2009-01-22 00:40:04 +00:00
Hallvard Furuseth
db2172c5c9 Warning cleanup to ITS#5695/rev 1.453: signed meets unsigned. 2008-10-18 20:25:57 +00:00
Hallvard Furuseth
d68ba23ab8 ITS#5750: Fix nameUIDPretty() bitstring in Name and Optional UID syntax.
Also update a comment about parsing this syntax.
2008-10-18 11:09:55 +00:00
Pierangelo Masarati
5d90231d2a apply Luca Tamburo's patch for Attribute Certificate and X.509 PMI support (with modifications, ITS#5695) 2008-10-18 08:33:40 +00:00
Hallvard Furuseth
7b3bdf2185 Warning cleanup: signed meets unsigned. ber_flatten2() returns -1 on
error, not LBER_ERROR.
2008-10-13 10:18:15 +00:00
Pierangelo Masarati
88055e8d54 don't hide standard track matching rules (more for ITS#5700) 2008-09-15 09:16:13 +00:00
Pierangelo Masarati
ff5b4d6c21 add support for certificateListExactMatch (RFC4523; ITS#5700) 2008-09-15 00:34:56 +00:00
Pierangelo Masarati
14bd1744b7 certificate handling cleanup 2008-09-15 00:24:40 +00:00
Pierangelo Masarati
605fa77265 no need to unescape/re-escape each line (more on ITS#5608) 2008-08-30 15:00:05 +00:00
Pierangelo Masarati
03793fd9f4 implement caseIgnoreListMatch (ITS#5608) 2008-08-30 14:30:31 +00:00
Pierangelo Masarati
afbef0b035 fix check for single-field firstComponentMatch normalization (ITS#5634) 2008-08-04 21:06:37 +00:00
Pierangelo Masarati
be9d79d2a7 fix serialNumber and issuer parsing (ITS#5588) 2008-07-01 23:06:01 +00:00
Howard Chu
8921793615 ITS#5503 integerFilter keys were not terminated 2008-05-10 00:28:03 +00:00
Pierangelo Masarati
14c425b922 s/leave/func_leave/ (ITS#5411) 2008-03-15 18:16:21 +00:00
Pierangelo Masarati
137172f952 allow 2.1 CSN format (ITS#5348) 2008-02-02 10:23:35 +00:00
Pierangelo Masarati
44b20b98e0 s/assert/LDAP_INVALID_SYNTAX/ (ITS#5348) 2008-02-01 19:16:58 +00:00
Kurt Zeilenga
c890c96d13 Happy New Year (belated) 2008-01-08 00:19:56 +00:00
Hallvard Furuseth
8667a535dc Integer indexing - cleanup, signedness, redefine signmask => RIP overflow test 2007-12-03 09:54:01 +00:00
Howard Chu
ccfe26fca9 Cleanup overflow check 2007-12-02 21:46:50 +00:00
Hallvard Furuseth
3b6122cb73 Integer indexing - cleanup 2007-12-02 19:25:33 +00:00
Howard Chu
304520c113 Add memctx to lutil_str2bin() 2007-12-02 19:11:41 +00:00
Hallvard Furuseth
283313ba15 Fix last patch, and reduce allocations in lutil_str2bin(). 2007-12-02 17:32:08 +00:00
Hallvard Furuseth
bddba8ae17 Integer indexing - handle huge values 2007-12-02 16:10:23 +00:00
Howard Chu
60c0a68249 Trim unneeded tmp var 2007-12-01 11:44:18 +00:00
Howard Chu
95993844dd Omit leading zero pad byte 2007-12-01 11:41:52 +00:00
Howard Chu
d513108ea3 Fix sign bit 2007-12-01 11:00:40 +00:00
Howard Chu
b7f3bb05f5 Fix 1.426, must sign-extend small numbers, not zero-pad 2007-11-30 18:12:17 +00:00
Howard Chu
8a8a05d811 Change integer indexing to ordered only, no backward compatibility 2007-11-25 13:19:08 +00:00
Pierangelo Masarati
7aeac21440 silence warnings 2007-11-23 12:47:53 +00:00
Howard Chu
dd39c0a6fd integer indexing must be unsigned 2007-11-21 03:07:09 +00:00
Howard Chu
3ff3957dc7 Add index_intlen keyword for ordered indexing of integers 2007-11-21 02:54:57 +00:00
Howard Chu
c406042fd6 ITS#5072 fix issuer format, use uppercase hex per RFC3641 2007-10-05 11:27:20 +00:00
Pierangelo Masarati
c3c3c9c16b support de-normalization 2007-10-05 09:26:48 +00:00
Howard Chu
925e92dcc9 certificateExactNormalize - only check serial encoding if len > 1 2007-10-01 16:32:30 +00:00
Howard Chu
291c8d9bd8 ITS#5070 unify serialNumberAndIssuer validation 2007-10-01 08:43:56 +00:00
Howard Chu
4ad821910c ITS#5070 use lutil_str2bin() for certificate serialNumbers
Still need to fix serialNumberAndIssuerPretty to accept hex
2007-10-01 06:55:02 +00:00
Howard Chu
37e295f269 ITS#5070 again, use [-]0x123456789abcdef for big int serial numbers 2007-09-29 09:50:54 +00:00
Howard Chu
d322eb96c3 ITS#5151 fix CertificateListValidate 2007-09-24 07:55:56 +00:00