Luiz Angelo Daros de Luca dd36fce023 OpenSSL is able to generate a certificate with name constraints with any possible ... subjectAltName field. The Name Contraint example in x509v3_config(5) even use IP as an example: nameConstraints=permitted;IP:192.168.0.0/255.255.0.0 However, until now, the verify code for IP name contraints did not exist. Any check with a IP Address Name Constraint results in a "unsupported name constraint type" error. This patch implements support for IP Address Name Constraint (v4 and v6). This code validaded correcly certificates with multiple IPv4/IPv6 address checking against a CA certificate with these constraints: permitted;IP.1=10.9.0.0/255.255.0.0 permitted;IP.2=10.48.0.0/255.255.0.0 permitted;IP.3=10.148.0.0/255.255.0.0 permitted;IP.4=fdc8:123f:e31f::/ffff:ffff:ffff:: Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>		2014-05-23 23:05:38 +01:00
..
.cvsignore
ext_dat.h	Move CT viewer extension code to crypto/x509v3	2014-02-20 18:48:56 +00:00
Makefile	make depend	2014-04-25 14:31:05 -04:00
pcy_cache.c
pcy_data.c
pcy_int.h
pcy_lib.c
pcy_map.c
pcy_node.c
pcy_tree.c	misspellings fixes by https://github.com/vlajos/misspell_fixer	2013-09-05 21:39:42 +01:00
tabtest.c
v3_addr.c
v3_akey.c
v3_akeya.c
v3_alt.c
v3_asid.c
v3_bcons.c
v3_bitst.c
v3_conf.c
v3_cpols.c
v3_crld.c
v3_enum.c
v3_extku.c
v3_genn.c
v3_ia5.c
v3_info.c
v3_int.c
v3_lib.c
v3_ncons.c	OpenSSL is able to generate a certificate with name constraints with any possible	2014-05-23 23:05:38 +01:00
v3_ocsp.c
v3_pci.c
v3_pcia.c
v3_pcons.c
v3_pku.c
v3_pmaps.c
v3_prn.c
v3_purp.c	Extension checking fixes.	2014-04-15 18:50:53 +01:00
v3_scts.c	Don't use BN_ULLONG in n2l8 use SCTS_TIMESTAMP.	2014-02-25 15:06:51 +00:00
v3_skey.c
v3_sxnet.c
v3_utl.c	Fixes to host checking.	2014-05-21 11:31:28 +01:00
v3conf.c
v3err.c
v3nametest.c	Fixes to host checking.	2014-05-21 11:31:28 +01:00
v3prin.c
x509v3.h	Fixes to host checking.	2014-05-21 11:31:28 +01:00