openssl/apps
Emilia Kasper 0923e7df9e Fix hostname validation in the command-line tool to honour negative return values.
Specifically, an ASN.1 NumericString in the certificate CN will fail UTF-8 conversion
and result in a negative return value, which the "x509 -checkhost" command-line option
incorrectly interpreted as success.

Also update X509_check_host docs to reflect reality.

Thanks to Sean Burford (Google) for reporting this issue.

Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-02-10 15:35:20 +01:00
..
demoCA
demoSRP
set
app_rand.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
apps.c Fix hostname validation in the command-line tool to honour negative return values. 2015-02-10 15:35:20 +01:00
apps.h Remove OPENSSL_NO_SSL_INTERN as it is now redundant - all internals 2015-01-31 18:07:11 +00:00
asn1pars.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ca-cert.srl
ca-key.pem
ca-req.pem
ca.c Dead code clean: #if 0 removal in apps 2015-01-30 14:52:57 -05:00
CA.com
CA.pl.in RT3291: Add -crl and -revoke options to CA.pl 2014-09-08 11:21:17 -04:00
CA.sh
cert.pem
ciphers.c OPENSSL_NO_XXX cleanup: NO_TLS, NO_TLS1 2015-01-27 15:14:12 -05:00
client.pem
cms.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
crl2p7.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
crl.c ifdef cleanup, part 4a: '#ifdef undef' 2015-01-24 10:58:38 -05:00
dgst.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
dh512.pem
dh1024.pem
dh2048.pem
dh4096.pem
dh.c ifdef cleanup, part 4a: '#ifdef undef' 2015-01-24 10:58:38 -05:00
dhparam.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
dsa512.pem
dsa1024.pem
dsa-ca.pem
dsa-pca.pem
dsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
dsap.pem
dsaparam.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ec.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ecparam.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
enc.c ifdef cleanup, 2 remove OPENSSL_NO_SETVBUF_IONBF 2015-01-22 12:57:29 -05:00
engine.c Dead code clean: #if 0 removal in apps 2015-01-30 14:52:57 -05:00
errstr.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
gendh.c More comment realignment 2015-01-22 09:20:10 +00:00
gendsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
genpkey.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
genrsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
install-apps.com
makeapps.com
Makefile ui_compat cleanup; makefiles and vms 2015-02-06 16:49:17 -05:00
nseq.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ocsp.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
oid.cnf
openssl-vms.cnf RT3067: simplify patch 2014-09-24 15:35:02 +02:00
openssl.c Fix memory leak reporting. 2015-02-09 12:53:36 +00:00
openssl.cnf RT2626: Change default_bits from 1K to 2K 2014-09-08 17:21:04 -04:00
passwd.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pca-cert.srl
pca-key.pem
pca-req.pem
pkcs7.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pkcs8.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pkcs12.c clang on Linux x86_64 complains about unreachable code. 2015-01-29 01:54:09 +01:00
pkey.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pkeyparam.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pkeyutl.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
prime.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
privkey.pem
progs.h OPENSSL_NO_xxx cleanup: SHA 2015-01-27 12:34:45 -05:00
progs.pl OPENSSL_NO_xxx cleanup: SHA 2015-01-27 12:34:45 -05:00
rand.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
req.c ifdef cleanup part 3: OPENSSL_SYSNAME 2015-01-23 11:58:26 -05:00
req.pem
rsa8192.pem
rsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
rsautl.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s512-key.pem
s512-req.pem
s1024key.pem
s1024req.pem
s_apps.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
s_cb.c Dead code clean: #if 0 removal in apps 2015-01-30 14:52:57 -05:00
s_client.c Live code cleanup: remove #if 1 stuff 2015-02-06 10:54:20 -05:00
s_server.c Live code cleanup: remove #if 1 stuff 2015-02-06 10:54:20 -05:00
s_socket.c Re-align some comments after running the reformat script. 2015-01-22 09:20:10 +00:00
s_time.c Dead code clean: #if 0 removal in apps 2015-01-30 14:52:57 -05:00
server2.pem
server.pem
server.srl
sess_id.c ifdef cleanup, part 4a: '#ifdef undef' 2015-01-24 10:58:38 -05:00
smime.c Dead code clean: #if 0 removal in apps 2015-01-30 14:52:57 -05:00
speed.c Live code cleanup: remove #if 1 stuff 2015-02-06 10:54:20 -05:00
spkac.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
srp.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
testCA.pem
testdsa.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
testrsa.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
timeouts.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
ts.c Re-align some comments after running the reformat script. 2015-01-22 09:20:10 +00:00
tsget
verify.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
version.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
vms_decc_init.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
winrand.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509.c Live code cleanup: remove #if 1 stuff 2015-02-06 10:54:20 -05:00