openssl/crypto
Rich Salz 0495a3ec4a Add OCSP_PARTIAL_CHAIN to OCSP_basic_verify()
This adds a flag, OCSP_PARTIAL_CHAIN, to the OCSP_basic_verify()
function.  This is equivlent to X509_V_FLAG_PARTIAL_CHAIN, in that
if any certificate in the OCSP response is in the trust store, then
trust it.

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12666)
2020-08-27 20:03:39 +02:00
..
aes
aria
asn1 Add NID_id_on_SmtpUTF8Mailbox to table of X.509 attributes 2020-08-26 14:04:17 +03:00
async
bf
bio Update copyright year 2020-08-06 13:22:30 +01:00
bn Add fix for RSA keygen in FIPS using keysizes 2048 < bits < 3072 2020-08-12 09:25:49 +10:00
buffer
camellia
cast
chacha
cmac
cmp Use in CMP+CRMF libctx and propq param added to sign/verify/HMAC/decrypt 2020-08-21 09:04:13 +02:00
cms Fix CMS so that it still works with non fetchable algorithms. 2020-08-22 11:07:14 +03:00
comp
conf conf: add an error if the openssl_conf section isn't found. 2020-08-11 08:08:24 +10:00
crmf Use in CMP+CRMF libctx and propq param added to sign/verify/HMAC/decrypt 2020-08-21 09:04:13 +02:00
ct Add EVP signature with libctx methods. 2020-08-09 17:34:52 +10:00
des
dh Fix no-cms build errors. 2020-08-19 13:27:31 +10:00
dsa
dso
ec Fix coverity CID #1458644 - Negative return passed to function taking size_t in ecdh_cms_set_shared_info() 2020-08-24 11:19:28 +10:00
encode_decode DECODER: Add function to set an OSSL_PASSPHRASE_CALLBACK type callback 2020-08-24 10:02:26 +02:00
engine
err Add Explicit EC parameter support to providers. 2020-08-22 14:55:41 +10:00
ess
evp EVP: NULL pctx pointer after free. 2020-08-27 13:43:46 +10:00
ffc Fix DSA/DH so that legacy keys can still be generated by the default provider 2020-08-17 23:40:20 +10:00
hmac
http
idea
kdf
lhash
md2
md4
md5
mdc2
modes Fix coverity CID #1452770 - Dereference before NULL check in CRYPTO_siv128_init() 2020-08-24 11:19:28 +10:00
objects Update copyright year 2020-08-06 13:22:30 +01:00
ocsp Add OCSP_PARTIAL_CHAIN to OCSP_basic_verify() 2020-08-27 20:03:39 +02:00
pem Rename OSSL_SERIALIZER / OSSL_DESERIALIZER to OSSL_ENCODE / OSSL_DECODE 2020-08-21 09:23:58 +02:00
perlasm
pkcs7 Introduce X509_add_cert[s] simplifying various additions to cert lists 2020-08-12 13:54:37 +02:00
pkcs12 Fix mem leaks on PKCS#12 read error in PKCS12_key_gen_{asc,utf8} 2020-08-20 14:28:24 +02:00
poly1305
property Rename OSSL_SERIALIZER / OSSL_DESERIALIZER to OSSL_ENCODE / OSSL_DECODE 2020-08-21 09:23:58 +02:00
rand rand_drbg: remove RAND_DRBG. 2020-08-07 14:16:47 +10:00
rc2
rc4
rc5
ripemd
rsa Add libctx and propq param to ASN.1 sign/verify/HMAC/decrypt 2020-08-21 09:04:10 +02:00
seed
sha
siphash
sm2 Add evp_test fixes. 2020-08-07 14:29:00 +10:00
sm3
sm4
srp
stack
store STORE: Change all error recording to use ERR_raise() / ERR_raise_data() 2020-08-24 10:02:26 +02:00
ts Introduce X509_add_cert[s] simplifying various additions to cert lists 2020-08-12 13:54:37 +02:00
txt_db
ui
whrlpool
x509 RFC 8398: EAI comparison 2020-08-26 14:04:17 +03:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h
armcap.c
armv4cpuid.pl
asn1_dsa.c
bsearch.c
build.info Punycode decoding implementation 2020-08-26 14:04:11 +03:00
c64xpluscpuid.pl
context.c
core_algorithm.c
core_fetch.c
core_namemap.c namemap: fix threading issue 2020-07-29 17:31:32 +10:00
cpt_err.c
cryptlib.c
ctype.c
cversion.c
der_writer.c Change the provider implementation of X942kdf to use wpacket to do der encoding of sharedInfo 2020-08-04 12:18:51 +10:00
dllmain.c
ebcdic.c
ex_data.c
getenv.c Windows get ENV value as UTF-8 encoded string instead of a raw string 2020-08-22 15:05:56 +10:00
ia64cpuid.S
info.c
init.c
initthread.c
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
mem_clr.c
mem_sec.c
mem.c
mips_arch.h
o_dir.c
o_fopen.c
o_init.c
o_str.c
o_time.c
packet.c
param_build_set.c
param_build.c
params_from_text.c
params.c OSSL_PARAM: Add string pointer getters 2020-08-24 10:02:26 +02:00
pariscid.pl
passphrase.c CORE: Generalise internal pass phrase prompter 2020-08-24 10:02:25 +02:00
ppc_arch.h
ppccap.c
ppccpuid.pl
provider_conf.c
provider_core.c provider: disable fall-backs if OSSL_PROVIDER_load() fails. 2020-08-14 18:17:47 +10:00
provider_local.h
provider_predefined.c serialisation: Add a built-in base provider. 2020-07-30 20:15:22 +10:00
provider.c provider: disable fall-backs if OSSL_PROVIDER_load() fails. 2020-08-14 18:17:47 +10:00
punycode.c Punycode decoding implementation 2020-08-26 14:04:11 +03:00
README-sparse_array.md
s390x_arch.h
s390xcap.c
s390xcpuid.pl
self_test_core.c
sparc_arch.h
sparccpuid.S
sparcv9cap.c
sparse_array.c Add 'on demand self test' and status test to providers 2020-08-09 18:06:52 +10:00
threads_none.c
threads_pthread.c
threads_win.c
trace.c
uid.c
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl