openssl/crypto/include/internal
Viktor Dukhovni d02d80b2e8 Limit scope of CN name constraints
Don't apply DNS name constraints to the subject CN when there's a
least one DNS-ID subjectAlternativeName.

Don't apply DNS name constraints to subject CN's that are sufficiently
unlike DNS names.  Checked name must have at least two labels, with
all labels non-empty, no trailing '.' and all hyphens must be
internal in each label.  In addition to the usual LDH characters,
we also allow "_", since some sites use these for hostnames despite
all the standards.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
2018-05-23 11:12:13 -04:00
..
__DECC_INCLUDE_EPILOGUE.H
__DECC_INCLUDE_PROLOGUE.H
aria.h Many spelling fixes/typo's corrected. 2017-11-11 19:03:10 -05:00
asn1_int.h Limit scope of CN name constraints 2018-05-23 11:12:13 -04:00
async.h Update copyright year 2018-05-01 13:34:30 +01:00
bn_conf.h.in
bn_dh.h DH named parameter support 2017-10-12 02:40:30 +01:00
bn_int.h
bn_srp.h
chacha.h
cryptlib_int.h Ensure the thread keys are always allocated in the same order 2018-04-20 15:45:06 +02:00
ctype.h This has been added to avoid the situation where some host ctype.h functions 2017-08-22 09:45:25 +10:00
dso_conf.h.in Update copyright year 2018-04-03 13:57:12 +01:00
engine.h Add new /dev/crypto engine 2017-06-28 12:54:33 +02:00
err_int.h Update copyright year 2018-05-01 13:34:30 +01:00
evp_int.h Add support for the SRP base64 alphabet 2018-04-13 09:37:38 +01:00
md32_common.h Remove email addresses from source code. 2017-10-13 10:06:59 -04:00
objects.h
poly1305.h
rand_int.h Change rand_pool_bytes_needed to handle less entropy than 1 per 8 bits 2018-05-02 10:18:29 +02:00
sha.h SHA512/224 and SHA512/256 2018-01-24 07:09:46 +10:00
siphash.h
sm3.h SM3: restructure to EVP internal and update doc to right location 2017-11-06 07:21:15 +08:00
sm4.h SM4: Add SM4 block cipher to EVP 2017-10-31 15:19:14 +10:00
store_int.h Add internal functions to fetch PEM data from an opened BIO 2017-06-29 19:25:39 +02:00
store.h Add the STORE module 2017-06-29 11:55:31 +02:00
x509_int.h