openssl/crypto/x509v3
Dr. Stephen Henson 5bd5dcd496 Add nameConstraints commonName checking.
New hostname checking function asn1_valid_host()

Check commonName entries against nameConstraints: any CN components in
EE certificate which look like hostnames are checked against
nameConstraints.

Note that RFC5280 et al only require checking subject alt name against
DNS name constraints.

Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-11 23:30:04 +01:00
..
build.info
ext_dat.h
pcy_cache.c
pcy_data.c Spelling fixes 2016-06-16 15:08:57 -04:00
pcy_int.h
pcy_lib.c
pcy_map.c
pcy_node.c
pcy_tree.c
tabtest.c
v3_addr.c Spelling 2016-06-29 09:56:39 -04:00
v3_akey.c
v3_akeya.c
v3_alt.c
v3_asid.c
v3_bcons.c
v3_bitst.c
v3_conf.c
v3_cpols.c
v3_crld.c
v3_enum.c
v3_extku.c
v3_genn.c
v3_ia5.c
v3_info.c
v3_int.c
v3_lib.c
v3_ncons.c Add nameConstraints commonName checking. 2016-07-11 23:30:04 +01:00
v3_pci.c
v3_pcia.c
v3_pcons.c
v3_pku.c
v3_pmaps.c
v3_prn.c
v3_purp.c Remove pointless free loop in X509_PURPOSE_cleanup() 2016-06-20 09:58:58 -04:00
v3_skey.c
v3_sxnet.c
v3_tlsf.c
v3_utl.c
v3conf.c
v3err.c
v3prin.c