openssl/crypto/x509
Dr. David von Oheimb d72c8b457b x509_vfy.c: Make sure that strict checks are not done for self-issued EE certs
Reviewed-by: Kurt Roeckx <kurt@roeckx.be>
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/12478)
2020-09-11 07:42:23 +02:00
..
build.info
by_dir.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
by_file.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
by_store.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
ext_dat.h
pcy_cache.c
pcy_data.c Coverity Fixes for issue #12531 2020-08-04 12:34:22 +10:00
pcy_lib.c
pcy_local.h
pcy_map.c
pcy_node.c
pcy_tree.c
standard_exts.h
t_crl.c
t_req.c
t_x509.c X509_STORE_CTX_print_verify_cb(): add AKID and SKID output for (non-)trusted certs 2020-09-05 20:11:43 +02:00
v3_addr.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_admis.c
v3_admis.h
v3_akey.c Constify X509_check_akid and prefer using X509_get0_serialNumber over X509_get_serialNumber 2020-07-16 15:48:53 +02:00
v3_akeya.c
v3_alt.c
v3_asid.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_bcons.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_bitst.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_conf.c Add 'section=...' info in error output of X509V3_EXT_nconf() as far as appropriate 2020-08-04 09:17:47 +02:00
v3_cpols.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_crld.c Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c 2020-09-11 07:42:22 +02:00
v3_enum.c
v3_extku.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_genn.c
v3_ia5.c
v3_info.c
v3_int.c
v3_ist.c
v3_lib.c
v3_ncons.c RFC 8398: Name constraints validation 2020-08-26 14:04:17 +03:00
v3_pci.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_pcia.c
v3_pcons.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_pku.c
v3_pmaps.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_prn.c X509_STORE_CTX_print_verify_cb(): add AKID and SKID output for (non-)trusted certs 2020-09-05 20:11:43 +02:00
v3_purp.c check_chain_extensions(): Add check that on empty Subject the SAN must be marked critical 2020-09-11 07:42:22 +02:00
v3_skey.c
v3_sxnet.c
v3_tlsf.c Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
v3_utf8.c
v3_utl.c RFC 8398: EAI comparison 2020-08-26 14:04:17 +03:00
v3err.c Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c 2020-09-11 07:42:22 +02:00
x509_att.c
x509_cmp.c X509_NAME_cmp: restrict normal return values to {-1,0,1} to avoid confusion with -2 for error 2020-09-10 12:07:33 +02:00
x509_d2.c Add X509 related libctx changes. 2020-07-24 22:53:27 +10:00
x509_def.c
x509_err.c Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c 2020-09-11 07:42:22 +02:00
x509_ext.c
x509_local.h Correct confusing X509V3 conf error output by removing needless 'section:<NULL>' etc. 2020-08-04 09:17:47 +02:00
x509_lu.c Introduce X509_add_cert[s] simplifying various additions to cert lists 2020-08-12 13:54:37 +02:00
x509_meth.c
x509_obj.c X509_NAME_oneline(): Fix output of multi-valued RDNs, escaping '/' and '+' in values 2020-09-10 12:07:33 +02:00
x509_r2x.c
x509_req.c
x509_set.c Extend X509 cert checks and error reporting in v3_{purp,crld}.c and x509_{set,vfy}.c 2020-09-11 07:42:22 +02:00
x509_trs.c
x509_txt.c check_chain_extensions(): Add check that CA cert includes key usage extension 2020-09-11 07:42:22 +02:00
x509_v3.c
x509_vfy.c x509_vfy.c: Make sure that strict checks are not done for self-issued EE certs 2020-09-11 07:42:23 +02:00
x509_vpm.c
x509cset.c
x509name.c
x509rset.c
x509spki.c
x509type.c
x_all.c STORE: Move the built-in 'file:' loader to become an engine module 2020-09-03 17:48:32 +02:00
x_attrib.c
x_crl.c STORE: Modify to support loading with provider based loaders 2020-08-24 10:02:26 +02:00
x_exten.c
x_name.c
x_pubkey.c Rename OSSL_SERIALIZER / OSSL_DESERIALIZER to OSSL_ENCODE / OSSL_DECODE 2020-08-21 09:23:58 +02:00
x_req.c
x_x509.c x_x509.c: Simplify X509_new_with_libctx() using x509_set0_libctx() 2020-08-21 09:04:09 +02:00
x_x509a.c