openssl/crypto/x509
Dr. Stephen Henson 4b26645c1a Fix verify loop with CRL checking.
PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
2013-07-12 17:48:41 +01:00
..
.cvsignore
by_dir.c
by_file.c
Makefile Make "make depend" work on MacOS out of the box. 2013-01-19 14:14:30 +00:00
x509_att.c
x509_cmp.c
x509_d2.c
x509_def.c
x509_err.c initial support for delta CRL generations by diffing two full CRLs 2012-12-04 18:35:36 +00:00
x509_ext.c
x509_lu.c
x509_obj.c
x509_r2x.c
x509_req.c
x509_set.c
x509_trs.c
x509_txt.c Integrate host, email and IP address checks into X509_verify. 2012-12-05 18:35:20 +00:00
x509_v3.c
x509_vfy.c Fix verify loop with CRL checking. 2013-07-12 17:48:41 +01:00
x509_vfy.h New verify flag to return success if we have any certificate in the 2012-12-13 18:14:46 +00:00
x509_vpm.c Integrate host, email and IP address checks into X509_verify. 2012-12-05 18:35:20 +00:00
x509.h initial support for delta CRL generations by diffing two full CRLs 2012-12-04 18:35:36 +00:00
x509cset.c
x509name.c
x509rset.c
x509spki.c
x509type.c
x_all.c Reencode with X509_CRL_ctx_sign too. 2013-06-05 15:06:03 +01:00