mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-02-05 14:10:53 +08:00
Code Issues Packages Projects Releases Wiki Activity
fbb82a60dc
openssl/crypto
History
Viktor Dukhovni fbb82a60dc Move peer chain security checks into x509_vfy.c 
A new X509_VERIFY_PARAM_set_auth_level() function sets the
authentication security level.  For verification of SSL peers, this
is automatically set from the SSL security level.  Otherwise, for
now, the authentication security level remains at (effectively) 0
by default.

The new "-auth_level" verify(1) option is available in all the
command-line tools that support the standard verify(1) options.

New verify(1) tests added to check enforcement of chain signature
and public key security levels.  Also added new tests of enforcement
of the verify_depth limit.

Updated documentation.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2016-04-03 11:35:35 -04:00
..
aes Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
asn1 Fix buffer overrun in ASN1_parse(). 2016-03-30 20:28:44 +01:00
async Fix memory leak where fdlookup linked list is not freed during 2016-03-21 16:57:34 +00:00
bf Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
bio moved structure bio_buf_mem_st from headers to bss_mem.c 2016-04-02 16:57:07 -04:00
blake2 crypto/blake2: make lowest-level function handle multiple blocks.. 2016-03-31 21:34:00 +02:00
bn Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
buffer Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
camellia Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
cast Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
chacha Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
cmac Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
cms Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
comp Fix the zlib config option 2016-03-29 23:57:25 +01:00
conf Move dso.h to internal 2016-03-23 09:12:11 -04:00
ct Removed unused fields of CT_POLICY_EVAL_CTX 2016-03-22 21:58:04 -04:00
des Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
dh Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
dsa Rename get/set_app_data to get0/set0_app_data 2016-04-03 00:23:56 +01:00
dso VMS: update the properties of symbol search 2016-03-23 19:58:12 +01:00
ec RT 4393: Call EC_GROUP_order_bits in priv2opt. 2016-03-29 20:03:48 +02:00
engine Various DSA opacity fixups 2016-04-03 00:23:56 +01:00
err Fix "no-ui" configuration 2016-03-31 13:32:01 +02:00
evp Make BIO opaque 2016-03-29 17:40:54 +01:00
hmac Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
idea Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
include/internal Remove #error from include files. 2016-03-20 19:48:36 -04:00
kdf Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
lhash Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
md2 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
md4 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
md5 Build system: VC-WIN64I fixups. 2016-03-21 11:44:27 +01:00
mdc2 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
modes Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
objects Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
ocsp Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
pem Make DSA_METHOD opaque 2016-04-03 00:23:56 +01:00
perlasm
pkcs7 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
pkcs12 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
poly1305 poly1305/asm/poly1305-x86.pl: don't loose 59-th bit. 2016-03-29 09:55:43 +02:00
rand Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
rc2 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
rc4 Build system: VC-WIN64I fixups. 2016-03-21 11:44:27 +01:00
rc5 Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
ripemd Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
rsa Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
seed crypto/seed: add small-footprint path. 2016-03-29 09:53:51 +02:00
sha Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
srp Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
stack Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
ts Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
txt_db Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
ui Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
whrlpool Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
x509 Move peer chain security checks into x509_vfy.c 2016-04-03 11:35:35 -04:00
x509v3 Make X509_PUBKEY opaque 2016-03-22 15:28:11 +00:00
alphacpuid.pl
arm64cpuid.pl
arm_arch.h
armcap.c
armv4cpuid.pl
build.info Break out DllMain from crypto/cryptlib.c and use it in shared libs only 2016-03-30 11:22:42 +02:00
c64xpluscpuid.pl
cpt_err.c
cryptlib.c Break out DllMain from crypto/cryptlib.c and use it in shared libs only 2016-03-30 11:22:42 +02:00
cversion.c
dllmain.c Break out DllMain from crypto/cryptlib.c and use it in shared libs only 2016-03-30 11:22:42 +02:00
ebcdic.c
ex_data.c Fix error code 2016-03-23 08:15:55 -04:00
fips_err.h
fips_ers.c
ia64cpuid.S
init.c Fix no-sock 2016-03-21 16:33:59 +00:00
LPdir_nyi.c
LPdir_unix.c
LPdir_vms.c
LPdir_win32.c
LPdir_win.c
LPdir_wince.c
Makefile.in Remove the remainder of util/mk1mf.pl and companion scripts 2016-03-21 11:02:00 +01:00
mem_clr.c
mem_dbg.c Remove the CRYPTO_mem_leaks adjustment for the BIO 2016-03-31 00:12:47 +01:00
mem_sec.c
mem.c
o_dir.c
o_fips.c
o_init.c
o_str.c
o_time.c Remove Netware and OS/2 2016-03-17 17:06:57 -04:00
pariscid.pl
ppc_arch.h
ppccap.c
ppccpuid.pl
s390xcap.c
s390xcpuid.S
sparc_arch.h
sparccpuid.S
sparcv9cap.c
threads_none.c
threads_pthread.c
threads_win.c Fix: CRYPTO_THREAD_run_once 2016-04-02 16:56:09 -04:00
uid.c Remove Netware and OS/2 2016-03-17 17:06:57 -04:00
vms_rms.h
x86_64cpuid.pl
x86cpuid.pl