summaryrefslogtreecommitdiffstats
path: root/lib/libcrypto
AgeCommit message (Expand)AuthorFilesLines
2020-11-11Handle additional certificate error cases in new X.509 verifier.jsing2-12/+79
2020-11-11Update getentropy on Windows to use Cryptography Next Generation (CNG).bcook1-18/+9
2020-11-03Fix bad indent.jsing1-7/+6
2020-11-03Hook X509_STORE_CTX get_issuer() callback from new X509 verifier.jsing1-3/+17
2020-11-02typo: ASN1_parse_time -> ASN1_time_parsetb1-3/+3
2020-10-26Add a safety net to ensure that we set an error on the store context.tb1-1/+3
2020-10-26If x509_verify() fails, ensure that the error is also set on the storetb1-10/+15
2020-10-26Make sure that x509_vfy_check_id() failure also sets ctx->error, not onlytb1-3/+8
2020-10-21Stop documenting some functions as macros.tb3-19/+7
2020-10-12make fixed-sized fixed-value mib[] arrays be constderaadt2-8/+4
2020-10-09Fix leak or double free with OCSP_request_add0_id()tb1-8/+9
2020-09-26Ensure leaf is set up on X509_STORE_CTX before verification.jsing1-9/+7
2020-09-26jumping into the x509 fray with a bunch of whitespace repairderaadt1-6/+6
2020-09-25bump to LibreSSL 3.2.2 ahead of lockbcook1-3/+3
2020-09-25KNF for a few comments and indent a labeltb1-8/+12
2020-09-25Remove some dangling elses for consistency with the rest of the filetb1-25/+19
2020-09-25Simplify UI_new_method()tb1-10/+4
2020-09-25Move variable declaration to the top of UI_set_result and ditchtb1-19/+16
2020-09-25The default branch of a switch somehow got moved inside of a pointlesstb1-3/+3
2020-09-25Simplify call to ERR_print_errors_cb()tb1-5/+4
2020-09-24Error out if ok_chars and cancel_chars overlaptb1-2/+4
2020-09-24Fix a number of leaks in the UI_dup_* functionstb1-142/+98
2020-09-24Push ERR_R_MALLOC_FAILURE onto the error stacktb1-3/+3
2020-09-24Make free_strings() NULL safetb1-1/+3
2020-09-24KNF and grammar tweaks for comments; wrap a few overlong prototypes.tb1-161/+186
2020-09-23Ensure chain is set on the X509_STORE_CTX before triggering callback.jsing1-12/+39
2020-09-21Fix some line wrapping and other whitespace issues.tb1-45/+34
2020-09-21Move freeing and zeroing up to right after the while loop.tb1-5/+5
2020-09-20Avoid memleak caused by shadowingtb1-2/+5
2020-09-20KNF/whitespace nitstb2-6/+7
2020-09-20Correct a 1 byte read overflow in x509_contraints_uri and addbeck1-4/+9
2020-09-20Fix a memory leak in x509_constraints_extract_namestb1-6/+6
2020-09-19remove superfluous NULL checkbeck1-2/+2
2020-09-18Fix potential overflow in CN subject line parsing, thanks tobeck1-4/+5
2020-09-17Add a comment saying that the public function NAME_CONSTRAINTS_check(3)schwarze1-2/+5
2020-09-17Install the new page SSL_set1_host(3), link to it from relevant places,schwarze2-10/+14
2020-09-16revert my putting this on a diet. sadly the NAME_CONSTRAINTS_checkbeck1-7/+1
2020-09-16noop NAME_CONSTRAINTS_check stubinoguchi1-4/+5
2020-09-16Make check in x509_verify_ctx_set_max_signatures() consistent with others.jsing1-4/+2
2020-09-16Dedup code in x509_verify_ctx_new_from_xsc().jsing1-14/+7
2020-09-15set error_depth and current_cert to make more legacy callbacks that don't checkbeck1-1/+3
2020-09-15Deduplicate the time validation code between the legacy and newbeck3-27/+8
2020-09-15ifdef out code that is no longer used in here. once we are certainbeck1-2/+5
2020-09-14simplify RETURN VALUES for x509_verify(3) after beck@ made the rulesschwarze1-7/+3
2020-09-14Add initial man page for new x509_verify chain validatorbeck1-0/+225
2020-09-14Set error if we are given an NULL ctx in x509_verify, and set errorbeck1-5/+3
2020-09-14nuke a stray spacetb1-2/+2
2020-09-14Fix potential leak when tmpext fails to be added tobeck1-2/+6
2020-09-14remove unneeded variable "type".beck1-6/+5
2020-09-14Don't leak names on successbeck1-1/+2