aboutsummaryrefslogtreecommitdiffstats
path: root/crypto/x509
Commit message (Expand)AuthorAgeFilesLines
* x509: key the duplicate-extension hash with SipHash to resist floodingDaniel Kubec4 days1-13/+67
* crypto/x509/x509_lu.c: avoid freeing X509_OBJECTs in X509_STORE_get0_objects()Eugene Syromiatnikov12 days1-13/+49
* Limit proxy pathlen to 0..255Bob Beck2026-10-051-3/+23
* Limit certificate path length to a reasonable value.Bob Beck2026-10-051-0/+5
* Fix memory leaks from duplicate X509v3 section fieldsGreensi72026-10-022-1/+18
* Deprecate X509_OBJECT_up_ref_count()Daniel Kubec2026-10-021-12/+23
* Build AIA entry with asprintf instead of strlen voodooBob Beck2026-10-021-5/+1
* Make bignum_to_string easier with asprintf()Bob Beck2026-10-021-16/+5
* Defer computation of relative CRLDP namesViktor Dukhovni2026-09-293-59/+112
* Don't update the certificate in cache_extensions if we lost the race.Bob Beck2026-09-261-15/+50
* Fix EXFLAG_SS set on self-issued rollover CA certificatesMounir IDRASSI2026-09-211-1/+8
* NUL-terminate ASN1_STRING data built inside libcryptoBob Beck2026-09-188-16/+16
* Use SipHash for the internal fingerprintBob Beck2026-09-174-14/+17
* Compute X509_get_signature_info() on demand, not in the cacheBob Beck2026-09-172-16/+12
* Make the cached CRL fingerprint internal-onlyBob Beck2026-09-172-11/+4
* Make the cached SHA-1 fingerprint internal-onlyBob Beck2026-09-174-18/+29
* Treat a modified certificate or CRL as equal only to itselfBob Beck2026-09-171-29/+39
* Fall back to comparing the encoding in X509_CRL_match()Bob Beck2026-09-171-3/+18
* Compare the signature in X509_cmp()Bob Beck2026-09-171-0/+7
* Mark the encoding stale when adding a CRL extensionBob Beck2026-09-171-1/+9
* Mark the encoding stale in X509_set_serialNumber()Bob Beck2026-09-171-2/+2
* X509: complete ASN.1 stream failure handlingDarren Carreras2026-09-141-3/+2
* X509: keep names modified until canonicalization succeedsDarren Carreras2026-09-141-12/+23
* Add public API for IPAddrBlocks (RFC 3779)herbenderbler2026-09-101-2/+4
* Fix crash on programmatically added X509 extensionsDmitry Belyavskiy2026-09-101-3/+23
* Copyright year updatesopenssl-machine2026-09-0917-17/+17
* Accept CRLs whose IDP names the issuer of a certificate without CDPPaul Grubbs2026-09-071-2/+56
* Generate the error headers and tables at build timeBob Beck2026-09-012-254/+0
* Generate the committed generator-output headers at build timeBob Beck2026-09-011-0/+2
* Sweep for printf UB - don't printf %s NULLBob Beck2026-08-276-21/+71
* Fix unguarded memcpy's asn1_type_get_int_oct()and X509_NAME_get_text_by_OBJ()Bob Beck2026-08-271-1/+2
* Add X509V3_EXT_add_nconf fuzzerGreensi72026-08-271-0/+7
* Convert BIO_snprintf() in ossl_ipaddr_to_asc() to snprintf() and guard the lo...Bob Beck2026-08-261-2/+2
* Convert BIO_snprintf() callers that ignore the return value to snprintf().Bob Beck2026-08-264-6/+6
* Apply DNS name constraints to the subject CN only when it may matchBob Beck2026-08-261-29/+10
* Stop consulting the subject DN by default in X509 name checksBob Beck2026-08-261-15/+11
* Fix get_cert_by_subject_ex() to gracefully handle broken symlinks (but not on...Dr. David von Oheimb2026-08-191-13/+23
* Fix X509_ATTRIBUTE_set1_data() for BIT STRING attribute valuesMounir IDRASSI2026-08-191-2/+18
* Tighten CRL issuer matchingMounir IDRASSI2026-08-181-7/+15
* Skip partial-chain trust anchors in revocation checksMounir IDRASSI2026-08-181-11/+21
* Consistently use ASN1_ITEM_rptr() for ASN1_ITEMsTheo Buehler2026-08-185-6/+6
* Change set suffix in ASN1_STRING_set_{data,string} to set1Eugene Syromiatnikov2026-08-118-15/+15
* Rename ASN1_STRING_length_ex() to ASN1_STRING_get_length()Eugene Syromiatnikov2026-08-114-4/+4
* Run clang-format - choreGreensi72026-08-093-6/+6
* Reject duplicate fields in X509v3 configGreensi72026-08-094-11/+36
* Fix memory leaks in x509v3 config handlingGreensi72026-08-093-0/+8
* Fix NULL dereference in v2i_AUTHORITY_KEYID()Greensi72026-08-071-1/+4
* x509: fix OCSP BasicResponse leak in in-verify checkMounir IDRASSI2026-08-031-2/+12
* x509: keep RFC 3779 stacks hole-free after a failed canonizeMounir IDRASSI2026-07-272-36/+94
* Guard against NULL data in empty ASN1_STRINGsNorbert Pocs2026-07-211-1/+3
generated by cgit (git 2.51.2) at 2026-10-25 15:32:29 +0100