Viktor Dukhovni a3baa17105 Fix missing ok=0 with locally blacklisted CAs ...

Also in X509_verify_cert() avoid using "i" not only as a loop
counter, but also as a trust outcome and as an error ordinal.

Finally, make sure that all "goto end" jumps return an error, with
"end" renamed to "err" accordingly.

[ The 1.1.0 version of X509_verify_cert() is major rewrite,
  which addresses these issues in a more systemic way. ]

Reviewed-by: Rich Salz <rsalz@openssl.org>

2016-02-05 10:54:11 -05:00

..

by_dir.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

by_file.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

Makefile

Add test for CVE-2015-1793

2015-07-07 21:48:55 +01:00

verify_extra_test.c

Add test for CVE-2015-1793

2015-07-07 21:48:55 +01:00

vpm_int.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_att.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_cmp.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_d2.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_def.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_ext.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_lu.c

Remove useless code

2015-10-23 20:32:59 +02:00

x509_obj.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_r2x.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

x509_req.c

Check public key is not NULL.

2015-03-02 15:26:41 +00:00

x509_set.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_trs.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_txt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_v3.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509_vfy.c

Fix missing ok=0 with locally blacklisted CAs

2016-02-05 10:54:11 -05:00

x509_vfy.h

Fix X509_STORE_CTX_cleanup()

2016-01-02 11:14:05 -05:00

x509_vpm.c

Empty SNI names are not valid

2016-01-17 16:58:48 -05:00

x509.h

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509cset.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509name.c

Re-align some comments after running the reformat script.

2015-01-22 09:31:48 +00:00

x509rset.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509spki.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00

x509type.c

Correctly check for export size limit

2015-05-20 22:19:34 +02:00

x_all.c

Run util/openssl-format-source -v -c .

2015-01-22 09:31:38 +00:00