Dr. Stephen Henson 0930251df8 Don't use expired certificates if possible. ...

When looking for the issuer of a certificate, if current candidate is
expired, continue looking. Only return an expired certificate if no valid
certificates are found.

PR#3359

2014-05-25 04:50:15 +01:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

by_dir.c

x509/by_dir.c: fix run-away pointer (and potential SEGV)

2014-02-24 15:16:56 +01:00

by_file.c

Keep disclaiming 16-bit platform support. For now remove WIN16 references

2005-12-18 19:11:37 +00:00

Makefile

Rename vpm_int.h to x509_lcl.h

2014-05-25 04:50:14 +01:00

x509_att.c

Update from stable branch.

2008-06-26 23:27:31 +00:00

x509_cmp.c

Compare encodings in X509_cmp as well as hash.

2014-01-26 16:29:50 +00:00

x509_d2.c

Make all configuration macros available for application by making

2001-02-19 16:06:34 +00:00

x509_def.c

Initial support for MacOS.

1999-09-11 17:54:18 +00:00

x509_err.c

initial support for delta CRL generations by diffing two full CRLs

2012-12-04 18:35:36 +00:00

x509_ext.c

X509V3_add_i2d() needs to be able to allocate a

2000-12-27 13:42:43 +00:00

x509_lcl.h

Don't use expired certificates if possible.

2014-05-25 04:50:15 +01:00

x509_lu.c

Don't use expired certificates if possible.

2014-05-25 04:50:15 +01:00

x509_obj.c

Bunch of constifications.

2007-10-13 15:51:32 +00:00

x509_r2x.c

add additional checks + cleanup

2006-01-29 23:12:22 +00:00

x509_req.c

Support for certificate status TLS extension.

2007-09-26 21:56:59 +00:00

x509_set.c

use const ASN1_TIME *

2006-12-11 22:35:51 +00:00

x509_trs.c

Experimental support for partial chain verification: if an intermediate

2010-02-25 00:17:22 +00:00

x509_txt.c

Integrate host, email and IP address checks into X509_verify.

2012-12-05 18:35:20 +00:00

x509_v3.c

improved error checking and some fixes

2005-07-26 21:10:34 +00:00

x509_vfy.c

Don't use expired certificates if possible.

2014-05-25 04:50:15 +01:00

x509_vfy.h

Fixes to host checking.

2014-05-21 11:31:28 +01:00

x509_vpm.c

Rename vpm_int.h to x509_lcl.h

2014-05-25 04:50:14 +01:00

x509.h

initial support for delta CRL generations by diffing two full CRLs

2012-12-04 18:35:36 +00:00

x509cset.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

x509name.c

no need to cast away the const

2006-03-04 13:55:55 +00:00

x509rset.c

Change #include filenames from <foo.h> to <openssl.h>.

1999-04-23 22:13:45 +00:00

x509spki.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

x509type.c

? crypto/aes/aes-armv4.S

2011-10-06 20:44:02 +00:00

x_all.c

Reencode with X509_CRL_ctx_sign too.

2013-06-05 15:06:03 +01:00