generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
openssl/crypto
History
Luiz Angelo Daros de Luca dd36fce023 OpenSSL is able to generate a certificate with name constraints with any possible 
subjectAltName field. The Name Contraint example in x509v3_config(5) even use IP
as an example:

	nameConstraints=permitted;IP:192.168.0.0/255.255.0.0

However, until now, the verify code for IP name contraints did not exist. Any
check with a IP Address Name Constraint results in a "unsupported name constraint
type" error.

This patch implements support for IP Address Name Constraint (v4 and v6). This code
validaded correcly certificates with multiple IPv4/IPv6 address checking against
a CA certificate with these constraints:

	permitted;IP.1=10.9.0.0/255.255.0.0
	permitted;IP.2=10.48.0.0/255.255.0.0
	permitted;IP.3=10.148.0.0/255.255.0.0
	permitted;IP.4=fdc8:123f:e31f::/ffff:ffff:ffff::

Signed-off-by: Luiz Angelo Daros de Luca <luizluca@gmail.com>
2014-05-23 23:05:38 +01:00
..
aes
aesp8-ppc.pl: add optimized CBC decrypt.
2014-05-23 20:15:06 +02:00
asn1
Don't try and verify signatures if key is NULL (CVE-2013-0166)
2014-04-01 16:37:51 +01:00
bf
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
bio
Set authkey to NULL and check malloc return value.
2014-05-12 00:20:08 +01:00
bn
bignum: allow concurrent BN_MONT_CTX_set_locked()
2014-05-06 17:43:35 -04:00
buffer
Check length first in BUF_strnlen().
2014-05-22 10:13:22 +01:00
camellia
x86_64 assembly pack: make Windows build more robust.
2013-01-22 22:27:28 +01:00
cast
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
cmac
Add functions returning security bits.
2014-03-28 14:49:04 +00:00
cms
Return an error if no recipient type matches.
2014-05-09 14:24:54 +01:00
comp
Assorted bugfixes:
2011-02-03 12:03:51 +00:00
conf
New config module for string tables. This can be used to add new
2012-10-22 13:05:54 +00:00
des
SPARC T4 assembly pack: treat zero input length in CBC.
2014-03-07 10:30:37 +01:00
dh
Add functions returning security bits.
2014-03-28 14:49:04 +00:00
dsa
Add functions returning security bits.
2014-03-28 14:49:04 +00:00
dso
Fix a wrong parameter count ERR_add_error_data
2014-05-19 22:10:14 +01:00
ec
Double free in i2o_ECPublicKey
2014-05-04 00:46:20 +01:00
ecdh
make depend
2014-02-19 20:09:08 +00:00
ecdsa
make depend
2014-02-19 20:09:08 +00:00
engine
make depend
2014-02-19 20:09:08 +00:00
err
misspellings fixes by https://github.com/vlajos/misspell_fixer
2013-09-05 21:39:42 +01:00
evp
evp: prevent underflow in base64 decoding
2014-05-06 17:52:19 -04:00
hmac
Add functions returning security bits.
2014-03-28 14:49:04 +00:00
idea
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
jpake
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
krb5
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
lhash
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
md2
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
md4
Fix some clang warnings.
2013-01-13 21:04:39 +00:00
md5
md5/asm/md5-[586|x86_64].pl: +15% on Atom.
2014-05-04 16:56:00 +02:00
mdc2
Update dependencies.
2011-02-21 17:51:59 +00:00
modes
C64x+ assembly pack: make it work with older toolchain.
2014-05-04 16:38:32 +02:00
objects
CABForum EV OIDs for Subject Jurisdiction of Incorporation or Registration.
2014-02-26 15:33:11 +00:00
ocsp
Don't try and verify signatures if key is NULL (CVE-2013-0166)
2014-04-01 16:37:51 +01:00
pem
Fix warning.
2014-02-13 03:11:58 +00:00
perlasm
Add "teaser" AES module for PowerISA 2.07.
2014-05-12 10:35:29 +02:00
pkcs7
Fixed NULL pointer dereference in PKCS7_dataDecode reported by David Ramos in PR#3339
2014-05-07 23:21:02 +01:00
pkcs12
Fix for PKCS12_create if no-rc2 specified.
2014-05-21 11:28:58 +01:00
pqueue
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
rand
ssleay_rand_add returns a value in 1.1.0
2014-04-09 15:35:51 +01:00
rc2
misspellings fixes by https://github.com/vlajos/misspell_fixer
2013-09-05 21:39:42 +01:00
rc4
C64x+ assembply pack: add RC4 module.
2014-05-04 16:39:59 +02:00
rc5
Update support for Intel compiler: add linux-x86_64-icc and fix problems.
2012-11-28 13:05:13 +00:00
ripemd
misspellings fixes by https://github.com/vlajos/misspell_fixer
2013-09-05 21:39:42 +01:00
rsa
Add functions returning security bits.
2014-03-28 14:49:04 +00:00
seed
seed.c: incredibly enough seed.c can fail to compile on Solaris with certain
2012-02-26 21:52:43 +00:00
sha
C64x+ assembly pack: make it work with older toolchain.
2014-05-04 16:38:32 +02:00
srp
- fix coverity issues 966593-966596
2014-05-06 00:02:31 +01:00
stack
CMS support for key agreeement recipient info.
2013-07-17 21:45:00 +01:00
store
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
threads
Functional VMS changes submitted by sms@antinode.info (Steven M. Schweda).
2009-05-15 16:36:56 +00:00
ts
Fix double frees.
2014-04-22 16:58:43 +01:00
txt_db
Change AR to ARX to allow exclusion of fips object modules
2011-01-26 16:08:08 +00:00
ui
PR: 2717
2012-02-11 23:41:19 +00:00
whrlpool
x86_64 assembly pack: make Windows build more robust.
2013-01-22 22:27:28 +01:00
x509
Fixes to host checking.
2014-05-21 11:31:28 +01:00
x509v3
OpenSSL is able to generate a certificate with name constraints with any possible
2014-05-23 23:05:38 +01:00
.cvsignore
Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev
2008-04-17 10:19:16 +00:00
alphacpuid.pl
alphacpuid.pl: fix alignment bug.
2011-08-12 12:28:52 +00:00
arm_arch.h
crypto/armcap.c: detect ARMv8 capabilities [in 32-bit build].
2014-05-04 10:55:49 +02:00
armcap.c
crypto/armcap.c: detect ARMv8 capabilities [in 32-bit build].
2014-05-04 10:55:49 +02:00
armv4cpuid.S
crypto/armcap.c: detect ARMv8 capabilities [in 32-bit build].
2014-05-04 10:55:49 +02:00
c64xpluscpuid.pl
C64x+ assembly pack: make it work with older toolchain.
2014-05-04 16:38:32 +02:00
cpt_err.c
Implement FIPS_mode and FIPS_mode_set
2011-05-19 18:09:02 +00:00
cryptlib.c
Avoid Windows 8 Getversion deprecated errors.
2014-02-25 13:40:33 +00:00
cryptlib.h
Add a symbol for the first parameter to OPENSSL_showfatal().
2011-06-23 09:46:27 +00:00
crypto-lib.com
Move CT viewer extension code to crypto/x509v3
2014-02-20 18:48:56 +00:00
crypto.h
Move gmtime functions to crypto.h.
2014-02-19 18:02:04 +00:00
cversion.c
(oops) Apologies all, that last header-cleanup commit was from the wrong
2004-04-19 18:09:28 +00:00
ebcdic.c
Oops, this file already had the "empty source file" workaround but it
2003-10-29 22:25:04 +00:00
ebcdic.h
EBCDIC support.
2000-02-01 02:21:16 +00:00
ex_data.c
Avoid warnings with -pedantic, specifically:
2008-07-04 23:12:52 +00:00
fips_err.h
Check for selftest failure in various places.
2011-10-22 17:24:27 +00:00
fips_ers.c
Rename crypto/fips_err.c to fips_ers.c to avoid clash with other fips_err.c
2011-02-03 16:16:30 +00:00
ia64cpuid.S
IA-64 assembler pack: fix typos and make it work on HP-UX.
2011-05-07 20:36:05 +00:00
install-crypto.com
After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS
2011-03-19 10:58:14 +00:00
lock.c
Include support for an add_lock callback to tiny FIPS locking API.
2011-02-14 17:05:42 +00:00
LPdir_nyi.c
Copy a few files from LPlib (a new project of mine), add a wrapper.
2004-07-10 13:16:02 +00:00
LPdir_unix.c
Import changed files from LPlib. The changes are logged as follows
2004-09-23 22:11:39 +00:00
LPdir_vms.c
After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS
2011-03-19 10:58:14 +00:00
LPdir_win32.c
Import changed files from LPlib. The changes are logged as follows
2004-09-23 22:11:39 +00:00
LPdir_win.c
Fix mingw warnings.
2006-10-23 07:41:05 +00:00
LPdir_wince.c
Import changed files from LPlib. The changes are logged as follows
2004-09-23 22:11:39 +00:00
Makefile
make depend
2014-02-19 20:09:08 +00:00
md32_common.h
Initial aarch64 bits.
2013-10-13 19:15:15 +02:00
mem_clr.c
Fix warning.
2007-06-23 18:47:51 +00:00
mem_dbg.c
Updates from 1.0.0-stable branch.
2009-04-20 11:33:12 +00:00
mem.c
Version skew reduction: trivia (I hope).
2012-06-03 22:00:21 +00:00
o_dir_test.c
Copy a few files from LPlib (a new project of mine), add a wrapper.
2004-07-10 13:16:02 +00:00
o_dir.c
DJGPP has opendir() and friends, according to Gisle Vanem <giva@bgnett.no>.
2004-08-03 19:15:21 +00:00
o_dir.h
Copy a few files from LPlib (a new project of mine), add a wrapper.
2004-07-10 13:16:02 +00:00
o_fips.c
Implement FIPS_mode and FIPS_mode_set
2011-05-19 18:09:02 +00:00
o_init.c
remove unnecessary attempt to automatically call OPENSSL_init
2012-07-01 22:25:04 +00:00
o_str.c
Improve WINCE support.
2013-01-19 21:23:13 +01:00
o_str.h
"Overload" SunOS 4.x memcmp, which ruins ASN1_OBJECT table lookups.
2005-09-20 20:19:07 +00:00
o_time.c
Move gmtime functions to crypto.h.
2014-02-19 18:02:04 +00:00
opensslconf.h.in
Eliminate warning induced by http://cvs.openssl.org/chngview?cn=14690 and
2005-12-16 10:37:24 +00:00
opensslv.h
HEAD is now 1.1.0
2009-03-31 10:38:37 +00:00
ossl_typ.h
Add KDF for DH.
2013-08-05 15:45:01 +01:00
pariscid.pl
PA-RISC assembler pack: switch to bve in 64-bit builds.
2013-06-18 10:37:00 +02:00
ppccap.c
ppc64-mont.pl: eliminate dependency on GPRs' upper halves.
2013-11-27 22:50:00 +01:00
ppccpuid.pl
PPC assembly pack: add .size directives.
2013-10-15 00:14:39 +02:00
s390xcap.c
s390x assembler pack: extend OPENSSL_s390xcap_P to 128 bits.
2010-09-18 08:46:53 +00:00
s390xcpuid.S
Multiple assembler packs: add experimental memory bus instrumentation.
2011-04-17 12:46:00 +00:00
sparc_arch.h
Support for SPARC T4 MONT[MUL|SQR] instructions.
2012-11-17 10:34:11 +00:00
sparccpuid.S
sparccpuid.S: work around emulator bug on T1.
2013-02-11 10:39:50 +01:00
sparcv9cap.c
sparcv9cap.c: omit random detection.
2013-12-28 13:31:14 +01:00
symhacks.h
Add callbacks supporting generation and retrieval of supplemental data entries, facilitating RFC 5878 (TLS auth extensions)
2013-09-06 13:59:13 +01:00
thr_id.c
Fix warning.
2012-09-17 17:21:58 +00:00
uid.c
Netware-specific changes,
2003-11-28 13:10:58 +00:00
vms_rms.h
After some adjustments, apply the changes OpenSSL 1.0.0d on OpenVMS
2011-03-19 10:58:14 +00:00
x86_64cpuid.pl
x86[_64]cpuid.pl: add low-level RDSEED.
2014-02-14 17:24:12 +01:00
x86cpuid.pl
x86[_64]cpuid.pl: add low-level RDSEED.
2014-02-14 17:24:12 +01:00