Dr. Stephen Henson 66e8211c0b Don't try and verify signatures if key is NULL (CVE-2013-0166) ...

Add additional check to catch this in ASN1_item_verify too.

2013-02-05 16:50:31 +00:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

Makefile

make update.

2009-01-05 12:47:11 +00:00

ocsp_asn.c

Change old obsolete email address...

2008-11-05 18:36:57 +00:00

ocsp_cl.c

improved error checking and some fixes

2005-07-26 20:55:17 +00:00

ocsp_err.c

Backport certificate status request TLS extension support to 0.9.8.

2007-10-12 00:00:36 +00:00

ocsp_ext.c

Consistency.

2005-03-31 13:57:54 +00:00

ocsp_ht.c

We can't always read 6 bytes in an OCSP response: fix so error statuses

2010-10-06 18:01:35 +00:00

ocsp_lib.c

Fix the ECDSA timing attack mentioned in the paper at:

2011-05-25 14:52:54 +00:00

ocsp_prn.c

Fix gcc 4.6 warnings. Check TLS server hello extension length.

2010-06-12 13:18:58 +00:00

ocsp_srv.c

Change old obsolete email address...

2008-11-05 18:36:57 +00:00

ocsp_vfy.c

Don't try and verify signatures if key is NULL (CVE-2013-0166)

2013-02-05 16:50:31 +00:00

ocsp.h

Backport certificate status request TLS extension support to 0.9.8.

2007-10-12 00:00:36 +00:00