Dr. Stephen Henson 71c34b7f2d Fix verify loop with CRL checking. ...

PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
(cherry picked from commit 4b26645c1a71cf9ce489e4f79fc836760b670ffe)

2013-08-06 16:08:04 +01:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

by_dir.c

Fix X509_STORE locking

2010-02-19 18:26:23 +00:00

by_file.c

Keep disclaiming 16-bit platform support. For now remove WIN16 references

2005-12-18 19:11:37 +00:00

Makefile

Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev

2008-04-17 10:19:16 +00:00

x509_att.c

Update from stable branch.

2008-06-26 23:27:31 +00:00

x509_cmp.c

New function X509_chain_up_ref to dup and up the reference count of

2012-12-26 16:04:03 +00:00

x509_d2.c

Make all configuration macros available for application by making

2001-02-19 16:06:34 +00:00

x509_def.c

Initial support for MacOS.

1999-09-11 17:54:18 +00:00

x509_err.c

initial support for delta CRL generations by diffing two full CRLs

2013-01-17 18:51:50 +00:00

x509_ext.c

X509V3_add_i2d() needs to be able to allocate a

2000-12-27 13:42:43 +00:00

x509_lu.c

New functions to set lookup_crls callback and to retrieve internal X509_STORE

2013-01-17 16:32:33 +00:00

x509_obj.c

Bunch of constifications.

2007-10-13 15:51:32 +00:00

x509_r2x.c

add additional checks + cleanup

2006-01-29 23:12:22 +00:00

x509_req.c

Support for certificate status TLS extension.

2007-09-26 21:56:59 +00:00

x509_set.c

use const ASN1_TIME *

2006-12-11 22:35:51 +00:00

x509_trs.c

Backport OCSP fixes.

2012-12-14 12:53:53 +00:00

x509_txt.c

add suite B chain validation flags and associated verify errors

2012-12-26 16:01:31 +00:00

x509_v3.c

improved error checking and some fixes

2005-07-26 21:10:34 +00:00

x509_vfy.c

Fix verify loop with CRL checking.

2013-08-06 16:08:04 +01:00

x509_vfy.h

New functions to set lookup_crls callback and to retrieve internal X509_STORE

2013-01-17 16:32:33 +00:00

x509_vpm.c

Integrate host, email and IP address checks into X509_verify.

2012-12-19 15:14:10 +00:00

x509.h

initial support for delta CRL generations by diffing two full CRLs

2013-01-17 18:51:50 +00:00

x509cset.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

x509name.c

no need to cast away the const

2006-03-04 13:55:55 +00:00

x509rset.c

Change #include filenames from <foo.h> to <openssl.h>.

1999-04-23 22:13:45 +00:00

x509spki.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

x509type.c

? crypto/aes/aes-armv4.S

2011-10-06 20:45:08 +00:00

x_all.c

Reencode with X509_CRL_ctx_sign too.

2013-06-05 15:06:02 +01:00