generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
openssl/crypto
History
Viktor Dukhovni aea6116146 Make it possible to check for explicit auxiliary trust 
By default X509_check_trust() trusts self-signed certificates from
the trust store that have no explicit local trust/reject oids
encapsulated as a "TRUSTED CERTIFICATE" object.  (See the -addtrust
and -trustout options of x509(1)).

This commit adds a flag that makes it possible to distinguish between
that implicit trust, and explicit auxiliary settings.

With flags |= X509_TRUST_NO_SS_COMPAT, a certificate is only trusted
via explicit trust settings.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
2016-01-29 10:53:46 -05:00
..
aes
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
asn1
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
async
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
bf
Remove outdated legacy crypto options
2016-01-27 19:05:50 -05:00
bio
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
bn
Always DPURIFY
2016-01-29 16:33:13 +01:00
buffer
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
camellia
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
cast
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
chacha
Remove update tags
2016-01-20 09:09:14 -05:00
cmac
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
cms
Comment side-effect only calls of X509_check_purpose
2016-01-27 22:16:12 -05:00
comp
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
conf
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
ct
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
des
Remove outdated legacy crypto options
2016-01-27 19:05:50 -05:00
dh
Add missing return value checks
2016-01-29 11:53:32 +00:00
dsa
Use callback for DSAPublicKey
2016-01-28 23:41:35 +00:00
dso
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
ec
Fix bug in nistp224/256/521 where have_precompute_mult always returns 0
2016-01-29 12:56:58 +00:00
engine
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
err
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
evp
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
hmac
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
idea
Remove outdated legacy crypto options
2016-01-27 19:05:50 -05:00
include/internal
Remove outdated legacy crypto options
2016-01-27 19:05:50 -05:00
jpake
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
kdf
prf redirection build fixes
2016-01-19 15:33:45 +00:00
lhash
Remove outdated tests
2016-01-28 15:45:02 -05:00
md2
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
md4
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
md5
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
mdc2
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
modes
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
objects
Always DPURIFY
2016-01-29 16:33:13 +01:00
ocsp
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
pem
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
perlasm
ARMv4 assembly pack: allow Thumb2 even in iOS build,
2015-12-07 12:06:06 +01:00
pkcs7
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
pkcs12
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
poly1305
Remove update tags
2016-01-20 09:09:14 -05:00
rand
Always DPURIFY
2016-01-29 16:33:13 +01:00
rc2
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
rc4
Remove outdated legacy crypto options
2016-01-27 19:05:50 -05:00
rc5
Keep RC5 bit shifts in [0..31]
2016-01-28 21:39:46 -05:00
ripemd
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
rsa
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
seed
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
sha
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
srp
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
stack
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
store
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
ts
Comment side-effect only calls of X509_check_purpose
2016-01-27 22:16:12 -05:00
txt_db
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
ui
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
whrlpool
Remove update tags
2016-01-20 09:09:14 -05:00
x509
Make it possible to check for explicit auxiliary trust
2016-01-29 10:53:46 -05:00
x509v3
Comment side-effect only calls of X509_check_purpose
2016-01-27 22:16:12 -05:00
alphacpuid.pl
alphacpuid.pl: fix alignment bug.
2011-08-12 12:28:52 +00:00
arm64cpuid.pl
Add assembly support to ios64-cross.
2015-01-23 15:38:41 +01:00
arm_arch.h
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
armcap.c
Add assembly support for 32-bit iOS.
2015-04-20 15:06:22 +02:00
armv4cpuid.pl
ARMv4 assembly pack: implement support for Thumb2.
2015-09-25 13:34:02 +02:00
c64xpluscpuid.pl
C64x+ assembly pack: make it work with older toolchain.
2014-05-04 16:38:32 +02:00
cpt_err.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
cryptlib.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
crypto-lib.com
Move Makefiles to Makefile.in
2016-01-12 16:26:56 -05:00
cversion.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
ebcdic.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
ex_data.c
Only declare stacks in headers
2016-01-07 18:00:51 +00:00
fips_err.h
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
fips_ers.c
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
ia64cpuid.S
IA-64 assembler pack: fix typos and make it work on HP-UX.
2011-05-07 20:36:05 +00:00
install-crypto.com
Remove remaining Kerberos references
2015-05-13 15:08:10 +01:00
lock.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
LPdir_nyi.c
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
LPdir_unix.c
memset, memcpy, sizeof consistency fixes
2015-05-05 22:18:59 -04:00
LPdir_vms.c
memset, memcpy, sizeof consistency fixes
2015-05-05 22:18:59 -04:00
LPdir_win32.c
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
LPdir_win.c
memset, memcpy, sizeof consistency fixes
2015-05-05 22:18:59 -04:00
LPdir_wince.c
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
Makefile.in
Remove update tags
2016-01-20 09:09:14 -05:00
mem_clr.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
mem_dbg.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
mem_sec.c
Add CRYPTO_secure_zalloc
2016-01-27 23:34:13 -05:00
mem.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
o_dir.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
o_fips.c
Identify and move common internal libcrypto header files
2015-05-14 17:21:40 +02:00
o_init.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
o_str.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
o_time.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
pariscid.pl
PA-RISC assembler pack: switch to bve in 64-bit builds.
2013-06-18 10:37:00 +02:00
ppc_arch.h
crypto/ppccap.c: add SIGILL-free processor capability detection code.
2015-12-14 16:08:49 +01:00
ppccap.c
crypto/ppccap.c: add SIGILL-free processor capability detection code.
2015-12-14 16:08:49 +01:00
ppccpuid.pl
crpyto/ppccpuid.pl: add FPU probe and fix OPENSSL_rdtsc.
2015-12-14 16:09:25 +01:00
s390xcap.c
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
s390xcpuid.S
Multiple assembler packs: add experimental memory bus instrumentation.
2011-04-17 12:46:00 +00:00
sparc_arch.h
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
sparccpuid.S
Conversion to UTF-8 where needed
2015-07-14 01:10:01 +02:00
sparcv9cap.c
crypto/sparcv9cap.c: add SIGILL-free feature detection for Solaris.
2015-12-02 10:53:33 +01:00
thr_id.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
uid.c
Remove /* foo.c */ comments
2016-01-26 16:40:43 -05:00
vms_rms.h
Run util/openssl-format-source -v -c .
2015-01-22 09:20:09 +00:00
x86_64cpuid.pl
x86[_64]cpuid.pl: add low-level RDSEED.
2014-02-14 17:24:12 +01:00
x86cpuid.pl
Undo a90081576c94f9f54de1755188a00ccc1760549a
2014-08-09 08:02:20 -04:00