Dr. Stephen Henson 7cf0529b52 Fix verify loop with CRL checking. ...

PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
(cherry picked from commit 4b26645c1a71cf9ce489e4f79fc836760b670ffe)

2013-08-06 16:08:09 +01:00

..

.cvsignore

Add emacs cache files to .cvsignore.

2005-04-11 14:17:07 +00:00

by_dir.c

Fix X509_STORE locking

2010-02-19 18:26:23 +00:00

by_file.c

Keep disclaiming 16-bit platform support. For now remove WIN16 references

2005-12-18 19:11:37 +00:00

Makefile

Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev

2008-04-17 10:19:16 +00:00

x509_att.c

Update from stable branch.

2008-06-26 23:27:31 +00:00

x509_cmp.c

Reduce version skew.

2012-06-08 09:18:47 +00:00

x509_d2.c

Make all configuration macros available for application by making

2001-02-19 16:06:34 +00:00

x509_def.c

Initial support for MacOS.

1999-09-11 17:54:18 +00:00

x509_err.c

Update from 0.9.8 stable. Eliminate duplicate error codes.

2006-11-21 21:29:44 +00:00

x509_ext.c

X509V3_add_i2d() needs to be able to allocate a

2000-12-27 13:42:43 +00:00

x509_lu.c

Minor compatibility fixes [from HEAD].

2012-04-16 17:36:12 +00:00

x509_obj.c

Bunch of constifications.

2007-10-13 15:51:32 +00:00

x509_r2x.c

add additional checks + cleanup

2006-01-29 23:12:22 +00:00

x509_req.c

Support for certificate status TLS extension.

2007-09-26 21:56:59 +00:00

x509_set.c

use const ASN1_TIME *

2006-12-11 22:35:51 +00:00

x509_trs.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

x509_txt.c

Add support for CRLs partitioned by reason code.

2008-08-29 11:37:21 +00:00

x509_v3.c

improved error checking and some fixes

2005-07-26 21:10:34 +00:00

x509_vfy.c

Fix verify loop with CRL checking.

2013-08-06 16:08:09 +01:00

x509_vfy.h

Add missing functions to allow access to newer X509_STORE_CTX status

2009-10-31 19:21:47 +00:00

x509_vpm.c

Inherit parameters properly in SSL contexts: any parameters set should

2009-06-30 11:21:00 +00:00

x509.h

Backport PSS signature support from HEAD.

2011-10-09 23:13:50 +00:00

x509cset.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

x509name.c

no need to cast away the const

2006-03-04 13:55:55 +00:00

x509rset.c

Change #include filenames from <foo.h> to <openssl.h>.

1999-04-23 22:13:45 +00:00

x509spki.c

Update obsolete email address...

2008-11-05 18:39:08 +00:00

x509type.c

? crypto/aes/aes-armv4.S

2011-10-06 20:45:08 +00:00

x_all.c

Reencode with X509_CRL_ctx_sign too.

2013-05-03 13:06:18 +01:00