Emilia Kasper 0923e7df9e Fix hostname validation in the command-line tool to honour negative return values. ...

Specifically, an ASN.1 NumericString in the certificate CN will fail UTF-8 conversion
and result in a negative return value, which the "x509 -checkhost" command-line option
incorrectly interpreted as success.

Also update X509_check_host docs to reflect reality.

Thanks to Sean Burford (Google) for reporting this issue.

Reviewed-by: Richard Levitte <levitte@openssl.org>

2015-02-10 15:35:20 +01:00

..

ext_dat.h

OPENSSL_NO_xxx cleanup: RFC3779

2015-01-27 10:19:14 -05:00

Makefile

Remove fipscanister build functionality from makefiles.

2014-12-08 13:23:45 +00:00

pcy_cache.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

pcy_data.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

pcy_int.h

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

pcy_lib.c

Dead code cleanup: crypto/*.c, x509v3, demos

2015-02-02 11:08:16 -05:00

pcy_map.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

pcy_node.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

pcy_tree.c

Dead code cleanup: crypto/*.c, x509v3, demos

2015-02-02 11:08:16 -05:00

tabtest.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_addr.c

Fix int/unsigned compiler complaint

2015-01-28 15:41:14 -05:00

v3_akey.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_akeya.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_alt.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_asid.c

OPENSSL_NO_xxx cleanup: RFC3779

2015-01-27 10:19:14 -05:00

v3_bcons.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_bitst.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_conf.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_cpols.c

util/mkstack.pl now generates entire safestack.h

2015-02-06 10:47:53 -05:00

v3_crld.c

Remove obsolete IMPLEMENT_ASN1_SET_OF

2015-02-09 12:47:28 +00:00

v3_enum.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_extku.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_genn.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_ia5.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_info.c

ifdef cleanup, part 4a: '#ifdef undef'

2015-01-24 10:58:38 -05:00

v3_int.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_lib.c

util/mkstack.pl now generates entire safestack.h

2015-02-06 10:47:53 -05:00

v3_ncons.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_ocsp.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_pci.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_pcia.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_pcons.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_pku.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_pmaps.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_prn.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_purp.c

util/mkstack.pl now generates entire safestack.h

2015-02-06 10:47:53 -05:00

v3_scts.c

Re-align some comments after running the reformat script.

2015-01-22 09:20:10 +00:00

v3_skey.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3_sxnet.c

Remove obsolete IMPLEMENT_ASN1_SET_OF

2015-02-09 12:47:28 +00:00

v3_utl.c

Fix hostname validation in the command-line tool to honour negative return values.

2015-02-10 15:35:20 +01:00

v3conf.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3err.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3nametest.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

v3prin.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

x509v3.h

Remove X509_PAIR

2015-02-06 10:55:31 -05:00