openssl/crypto/x509
Rich Salz c0452248ea Ignore dups in X509_STORE_add_*
X509_STORE_add_cert and X509_STORE_add_crl are changed to return
success if the object to be added was already found in the store, rather
than returning an error.

Raise errors if empty or malformed files are read when loading certificates
and CRLs.

Remove NULL checks and allow a segv to occur.
Add error handing for all calls to X509_STORE_add_c{ert|tl}

Refactor these two routines into one.

Bring the unit test for duplicate certificates up to date using the test
framework.

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2830)
2017-04-20 15:33:42 -04:00
..
build.info move x_pubkey.c to crypto/x509 2016-03-22 15:28:11 +00:00
by_dir.c Ignore dups in X509_STORE_add_* 2017-04-20 15:33:42 -04:00
by_file.c Ignore dups in X509_STORE_add_* 2017-04-20 15:33:42 -04:00
t_crl.c Fix undefined behaviour when printing the X509 and CRL version 2017-01-15 22:21:08 +01:00
t_req.c Fix undefined behaviour when printing the X509 and CRL version 2017-01-15 22:21:08 +01:00
t_x509.c Add missing braces. 2017-01-16 04:50:12 +01:00
x509_att.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509_cmp.c Add X509_get0_serialNumber() and constify OCSP_cert_to_id() 2016-08-19 12:47:31 +01:00
x509_d2.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509_def.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509_err.c Ignore dups in X509_STORE_add_* 2017-04-20 15:33:42 -04:00
x509_ext.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509_lcl.h Add X509_VERIFY_PARAM inheritance flag set/get 2016-12-13 14:30:21 -05:00
x509_lu.c Ignore dups in X509_STORE_add_* 2017-04-20 15:33:42 -04:00
x509_obj.c Constify some X509_NAME, ASN1 printing code 2016-08-23 11:47:22 +02:00
x509_r2x.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509_req.c constify X509_REQ_get0_signature() 2016-08-19 12:47:31 +01:00
x509_set.c Add support for reference counting using C11 atomics 2016-11-17 22:02:25 +01:00
x509_trs.c Remove pointless free loop in X509_TRUST_cleanup() 2016-06-20 09:58:58 -04:00
x509_txt.c OCSP Updates: error codes and multiple certificates 2017-04-12 14:41:10 -04:00
x509_v3.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509_vfy.c X509 time: tighten validation per RFC 5280 2017-02-24 17:37:08 +01:00
x509_vpm.c GH2176: Add X509_VERIFY_PARAM_get_time 2017-01-12 09:54:09 -05:00
x509cset.c Add support for reference counting using C11 atomics 2016-11-17 22:02:25 +01:00
x509name.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509rset.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509spki.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509type.c Constify X509_certificate_type() 2016-08-17 14:59:54 +01:00
x_all.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x_attrib.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_crl.c X509_CRL_digest() - ensure precomputed sha1 hash before returning it 2017-01-28 20:07:04 +01:00
x_exten.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_name.c Combined patch against master branch for the following issues: 2017-02-03 20:39:52 +01:00
x_pubkey.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_req.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_x509.c Constify X509_get0_signature() 2016-08-17 14:12:55 +01:00
x_x509a.c Constify some inputs buffers 2016-08-23 11:47:22 +02:00