openssl/crypto/x509
Matt Caswell cb22d2ae5a Fix alt chains bug
This is a follow up to the alternate chains certificate forgery issue
(CVE-2015-1793). That issue is exacerbated in 1.0.1 by a related bug which
means that we *always* check for an alternative chain, even if we have
already found a chain. The code is supposed to stop as soon as it has found
one (and does do in master and 1.0.2).

Reviewed-by: Stephen Henson <steve@openssl.org>
2015-07-07 22:57:36 +01:00
..
.cvsignore Add emacs cache files to .cvsignore. 2005-04-11 14:17:07 +00:00
by_dir.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
by_file.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
Makefile Add test for CVE-2015-1793 2015-07-07 22:52:31 +01:00
verify_extra_test.c Fix alt chains bug 2015-07-07 22:57:36 +01:00
x509.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_att.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_cmp.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_d2.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_def.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_ext.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_lu.c Add NULL checks from master 2015-05-13 12:55:23 -04:00
x509_obj.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_r2x.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
x509_req.c Check public key is not NULL. 2015-03-02 15:26:47 +00:00
x509_set.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_trs.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_txt.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_v3.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509_vfy.c Fix alt chains bug 2015-07-07 22:57:36 +01:00
x509_vfy.h Add flag to inhibit checking for alternate certificate chains. Setting this behaviour will force behaviour as per previous versions of OpenSSL 2015-05-20 23:14:24 +02:00
x509_vpm.c X509_VERIFY_PARAM_free: Check param for NULL 2015-04-11 20:57:43 +02:00
x509cset.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509name.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
x509rset.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509spki.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509type.c Correctly check for export size limit 2015-05-20 22:23:28 +02:00
x_all.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00