openssl/crypto/x509
Emilia Kasper 80770da39e X509 time: tighten validation per RFC 5280
- Reject fractional seconds
- Reject offsets
- Check that the date/time digits are in valid range.
- Add documentation for X509_cmp_time

GH issue 2620

Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
2017-02-24 17:37:08 +01:00
..
build.info move x_pubkey.c to crypto/x509 2016-03-22 15:28:11 +00:00
by_dir.c Use X509_LOOKUP_TYPE for lookup type consistently. 2016-07-26 16:23:02 +01:00
by_file.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
t_crl.c Fix undefined behaviour when printing the X509 and CRL version 2017-01-15 22:21:08 +01:00
t_req.c Fix undefined behaviour when printing the X509 and CRL version 2017-01-15 22:21:08 +01:00
t_x509.c Add missing braces. 2017-01-16 04:50:12 +01:00
x509_att.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509_cmp.c Add X509_get0_serialNumber() and constify OCSP_cert_to_id() 2016-08-19 12:47:31 +01:00
x509_d2.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509_def.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509_err.c Check for errors allocating the error strings. 2016-07-20 19:20:53 +02:00
x509_ext.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509_lcl.h Add X509_VERIFY_PARAM inheritance flag set/get 2016-12-13 14:30:21 -05:00
x509_lu.c Add support for reference counting using C11 atomics 2016-11-17 22:02:25 +01:00
x509_obj.c Constify some X509_NAME, ASN1 printing code 2016-08-23 11:47:22 +02:00
x509_r2x.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509_req.c constify X509_REQ_get0_signature() 2016-08-19 12:47:31 +01:00
x509_set.c Add support for reference counting using C11 atomics 2016-11-17 22:02:25 +01:00
x509_trs.c Remove pointless free loop in X509_TRUST_cleanup() 2016-06-20 09:58:58 -04:00
x509_txt.c Check that the subject name in a proxy cert complies to RFC 3820 2016-06-20 21:34:37 +02:00
x509_v3.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509_vfy.c X509 time: tighten validation per RFC 5280 2017-02-24 17:37:08 +01:00
x509_vpm.c GH2176: Add X509_VERIFY_PARAM_get_time 2017-01-12 09:54:09 -05:00
x509cset.c Add support for reference counting using C11 atomics 2016-11-17 22:02:25 +01:00
x509name.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x509rset.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509spki.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509type.c Constify X509_certificate_type() 2016-08-17 14:59:54 +01:00
x_all.c Add -Wundef to --strict-warnings options. 2017-02-24 09:21:59 +01:00
x_attrib.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_crl.c X509_CRL_digest() - ensure precomputed sha1 hash before returning it 2017-01-28 20:07:04 +01:00
x_exten.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_name.c Combined patch against master branch for the following issues: 2017-02-03 20:39:52 +01:00
x_pubkey.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_req.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_x509.c Constify X509_get0_signature() 2016-08-17 14:12:55 +01:00
x_x509a.c Constify some inputs buffers 2016-08-23 11:47:22 +02:00