openssl/crypto/x509
Dr. Stephen Henson 4b26645c1a Fix verify loop with CRL checking.
PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
2013-07-12 17:48:41 +01:00
..
.cvsignore Add emacs cache files to .cvsignore. 2005-04-11 14:17:07 +00:00
by_dir.c Fix X509_STORE locking 2010-02-19 18:27:07 +00:00
by_file.c Keep disclaiming 16-bit platform support. For now remove WIN16 references 2005-12-18 19:11:37 +00:00
Makefile Make "make depend" work on MacOS out of the box. 2013-01-19 14:14:30 +00:00
x509.h initial support for delta CRL generations by diffing two full CRLs 2012-12-04 18:35:36 +00:00
x509_att.c Update from stable branch. 2008-06-26 23:27:31 +00:00
x509_cmp.c Rename Suite B functions for consistency. 2012-08-03 15:58:15 +00:00
x509_d2.c
x509_def.c
x509_err.c initial support for delta CRL generations by diffing two full CRLs 2012-12-04 18:35:36 +00:00
x509_ext.c
x509_lu.c New functions to set lookup_crls callback and to retrieve internal X509_STORE 2012-11-27 23:47:48 +00:00
x509_obj.c Bunch of constifications. 2007-10-13 15:51:32 +00:00
x509_r2x.c add additional checks + cleanup 2006-01-29 23:12:22 +00:00
x509_req.c Support for certificate status TLS extension. 2007-09-26 21:56:59 +00:00
x509_set.c use const ASN1_TIME * 2006-12-11 22:35:51 +00:00
x509_trs.c Experimental support for partial chain verification: if an intermediate 2010-02-25 00:17:22 +00:00
x509_txt.c Integrate host, email and IP address checks into X509_verify. 2012-12-05 18:35:20 +00:00
x509_v3.c improved error checking and some fixes 2005-07-26 21:10:34 +00:00
x509_vfy.c Fix verify loop with CRL checking. 2013-07-12 17:48:41 +01:00
x509_vfy.h New verify flag to return success if we have any certificate in the 2012-12-13 18:14:46 +00:00
x509_vpm.c Integrate host, email and IP address checks into X509_verify. 2012-12-05 18:35:20 +00:00
x509cset.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x509name.c no need to cast away the const 2006-03-04 13:55:55 +00:00
x509rset.c
x509spki.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x509type.c ? crypto/aes/aes-armv4.S 2011-10-06 20:44:02 +00:00
x_all.c Reencode with X509_CRL_ctx_sign too. 2013-06-05 15:06:03 +01:00