wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto/x509
History
Viktor Dukhovni 5553a12735 Ensure verify error is set when X509_verify_cert() fails 
Set ctx->error = X509_V_ERR_OUT_OF_MEM when verificaiton cannot
continue due to malloc failure.  Similarly for issuer lookup failures
and caller errors (bad parameters or invalid state).

Also, when X509_verify_cert() returns <= 0 make sure that the
verification status does not remain X509_V_OK, as a last resort set
it it to X509_V_ERR_UNSPECIFIED, just in case some code path returns
an error without setting an appropriate value of ctx->error.

Add new and some missing error codes to X509 error -> SSL alert switch.

Reviewed-by: Tim Hudson <tjh@openssl.org>
2016-05-19 18:15:08 -04:00
..
by_dir.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
by_file.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
Makefile Add test for CVE-2015-1793 2015-07-07 21:48:55 +01:00
verify_extra_test.c Add test for CVE-2015-1793 2015-07-07 21:48:55 +01:00
vpm_int.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509.h Add checks to X509_NAME_oneline() 2016-04-29 19:50:49 +01:00
x509_att.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_cmp.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_d2.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_def.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_err.c Add checks to X509_NAME_oneline() 2016-04-29 19:50:49 +01:00
x509_ext.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_lu.c Remove useless code 2015-10-23 20:32:59 +02:00
x509_obj.c Remove repeated condition from if in X509_NAME_oneline 2016-05-17 14:27:59 +01:00
x509_r2x.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509_req.c Check public key is not NULL. 2015-03-02 15:26:41 +00:00
x509_set.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_trs.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_txt.c Ensure verify error is set when X509_verify_cert() fails 2016-05-19 18:15:08 -04:00
x509_v3.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_vfy.c Ensure verify error is set when X509_verify_cert() fails 2016-05-19 18:15:08 -04:00
x509_vfy.h Ensure verify error is set when X509_verify_cert() fails 2016-05-19 18:15:08 -04:00
x509_vpm.c Empty SNI names are not valid 2016-01-17 16:58:48 -05:00
x509cset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509name.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509rset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509spki.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509type.c Correctly check for export size limit 2015-05-20 22:19:34 +02:00
x_all.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00