openssl/crypto/x509v3
Dr. Stephen Henson 5bd5dcd496 Add nameConstraints commonName checking.
New hostname checking function asn1_valid_host()

Check commonName entries against nameConstraints: any CN components in
EE certificate which look like hostnames are checked against
nameConstraints.

Note that RFC5280 et al only require checking subject alt name against
DNS name constraints.

Reviewed-by: Richard Levitte <levitte@openssl.org>
2016-07-11 23:30:04 +01:00
..
build.info Add more CT utility routines to be used as part of larger patch. 2016-02-25 13:59:11 -05:00
ext_dat.h Specify array sizes 2016-06-11 16:43:49 +02:00
pcy_cache.c Fix threading issue that at best will leak memory 2016-06-03 12:08:13 -04:00
pcy_data.c Spelling fixes 2016-06-16 15:08:57 -04:00
pcy_int.h Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
pcy_lib.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
pcy_map.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
pcy_node.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
pcy_tree.c Remove an unused variable assignment 2016-06-14 17:35:30 +01:00
tabtest.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_addr.c Spelling 2016-06-29 09:56:39 -04:00
v3_akey.c Don't leak memory in v2i_AUTHORITY_KEYID 2016-06-01 18:00:53 +01:00
v3_akeya.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_alt.c Constify input buffers of some X509V3 and X509_PURPOSE -related methods 2016-06-15 13:22:38 -04:00
v3_asid.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_bcons.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_bitst.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_conf.c Constify input buffers of some X509V3 and X509_PURPOSE -related methods 2016-06-15 13:22:38 -04:00
v3_cpols.c Constify input buffers of some X509V3 and X509_PURPOSE -related methods 2016-06-15 13:22:38 -04:00
v3_crld.c Don't leak memory on set_reasons() error path 2016-06-01 18:00:53 +01:00
v3_enum.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_extku.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_genn.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_ia5.c Specify array sizes 2016-06-11 16:43:49 +02:00
v3_info.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_int.c Constify input buffers of some X509V3 and X509_PURPOSE -related methods 2016-06-15 13:22:38 -04:00
v3_lib.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_ncons.c Add nameConstraints commonName checking. 2016-07-11 23:30:04 +01:00
v3_pci.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_pcia.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_pcons.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_pku.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_pmaps.c Don't leak memory in v2i_POLICY_MAPPINGS() on error path 2016-06-01 18:00:53 +01:00
v3_prn.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_purp.c Remove pointless free loop in X509_PURPOSE_cleanup() 2016-06-20 09:58:58 -04:00
v3_skey.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_sxnet.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3_tlsf.c Change a call of OPENSSL_strcasecmp to strcasecmp 2016-05-28 02:15:04 +02:00
v3_utl.c Constify input buffers of some X509V3 and X509_PURPOSE -related methods 2016-06-15 13:22:38 -04:00
v3conf.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00
v3err.c Remove unused error/function codes. 2016-05-23 15:04:23 -04:00
v3prin.c Copyright consolidation 07/10 2016-05-17 14:51:26 -04:00