Richard Levitte cd52956357 Make an explicit check during certificate validation to see that the ... CA setting in each certificate on the chain is correct. As a side- effect always do the following basic checks on extensions, not just when there's an associated purpose to the check: - if there is an unhandled critical extension (unless the user has chosen to ignore this fault) - if the path length has been exceeded (if one is set at all) - that certain extensions fit the associated purpose (if one has been given)		2004-11-29 11:18:00 +00:00
..
.cvsignore
by_dir.c	Typo...	2004-01-22 22:36:48 +00:00
by_file.c	Fix Certificate and CRL adding in X509_load_cert_crl_file:	2003-03-19 13:56:32 +00:00
Makefile	Don't use $(EXHEADER) directly in for loops, as most shells will break	2004-11-02 23:53:31 +00:00
x509.h	Fix race condition when CRL checking is enabled.	2004-10-04 16:27:36 +00:00
x509_att.c	Add support for MS CSP Name PKCS#12 attribute.	2001-06-11 00:43:20 +00:00
x509_cmp.c	Many security improvements (CHATS) and a warning fix.	2002-11-12 13:23:40 +00:00
x509_d2.c
x509_def.c
x509_err.c	Make the necessary changes to work with the recent "ex_data" overhaul.	2001-09-01 20:02:13 +00:00
x509_ext.c
x509_lu.c	Make the necessary changes to work with the recent "ex_data" overhaul.	2001-09-01 20:02:13 +00:00
x509_obj.c	Increase internal security when using strncpy, by making sure the resulting string is NUL-terminated	2002-02-28 12:44:05 +00:00
x509_r2x.c
x509_req.c	Oops, forgot to reorder extension request nids.	2004-09-13 22:39:49 +00:00
x509_set.c
x509_trs.c	Add an entry for X509_TRUST_OBJECT_SIGN in trstandard[].	2003-06-11 21:22:34 +00:00
x509_txt.c	Make an explicit check during certificate validation to see that the	2004-11-29 11:18:00 +00:00
x509_v3.c	Typo in X509v3_get_ext_by_critical	2002-12-04 00:14:00 +00:00
x509_vfy.c	Make an explicit check during certificate validation to see that the	2004-11-29 11:18:00 +00:00
x509_vfy.h	Make an explicit check during certificate validation to see that the	2004-11-29 11:18:00 +00:00
x509cset.c	Add CRL utility functions to allow CRLs to be	2001-08-17 00:33:43 +00:00
x509name.c
x509rset.c
x509spki.c
x509type.c	1024 is the export key bits limit according to current regulations, not 512.	2003-11-28 22:39:23 +00:00
x_all.c	Retain compatibility of EVP_DigestInit() and EVP_DigestFinal()	2001-10-16 01:24:29 +00:00