openssl/crypto/x509
Viktor Dukhovni dc5831da59 Apply self-imposed path length also to root CAs
Also, some readers of the code find starting the count at 1 for EE
cert confusing (since RFC5280 counts only non-self-issued intermediate
CAs, but we also counted the leaf).  Therefore, never count the EE
cert, and adjust the path length comparison accordinly.  This may
be more clear to the reader.

Reviewed-by: Matt Caswell <matt@openssl.org>
2018-10-18 00:07:56 -04:00
..
build.info Add APIs for custom X509_LOOKUP_METHOD creation 2018-05-30 15:45:48 +02:00
by_dir.c Use secure_getenv(3) when available. 2018-09-24 11:21:18 +10:00
by_file.c Use secure_getenv(3) when available. 2018-09-24 11:21:18 +10:00
t_crl.c Add padding spaces before printing signature algorithm for CRLs output 2017-11-16 01:19:55 +01:00
t_req.c Update copyright years on all files merged since Jan 1st 2018 2018-01-09 05:49:01 +01:00
t_x509.c Consistent formatting for sizeof(foo) 2017-12-07 19:11:49 -05:00
x509_att.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_cmp.c Update copyright year 2018-05-29 13:16:04 +01:00
x509_d2.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_def.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_err.c Add APIs for custom X509_LOOKUP_METHOD creation 2018-05-30 15:45:48 +02:00
x509_ext.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_lcl.h Update copyright year 2018-06-20 15:29:23 +01:00
x509_lu.c Harmonize use of sk_TYPE_find's return value. 2018-08-07 08:56:54 +02:00
x509_meth.c Avoid shadowing 'free' in X509_LOOKUP_met_set_free 2018-08-17 13:57:23 -05:00
x509_obj.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_r2x.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x509_req.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_set.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_trs.c Update copyright year 2018-09-11 13:45:17 +01:00
x509_txt.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509_v3.c Update copyright year 2018-02-27 13:59:42 +00:00
x509_vfy.c Apply self-imposed path length also to root CAs 2018-10-18 00:07:56 -04:00
x509_vpm.c Harmonize use of sk_TYPE_find's return value. 2018-08-07 08:56:54 +02:00
x509cset.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509name.c x509/x509name.c: fix potential crash in X509_NAME_get_text_by_OBJ. 2018-08-07 08:56:17 +02:00
x509rset.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509spki.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x509type.c Add support for RSA-PSS to X509_certificate_type() 2018-06-11 11:03:23 +01:00
x_all.c Use safestack.h exclusively internally. 2017-09-28 13:14:33 +10:00
x_attrib.c Remove parentheses of return. 2017-10-18 16:05:06 +01:00
x_crl.c Harmonize use of sk_TYPE_find's return value. 2018-08-07 08:56:54 +02:00
x_exten.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_name.c Restore check of |*xn| against |name| in X509_NAME_set 2018-05-20 09:48:58 +02:00
x_pubkey.c Update copyright year 2018-05-01 13:34:30 +01:00
x_req.c Copyright consolidation 09/10 2016-05-17 14:53:16 -04:00
x_x509.c Update copyright year 2018-05-01 13:34:30 +01:00
x_x509a.c Constify some inputs buffers 2016-08-23 11:47:22 +02:00