openssl/crypto/x509
Viktor Dukhovni a3baa17105 Fix missing ok=0 with locally blacklisted CAs
Also in X509_verify_cert() avoid using "i" not only as a loop
counter, but also as a trust outcome and as an error ordinal.

Finally, make sure that all "goto end" jumps return an error, with
"end" renamed to "err" accordingly.

[ The 1.1.0 version of X509_verify_cert() is major rewrite,
  which addresses these issues in a more systemic way. ]

Reviewed-by: Rich Salz <rsalz@openssl.org>
2016-02-05 10:54:11 -05:00
..
by_dir.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
by_file.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
Makefile Add test for CVE-2015-1793 2015-07-07 21:48:55 +01:00
verify_extra_test.c Add test for CVE-2015-1793 2015-07-07 21:48:55 +01:00
vpm_int.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509.h Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_att.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_cmp.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_d2.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_def.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_err.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_ext.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_lu.c Remove useless code 2015-10-23 20:32:59 +02:00
x509_obj.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_r2x.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509_req.c Check public key is not NULL. 2015-03-02 15:26:41 +00:00
x509_set.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_trs.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_txt.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_v3.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509_vfy.c Fix missing ok=0 with locally blacklisted CAs 2016-02-05 10:54:11 -05:00
x509_vfy.h Fix X509_STORE_CTX_cleanup() 2016-01-02 11:14:05 -05:00
x509_vpm.c Empty SNI names are not valid 2016-01-17 16:58:48 -05:00
x509cset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509name.c Re-align some comments after running the reformat script. 2015-01-22 09:31:48 +00:00
x509rset.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509spki.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00
x509type.c Correctly check for export size limit 2015-05-20 22:19:34 +02:00
x_all.c Run util/openssl-format-source -v -c . 2015-01-22 09:31:38 +00:00