Viktor Dukhovni a190ea8ad7 Apply self-imposed path length also to root CAs ... Also, some readers of the code find starting the count at 1 for EE cert confusing (since RFC5280 counts only non-self-issued intermediate CAs, but we also counted the leaf). Therefore, never count the EE cert, and adjust the path length comparison accordinly. This may be more clear to the reader. Reviewed-by: Matt Caswell <matt@openssl.org> (cherry picked from commit dc5831da59)		2018-10-18 00:10:04 -04:00
..
build.info	Add APIs for custom X509_LOOKUP_METHOD creation	2018-05-30 15:45:48 +02:00
by_dir.c	Use secure_getenv(3) when available.	2018-09-24 11:22:22 +10:00
by_file.c	Use secure_getenv(3) when available.	2018-09-24 11:22:22 +10:00
t_crl.c
t_req.c
t_x509.c
x509_att.c
x509_cmp.c	Update copyright year	2018-05-29 13:16:04 +01:00
x509_d2.c
x509_def.c
x509_err.c	Add APIs for custom X509_LOOKUP_METHOD creation	2018-05-30 15:45:48 +02:00
x509_ext.c
x509_lcl.h	Update copyright year	2018-06-20 15:29:23 +01:00
x509_lu.c	Harmonize use of sk_TYPE_find's return value.	2018-08-07 08:56:54 +02:00
x509_meth.c	Avoid shadowing 'free' in X509_LOOKUP_met_set_free	2018-08-17 13:57:23 -05:00
x509_obj.c
x509_r2x.c
x509_req.c
x509_set.c
x509_trs.c	Update copyright year	2018-09-11 13:45:17 +01:00
x509_txt.c
x509_v3.c
x509_vfy.c	Apply self-imposed path length also to root CAs	2018-10-18 00:10:04 -04:00
x509_vpm.c	Harmonize use of sk_TYPE_find's return value.	2018-08-07 08:56:54 +02:00
x509cset.c
x509name.c	x509/x509name.c: fix potential crash in X509_NAME_get_text_by_OBJ.	2018-08-07 08:56:17 +02:00
x509rset.c
x509spki.c
x509type.c	Add support for RSA-PSS to X509_certificate_type()	2018-06-11 11:03:23 +01:00
x_all.c
x_attrib.c
x_crl.c	Harmonize use of sk_TYPE_find's return value.	2018-08-07 08:56:54 +02:00
x_exten.c
x_name.c	Restore check of |*xn| against |name| in X509_NAME_set	2018-05-20 09:48:58 +02:00
x_pubkey.c	Update copyright year	2018-05-01 13:34:30 +01:00
x_req.c
x_x509.c	Update copyright year	2018-05-01 13:34:30 +01:00
x_x509a.c