openssl/apps
Matt Caswell eea595ff6b Check that the obtained public key is valid
In the X509 app check that the obtained public key is valid before we
attempt to use it.

Issue reported by Yuan Jochen Kang.

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
2016-05-19 21:08:27 +01:00
..
demoCA Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
demoSRP Add SRP. 2011-03-16 11:26:40 +00:00
set Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
app_rand.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
apps.c Remove useless code 2015-10-23 20:47:53 +02:00
apps.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
asn1pars.c Don't try and parse boolean type. 2015-10-06 15:16:50 +01:00
ca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
ca-key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
ca-req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
ca.c Fix missing malloc return value checks 2015-11-09 23:00:37 +00:00
CA.com Corrections to the VMS build system. 2011-03-25 16:21:08 +00:00
CA.pl.in Fix from stable branch. 2006-04-28 00:30:49 +00:00
CA.sh PR: 1847 2009-10-15 17:27:47 +00:00
cert.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
ciphers.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
client.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:45:15 +00:00
cms.c Add -no_alt_chains option to apps to implement the new X509_V_FLAG_NO_ALT_CHAINS flag. Using this option means that when building certificate chains, the first chain found will be the one used. Without this flag, if the first chain found is not trusted then we will keep looking to see if we can build an alternative chain instead. 2015-05-20 23:14:25 +02:00
crl.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
crl2p7.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dgst.c Move malloc fail checks closer to malloc 2015-03-17 13:49:31 +00:00
dh.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dh512.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh1024.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh2048.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dh4096.pem Include SKIP DH parameters with OpenSSL. 2000-08-02 09:04:44 +00:00
dhparam.c dhparam: set the default to 2048 bits 2015-05-20 15:01:36 +02:00
dsa-ca.pem Fix the gendsa program and add it to the app list. The progs.h file is 1999-01-09 17:29:34 +00:00
dsa-pca.pem Fix the gendsa program and add it to the app list. The progs.h file is 1999-01-09 17:29:34 +00:00
dsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
dsa512.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
dsa1024.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
dsap.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
dsaparam.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ec.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ecparam.c Remove useless code 2015-10-23 20:47:53 +02:00
enc.c RT2943: Check sizes if -iv and -K arguments 2015-05-04 21:18:43 +02:00
engine.c Remove the "eay" c-file-style indicators 2015-12-18 13:13:31 +01:00
errstr.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
gendh.c dhparam: set the default to 2048 bits 2015-05-20 15:01:36 +02:00
gendsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
genpkey.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
genrsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
install-apps.com Apply all the changes submitted by Steven M. Schweda <sms@antinode.info> 2011-03-19 09:47:47 +00:00
makeapps.com Make sure that disabling the MAYLOSEDATA3 warning is only done when the compiler supports it. Otherwise, there are warnings about it lacking everywhere, which is quite tedious to read through while trying to check for other warnings. 2014-10-15 10:47:12 +02:00
Makefile Remove extra '; \' in apps/Makefile 2015-07-13 17:15:38 +02:00
nseq.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ocsp.c To avoid possible time_t overflow use X509_time_adj_ex() 2016-01-14 03:04:31 +00:00
oid.cnf Import of old SSLeay release: SSLeay 0.9.1b (unreleased) 1998-12-21 11:00:56 +00:00
openssl-vms.cnf make update 2011-12-27 14:38:27 +00:00
openssl.c Fix memory leak reporting. 2015-02-09 13:01:28 +00:00
openssl.cnf The default CN prompt message can be confusing when often the CN needs to 2011-12-06 00:00:51 +00:00
passwd.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
pca-cert.srl Update test server certificate in apps/server.pem (it was expired). 2000-10-16 22:56:10 +00:00
pca-key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
pca-req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
pkcs7.c Fix NULL deref in apps/pkcs7 2016-04-25 11:46:52 -04:00
pkcs8.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
pkcs12.c Fix X509_STORE_CTX_cleanup() 2016-01-04 21:50:01 -05:00
pkey.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
pkeyparam.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
pkeyutl.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
prime.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
privkey.pem Oops... 2006-05-17 12:29:16 +00:00
progs.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
progs.pl Make no-ssl3 no-ssl2 do more sensible things. 2014-06-29 03:05:37 +01:00
rand.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
req.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
req.pem Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
rsa.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
rsa8192.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
rsautl.c Unchecked malloc fixes 2015-03-05 09:22:50 +00:00
s512-key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s512-req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s1024key.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s1024req.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
s_apps.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
s_cb.c Fix for memcpy() and strcmp() being undefined. 2015-05-11 12:05:53 +01:00
s_client.c SRP memory leak fix 2015-09-28 14:34:47 +01:00
s_server.c CVE-2016-0798: avoid memory leak in SRP 2016-02-25 15:44:21 +01:00
s_socket.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
s_time.c Code style: space after 'if' 2015-04-16 13:51:51 -04:00
server.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:45:15 +00:00
server.srl Import of old SSLeay release: SSLeay 0.9.0b 1998-12-21 10:56:39 +00:00
server2.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:45:15 +00:00
sess_id.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
smime.c Add -no_alt_chains option to apps to implement the new X509_V_FLAG_NO_ALT_CHAINS flag. Using this option means that when building certificate chains, the first chain found will be the one used. Without this flag, if the first chain found is not trusted then we will keep looking to see if we can build an alternative chain instead. 2015-05-20 23:14:25 +02:00
speed.c Remove the "eay" c-file-style indicators 2015-12-18 13:13:31 +01:00
spkac.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
srp.c Code style: space after 'if' 2015-04-16 13:51:51 -04:00
testCA.pem Import of old SSLeay release: SSLeay 0.8.1b 1998-12-21 10:52:47 +00:00
testdsa.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
testrsa.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
timeouts.h Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
ts.c Re-align some comments after running the reformat script. 2015-01-22 09:39:01 +00:00
tsget PR: 2031 2009-09-07 17:57:02 +00:00
verify.c Add -no_alt_chains option to apps to implement the new X509_V_FLAG_NO_ALT_CHAINS flag. Using this option means that when building certificate chains, the first chain found will be the one used. Without this flag, if the first chain found is not trusted then we will keep looking to see if we can build an alternative chain instead. 2015-05-20 23:14:25 +02:00
version.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
vms_decc_init.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
winrand.c Run util/openssl-format-source -v -c . 2015-01-22 09:38:39 +00:00
x509.c Check that the obtained public key is valid 2016-05-19 21:08:27 +01:00