openssl/crypto/x509v3
Emilia Kasper 0923e7df9e Fix hostname validation in the command-line tool to honour negative return values.
Specifically, an ASN.1 NumericString in the certificate CN will fail UTF-8 conversion
and result in a negative return value, which the "x509 -checkhost" command-line option
incorrectly interpreted as success.

Also update X509_check_host docs to reflect reality.

Thanks to Sean Burford (Google) for reporting this issue.

Reviewed-by: Richard Levitte <levitte@openssl.org>
2015-02-10 15:35:20 +01:00
..
ext_dat.h OPENSSL_NO_xxx cleanup: RFC3779 2015-01-27 10:19:14 -05:00
Makefile Remove fipscanister build functionality from makefiles. 2014-12-08 13:23:45 +00:00
pcy_cache.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pcy_data.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pcy_int.h Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pcy_lib.c Dead code cleanup: crypto/*.c, x509v3, demos 2015-02-02 11:08:16 -05:00
pcy_map.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pcy_node.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
pcy_tree.c Dead code cleanup: crypto/*.c, x509v3, demos 2015-02-02 11:08:16 -05:00
tabtest.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_addr.c Fix int/unsigned compiler complaint 2015-01-28 15:41:14 -05:00
v3_akey.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_akeya.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_alt.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_asid.c OPENSSL_NO_xxx cleanup: RFC3779 2015-01-27 10:19:14 -05:00
v3_bcons.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_bitst.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_conf.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_cpols.c util/mkstack.pl now generates entire safestack.h 2015-02-06 10:47:53 -05:00
v3_crld.c Remove obsolete IMPLEMENT_ASN1_SET_OF 2015-02-09 12:47:28 +00:00
v3_enum.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_extku.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_genn.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_ia5.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_info.c ifdef cleanup, part 4a: '#ifdef undef' 2015-01-24 10:58:38 -05:00
v3_int.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_lib.c util/mkstack.pl now generates entire safestack.h 2015-02-06 10:47:53 -05:00
v3_ncons.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_ocsp.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_pci.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_pcia.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_pcons.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_pku.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_pmaps.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_prn.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_purp.c util/mkstack.pl now generates entire safestack.h 2015-02-06 10:47:53 -05:00
v3_scts.c Re-align some comments after running the reformat script. 2015-01-22 09:20:10 +00:00
v3_skey.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3_sxnet.c Remove obsolete IMPLEMENT_ASN1_SET_OF 2015-02-09 12:47:28 +00:00
v3_utl.c Fix hostname validation in the command-line tool to honour negative return values. 2015-02-10 15:35:20 +01:00
v3conf.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3err.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3nametest.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
v3prin.c Run util/openssl-format-source -v -c . 2015-01-22 09:20:09 +00:00
x509v3.h Remove X509_PAIR 2015-02-06 10:55:31 -05:00