wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/apps
History
Matt Caswell 78021171db Fix -verify_return_error in s_client 
The "verify_return_error" option in s_client is documented as:

 Return verification errors instead of continuing. This will typically
 abort the handshake with a fatal error.

In practice this option was ignored unless also accompanied with the
"-verify" option. It's unclear what the original intention was. One fix
could have been to change the documentation to match the actual behaviour.
However it seems unecessarily complex and unexpected that you should need
to have both options. Instead the fix implemented here is make the option
match the documentation so that "-verify" is not also required.

Note that s_server has a similar option where "-verify" (or "-Verify") is
still required. This makes more sense because those options additionally
request a certificate from the client. Without a certificate there is no
possibility of a verification failing, and so "-verify_return_error" doing
nothing seems ok.

Fixes #8079

Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/8080)
2019-02-14 17:07:57 +00:00
..
demoSRP Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
include Move libapps headers into their own directory 2019-02-13 04:47:11 +01:00
app_rand.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
apps.c Updated test command line parsing to support commmon commands 2019-02-11 15:31:51 +01:00
apps_ui.c Updated test command line parsing to support commmon commands 2019-02-11 15:31:51 +01:00
asn1pars.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
bf_prefix.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
build.info Move libapps headers into their own directory 2019-02-13 04:47:11 +01:00
ca-cert.srl
ca-key.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
ca-req.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
ca.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
CA.pl.in Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
cert.pem
ciphers.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
client.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
cms.c crypto/cms: Add support for CAdES Basic Electronic Signatures (CAdES-BES) 2019-01-27 23:59:21 +01:00
crl.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
crl2p7.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
ct_log_list.cnf Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
dgst.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
dh1024.pem Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
dh2048.pem Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
dh4096.pem Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
dhparam.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
dsa-ca.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
dsa-pca.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
dsa.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
dsa512.pem
dsa1024.pem
dsap.pem
dsaparam.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
ec.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
ecparam.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
enc.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
engine.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
errstr.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
fmt.c Updated test command line parsing to support commmon commands 2019-02-11 15:31:51 +01:00
gendsa.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
genpkey.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
genrsa.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
nseq.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
ocsp.c apps/ocsp.c Use the same HAVE_FORK / NO_FORK as in speed.c 2019-02-11 16:44:59 +01:00
openssl-vms.cnf Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
openssl.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
openssl.cnf Remove unnecessary trailing whitespace 2019-02-05 16:25:11 +01:00
opt.c Updated test command line parsing to support commmon commands 2019-02-11 15:31:51 +01:00
passwd.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
pca-cert.srl
pca-key.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
pca-req.pem Fix verify(1) to report failure when verification fails 2016-01-13 17:55:17 -05:00
pkcs7.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
pkcs8.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
pkcs12.c Complain if -twopass is used incorrectly 2019-01-30 15:36:13 +00:00
pkey.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
pkeyparam.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
pkeyutl.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
prime.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
privkey.pem
progs.pl Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
rand.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
rehash.c Cleanup vxworks support to be able to compile for VxWorks 7 2019-01-24 17:55:04 +01:00
req.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
req.pem
rsa.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
rsa8192.pem
rsautl.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
s512-key.pem
s512-req.pem
s1024key.pem
s1024req.pem
s_cb.c Fix -verify_return_error in s_client 2019-02-14 17:07:57 +00:00
s_client.c Fix -verify_return_error in s_client 2019-02-14 17:07:57 +00:00
s_server.c Fix end-point shared secret for DTLS/SCTP 2019-02-01 11:57:19 +00:00
s_socket.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
s_time.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
server.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
server.srl
server2.pem Replace expired test server and client certificates with new ones. 2011-12-08 14:44:05 +00:00
sess_id.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
smime.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
speed.c Cleanup vxworks support to be able to compile for VxWorks 7 2019-01-24 17:55:04 +01:00
spkac.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
srp.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
storeutl.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
testCA.pem
testdsa.h Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
testrsa.h Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
timeouts.h Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
ts.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
tsget.in apps/tsget.in: use the full version in the user agent string 2018-12-10 20:09:17 +01:00
verify.c apps/verify.c: Change an old comment to clarify what the callback does 2019-01-16 21:59:03 +01:00
version.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
vms_decc_init.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
vms_term_sock.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
vms_term_sock.h Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
win32_init.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00
x509.c Following the license change, modify the boilerplates in apps/ 2018-12-06 14:15:27 +01:00