wbrawner/openssl
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
openssl/crypto/x509
History
Dr. Stephen Henson 7cf0529b52 Fix verify loop with CRL checking. 
PR #3090
Reported by: Franck Youssef <fry@open.ch>

If no new reason codes are obtained after checking a CRL exit with an
error to avoid repeatedly checking the same CRL.

This will only happen if verify errors such as invalid CRL scope are
overridden in a callback.
(cherry picked from commit 4b26645c1a)
2013-08-06 16:08:09 +01:00
..
.cvsignore
by_dir.c Fix X509_STORE locking 2010-02-19 18:26:23 +00:00
by_file.c Keep disclaiming 16-bit platform support. For now remove WIN16 references 2005-12-18 19:11:37 +00:00
Makefile Apply mingw patches as supplied by Roumen Petrov an Alon Bar-Lev 2008-04-17 10:19:16 +00:00
x509.h Backport PSS signature support from HEAD. 2011-10-09 23:13:50 +00:00
x509_att.c Update from stable branch. 2008-06-26 23:27:31 +00:00
x509_cmp.c Reduce version skew. 2012-06-08 09:18:47 +00:00
x509_d2.c
x509_def.c
x509_err.c Update from 0.9.8 stable. Eliminate duplicate error codes. 2006-11-21 21:29:44 +00:00
x509_ext.c
x509_lu.c Minor compatibility fixes [from HEAD]. 2012-04-16 17:36:12 +00:00
x509_obj.c Bunch of constifications. 2007-10-13 15:51:32 +00:00
x509_r2x.c add additional checks + cleanup 2006-01-29 23:12:22 +00:00
x509_req.c Support for certificate status TLS extension. 2007-09-26 21:56:59 +00:00
x509_set.c use const ASN1_TIME * 2006-12-11 22:35:51 +00:00
x509_trs.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x509_txt.c Add support for CRLs partitioned by reason code. 2008-08-29 11:37:21 +00:00
x509_v3.c improved error checking and some fixes 2005-07-26 21:10:34 +00:00
x509_vfy.c Fix verify loop with CRL checking. 2013-08-06 16:08:09 +01:00
x509_vfy.h Add missing functions to allow access to newer X509_STORE_CTX status 2009-10-31 19:21:47 +00:00
x509_vpm.c Inherit parameters properly in SSL contexts: any parameters set should 2009-06-30 11:21:00 +00:00
x509cset.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x509name.c no need to cast away the const 2006-03-04 13:55:55 +00:00
x509rset.c
x509spki.c Update obsolete email address... 2008-11-05 18:39:08 +00:00
x509type.c ? crypto/aes/aes-armv4.S 2011-10-06 20:45:08 +00:00
x_all.c Reencode with X509_CRL_ctx_sign too. 2013-05-03 13:06:18 +01:00