summaryrefslogtreecommitdiff
path: root/lib/x509/verify.c
Commit message (Expand)AuthorAgeFilesLines
* pkcs11 verification: ensure that an issuer we retrieve is not blacklisttmp-gnutls_3_3_x-blacklisted-issuer-fixNikos Mavrogiannopoulos2016-12-311-0/+11
* doc updateNikos Mavrogiannopoulos2015-01-121-0/+3
* unified the key purpose checks functionsNikos Mavrogiannopoulos2014-09-161-4/+6
* check for CAs with the same key in gnutls_x509_trust_list_add_casNikos Mavrogiannopoulos2014-09-161-1/+1
* check the key purpose of the CA certificate when in pkcs11 cert validationNikos Mavrogiannopoulos2014-09-151-1/+47
* gnutls_x509_crl_verify: do not always set the invalid statusNikos Mavrogiannopoulos2014-09-131-1/+9
* Revert "gnutls_x509_crl_verify: do not always set the invalid status"Nikos Mavrogiannopoulos2014-09-131-1/+1
* gnutls_x509_crl_verify: do not always set the invalid statusNikos Mavrogiannopoulos2014-09-131-1/+1
* when comparing an end-certificate with the trusted list compare the entire ce...Nikos Mavrogiannopoulos2014-09-031-8/+20
* when comparing a CA certificate with the trusted list compare the name and keyNikos Mavrogiannopoulos2014-09-031-3/+51
* when importing a CRL keep the DER dataNikos Mavrogiannopoulos2014-09-031-1/+1
* when importing a certificate, keep the DER dataNikos Mavrogiannopoulos2014-09-031-38/+8
* only check name constraints in non-CA certificatesNikos Mavrogiannopoulos2014-08-261-26/+32
* Added the 'very weak' certificate verification profile.Nikos Mavrogiannopoulos2014-05-051-0/+1
* Perform time check when removing a certificate in _gnutls_pkcs11_verify_crt_s...Nikos Mavrogiannopoulos2014-04-041-0/+19
* When verifying, check for the same certificate in the pkcs11 trusted list, no...Nikos Mavrogiannopoulos2014-04-041-0/+10
* use commit suffix for functions that return a status code.Nikos Mavrogiannopoulos2014-03-211-9/+9
* re-enabled certificate verificationNikos Mavrogiannopoulos2014-03-081-1/+5
* more type separationNikos Mavrogiannopoulos2014-03-071-7/+12
* more type separationNikos Mavrogiannopoulos2014-03-071-8/+9
* separated types for easier verificationNikos Mavrogiannopoulos2014-03-071-26/+29
* Preinitialize values; suggested by Sebastian Krahmer and Tomas Hoger.Nikos Mavrogiannopoulos2014-02-271-2/+2
* added doc on is_issuer() checksNikos Mavrogiannopoulos2014-02-271-0/+4
* Updated verification functionNikos Mavrogiannopoulos2014-02-251-22/+33
* check against the success valueNikos Mavrogiannopoulos2014-02-201-3/+3
* use bool types when needed.Nikos Mavrogiannopoulos2014-02-191-8/+9
* ensure failure when parsing fails.Nikos Mavrogiannopoulos2014-02-191-5/+6
* Added check for IPaddressNikos Mavrogiannopoulos2014-02-191-0/+6
* simplify namesNikos Mavrogiannopoulos2014-02-191-3/+3
* Verify name constraints.Nikos Mavrogiannopoulos2014-02-191-9/+67
* removed deprecated flagNikos Mavrogiannopoulos2014-02-141-1/+0
* ensure that the issuer in present in a trusted module.Nikos Mavrogiannopoulos2014-02-131-1/+1
* Use the GNUTLS_PKCS11_OBJ_FLAG_PRESENT_IN_TRUSTED_MODULE to ensure that only ...Nikos Mavrogiannopoulos2014-02-131-19/+2
* Fix bug that prevented the rejection of v1 intermediate CA certificates.Nikos Mavrogiannopoulos2014-02-121-1/+4
* when using a PKCS #11 module for verification ensure that it has been marked ...Nikos Mavrogiannopoulos2014-02-031-0/+19
* better wordingNikos Mavrogiannopoulos2014-02-011-1/+1
* When verifying a certificate's security level ensure that the hash is within ...Nikos Mavrogiannopoulos2014-01-151-2/+18
* do not immediately fail on verification failure due to insecure algorithm.Nikos Mavrogiannopoulos2014-01-141-2/+0
* GNUTLS_SEC_PARAM_NORMAL was renamed to GNUTLS_SEC_PARAM_MEDIUMNikos Mavrogiannopoulos2014-01-141-1/+1
* Added certificate verification profiles.Nikos Mavrogiannopoulos2014-01-131-12/+158
* simplified _gnutls_verify_certificate2().Nikos Mavrogiannopoulos2014-01-131-17/+13
* consistency changes.Nikos Mavrogiannopoulos2014-01-131-5/+3
* gnutls_pkcs11_crt_exists renamed to gnutls_pkcs11_crt_is_knownNikos Mavrogiannopoulos2014-01-041-2/+29
* When verifying using a PKCS #11 module use gnutls_pkcs11_crt_exists() to chec...Nikos Mavrogiannopoulos2014-01-031-3/+39
* Updated PKCS #11 support for gnutls_x509_trust_list_add_trust_file().Nikos Mavrogiannopoulos2014-01-021-0/+74
* reduced stack size usage in several functions.Nikos Mavrogiannopoulos2013-11-101-2/+2
* reindented codeNikos Mavrogiannopoulos2013-11-081-773/+766
* simplified access to cipher and mac properties to reduce wasted cycles.Nikos Mavrogiannopoulos2013-05-251-5/+5
* several updatesNikos Mavrogiannopoulos2013-05-161-3/+3
* Placed back _gnutls_x509_compare_raw_dn().Nikos Mavrogiannopoulos2013-03-061-6/+3
View Lorry Controller Status