aboutsummaryrefslogtreecommitdiffstats
path: root/src/lib/x509
Commit message (Expand)AuthorAgeFilesLines
* Merge GH #2367 Resolve various certificate handling bugsJack Lloyd2020-06-165-5/+69
|\
| * Verify name constraints on subject alternative name DN alsoJack Lloyd2020-06-093-3/+24
| * Check that X.509 SignatureAlgorithm parameters are as expectedJack Lloyd2020-06-091-2/+37
| * Prohibit empty KeyUsage in certificatesJack Lloyd2020-06-091-0/+8
* | Add a note that we are ignoring PKIX requirements hereJack Lloyd2020-06-131-0/+7
|/
* Fix cppcheck findingsRené Fischer2020-06-051-2/+0
* Check that a v1 certificate does not include the v2 identifier fieldsJack Lloyd2020-05-253-2/+14
* Avoid copying in range based for loopsJack Lloyd2020-04-242-3/+3
* Don't return empty vector from raw_xxx_dn_sha256 if SHA-256 disabledJack Lloyd2020-04-061-0/+4
* Use WINCRYPT_UNUSED_PARAM instead of NULL in CertFindCertificateInStore as wellpgp2020-02-211-1/+1
* Avoid mingw warning in case of NULL as unused argument to win32 API that acce...pgp2020-02-211-1/+3
* Enable certstore_system_windows also for mingw configurationPGP2020-02-201-0/+1
* Use CertOpenSystemStoreA to avoid Unicode build issueJack Lloyd2020-02-061-1/+1
* Precompute and cache additional data when parsing X509_CertificateJack Lloyd2020-01-291-7/+39
* Merge GH #2215 Use .lib suffix consistently on WindowsJack Lloyd2019-12-071-2/+2
|\
| * Fix Windows linking to consistently use .lib suffix as requiredJack Lloyd2019-12-061-2/+2
* | Resolve various integer conversion warnings from MSVCJack Lloyd2019-12-063-6/+6
|/
* Deprecate DER_Encoder::get_contents_unlockedJack Lloyd2019-10-281-18/+9
* Add support for XMSS X.509 certificatesRené Korthaus2019-10-212-2/+12
* Fix warning "type attributes ignored after type is already defined"Jack Lloyd2019-09-251-1/+1
* Merge GH #2110 Properly decode error-status OCSP responsesJack Lloyd2019-09-243-6/+27
|\
| * add status code to OCSP responsesPatrick Schmidt2019-09-243-6/+27
* | add X.509 Usage_Type::ENCRYPTIONRené Meusel2019-09-182-1/+5
|/
* Fix a leak in Extensions::add when duplicate OID attemptedJack Lloyd2019-09-131-1/+5
* Add testsJack Lloyd2019-09-122-1/+11
* Add Extensions::removeJack Lloyd2019-09-102-1/+18
* Deprecate many publically available headersJack Lloyd2019-09-062-0/+3
* FixesJack Lloyd2019-08-041-2/+2
* Avoid unnecessary parse of the OID string in DN upper boundsJack Lloyd2019-08-041-15/+17
* Reduce usage of oids.h with the addition of some helpers on OIDJack Lloyd2019-08-0411-42/+35
* Don't throw hereJack Lloyd2019-08-041-1/+5
* Avoid using deprecated public fields of AlgorithmIdentifierJack Lloyd2019-08-043-10/+9
* Deprecate and replace OIDS::lookupJack Lloyd2019-08-0412-48/+46
* Update GOST to use 2012 OIDs/paramsJack Lloyd2019-08-033-7/+16
* Updates for GOST 2012 supportJack Lloyd2019-08-012-4/+3
* Fix "OSCP" typo in OCSP code.Jack Lloyd2019-07-233-7/+11
* Fix some LGTM issuesJack Lloyd2019-06-191-2/+2
* add option to specify ocsp max agePatrick Schmidt2019-06-142-22/+45
* Merge GH #1974 Add ability to set max allowed age for an OCSP responseJack Lloyd2019-05-286-14/+29
|\
| * add 'OCSP_IS_TOO_OLD' to Botan::to_string()René Meusel2019-05-281-0/+2
| * add optional max_age for ocsp checksPatrick Schmidt2019-05-275-14/+27
* | Add reminder comments re enum classJack Lloyd2019-05-241-0/+1
|/
* add some commentsTim Oesterreich2019-05-141-0/+4
* Apply suggestions from code reviewTim Oesterreich2019-05-141-3/+3
* restructure a bit to avoid code duplications and make find_cert more efficien...Tim Oesterreich2019-05-142-88/+93
* search certificates by key_id first, if possibleTim Oesterreich2019-05-141-9/+20
* address some review commentsTim Oesterreich2019-05-142-11/+10
* fix docu, dont throw in find_crl_forTim Oesterreich2019-05-142-3/+4
* deduplicate certificates in find_all_certsTim Oesterreich2019-05-142-213/+221
* search certificates by full subject_dn instead of common name onlyTim Oesterreich2019-05-141-46/+51