Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Updates for GOST 2012 support | Jack Lloyd | 2019-08-01 | 2 | -0/+79 |
| | | | | | | | GOST uses IEEE style formatting for signatures rather than DER struct. Confirmed using 2012 test certs from CryptoPro GH #1860 #1897 | ||||
* | OCSP timeout test uses response w/o 'next_update' | René Meusel | 2019-05-28 | 4 | -0/+120 |
| | |||||
* | Fix decoding of RSA-OAEP certs | Jack Lloyd | 2019-05-09 | 1 | -0/+29 |
| | | | | GH #1943 | ||||
* | TEST: rejection of user certs by flatfile cert store | Rene Meusel | 2019-04-12 | 1 | -0/+71 |
| | |||||
* | TESt: flatfile cert store uses internal test file | Rene Meusel | 2019-04-12 | 1 | -0/+79 |
| | |||||
* | Support verifying from a v1 root | Jack Lloyd | 2019-04-11 | 3 | -0/+93 |
| | | | | | | Discovered in #1885, the "Verisign Class 3 Public Primary Certification Authority - G3" is a v1 certificate and is still included in distro trust stores. | ||||
* | Check PSS salt length during verification | Jack Lloyd | 2018-08-30 | 1 | -1/+1 |
| | | | | Fixes #1665 | ||||
* | If cert extension parsing fails, replace the object with Unknown | Jack Lloyd | 2018-08-23 | 1 | -1/+1 |
| | | | | | | Allows the parse to complete and even allows examining the extension. GH #1652 | ||||
* | Simplify exception messages | Jack Lloyd | 2018-08-22 | 1 | -5/+5 |
| | | | | Remove "Invalid argument" and "Decoding Error" prefixes | ||||
* | Improve error reporting on unexpected EOF when decoding ASN | Jack Lloyd | 2018-06-08 | 1 | -1/+1 |
| | |||||
* | Improve error message on BER decoding error | Jack Lloyd | 2018-05-24 | 1 | -2/+2 |
| | |||||
* | Support decoding of ECC groups with seed parameter | Jack Lloyd | 2018-03-04 | 1 | -0/+10 |
| | | | | Closes GH #874 | ||||
* | Move bundledcertdir to x509/misc | Jack Lloyd | 2018-02-02 | 1 | -0/+0 |
| | |||||
* | Load every certificates of files found - add test. | Mathieu Souchaud | 2018-02-02 | 1 | -0/+37 |
| | |||||
* | Prepare for making BER_Object members private | Jack Lloyd | 2018-01-18 | 1 | -2/+2 |
| | | | | | Now there are usable accessors that allow the library to avoid using BER_Object members directly. | ||||
* | add test case for X509_Certificate::ca_issuers() | René Meusel | 2018-01-03 | 2 | -0/+77 |
| | |||||
* | Enable signing X509 structures with rsa-pss | Fabian Weissberg | 2017-12-22 | 1 | -0/+40 |
| | |||||
* | Fix various x509 path validation bugs + path building with ambiguous DNs | Fabian Weissberg | 2017-12-20 | 421 | -159/+8674 |
| | | | | Signed-off-by: Fabian Weissberg <[email protected]> | ||||
* | Correct expected PSS error | Jack Lloyd | 2017-12-19 | 1 | -2/+2 |
| | |||||
* | Support uninitialized certificate objects | Jack Lloyd | 2017-12-04 | 1 | -0/+0 |
| | | | | | | | Issued raised by @securitykernel on Slack, there was no non-hacky way to decode a list of certificate objects because creating an uninitialized one wasn't allowed. However after #884 that got much closer to being viable, this is the last pieces. | ||||
* | Move all the various X509 test data files under src/tests/data/x509 | Jack Lloyd | 2017-11-16 | 652 | -0/+10360 |