OpenBSD CVS

CVS log for src/lib/libressl/Attic/ressl_verify.c


[BACK] Up to [local] / src / lib / libressl

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.6, Fri Oct 31 13:46:17 2014 UTC (9 years, 7 months ago) by jsing
Branch: MAIN
CVS Tags: HEAD
Changes since 1.5: +1 -1 lines
FILE REMOVED

Rename libressl to libtls to avoid confusion and to make it easier to
distinguish between LibreSSL (the project) and libressl (the library).

Discussed with many.

Revision 1.5 / (download) - annotate - [select for diffs], Mon Oct 6 11:55:48 2014 UTC (9 years, 8 months ago) by jca
Branch: MAIN
Changes since 1.4: +14 -0 lines
Diff to previous 1.4 (colored)

When verifying whether an IP address is in the commonName of a
certificate, do not perform wildcard matching.
Suggested by Richard Moore (rich@kde)
ok tedu@

Revision 1.4 / (download) - annotate - [select for diffs], Mon Oct 6 11:53:18 2014 UTC (9 years, 8 months ago) by jca
Branch: MAIN
Changes since 1.3: +23 -3 lines
Diff to previous 1.3 (colored)

If we have to match against a wildcard in a cert, verify that it contains
at least a domain label before the tld, as in *.example.org.
Suggested by Richard Moore (rich@kde)
ok tedu@

Revision 1.3 / (download) - annotate - [select for diffs], Tue Aug 5 12:46:16 2014 UTC (9 years, 10 months ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.2: +1 -0 lines
Diff to previous 1.2 (colored)

Add $OpenBSD$ tags.

Revision 1.2 / (download) - annotate - [select for diffs], Sun Aug 3 14:35:30 2014 UTC (9 years, 10 months ago) by jsg
Branch: MAIN
Changes since 1.1: +1 -1 lines
Diff to previous 1.1 (colored)

X509_NAME_get_text_by_NID() returns -1 on error so the type
the return value is stored in must be signed.  Fixes a test for error.

ok jsing@ guenther@

Revision 1.1 / (download) - annotate - [select for diffs], Sat Jul 12 01:20:25 2014 UTC (9 years, 11 months ago) by jsing
Branch: MAIN

Initial version of libressl - a library that provides a clean, simple,
consistent and secure-by-default API for SSL clients (and soon servers).

This is a long way from complete and the interface will likely change
substantially - committing now so that further work can happen in the tree.

Initiated by tedu@ and inspired by discussions with tedu@, beck@ and
other developers.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.