TrustedFirmware Git Browser
Code Review
Sign In
review.trustedfirmware.org
/
mirror
/
mbed-tls
/
4087c47043cb7b8b51e69f1de47ab6a2bccead3d
/
library
/
x509parse.c
cf6e95d
Parsing of PKCS#8 encrypted private key files added and PKCS#12 basis
by Paul Bakker
· 12 years ago
65a1909
Internally split up x509parse_key()
by Paul Bakker
· 12 years ago
6417186
x509parse_crt() now better handles PEM error situations
by Paul Bakker
· 12 years ago
9255e83
pem_read_buffer() already update use_len after header and footer are read
by Paul Bakker
· 12 years ago
eae09db
Fixed const correctness issues that have no impact on the ABI
by Paul Bakker
· 12 years ago
2ca8ad1
Made x509parse.c also work with missing hash header files
by Paul Bakker
· 12 years ago
3497d8c
Do not check sig on trust-ca (might not be top)
by Paul Bakker
· 13 years ago
9a73632
- Merged changesets 1399 up to and including 1415 into 1.2 branch
by Paul Bakker
· 13 years ago
97872ac
- Merged 1397 in branch for 1.2
by Paul Bakker
· 13 years ago
4a2bd0d
- Merged fixes 1394 and 1395 from trunk to PolarSSL 1.2 branch
by Paul Bakker
· 13 years ago
3338b79
- Fixed WIN32 version of x509parse_crtpath()
by Paul Bakker
· 13 years ago
5c2364c
- Moved from unsigned long to uint32_t throughout code
by Paul Bakker
· 13 years ago
915275b
- Revamped x509_verify() and the SSL f_vrfy callback implementations
by Paul Bakker
· 13 years ago
b00ca42
- Handle existence of OpenSSL Trust Extensions at end of X.509 DER blob
by Paul Bakker
· 13 years ago
94a6796
- Correctly handle MS certificate's key usage bits
by Paul Bakker
· 13 years ago
535e97d
- Better checking for reading over buffer boundaries
by Paul Bakker
· 13 years ago
cefb396
- Handle empty certificate subject names
by Paul Bakker
· 13 years ago
e4791f3
- Bugfix for Windows in cert path handling
by Paul Bakker
· 13 years ago
8d91458
- Added X509 CA Path support
by Paul Bakker
· 13 years ago
4d2c124
- Changed certificate verify behaviour to comply with RFC 6125 section 6.3 to not match CN if subjectAltName extension is present.
by Paul Bakker
· 13 years ago
430ffbe
- Fixed potential heap corruption in x509_name allocation
by Paul Bakker
· 13 years ago
ad8d354
- Updated RFC ref
by Paul Bakker
· 13 years ago
8afa70d
- Clean Subject Alternative Name data
by Paul Bakker
· 13 years ago
57b1298
- Multi-domain certificates support wildcards as well
by Paul Bakker
· 13 years ago
a8cd239
- Added support for wildcard certificates
by Paul Bakker
· 13 years ago
b15b851
- Check for failed malloc() in ssl_set_hostname() and x509_get_entries() (Closes ticket #47, found by Hugo Leisink)
by Paul Bakker
· 14 years ago
69e095c
- Changed the behaviour of x509parse_parse_crt for permissive parsing. Now returns the number of 'failed certificates' instead of having a switch to enable it.
by Paul Bakker
· 14 years ago
9304880
- Fixed correct printing of serial number '00'
by Paul Bakker
· 14 years ago
c8ffbe7
- Corrected removal of leading '00:' in printing serial numbers in certificates and CRLs
by Paul Bakker
· 14 years ago
4f229e5
- Fixed define for Windows time functions
by Paul Bakker
· 14 years ago
6c0ceb3
- Added permissive certificate parsing to x509parse_crt() and x509parse_crtfile(). With permissive parsing the parsing does not stop on encountering a parse-error
by Paul Bakker
· 14 years ago
03c7c25
- * If certificate serial is longer than 32 octets, serial number is now appended with '....' after first 28 octets
by Paul Bakker
· 14 years ago
cce9d77
- Lots of minimal changes to better support WINCE as a build target
by Paul Bakker
· 14 years ago
cebdf17
- Allowed X509 key usage parsing to accept 4 byte values instead of the standard 1 byte version sometimes used by Microsoft. (Closes ticket #38)
by Paul Bakker
· 14 years ago
efc3029
- Extracted ASN.1 parsing code from the X.509 parsing code. Added new module.
by Paul Bakker
· 14 years ago
2a1c5f5
- Minor code cleanup
by Paul Bakker
· 14 years ago
fae618f
- Updated tests to reflect recent changes
by Paul Bakker
· 14 years ago
b5a11ab
- Added a separate CRL entry extension parsing function
by Paul Bakker
· 14 years ago
fbc09f3
- Added an EXPLICIT tag number parameter to x509_get_ext()
by Paul Bakker
· 14 years ago
3329d1f
- Fixed a bug where the CRL parser expected an EXPLICIT ASN.1 tag before version numbers
by Paul Bakker
· 14 years ago
c4909d9
- Inceased maximum size of ASN1 length reads to 32-bits
by Paul Bakker
· 14 years ago
5c721f9
- Introduced POLARSSL_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION flag to continue parsing when encountering a critical flag that's not supported by PolarSSL
by Paul Bakker
· 14 years ago
ed56b22
- Added support for PKCS#8 wrapper on reading private keys (Fixes ticket #20)
by Paul Bakker
· 14 years ago
684ddce
- Minor fixer to remove compiler warnings for ARMCC
by Paul Bakker
· 14 years ago
27fdf46
- Removed deprecated casts to int for now unsigned values
by Paul Bakker
· 14 years ago
5690efc
- Fixed a whole bunch of dependencies on defines between files, examples and tests
by Paul Bakker
· 14 years ago
9d78140
- A error_strerror function() has been added to translate between error codes and their description.
by Paul Bakker
· 14 years ago
335db3f
- Functions requiring File System functions can now be disables by undefining POLARSSL_FS_IO
by Paul Bakker
· 14 years ago
f4f6968
- Improved compile-time compatibility with mingw32 64-bit versions
by Paul Bakker
· 14 years ago
23986e5
- Major type rewrite of int to size_t for most variables and arguments used for buffer lengths and loops
by Paul Bakker
· 14 years ago
eaa89f8
- Do not depend on dhm code if POLARSSL_DHM_C not defined
by Paul Bakker
· 14 years ago
66b78b2
- Added missing rsa_init() call in x509parse_self_test()
by Paul Bakker
· 14 years ago
53019ae
- RSASSA-PSS verification now properly handles salt lengths other than hlen
by Paul Bakker
· 14 years ago
400ff6f
- Corrected parsing of UTCTime dates before 1990 and after 1950
by Paul Bakker
· 14 years ago
96743fc
- Parsing of PEM files moved to separate module (Fixes ticket #13). Also possible to remove PEM support for systems only using DER encoding
by Paul Bakker
· 14 years ago
d61e7d9
- Cleaned up warning-generating code
by Paul Bakker
· 15 years ago
0f5f72e
- Fixed doxygen syntax to standard '\' instead of '@'
by Paul Bakker
· 15 years ago
3cccddb
- Fixed identification of non-critical CA certificates
by Paul Bakker
· 15 years ago
b619499
- x509parse_time_expired() checks time now in addition to the existing date check
by Paul Bakker
· 15 years ago
a056efc
- Fixed serial length check
by Paul Bakker
· 15 years ago
dd47699
- Moved storing of a printable serial into a separate function
by Paul Bakker
· 15 years ago
76fd75a
- Improved certificate validation and validation against the available CRLs
by Paul Bakker
· 15 years ago
74111d3
- Improved X509 certificate parsing to include extended certificate fields, such as Key Usage
by Paul Bakker
· 15 years ago
b63b0af
- Added verification callback in certificate verification chain in order to allow external blacklisting
by Paul Bakker
· 15 years ago
1b57b06
- Added reading of DHM context from memory and file
by Paul Bakker
· 15 years ago
b96f154
- Fixed copyright message
by Paul Bakker
· 15 years ago
84f12b7
- Updated Copyright to correct entity
by Paul Bakker
· 15 years ago
fc8c436
- Updated copyright line to 2010
by Paul Bakker
· 15 years ago
1f3c39c
- Removed copyright line for Christophe Devine for clarity
by Paul Bakker
· 15 years ago
27d6616
- Added x509_get_sig_alg() to allow easy future X509 signature algorithm determination expansion
by Paul Bakker
· 15 years ago
ff60ee6
- Added const-correctness to main codebase
by Paul Bakker
· 15 years ago
9120018
- Added support for GeneralizedTime in X509 certificates
by Paul Bakker
· 15 years ago
fe1aea7
- Fixed typo in MD4 define
by Paul Bakker
· 16 years ago
de4d2ea
- Added handling of missing POLARSSL_MD5_C define and POLARSSL_SHA1_c define
by Paul Bakker
· 16 years ago
77b385e
- Updated copyright messages on all relevant files
by Paul Bakker
· 16 years ago
c6ce838
- Better handling of extension parsing
by Paul Bakker
· 16 years ago
9be1937
- Fill base data for x509_crl_entry in CRL correctly
by Paul Bakker
· 16 years ago
635f4b4
- Updated error check on optional nextUpdate in CRL
by Paul Bakker
· 16 years ago
1e27bb2
- Added newline at end of CRL info
by Paul Bakker
· 16 years ago
1973e4c
- Fixed selftest of X509parse code
by Paul Bakker
· 16 years ago
40ea7de
- Added CRL revocation support to x509parse_verify()
by Paul Bakker
· 16 years ago
7d06ad2
- Fixed formatting
by Paul Bakker
· 16 years ago
d98030e
- Added prelimenary CRL parsing and info support
by Paul Bakker
· 16 years ago
2b245eb
- Moved file loading to load_file
by Paul Bakker
· 16 years ago
7c6d4a4
- Fixed new logic on certificate chains in x509parse_verify()
by Paul Bakker
· 16 years ago
e9581d6
- Fixed logic error on end of 'full' chain
by Paul Bakker
· 16 years ago
320a4b5
- Added input handling for x509parse_crt()
by Paul Bakker
· 16 years ago
026c03b
- Made changes for better compatibility with old-style C compilers
by Paul Bakker
· 16 years ago
4593aea
- Added support for RFC4055 SHA2 and SHA4 signature algorithms for
by Paul Bakker
· 16 years ago
3681b11
- Enlarged debug buffer to facilitate long certificate values and filenames
by Paul Bakker
· 16 years ago
785a9ee
- Added email address to header license information
by Paul Bakker
· 17 years ago
e0ccd0a
- Updated Copyright notices
by Paul Bakker
· 17 years ago
40e4694
- First replacement of xyssl by polarssl where needed
by Paul Bakker
· 17 years ago
5121ce5
- Renamed include directory to polarssl
by Paul Bakker
· 17 years ago