summaryrefslogtreecommitdiff
path: root/lib/x509/verify-high.c
Commit message (Expand)AuthorAgeFilesLines
* trust_list_get_issuer_by_dn: fixed check for DN or SPKINikos Mavrogiannopoulos2016-01-071-19/+19
* x509: when appending CRLs to a trust list ensure that we don't have duplicatesNikos Mavrogiannopoulos2015-08-211-2/+31
* Added gnutls_pkcs11_get_raw_issuer_by_subject_key_id and gnutls_x509_trust_li...Nikos Mavrogiannopoulos2015-06-021-8/+101
* Added gnutls_x509_crt_check_email(), gnutls_openpgp_crt_check_email() and GNU...Nikos Mavrogiannopoulos2015-03-251-1/+12
* doc: avoid using structure for opaque typesNikos Mavrogiannopoulos2015-03-201-12/+12
* combined gnutls_pkcs11_obj_attr_t with gnutls_pkcs11_obj_flagsNikos Mavrogiannopoulos2014-12-221-1/+1
* use gnutls_x509_trust_list_verify_named_crt in gnutls_x509_trust_list_verify_...Nikos Mavrogiannopoulos2014-12-121-8/+32
* when the trusted list contains a non-CA certificate warn via the audit logNikos Mavrogiannopoulos2014-12-051-0/+12
* Added flag GNUTLS_X509_CRT_LIST_SORT for gnutls_x509_crt_list_import*Nikos Mavrogiannopoulos2014-11-271-61/+1
* added gnutls_pkcs11_get_raw_issuer_by_dn and gnutls_x509_trust_list_get_issue...Nikos Mavrogiannopoulos2014-11-141-0/+85
* corrected bug in gnutls_x509_trust_list_get_issuer() when used without the GN...Nikos Mavrogiannopoulos2014-10-231-0/+1
* when both a trust module and additional CAs are present account the latter as...Nikos Mavrogiannopoulos2014-10-091-42/+50
* simplify the handling of trust_list_get_issuer() when GNUTLS_TL_GET_COPY is n...Nikos Mavrogiannopoulos2014-10-091-21/+53
* Also iterate over the CA certificates in a PKCS11 tokenArmin Burgmeier2014-10-071-17/+113
* corrected compilation for non-pkcs11; reported by David Woodhouse.Nikos Mavrogiannopoulos2014-10-021-1/+1
* Added GNUTLS_TL_GET_COPY flag and documented the limitations of gnutls_x509_t...Nikos Mavrogiannopoulos2014-10-011-4/+29
* Add an interface to iterate the trusted CA certificates in a trust listArmin Burgmeier2014-09-241-0/+88
* Verify key purpose on intermediate certificate if GNUTLS_VERIFY_KEY_PURPOSE_O...Nikos Mavrogiannopoulos2014-09-221-6/+6
* Memory leak fix on certificate copy failureArmin Burgmeier2014-09-211-0/+1
* updated details on certificate verificationNikos Mavrogiannopoulos2014-09-181-7/+8
* unified the key purpose checks functionsNikos Mavrogiannopoulos2014-09-161-63/+5
* check for CAs with the same key in gnutls_x509_trust_list_add_casNikos Mavrogiannopoulos2014-09-161-3/+7
* hostname and key purpose checks were moved above CRL checksNikos Mavrogiannopoulos2014-09-161-26/+28
* when adding a duplicate certificate, keep the last entryNikos Mavrogiannopoulos2014-09-121-1/+2
* Revert "corrected planned version number"Nikos Mavrogiannopoulos2014-09-111-1/+1
* check the key purpose of the CA certificate when in pkcs11 cert validationNikos Mavrogiannopoulos2014-09-111-8/+9
* doc updateNikos Mavrogiannopoulos2014-09-101-1/+1
* corrected planned version numberNikos Mavrogiannopoulos2014-09-091-1/+1
* gnutls_x509_trust_list_verify_crt2 is in par with gnutls_certificate_verify_p...Nikos Mavrogiannopoulos2014-09-091-7/+36
* Added gnutls_x509_trust_list_verify_purpose_crt()Nikos Mavrogiannopoulos2014-09-081-0/+105
* initialize verification output to zeroNikos Mavrogiannopoulos2014-09-081-0/+3
* Fix unused variable warning without PKCS#11 support.Hani Benhabiles2014-05-271-1/+1
* doc updateNikos Mavrogiannopoulos2014-04-281-0/+4
* gnutls_x509_trust_list_get_issuer() will work correctly with a PKCS #11 trust...Nikos Mavrogiannopoulos2014-04-281-20/+69
* doc updateNikos Mavrogiannopoulos2014-04-161-6/+12
* When verifying check for the same certificate in the trusted list, not only t...Nikos Mavrogiannopoulos2014-04-031-0/+23
* use commit suffix for functions that return a status code.Nikos Mavrogiannopoulos2014-03-211-4/+2
* check the blacklist for certificates provided in gnutls_x509_trust_list_verif...Nikos Mavrogiannopoulos2014-03-021-0/+8
* small artistic changesNikos Mavrogiannopoulos2014-02-201-25/+27
* avoid allocation.Nikos Mavrogiannopoulos2014-01-141-9/+2
* doc updateNikos Mavrogiannopoulos2014-01-131-0/+10
* The RDN sequence is now kept in trust list instead of the credentials paramet...Nikos Mavrogiannopoulos2014-01-111-0/+65
* Updated PKCS #11 support for gnutls_x509_trust_list_add_trust_file().Nikos Mavrogiannopoulos2014-01-021-24/+28
* removed debuggingNikos Mavrogiannopoulos2013-12-211-1/+0
* gnutls_x509_trust_list_remove_cas() and derivatives will utilize a black list.Nikos Mavrogiannopoulos2013-12-161-1/+83
* The library state is used even when not in FIPS mode.Nikos Mavrogiannopoulos2013-11-301-1/+1
* Added support for fips states.Nikos Mavrogiannopoulos2013-11-271-1/+5
* reindented codeNikos Mavrogiannopoulos2013-11-081-421/+461
* removed limitation as this has been resolvedNikos Mavrogiannopoulos2013-09-171-2/+0
* deinitialize the certificateNikos Mavrogiannopoulos2013-03-061-0/+1