1. 17 11月, 2012 1 次提交
  2. 08 10月, 2012 1 次提交
  3. 20 9月, 2012 1 次提交
  4. 14 9月, 2012 1 次提交
  5. 13 9月, 2012 1 次提交
  6. 12 9月, 2012 1 次提交
  7. 11 9月, 2012 2 次提交
  8. 29 8月, 2012 1 次提交
  9. 15 8月, 2012 1 次提交
  10. 03 8月, 2012 1 次提交
  11. 27 7月, 2012 1 次提交
  12. 25 7月, 2012 1 次提交
  13. 24 7月, 2012 2 次提交
    • D
      check EC tmp key matches preferences · d18b716d
      Dr. Stephen Henson 提交于
      d18b716d
    • D
      Add support for certificate stores in CERT structure. This makes it · 74ecfab4
      Dr. Stephen Henson 提交于
      possible to have different stores per SSL structure or one store in
      the parent SSL_CTX. Include distint stores for certificate chain
      verification and chain building. New ctrl SSL_CTRL_BUILD_CERT_CHAIN
      to build and store a certificate chain in CERT structure: returing
      an error if the chain cannot be built: this will allow applications
      to test if a chain is correctly configured.
      
      Note: if the CERT based stores are not set then the parent SSL_CTX
      store is used to retain compatibility with existing behaviour.
      74ecfab4
  14. 18 7月, 2012 1 次提交
  15. 08 7月, 2012 1 次提交
    • D
      Add new ctrl to retrieve client certificate types, print out · 9f27b1ee
      Dr. Stephen Henson 提交于
      details in s_client.
      
      Also add ctrl to set client certificate types. If not used sensible values
      will be included based on supported signature algorithms: for example if
      we don't include any DSA signing algorithms the DSA certificate type is
      omitted.
      
      Fix restriction in old code where certificate types would be truncated
      if it exceeded TLS_CT_NUMBER.
      9f27b1ee
  16. 03 7月, 2012 1 次提交
  17. 29 6月, 2012 1 次提交
    • D
      Add certificate callback. If set this is called whenever a certificate · 18d71588
      Dr. Stephen Henson 提交于
      is required by client or server. An application can decide which
      certificate chain to present based on arbitrary criteria: for example
      supported signature algorithms. Add very simple example to s_server.
      This fixes many of the problems and restrictions of the existing client
      certificate callback: for example you can now clear existing certificates
      and specify the whole chain.
      18d71588
  18. 28 6月, 2012 1 次提交
    • D
      Add new "valid_flags" field to CERT_PKEY structure which determines what · d61ff83b
      Dr. Stephen Henson 提交于
      the certificate can be used for (if anything). Set valid_flags field
      in new tls1_check_chain function. Simplify ssl_set_cert_masks which used
      to have similar checks in it.
      
      Add new "cert_flags" field to CERT structure and include a "strict mode".
      This enforces some TLS certificate requirements (such as only permitting
      certificate signature algorithms contained in the supported algorithms
      extension) which some implementations ignore: this option should be used
      with caution as it could cause interoperability issues.
      d61ff83b
  19. 25 6月, 2012 1 次提交
  20. 22 6月, 2012 1 次提交
  21. 18 6月, 2012 1 次提交
  22. 15 6月, 2012 1 次提交
  23. 13 6月, 2012 1 次提交
  24. 12 6月, 2012 1 次提交
  25. 30 5月, 2012 1 次提交
  26. 11 5月, 2012 3 次提交
  27. 10 5月, 2012 1 次提交
  28. 27 4月, 2012 1 次提交
  29. 26 4月, 2012 4 次提交
  30. 20 4月, 2012 1 次提交
  31. 17 4月, 2012 2 次提交
  32. 05 4月, 2012 1 次提交