| #
f1965221 |
| 24-Feb-2001 |
Dr. Stephen Henson |
New function and options to check OCSP response validity.
|
| #
cf1b7d96 |
| 19-Feb-2001 |
Richard Levitte |
Make all configuration macros available for application by making
sure they are available in opensslconf.h, by giving them names starting
with "OPENSSL_" to avoid conflicts with other package
Make all configuration macros available for application by making
sure they are available in opensslconf.h, by giving them names starting
with "OPENSSL_" to avoid conflicts with other packages and by making
sure e_os2.h will cover all platform-specific cases together with
opensslconf.h.
I've checked fairly well that nothing breaks with this (apart from
external software that will adapt if they have used something like
NO_KRB5), but I can't guarantee it completely, so a review of this
change would be a good thing.
show more ...
|
| #
67c18019 |
| 13-Feb-2001 |
Dr. Stephen Henson |
New function OCSP_parse_url() and -url option for ocsp utility.
Doesn't handle SSL URLs yet.
|
| #
46a58ab9 |
| 12-Feb-2001 |
Dr. Stephen Henson |
Modify OCSP nonce behaviour.
|
| #
2b916952 |
| 04-Feb-2001 |
Dr. Stephen Henson |
Fix ASN1_TIME_to_generlizedtime().
Add protoype for OCSP_response_create().
Add OCSP_request_sign() and OCSP_basic_sign()
private key and certificate checks and make
OCSP_NO
Fix ASN1_TIME_to_generlizedtime().
Add protoype for OCSP_response_create().
Add OCSP_request_sign() and OCSP_basic_sign()
private key and certificate checks and make
OCSP_NOCERTS consistent with PKCS7_NOCERTS
show more ...
|
| #
02e4fbed |
| 03-Feb-2001 |
Dr. Stephen Henson |
Various OCSP responder utility functions.
Delete obsolete OCSP functions.
Largely untested at present...
|
| #
e8af92fc |
| 18-Jan-2001 |
Dr. Stephen Henson |
Implement remaining OCSP verify checks in
accordance with RFC2560.
|
| #
81f169e9 |
| 17-Jan-2001 |
Dr. Stephen Henson |
Initial OCSP certificate verify. Not complete,
it just supports a "trusted OCSP global root CA".
|
| #
9b4dc830 |
| 11-Jan-2001 |
Dr. Stephen Henson |
OCSP basic response verify. Very incomplete
but will verify the signatures on a response
and locate the signers certifcate.
Still needs to implement a proper OCSP certificate
ver
OCSP basic response verify. Very incomplete
but will verify the signatures on a response
and locate the signers certifcate.
Still needs to implement a proper OCSP certificate
verify.
Fix warning in RAND_egd().
show more ...
|
| #
0b33bc65 |
| 08-Jan-2001 |
Dr. Stephen Henson |
Add set of OCSP client functions. All experimental
and subject to addition, modifcation or deletion.
Add two OCSP nonce utility functions.
Fix typo in status code name.
|
| #
bf0d176e |
| 04-Jan-2001 |
Dr. Stephen Henson |
Update OCSP API.
Remove extensions argument from various functions
because it is not needed with the new extension
code.
New function OCSP_cert_to_id() to convert a pair
Update OCSP API.
Remove extensions argument from various functions
because it is not needed with the new extension
code.
New function OCSP_cert_to_id() to convert a pair
of certificates into an OCSP_CERTID.
New simple OCSP HTTP function. This is rather primitive
but just about adequate to send OCSP requests and
parse the response.
Fix typo in CRL distribution points extension.
Fix ASN1 code so it adds a final null to constructed
strings.
show more ...
|
| #
2fc0d1f1 |
| 14-Dec-2000 |
Dr. Stephen Henson |
Add OCSP nonce extension to supported extensions.
This is a little unusual because it can contain no
structure i.e. the extension OCTET STRING content
octets do not contain a DER enc
Add OCSP nonce extension to supported extensions.
This is a little unusual because it can contain no
structure i.e. the extension OCTET STRING content
octets do not contain a DER encoded structure.
show more ...
|
|
Revision tags: rsaref |
|
| #
eb64730b |
| 27-Oct-2000 |
Richard Levitte |
The majority of the OCSP code from CertCo.
|
