zzy/openssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
15,039 Commits 1 Branch 0 Tags
Commit Graph

4 Commits

Author SHA1 Message Date
Viktor Dukhovni
1d85277235 Add tests for non-ca trusted roots and intermediates 
Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
 2016-01-31 21:24:16 -05:00
Viktor Dukhovni
33cc5dde47 Compat self-signed trust with reject-only aux data 
When auxiliary data contains only reject entries, continue to trust
self-signed objects just as when no auxiliary data is present.

This makes it possible to reject specific uses without changing
what's accepted (and thus overring the underlying EKU).

Added new supported certs and doubled test count from 38 to 76.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
 2016-01-31 21:24:12 -05:00
Viktor Dukhovni
0daccd4dc1 Check chain extensions also for trusted certificates 
This includes basic constraints, key usages, issuer EKUs and auxiliary
trust OIDs (given a trust suitably related to the intended purpose).

Added tests and updated documentation.

Reviewed-by: Dr. Stephen Henson <steve@openssl.org>
 2016-01-31 21:23:23 -05:00
Viktor Dukhovni
8478351737 Scripts to generate verify test certs 
Reviewed-by: Richard Levitte <levitte@openssl.org>
 2016-01-20 19:03:01 -05:00