boringssl

履歴

Jesse Selover d7266ecc9b Enforce key usage for RSA keys in TLS 1.2. For now, this is off by default and controlled by SSL_set_enforce_rsa_key_usage. This may be set as late as certificate verification so we may start by enforcing it for known roots. Generalizes ssl_cert_check_digital_signature_key_usage to check any part of the key_usage, and adds a new error KEY_USAGE_BIT_INCORRECT for the generalized method. Bug: chromium:795089 Change-Id: Ifa504c321bec3263a4e74f2dc48513e3b895d3ee Reviewed-on: https://boringssl-review.googlesource.com/c/34604 Reviewed-by: David Benjamin <davidben@google.com> Commit-Queue: David Benjamin <davidben@google.com>		5年前
..
aead.h	Flatten EVP_AEAD_CTX	6年前
aes.h	Run comment conversion script on include/	7年前
arm_arch.h	Run comment conversion script on include/	7年前
asn1.h	Rewrite PEM_X509_INFO_read_bio.	6年前
asn1_mac.h	Purge the remainder of asn1_mac.h.	8年前
asn1t.h	Remove ASN1_template_(i2d,d2i).	7年前
base.h	Add an interface for QUIC integration.	6年前
base64.h	Document alternative functions to BIO_f_base64.	6年前
bio.h	Fix d2i_*_bio on partial reads.	5年前
blowfish.h	Fix some size_t to long casts.	5年前
bn.h	Add some Node compatibility functions.	5年前
buf.h	Support symbol prefixes	6年前
buffer.h	Add buffer.h for compatibility.	9年前
bytestring.h	Minor fixes to bytestring.h header.	6年前
cast.h	Fix some size_t to long casts.	5年前
chacha.h	Add chacha.h to the list of documented headers.	7年前
cipher.h	Add EVP_CIPHER support for Blowfish and CAST to decrepit.	5年前
cmac.h	Support symbol prefixes	6年前
conf.h	Undo recent changes to \|X509V3_EXT_conf_nid\|.	6年前
cpu.h	Add test of assembly code dispatch.	5年前
crypto.h	Add a pile of compatibility functions.	6年前
curve25519.h	Support symbol prefixes	6年前
des.h	Run comment conversion script on include/	7年前
dh.h	Add missing bssl::UpRef overloads.	6年前
digest.h	Support symbol prefixes	6年前
dsa.h	Add missing bssl::UpRef overloads.	6年前
dtls1.h	Opaquify DTLS structs.	9年前
e_os2.h	Add a stub e_os2.h header.	6年前
ec.h	Add a very roundabout EC keygen API.	5年前
ec_key.h	Add EC_KEY_key2buf for OpenSSL compatibility	5年前
ecdh.h	Add ECDH_compute_key_fips inside the module.	6年前
ecdsa.h	Support symbol prefixes	6年前
engine.h	Support symbol prefixes	6年前
err.h	Add some more compatibility functions.	6年前
evp.h	Add a very roundabout EC keygen API.	5年前
ex_data.h	Run comment conversion script on include/	7年前
hkdf.h	Run comment conversion script on include/	7年前
hmac.h	Support symbol prefixes	6年前
hrss.h	HRSS: flatten sample distribution.	5年前
is_boringssl.h	Run comment conversion script on include/	7年前
lhash.h	Fix undefined function pointer casts in LHASH.	6年前
md4.h	Run comment conversion script on include/	7年前
md5.h	Run comment conversion script on include/	7年前
mem.h	Add some Node compatibility functions.	5年前
nid.h	Add initial HRSS support.	5年前
obj.h	Add some more compatibility functions.	6年前
obj_mac.h	Rename obj_mac.h to nid.h and make it a multiply-includable header.	8年前
objects.h	Move public headers to include/openssl/	10年前
opensslconf.h	Switch OPENSSL_VERSION_NUMBER to 1.1.0.	7年前
opensslv.h	Get version-related functions from crypto.h rather than ssl.h.	9年前
ossl_typ.h	Move public headers to include/openssl/	10年前
pem.h	Fix undefined function pointer casts in IMPLEMENT_PEM_*.	6年前
pkcs7.h	Support symbol prefixes	6年前
pkcs8.h	Support symbol prefixes	6年前
pkcs12.h	Move public headers to include/openssl/	10年前
poly1305.h	Run comment conversion script on include/	7年前
pool.h	Support symbol prefixes	6年前
rand.h	Remove pooling of PRNG state.	5年前
rc4.h	Run comment conversion script on include/	7年前
ripemd.h	Run comment conversion script on include/	7年前
rsa.h	Mark the \|e\| argument to \|RSA_generate_key_ex\| as const.	6年前
safestack.h	Rename safe_stack.h to safestack.h.	9年前
sha.h	Remove union from \|SHA512_CTX\|.	5年前
span.h	Support symbol prefixes	6年前
srtp.h	Fold srtp.h into ssl.h.	9年前
ssl.h	Enforce key usage for RSA keys in TLS 1.2.	5年前
ssl3.h	Modernize OPENSSL_COMPILE_ASSERT, part 2.	6年前
stack.h	Modernize OPENSSL_COMPILE_ASSERT, part 2.	6年前
thread.h	Rename OPENSSL_NO_THREADS, part 1.	6年前
tls1.h	Implement server support for delegated credentials.	5年前
type_check.h	Modernize OPENSSL_COMPILE_ASSERT, part 2.	6年前
x509.h	Push an error on sigalg mismatch in X509_verify.	6年前
x509_vfy.h	Don't accept “SSL client” as a substitute for S/MIME in the Netscape cert type extension.	6年前
x509v3.h	Unexport and rename hex_to_string, string_to_hex, and name_cmp.	5年前