Commit graph

24 commits

Author SHA1 Message Date
Vincent Hanquez
e35026abe8 misc export and convenience functions in extra. 2013-05-30 07:21:55 +01:00
Vincent Hanquez
026aba87e5 use x509 and x509-validation. 2013-05-26 08:02:46 +01:00
Vincent Hanquez
8d39c0103b use not a deprecated alias. 2013-05-26 08:01:34 +01:00
Vincent Hanquez
a3db8c38a1 remove all the old certificate functions and use new things 2013-05-26 07:24:19 +01:00
Vincent Hanquez
c2924f82d9 don't use DSA.signature for now as it's going some new revision 2013-05-16 09:44:01 +01:00
Vincent Hanquez
5173b61783 comment compression import. 2013-02-09 16:57:58 +00:00
Vincent Hanquez
66cf59c054 remove BulkNoneF which only duplicate case for no reason. 2013-02-09 16:56:47 +00:00
bartavelle
4b5be1ee30 Adding support for SHA256
This one line change seems to add support for SHA256 signatures.
2013-02-01 13:51:56 +01:00
Vincent Hanquez
c94898ea6f improve verifychain function.
add basic information to be able to verify BasicConstraints pathlen.
2013-01-19 22:15:55 +00:00
Vincent Hanquez
678afe4d31 fix example. 2013-01-19 20:12:16 +00:00
Vincent Hanquez
0d6e8e84e8 remove spurious file. 2013-01-19 20:11:29 +00:00
Vincent Hanquez
15885c0649 check that a certificate has the ability to actually sign another certificate.
this is done basically by verifying that the CA is set in basic constraints,
and then that the key usage allow certificate signing.
2013-01-19 11:41:49 +00:00
Vincent Hanquez
125f4b4304 reorg 2013-01-19 11:03:48 +00:00
Vincent Hanquez
6191f53a20 expands spaces 2013-01-19 10:41:11 +00:00
Vincent Hanquez
8f93e0a648 update to crypto-pubkey 2013-01-10 09:04:44 +00:00
Vincent Hanquez
91d000748f remove cryptocipher 2013-01-09 22:09:55 +00:00
Vincent Hanquez
98f4127bc9 crypto-random-types -> crypto-random-api. 2012-12-11 09:23:13 +00:00
Vincent Hanquez
52c28bee63 use cipher-rc4 instead of cryptocipher implementation. 2012-12-11 09:22:17 +00:00
Vincent Hanquez
cedd5b2c86 switch to CPRG instead of CryptoRandomGen 2012-12-05 07:48:11 +00:00
exbb2
4143eaa2c4 Kludge for -optl-mwindows 2012-10-21 21:33:58 +01:00
Thomas DuBuisson
c3c06f96e1 Add some useful documentation.
TShis is probably the main entry point for all of the TLS suite. At the
very least it needs the two string args documented.
2012-10-21 21:31:11 +01:00
Vincent Hanquez
d92ba43757 re-enabled the NOCERTVERIFY for platform that doesn't have system certificate yet.
Despite some efforts to support the windows certificates, there's still
some more work to do until it's ready.
2012-10-17 07:10:24 +01:00
Vincent Hanquez
12a28a833a change related to the new certificatestore. 2012-10-16 08:40:40 +01:00
Vincent Hanquez
2e8cb14f38 merge tls-extra into tls. 2012-09-05 06:44:19 +01:00