Manuel Pégourié-Gonnard 7929229a32 Fix bug checking pathlen on first intermediate ... Remove check on the pathLenConstraint value when looking for a parent to the EE cert, as the constraint is on the number of intermediate certs below the parent, and that number is always 0 at that point, so the constraint is always satisfied. The check was actually off-by-one, which caused valid chains to be rejected under the following conditions: - the parent certificate is not a trusted root, and - it has pathLenConstraint == 0 (max_pathlen == 1 in our representation) fixes #280		2015-12-03 09:53:20 +01:00
..
.gitignore	Added proper gitignores for linux compilation	2012-11-17 00:04:49 +01:00
aes.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
arc4.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
asn1parse.c	Fix potential unintended sign extension	2015-04-23 10:55:04 +02:00
asn1write.c	Fix potential buffer overflow in asn1write	2015-10-27 11:39:32 +01:00
base64.c	Fix references to non-standard SIZE_T_MAX	2015-10-05 15:31:53 +01:00
bignum.c	Fix references to non-standard SIZE_T_MAX	2015-10-05 15:31:53 +01:00
blowfish.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
camellia.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
certs.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
cipher.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
cipher_wrap.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
CMakeLists.txt	Change version number to 1.2.18	2015-11-06 10:51:16 +00:00
ctr_drbg.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
debug.c	Fix thread-safety issue in debug.c	2015-06-29 18:54:28 +02:00
des.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
dhm.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
entropy.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
entropy_poll.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
error.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
gcm.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
havege.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
Makefile	Fix missing -static-libgcc for dlls	2015-08-10 16:41:14 +02:00
md.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
md2.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
md4.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
md5.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
md_wrap.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
net.c	Fix compile error in net.c with musl libc	2015-10-05 14:32:43 +01:00
padlock.c	Fix bug in Via Padlock support	2015-04-23 10:55:05 +02:00
pbkdf2.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
pem.c	Fix potential random malloc in pem_read()	2015-10-01 17:00:22 +02:00
pkcs5.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
pkcs11.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
pkcs12.c	Fix stack buffer overflow in pkcs12	2015-10-01 16:57:47 +02:00
rsa.c	Add counter-measure against RSA-CRT attack	2015-09-09 12:36:49 +02:00
sha1.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
sha2.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
sha4.c	Fix warning with MD/SHA ALT implementation	2015-08-31 12:23:30 +02:00
ssl_cache.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
ssl_cli.c	Fix possible client crash on API misuse	2015-09-03 11:01:37 +02:00
ssl_srv.c	Fix potential overflow in CertificateRequest	2015-10-02 12:36:02 +02:00
ssl_tls.c	Added max length checking of hostname	2015-09-30 00:45:21 +01:00
timing.c	Fix hardclock with some versions of mingw64	2015-04-23 10:55:05 +02:00
version.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
x509parse.c	Fix bug checking pathlen on first intermediate	2015-12-03 09:53:20 +01:00
x509write.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00
xtea.c	Update copyright line to 2015	2015-02-13 14:24:10 +01:00