diff options
| author | Shane Lontis <shane.lontis@oracle.com> | 2020-07-24 14:53:27 +0200 |
|---|---|---|
| committer | Shane Lontis <shane.lontis@oracle.com> | 2020-07-24 14:53:27 +0200 |
| commit | 6725682d77510bf6d499957897d7be124d603f40 (patch) | |
| tree | 447e5bce5607b4873f7f018df1b2e4c21a394e92 /util/libssl.num | |
| parent | Test RSA oaep in fips mode (diff) | |
| download | openssl-6725682d77510bf6d499957897d7be124d603f40.tar.xz openssl-6725682d77510bf6d499957897d7be124d603f40.zip | |
Add X509 related libctx changes.
- In order to not add many X509_XXXX_with_libctx() functions the libctx and propq may be stored in the X509 object via a call to X509_new_with_libctx().
- Loading via PEM_read_bio_X509() or d2i_X509() should pass in a created cert using X509_new_with_libctx().
- Renamed some XXXX_ex() to XXX_with_libctx() for X509 API's.
- Removed the extra parameters in check_purpose..
- X509_digest() has been modified so that it expects a const EVP_MD object() and then internally it does the fetch when it needs to (via ASN1_item_digest_with_libctx()).
- Added API's that set the libctx when they load such as X509_STORE_new_with_libctx() so that the cert chains can be verified.
Reviewed-by: Richard Levitte <levitte@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12153)
Diffstat (limited to 'util/libssl.num')
| -rw-r--r-- | util/libssl.num | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/util/libssl.num b/util/libssl.num index 637e088704..1758525038 100644 --- a/util/libssl.num +++ b/util/libssl.num @@ -516,3 +516,4 @@ SSL_CTX_new_with_libctx ? 3_0_0 EXIST::FUNCTION: SSL_new_session_ticket ? 3_0_0 EXIST::FUNCTION: SSL_get0_peer_certificate ? 3_0_0 EXIST::FUNCTION: SSL_get1_peer_certificate ? 3_0_0 EXIST::FUNCTION: +SSL_load_client_CA_file_with_libctx ? 3_0_0 EXIST::FUNCTION: |