Commit message (Expand) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Extend mkcert.sh to support nameConstraints generation and more complex | Dr. Stephen Henson | 2016-07-12 | 1 | -0/+136 |
* | Fix generation of expired CA certificate. | Dr. Stephen Henson | 2016-06-23 | 1 | -1/+1 |
* | Make it possible to generate proxy certs with test/certs/mkcert.sh | Richard Levitte | 2016-06-20 | 1 | -0/+26 |
* | Move peer chain security checks into x509_vfy.c | Viktor Dukhovni | 2016-04-03 | 1 | -0/+30 |
* | Require intermediate CAs to have basicConstraints CA:true. | Viktor Dukhovni | 2016-03-30 | 1 | -0/+1 |
* | Add tests for non-ca trusted roots and intermediates | Viktor Dukhovni | 2016-02-01 | 1 | -0/+8 |
* | Compat self-signed trust with reject-only aux data | Viktor Dukhovni | 2016-02-01 | 1 | -3/+83 |
* | Check chain extensions also for trusted certificates | Viktor Dukhovni | 2016-02-01 | 1 | -1/+11 |
* | Scripts to generate verify test certs | Viktor Dukhovni | 2016-01-21 | 1 | -0/+55 |