Manuel Pégourié-Gonnard 7929229a32 Fix bug checking pathlen on first intermediate ...

Remove check on the pathLenConstraint value when looking for a parent to the
EE cert, as the constraint is on the number of intermediate certs below the
parent, and that number is always 0 at that point, so the constraint is always
satisfied.

The check was actually off-by-one, which caused valid chains to be rejected
under the following conditions:
- the parent certificate is not a trusted root, and
- it has pathLenConstraint == 0 (max_pathlen == 1 in our representation)

fixes #280

2015-12-03 09:53:20 +01:00

..

.gitignore

Added proper gitignores for linux compilation

2012-11-17 00:04:49 +01:00

aes.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

arc4.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

asn1parse.c

Fix potential unintended sign extension

2015-04-23 10:55:04 +02:00

asn1write.c

Fix potential buffer overflow in asn1write

2015-10-27 11:39:32 +01:00

base64.c

Fix references to non-standard SIZE_T_MAX

2015-10-05 15:31:53 +01:00

bignum.c

Fix references to non-standard SIZE_T_MAX

2015-10-05 15:31:53 +01:00

blowfish.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

camellia.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

certs.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

cipher_wrap.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

cipher.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

CMakeLists.txt

Change version number to 1.2.18

2015-11-06 10:51:16 +00:00

ctr_drbg.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

debug.c

Fix thread-safety issue in debug.c

2015-06-29 18:54:28 +02:00

des.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

dhm.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

entropy_poll.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

entropy.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

error.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

gcm.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

havege.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

Makefile

Fix missing -static-libgcc for dlls

2015-08-10 16:41:14 +02:00

md2.c

Fix warning with MD/SHA ALT implementation

2015-08-31 12:23:30 +02:00

md4.c

Fix warning with MD/SHA ALT implementation

2015-08-31 12:23:30 +02:00

md5.c

Fix warning with MD/SHA ALT implementation

2015-08-31 12:23:30 +02:00

md_wrap.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

md.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

net.c

Fix compile error in net.c with musl libc

2015-10-05 14:32:43 +01:00

padlock.c

Fix bug in Via Padlock support

2015-04-23 10:55:05 +02:00

pbkdf2.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

pem.c

Fix potential random malloc in pem_read()

2015-10-01 17:00:22 +02:00

pkcs5.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

pkcs11.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

pkcs12.c

Fix stack buffer overflow in pkcs12

2015-10-01 16:57:47 +02:00

rsa.c

Add counter-measure against RSA-CRT attack

2015-09-09 12:36:49 +02:00

sha1.c

Fix warning with MD/SHA ALT implementation

2015-08-31 12:23:30 +02:00

sha2.c

Fix warning with MD/SHA ALT implementation

2015-08-31 12:23:30 +02:00

sha4.c

Fix warning with MD/SHA ALT implementation

2015-08-31 12:23:30 +02:00

ssl_cache.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

ssl_cli.c

Fix possible client crash on API misuse

2015-09-03 11:01:37 +02:00

ssl_srv.c

Fix potential overflow in CertificateRequest

2015-10-02 12:36:02 +02:00

ssl_tls.c

Added max length checking of hostname

2015-09-30 00:45:21 +01:00

timing.c

Fix hardclock with some versions of mingw64

2015-04-23 10:55:05 +02:00

version.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

x509parse.c

Fix bug checking pathlen on first intermediate

2015-12-03 09:53:20 +01:00

x509write.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00

xtea.c

Update copyright line to 2015

2015-02-13 14:24:10 +01:00