Initial rewrite of X509 STORE to replicate openssl behavior#8087

Merged

JacobBarthelmeh merged 17 commits intowolfSSL:masterfrom ColtonWilley:x509_store_rewrite

Oct 23, 2024

+1,072-170

Commits on Oct 23, 2024

Initial rewrite of X509 STORE to replicate openssl behavior

ColtonWilley
authored and
douzzer
committed
Fixes for CI build errors

ColtonWilley
authored and
douzzer
committed
Allow intermediate CA certs without keycertsign when added through X509 STORE

ColtonWilley
authored and
douzzer
committed
Implement support for verify flag X509_V_FLAG_PARTIAL_CHAIN

ColtonWilley
authored and
douzzer
committed
Fix for windows builds

ColtonWilley
authored and
douzzer
committed
Fix windows warnings

ColtonWilley
authored and
douzzer
committed
Address code comments, rewrite get issuer internals, use better internal names, get rid of all lines over 80 chars

ColtonWilley
authored and
douzzer
committed
Fix new build error after refactor

ColtonWilley
authored and
douzzer
committed
Changes for various failing build configs

ColtonWilley
authored and
douzzer
committed
Properly implement set flags for X509_V_FLAG_PARTIAL_CHAIN

ColtonWilley
authored and
douzzer
committed
Move X509_STORE_CTX_set_flags under OPENSSL_EXTRA

ColtonWilley
authored and
douzzer
committed
Small changes per review comments

ColtonWilley
authored and
douzzer
committed
Restore proper error code handling for self signed CA in non-trusted intermediates

ColtonWilley
authored and
douzzer
committed
Fix loop to decrement

ColtonWilley
authored and
douzzer
committed
Properly omit self signed CA from untrusted intermediates, handle memory leak for SSL case with proper flow

ColtonWilley
authored and
douzzer
committed
Address review comments, rename WOLFSSL_INTER_CA, use up_ref for get issuer

ColtonWilley
authored and
douzzer
committed
add and use WOLFSSL_PARTIAL_CHAIN as native bitmask macro for compat layer X509_V_FLAG_PARTIAL_CHAIN;
douzzer
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Initial rewrite of X509 STORE to replicate openssl behavior#8087

Commits on Oct 23, 2024

Initial rewrite of X509 STORE to replicate openssl behavior

Fixes for CI build errors

Allow intermediate CA certs without keycertsign when added through X509 STORE

Implement support for verify flag X509_V_FLAG_PARTIAL_CHAIN

Fix for windows builds

Fix windows warnings

Address code comments, rewrite get issuer internals, use better internal names, get rid of all lines over 80 chars

Fix new build error after refactor

Changes for various failing build configs

Properly implement set flags for X509_V_FLAG_PARTIAL_CHAIN

Move X509_STORE_CTX_set_flags under OPENSSL_EXTRA

Small changes per review comments

Restore proper error code handling for self signed CA in non-trusted intermediates

Fix loop to decrement

Properly omit self signed CA from untrusted intermediates, handle memory leak for SSL case with proper flow

Address review comments, rename WOLFSSL_INTER_CA, use up_ref for get issuer

add and use WOLFSSL_PARTIAL_CHAIN as native bitmask macro for compat layer X509_V_FLAG_PARTIAL_CHAIN;