Manuel Pégourié-Gonnard f4569b14c4 Fix bug checking pathlen on first intermediate ... Remove check on the pathLenConstraint value when looking for a parent to the EE cert, as the constraint is on the number of intermediate certs below the parent, and that number is always 0 at that point, so the constraint is always satisfied. The check was actually off-by-one, which caused valid chains to be rejected under the following conditions: - the parent certificate is not a trusted root, and - it has pathLenConstraint == 0 (max_pathlen == 1 in our representation) fixes #280		2015-11-19 11:10:38 +01:00
..
.gitignore	Split libs with make + general make cleanups	2015-06-25 10:59:56 +02:00
aes.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
aesni.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
arc4.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
asn1parse.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
asn1write.c	Merge branch 'iotssl-519-asn1write-overflows-restricted' into development-restricted	2015-11-02 11:07:30 +09:00
base64.c	Fix references to non-standard SIZE_T_MAX	2015-10-05 15:23:11 +01:00
bignum.c	Corrected URL/reference to MPI library	2015-10-14 22:56:44 +01:00
blowfish.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
camellia.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ccm.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
certs.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
cipher_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
cipher.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
CMakeLists.txt	Change version number to 2.2.0	2015-11-04 19:55:40 +00:00
ctr_drbg.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
debug.c	Fix macroization of inline in C++	2015-10-05 11:41:36 +01:00
des.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
dhm.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecdh.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecdsa.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ecjpake.c	Fix potential stack buffer overflow in ecjpake	2015-10-20 16:20:56 +02:00
ecp_curves.c	Fix macroization of inline in C++	2015-10-05 11:41:36 +01:00
ecp.c	Optimize more common cases in ecp_muladd()	2015-10-23 15:50:37 +02:00
entropy_poll.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
entropy.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
error.c	Clean up error codes	2015-09-08 11:21:21 +02:00
gcm.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
havege.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
hmac_drbg.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
Makefile	Add skeleton for EC J-PAKE module	2015-09-07 12:43:09 +02:00
md2.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md4.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md5.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
md.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
memory_buffer_alloc.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
net.c	Fix compile error in net.c with musl libc	2015-10-05 12:17:49 +01:00
oid.c	Fix typo in an OID name	2015-10-21 16:40:29 +02:00
padlock.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pem.c	Merge of IOTSSL-476 - Random malloc in pem_read()	2015-10-05 00:26:36 +01:00
pk_wrap.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pk.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs5.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs11.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
pkcs12.c	Fix stack buffer overflow in pkcs12	2015-09-28 19:47:50 +02:00
pkparse.c	Clean up compilation warnings	2015-10-02 13:32:17 +01:00
pkwrite.c	Fix other occurrences of same bounds check issue	2015-10-21 12:50:45 +02:00
platform.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ripemd160.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
rsa.c	Try to prevent some misuse of RSA functions	2015-10-30 10:56:25 +01:00
sha1.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
sha256.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
sha512.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_cache.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_ciphersuites.c	Add the ECJPAKE ciphersuite	2015-09-16 22:58:29 +02:00
ssl_cli.c	Merge branch 'development' into misc	2015-10-27 16:57:34 +00:00
ssl_cookie.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_srv.c	Merge branch 'development' into iotssl-461-ecjpake-finalization	2015-10-20 15:00:29 +02:00
ssl_ticket.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
ssl_tls.c	Merge branch 'iotssl-519-asn1write-overflows-restricted' into development-restricted	2015-11-02 11:07:30 +09:00
threading.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
timing.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
version_features.c	Merge branch 'development' into iotssl-461-ecjpake-finalization	2015-10-20 15:00:29 +02:00
version.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509_create.c	Fix other occurrences of same bounds check issue	2015-10-21 12:50:45 +02:00
x509_crl.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509_crt.c	Fix bug checking pathlen on first intermediate	2015-11-19 11:10:38 +01:00
x509_csr.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509write_crt.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
x509write_csr.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00
xtea.c	Change main license to Apache 2.0	2015-09-04 14:21:07 +02:00