chunk 7 of CMP contribution to OpenSSL
authorDr. David von Oheimb <David.von.Oheimb@siemens.com>
Sat, 15 Feb 2020 13:57:32 +0000 (14:57 +0100)
committerDr. David von Oheimb <David.von.Oheimb@siemens.com>
Mon, 17 Feb 2020 06:43:58 +0000 (07:43 +0100)
commit31b28ad96aa841ae39d4009ebb15d90f2a2afdab
tree1c35d270dec05defdb07028911a67dbba82fe65c
parent235595c402bd7815f07f1f3f3babe9fcc247a206
chunk 7 of CMP contribution to OpenSSL

add CMP message validation and related tests; while doing so:
* add ERR_add_error_mem_bio() to crypto/err/err_prn.c
* move ossl_cmp_add_error_txt() as ERR_add_error_txt() to crypto/err/err_prn.c
* add X509_STORE_CTX_print_verify_cb() to crypto/x509/t_x509.c,
  adding internally x509_print_ex_brief(), print_certs(), and print_store_certs()
* move {ossl_cmp_,}X509_STORE_get1_certs() to crypto/x509/x509_lu.c

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
(Merged from https://github.com/openssl/openssl/pull/10620)
45 files changed:
crypto/cmp/build.info
crypto/cmp/cmp_err.c
crypto/cmp/cmp_local.h
crypto/cmp/cmp_util.c
crypto/cmp/cmp_vfy.c [new file with mode: 0644]
crypto/err/err_prn.c
crypto/err/openssl.txt
crypto/x509/t_x509.c
crypto/x509/x509_err.c
crypto/x509/x509_lu.c
doc/internal/man3/ossl_cmp_print_log.pod
doc/man3/ERR_put_error.pod
doc/man3/OSSL_CMP_validate_msg.pod [new file with mode: 0644]
doc/man3/X509_STORE_CTX_set_verify_cb.pod
doc/man3/X509_STORE_get0_param.pod
include/crypto/x509.h
include/openssl/cmp.h
include/openssl/cmperr.h
include/openssl/err.h
include/openssl/x509_vfy.h
include/openssl/x509err.h
test/build.info
test/cmp_ctx_test.c
test/cmp_protect_test.c
test/cmp_vfy_test.c [new file with mode: 0644]
test/recipes/65-test_cmp_vfy.t [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/EndEntity1.crt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/EndEntity2.crt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/IP_waitingStatus_PBM.der [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/IP_waitingStatus_PBM.txt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/IR_protected.der [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/IR_protected_0_extraCerts.der [new file with mode: 0755]
test/recipes/65-test_cmp_vfy_data/IR_protected_2_extraCerts.der [new file with mode: 0755]
test/recipes/65-test_cmp_vfy_data/IR_rmprotection.der [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/IR_unprotected.der [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/Intermediate_CA.crt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/Root_CA.crt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/chain.txt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/client.crt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/insta.cert.pem [new file with mode: 0755]
test/recipes/65-test_cmp_vfy_data/insta.priv.pem [new file with mode: 0755]
test/recipes/65-test_cmp_vfy_data/insta_ca.cert.pem [new file with mode: 0755]
test/recipes/65-test_cmp_vfy_data/server.crt [new file with mode: 0644]
test/recipes/65-test_cmp_vfy_data/server.key [new file with mode: 0644]
util/libcrypto.num