git.openssl.org Git - openssl.git/commit

author	Todd Short <tshort@akamai.com>
	Wed, 27 Jan 2021 19:23:33 +0000 (14:23 -0500)
committer	Todd Short <todd.short@me.com>
	Tue, 28 Mar 2023 17:49:54 +0000 (13:49 -0400)
commit	3c95ef22df55cb2d9dc64ce1f3be6e5a8ee63206
tree	0f7fcff4ec4735c778595db4f4a85bce70715d8b	tree \| snapshot
parent	5ab3f71a33cb0140fc29ae9244cd4f8331c2f3a5	commit \| diff

RFC7250 (RPK) support

Add support for the RFC7250 certificate-type extensions.
Alows the use of only private keys for connection (i.e. certs not needed).

Add APIs
Add unit tests
Add documentation
Add s_client/s_server support

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18185)

49 files changed:

CHANGES.md		diff \| blob \| history
NEWS.md		diff \| blob \| history
apps/lib/s_cb.c		diff \| blob \| history
apps/s_client.c		diff \| blob \| history
apps/s_server.c		diff \| blob \| history
crypto/err/openssl.txt		diff \| blob \| history
crypto/x509/x509_txt.c		diff \| blob \| history
crypto/x509/x509_vfy.c		diff \| blob \| history
doc/build.info		diff \| blob \| history
doc/man1/openssl-s_client.pod.in		diff \| blob \| history
doc/man1/openssl-s_server.pod.in		diff \| blob \| history
doc/man3/SSL_CTX_dane_enable.pod		diff \| blob \| history
doc/man3/SSL_get0_peer_rpk.pod	[new file with mode: 0644]	blob
doc/man3/SSL_set1_server_cert_type.pod	[new file with mode: 0644]	blob
doc/man3/X509_STORE_CTX_get_error.pod		diff \| blob \| history
doc/man3/X509_STORE_CTX_new.pod		diff \| blob \| history
doc/man3/X509_verify.pod		diff \| blob \| history
doc/man3/X509_verify_cert.pod		diff \| blob \| history
doc/man3/d2i_SSL_SESSION.pod		diff \| blob \| history
include/crypto/x509.h		diff \| blob \| history
include/openssl/ssl.h.in		diff \| blob \| history
include/openssl/sslerr.h		diff \| blob \| history
include/openssl/tls1.h		diff \| blob \| history
include/openssl/x509_vfy.h.in		diff \| blob \| history
ssl/ssl_asn1.c		diff \| blob \| history
ssl/ssl_cert.c		diff \| blob \| history
ssl/ssl_err.c		diff \| blob \| history
ssl/ssl_lib.c		diff \| blob \| history
ssl/ssl_local.h		diff \| blob \| history
ssl/ssl_sess.c		diff \| blob \| history
ssl/statem/extensions.c		diff \| blob \| history
ssl/statem/extensions_clnt.c		diff \| blob \| history
ssl/statem/extensions_cust.c		diff \| blob \| history
ssl/statem/extensions_srvr.c		diff \| blob \| history
ssl/statem/statem_clnt.c		diff \| blob \| history
ssl/statem/statem_lib.c		diff \| blob \| history
ssl/statem/statem_local.h		diff \| blob \| history
ssl/statem/statem_srvr.c		diff \| blob \| history
ssl/t1_lib.c		diff \| blob \| history
ssl/t1_trce.c		diff \| blob \| history
test/build.info		diff \| blob \| history
test/ext_internal_test.c		diff \| blob \| history
test/recipes/70-test_certtypeext.t	[new file with mode: 0644]	blob
test/recipes/90-test_rpk.t	[new file with mode: 0644]	blob
test/rpktest.c	[new file with mode: 0644]	blob
test/sslapitest.c		diff \| blob \| history
util/libcrypto.num		diff \| blob \| history
util/libssl.num		diff \| blob \| history
util/perl/TLSProxy/Message.pm		diff \| blob \| history

Unnamed repository; edit this file 'description' to name the repository.

RSS Atom