openssl.git
9 years agoUse properly local variables for thread-safety.
Bodo Möller [Tue, 22 Dec 2009 11:52:17 +0000 (11:52 +0000)]
Use properly local variables for thread-safety.

Submitted by: Martin Rex

9 years agoConstify crypto/cast.
Bodo Möller [Tue, 22 Dec 2009 11:46:00 +0000 (11:46 +0000)]
Constify crypto/cast.

9 years agoConstify crypto/cast.
Bodo Möller [Tue, 22 Dec 2009 10:58:33 +0000 (10:58 +0000)]
Constify crypto/cast.

9 years agoAlert to use is now defined in spec: update code
Dr. Stephen Henson [Thu, 17 Dec 2009 15:42:52 +0000 (15:42 +0000)]
Alert to use is now defined in spec: update code

9 years agoPR: 2127
Dr. Stephen Henson [Thu, 17 Dec 2009 15:27:57 +0000 (15:27 +0000)]
PR: 2127
Submitted by: Tomas Mraz <tmraz@redhat.com>

Check for lookup failures in EVP_PBE_CipherInit().

10 years agoNew option to enable/disable connection to unpatched servers
Dr. Stephen Henson [Wed, 16 Dec 2009 20:25:59 +0000 (20:25 +0000)]
New option to enable/disable connection to unpatched servers

10 years agoAllow initial connection (but no renegoriation) to servers which don't support
Dr. Stephen Henson [Mon, 14 Dec 2009 13:56:04 +0000 (13:56 +0000)]
Allow initial connection (but no renegoriation) to servers which don't support
RI.

Reorganise RI checking code and handle some missing cases.

10 years agoMove SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION out of SSL_OP_ALL and move SSL_OP_NO_TL...
Dr. Stephen Henson [Fri, 11 Dec 2009 00:23:12 +0000 (00:23 +0000)]
Move SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION out of SSL_OP_ALL and move SSL_OP_NO_TLSv1_1

10 years agoclarify docs
Dr. Stephen Henson [Wed, 9 Dec 2009 18:16:50 +0000 (18:16 +0000)]
clarify docs

10 years agoDocument option clearning functions.
Dr. Stephen Henson [Wed, 9 Dec 2009 17:59:29 +0000 (17:59 +0000)]
Document option clearning functions.

Initial secure renegotiation documentation.

10 years agoremove DEBUG_UNUSED from config for now
Dr. Stephen Henson [Wed, 9 Dec 2009 15:56:24 +0000 (15:56 +0000)]
remove DEBUG_UNUSED from config for now

10 years agoCheck s3 is not NULL
Dr. Stephen Henson [Wed, 9 Dec 2009 15:03:44 +0000 (15:03 +0000)]
Check s3 is not NULL

10 years agoAdd patch to crypto/evp which didn't apply from PR#2124
Dr. Stephen Henson [Wed, 9 Dec 2009 15:01:39 +0000 (15:01 +0000)]
Add patch to crypto/evp which didn't apply from PR#2124

10 years agoRevert lhash patch for PR#2124
Dr. Stephen Henson [Wed, 9 Dec 2009 14:59:47 +0000 (14:59 +0000)]
Revert lhash patch for PR#2124

10 years agoPR: 2124
Dr. Stephen Henson [Wed, 9 Dec 2009 13:38:05 +0000 (13:38 +0000)]
PR: 2124
Submitted by: Jan Pechanec <Jan.Pechanec@Sun.COM>

Check for memory allocation failures.

10 years agoAdd ctrls to clear options and mode.
Dr. Stephen Henson [Wed, 9 Dec 2009 13:25:16 +0000 (13:25 +0000)]
Add ctrls to clear options and mode.

Change RI ctrl so it doesn't clash.

10 years agoSend no_renegotiation alert as required by spec.
Dr. Stephen Henson [Tue, 8 Dec 2009 19:06:26 +0000 (19:06 +0000)]
Send no_renegotiation alert as required by spec.

10 years agoAdd ctrl and macro so we can determine if peer support secure renegotiation.
Dr. Stephen Henson [Tue, 8 Dec 2009 13:42:08 +0000 (13:42 +0000)]
Add ctrl and macro so we can determine if peer support secure renegotiation.

10 years agoAdd support for magic cipher suite value (MCSV). Make secure renegotiation
Dr. Stephen Henson [Tue, 8 Dec 2009 13:14:03 +0000 (13:14 +0000)]
Add support for magic cipher suite value (MCSV). Make secure renegotiation
work in SSLv3: initial handshake has no extensions but includes MCSV, if
server indicates RI support then renegotiation handshakes include RI.

NB: current MCSV value is bogus for testing only, will be updated when we
have an official value.

Change mismatch alerts to handshake_failure as required by spec.

Also have some debugging fprintfs so we can clearly see what is going on
if OPENSSL_RI_DEBUG is set.

10 years agoPR: 2121
Dr. Stephen Henson [Tue, 8 Dec 2009 11:37:40 +0000 (11:37 +0000)]
PR: 2121
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>

Add extension support to DTLS code mainly using existing implementation for
TLS.

10 years agoInitial experimental TLSv1.1 support
Dr. Stephen Henson [Mon, 7 Dec 2009 13:31:02 +0000 (13:31 +0000)]
Initial experimental TLSv1.1 support

10 years agoPR: 2111
Dr. Stephen Henson [Wed, 2 Dec 2009 15:28:42 +0000 (15:28 +0000)]
PR: 2111
Submitted by: Martin Olsson <molsson@opera.com>

Check for bn_wexpand errors in bn_mul.c

10 years agoUpdate CHANGES.
Dr. Stephen Henson [Wed, 2 Dec 2009 15:28:27 +0000 (15:28 +0000)]
Update CHANGES.

10 years agoReplace the broken SPKAC certification with the correct version.
Dr. Stephen Henson [Wed, 2 Dec 2009 14:41:51 +0000 (14:41 +0000)]
Replace the broken SPKAC certification with the correct version.

10 years agoCheck it actually compiles this time ;-)
Dr. Stephen Henson [Wed, 2 Dec 2009 14:25:40 +0000 (14:25 +0000)]
Check it actually compiles this time ;-)

10 years agoPR: 2120
Dr. Stephen Henson [Wed, 2 Dec 2009 13:56:45 +0000 (13:56 +0000)]
PR: 2120
Submitted by: steve@openssl.org

Initialize fields correctly if pem_str or info are NULL in  EVP_PKEY_asn1_new().

10 years agoOoops...
Dr. Stephen Henson [Tue, 1 Dec 2009 18:40:50 +0000 (18:40 +0000)]
Ooops...

10 years agocheck DSA_sign() return value properly
Dr. Stephen Henson [Tue, 1 Dec 2009 18:39:33 +0000 (18:39 +0000)]
check DSA_sign() return value properly

10 years agoPR: 2115
Dr. Stephen Henson [Tue, 1 Dec 2009 17:42:15 +0000 (17:42 +0000)]
PR: 2115
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org

Add Renegotiation extension to DTLS, fix DTLS ClientHello processing bug.

10 years agoPR: 1432
Dr. Stephen Henson [Tue, 1 Dec 2009 17:32:44 +0000 (17:32 +0000)]
PR: 1432
Submitted by: "Andrzej Chmielowiec" <achmielowiec@enigma.com.pl>, steve@openssl.org
Approved by: steve@openssl.org

Truncate hash if it is too large: as required by FIPS 186-3.

10 years agoPR: 2118
Dr. Stephen Henson [Mon, 30 Nov 2009 13:56:04 +0000 (13:56 +0000)]
PR: 2118
Submitted by: Mounir IDRASSI <mounir.idrassi@idrix.net>
Approved by: steve@openssl.org

Check return value of ECDSA_sign() properly.

10 years agotypo
Dr. Stephen Henson [Sun, 29 Nov 2009 13:45:42 +0000 (13:45 +0000)]
typo

10 years agobss_dgram.c: re-fix BIO_CTRL_DGRAM_GET_PEER.
Andy Polyakov [Thu, 26 Nov 2009 20:52:08 +0000 (20:52 +0000)]
bss_dgram.c: re-fix BIO_CTRL_DGRAM_GET_PEER.
PR: 2110

10 years agoExperimental CMS password based recipient Info support.
Dr. Stephen Henson [Thu, 26 Nov 2009 18:57:39 +0000 (18:57 +0000)]
Experimental CMS password based recipient Info support.

10 years agoMake CHANGES in CVS head consistent with the CHANGES files in the
Bodo Möller [Thu, 26 Nov 2009 18:43:17 +0000 (18:43 +0000)]
Make CHANGES in CVS head consistent with the CHANGES files in the
branches.

This means that http://www.openssl.org/news/changelog.html will
finally describe 0.9.8l.

10 years agoAdd OID for PWRI KEK algorithm.
Dr. Stephen Henson [Wed, 25 Nov 2009 22:07:49 +0000 (22:07 +0000)]
Add OID for PWRI KEK algorithm.

10 years agoAdd PBKFD2 prototype.
Dr. Stephen Henson [Wed, 25 Nov 2009 22:07:22 +0000 (22:07 +0000)]
Add PBKFD2 prototype.

10 years agoSplit PBES2 into cipher and PBKDF2 versions. This tidies the code somewhat
Dr. Stephen Henson [Wed, 25 Nov 2009 22:01:06 +0000 (22:01 +0000)]
Split PBES2 into cipher and PBKDF2 versions. This tidies the code somewhat
and is a pre-requisite to adding password based CMS support.

10 years agocms-test.pl: use EXE_EXT.
Andy Polyakov [Mon, 23 Nov 2009 20:28:17 +0000 (20:28 +0000)]
cms-test.pl: use EXE_EXT.
PR: 2107

10 years agoutil/pl/VC-32.pl: bufferoverflowu.lib only when actually needed and
Andy Polyakov [Thu, 19 Nov 2009 22:29:03 +0000 (22:29 +0000)]
util/pl/VC-32.pl: bufferoverflowu.lib only when actually needed and
eliminate duplicate code.
PR: 2086

10 years agoServers can't end up talking SSLv2 with legacy renegotiation disabled
Dr. Stephen Henson [Wed, 18 Nov 2009 15:09:44 +0000 (15:09 +0000)]
Servers can't end up talking SSLv2 with legacy renegotiation disabled

10 years agoDon't use SSLv2 compatible client hello if we don't tolerate legacy renegotiation
Dr. Stephen Henson [Wed, 18 Nov 2009 14:45:48 +0000 (14:45 +0000)]
Don't use SSLv2 compatible client hello if we don't tolerate legacy renegotiation

10 years agoInclude a more meaningful error message when rejecting legacy renegotiation
Dr. Stephen Henson [Wed, 18 Nov 2009 14:20:21 +0000 (14:20 +0000)]
Include a more meaningful error message when rejecting legacy renegotiation

10 years agoPR: 2103
Dr. Stephen Henson [Tue, 17 Nov 2009 13:25:53 +0000 (13:25 +0000)]
PR: 2103
Submitted by: Rob Austein <sra@hactrn.net>
Approved by: steve@openssl.org

Initialise atm.flags to 0.

10 years agoPR: 2101 (additional)
Dr. Stephen Henson [Sun, 15 Nov 2009 19:05:13 +0000 (19:05 +0000)]
PR: 2101 (additional)
Submitted by: Roumen Petrov <openssl@roumenpetrov.info>
Approved by: steve@openssl.org

Another mingw fix.

10 years agoOPENSSL_ia32cap.pod update.
Andy Polyakov [Sun, 15 Nov 2009 17:34:24 +0000 (17:34 +0000)]
OPENSSL_ia32cap.pod update.

10 years agoAdd sha512-parisc.pl.
Andy Polyakov [Sun, 15 Nov 2009 17:29:31 +0000 (17:29 +0000)]
Add sha512-parisc.pl.

10 years agoSHA1 assembler show off: minor performance updates and new modules for
Andy Polyakov [Sun, 15 Nov 2009 17:26:11 +0000 (17:26 +0000)]
SHA1 assembler show off: minor performance updates and new modules for
forgotten CPUs.

10 years agosha512.c: there apparently is ILP32 PowerPC platform, where it is safe to
Andy Polyakov [Sun, 15 Nov 2009 17:19:49 +0000 (17:19 +0000)]
sha512.c: there apparently is ILP32 PowerPC platform, where it is safe to
inline 64-bit assembler instructions. Normally it's inappropriate, because
signalling doesn't preserve upper halves of general purpose registers.
Meaning that it's only safe if signals are blocked for the time "wide"
code executes.
PR: 1998

10 years agox86_64-xlate.pl: new gas requires sign extention in lea instruction.
Andy Polyakov [Sun, 15 Nov 2009 17:11:38 +0000 (17:11 +0000)]
x86_64-xlate.pl: new gas requires sign extention in lea instruction.
This resolves md5-x86_64.pl and sha1-x86_64.pl bugs, but without modifying
the code.
PR: 2094,2095

10 years agox86masm.pl: eliminate linker "multiple sections found with different
Andy Polyakov [Sun, 15 Nov 2009 17:06:44 +0000 (17:06 +0000)]
x86masm.pl: eliminate linker "multiple sections found with different
attributes" warning.

10 years agobss_dgram.c: more elegant solution to PR#2069. Use socklen_t heuristic
Andy Polyakov [Sun, 15 Nov 2009 17:03:33 +0000 (17:03 +0000)]
bss_dgram.c: more elegant solution to PR#2069. Use socklen_t heuristic
from b_sock.c, don't assume that caller always passes pointer to buffer
large enough to hold sockaddr_storage.
PR: 2069

10 years agob_sock.c: fix compiler warning.
Andy Polyakov [Sun, 15 Nov 2009 16:52:11 +0000 (16:52 +0000)]
b_sock.c: fix compiler warning.

10 years agoaesni-x86.pl: eliminate development comments.
Andy Polyakov [Sun, 15 Nov 2009 16:40:22 +0000 (16:40 +0000)]
aesni-x86.pl: eliminate development comments.

10 years agoPR: 2101
Dr. Stephen Henson [Fri, 13 Nov 2009 13:44:25 +0000 (13:44 +0000)]
PR: 2101
Submitted by: Doug Kaufman <dkaufman@rahul.net>
Approved by: steve@openssl.org

Fixes for tests in cms-test.pl

10 years agoPR: 2088
Dr. Stephen Henson [Thu, 12 Nov 2009 19:56:56 +0000 (19:56 +0000)]
PR: 2088
Submitted by: Aleksey Samsonov <s4ms0n0v@gmail.com>
Approved by: steve@openssl.org

Fix memory leak in d2i_PublicKey().

10 years agoset engine to NULL after releasing it
Dr. Stephen Henson [Thu, 12 Nov 2009 19:25:37 +0000 (19:25 +0000)]
set engine to NULL after releasing it

10 years agoUpdate from 1.0.0-stable
Richard Levitte [Thu, 12 Nov 2009 17:03:10 +0000 (17:03 +0000)]
Update from 1.0.0-stable

10 years agoPR: 2098
Dr. Stephen Henson [Wed, 11 Nov 2009 19:05:20 +0000 (19:05 +0000)]
PR: 2098
Submitted by: Corinna Vinschen <vinschen@redhat.com>
Approved by: steve@openssl.org

For Cygwin enable zlib and mdc2 by default.

10 years agoadd missing parts of reneg port, fix apps patch
Dr. Stephen Henson [Wed, 11 Nov 2009 14:51:19 +0000 (14:51 +0000)]
add missing parts of reneg port, fix apps patch

10 years agocommit missing apps code for reneg fix
Dr. Stephen Henson [Wed, 11 Nov 2009 14:10:24 +0000 (14:10 +0000)]
commit missing apps code for reneg fix

10 years agoPR: 1686
Dr. Stephen Henson [Tue, 10 Nov 2009 01:52:41 +0000 (01:52 +0000)]
PR: 1686
Submitted by: Hanno BÃ\83¶ck <hanno@hboeck.de>
Approved by: steve@openssl.org

Create engines dir if it doesn't already exist.

10 years agoPR: 2091
Dr. Stephen Henson [Tue, 10 Nov 2009 01:00:07 +0000 (01:00 +0000)]
PR: 2091
Submitted by: Martin Kaiser <lists@kaiser.cx>, Stephen Henson
Approved by: steve@openssl.org

If an OID has no short name or long name return the numerical representation.

10 years agoPR: 2090
Dr. Stephen Henson [Tue, 10 Nov 2009 00:48:07 +0000 (00:48 +0000)]
PR: 2090
Submitted by: Martin Kaiser <lists@kaiser.cx>, Stephen Henson
Approved by: steve@openssl.org

Improve error checking in asn1_gen.c

10 years agoFirst cut of renegotiation extension. (port to HEAD)
Dr. Stephen Henson [Mon, 9 Nov 2009 19:03:34 +0000 (19:03 +0000)]
First cut of renegotiation extension. (port to HEAD)

10 years agoupdate CHANGES
Dr. Stephen Henson [Mon, 9 Nov 2009 17:33:32 +0000 (17:33 +0000)]
update CHANGES

10 years agomake udpate
Dr. Stephen Henson [Mon, 9 Nov 2009 14:56:33 +0000 (14:56 +0000)]
make udpate

10 years agoRemove BF_PTR2 from configuration: it doesn't improve performance any more and causes...
Dr. Stephen Henson [Mon, 9 Nov 2009 14:13:23 +0000 (14:13 +0000)]
Remove BF_PTR2 from configuration: it doesn't improve performance any more and causes gcc warnings about arrays out of range

10 years agoIf it is a new session don't send the old TLS ticket: send a zero length
Dr. Stephen Henson [Sun, 8 Nov 2009 14:36:12 +0000 (14:36 +0000)]
If it is a new session don't send the old TLS ticket: send a zero length
ticket to request a new session.

10 years agoOoops, revert committed conflict.
Dr. Stephen Henson [Sat, 7 Nov 2009 22:22:40 +0000 (22:22 +0000)]
Ooops, revert committed conflict.

10 years agoPR: 2089
Dr. Stephen Henson [Mon, 2 Nov 2009 13:38:22 +0000 (13:38 +0000)]
PR: 2089
Submitted by: Robin Seggelmann <seggelmann@fh-muenster.de>
Approved by: steve@openssl.org

DTLS Fragment size bug fix.

10 years agoAdd missing functions to allow access to newer X509_STORE_CTX status
Dr. Stephen Henson [Sat, 31 Oct 2009 19:22:18 +0000 (19:22 +0000)]
Add missing functions to allow access to newer X509_STORE_CTX status
information. Add more informative message to verify callback to indicate
when CRL path validation is taking place.

10 years agoAdd option to allow in-band CRL loading in verify utility. Add function
Dr. Stephen Henson [Sat, 31 Oct 2009 13:33:57 +0000 (13:33 +0000)]
Add option to allow in-band CRL loading in verify utility. Add function
load_crls and tidy up load_certs. Remove useless purpose variable from
verify utility: now done with args_verify.

10 years agoGenerate stateless session ID just after the ticket is received instead
Dr. Stephen Henson [Fri, 30 Oct 2009 14:06:03 +0000 (14:06 +0000)]
Generate stateless session ID just after the ticket is received instead
of when a session is loaded. This will mean that applications that
just hold onto SSL_SESSION structures and never call d2i_SSL_SESSION()
will still work.

10 years agoMove CHANGES entry to 0.9.8l section
Dr. Stephen Henson [Fri, 30 Oct 2009 13:29:30 +0000 (13:29 +0000)]
Move CHANGES entry to 0.9.8l section

10 years agoFix statless session resumption so it can coexist with SNI
Dr. Stephen Henson [Fri, 30 Oct 2009 13:22:24 +0000 (13:22 +0000)]
Fix statless session resumption so it can coexist with SNI

10 years agoDon't attempt session resumption if no ticket is present and session
Dr. Stephen Henson [Wed, 28 Oct 2009 19:52:18 +0000 (19:52 +0000)]
Don't attempt session resumption if no ticket is present and session
ID length is zero.

10 years agooops!
Dr. Stephen Henson [Wed, 28 Oct 2009 19:50:59 +0000 (19:50 +0000)]
oops!

10 years agoPR: 2085
Dr. Stephen Henson [Wed, 28 Oct 2009 19:48:09 +0000 (19:48 +0000)]
PR: 2085
Submitted by: Mike Frysinger <vapier@gentoo.org>
Approved by: steve@openssl.org

Change domd test to match 1.0.0+ version: check $MAKEDEPEND
ends in "gcc" to support cross compilers.

10 years agoAdd -no_cache option to s_server
Dr. Stephen Henson [Wed, 28 Oct 2009 17:49:30 +0000 (17:49 +0000)]
Add -no_cache option to s_server

10 years agoDon't replace whole AR line
Dr. Stephen Henson [Wed, 28 Oct 2009 15:33:32 +0000 (15:33 +0000)]
Don't replace whole AR line

10 years agoPR: 2081
Dr. Stephen Henson [Wed, 28 Oct 2009 14:00:29 +0000 (14:00 +0000)]
PR: 2081
Submitted by: Mike Frysinger <vapier@gentoo.org>
Approved by: steve@openssl.org

Respect AR and RANLIB environment variables if set.

10 years agoPR: 2080
Dr. Stephen Henson [Wed, 28 Oct 2009 13:55:44 +0000 (13:55 +0000)]
PR: 2080
Submitted by: Mike Frysinger <vapier@gentoo.org>
Approved by: steve@openssl.org

Respect MAKE environment variable if set.

10 years agoPR: 2078
Dr. Stephen Henson [Wed, 28 Oct 2009 13:52:07 +0000 (13:52 +0000)]
PR: 2078
Submitted by: Dale Anderson <dra@redevised.net>
Approved by: steve@openssl.org

Corrections to bn_internal documentation.

10 years agoClarification
Dr. Stephen Henson [Fri, 23 Oct 2009 12:36:41 +0000 (12:36 +0000)]
Clarification

10 years agoAdd an FAQ.
Dr. Stephen Henson [Fri, 23 Oct 2009 12:22:54 +0000 (12:22 +0000)]
Add an FAQ.

10 years agoIf not checking all certificates don't attempt to find a CRL
Dr. Stephen Henson [Fri, 23 Oct 2009 12:06:35 +0000 (12:06 +0000)]
If not checking all certificates don't attempt to find a CRL
for the leaf certificate of a CRL path.

10 years agoNeed to check <= 0 here.
Dr. Stephen Henson [Thu, 22 Oct 2009 23:12:05 +0000 (23:12 +0000)]
Need to check <= 0 here.

10 years agoPR: 2070
Dr. Stephen Henson [Mon, 19 Oct 2009 13:16:01 +0000 (13:16 +0000)]
PR: 2070
Submitted by: Alexander Nikitovskiy <Nikitovski@ya.ru>
Approved by: steve@openssl.org

Fix wrong cast.

10 years agomake update
Dr. Stephen Henson [Sun, 18 Oct 2009 14:53:00 +0000 (14:53 +0000)]
make update

10 years agoUse new X509_STORE_set_verify_cb function instead of old macro.
Dr. Stephen Henson [Sun, 18 Oct 2009 14:40:33 +0000 (14:40 +0000)]
Use new X509_STORE_set_verify_cb function instead of old macro.

10 years agotake install prefix from the environment
Dr. Stephen Henson [Sun, 18 Oct 2009 14:27:01 +0000 (14:27 +0000)]
take install prefix from the environment

10 years agoDocument more error codes.
Dr. Stephen Henson [Sun, 18 Oct 2009 14:01:17 +0000 (14:01 +0000)]
Document more error codes.

10 years agoVerification callback functions.
Dr. Stephen Henson [Sun, 18 Oct 2009 13:26:08 +0000 (13:26 +0000)]
Verification callback functions.

10 years agoAdd "missing" function X509_STORE_set_verify_cb().
Dr. Stephen Henson [Sun, 18 Oct 2009 13:24:16 +0000 (13:24 +0000)]
Add "missing" function X509_STORE_set_verify_cb().

10 years agoClarification.
Dr. Stephen Henson [Sat, 17 Oct 2009 23:08:32 +0000 (23:08 +0000)]
Clarification.

10 years agoPreliminary documentation for X509_VERIFY_PARAM.
Dr. Stephen Henson [Sat, 17 Oct 2009 23:00:18 +0000 (23:00 +0000)]
Preliminary documentation for X509_VERIFY_PARAM.

10 years agoAdd docs for X509_STORE_CTX_new() and related functions.
Dr. Stephen Henson [Sat, 17 Oct 2009 18:05:53 +0000 (18:05 +0000)]
Add docs for X509_STORE_CTX_new() and related functions.

10 years agoMore X509 verification docs.
Dr. Stephen Henson [Sat, 17 Oct 2009 17:07:17 +0000 (17:07 +0000)]
More X509 verification docs.

10 years agoTypo.
Dr. Stephen Henson [Sat, 17 Oct 2009 17:06:19 +0000 (17:06 +0000)]
Typo.