aboutsummaryrefslogtreecommitdiff
path: root/src/crypto/x509/verify.go
AgeCommit message (Expand)Author
2020-08-17[dev.boringcrypto.go1.15] all: merge go1.15 into dev.boringcrypto.go1.15Filippo Valsorda
2020-07-14crypto/x509: respect VerifyOptions.KeyUsages on WindowsFilippo Valsorda
2020-07-09[dev.boringcrypto] all: merge master into dev.boringcryptoDmitri Shuralyov
2020-06-02crypto/x509: document support for leading periods in DNS constraintsRoland Shoemaker
2020-05-07[dev.boringcrypto] all: merge master into dev.boringcryptoDmitri Shuralyov
2020-05-08crypto/x509: treat hostnames with colons as invalidFilippo Valsorda
2020-05-08crypto/x509: treat certificate names with trailing dots as invalidFilippo Valsorda
2020-05-08crypto/x509: ignore Common Name by defaultFilippo Valsorda
2020-05-08crypto/x509: require perfect matches for invalid hostnamesFilippo Valsorda
2020-05-06crypto/x509: improve VerifyOptions and VerifyHostname docsFilippo Valsorda
2019-11-19[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2019-10-23crypto/x509: gofmt verify.goGhazni Nattarshah
2019-10-02crypto/x509: add Detail to Expired errorsW. Trevor King
2019-05-28[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2019-05-06all: simplify code using "gofmt -s -w"Shulhan
2019-02-08[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2018-12-14crypto/x509: limit number of signature checks for each verificationFilippo Valsorda
2018-12-02all: use "reports whether" consistently instead of "returns whether"Tobias Klauser
2018-10-25[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2018-10-17crypto/tls,crypto/x509: normalize RFC referencesFilippo Valsorda
2018-10-15[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2018-09-07crypto/x509: allow ":" in Common Name hostnamesFilippo Valsorda
2018-09-06[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2018-08-23all: fix typos detected by github.com/client9/misspellKazuhiro Sera
2018-07-16crypto/x509: add GODEBUG option x509ignoreCN=1Filippo Valsorda
2018-07-16crypto/x509: ignore Common Name when it does not parse as a hostnameFilippo Valsorda
2018-05-25[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2018-05-21crypto/x509: check EKUs like 1.9.Adam Langley
2018-05-17[dev.boringcrypto] all: merge master into dev.boringcryptoFilippo Valsorda
2018-03-26crypto/x509: matching any requested EKU should be sufficient.Adam Langley
2018-02-28crypto/x509: parse invalid DNS names and email addresses.Adam Langley
2018-02-23crypto/x509: tighten EKU checking for requested EKUs.Adam Langley
2018-02-20all: fix misspellingsShawn Smith
2018-01-18crypto/x509: better document Verify's behaviour.Adam Langley
2017-12-06[dev.boringcrypto] all: merge master (nearly Go 1.10 beta 1) into dev.boringc...Russ Cox
2017-11-20[dev.boringcrypto] all: merge go1.9.2 into dev.boringcryptoRuss Cox
2017-11-17crypto/x509: relax EKU checking in some cases.Adam Langley
2017-11-07crypto/x509: enforce EKU nesting at chain-construction time.Adam Langley
2017-11-07crypto/x509: enforce all name constraints and support IP, email and URI const...Adam Langley
2017-10-25[release-branch.go1.9] crypto/x509: reject intermediates with unknown critica...Adam Langley
2017-10-10crypto/x509: reject intermediates with unknown critical extensions.Adam Langley
2017-09-22[dev.boringcrypto] crypto/tls/fipsonly: new package to force FIPS-allowed TLS...Russ Cox
2017-06-13crypto/x509: support excluded domains in name constraints.Adam Langley
2017-02-10crypto/x509: ignore CN if SAN extension present.Adam Langley
2016-12-08all: make spelling consistentBrad Fitzpatrick
2016-11-03crypto/x509: expose UnknownAuthorityError.CertRuss Cox
2016-10-27crypto/x509: don't accept a root that already appears in a chain.Adam Langley
2016-10-09crypto/x509: check that the issuer name matches the issuer's subject name.Emmanuel Odeke
2016-10-02crypto/x509: return better error when a certificate contains no names.Adam Langley
2016-10-02crypto/x509: fix name constraints handling.Adam Langley