Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
David Benjamin 4a7815c940 Fix build with -Wctad-maybe-unsupported 4 months ago
..
testdata
README.md
cert_error_id.cc
cert_error_id.h
cert_error_params.cc
cert_error_params.h
cert_errors.cc
cert_errors.h
cert_issuer_source.h
cert_issuer_source_static.cc
cert_issuer_source_static.h
cert_issuer_source_static_unittest.cc
cert_issuer_source_sync_unittest.h
certificate.cc
certificate_policies.cc
certificate_policies.h Stop passing der::Input by const-ref 8 months ago
certificate_policies_unittest.cc
certificate_unittest.cc
common_cert_errors.cc
common_cert_errors.h
crl.cc
crl.h
crl_unittest.cc
encode_values.cc Rename <openssl/time.h> to <openssl/posix_time.h> 8 months ago
encode_values.h
encode_values_unittest.cc
extended_key_usage.cc
extended_key_usage.h Stop passing der::Input by const-ref 8 months ago
extended_key_usage_unittest.cc
general_names.cc
general_names.h
general_names_unittest.cc
input.cc
input.h
input_unittest.cc
ip_util.cc
ip_util.h
ip_util_unittest.cc
mock_signature_verify_cache.cc
mock_signature_verify_cache.h
name_constraints.cc
name_constraints.h
name_constraints_unittest.cc
nist_pkits_unittest.cc
nist_pkits_unittest.h
ocsp.cc
ocsp.h
ocsp_revocation_status.h
ocsp_unittest.cc
ocsp_verify_result.cc
ocsp_verify_result.h
parse_certificate.cc
parse_certificate.h
parse_certificate_unittest.cc
parse_name.cc
parse_name.h
parse_name_unittest.cc
parse_values.cc
parse_values.h
parse_values_unittest.cc
parsed_certificate.cc
parsed_certificate.h
parsed_certificate_unittest.cc
parser.cc
parser.h
parser_unittest.cc
path_builder.cc
path_builder.h
path_builder_pkits_unittest.cc
path_builder_unittest.cc
path_builder_verify_certificate_chain_unittest.cc
pem.cc
pem.h
pem_unittest.cc
revocation_util.cc
revocation_util.h
signature_algorithm.cc
signature_algorithm.h
signature_algorithm_unittest.cc
simple_path_builder_delegate.cc
simple_path_builder_delegate.h
simple_path_builder_delegate_unittest.cc
string_util.cc
string_util.h
string_util_unittest.cc
test_helpers.cc
test_helpers.h
trust_store.cc Clang-format all of pki. 10 months ago
trust_store.h
trust_store_collection.cc
trust_store_collection.h
trust_store_collection_unittest.cc
trust_store_in_memory.cc
trust_store_in_memory.h
trust_store_in_memory_unittest.cc
verify.cc
verify_certificate_chain.cc
verify_certificate_chain.h
verify_certificate_chain_pkits_unittest.cc
verify_certificate_chain_typed_unittest.h
verify_certificate_chain_unittest.cc
verify_error.cc
verify_name_match.cc
verify_name_match.h
verify_name_match_unittest.cc
verify_signed_data.cc
verify_signed_data.h
verify_signed_data_unittest.cc
verify_unittest.cc

README.md

BoringSSL pki - Web PKI Certificate path building and verification library

This directory and library should be considered experimental and should not be depended upon not to change without notice. You should not use this.

It contains chrome's certificate verifier core logic as used by chrome.

Current status:

  • Currently chrome uses this code via private API from within this directory.
  • At the moment there is no public API for these functions, as mentioned above if you make use of this you do so at your own risk and your code may be broken by API change at any time.
  • Public API will be forthcoming.