Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
 
Bob Beck 35a910949d Add verify.cc and verify.h as top level public API. 6 months ago
..
testdata Add verify.cc and verify.h as top level public API. 6 months ago
README.md Update README.md 12 months ago
cert_error_id.cc Clang-format all of pki. 12 months ago
cert_error_id.h Remove fillins/openssl_util 12 months ago
cert_error_params.cc Add functions to convert from Span<const uint8> and std::string_view 9 months ago
cert_error_params.h Stop passing der::Input by const-ref 10 months ago
cert_errors.cc Add verify_errors as public error API 8 months ago
cert_errors.h Add verify_errors as public error API 8 months ago
cert_issuer_source.h Remove fillins/openssl_util 12 months ago
cert_issuer_source_static.cc Add functions to convert from Span<const uint8> and std::string_view 9 months ago
cert_issuer_source_static.h Remove fillins/openssl_util 12 months ago
cert_issuer_source_static_unittest.cc Clang-format all of pki. 12 months ago
cert_issuer_source_sync_unittest.h Use InsertBraces - and reformat pki as such 12 months ago
certificate.cc Add public API for a certificate. 9 months ago
certificate_policies.cc Remove pki/tag.h 9 months ago
certificate_policies.h Stop passing der::Input by const-ref 10 months ago
certificate_policies_unittest.cc Clang-format all of pki. 12 months ago
certificate_unittest.cc Add public API for a certificate. 9 months ago
common_cert_errors.cc Remove remnants of Netscape Server Gated Crypto from the new verifier 11 months ago
common_cert_errors.h Remove remnants of Netscape Server Gated Crypto from the new verifier 11 months ago
crl.cc Remove pki/tag.h 9 months ago
crl.h Stop passing der::Input by const-ref 10 months ago
crl_unittest.cc Clang-format all of pki. 12 months ago
encode_values.cc Rename <openssl/time.h> to <openssl/posix_time.h> 10 months ago
encode_values.h Remove fillins/openssl_util 12 months ago
encode_values_unittest.cc Clang-format all of pki. 12 months ago
extended_key_usage.cc Remove pki/tag.h 9 months ago
extended_key_usage.h Stop passing der::Input by const-ref 10 months ago
extended_key_usage_unittest.cc Stop passing der::Input by const-ref 10 months ago
general_names.cc Remove pki/tag.h 9 months ago
general_names.h Stop passing der::Input by const-ref 10 months ago
general_names_unittest.cc Clang-format all of pki. 12 months ago
input.cc Add functions to convert from Span<const uint8> and std::string_view 9 months ago
input.h Add functions to convert from Span<const uint8> and std::string_view 9 months ago
input_unittest.cc Make der::Input a little closer to Span 10 months ago
ip_util.cc Make der::Input a little closer to Span 10 months ago
ip_util.h Remove fillins/openssl_util 12 months ago
ip_util_unittest.cc Clang-format all of pki. 12 months ago
mock_signature_verify_cache.cc Clang-format all of pki. 12 months ago
mock_signature_verify_cache.h Move signature_verify_cache.h to openssl/pki as public api 9 months ago
name_constraints.cc Remove pki/tag.h 9 months ago
name_constraints.h Create a new NameConstraints constructor that takes in an already constructed GeneralNames object for permitted names. 10 months ago
name_constraints_unittest.cc Stop passing der::Input by const-ref 10 months ago
nist_pkits_unittest.cc Clang-format all of pki. 12 months ago
nist_pkits_unittest.h Clang-format all of pki. 12 months ago
ocsp.cc Remove pki/tag.h 9 months ago
ocsp.h Stop passing der::Input by const-ref 10 months ago
ocsp_revocation_status.h Clang-format all of pki. 12 months ago
ocsp_unittest.cc Clang-format all of pki. 12 months ago
ocsp_verify_result.cc Use InsertBraces - and reformat pki as such 12 months ago
ocsp_verify_result.h Remove fillins/openssl_util 12 months ago
parse_certificate.cc Remove pki/tag.h 9 months ago
parse_certificate.h Allow the delegate to indicate it wishes to accept PreCertificates 9 months ago
parse_certificate_unittest.cc Use InsertBraces - and reformat pki as such 12 months ago
parse_name.cc Remove pki/tag.h 9 months ago
parse_name.h Remove pki/tag.h 9 months ago
parse_name_unittest.cc Remove pki/tag.h 9 months ago
parse_values.cc Add functions to convert from Span<const uint8> and std::string_view 9 months ago
parse_values.h Stop passing der::Input by const-ref 10 months ago
parse_values_unittest.cc Make der::Input a little closer to Span 10 months ago
parsed_certificate.cc Remove pki/tag.h 9 months ago
parsed_certificate.h Stop passing der::Input by const-ref 10 months ago
parsed_certificate_unittest.cc clarify a few tests 7 months ago
parser.cc Remove pki/tag.h 9 months ago
parser.h Remove pki/tag.h 9 months ago
parser_unittest.cc Remove pki/tag.h 9 months ago
path_builder.cc Add verify_errors as public error API 8 months ago
path_builder.h Add verify_errors as public error API 8 months ago
path_builder_pkits_unittest.cc Stop passing der::Input by const-ref 10 months ago
path_builder_unittest.cc Add verify_errors as public error API 8 months ago
path_builder_verify_certificate_chain_unittest.cc Use InsertBraces - and reformat pki as such 12 months ago
pem.cc Remove fillins/fillins_base64 12 months ago
pem.h Remove fillins/openssl_util 12 months ago
pem_unittest.cc Clang-format all of pki. 12 months ago
revocation_util.cc Clang-format all of pki. 12 months ago
revocation_util.h Remove fillins/openssl_util 12 months ago
signature_algorithm.cc Remove pki/tag.h 9 months ago
signature_algorithm.h Fix spelling of Identifier 8 months ago
signature_algorithm_unittest.cc Remove fillins/file_util 12 months ago
simple_path_builder_delegate.cc Don't add extra 'informational' errors in the delegate 7 months ago
simple_path_builder_delegate.h Move signature_verify_cache.h to openssl/pki as public api 9 months ago
simple_path_builder_delegate_unittest.cc Clang-format all of pki. 12 months ago
string_util.cc Make der::Input a little closer to Span 10 months ago
string_util.h Make der::Input a little closer to Span 10 months ago
string_util_unittest.cc Make der::Input a little closer to Span 10 months ago
test_helpers.cc Add a CLIENT_AUTH_STRICT_LEAF and SERVER_AUTH_STRICT_LEAF which 7 months ago
test_helpers.h Stop passing der::Input by const-ref 10 months ago
trust_store.cc Clang-format all of pki. 12 months ago
trust_store.h Remove fillins/openssl_util 12 months ago
trust_store_collection.cc Use InsertBraces - and reformat pki as such 12 months ago
trust_store_collection.h Remove fillins/openssl_util 12 months ago
trust_store_collection_unittest.cc Clang-format all of pki. 12 months ago
trust_store_in_memory.cc Add functions to convert from Span<const uint8> and std::string_view 9 months ago
trust_store_in_memory.h Add functions to convert from Span<const uint8> and std::string_view 9 months ago
trust_store_in_memory_unittest.cc Add functions to convert from Span<const uint8> and std::string_view 9 months ago
verify.cc Add verify.cc and verify.h as top level public API. 6 months ago
verify_certificate_chain.cc short-circuit verification on invalid SPKI 7 months ago
verify_certificate_chain.h Don't add extra 'informational' errors in the delegate 7 months ago
verify_certificate_chain_pkits_unittest.cc Clang-format all of pki. 12 months ago
verify_certificate_chain_typed_unittest.h short-circuit verification on invalid SPKI 7 months ago
verify_certificate_chain_unittest.cc Clang-format all of pki. 12 months ago
verify_error.cc Add verify_errors as public error API 8 months ago
verify_name_match.cc Remove pki/tag.h 9 months ago
verify_name_match.h Stop passing der::Input by const-ref 10 months ago
verify_name_match_unittest.cc Use InsertBraces - and reformat pki as such 12 months ago
verify_signed_data.cc Move signature_verify_cache.h to openssl/pki as public api 9 months ago
verify_signed_data.h Move signature_verify_cache.h to openssl/pki as public api 9 months ago
verify_signed_data_unittest.cc Clang-format all of pki. 12 months ago
verify_unittest.cc Add verify.cc and verify.h as top level public API. 6 months ago

README.md

BoringSSL pki - Web PKI Certificate path building and verification library

This directory and library should be considered experimental and should not be depended upon not to change without notice. You should not use this.

It contains chrome's certificate verifier core logic as used by chrome.

Current status:

  • Currently chrome uses this code via private API from within this directory.
  • At the moment there is no public API for these functions, as mentioned above if you make use of this you do so at your own risk and your code may be broken by API change at any time.
  • Public API will be forthcoming.