Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl

History

David Benjamin 2a5db68706 Remove pki/tag.h This is a very thin wrapper over CBS_ASN1_* constants, dating from when the library wanted to avoid as strongly depending on BoringSSL. That's long stopped being the case, so we may as well just use the underlying constants. A tad less C++-y, but I don't think the wrapper is buying us much. Update-Note: pki/tag.h no longer exists. Use CBS_ASN1_TAG instead of bssl::der::Tag and CBS_ASN1_* instead of bssl::der::k*. Change-Id: I09f3f65b406d1a8fe60bfbe1a56d3e485ae84d97 Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/66067 Commit-Queue: David Benjamin <davidben@google.com> Auto-Submit: David Benjamin <davidben@google.com> Reviewed-by: Bob Beck <bbe@google.com>		9 months ago
..
testdata	Add public API for a certificate.	9 months ago
README.md	Update README.md	12 months ago
cert_error_id.cc	Clang-format all of pki.	12 months ago
cert_error_id.h	Remove fillins/openssl_util	12 months ago
cert_error_params.cc	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
cert_error_params.h	Stop passing der::Input by const-ref	10 months ago
cert_errors.cc	Make ContainsError look only for Errors, not Warnings.	9 months ago
cert_errors.h	Make ContainsError look only for Errors, not Warnings.	9 months ago
cert_issuer_source.h	Remove fillins/openssl_util	12 months ago
cert_issuer_source_static.cc	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
cert_issuer_source_static.h	Remove fillins/openssl_util	12 months ago
cert_issuer_source_static_unittest.cc	Clang-format all of pki.	12 months ago
cert_issuer_source_sync_unittest.h	Use InsertBraces - and reformat pki as such	12 months ago
certificate.cc	Add public API for a certificate.	9 months ago
certificate_policies.cc	Remove pki/tag.h	9 months ago
certificate_policies.h	Stop passing der::Input by const-ref	10 months ago
certificate_policies_unittest.cc	Clang-format all of pki.	12 months ago
certificate_unittest.cc	Add public API for a certificate.	9 months ago
common_cert_errors.cc	Remove remnants of Netscape Server Gated Crypto from the new verifier	11 months ago
common_cert_errors.h	Remove remnants of Netscape Server Gated Crypto from the new verifier	11 months ago
crl.cc	Remove pki/tag.h	9 months ago
crl.h	Stop passing der::Input by const-ref	10 months ago
crl_unittest.cc	Clang-format all of pki.	12 months ago
encode_values.cc	Rename <openssl/time.h> to <openssl/posix_time.h>	10 months ago
encode_values.h	Remove fillins/openssl_util	12 months ago
encode_values_unittest.cc	Clang-format all of pki.	12 months ago
extended_key_usage.cc	Remove pki/tag.h	9 months ago
extended_key_usage.h	Stop passing der::Input by const-ref	10 months ago
extended_key_usage_unittest.cc	Stop passing der::Input by const-ref	10 months ago
general_names.cc	Remove pki/tag.h	9 months ago
general_names.h	Stop passing der::Input by const-ref	10 months ago
general_names_unittest.cc	Clang-format all of pki.	12 months ago
input.cc	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
input.h	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
input_unittest.cc	Make der::Input a little closer to Span	10 months ago
ip_util.cc	Make der::Input a little closer to Span	10 months ago
ip_util.h	Remove fillins/openssl_util	12 months ago
ip_util_unittest.cc	Clang-format all of pki.	12 months ago
mock_signature_verify_cache.cc	Clang-format all of pki.	12 months ago
mock_signature_verify_cache.h	Move signature_verify_cache.h to openssl/pki as public api	9 months ago
name_constraints.cc	Remove pki/tag.h	9 months ago
name_constraints.h	Create a new NameConstraints constructor that takes in an already constructed GeneralNames object for permitted names.	10 months ago
name_constraints_unittest.cc	Stop passing der::Input by const-ref	10 months ago
nist_pkits_unittest.cc	Clang-format all of pki.	12 months ago
nist_pkits_unittest.h	Clang-format all of pki.	12 months ago
ocsp.cc	Remove pki/tag.h	9 months ago
ocsp.h	Stop passing der::Input by const-ref	10 months ago
ocsp_revocation_status.h	Clang-format all of pki.	12 months ago
ocsp_unittest.cc	Clang-format all of pki.	12 months ago
ocsp_verify_result.cc	Use InsertBraces - and reformat pki as such	12 months ago
ocsp_verify_result.h	Remove fillins/openssl_util	12 months ago
parse_certificate.cc	Remove pki/tag.h	9 months ago
parse_certificate.h	Allow the delegate to indicate it wishes to accept PreCertificates	9 months ago
parse_certificate_unittest.cc	Use InsertBraces - and reformat pki as such	12 months ago
parse_name.cc	Remove pki/tag.h	9 months ago
parse_name.h	Remove pki/tag.h	9 months ago
parse_name_unittest.cc	Remove pki/tag.h	9 months ago
parse_values.cc	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
parse_values.h	Stop passing der::Input by const-ref	10 months ago
parse_values_unittest.cc	Make der::Input a little closer to Span	10 months ago
parsed_certificate.cc	Remove pki/tag.h	9 months ago
parsed_certificate.h	Stop passing der::Input by const-ref	10 months ago
parsed_certificate_unittest.cc	Make der::Input a little closer to Span	10 months ago
parser.cc	Remove pki/tag.h	9 months ago
parser.h	Remove pki/tag.h	9 months ago
parser_unittest.cc	Remove pki/tag.h	9 months ago
path_builder.cc	Remove pki/tag.h	9 months ago
path_builder.h	Allow for the path builder to limit the number of valid paths.	11 months ago
path_builder_pkits_unittest.cc	Stop passing der::Input by const-ref	10 months ago
path_builder_unittest.cc	Make ContainsError look only for Errors, not Warnings.	9 months ago
path_builder_verify_certificate_chain_unittest.cc	Use InsertBraces - and reformat pki as such	12 months ago
pem.cc	Remove fillins/fillins_base64	12 months ago
pem.h	Remove fillins/openssl_util	12 months ago
pem_unittest.cc	Clang-format all of pki.	12 months ago
revocation_util.cc	Clang-format all of pki.	12 months ago
revocation_util.h	Remove fillins/openssl_util	12 months ago
signature_algorithm.cc	Remove pki/tag.h	9 months ago
signature_algorithm.h	Stop passing der::Input by const-ref	10 months ago
signature_algorithm_unittest.cc	Remove fillins/file_util	12 months ago
simple_path_builder_delegate.cc	Move signature_verify_cache.h to openssl/pki as public api	9 months ago
simple_path_builder_delegate.h	Move signature_verify_cache.h to openssl/pki as public api	9 months ago
simple_path_builder_delegate_unittest.cc	Clang-format all of pki.	12 months ago
string_util.cc	Make der::Input a little closer to Span	10 months ago
string_util.h	Make der::Input a little closer to Span	10 months ago
string_util_unittest.cc	Make der::Input a little closer to Span	10 months ago
test_helpers.cc	Remove pki/tag.h	9 months ago
test_helpers.h	Stop passing der::Input by const-ref	10 months ago
trust_store.cc	Clang-format all of pki.	12 months ago
trust_store.h	Remove fillins/openssl_util	12 months ago
trust_store_collection.cc	Use InsertBraces - and reformat pki as such	12 months ago
trust_store_collection.h	Remove fillins/openssl_util	12 months ago
trust_store_collection_unittest.cc	Clang-format all of pki.	12 months ago
trust_store_in_memory.cc	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
trust_store_in_memory.h	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
trust_store_in_memory_unittest.cc	Add functions to convert from Span<const uint8> and std::string_view	9 months ago
verify_certificate_chain.cc	Allow the delegate to indicate it wishes to accept PreCertificates	9 months ago
verify_certificate_chain.h	Move signature_verify_cache.h to openssl/pki as public api	9 months ago
verify_certificate_chain_pkits_unittest.cc	Clang-format all of pki.	12 months ago
verify_certificate_chain_typed_unittest.h	Clang-format all of pki.	12 months ago
verify_certificate_chain_unittest.cc	Clang-format all of pki.	12 months ago
verify_name_match.cc	Remove pki/tag.h	9 months ago
verify_name_match.h	Stop passing der::Input by const-ref	10 months ago
verify_name_match_unittest.cc	Use InsertBraces - and reformat pki as such	12 months ago
verify_signed_data.cc	Move signature_verify_cache.h to openssl/pki as public api	9 months ago
verify_signed_data.h	Move signature_verify_cache.h to openssl/pki as public api	9 months ago
verify_signed_data_unittest.cc	Clang-format all of pki.	12 months ago

README.md

BoringSSL pki - Web PKI Certificate path building and verification library

This directory and library should be considered experimental and should not be depended upon not to change without notice. You should not use this.

It contains chrome's certificate verifier core logic as used by chrome.

Current status:

Currently chrome uses this code via private API from within this directory.
At the moment there is no public API for these functions, as mentioned above if you make use of this you do so at your own risk and your code may be broken by API change at any time.
Public API will be forthcoming.