Mirror of BoringSSL (grpc依赖) https://boringssl.googlesource.com/boringssl

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tag: Branch: Tree: d1b20a9580

2214

2272

2311

2357

2490

2564

2623

2661

2704

2785

2883

2924

2987

3029

3071

3112

3202

3239

3282

3359

3538

3945

chromium-2214

chromium-2272

chromium-2311

chromium-2357

chromium-2490

chromium-2564

chromium-2623

chromium-2661

chromium-2704

chromium-2883

chromium-2924

chromium-2987

chromium-3029

chromium-3071

chromium-3112

chromium-3202

chromium-3239

chromium-3282

chromium-3359

chromium-3538

chromium-3945

chromium-5359

chromium-5414

chromium-stable

chromium-stable-with-bazel

esni

fips-20180730

fips-20220613

fips-20230428

fips-20240407

fips-20240805

fips-20250107

fips-android-20191008

grpc-202302

infra/config

main

main-with-bazel

master

master-with-bazel

0.20240913.0

0.20240930.0

0.20241024.0

0.20241203.0

0.20241209.0

0.20250114.0

0.20250212.0

fips-20170615

fips-20180730

fips-20190808

fips-20210429

fips-20220613

fips-android-20191020

version_for_cocoapods_1.0

version_for_cocoapods_10.0

version_for_cocoapods_2.0

version_for_cocoapods_3.0

version_for_cocoapods_4.0

version_for_cocoapods_5.0

version_for_cocoapods_6.0

version_for_cocoapods_7.0

version_for_cocoapods_8.0

version_for_cocoapods_9.0

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'd1b20a9580'

${ noResults }

boringssl/crypto/x509/test

History

David Benjamin d1b20a9580 Fix handling of EXFLAG_INVALID_POLICY on the leaf. ... X509_policy_check returns -1 if some certificate had an unparseable extension, in which case it sets EXFLAG_INVALID_POLICY on it. The calling code then iterates over the certificates to find the offending one, so the callback has a chance to undo it. But it skips i = 0, the leaf, and instead just silentely returns success. We really should cut down on the callback's ability to mess things up here but, in the meantime, fix this. Also add a test covering this case. While I'm here, I've updated make_invalid_extensions.go, which I pulled some code from, to rename fooOrPanic to mustFoo. That seems to be the convention in the Go standard library. (regexp.MustCompile, etc.) Change-Id: Ib07c9f4175e66483bd7c0f7d49aea931bf36e53f Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/55748 Auto-Submit: David Benjamin <davidben@google.com> Reviewed-by: Bob Beck <bbe@google.com> Commit-Queue: David Benjamin <davidben@google.com>		2 years ago
..
basic_constraints_ca.pem	Add X509_get_pathlen and X509_REVOKED_get0_extensions.	5 years ago
basic_constraints_ca_pathlen_0.pem	Add X509_get_pathlen and X509_REVOKED_get0_extensions.	5 years ago
basic_constraints_ca_pathlen_1.pem	Add X509_get_pathlen and X509_REVOKED_get0_extensions.	5 years ago
basic_constraints_ca_pathlen_10.pem	Add X509_get_pathlen and X509_REVOKED_get0_extensions.	5 years ago
basic_constraints_leaf.pem	Add X509_get_pathlen and X509_REVOKED_get0_extensions.	5 years ago
basic_constraints_none.pem	Add X509_get_pathlen and X509_REVOKED_get0_extensions.	5 years ago
invalid_extension_intermediate.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_intermediate_authority_key_identifier.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_intermediate_basic_constraints.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_intermediate_ext_key_usage.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_intermediate_key_usage.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_intermediate_name_constraints.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_intermediate_subject_alt_name.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_intermediate_subject_key_identifier.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf_authority_key_identifier.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf_basic_constraints.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf_ext_key_usage.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf_key_usage.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf_name_constraints.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf_subject_alt_name.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_leaf_subject_key_identifier.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root_authority_key_identifier.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root_basic_constraints.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root_ext_key_usage.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root_key_usage.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root_name_constraints.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root_subject_alt_name.pem	Check for trailing data in extensions.	3 years ago
invalid_extension_root_subject_key_identifier.pem	Check for trailing data in extensions.	3 years ago
make_basic_constraints.go	Migrate io/ioutil uses to new APIs.	2 years ago
make_invalid_extensions.go	Fix handling of EXFLAG_INVALID_POLICY on the leaf.	2 years ago
make_many_constraints.go	acvp: add CMAC-AES support.	5 years ago
make_policy_certs.go	Fix handling of EXFLAG_INVALID_POLICY on the leaf.	2 years ago
many_constraints.pem	acvp: add CMAC-AES support.	5 years ago
many_names1.pem	acvp: add CMAC-AES support.	5 years ago
many_names2.pem	acvp: add CMAC-AES support.	5 years ago
many_names3.pem	acvp: add CMAC-AES support.	5 years ago
policy_intermediate.pem	Fix handling of EXFLAG_INVALID_POLICY on the leaf.	2 years ago
policy_intermediate_invalid.pem	Fix handling of EXFLAG_INVALID_POLICY on the leaf.	2 years ago
policy_leaf.pem	Fix handling of EXFLAG_INVALID_POLICY on the leaf.	2 years ago
policy_leaf_invalid.pem	Fix handling of EXFLAG_INVALID_POLICY on the leaf.	2 years ago
policy_root.pem	Fix handling of EXFLAG_INVALID_POLICY on the leaf.	2 years ago
pss_sha1.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha1_explicit.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha1_mgf1_syntax_error.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha224.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_explicit_trailer.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_mgf1_sha384.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_mgf1_syntax_error.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_omit_nulls.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_salt31.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_salt_overflow.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_unknown_mgf.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha256_wrong_trailer.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha384.pem	Tighten up supported PSS combinations in X.509.	3 years ago
pss_sha512.pem	Tighten up supported PSS combinations in X.509.	3 years ago
some_names1.pem	acvp: add CMAC-AES support.	5 years ago
some_names2.pem	acvp: add CMAC-AES support.	5 years ago
some_names3.pem	acvp: add CMAC-AES support.	5 years ago
trailing_data_leaf_authority_key_identifier.pem	Check for trailing data in extensions.	3 years ago
trailing_data_leaf_basic_constraints.pem	Check for trailing data in extensions.	3 years ago
trailing_data_leaf_ext_key_usage.pem	Check for trailing data in extensions.	3 years ago
trailing_data_leaf_key_usage.pem	Check for trailing data in extensions.	3 years ago
trailing_data_leaf_name_constraints.pem	Check for trailing data in extensions.	3 years ago
trailing_data_leaf_subject_alt_name.pem	Check for trailing data in extensions.	3 years ago
trailing_data_leaf_subject_key_identifier.pem	Check for trailing data in extensions.	3 years ago