| Commit message (Expand) | Author | Age | Files | Lines |
* | Cache certificates as DER on all platforms. | rsleevi@chromium.org | 2012-03-29 | 1 | -3/+2 |
* | Move X509Certificate::Verify into CertVerifyProc | rsleevi@chromium.org | 2012-03-22 | 1 | -776/+17 |
* | Revert "Revert "net: fallback to online revocation checks for EV status when ... | agl@chromium.org | 2012-03-20 | 1 | -1/+0 |
* | Revert 127757 - net: fallback to online revocation checks for EV status when ... | dgrogan@chromium.org | 2012-03-20 | 1 | -0/+1 |
* | net: fallback to online revocation checks for EV status when CRLSet has expired. | agl@chromium.org | 2012-03-20 | 1 | -1/+0 |
* | When detecting client certs on OS X, ensure all certs match the server's Cert... | rsleevi@chromium.org | 2012-03-15 | 1 | -4/+1 |
* | net: add a NotAfter field to CRLSets. | agl@chromium.org | 2012-03-07 | 1 | -0/+1 |
* | Refactor Pickle Read methods to use higher performance PickleIterator. | jbates@chromium.org | 2012-03-07 | 1 | -1/+1 |
* | net: permit EV without online revocation checking. | agl@chromium.org | 2012-02-16 | 1 | -8/+6 |
* | Fixes for review comments following r120599. | mark@chromium.org | 2012-02-06 | 1 | -2/+2 |
* | Always check the dictionary returned by SecTrustCopyExtendedResult for | mark@chromium.org | 2012-02-06 | 1 | -11/+26 |
* | OSSTATUS_LOG: Address review comments following r119511. | mark@chromium.org | 2012-01-30 | 1 | -1/+1 |
* | Add OSSTATUS_LOG API. | mark@chromium.org | 2012-01-27 | 1 | -21/+14 |
* | Implement CRLSet checking on Mac. | agl@chromium.org | 2012-01-11 | 1 | -1/+61 |
* | Stop leaking a SecKeyRef on OS X when verifying certificates | rsleevi@chromium.org | 2011-12-21 | 1 | -1/+1 |
* | On OS X, when parsing certificates, properly handle non-ASCII/UTF-8 string ty... | rsleevi@chromium.org | 2011-12-21 | 1 | -9/+15 |
* | Reject certificate chains containing small RSA and DSA keys. | palmer@chromium.org | 2011-12-15 | 1 | -1/+46 |
* | mac: s/UINT32_MAX/kuint32max/ | thakis@chromium.org | 2011-12-07 | 1 | -2/+2 |
* | On OS X, when accessing a certificate field (subject, issuer, extension, etc)... | rsleevi@chromium.org | 2011-12-02 | 1 | -154/+231 |
* | Do not hash the certificate twice. | wtc@chromium.org | 2011-11-05 | 1 | -8/+6 |
* | Log more descriptive certificate error messages on Mac. | rsleevi@chromium.org | 2011-11-04 | 1 | -3/+12 |
* | Record when certificates signed with md[2,4,5] are encountered on OS X. | rsleevi@chromium.org | 2011-11-02 | 1 | -16/+72 |
* | Make X509Certificate::GetDEREncoded a static function taking an OSCertHandle | rsleevi@chromium.org | 2011-11-01 | 1 | -8/+8 |
* | Ensure X509Certificate::OSCertHandles are safe to be used on both UI, IO, and... | rsleevi@chromium.org | 2011-11-01 | 1 | -8/+15 |
* | net: retain leading zero bytes in X.509 serial numbers. | agl@chromium.org | 2011-10-31 | 1 | -4/+0 |
* | Fix the "certificate is not yet valid" error for server certificates | wtc@chromium.org | 2011-10-29 | 1 | -0/+25 |
* | net: enable CRL sets behind a command line flag. | agl@chromium.org | 2011-10-25 | 1 | -0/+1 |
* | Use NSS to generate Origin-Bound Certs on Win and Mac. | mattm@chromium.org | 2011-10-18 | 1 | -19/+0 |
* | For the SSL cert status, convert anonymous enum that gives bit values into a ... | pkasting@chromium.org | 2011-09-23 | 1 | -1/+1 |
* | Revert 102322 - For the SSL cert status, convert anonymous enum that gives bi... | pkasting@chromium.org | 2011-09-22 | 1 | -1/+1 |
* | For the SSL cert status, convert anonymous enum that gives bit values into a ... | pkasting@chromium.org | 2011-09-22 | 1 | -1/+1 |
* | Resubmission of r98288: Added CreateOriginBound method to x509_certificate.h | mdietz@google.com | 2011-09-08 | 1 | -0/+19 |
* | Force certificate trust preferences checking on OS X. | rsleevi@chromium.org | 2011-09-01 | 1 | -1/+2 |
* | Revert 98288 - Added CreateOriginBound method to x509_certificate.h. | jbates@chromium.org | 2011-08-25 | 1 | -19/+0 |
* | Added CreateOriginBound method to x509_certificate.h. | mdietz@google.com | 2011-08-25 | 1 | -0/+19 |
* | On Mac, respect certificate user trust settings created by Safari. | rsleevi@chromium.org | 2011-08-23 | 1 | -12/+20 |
* | Return the constructed certificate chain in X509Certificate::Verify() | rsleevi@chromium.org | 2011-07-30 | 1 | -0/+17 |
* | On Mac, compare certificate host names according to RFC6125. | rsleevi@chromium.org | 2011-07-30 | 1 | -84/+27 |
* | Revert the following change in r93346: | wtc@chromium.org | 2011-07-26 | 1 | -3/+2 |
* | Adjust a LOG(WARNING) message to be less verbose, so that only | wtc@chromium.org | 2011-07-21 | 1 | -3/+5 |
* | Implement GetSubjectAltName on all platforms | joth@chromium.org | 2011-07-19 | 1 | -52/+43 |
* | Cache the underlying OS certificate handle within the X509CertificateCache, r... | rsleevi@chromium.org | 2011-07-19 | 1 | -8/+3 |
* | Don't block the UI thread for OCSP/CRLs when viewing a cert on Mac. | rsleevi@chromium.org | 2011-06-23 | 1 | -70/+98 |
* | Factor out Verify into x509 base class | joth@chromium.org | 2011-06-21 | 1 | -17/+3 |
* | Map some CRL and OCSP errors to CERT_STATUS_UNABLE_TO_CHECK_REVOCATION. | wtc@chromium.org | 2011-06-16 | 1 | -6/+19 |
* | Add LOG(WARNING) messages to track down where we set CERT_STATUS_INVALID. | wtc@chromium.org | 2011-06-11 | 1 | -1/+11 |
* | Address post-review feedback for r82214. In addition, no longer attempt to gr... | rsleevi@chromium.org | 2011-04-22 | 1 | -4/+4 |
* | Address post-review feedback for r81702. | rsleevi@chromium.org | 2011-04-22 | 1 | -40/+50 |
* | Change the HTTP cache to cache the entire certificate chain for SSL sites | rsleevi@chromium.org | 2011-04-20 | 1 | -22/+24 |
* | Allow certificate revocation checking to be enabled/disabled independent of t... | rsleevi@chromium.org | 2011-04-15 | 1 | -39/+124 |