root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions Packages Projects Releases Wiki Activity
openssl/crypto/x509
History
Clemens Lang 6b93db7bfd x509: Accept 'contentCommitment' as alias 
ITU-T X.509 (10/2019) section 9.2.2.3 [1] defines 'contentCommitment' as
the current name for what had previously been called 'nonRepudiation',
and deprecates the old name:

> It is not incorrect to refer to this keyUsage bit using the identifier
> nonRepudiation. However, the use of this identifier has been
> deprecated.

Allow 'contentCommitment' as an alias wherever 'nonRepudiation' has been
accepted before, so that passing

    -addext keyUsage=critical,contentCommitment

works as expected.

Add a test that checks that contentCommitment sets the same keyUsage bit
as nonRepudiation. Adjust the docs to mention the available alias name.

[1]: https://www.itu.int/rec/T-REC-X.509-201910-I/en

Signed-off-by: Clemens Lang <cllang@redhat.com>

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28161)
 		2025-08-11 12:00:38 +02:00
..
build.info feat: support the allowedAttributeAssignments X.509v3 extension 2025-01-02 20:06:59 +01:00
by_dir.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
by_file.c Copyright year updates 2025-03-12 13:35:59 +00:00
by_store.c Drop "by store"'s by_store_subject_ex() 2025-05-04 08:55:15 +02:00
ext_dat.h Copyright year updates 2025-03-12 13:35:59 +00:00
pcy_cache.c Copyright year updates 2023-09-07 09:59:15 +01:00
pcy_data.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
pcy_lib.c
…
pcy_local.h Copyright year updates 2023-09-07 09:59:15 +01:00
pcy_map.c x509: fix double locking problem 2022-12-08 11:10:58 +01:00
pcy_node.c Copyright year updates 2023-09-07 09:59:15 +01:00
pcy_tree.c crypto: use array memory (re)allocation routines 2025-08-08 12:22:10 -04:00
standard_exts.h Copyright year updates 2025-03-12 13:35:59 +00:00
t_acert.c Copyright year updates 2024-09-05 09:35:49 +02:00
t_crl.c fixed multiline output bug in crl command, ensuring use of global variable to set changes 2025-04-14 15:10:20 +01:00
t_req.c x509_print_ex: Remove unused setting when XN_FLAG_COMPAT is set 2023-10-26 15:48:00 +01:00
t_x509.c Deprecate ASN1_METH internal usage 2025-07-17 11:25:18 -04:00
v3_aaa.c Copyright year updates 2025-03-12 13:35:59 +00:00
v3_ac_tgt.c Deprecate ASN1_METH internal usage 2025-07-17 11:25:18 -04:00
v3_addr.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_admis.c Adjust naming authority formatting when printing out admission extension 2024-11-07 10:29:34 +01:00
v3_admis.h
…
v3_akeya.c
…
v3_akid.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
v3_asid.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_attrdesc.c feat: define and use ossl_bio_print_hex 2024-11-13 11:53:34 +01:00
v3_attrmap.c feat: support the attributeMappings X.509v3 extension 2024-12-23 09:58:15 +00:00
v3_audit_id.c feat: support auditIdentity X.509v3 extension 2024-08-26 10:38:44 +01:00
v3_authattid.c feat: support the authorityAttributeIdentifier X.509v3 extension 2024-09-10 19:17:34 +02:00
v3_battcons.c doc: the basicAttConstraints X.509v3 extension 2024-07-24 16:14:17 -04:00
v3_bcons.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
v3_bitst.c x509: Accept 'contentCommitment' as alias 2025-08-11 12:00:38 +02:00
v3_conf.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
v3_cpols.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_crld.c Copyright year updates 2025-03-12 13:35:59 +00:00
v3_enum.c
…
v3_extku.c Copyright year updates 2024-09-05 09:35:49 +02:00
v3_genn.c Copyright year updates 2024-09-05 09:35:49 +02:00
v3_group_ac.c Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
v3_ia5.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_ind_iss.c Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
v3_info.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_int.c
…
v3_iobo.c feat: add support for issuedOnBehalfOf X.509v3 extension 2024-08-27 16:48:57 +02:00
v3_ist.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_lib.c crypto/x509/v3_lib.c: Free tmpext if X509V3_EXT_add() fails to avoid memory leak 2025-05-19 16:18:35 +02:00
v3_ncons.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_no_ass.c Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
v3_no_rev_avail.c Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
v3_pci.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_pcia.c
…
v3_pcons.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
v3_pku.c
…
v3_pmaps.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
v3_prn.c
…
v3_purp.c Copyright year updates 2025-03-12 13:35:59 +00:00
v3_rolespec.c feat: add ossl_serial_number_print 2024-09-16 22:56:02 +02:00
v3_san.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_sda.c feat: support userNotice X.509v3 extension 2024-07-04 09:36:11 +02:00
v3_single_use.c Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
v3_skid.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
v3_soa_id.c Support all NULL-syntax X.509v3 extensions 2023-09-25 15:12:04 -04:00
v3_sxnet.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_timespec.c feat: support the timeSpecification X.509v3 extension 2024-12-11 18:26:37 +01:00
v3_tlsf.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
v3_usernotice.c feat: support userNotice X.509v3 extension 2024-07-04 09:36:11 +02:00
v3_utf8.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3_utl.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
v3err.c Copyright year updates 2025-03-12 13:35:59 +00:00
x509_acert.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
x509_acert.h Copyright year updates 2024-09-05 09:35:49 +02:00
x509_att.c constify ossl_x509at_add1_attr() 2024-07-10 16:19:06 +02:00
x509_cmp.c Copyright year updates 2025-03-12 13:35:59 +00:00
x509_d2.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509_def.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509_err.c Add Version Check for CSR Verification 2024-06-21 15:40:45 -04:00
x509_ext.c
…
x509_local.h Copyright year updates 2025-03-12 13:35:59 +00:00
x509_lu.c Copyright year updates 2025-03-12 13:35:59 +00:00
x509_meth.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
x509_obj.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
x509_r2x.c Stop raising ERR_R_MALLOC_FAILURE in most places 2022-10-05 14:02:03 +02:00
x509_req.c extend X509_REQ_add_extensions_nid() and thuis APPS/req to support augmenting/overriding existing extensions 2024-07-10 16:19:26 +02:00
x509_set.c Deprecate ASN1_METH internal usage 2025-07-17 11:25:18 -04:00
x509_trust.c Remove repeated words 2023-09-11 10:15:30 +02:00
x509_txt.c Add support for TLS 1.3 OCSP multi-stapling for server certs 2025-07-25 17:24:37 +02:00
x509_v3.c Fix doc and use of_X509v3_add_extensions() in case sk_X509_EXTENSION_num(exts) <= 0 2024-11-13 17:19:58 +01:00
x509_vfy.c Add support for TLS 1.3 OCSP multi-stapling for server certs 2025-07-25 17:24:37 +02:00
x509_vpm.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
x509aset.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509cset.c Provide X509_CRL_get0_tbs_sigalg() 2025-07-10 14:39:35 +02:00
x509name.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
x509rset.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509spki.c crypto: use array memory (re)allocation routines 2025-08-08 12:22:10 -04:00
x509type.c
…
x_all.c X509_ACERT_sign_ctx(): Remove superfluous reference 2024-12-26 19:40:54 +01:00
x_attrib.c feat: define and use ossl_bio_print_hex 2024-11-13 11:53:34 +01:00
x_crl.c Fixed #27506, now the behavior with an empty IDN is the same as with 2025-07-27 12:45:27 +02:00
x_exten.c Copyright year updates 2024-09-05 09:35:49 +02:00
x_ietfatt.c Copyright year updates 2024-09-05 09:35:49 +02:00
x_name.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
x_pubkey.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
x_req.c crypto/*: Fix various typos, repeated words, align some spelling to LDP. 2022-10-12 16:55:01 +11:00
x_x509.c libapps + libcrypto: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
x_x509a.c
…