openssl/crypto/x509
Ivan Stanković e599893a9f x509: allow SAN URIs to contain userinfo
The way we're currently handling SAN URIs does not allow for userinfo,
meaning the name constraint check on such URIs will fail. Fix this by
skipping over the userinfo component:

      authority   = [ userinfo "@" ] host [ ":" port ]

(per RFC 3986).

Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25861)
2025-03-04 17:30:34 +01:00
..
build.info feat: support the allowedAttributeAssignments X.509v3 extension 2025-01-02 20:06:59 +01:00
by_dir.c Copyright year updates 2024-09-05 09:35:49 +02:00
by_file.c Open pem files in binary mode 2025-01-28 20:57:14 +01:00
by_store.c Free data if sk_OPENSSL_STRING_push fails. 2025-01-08 11:25:30 +01:00
ext_dat.h feat: support the aAissuingDistributionPoint X.509v3 extension 2025-01-17 18:39:24 +01:00
pcy_cache.c
pcy_data.c
pcy_lib.c
pcy_local.h
pcy_map.c
pcy_node.c
pcy_tree.c Adds missing checks of return from XXX_up_ref(). 2025-02-18 16:32:59 +01:00
standard_exts.h feat: support the aAissuingDistributionPoint X.509v3 extension 2025-01-17 18:39:24 +01:00
t_acert.c Copyright year updates 2024-09-05 09:35:49 +02:00
t_crl.c
t_req.c
t_x509.c Use ASN1_INTEGER_get_int64() in ossl_serial_number_print() 2025-01-28 21:06:51 +01:00
v3_aaa.c feat: support the allowedAttributeAssignments X.509v3 extension 2025-01-02 20:06:59 +01:00
v3_ac_tgt.c feat: print <none> in issuer serials in ac targeting extension 2024-09-10 19:17:34 +02:00
v3_addr.c X509v3_addr_canonize(): Check whether addr == NULL 2025-03-03 09:43:22 +01:00
v3_admis.c Adjust naming authority formatting when printing out admission extension 2024-11-07 10:29:34 +01:00
v3_admis.h
v3_akeya.c
v3_akid.c
v3_asid.c
v3_attrdesc.c feat: define and use ossl_bio_print_hex 2024-11-13 11:53:34 +01:00
v3_attrmap.c feat: support the attributeMappings X.509v3 extension 2024-12-23 09:58:15 +00:00
v3_audit_id.c
v3_authattid.c feat: support the authorityAttributeIdentifier X.509v3 extension 2024-09-10 19:17:34 +02:00
v3_battcons.c
v3_bcons.c
v3_bitst.c
v3_conf.c
v3_cpols.c Fix potential memory leak in policy_section() 2025-02-25 15:52:13 +01:00
v3_crld.c feat: support the aAissuingDistributionPoint X.509v3 extension 2025-01-17 18:39:24 +01:00
v3_enum.c
v3_extku.c Copyright year updates 2024-09-05 09:35:49 +02:00
v3_genn.c Copyright year updates 2024-09-05 09:35:49 +02:00
v3_group_ac.c
v3_ia5.c
v3_ind_iss.c
v3_info.c
v3_int.c
v3_iobo.c
v3_ist.c
v3_lib.c
v3_ncons.c x509: allow SAN URIs to contain userinfo 2025-03-04 17:30:34 +01:00
v3_no_ass.c
v3_no_rev_avail.c
v3_pci.c Copyright year updates 2024-09-05 09:35:49 +02:00
v3_pcia.c
v3_pcons.c
v3_pku.c
v3_pmaps.c
v3_prn.c
v3_purp.c fix X509_PURPOSE_add() to take |sname| as primary key and handle |id| in a backwd compat way for new purpose 2025-01-20 08:41:19 +01:00
v3_rolespec.c feat: add ossl_serial_number_print 2024-09-16 22:56:02 +02:00
v3_san.c Fix memory leak on failure in copy_issuer() 2024-11-07 10:19:56 +01:00
v3_sda.c
v3_single_use.c
v3_skid.c
v3_soa_id.c
v3_sxnet.c
v3_timespec.c feat: support the timeSpecification X.509v3 extension 2024-12-11 18:26:37 +01:00
v3_tlsf.c
v3_usernotice.c
v3_utf8.c
v3_utl.c feat: define and use ossl_bio_print_hex 2024-11-13 11:53:34 +01:00
v3err.c fix X509_PURPOSE_add() to take |sname| as primary key and handle |id| in a backwd compat way for new purpose 2025-01-20 08:41:19 +01:00
x509_acert.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509_acert.h Copyright year updates 2024-09-05 09:35:49 +02:00
x509_att.c
x509_cmp.c Adds missing checks of return from XXX_up_ref(). 2025-02-18 16:32:59 +01:00
x509_d2.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509_def.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509_err.c
x509_ext.c
x509_local.h X509_STORE_CTX_get1_issuer(): make happy path quicker again 2025-02-12 08:07:57 -05:00
x509_lu.c X509_STORE_CTX_get1_issuer(): make happy path quicker again 2025-02-12 08:07:57 -05:00
x509_meth.c
x509_obj.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509_r2x.c
x509_req.c
x509_set.c Fix potential use-after-free in REF_PRINT_COUNT 2024-12-10 14:58:08 +01:00
x509_trust.c
x509_txt.c
x509_v3.c Fix doc and use of_X509v3_add_extensions() in case sk_X509_EXTENSION_num(exts) <= 0 2024-11-13 17:19:58 +01:00
x509_vfy.c Adds missing checks of return from XXX_up_ref(). 2025-02-18 16:32:59 +01:00
x509_vpm.c Add function X509_VERIFY_PARAM_get_purpose() 2025-01-27 08:57:30 +01:00
x509aset.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509cset.c Fix potential use-after-free in REF_PRINT_COUNT 2024-12-10 14:58:08 +01:00
x509name.c
x509rset.c Copyright year updates 2024-09-05 09:35:49 +02:00
x509spki.c
x509type.c
x_all.c X509_ACERT_sign_ctx(): Remove superfluous reference 2024-12-26 19:40:54 +01:00
x_attrib.c feat: define and use ossl_bio_print_hex 2024-11-13 11:53:34 +01:00
x_crl.c
x_exten.c Copyright year updates 2024-09-05 09:35:49 +02:00
x_ietfatt.c Copyright year updates 2024-09-05 09:35:49 +02:00
x_name.c Copyright year updates 2024-09-05 09:35:49 +02:00
x_pubkey.c SLH-DSA: Remove legacy ASN1 method tables for SLH-DSA. Update to use 2025-02-18 10:17:29 +01:00
x_req.c
x_x509.c
x_x509a.c