master
tests: openpgp-certs tests were moved to cert-tests
tests: added PKCS#12 unit test with AES file
tests: update to take into account the removal of random art
tests: introduced checks in alternative chain discovery
certtool: order DN components by scale.
Attempt to fix a leak in OpenPGP cert parsing.
tests: combined key and cert tests
tests: cert-tests: moved all data files in separate subdir
tests: added CRL verification tests
tests: moved pkcs12 tests into cert-certs/ subdir
Corrected the importing of ECDSA public keys
tests: update details about sample X25519 certificate
x509: implement RSA-PSS signature scheme
tests: added PKCS#12 file decoding containing a CRL
Introduced check to reject certificates with non-digits in time field
certtool: added option to apply a certificate verification profile
tests: added check on Ed25519 chain verification
tests: added verification for unknown critical extensions
tests: introduced verification constraints checks for PKCS#7 structures
x509: support commonName extension
tests: added CRL decoding unit tests using certtool
lib/x509: use common routine for parsing data version
tests: csr-invalid.der: modify the SPKI OID to use SECP384R1
fuzz: added fuzzer for certificate verification
x509: support PBES1-DES-SHA1
x509: reject certificates having duplicate extensions
pkcs7: decode attribute OIDs when printing
x509: include digestParamSet into GOST 512-bit curves A and B params
Fix parser output in tests/cert-tests/data/gost-cert-nogost.pem
GOSTR341194: mark as insecure for digital signatures
tests: add PKCS#12 test script for GOST 28147-89-encrypted files
Support importing/exporting X.509 GOST public keys
Merge branch 'master' into 'tmp-mark-gost94-as-broken'
tests: added checks with certificates that contain invalid time field
x509: corrected issue in the algorithm parameters comparison
tests: moved sha2 tests into cert-tests/
tests: added checks with problematic PKCS#12 files
certtool: don't output textual information if --no-text was given
cert-tests: test parsing and decoding of GOST private keys
x509: support decoding of ML-DSA private keys in CHOICE format
tests: use certtool to check RSA-PSS to RSA conversion
tests: added tests for PKCS#12 decoding with UTF8 passwords
x509: aki: always print authorityCert info
tests: add unit test for PKCS#12 with file that uses SHA512 for MAC
pkcs12: eliminate mem leaks in _pkcs12_decode_safe_contents
tests: added unit test for PKCS#12 with file with no salt in MAC
Do not attempt to parse a 32-bit integer if a packet is not 4 bytes.
Enforce the max packet length for OpenPGP subpackets as well
tests: added unit test to verify that certificates with non-DER strict time fields are accepted
tests: added pkcs7 verification with struct generated from openssl (with keyid)
tests: added pkcs12 file with long password
tests: added pkcs7 verification with struct generated from openssl
tests: added unit test for PKCS#12 with file that uses PBES1 with no salt
Support PBMAC1 usage in PKCS#12
tests: pkcs12-pbmac1: exercise extended/truncated MAC values
tests: pkcs1-pad: moved to cert-tests
tests: added complex verification example using PKCS#7
tests: add test for signing with certificate list
tests: pkcs7: added ed25519 basic signing and verification checks
tests: added unit test for the certtool smime conversion functionality
tests: updated for the new provable private key format
tests: parse and interpret an EdDSA public key
tests: add testfile from RFC4134 Section 4.5
tests: expand pkcs7 test to also check GOST files
Corrected a leak in OpenPGP sub-packet parsing.
x509: Write keyUsage extension with minimal BIT STRING
tests: use template file for generating long DNS certificate request
Do not infinite loop if an EOF occurs while skipping a PGP packet
tests: userid test moved to cert-tests/
tests: enhanced test suite to include invalid V1 certs
tests: enhanced test suite to include invalid X509v3 cert
tests: check whether a certificate with illegal version is rejected