2 Commits

Author	SHA1	Message	Date
Dr. David von Oheimb	a0745e2be6	Clean up CMP chain building for CMP signer, TLS client, and newly enrolled certs ... * Use strenghtened cert chain building, verifying chain using optional trust store while making sure that no certificate status (e.g., CRL) checks are done * Use OSSL_CMP_certConf_cb() by default and move its doc to OSSL_CMP_CTX_new.pod * Simplify certificate and cert store loading in apps/cmp.c Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org> (Merged from https://github.com/openssl/openssl/pull/12741)	2020-09-10 07:07:55 +02:00
Dr. David von Oheimb	299e0f1eae	Streamline the CMP request session API, adding the generalized OSSL_CMP_exec_certreq() ... Fixes #12395 Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/12431)	2020-07-30 09:38:08 +02:00