4 Commits

Author	SHA1	Message	Date
Viktor Dukhovni	55a6250f1e	Skip CN DNS name constraint checks when not needed ... Only check the CN against DNS name contraints if the `X509_CHECK_FLAG_NEVER_CHECK_SUBJECT` flag is not set, and either the certificate has no DNS subject alternative names or the `X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT` flag is set. Add pertinent documentation, and touch up some stale text about name checks and DANE. Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org>	2018-05-23 11:12:17 -04:00
Matt Caswell	6738bf1417	Update copyright year ... Reviewed-by: Richard Levitte <levitte@openssl.org>	2018-02-13 13:59:25 +00:00
Daniël van Eeden	c684a2d34d	Fix include in manpage of X509_check_host ... Fixes Issue #5255 CLA: trivial Reviewed-by: Andy Polyakov <appro@openssl.org> Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/5256)	2018-02-11 10:55:38 -05:00
Rich Salz	99d63d4662	Move manpages to man[1357] structure. ... Move manpages to manX directories Add Windows/VMS install fix from Richard Levitte Update README Fix typo's Remove some duplicates Reviewed-by: Richard Levitte <levitte@openssl.org>	2016-10-26 13:59:52 -04:00