| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
Fix the issue of missing akid in self-issued CAs Co-authored-by: dsy<dongshunyu1@huawei.com> # message auto-generated for no-merge-commit merge: !846 merge akiFix into main Fix the issue of missing akid in self-issued CAs Created-by: dsy678 Commit-by: dsy Merged-by: liwei3013 Description: Fix the issue of missing akid in self-issued CAs See merge request: openHiTLS/openhitls!846 | 8 个月前 | |
Supplement to Certificate Chain Verification Test Consistency Cases Co-authored-by: dsy<dongshunyu1@huawei.com> # message auto-generated for no-merge-commit merge: !744 merge verify into main Supplement to Certificate Chain Verification Test Consistency Cases Created-by: dsy678 Commit-by: dsy Merged-by: liwei3013 Description: Supplement to Certificate Chain Verification Test Consistency Cases See merge request: openHiTLS/openhitls!744 | 9 个月前 | |
Supplement to Certificate Chain Verification Test Consistency Cases Co-authored-by: dsy<dongshunyu1@huawei.com> # message auto-generated for no-merge-commit merge: !744 merge verify into main Supplement to Certificate Chain Verification Test Consistency Cases Created-by: dsy678 Commit-by: dsy Merged-by: liwei3013 Description: Supplement to Certificate Chain Verification Test Consistency Cases See merge request: openHiTLS/openhitls!744 | 9 个月前 | |
feat:Full support for the character set Co-authored-by: Lzhjian<liuzhijian24@huawei.com> # message auto-generated for no-merge-commit merge: !919 merge charset into main feat:Full support for the character set Created-by: Lzhjian Commit-by: Lzhjian Merged-by: liwei3013 Description: feat:Full support for the character set See merge request: openHiTLS/openhitls!919 | 6 个月前 | |
openhitls repo init | 1 年前 | |
feat:x509_verify and add eku_suite test data Signed-off-by: dsy <dongshunyu1@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/632 | 9 个月前 | |
Supplement to Certificate Chain Verification Test Consistency Cases Co-authored-by: dsy<dongshunyu1@huawei.com> # message auto-generated for no-merge-commit merge: !744 merge verify into main Supplement to Certificate Chain Verification Test Consistency Cases Created-by: dsy678 Commit-by: dsy Merged-by: liwei3013 Description: Supplement to Certificate Chain Verification Test Consistency Cases See merge request: openHiTLS/openhitls!744 | 9 个月前 | |
fix(pki): correct self-issued certificate handling in chain building and path length verification - Distinguish self-issued (subject==issuer) from self-signed (subject==issuer + valid signature) to prevent premature chain termination - Rewrite X509_CheckExt path length verification per RFC 5280 §6.1.4 (l)(m) using a decrementing maxPathLen counter, eliminating O(n²) inner loop - Return HITLS_X509_ERR_SIGN_REPEAT instead of silent success when CRL/Cert/CSR is signed repeatedly, preventing users from mistaking a no-op for a successful re-sign Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1568 | 1 个月前 | |
fix(pki/bsl): harden X509 verification, fix IPv6 string length, and add ASN.1 overflow check - Reject empty issuer DN with HITLS_X509_ERR_ISSUE_CERT_NOT_FOUND instead of silently skipping - Check validity period of partial-chain trust anchors before accepting them - Change HITLS_VerifyCb parameter from isPreverifyOk to errCode for better error diagnostics - Fix MAX_IP_STR_LEN from 39 to 45 for IPv4-embedded IPv6 address literals - Add overflow check in ASN.1 UTF-8 encoding to prevent outLen wrap-around - Fix KU check skipped when EKU is absent in purpose verification (RFC 5280 4.2.1.12) Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1423 | 2 个月前 | |
fix: add keyusage check, add key consistence check, fix bugs Signed-off-by: xlot <xietianyuan@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/650 | 9 个月前 | |
feat: support ml-kem/slh-dsa in X509 Co-authored-by: xlot<xietianyuan@huawei.com> # message auto-generated for no-merge-commit merge: !803 merge main into main feat: support ml-kem/slh-dsa in X509 Created-by: xlot Commit-by: xlot Merged-by: liwei3013 Description: support ml-kem/slh-dsa in X509 See merge request: openHiTLS/openhitls!803 | 8 个月前 | |
feat: Support curve nistp192 and setting/getting generic extension Co-authored-by: Ooohui<zhanghui160@huawei.com> # message auto-generated for no-merge-commit merge: !954 merge main into main feat: Support curve nistp192 and setting/getting generic extension Created-by: Ooohui Commit-by: Ooohui Merged-by: liwei3013 Description: <!-- Thanks for sending a pull request! Here are some tips for you: 1) If this is your first time, please read our contributor guidelines: https://gitee.com/mindspore/mindspore/blob/master/CONTRIBUTING.md 2) If you want to contribute your code but don't know who will review and merge, please add label mindspore-assistant to the pull request, we will find and do it as soon as possible. --> **What type of PR is this?** <!-- 选择下面一种标签替换下方 /kind <label>，可选标签类型有： - /kind bug - /kind task - /kind feature - /kind refactor - /kind clean_code 如PR描述不符合规范，修改PR描述后需要/check-pr重新检查PR规范。 --> /kind <label> **Self-checklist**:（**请自检，在[ ]内打上x，我们将检视你的完成情况，否则会导致pr无法合入**） + - [ ] **设计**：PR对应的方案是否已经经过Maintainer评审，方案检视意见是否均已答复并完成方案修改 + - [ ] **测试**：PR中的代码是否已有UT/ST测试用例进行充分的覆盖，新增测试用例是否随本PR一并上库或已经上库 + - [ ] **验证**：PR描述信息中是否已包含对该PR对应的Feature、Refactor、Bugfix的预期目标达成情况的详细验证结果描述 + - [ ] **接口**：是否涉及对外接口变更，相应变更已得到接口评审组织的通过，API对应的注释信息已经刷新正确 + - [ ] **文档**：是否涉及官网文档修改，如果涉及请及时提交资料到Doc仓 <!-- **Special notes for your reviewers**: --> <!-- + - [ ] 是否导致无法前向兼容 --> <!-- + - [ ] 是否涉及依赖的三方库变更 --> See merge request: openHiTLS/openhitls!954 | 7 个月前 | |
fix(pki/bsl): harden X509 verification, fix IPv6 string length, and add ASN.1 overflow check - Reject empty issuer DN with HITLS_X509_ERR_ISSUE_CERT_NOT_FOUND instead of silently skipping - Check validity period of partial-chain trust anchors before accepting them - Change HITLS_VerifyCb parameter from isPreverifyOk to errCode for better error diagnostics - Fix MAX_IP_STR_LEN from 39 to 45 for IPv4-embedded IPv6 address literals - Add overflow check in ASN.1 UTF-8 encoding to prevent outLen wrap-around - Fix KU check skipped when EKU is absent in purpose verification (RFC 5280 4.2.1.12) Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1423 | 2 个月前 | |
openhitls repo init | 1 年前 | |
add crl function # message auto-generated for no-merge-commit merge: merge tmp into main add crl function Created-by: ZHui_er Author-id: 1941628 MR-id: 4291258 Commit-by: ZHui_er Merged-by: dumb E2E-issues: Description: add crl function See merge request: openHiTLS/openhitls!27 | 1 年前 | |
fix:fix the AKI validation issue. Fix the problem that authorityCertIssuer matches the issueName of the issuer certificate Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/246 | 1 年前 | |
openhitls repo init | 1 年前 | |
feat: add hash algorithm security bits check in X509 certificate chain verification Add hash algorithm security strength check to certificate chain verification. Root certificates skip hash security check but still verify key security bits. Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1310 | 3 个月前 | |
fix:Fixed the code issues of PKI and Crypto Signed-off-by: Lzhjian <liuzhijian24@huawei.com> Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1438 | 2 个月前 | |
feat: support ml-kem/slh-dsa in X509 Co-authored-by: xlot<xietianyuan@huawei.com> # message auto-generated for no-merge-commit merge: !803 merge main into main feat: support ml-kem/slh-dsa in X509 Created-by: xlot Commit-by: xlot Merged-by: liwei3013 Description: support ml-kem/slh-dsa in X509 See merge request: openHiTLS/openhitls!803 | 8 个月前 | |
openhitls repo init | 1 年前 | |
Supplement to Certificate Chain Verification Test Consistency Cases Co-authored-by: dsy<dongshunyu1@huawei.com> # message auto-generated for no-merge-commit merge: !744 merge verify into main Supplement to Certificate Chain Verification Test Consistency Cases Created-by: dsy678 Commit-by: dsy Merged-by: liwei3013 Description: Supplement to Certificate Chain Verification Test Consistency Cases See merge request: openHiTLS/openhitls!744 | 9 个月前 | |
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390 | 2 个月前 | |
fix:clean sensitive information and fix some functions Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1401 | 2 个月前 | |
Bug fix for the HITLS_X509_CertVerifyByPubKey interface and addition of test specifications Co-authored-by: xuzhengyi<xuzhengyi1@h-partners.com> # message auto-generated for no-merge-commit merge: !922 merge HITLS_X509_CertVerifyByPubKey into main Bug fix for the HITLS_X509_CertVerifyByPubKey interface and addition of test specifications Created-by: libiaoliang Commit-by: xuzhengyi Merged-by: liwei3013 Description: Bug fix for the HITLS_X509_CertVerifyByPubKey interface and addition of test specifications See merge request: openHiTLS/openhitls!922 | 7 个月前 |
| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
| 8 个月前 | ||
| 9 个月前 | ||
| 9 个月前 | ||
| 6 个月前 | ||
| 1 年前 | ||
| 9 个月前 | ||
| 9 个月前 | ||
| 1 个月前 | ||
| 2 个月前 | ||
| 9 个月前 | ||
| 8 个月前 | ||
| 7 个月前 | ||
| 2 个月前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 1 年前 | ||
| 3 个月前 | ||
| 2 个月前 | ||
| 8 个月前 | ||
| 1 年前 | ||
| 9 个月前 | ||
| 2 个月前 | ||
| 2 个月前 | ||
| 7 个月前 |