Star1111
683
代码
代码
Issues55
Pull Requests92
流水线
讨论
Wiki
分析
Star1111
683
m0_69551548m0_69551548fix:clean sensitive information and fix some functions
31c51137创建于 5月14日历史提交
文件最后提交记录最后更新时间
a_v1_ext_inter.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
a_v1_ext_leaf.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
a_v2_ext_inter.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
a_v2_ext_leaf.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
a_v3_inter.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
a_v3_leaf.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
a_v3_root.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
b_v1_ext_root.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
b_v3_leaf.der
fix(pki): harden X509 verification for certificate version, SAN parsing, and security level integration - Reject v1/v2 certificates carrying extensions with HITLS_X509_ERR_VFY_EXTENSIONS_REQUIRE_V3 - Require v3 certificates for intermediate CAs; allow v1/v2 trust anchors without extensions - Fix SAN parsing to properly handle zero-length entries instead of silently skipping them - Fix self-assignment and memory safety in HITLS_X509_SetNameList - Propagate TLS security level to X509 verification secbits check via SetAuthLevel Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1390
1 个月前
gen_certs.py
fix:clean sensitive information and fix some functions Cherry-picked from: https://gitcode.com/openHiTLS/openhitls/merge_requests/1401
1 个月前