55 Commits

Author SHA1 Message Date
Juan Lang
55aae25d35 winhttp: Verify revocation status of certificate chain. 2010-11-16 11:44:08 +01:00
Andrew Nguyen
ccc2f5abae winhttp: Fix misleading OpenSSL version number check. 2010-10-25 14:33:20 +02:00
Andrew Nguyen
0c7bd62df2 winhttp: Fix const qualifier warning for OpenSSL 1.0.0. 2010-10-25 14:33:10 +02:00
Juan Lang
938767cae3 winhttp: Let CertVerifyCertificateChainPolicy handle certain security flags. 2010-10-04 11:04:04 +02:00
Juan Lang
4127062a3e winhttp: Support querying the cipher strength of an SSL connection. 2010-10-01 13:43:04 +02:00
Juan Lang
ee2e9cc339 winhttp: Verify SSL policy of chains whose errors were ignored. 2010-10-01 13:42:49 +02:00
Juan Lang
756c171659 winhttp: Honor more SECURITY_FLAG_IGNORE flags. 2010-10-01 13:42:45 +02:00
Juan Lang
5566d424f1 winhttp: Don't make use of OpenSSL's security checks, as crypt32 also verifies certificate chain. 2010-10-01 13:42:40 +02:00
Juan Lang
10ef345307 winhttp: Remove unused function pointer. 2010-10-01 13:42:34 +02:00
Uwe Bonnes
53391a3445 wininet: Add const qualifier after openssl version check. 2010-08-02 17:39:20 +02:00
Hans Leidekker
5fc17a2800 winhttp: Handle errors from SSL_read. 2010-07-22 12:52:39 +02:00
Juan Lang
b659dee999 winhttp: Honor security flags when verifying a certificate. 2010-05-18 08:48:35 +02:00
Juan Lang
2a569a9e89 winhttp: Store a pointer to the netconn_t in the SSL context. 2010-05-18 08:48:29 +02:00
Michael Stefaniuc
eb558c4403 winhttp: Remove redundant "not 0" test of argument len. 2010-05-17 12:42:33 +02:00
Hans Leidekker
b467efb5c8 winhttp: Add support for resolve timeouts. 2010-02-22 13:15:56 +01:00
Alexandre Julliard
07062b0340 winhttp: Fix pointer cast warnings on 64-bit. 2009-12-24 12:15:40 +01:00
Juan Lang
888d1a2323 winhttp: Set error and fail if a secure connections certificate couldn't be verified. 2009-12-15 11:44:39 +01:00
Juan Lang
1308c4287f winhttp: Return error directly from netconn_verify_cert. 2009-12-15 11:44:28 +01:00
Juan Lang
72025026db winhttp: Don't call a function whose result is never used. 2009-12-14 12:04:03 +01:00
Juan Lang
9352509eb2 winhttp: Free OpenSSL error strings at unload. 2009-12-11 17:47:30 +01:00
Marcus Meissner
298051ab37 winhttp: Check for endCert being NULL (Coverity). 2009-12-08 12:37:10 +01:00
Francois Gouget
0b9a4ae341 winhttp: Fix compilation on systems that don't support nameless unions. 2009-12-07 14:18:24 +01:00
Juan Lang
a5facc9bda winhttp: Use sk_ functions rather than accessing an OpenSSL stack type directly. 2009-12-07 09:49:07 +01:00
Huw Davies
24b437942e winhttp: Load X509_STORE_CTX_get_ex_data from libcrypto not libssl. 2009-12-07 09:49:07 +01:00
Juan Lang
82d07c4051 winhttp: Check the certificate in an https connection using the crypto api. 2009-12-04 12:04:59 +01:00
Juan Lang
48a7580135 winhttp: Set callback to verify hostname with peer's certificate. 2009-12-04 12:03:55 +01:00
Juan Lang
be8f2ae98e winhttp: Store hostname for secure connection in its SSL context. 2009-12-04 12:03:47 +01:00
Juan Lang
a33c4bfd0b winhttp: Pass hostname to netconn_secure_connect. 2009-12-04 12:02:50 +01:00
Hans Leidekker
629fd8fcbc winhttp: Clean up locks after closing libssl and libcrypto.
SSL_CTX_free() triggers a call to the locking callback.
Found by valgrind.
2009-10-27 10:53:28 +01:00
Hans Leidekker
6732d5dfd7 winhttp: Correct SSL lock size and make sure we free as many as we allocated.
Found by valgrind.
2009-10-21 17:04:42 +02:00
Juan Lang
2f09686f6b winhttp: Set callbacks needed by OpenSSL for multithreaded use. 2009-10-08 12:03:07 +02:00
Juan Lang
d7d8a0eec4 winhttp: Unload OpenSSL when unloading winhttp. 2009-10-05 13:23:17 +02:00
Juan Lang
349e825080 winhttp: Protect OpenSSL initialization with critical section. 2009-10-05 13:23:09 +02:00
Juan Lang
016d7c3c0a winhttp: Move initialization of SSL_CTX to library initialization time. 2009-10-05 13:22:59 +02:00
Juan Lang
68039dcaff winhttp: Implement connect timeout. 2009-07-24 11:09:46 +02:00
Juan Lang
336ee2861d winhttp: Remove no-longer-used #defines. 2009-07-22 12:04:53 +02:00
Juan Lang
1229aa723a winhttp: Remove calls to SSL_CTX_set_timeout, as they affect the session's lifetime, not the read timeout. 2009-07-22 12:04:46 +02:00
Juan Lang
2418e82810 winhttp: Use connection's timeout rather than default timeout when reading a line. 2009-07-22 12:04:37 +02:00
Juan Lang
3d9809b129 winhttp: Support IPv6 in netconn_resolve. 2009-07-09 12:01:16 +02:00
Juan Lang
831c87c141 winhttp: Simplify netconn_resolve when using getaddrinfo. 2009-07-09 11:58:23 +02:00
Juan Lang
cc619639d2 winhttp: Change type of netconn_resolve from struct sockaddr_in * to struct sockaddr *. 2009-07-09 11:53:16 +02:00
Hans Leidekker
a7b70911b3 winhttp, wininet: Load i2d_X509 from libcrypto.so. 2009-03-05 13:26:11 +01:00
Michael Stefaniuc
7dbba8c335 winhttp: Remove superfluous pointer casts. 2009-02-05 13:15:37 +01:00
Paul TBBle Hampson
83ea32ea02 winhttp: Fix resolution-failure TRACE in netconn_resolve to use input WCHAR* rather than already-freed CHAR*. 2008-12-31 13:18:52 +01:00
Francois Gouget
c1b2008d0c wininet & winhttp: Fix a pointer type mismatch warning when compiling on Windows. On Windows setsockopt() expects a char* while on Unix it accepts anything. 2008-12-08 12:05:57 +01:00
Rob Shearman
a14d34b2f6 winhttp: Fix compilation with MinGW/MSVC. 2008-10-01 11:43:19 -05:00
Hans Leidekker
01e7d12848 winhttp: WinHttpQueryDataAvailable should do a blocking read if more data is expected.
Spotted by Henri Verbeet.
2008-09-09 11:02:04 +02:00
Hans Leidekker
2fb746783f winhttp: Use a process global SSL context instead of per connection. 2008-09-08 12:47:21 +02:00
Hans Leidekker
64a7d23565 winhttp: Implement WINHTTP_OPTION_SERVER_CERT_CONTEXT. 2008-09-08 12:47:21 +02:00
Hans Leidekker
20d06b2a4c winhttp: Allow reusing a secure connection. 2008-09-03 14:21:44 +02:00