Return unknown for un-issued certificates.#2

Open

vtsingaras wants to merge 20 commits intoopenca:masterfrom

vtsingaras:unknown-serial-status

Commits on Sep 19, 2014

Check if the request is about a certificate that we know about, else return UNKNOWN according to CA/B Forum guideline v1.1.9.
Vyronas Tsingaras
committed

Commits on Oct 16, 2014

Normalize a pclose to fclose and change the response for an unknown serial to PKI_X509_OCSP_RESP_STATUS_UNAUTHORIZED.
Vyronas Tsingaras
committed
Fix incompatible pointer type warning and enhance the comments a bit. This is the last commit for this branch.
Vyronas Tsingaras
committed
Add logging for the serial in question and fix potential null pointer dereference.
Vyronas Tsingaras
committed
Check if serial was parsed correctly to prevent null pointer dereference; index.txt is potentially untrusted.
Vyronas Tsingaras
committed

Commits on Oct 19, 2014

Add error handling in index.txt DB parsing code.
Vyronas Tsingaras
committed
Change to parsing OpenSSL's index.txt CA Database and Add defensive code in parsing logic.
Vyronas Tsingaras
committed

Commits on Oct 21, 2014

Fixed typo in strcmp comparison.
Vyronas Tsingaras
committed
Changed the response to follow RFC6960 Section 2.2 to return EXTENDED REVOKED. You need the id-pkix-ocsp-extended-revoke updated libPKI for this. Check vtsingaras/libpki.
Vyronas Tsingaras
committed

Commits on Oct 23, 2014

Fix a small regression
Vyronas Tsingaras
committed
Fix call to PKI_TIME_set
Vyronas Tsingaras
committed
Fix null pointers logic.
Vyronas Tsingaras
committed
Fix typos.
Vyronas Tsingaras
committed
Fix stupid strlen off by one bug.
Vyronas Tsingaras
committed
Rework the revocation time setting code.
Vyronas Tsingaras
committed
Add serials timeout option.
Vyronas Tsingaras
committed
Add a little extra logging.
Vyronas Tsingaras
committed

Commits on Nov 6, 2014

Fix reentrancy issue in serials update block.
Vyronas Tsingaras
committed
Fix missing semicolon.
Vyronas Tsingaras
committed
Fix missing unlock if serials where updated already.
Vyronas Tsingaras
committed