CVSROOT: /cvs Module name: src Changes by: b...@cvs.openbsd.org 2021/11/04 17:52:34
Modified files: lib/libcrypto/x509: x509_cmp.c x509_internal.h x509_lcl.h x509_purp.c x509_verify.c x509_verify.h x509_vfy.c lib/libcrypto/ts: ts_rsp_sign.c ts_rsp_verify.c Log message: Cache sha512 hash and parsed not_before and not_after with X509 cert. Replace sha1 hash use with sha512 for certificate comparisons internal to the library. use the cached sha512 for the validator's verification cache. Reduces our recomputation of hashes, and heavy use of time1 time conversion functions noticed bu claudio@ in rpki client. ok jsing@ tb@