745eeb1252
Ensure DER form of hxtool ca random serial numbers
2015-03-05 03:57:30 -05:00
b7ca6bbc7a
Revert "make sure that serial number is valid DER when done ..."
...
A simpler fix will be the next commit.
This reverts commit 35add96d37
2015-03-05 03:56:04 -05:00
35add96d37
make sure that serial number is valid DER when done (found by Viktor Dukhovni)
2015-03-05 00:26:03 -08:00
70e43e9808
Fix some typos.
2014-04-25 02:42:17 +02:00
c69c4634ad
allow setting signature algorithm
2014-02-12 09:46:02 -08:00
029de6cfa4
pass back an heim_error from hx509_cert_init
2012-10-07 06:33:13 -07:00
cc47c8fa7b
Turn on -Wextra -Wno-sign-compare -Wno-unused-paramter and fix issues.
...
We turn on a few extra warnings and fix the fallout that occurs
when building with --enable-developer. Note that we get different
warnings on different machines and so this will be a work in
progress. So far, we have built on NetBSD/amd64 5.99.64 (which
uses gcc 4.5.3) and Ubuntu 10.04.3 LTS (which uses gcc 4.4.3).
Notably, we fixed
1. a lot of missing structure initialisers,
2. unchecked return values for functions that glibc
marks as __attribute__((warn-unused-result)),
3. made minor modifications to slc and asn1_compile
which can generate code which generates warnings,
and
4. a few stragglers here and there.
We turned off the extended warnings for many programs in appl/ as
they are nearing the end of their useful lifetime, e.g. rsh, rcp,
popper, ftp and telnet.
Interestingly, glibc's strncmp() macro needed to be worked around
whereas the function calls did not.
We have not yet tried this on 32 bit platforms, so there will be
a few more warnings when we do.
2012-02-20 19:45:41 +00:00
0879b9831a
remove trailing whitespace
2011-05-21 11:57:31 -07:00
f5f9014c90
Warning fixes from Christos Zoulas
...
- shadowed variables
- signed/unsigned confusion
- const lossage
- incomplete structure initializations
- unused code
2011-04-29 20:25:05 -07:00
3e84bcb25a
make setting issuerUniqueID and subjectUniqueID independant
2010-08-10 09:22:35 -07:00
56f4eb92cb
Allow setting the issuerUniqueID and subjectUniqueID
2010-08-10 08:01:24 -07:00
fa4c84e6d6
make printablestring and ia5string octetstrings
2010-08-08 15:51:33 -07:00
03cb3aa56b
use EVP_MD_CTX_create
2009-08-20 17:13:09 -07:00
a1f6faed25
switch to use EVP interface instead of old MDX_ style interface
2009-08-17 10:23:01 +02:00
becda09568
Use OID variable instead of function.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25242 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-28 01:19:03 +00:00
0da1e21fdb
use right variable
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@25190 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-05-06 19:03:24 +00:00
ff5dab4f4a
remove rcsid
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24795 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-22 23:28:18 +00:00
6937d41a02
remove trailing whitespace
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
e172367898
switch to utf8 encoding of all files
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
319e7f1d57
BasicConstraints.pathLenConstraint unsigned int.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22995 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-15 19:31:29 +00:00
c6748a850d
adapt to new hx509_cert_get_SPKI
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22456 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-15 20:22:53 +00:00
3e6be6e745
doxygen.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22340 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-26 17:22:07 +00:00
2d1a4b07e6
doxygen
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22335 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-17 06:57:48 +00:00
615e4e9fc4
Rename proxyCertInfo oid.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21379 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-28 07:38:17 +00:00
6ab9862950
Add cRLSign to CA certs.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20904 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 01:58:45 +00:00
9c322b0357
Reset name before parsing it.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20885 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 21:13:14 +00:00
949dfd44f0
Use default AlgorithmIdentifier.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20792 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-02 02:31:18 +00:00
9bfadd6bbb
(hx509_ca_tbs_add_crl_dp_uri): plug memory leak
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20769 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-01 11:33:48 +00:00
26d6112116
Add glue for adding CRL dps.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20731 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-05-31 15:32:30 +00:00
db080434b8
Add hx509_ca_tbs_add_san_ms_upn and refactor code.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20720 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-05-31 02:43:58 +00:00
659e8dd094
Add hx509_ca_tbs_set_domaincontroller.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20712 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-05-30 23:02:53 +00:00
9f58a01b0f
(get_AuthorityKeyIdentifier): leak less memory
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20400 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-04-18 14:06:28 +00:00
adc1d7286e
Disable CRLDistributionPoints for now, its IMPLICIT code in the asn1 parser.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20189 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-02-05 12:17:18 +00:00
4156103f1a
Code to set CRLDistributionPoints in certificates.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20102 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-31 15:37:05 +00:00
5820ca3c54
switch to sha256 as default digest for signinging
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20017 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-20 23:58:14 +00:00
9a40fcaf39
(hx509_ca_tbs_subject_expand): new function.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19905 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-14 22:20:17 +00:00
aed12a2d7c
Add certificate template processing. Fix return messages from
...
hx509_ca_tbs_add_eku.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19894 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-14 18:15:26 +00:00
e3460e2055
update (c)
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19890 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-13 12:41:11 +00:00
ab5ec24f71
(hx509_ca_tbs_add_eku): filter out dups
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19887 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-13 12:29:06 +00:00
63d4fbb416
Don't issue certs with subject DN that is NULL and have no SANs
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19876 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-12 22:46:52 +00:00
68f12e3ffb
(hx509_ca_tbs_add_san_jid): Allow adding id-pkix-on-xmppAddr OtherName.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19861 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-12 08:44:18 +00:00
72a7e4b1cb
Make basicConstraints critical if this is a CA.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19819 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-10 22:07:07 +00:00
dfcfc51c66
add hx509_ca_tbs_set_serialnumber
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19729 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-05 18:40:46 +00:00
33ba9fdf6d
(hx509_ca_tbs_set_proxy): allow negative pathLenConstraint to signal no limit
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19681 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-01-04 11:31:07 +00:00
7cabe3475e
allow setting notBefore and notAfter.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19603 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-31 01:08:56 +00:00
99f8bea461
Allow generation of proxy certificates, always include
...
BasicConstraints, fix error codes.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19600 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-30 23:07:46 +00:00
eaaff166a5
Add bits to allow issuing CA certificates.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19591 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-30 17:49:35 +00:00
2719a5f038
Add Subject Key Identifier.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19589 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-30 16:10:19 +00:00
0c6f8e6994
Add Add Authority Key Identifier.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19588 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-30 15:58:13 +00:00
2ad9f89060
Add dnsname and rfc822 SANs.
...
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@19585 ec53bebd-3082-4978-b11e-865c3cabbd6b
2006-12-30 15:03:10 +00:00
Viktor Dukhovni