Commit Graph

140 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
38c844cbaa return instad of break out to return
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24916 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-03-22 17:22:50 +00:00
Love Hörnquist Åstrand
ff5dab4f4a remove rcsid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24795 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-22 23:28:18 +00:00
Love Hörnquist Åstrand
8c452e59ba doxygen
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24701 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-14 20:13:38 +00:00
Love Hörnquist Åstrand
ad7bb6ffad pass hx509_context to the matching function
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24618 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-02-04 22:10:52 +00:00
Love Hörnquist Åstrand
4b553afa07 Skip the leaf certificate HX509_VERIFY_CTX_F_NO_BEST_BEFORE_CHECK check for now
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24254 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:44:19 +00:00
Love Hörnquist Åstrand
3ee9a138f6 add hx509_verify_ctx_f_allow_best_before_signature_algs
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24253 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:44:10 +00:00
Love Hörnquist Åstrand
98d48f25d7 use _hx509_signature_best_before
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24252 ec53bebd-3082-4978-b11e-865c3cabbd6b
2009-01-11 21:44:00 +00:00
Love Hörnquist Åstrand
174cae0ba1 better error message
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24051 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-11-23 22:05:46 +00:00
Love Hörnquist Åstrand
b4539ac324 better error checks
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24050 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-11-23 22:05:36 +00:00
Love Hörnquist Åstrand
de3c767d3a allow testing on sha1 hash in cert queries
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24049 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-11-23 22:05:26 +00:00
Love Hörnquist Åstrand
6937d41a02 remove trailing whitespace
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23815 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 09:21:03 +00:00
Love Hörnquist Åstrand
e172367898 switch to utf8 encoding of all files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23814 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-09-13 08:53:55 +00:00
Love Hörnquist Åstrand
fa8b905e46 close-on-exec
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23457 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-07-27 12:12:56 +00:00
Love Hörnquist Åstrand
b1f885befe use rk_undumpdata, spelling
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23413 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-07-26 18:34:53 +00:00
Love Hörnquist Åstrand
ad1190f74d add _hx509_verify_get_time
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23266 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-06-23 03:23:26 +00:00
Love Hörnquist Åstrand
5f7508dfc1 Use subject name as friendly name if there is no friendly name for certificate.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@23072 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-04-23 11:11:20 +00:00
Love Hörnquist Åstrand
00f8b507cb rename to be more consistent, export for teting
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22679 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-14 14:52:48 +00:00
Love Hörnquist Åstrand
7776ed30a9 Add language to support querying certificates to find a match. Support constructs like "1.3.6.1.5.2.3.5" IN %{certificate.eku} AND %{certificate.subject} TAILMATCH "C=SE"".
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22677 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-03-13 17:35:49 +00:00
Love Hörnquist Åstrand
8b9c6c4121 Use ldap-prep (with libwind) to compare names
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22583 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-02-11 20:46:21 +00:00
Love Hörnquist Åstrand
b5cdbe6fa5 (hx509_query_match_eku): update to support the NULL eku (reset),
clearify the old behaivor with regards repetitive calls.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22539 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-27 13:15:07 +00:00
Love Hörnquist Åstrand
0ff6dbc8bb Add matching on EKU, validate EKUs, add hxtool matching glue, add check. Adapted from pach from Tim Miller of Mitre
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22538 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-27 13:05:47 +00:00
Love Hörnquist Åstrand
b012ef1902 Spelling.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22450 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-15 19:39:14 +00:00
Love Hörnquist Åstrand
5e11811360 Add hx509_cert_get_SPKI_AlgorithmIdentifier, remove unused stuff, add hx509_context to some functions.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22449 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-15 19:38:09 +00:00
Love Hörnquist Åstrand
c9f443454e Add a PKCS11 provider supporting signing and verifing sigatures.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22435 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-14 20:53:56 +00:00
Love Hörnquist Åstrand
8fa8981654 More documentation.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22430 ec53bebd-3082-4978-b11e-865c3cabbd6b
2008-01-13 14:02:58 +00:00
Love Hörnquist Åstrand
5e7f1ac78f add hx509_xfree
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22346 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-26 19:14:33 +00:00
Love Hörnquist Åstrand
b3efcbda59 more documentation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22327 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-15 04:49:37 +00:00
Love Hörnquist Åstrand
d651f2187d More documentation
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22275 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-11 11:02:11 +00:00
Love Hörnquist Åstrand
3d4ced794a handle refcount on NULL
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22265 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-09 20:49:31 +00:00
Love Hörnquist Åstrand
4c2829cc01 document flags
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22239 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-08 22:48:14 +00:00
Love Hörnquist Åstrand
f431301de7 Move HX509_VHN_F_ALLOW_NO_MATCH to hx509.h
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22238 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-08 22:43:46 +00:00
Love Hörnquist Åstrand
b32b8bf381 make work the doxygen.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22219 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-08 07:57:11 +00:00
Love Hörnquist Åstrand
c971923d5f Add doxygen.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22215 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-12-08 07:38:32 +00:00
Love Hörnquist Åstrand
5fed824f37 its vs it\'s etc. From Bjorn Sandell
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@22071 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-11-14 20:04:50 +00:00
Love Hörnquist Åstrand
e12f8a96f8 match rfc822 contrains better, provide better error strings.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21899 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-08-09 14:05:47 +00:00
Love Hörnquist Åstrand
93707ec4e3 "self-signed doesn't count" doesn't apply to trust anchor certificate.
make trust anchor check consistant.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21869 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-08-08 11:52:52 +00:00
Love Hörnquist Åstrand
0836763de3 Fix NC, comment on how to use _hx509_check_key_usage.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21860 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-08-08 10:25:18 +00:00
Love Hörnquist Åstrand
72ed17d841 Rename proxyCertInfo oid.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21380 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-28 07:38:38 +00:00
Love Hörnquist Åstrand
311d4992f2 Match is first component is in a CN=.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21294 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-25 14:37:15 +00:00
Love Hörnquist Åstrand
9341a7ec42 Verify hostname and max-depth.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21275 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-25 04:50:10 +00:00
Love Hörnquist Åstrand
0d64623642 (match_general_name): more strict rfc822Name matching.
(hx509_verify_hostname): add hostname type for matching.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21265 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-24 19:20:11 +00:00
Love Hörnquist Åstrand
3be06f138f Provide __attribute__ for _hx509_abort.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21150 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-18 21:51:52 +00:00
Love Hörnquist Åstrand
e051a8a3c4 Don't expose freed pointer.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21136 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-18 21:13:27 +00:00
Love Hörnquist Åstrand
f622a16e97 Add hx509_cert_init_data and use everywhere
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21085 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-13 06:39:53 +00:00
Love Hörnquist Åstrand
22eaa9a658 Fix logic for allow_default_trust_anchors
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21069 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 21:04:32 +00:00
Love Hörnquist Åstrand
28ec0adc8b Change logic for default trust anchors, make it be either default
trust anchor, the user supplied, or non at all.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21066 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 19:29:56 +00:00
Love Hörnquist Åstrand
8a865fee2e Read in and use default trust anchors if they exists.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20915 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:56 +00:00
Love Hörnquist Åstrand
b3c3aabd9f Register NULL and KEYCHAIN.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20902 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:14:53 +00:00
Love Hörnquist Åstrand
b96343ee7b Reset name before parsing it.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20884 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 21:12:38 +00:00
Love Hörnquist Åstrand
eb75f79fe2 (hx509_context_free): free querystat
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20824 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-03 05:01:52 +00:00