Commit Graph

20242 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
6f787893cd (_kdc_pk_rd_padata): accept both pkcs-7 and pkauthdata as the signeddata oid
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20943 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:14:36 +00:00
Love Hörnquist Åstrand
3d7fc2b1e7 (_kdc_pk_rd_padata): Try to log what went wrong.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20942 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:03:20 +00:00
Love Hörnquist Åstrand
e133dc6209 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20941 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:57:18 +00:00
Love Hörnquist Åstrand
9e01858ba1 Test cms peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20940 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:56:54 +00:00
Love Hörnquist Åstrand
8d185f280c (rsa_create_signature): make oid_id_pkcs1_rsaEncryption mean
rsa-with-sha1 but oid oid_id_pkcs1_rsaEncryption in algorithm field.
XXX should probably use another algorithmIdentifier for this.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20939 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:53:02 +00:00
Love Hörnquist Åstrand
c8cb0753ee Make free function return void.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20938 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:51:34 +00:00
Love Hörnquist Åstrand
a93b07021f (hx509_cms_create_signed_1): Use hx509_peer_info to select the
signature algorithm too.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20937 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:50:55 +00:00
Love Hörnquist Åstrand
5c70b04159 Merge init of hx509_peer_info structure and allow it for cms-create-sd.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20936 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:49:14 +00:00
Love Hörnquist Åstrand
9d1bb9e015 Add cms-create-sd --peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20935 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:21:54 +00:00
Love Hörnquist Åstrand
af12b5af0e Use _hx509_crypto_default_sig_alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20934 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 15:30:02 +00:00
Love Hörnquist Åstrand
887517a8aa Create crl, because everyone needs one.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20933 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 05:00:32 +00:00
Love Hörnquist Åstrand
70722e64f8 add wcrl.crl
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20932 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 04:47:02 +00:00
Love Hörnquist Åstrand
689c6d559a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20931 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:24:35 +00:00
Love Hörnquist Åstrand
5652b93c15 Disable KEYCHAIN for now, its slow.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20930 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:23:42 +00:00
Love Hörnquist Åstrand
f3b2b8b19c Make sure the gethostname() returned string is NUL terminated.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20929 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 21:19:22 +00:00
Love Hörnquist Åstrand
3fdc9f718e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20928 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:27:59 +00:00
Love Hörnquist Åstrand
a7169a17a6 Use oid_id_pkcs7_data for pkinit-9 encKey reply to match windows DC
behavior better.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20927 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:23:44 +00:00
Love Hörnquist Åstrand
dbb87065cd When we are not using pkcs7-data, avoid seing signedAttributes since
some clients get upset by that (pkcs7 based or just plain broken).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20926 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:21:58 +00:00
Love Hörnquist Åstrand
7e3fbc9232 Provide rsa signatures.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20925 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 15:48:07 +00:00
Love Hörnquist Åstrand
349077b505 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20924 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:59 +00:00
Love Hörnquist Åstrand
624dc60c1b Limit the searches to the selected keychain.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20923 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:44 +00:00
Love Hörnquist Åstrand
7ba3c7c11e include -framework Security specific header files after #ifdef
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20922 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:05:24 +00:00
Love Hörnquist Åstrand
b14a49e02e Find and attach private key (does not provide operations yet though).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20921 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:54:19 +00:00
Love Hörnquist Åstrand
0800216d7b Prefix rsa method with p11_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20920 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:47:06 +00:00
Love Hörnquist Åstrand
902605872f x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20919 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:20:55 +00:00
Love Hörnquist Åstrand
96d0020bca x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20918 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:17:08 +00:00
Love Hörnquist Åstrand
a9130ec025 Allow opening a specific chain, making "system" special and be the
system X509Anchors file. By not specifing any keychain ("KEYCHAIN:"),
all keychains are probed.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20917 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:16:46 +00:00
Love Hörnquist Åstrand
a5c1aa04ce (verify): Friendlier error message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20916 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:59:36 +00:00
Love Hörnquist Åstrand
8a865fee2e Read in and use default trust anchors if they exists.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20915 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:56 +00:00
Love Hörnquist Åstrand
31ac88517f Add concept of default_trust_anchors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20914 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:24 +00:00
Love Hörnquist Åstrand
90318d31b3 Remove err(), remove extra empty comment, fix _iter function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20913 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:57:52 +00:00
Love Hörnquist Åstrand
7761ecce3f (hx509_get_error_string): if the error code is not the one we expect,
punt and use the default com_err/strerror string instead.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:53:52 +00:00
Love Hörnquist Åstrand
43ba803237 (hx509_certs_merge): its ok to merge in the NULL set of certs.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:41:17 +00:00
Love Hörnquist Åstrand
4b729dfdd7 Fix status string.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20910 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:27:41 +00:00
Love Hörnquist Åstrand
340dff70cb (store_func): free whole CertBag, not just the data part.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20909 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:09:13 +00:00
Love Hörnquist Åstrand
9e262359f2 Check that the self-signed cert is really self-signed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20908 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 02:59:33 +00:00
Love Hörnquist Åstrand
6623ac6441 Use selfsigned for CRL DP whine, tell if its a self-signed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20907 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 02:28:18 +00:00
Love Hörnquist Åstrand
887bb5f354 Whine if its a non CA/proxy and doesn't have CRL DP.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20906 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 02:23:45 +00:00
Love Hörnquist Åstrand
baee263bda Default path-length to -1.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20905 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 01:59:19 +00:00
Love Hörnquist Åstrand
6ab9862950 Add cRLSign to CA certs.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20904 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 01:58:45 +00:00
Love Hörnquist Åstrand
337ff1cf7f Set subject DN to Windows-CA for the ca cert.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20903 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 01:23:57 +00:00
Love Hörnquist Åstrand
b3c3aabd9f Register NULL and KEYCHAIN.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20902 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:14:53 +00:00
Love Hörnquist Åstrand
934a23b023 register the NULL keystore.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20901 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:14:08 +00:00
Love Hörnquist Åstrand
b13087f976 Add ks_keychain.c and related libs.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20900 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:13:32 +00:00
Love Hörnquist Åstrand
32ef7d06b5 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20899 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:08:33 +00:00
Love Hörnquist Åstrand
98a0fa6017 Print certificate with utf8.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20898 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:07:46 +00:00
Love Hörnquist Åstrand
ab50fce383 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20897 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:06:06 +00:00
Love Hörnquist Åstrand
852d5a2392 Leak less memory.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20896 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:05:31 +00:00
Love Hörnquist Åstrand
789e4f5ac7 Leak less memory.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20895 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:04:48 +00:00
Love Hörnquist Åstrand
f4600fe0a5 Leak less memory, use functions that does same but more.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20894 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-04 23:03:10 +00:00