Commit Graph

1887 Commits

Author SHA1 Message Date
Love Hörnquist Åstrand
7a61e0a75f Implement trust anchor support with SecTrustCopyAnchorCertificates.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21082 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-13 02:09:26 +00:00
Love Hörnquist Åstrand
08ae4bf7bd x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21081 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-13 01:06:49 +00:00
Love Hörnquist Åstrand
cadd30c594 Set ref to 1 for the new object.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21080 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-13 01:06:25 +00:00
Love Hörnquist Åstrand
b966050470 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21070 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 21:12:03 +00:00
Love Hörnquist Åstrand
22eaa9a658 Fix logic for allow_default_trust_anchors
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21069 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 21:04:32 +00:00
Love Hörnquist Åstrand
299c044597 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21068 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 19:31:08 +00:00
Love Hörnquist Åstrand
144b8c583c Add refcounting to keystores.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21067 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 19:30:33 +00:00
Love Hörnquist Åstrand
28ec0adc8b Change logic for default trust anchors, make it be either default
trust anchor, the user supplied, or non at all.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21066 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-12 19:29:56 +00:00
Love Hörnquist Åstrand
cc4333b758 remove cvs ignore files
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21026 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-09 03:09:59 +00:00
Love Hörnquist Åstrand
cfa7d1eeaf x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21014 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-08 05:08:46 +00:00
Love Hörnquist Åstrand
75eba630b9 Add data/j.pem.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21013 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-08 05:05:24 +00:00
Love Hörnquist Åstrand
db2a2a595f Add test_windows.in.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21012 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-08 04:12:50 +00:00
Love Hörnquist Åstrand
9df9f6a9da revert 21003
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21004 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-08 01:53:10 +00:00
Love Hörnquist Åstrand
12df8538af use "roken.h" consitantly
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@21003 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-08 01:42:05 +00:00
Love Hörnquist Åstrand
b4450cd442 Update.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20977 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 07:24:41 +00:00
Love Hörnquist Åstrand
d4871f592d Update.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20976 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-07 07:23:09 +00:00
Love Hörnquist Åstrand
32ba8c49ad x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20946 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:17:27 +00:00
Love Hörnquist Åstrand
8456183c48 rename functions, leaks less memory and more paranoia.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20945 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 22:17:17 +00:00
Love Hörnquist Åstrand
e133dc6209 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20941 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:57:18 +00:00
Love Hörnquist Åstrand
9e01858ba1 Test cms peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20940 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:56:54 +00:00
Love Hörnquist Åstrand
8d185f280c (rsa_create_signature): make oid_id_pkcs1_rsaEncryption mean
rsa-with-sha1 but oid oid_id_pkcs1_rsaEncryption in algorithm field.
XXX should probably use another algorithmIdentifier for this.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20939 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:53:02 +00:00
Love Hörnquist Åstrand
c8cb0753ee Make free function return void.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20938 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:51:34 +00:00
Love Hörnquist Åstrand
a93b07021f (hx509_cms_create_signed_1): Use hx509_peer_info to select the
signature algorithm too.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20937 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:50:55 +00:00
Love Hörnquist Åstrand
5c70b04159 Merge init of hx509_peer_info structure and allow it for cms-create-sd.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20936 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:49:14 +00:00
Love Hörnquist Åstrand
9d1bb9e015 Add cms-create-sd --peer-alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20935 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 20:21:54 +00:00
Love Hörnquist Åstrand
af12b5af0e Use _hx509_crypto_default_sig_alg.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20934 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 15:30:02 +00:00
Love Hörnquist Åstrand
887517a8aa Create crl, because everyone needs one.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20933 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 05:00:32 +00:00
Love Hörnquist Åstrand
70722e64f8 add wcrl.crl
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20932 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 04:47:02 +00:00
Love Hörnquist Åstrand
689c6d559a x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20931 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:24:35 +00:00
Love Hörnquist Åstrand
5652b93c15 Disable KEYCHAIN for now, its slow.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20930 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-06 00:23:42 +00:00
Love Hörnquist Åstrand
3fdc9f718e x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20928 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:27:59 +00:00
Love Hörnquist Åstrand
dbb87065cd When we are not using pkcs7-data, avoid seing signedAttributes since
some clients get upset by that (pkcs7 based or just plain broken).


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20926 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 17:21:58 +00:00
Love Hörnquist Åstrand
7e3fbc9232 Provide rsa signatures.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20925 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 15:48:07 +00:00
Love Hörnquist Åstrand
349077b505 x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20924 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:59 +00:00
Love Hörnquist Åstrand
624dc60c1b Limit the searches to the selected keychain.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20923 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:17:44 +00:00
Love Hörnquist Åstrand
7ba3c7c11e include -framework Security specific header files after #ifdef
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20922 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 06:05:24 +00:00
Love Hörnquist Åstrand
b14a49e02e Find and attach private key (does not provide operations yet though).
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20921 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:54:19 +00:00
Love Hörnquist Åstrand
0800216d7b Prefix rsa method with p11_
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20920 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 05:47:06 +00:00
Love Hörnquist Åstrand
96d0020bca x
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20918 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:17:08 +00:00
Love Hörnquist Åstrand
a9130ec025 Allow opening a specific chain, making "system" special and be the
system X509Anchors file. By not specifing any keychain ("KEYCHAIN:"),
all keychains are probed.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20917 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 04:16:46 +00:00
Love Hörnquist Åstrand
a5c1aa04ce (verify): Friendlier error message.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20916 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:59:36 +00:00
Love Hörnquist Åstrand
8a865fee2e Read in and use default trust anchors if they exists.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20915 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:56 +00:00
Love Hörnquist Åstrand
31ac88517f Add concept of default_trust_anchors.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20914 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:58:24 +00:00
Love Hörnquist Åstrand
90318d31b3 Remove err(), remove extra empty comment, fix _iter function.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20913 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:57:52 +00:00
Love Hörnquist Åstrand
7761ecce3f (hx509_get_error_string): if the error code is not the one we expect,
punt and use the default com_err/strerror string instead.


git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20912 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:53:52 +00:00
Love Hörnquist Åstrand
43ba803237 (hx509_certs_merge): its ok to merge in the NULL set of certs.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20911 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:41:17 +00:00
Love Hörnquist Åstrand
4b729dfdd7 Fix status string.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20910 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:27:41 +00:00
Love Hörnquist Åstrand
340dff70cb (store_func): free whole CertBag, not just the data part.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20909 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 03:09:13 +00:00
Love Hörnquist Åstrand
9e262359f2 Check that the self-signed cert is really self-signed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20908 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 02:59:33 +00:00
Love Hörnquist Åstrand
6623ac6441 Use selfsigned for CRL DP whine, tell if its a self-signed.
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@20907 ec53bebd-3082-4978-b11e-865c3cabbd6b
2007-06-05 02:28:18 +00:00