Commit Graph

  • c1e7cda8e8 add --logfile option, use htons() on port number Love Hörnquist Åstrand 2006-09-19 10:20:50 +00:00
  • 99a2e32cad Log port in connection message. Love Hörnquist Åstrand 2006-09-19 10:20:08 +00:00
  • 62e15d7f6b Add documentation for -e, require encryption. Love Hörnquist Åstrand 2006-09-19 08:27:40 +00:00
  • b6e0a49796 Add require_encryption. Love Hörnquist Åstrand 2006-09-19 08:26:50 +00:00
  • 4adf47957d Allow encryption to be required, wait to the client to turn it on, if failes, refuse the connection. Love Hörnquist Åstrand 2006-09-19 08:26:21 +00:00
  • ead5f1b7b6 If encryption is required, don't allow it to be turned off. Love Hörnquist Åstrand 2006-09-19 08:25:20 +00:00
  • fbfc689300 Make pk-init turned on by default. Love Hörnquist Åstrand 2006-09-19 05:36:53 +00:00
  • 63572569a2 x Love Hörnquist Åstrand 2006-09-19 05:18:25 +00:00
  • 7e16fd5b87 x Love Hörnquist Åstrand 2006-09-18 19:07:40 +00:00
  • 2ae2ee05a3 Build lib/hx509/{hx509-protos.h,hx509-private.h}. Love Hörnquist Åstrand 2006-09-18 19:07:27 +00:00
  • 2e9ce6d405 Add (c) Love Hörnquist Åstrand 2006-09-18 18:06:21 +00:00
  • 105c3d84b6 x Love Hörnquist Åstrand 2006-09-18 17:59:56 +00:00
  • 3a023829eb Test constrained delegation impersonation. Love Hörnquist Åstrand 2006-09-18 17:59:41 +00:00
  • c1c7757afe Add tool for printing tickets. Love Hörnquist Åstrand 2006-09-18 17:36:06 +00:00
  • cafd935d88 Check the adtkt in the constrained delegation case too. Love Hörnquist Åstrand 2006-09-18 17:30:19 +00:00
  • 467d6b124c x Love Hörnquist Åstrand 2006-09-16 18:29:50 +00:00
  • 960ba25de3 Change the password on krbtgt a couple of times to have a non boring kvno. Love Hörnquist Åstrand 2006-09-16 18:29:38 +00:00
  • 961332d213 x Love Hörnquist Åstrand 2006-09-16 17:33:53 +00:00
  • de2de1213c Add samba socket wrapper fragment. Love Hörnquist Åstrand 2006-09-16 17:33:07 +00:00
  • 6438583810 Add samba_SOCKET_WRAPPER fragment Love Hörnquist Åstrand 2006-09-16 17:31:39 +00:00
  • a10e7216d6 (sigterm): don't _exit, let loop() catch the signal instead. Love Hörnquist Åstrand 2006-09-16 17:28:05 +00:00
  • 094d84a5ca x Love Hörnquist Åstrand 2006-09-16 09:28:15 +00:00
  • 64bcdf0b5d Fixes from Björn Sandell. Love Hörnquist Åstrand 2006-09-16 09:27:28 +00:00
  • 364e63f12a Add commeted out test that exponent is > 3 Love Hörnquist Åstrand 2006-09-15 14:09:28 +00:00
  • e18663839d x Love Hörnquist Åstrand 2006-09-15 06:18:14 +00:00
  • 185e193235 Add "kafs" option. Love Hörnquist Åstrand 2006-09-15 06:17:50 +00:00
  • 1b8fc81fde yutaka test certs Love Hörnquist Åstrand 2006-09-15 06:07:55 +00:00
  • 8f46285916 Add test for yutaka certs. Love Hörnquist Åstrand 2006-09-15 06:00:11 +00:00
  • 6168bc80da x Love Hörnquist Åstrand 2006-09-15 05:59:46 +00:00
  • 41e00c0c70 Add a strict rfc3280 verification flag. rfc3280 requires certificates to have KeyUsage.keyCertSign if they are to be used for signing of certificates, but the step in the verifiation is optional. Love Hörnquist Åstrand 2006-09-15 05:59:35 +00:00
  • 697eae9c9d Improve printing and error reporting. Love Hörnquist Åstrand 2006-09-15 05:50:17 +00:00
  • d6ac5d5275 test bleichenbacher from eay Love Hörnquist Åstrand 2006-09-12 22:04:42 +00:00
  • 24ff7295c8 Make common function for all getarg_strings and hx509_certs_append commonly used. Love Hörnquist Åstrand 2006-09-12 20:08:42 +00:00
  • 62d57dc40e x Love Hörnquist Åstrand 2006-09-12 19:52:00 +00:00
  • 34ce1baf38 HX509_CMS_UE_DONT_REQUIRE_KU_ENCIPHERMENT is a negative flag, treat it was such. Love Hörnquist Åstrand 2006-09-12 19:22:53 +00:00
  • 08b43ec9ea x Love Hörnquist Åstrand 2006-09-12 18:25:46 +00:00
  • ee9b01aa50 By using full function calling conversion (*func) we avoid problem when close(fd) is overridden using a macro. Love Hörnquist Åstrand 2006-09-12 18:12:37 +00:00
  • 1eaf2446ed Make compile again. Love Hörnquist Åstrand 2006-09-12 17:35:33 +00:00
  • fc6f056629 Add socket-wrapper test Love Hörnquist Åstrand 2006-09-12 17:33:07 +00:00
  • 44c73244c3 By using full function calling conversion (*func) we avoid problem when close(fd) is overridden using a macro. Love Hörnquist Åstrand 2006-09-12 17:32:10 +00:00
  • ce1b1b08af Signing outgoing tickets. Love Hörnquist Åstrand 2006-09-11 13:39:48 +00:00
  • 2db346fb7d Add signing and checking of tickets to s4u2self works securely. Love Hörnquist Åstrand 2006-09-11 13:39:13 +00:00
  • d2e95a2867 x Love Hörnquist Åstrand 2006-09-11 13:38:29 +00:00
  • 3993e250af Add KRB5SignedPath and friends. Love Hörnquist Åstrand 2006-09-11 13:38:20 +00:00
  • 8d6e197003 Add keyusage for KRB5SignedPath. Love Hörnquist Åstrand 2006-09-11 13:32:57 +00:00
  • c2a3bce503 Add KRB5SignedPath and friends. Love Hörnquist Åstrand 2006-09-11 13:28:59 +00:00
  • c9f98b46b1 x Love Hörnquist Åstrand 2006-09-11 07:09:00 +00:00
  • 7c40efd741 x Love Hörnquist Åstrand 2006-09-11 06:43:11 +00:00
  • a688982129 Use the new add_GeneralNames function. Love Hörnquist Åstrand 2006-09-11 06:43:00 +00:00
  • a368903335 Add new sequence generation for GeneralNames. Love Hörnquist Åstrand 2006-09-11 06:40:54 +00:00
  • b226d0acf5 Adapt to new signature of hx509_cms_unenvelope. Love Hörnquist Åstrand 2006-09-11 06:38:36 +00:00
  • 15a66286ab Add HX509_CMS_UE_DONT_REQUIRE_KU_ENCIPHERMENT. Love Hörnquist Åstrand 2006-09-11 06:35:53 +00:00
  • 9358faef60 Allow passing in encryptedContent and flag. Add new flag HX509_CMS_UE_DONT_REQUIRE_KU_ENCIPHERMENT. Love Hörnquist Åstrand 2006-09-11 06:31:34 +00:00
  • b82929db43 x Love Hörnquist Åstrand 2006-09-09 13:39:44 +00:00
  • 0fbe98fc9c (pk_verify_host): set errorstrings in a sensable way Love Hörnquist Åstrand 2006-09-09 13:39:24 +00:00
  • 5675de7426 x Love Hörnquist Åstrand 2006-09-08 09:54:12 +00:00
  • dd04abbea7 cast void * to char * when using it for %s formating in printf. Love Hörnquist Åstrand 2006-09-08 09:54:01 +00:00
  • 2acf7df729 New function _hx509_Name_to_string. Love Hörnquist Åstrand 2006-09-08 09:52:39 +00:00
  • b67169a918 x Love Hörnquist Åstrand 2006-09-07 22:02:15 +00:00
  • d23cf3f57d Prevent a font generation warning, from Jason McIntyre. Love Hörnquist Åstrand 2006-09-07 22:01:43 +00:00
  • 0e9f9c8b5f x Love Hörnquist Åstrand 2006-09-07 12:20:54 +00:00
  • 6914282b1d (CMSVersion): rename versions from v0 to CMSVersion_v0, ... Love Hörnquist Åstrand 2006-09-07 12:20:42 +00:00
  • dcfd1554d2 x Love Hörnquist Åstrand 2006-09-07 10:58:26 +00:00
  • 39ca3ae4a5 Sprinkle error messages. Love Hörnquist Åstrand 2006-09-07 10:58:17 +00:00
  • 3a6a84147b x Love Hörnquist Åstrand 2006-09-07 10:44:31 +00:00
  • dbd04c392e Sprinkle even more error messages. Love Hörnquist Åstrand 2006-09-07 10:43:48 +00:00
  • bb0a57b254 Sprinkle some more error strings. Love Hörnquist Åstrand 2006-09-07 09:22:07 +00:00
  • 6e2407cfb9 (find_CMSIdentifier): only free string when we allocated one. Love Hörnquist Åstrand 2006-09-07 09:11:30 +00:00
  • a45b9ccd18 x Love Hörnquist Åstrand 2006-09-07 09:07:26 +00:00
  • 2fc4f25c93 Don't build most of the pkcs11 module if there are no dlopen(). Love Hörnquist Åstrand 2006-09-07 09:07:15 +00:00
  • ea514adfd7 Comment about the DIR module. Love Hörnquist Åstrand 2006-09-07 08:56:48 +00:00
  • 34b0d0c2ec x Love Hörnquist Åstrand 2006-09-07 08:09:42 +00:00
  • a554fa893b Reverse 1.5, not needed. Love Hörnquist Åstrand 2006-09-07 08:09:21 +00:00
  • 2b00422f5e x Love Hörnquist Åstrand 2006-09-06 21:50:35 +00:00
  • d7b6342d34 (hx509_cms_unenvelope): try to save the error string from find_CMSIdentifier so we have one more bit of information what went wrong. Love Hörnquist Åstrand 2006-09-06 21:50:18 +00:00
  • 2d40fa34d7 x Love Hörnquist Åstrand 2006-09-06 19:12:13 +00:00
  • 746ee7473a (krb5_init_ets): Add the hx errortable Love Hörnquist Åstrand 2006-09-06 19:11:32 +00:00
  • b2c273d1fd Include hx509_err.h. Love Hörnquist Åstrand 2006-09-06 19:11:02 +00:00
  • aa7b92c27f x Love Hörnquist Åstrand 2006-09-06 18:53:56 +00:00
  • c360ec2e50 (_krb5_pk_verify_sign): catch the error string from the hx509 lib Love Hörnquist Åstrand 2006-09-06 18:53:39 +00:00
  • 9bf4e18d6d More pretty printing, make verify_signed return the error string from the library. Love Hörnquist Åstrand 2006-09-06 18:48:51 +00:00
  • f8b51d6727 Try returning what certificates failed to parse or be found. Love Hörnquist Åstrand 2006-09-06 18:47:55 +00:00
  • 36d0c4e85a (p11_list_keys): fetch CKA_LABEL and use it to set the friendlyname for the certificate. Love Hörnquist Åstrand 2006-09-06 09:26:43 +00:00
  • 30a95d7add x Love Hörnquist Åstrand 2006-09-05 21:38:57 +00:00
  • f62a5620c6 check that there are no extra bytes in the checksum and that the parameters are NULL or the NULL-type. All to avoid having excess data that can be used to fake the signature. Love Hörnquist Åstrand 2006-09-05 21:38:44 +00:00
  • 3d82dd78b7 x Love Hörnquist Åstrand 2006-09-05 21:25:05 +00:00
  • b69e61c398 Check for Daniel Bleichenbacher an attack on PKCS #1 v1.5 signatures. Love Hörnquist Åstrand 2006-09-05 21:24:48 +00:00
  • 434b2f2b12 x Love Hörnquist Åstrand 2006-09-05 20:55:26 +00:00
  • a738dfe90c print keyusage Love Hörnquist Åstrand 2006-09-05 20:55:03 +00:00
  • dc5e51aaf2 add hx509_cert_keyusage_print, simplify oid printing Love Hörnquist Åstrand 2006-09-05 20:53:34 +00:00
  • 0efe7f3455 add _hx509_cert_get_keyusage Love Hörnquist Åstrand 2006-09-05 20:52:35 +00:00
  • cf9a110826 keep one session around for the whole life of the keyset Love Hörnquist Åstrand 2006-09-05 20:51:30 +00:00
  • c6b0e4b61b tests more selection Love Hörnquist Åstrand 2006-09-05 19:58:11 +00:00
  • 6f0843cebf improve pretty printing in print and query Love Hörnquist Åstrand 2006-09-05 19:48:44 +00:00
  • caa0fe8295 add selection on KU and printing to query Love Hörnquist Åstrand 2006-09-05 19:35:13 +00:00
  • 35287059cf Add cms test for digitalSignature and keyEncipherment certs. Love Hörnquist Åstrand 2006-09-05 19:14:55 +00:00
  • 83b8d2b65d x Love Hörnquist Åstrand 2006-09-05 18:55:10 +00:00
  • a1e502b177 (no): Add serialNumber Love Hörnquist Åstrand 2006-09-05 18:54:55 +00:00
  • 81e480b985 x Love Hörnquist Åstrand 2006-09-05 17:36:06 +00:00
  • 470639dcbb (p11_get_session): return better error messages Love Hörnquist Åstrand 2006-09-05 17:35:38 +00:00