e18663839d
x
Love Hörnquist Åstrand
2006-09-15 06:18:14 +00:00
185e193235
Add "kafs" option.
Love Hörnquist Åstrand
2006-09-15 06:17:50 +00:00
1b8fc81fde
yutaka test certs
Love Hörnquist Åstrand
2006-09-15 06:07:55 +00:00
8f46285916
Add test for yutaka certs.
Love Hörnquist Åstrand
2006-09-15 06:00:11 +00:00
6168bc80da
x
Love Hörnquist Åstrand
2006-09-15 05:59:46 +00:00
41e00c0c70
Add a strict rfc3280 verification flag. rfc3280 requires certificates to have KeyUsage.keyCertSign if they are to be used for signing of certificates, but the step in the verifiation is optional.
Love Hörnquist Åstrand
2006-09-15 05:59:35 +00:00
697eae9c9d
Improve printing and error reporting.
Love Hörnquist Åstrand
2006-09-15 05:50:17 +00:00
d6ac5d5275
test bleichenbacher from eay
Love Hörnquist Åstrand
2006-09-12 22:04:42 +00:00
24ff7295c8
Make common function for all getarg_strings and hx509_certs_append commonly used.
Love Hörnquist Åstrand
2006-09-12 20:08:42 +00:00
62d57dc40e
x
Love Hörnquist Åstrand
2006-09-12 19:52:00 +00:00
34ce1baf38
HX509_CMS_UE_DONT_REQUIRE_KU_ENCIPHERMENT is a negative flag, treat it was such.
Love Hörnquist Åstrand
2006-09-12 19:22:53 +00:00
08b43ec9ea
x
Love Hörnquist Åstrand
2006-09-12 18:25:46 +00:00
ee9b01aa50
By using full function calling conversion (*func) we avoid problem when close(fd) is overridden using a macro.
Love Hörnquist Åstrand
2006-09-12 18:12:37 +00:00
1eaf2446ed
Make compile again.
Love Hörnquist Åstrand
2006-09-12 17:35:33 +00:00
fc6f056629
Add socket-wrapper test
Love Hörnquist Åstrand
2006-09-12 17:33:07 +00:00
44c73244c3
By using full function calling conversion (*func) we avoid problem when close(fd) is overridden using a macro.
Love Hörnquist Åstrand
2006-09-12 17:32:10 +00:00
ce1b1b08af
Signing outgoing tickets.
Love Hörnquist Åstrand
2006-09-11 13:39:48 +00:00
2db346fb7d
Add signing and checking of tickets to s4u2self works securely.
Love Hörnquist Åstrand
2006-09-11 13:39:13 +00:00
d2e95a2867
x
Love Hörnquist Åstrand
2006-09-11 13:38:29 +00:00
3993e250af
Add KRB5SignedPath and friends.
Love Hörnquist Åstrand
2006-09-11 13:38:20 +00:00
8d6e197003
Add keyusage for KRB5SignedPath.
Love Hörnquist Åstrand
2006-09-11 13:32:57 +00:00
c2a3bce503
Add KRB5SignedPath and friends.
Love Hörnquist Åstrand
2006-09-11 13:28:59 +00:00
c9f98b46b1
x
Love Hörnquist Åstrand
2006-09-11 07:09:00 +00:00
7c40efd741
x
Love Hörnquist Åstrand
2006-09-11 06:43:11 +00:00
a688982129
Use the new add_GeneralNames function.
Love Hörnquist Åstrand
2006-09-11 06:43:00 +00:00
a368903335
Add new sequence generation for GeneralNames.
Love Hörnquist Åstrand
2006-09-11 06:40:54 +00:00
b226d0acf5
Adapt to new signature of hx509_cms_unenvelope.
Love Hörnquist Åstrand
2006-09-11 06:38:36 +00:00
15a66286ab
Add HX509_CMS_UE_DONT_REQUIRE_KU_ENCIPHERMENT.
Love Hörnquist Åstrand
2006-09-11 06:35:53 +00:00
9358faef60
Allow passing in encryptedContent and flag. Add new flag HX509_CMS_UE_DONT_REQUIRE_KU_ENCIPHERMENT.
Love Hörnquist Åstrand
2006-09-11 06:31:34 +00:00
b82929db43
x
Love Hörnquist Åstrand
2006-09-09 13:39:44 +00:00
0fbe98fc9c
(pk_verify_host): set errorstrings in a sensable way
Love Hörnquist Åstrand
2006-09-09 13:39:24 +00:00
5675de7426
x
Love Hörnquist Åstrand
2006-09-08 09:54:12 +00:00
dd04abbea7
cast void * to char * when using it for %s formating in printf.
Love Hörnquist Åstrand
2006-09-08 09:54:01 +00:00
2acf7df729
New function _hx509_Name_to_string.
Love Hörnquist Åstrand
2006-09-08 09:52:39 +00:00
b67169a918
x
Love Hörnquist Åstrand
2006-09-07 22:02:15 +00:00
d23cf3f57d
Prevent a font generation warning, from Jason McIntyre.
Love Hörnquist Åstrand
2006-09-07 22:01:43 +00:00
0e9f9c8b5f
x
Love Hörnquist Åstrand
2006-09-07 12:20:54 +00:00
6914282b1d
(CMSVersion): rename versions from v0 to CMSVersion_v0, ...
Love Hörnquist Åstrand
2006-09-07 12:20:42 +00:00
dcfd1554d2
x
Love Hörnquist Åstrand
2006-09-07 10:58:26 +00:00
39ca3ae4a5
Sprinkle error messages.
Love Hörnquist Åstrand
2006-09-07 10:58:17 +00:00
3a6a84147b
x
Love Hörnquist Åstrand
2006-09-07 10:44:31 +00:00
dbd04c392e
Sprinkle even more error messages.
Love Hörnquist Åstrand
2006-09-07 10:43:48 +00:00
bb0a57b254
Sprinkle some more error strings.
Love Hörnquist Åstrand
2006-09-07 09:22:07 +00:00
6e2407cfb9
(find_CMSIdentifier): only free string when we allocated one.
Love Hörnquist Åstrand
2006-09-07 09:11:30 +00:00
a45b9ccd18
x
Love Hörnquist Åstrand
2006-09-07 09:07:26 +00:00
2fc4f25c93
Don't build most of the pkcs11 module if there are no dlopen().
Love Hörnquist Åstrand
2006-09-07 09:07:15 +00:00
ea514adfd7
Comment about the DIR module.
Love Hörnquist Åstrand
2006-09-07 08:56:48 +00:00
34b0d0c2ec
x
Love Hörnquist Åstrand
2006-09-07 08:09:42 +00:00
a554fa893b
Reverse 1.5, not needed.
Love Hörnquist Åstrand
2006-09-07 08:09:21 +00:00
2b00422f5e
x
Love Hörnquist Åstrand
2006-09-06 21:50:35 +00:00
d7b6342d34
(hx509_cms_unenvelope): try to save the error string from find_CMSIdentifier so we have one more bit of information what went wrong.
Love Hörnquist Åstrand
2006-09-06 21:50:18 +00:00
2d40fa34d7
x
Love Hörnquist Åstrand
2006-09-06 19:12:13 +00:00
746ee7473a
(krb5_init_ets): Add the hx errortable
Love Hörnquist Åstrand
2006-09-06 19:11:32 +00:00
b2c273d1fd
Include hx509_err.h.
Love Hörnquist Åstrand
2006-09-06 19:11:02 +00:00
aa7b92c27f
x
Love Hörnquist Åstrand
2006-09-06 18:53:56 +00:00
c360ec2e50
(_krb5_pk_verify_sign): catch the error string from the hx509 lib
Love Hörnquist Åstrand
2006-09-06 18:53:39 +00:00
9bf4e18d6d
More pretty printing, make verify_signed return the error string from the library.
Love Hörnquist Åstrand
2006-09-06 18:48:51 +00:00
f8b51d6727
Try returning what certificates failed to parse or be found.
Love Hörnquist Åstrand
2006-09-06 18:47:55 +00:00
36d0c4e85a
(p11_list_keys): fetch CKA_LABEL and use it to set the friendlyname for the certificate.
Love Hörnquist Åstrand
2006-09-06 09:26:43 +00:00
30a95d7add
x
Love Hörnquist Åstrand
2006-09-05 21:38:57 +00:00
f62a5620c6
check that there are no extra bytes in the checksum and that the parameters are NULL or the NULL-type. All to avoid having excess data that can be used to fake the signature.
Love Hörnquist Åstrand
2006-09-05 21:38:44 +00:00
3d82dd78b7
x
Love Hörnquist Åstrand
2006-09-05 21:25:05 +00:00
b69e61c398
Check for Daniel Bleichenbacher an attack on PKCS #1 v1.5 signatures.
Love Hörnquist Åstrand
2006-09-05 21:24:48 +00:00
434b2f2b12
x
Love Hörnquist Åstrand
2006-09-05 20:55:26 +00:00
a738dfe90c
print keyusage
Love Hörnquist Åstrand
2006-09-05 20:55:03 +00:00
dc5e51aaf2
add hx509_cert_keyusage_print, simplify oid printing
Love Hörnquist Åstrand
2006-09-05 20:53:34 +00:00
0efe7f3455
add _hx509_cert_get_keyusage
Love Hörnquist Åstrand
2006-09-05 20:52:35 +00:00
cf9a110826
keep one session around for the whole life of the keyset
Love Hörnquist Åstrand
2006-09-05 20:51:30 +00:00
c6b0e4b61b
tests more selection
Love Hörnquist Åstrand
2006-09-05 19:58:11 +00:00
6f0843cebf
improve pretty printing in print and query
Love Hörnquist Åstrand
2006-09-05 19:48:44 +00:00
caa0fe8295
add selection on KU and printing to query
Love Hörnquist Åstrand
2006-09-05 19:35:13 +00:00
35287059cf
Add cms test for digitalSignature and keyEncipherment certs.
Love Hörnquist Åstrand
2006-09-05 19:14:55 +00:00
83b8d2b65d
x
Love Hörnquist Åstrand
2006-09-05 18:55:10 +00:00
a1e502b177
(no): Add serialNumber
Love Hörnquist Åstrand
2006-09-05 18:54:55 +00:00
81e480b985
x
Love Hörnquist Åstrand
2006-09-05 17:36:06 +00:00
a7609bc7a8
Add TESTSeqOf for testing sequence generation code.
Love Hörnquist Åstrand
2006-09-05 14:17:06 +00:00
83a1f5bc00
Add sequence tests.
Love Hörnquist Åstrand
2006-09-05 14:15:53 +00:00
e67cafcc42
Add TESTSeqOf for testing sequence generation code.
Love Hörnquist Åstrand
2006-09-05 14:00:44 +00:00
22937a1975
fix warning.
Love Hörnquist Åstrand
2006-09-05 14:00:14 +00:00
acd214041b
make generated data work
Love Hörnquist Åstrand
2006-09-05 13:55:38 +00:00
5840d62d5f
enctype is part of the krb5 module now, use that instead of locally defining it.
Love Hörnquist Åstrand
2006-09-05 12:31:59 +00:00
c88e9b4633
asn1_compile += gen_seq.c
Love Hörnquist Åstrand
2006-09-05 12:30:48 +00:00
3c380109e4
add new prototypes, remove unused ones.
Love Hörnquist Åstrand
2006-09-05 12:29:18 +00:00
9f8a9ce2dd
Generate sequence function.
Love Hörnquist Åstrand
2006-09-05 12:28:56 +00:00
bdd32566a1
add --sequence
Love Hörnquist Åstrand
2006-09-05 12:27:29 +00:00
413862a22b
Add generated add_ and remove_ for "SEQUENCE OF TType". I'm tried of writing realloc(foo->data, sizeof(foo->data[0]) + (foo->len + 1)); Only generated for those type that is enabled by the command flag --sequence.
Love Hörnquist Åstrand
2006-09-05 12:23:54 +00:00
6c09bab1d6
x
Love Hörnquist Åstrand
2006-09-05 09:12:38 +00:00
9a8d6fc2f5
unbreak from previous commit
Love Hörnquist Åstrand
2006-09-05 09:10:23 +00:00
6cf5d8a42e
reapply patch that went away in last commit
Love Hörnquist Åstrand
2006-09-05 09:08:39 +00:00
871c2d8d55
x
Love Hörnquist Åstrand
2006-09-05 08:07:32 +00:00
bd56a65692
Add size_t formater (z modifer).
Love Hörnquist Åstrand
2006-09-05 08:03:36 +00:00
d6f4835198
add tests for size_t printf formater
Love Hörnquist Åstrand
2006-09-05 08:01:04 +00:00
3d4b2dbea9
update to pkcs11 referens files 2.20
Love Hörnquist Åstrand
2006-09-04 14:38:42 +00:00
062e1d7d5e
(krb5_get_init_creds_opt_set_default_flags): fix argument to krb5_get_init_creds_opt_set_addressless.
Love Hörnquist Åstrand
2006-09-04 14:28:54 +00:00
2857fa0acb
x
Love Hörnquist Åstrand
2006-09-04 13:46:57 +00:00
88182a75ce
(init_cred_loop): try to catch the error when we actually have an error to catch.
Love Hörnquist Åstrand
2006-09-04 13:46:45 +00:00
5057bc0432
x
Love Hörnquist Åstrand
2006-09-04 12:52:28 +00:00
9d9e47cb42
(kerberos5_forward): use KDCOptions2int on flags before passing them to krb5_get_forwarded_creds.
Love Hörnquist Åstrand
2006-09-04 12:37:02 +00:00
795e95e225
x
Love Hörnquist Åstrand
2006-09-04 11:07:57 +00:00