oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity
Files
0a0a27ccecb44123df394dc1eed5d54dae96b7d8
heimdal/lib/hx509
History
Nicolas Williams e515745996 hx509: private key exclusion options 
Add two ways to exclude private keys when dealing with an hx509
certificate store.  One as a load option (load no private keys, never
add private keys), one as a store option (store no private keys).

This is useful for CA code so it can have a single store with the
issuer's credentials _and_ the chain for it, and copy those to a store
with the issued certificate and _not_ accidentally include the issuer's
private key.

It would be much safer still to flip the default for this flag, but that
could break out-of-tree libhx509 dependents.
2019-12-09 18:10:10 -06:00
..
data
Fixes https://github.com/heimdal/heimdal/issues/533
2019-03-22 20:59:04 -04:00
ref
hx509: update to newer PKCS#11 header
2015-12-09 10:59:08 +11:00
ca.c
hx509: keep track of authorized CSR features
2019-12-04 21:34:37 -06:00
cert.c
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
ChangeLog
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
char_map.h
remove trailing whitespace
2011-05-21 11:57:31 -07:00
cms.c
WIN32: fix calling conventions for 32-bit builds
2019-01-14 06:12:36 -05:00
collector.c
lib/hx509: declare and apply HX509_LIB_xxx macros
2019-01-02 10:23:39 -06:00
crypto-ec.c
lib/hx509: declare and apply HX509_LIB_xxx macros
2019-01-02 10:23:39 -06:00
crypto.c
hx509: Add PKCS#8 private key format option
2019-10-03 13:09:18 -05:00
doxygen.c
Fix some typos.
2014-04-25 02:42:17 +02:00
env.c
lib/hx509: declare and apply HX509_LIB_xxx macros
2019-01-02 10:23:39 -06:00
error.c
hx509: make hx509_get_error_string(NULL, ...) work
2019-10-03 13:09:18 -05:00
file.c
hx509: add hx509_certs_destroy()
2019-10-03 13:09:18 -05:00
hx509_err.et
hx509: keep track of authorized CSR features
2019-12-04 21:34:37 -06:00
hx509.h
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
hx_locl.h
hx509: add hx509_certs_destroy()
2019-10-03 13:09:18 -05:00
hxtool-commands.in
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
hxtool-version.rc
Windows: Version information for binaries
2010-08-20 13:06:54 -04:00
hxtool.c
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
keyset.c
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
ks_dir.c
hx509: add hx509_certs_destroy()
2019-10-03 13:09:18 -05:00
ks_file.c
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
ks_keychain.c
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
ks_mem.c
hx509: add hx509_certs_destroy()
2019-10-03 13:09:18 -05:00
ks_null.c
hx509: add hx509_certs_destroy()
2019-10-03 13:09:18 -05:00
ks_p11.c
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
ks_p12.c
hx509: private key exclusion options
2019-12-09 18:10:10 -06:00
libhx509-exports.def
hx509: keep track of authorized CSR features
2019-12-04 21:34:37 -06:00
lock.c
lib/hx509: declare and apply HX509_LIB_xxx macros
2019-01-02 10:23:39 -06:00
Makefile.am
Move ASN.1 modules from lib/hx509 to lib/asn1
2019-10-07 21:32:00 -05:00
name.c
hx509: Add missing CSR extension request support
2019-10-08 22:20:40 -05:00
NTMakefile
Move ASN.1 modules from lib/hx509 to lib/asn1
2019-10-07 21:32:00 -05:00
peer.c
lib/hx509: declare and apply HX509_LIB_xxx macros
2019-01-02 10:23:39 -06:00
print.c
WIN32: fix calling conventions for 32-bit builds
2019-01-14 06:12:36 -05:00
quote.py
make printablestring and ia5string octetstrings
2010-08-08 15:51:33 -07:00
req.c
hx509: Fix unauthorized feature accounting
2019-12-09 18:10:10 -06:00
revoke.c
WIN32: fix calling conventions for 32-bit builds
2019-01-14 06:12:36 -05:00
sel-gram.y
Fix Appveyor build: lib/hx509
2017-05-26 23:24:30 -04:00
sel-lex.l
Fix Appveyor build: lib/hx509
2017-05-26 23:24:30 -04:00
sel.c
hx509: Show query expression parse errors
2019-11-19 23:00:41 -06:00
sel.h
Add rationale comments for conditional yyparse redefinition
2017-03-15 19:15:57 -04:00
softp11.c
WIN32: fix calling conventions for 32-bit builds
2019-01-14 06:12:36 -05:00
test_ca.in
allow setting signature algorithm
2014-02-12 09:46:02 -08:00
test_cert.in
send output to /dev/null
2011-10-31 21:27:51 -07:00
test_chain.in
Use P-256 for EC tests
2014-03-12 21:18:03 -04:00
test_cms.in
Use P-256 for EC tests
2014-03-12 21:18:03 -04:00
test_crypto.in
Make sure that we can parse EC private keys
2009-05-25 23:42:31 +00:00
test_expr.c
remove trailing whitespace
2011-05-21 11:57:31 -07:00
test_java_pkcs11.in
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
test_name.c
hx509: Add missing CSR extension request support
2019-10-08 22:20:40 -05:00
test_nist2.in
move time backward
2011-05-07 17:22:24 -07:00
test_nist_cert.in
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
test_nist_pkcs12.in
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
test_nist.in
move time backward
2011-05-07 17:22:37 -07:00
test_pkcs11.in
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
test_query.in
allow testing on sha1 hash in cert queries
2008-11-23 22:05:26 +00:00
test_req.in
hx509: keep track of authorized CSR features
2019-12-04 21:34:37 -06:00
test_soft_pkcs11.c
hx509: explicitly include ref/pkcs11.h
2015-12-09 11:03:48 +11:00
test_windows.in
switch to utf8 encoding of all files
2008-09-13 08:53:55 +00:00
TODO
drop $Id$
2009-09-21 19:15:00 -07:00
tst-crypto-available1
Add a PKCS11 provider supporting signing and verifing sigatures.
2008-01-14 20:53:56 +00:00
tst-crypto-available2
SHA384
2010-09-30 18:36:58 -07:00
tst-crypto-available3
Add a PKCS11 provider supporting signing and verifing sigatures.
2008-01-14 20:53:56 +00:00
tst-crypto-select
test crypto-select and crypto-available
2006-11-27 12:09:38 +00:00
tst-crypto-select1
switch to sha256
2009-03-26 23:12:02 +00:00
tst-crypto-select2
switch to sha256
2009-03-26 23:11:48 +00:00
tst-crypto-select3
test crypto-select and crypto-available
2006-11-27 12:09:38 +00:00
tst-crypto-select4
test crypto-select and crypto-available
2006-11-27 12:09:38 +00:00
tst-crypto-select5
test crypto-select and crypto-available
2006-11-27 12:09:38 +00:00
tst-crypto-select6
test crypto-select and crypto-available
2006-11-27 12:09:38 +00:00
tst-crypto-select7
check for aes256-cbc
2007-05-30 23:19:01 +00:00
version-script.map
hx509: keep track of authorized CSR features
2019-12-04 21:34:37 -06:00