summaryrefslogtreecommitdiff
AgeCommit message (Collapse)AuthorFilesLines
2013-06-24Release version 0.18.40.18.4Stef Walter2-1/+4
2013-06-17trust: Move the extract-trust external placeholder command into trust/Stef Walter5-6/+7
2013-06-17trust: Print out usage when extract-trust run incorrectlyStef Walter1-1/+6
Also sorta covers --help and -h usage
2013-06-17tools: Fix passing args to external commandsStef Walter1-0/+4
There were various bugs passing arguments, with duplicates being passed, as well as certain arguments being skipped.t
2013-06-17tools: Only use our private path when looking for external commandsStef Walter1-7/+4
Instead of looking for external commands in the path, just look for them in our private directory. We want to be conservative early on, and limit what sorta things we have to maintain later. We can later remove this restriction if a real use case presents itself.
2013-06-05Release version 0.18.30.18.3Stef Walter2-1/+6
2013-06-05trust: Fix crash when C_Initialize args are NULLStef Walter2-1/+22
https://bugs.freedesktop.org/show_bug.cgi?id=65401
2013-06-05trust: Fix reinitialization of trust moduleStef Walter3-4/+139
Track number of C_Initialize calls, and require similar number of C_Finalize calls to finalize. This fixes leaks/disappearing sessions in the trust module. https://bugs.freedesktop.org/show_bug.cgi?id=65401
2013-05-28Fix uninitialized p11_library_oncemanphiz@gmail.com1-1/+1
https://bugs.freedesktop.org/show_bug.cgi?id=57714
2013-05-28Force Mac OS shared library extension to .soStef Walter1-1/+11
Darwin and libtool seem confused about what shared library extension they actually use. https://bugs.freedesktop.org/show_bug.cgi?id=57714
2013-05-14Release version 0.18.20.18.2Stef Walter2-1/+4
2013-05-14Patch to make test-lexer depend on ASN.1manphiz@gmail.com1-1/+1
https://bugs.freedesktop.org/show_bug.cgi?id=64378
2013-05-03Reduce libtasn1 dependency to 2.3Stef Walter1-1/+1
* This passes all checks and is compatible
2013-04-15Release version 0.18.10.18.1Stef Walter2-1/+5
2013-04-04doc: Use gtk-doc in the no-tmpl flavorStef Walter2-30/+15
2013-04-04manual: Use a consistent docbook versionStef Walter6-12/+16
2013-04-04Put the external tools in $libdir/p11-kitStef Walter3-3/+6
These are possibly architecture specific binaries, so they should be in $libdir/p11-kit and not in $datadir/p11-kit
2013-04-04Release version 0.18.00.18.0Stef Walter2-1/+9
2013-04-04Fix off by one in date parsing codeStef Walter1-1/+1
We didn't treat the two digit year 00 as a valid year, whereas it actually represents the year 2000. This is in a non-critical code path.
2013-04-04Don't print erroneous debug messages when skipping filesStef Walter2-9/+11
The parser automatically skips over files that it cannot parse. Don't print confusing debug messages about DER parse failures when it does so.
2013-04-03Update to MurmurHash3Stef Walter5-84/+91
This should also fix problems with accessing memory in a non-aligned fashion on platforms where this causes problems. https://bugs.freedesktop.org/show_bug.cgi?id=62819
2013-04-03Don't respect timezones for CKA_START_DATE or CKA_END_DATEStef Walter4-371/+81
The PKCS#11 specification does not note what timezone these dates are in. In addition the time values are not represented in PKCS#11. So don't reinterpret certificate dates, other than filling in the century for dates that have a two digit year. Lastly, these are low resolution optional fields so not being all strict about timezones here is appropriate. https://bugs.freedesktop.org/show_bug.cgi?id=62825
2013-04-03trust: Fix logic for matching invalid NSS serial numbersStef Walter2-47/+180
Sometimes NSS queries for trust objects using invalid serial numbers that do not have their DER decoding. We fixed this earlier, but want to make sure there are no corner cases, accidentally not matching serial numbers that happen to start with the same bytes as a DER TLV would.
2013-04-03More compatible path munging and handling codeStef Walter19-175/+558
Centralize the path handling code, so we can remove unixy assumptions and have a chance of running on Windows. The current goal is to run all the tests on Windows. Includes some code from LRN <lrn1986@gmail.com> https://bugs.freedesktop.org/show_bug.cgi?id=63062
2013-04-03Don't use free() on memory allocated by LocalFree()Stef Walter1-1/+1
ihttps://bugs.freedesktop.org/show_bug.cgi?id=63046
2013-04-03Separate library init from message codeStef Walter52-170/+294
Put library init/uninit code its into their own statically linked library so that they don't get linked into the p11-kit executable. Refactor the message code so that the library initialization can plug in its per thread message buffer. https://bugs.freedesktop.org/show_bug.cgi?id=63046
2013-04-03Don't use library locks from p11-kit toolStef Walter2-4/+4
The global library p11_library_mutex is for libraries to use, so don't use it from any code in common/, which is also used by the p11-kit tool https://bugs.freedesktop.org/show_bug.cgi?id=63046
2013-04-03Add new script for setting up p11-kit for a maintainerStef Walter2-0/+56
Add win32 cross build, and build out of tree
2013-04-03Fix build on Win32Stef Walter1-1/+1
Don't reference an undefined macro https://bugs.freedesktop.org/show_bug.cgi?id=63046
2013-04-03Fix documentation so it builds out of treeStef Walter3-73/+123
2013-04-03Fix build with automake 1.13Stef Walter7-496/+10
Also remove some generated files from the po/ directory.
2013-03-29Use CKA_X_CERTIFICATE_VALUE for trust assertionsStef Walter2-8/+13
These don't contain the CKA_VALUE attribute for certificate data but rather the CKA_X_CERTIFICATE_VALUE attribute. https://bugs.freedesktop.org/show_bug.cgi?id=62896
2013-03-28Don't complain when applications call C_Logout or C_LoginStef Walter2-2/+53
Some callers erroneously call our C_Logout function, like NSS. So return appropriate error codes in these cases. https://bugs.freedesktop.org/show_bug.cgi?id=62874
2013-03-28Release version 0.17.50.17.5Stef Walter2-1/+5
2013-03-28Don't try to guess at overflowing time values on 32-bit systemsStef Walter5-5/+80
Since CKA_START_DATE and CKA_END_DATE are the only places where we want to parse out times, and these are optional, just leave blank if the time overflows what libc can handle on a 32-bit system. https://bugs.freedesktop.org/show_bug.cgi?id=62825
2013-03-25Fix testing of murmur hash on bigendian systemsStef Walter1-37/+23
The murmur hash produces different output depending on the architecture https://bugzilla.redhat.com/show_bug.cgi?id=927394
2013-03-20Release 0.17.40.17.4Stef Walter2-1/+5
2013-03-20Fix memory leaks reported by 'make leakcheck'Stef Walter22-27/+91
2013-03-20Fix invalid memory accesses reported by 'make memcheck'Stef Walter5-19/+34
These are things that showed up in valgrind while running the tests.
2013-03-20Add a bit of infrastructure for running valgrindStef Walter13-10/+46
* make memcheck: Runs basic memory checking * make leakcheck: Also runs leak checking
2013-03-20trust: Predictable behavior with duplicate certificates in tokenStef Walter3-16/+224
If duplicate certificates are present in a token, we warn about this, and don't really recommend it. However we have predictable behavior where blacklist is prefered to anchor is preferred to unknown trust. https://bugs.freedesktop.org/show_bug.cgi?id=62548
2013-03-20trust: Rework index to be faster and more usableStef Walter9-179/+437
The index now uses a sort of cross between a hash table and a bloom filter internally to select matching items. This is needed for the massive amount of lookups we want to do during loading. In addition make p11_index_find() and p11_index_replace() easier to use.
2013-03-20attrs: Print out the CKA_VALUE for certificates when debuggingStef Walter5-20/+63
While it's true that we shouldn't be pritning out CKA_VALUE in certain cases, like for keys, we obviously can do so for certificates. We don't have keys anyway, but in the interest of being general purpose use the class to determine whether CKA_VALUE can be printed
2013-03-20hash: Add the murmur2 hash and start using itStef Walter14-51/+234
Add implementation of the murmur2 hash function, and start using it for our dictionaries. Our implementation is incremental like our other hash functions. Also remove p11_oid_hash() which wasn't being used. In addition fix several tests whose success was based on the way that the dictionary hashed. This was a hidden testing bug.
2013-03-20hash: Rename file and functions for hashesStef Walter12-72/+72
We're going to be adding other hashes. Also build as part of a different common library.
2013-03-19Release version 0.17.30.17.3Stef Walter2-1/+8
2013-03-19trust: Use descriptive labels for tokensStef Walter8-27/+112
Try to determine which one is the system trust input token, and which one is the default token by using datadir and sysconfdir respectively. https://bugs.freedesktop.org/show_bug.cgi?id=62534
2013-03-19trust: Remove the temporary built in distrust objectsStef Walter1-148/+0
These should now be loaded from the .p11-kit persist format.
2013-03-19extract: Make extracted output directories read-onlyStef Walter3-32/+61
This is not a security feature or anything like that, but a hint that the files are managed by the extract tool and should not be modified manually.
2013-03-19trust: Don't use POSIX or GNU basename()Stef Walter6-27/+137
Both are nasty. Do our own, and test it a bit https://bugs.freedesktop.org/show_bug.cgi?id=62479
generated by cgit v1.2.3 (git 2.39.1) at 2025-03-19 17:10:35 +0000