p11-kit.git/build/certs, branch p11p Clone of https://github.com/p11-glue/p11-kit Move to non-recursive Makefile for building bins and libs 2014-08-15T08:43:04+00:00 Stef Walter stef@thewalter.net 2014-08-15T06:41:43+00:00 677dee1a04058aefe8c7689f88da52afe3b4b4bb Still use recursive for documentation and translation. 
Still use recursive for documentation and translation.
Build in srcdir != builddir fashion by default 2014-01-14T10:28:43+00:00 Stef Walter stef@thewalter.net 2014-01-14T09:00:36+00:00 1f4f072346e388d7b6b6cf79b111952069c4e95c Naturally this doesn't apply to tarballs 
Naturally this doesn't apply to tarballs
trust: Port to use CKA_PUBLIC_KEY_INFO and updated trust store spec 2013-07-04T13:48:38+00:00 Stef Walter stef@thewalter.net 2013-07-04T13:48:38+00:00 7d4941715b5afc2ef8ea18716990d28965737c70 * Use the concepts and PKCS#11 objects described in the recently updated (still work in progress) storing trust spec. * Define our own CKA_X_PUBLIC_KEY_INFO define for now, since the the CKA_PUBLIC_KEY_INFO isn't defined yet. * Most notably, the association between certificates and stapled extensions is by public key. * Rework some of the tests to take into account the above. 
 * Use the concepts and PKCS#11 objects described in the
   recently updated (still work in progress) storing trust spec.
 * Define our own CKA_X_PUBLIC_KEY_INFO define for now, since the
   the CKA_PUBLIC_KEY_INFO isn't defined yet.
 * Most notably, the association between certificates and stapled
   extensions is by public key.
 * Rework some of the tests to take into account the above.
Don't try to guess at overflowing time values on 32-bit systems 2013-03-28T12:26:38+00:00 Stef Walter stefw@gnome.org 2013-03-27T16:54:38+00:00 87a0afed5db7e916a6ad6715e14996b2e25641d7 Since CKA_START_DATE and CKA_END_DATE are the only places where we want to parse out times, and these are optional, just leave blank if the time overflows what libc can handle on a 32-bit system. https://bugs.freedesktop.org/show_bug.cgi?id=62825 
Since CKA_START_DATE and CKA_END_DATE are the only places
where we want to parse out times, and these are optional, just
leave blank if the time overflows what libc can handle on
a 32-bit system.

https://bugs.freedesktop.org/show_bug.cgi?id=62825
hash: Add the murmur2 hash and start using it 2013-03-20T09:54:00+00:00 Stef Walter stefw@gnome.org 2013-03-20T08:33:04+00:00 f45942a4fc3e1c5219e9b5201b82203337ee7280 Add implementation of the murmur2 hash function, and start using it for our dictionaries. Our implementation is incremental like our other hash functions. Also remove p11_oid_hash() which wasn't being used. In addition fix several tests whose success was based on the way that the dictionary hashed. This was a hidden testing bug. 
Add implementation of the murmur2 hash function, and start using
it for our dictionaries. Our implementation is incremental
like our other hash functions.

Also remove p11_oid_hash() which wasn't being used.

In addition fix several tests whose success was based on the
way that the dictionary hashed. This was a hidden testing bug.
trust: Add a builder which builds objects out of parsed data 2013-03-15T17:00:10+00:00 Stef Walter stefw@gnome.org 2013-03-14T20:08:01+00:00 2d75eb32793a569dc3de359bb623713c80393d24 The builder completes the objects from the parsed data and takes over the responsibilities that the parser and adapter previously shared. This is necessary to prepare for arbitrary data coming from the p11-kit specific input files. https://bugs.freedesktop.org/show_bug.cgi?id=62329 
The builder completes the objects from the parsed data and takes
over the responsibilities that the parser and adapter previously
shared.

This is necessary to prepare for arbitrary data coming from
the p11-kit specific input files.

https://bugs.freedesktop.org/show_bug.cgi?id=62329
trust: Rework input path treatment 2013-03-15T16:19:01+00:00 Stef Walter stefw@gnome.org 2013-03-14T09:05:17+00:00 86e60637394340ef2fa3b3db6b451dac1d73052b * Accept a single --with-trust-paths argument to ./configure which cotnains all the input paths. * The --with-system-anchors and --with-system-certificates ./configure arguments are no longer supported. Since they were only present briefly, no provision is made for backwards compatibility. * Each input file is treated as containing anchors by default unless an input certificate contains detailed trust information. * The files in each input directory are not automatically treated as anchors unless a certificate contains detailed trust information. * The files in anchors/ subdirectory of each input directory are automatically marked as anchors. * The files in the blacklist/ subdirectory of each input directory are automatically marked as blacklisted. * Update tests and move around test certificates so we can test these changes. https://bugs.freedesktop.org/show_bug.cgi?id=62327 
 * Accept a single --with-trust-paths argument to ./configure
   which cotnains all the input paths.
 * The --with-system-anchors and --with-system-certificates
   ./configure arguments are no longer supported. Since they were
   only present briefly, no provision is made for backwards
   compatibility.
 * Each input file is treated as containing anchors by default
   unless an input certificate contains detailed trust information.
 * The files in each input directory are not automatically treated
   as anchors unless a certificate contains detailed trust information.
 * The files in anchors/ subdirectory of each input directory are
   automatically marked as anchors.
 * The files in the blacklist/ subdirectory of each input directory
   are automatically marked as blacklisted.
 * Update tests and move around test certificates so we can
   test these changes.

https://bugs.freedesktop.org/show_bug.cgi?id=62327
Add support for exporting OpenSSL's TRUSTED CERTIFICATE format 2013-02-05T14:00:25+00:00 Stef Walter stefw@gnome.org 2013-01-30T14:50:02+00:00 39e9f190416ecb4260a3b079e1d79fc2e55f5a33 






Add support for extracting to pem-bundle and pem-directory formats
2013-02-05T14:00:25+00:00

Stef Walter
stefw@gnome.org

2013-01-30T14:39:28+00:00

dbcf3c049f4aadc1d25eb952b4feabdec14cf35d












Support for sane writing to files extracted
2013-02-05T13:54:53+00:00

Stef Walter
stefw@gnome.org

2013-01-23T16:35:58+00:00

9a21e6ddf9eb7bb0f13f01cddba9dedd7a6e43b3

 * Implement atomic writes of files
 * Writing with checks that not overwriting anything unless desired
 * Writing and overwriting of directory contents in a robust way





 * Implement atomic writes of files
 * Writing with checks that not overwriting anything unless desired
 * Writing and overwriting of directory contents in a robust way