Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | trust: Fix token test when building with MinGW | Michael Cronenworth | 2014-09-09 | 1 | -0/+4 |
| | | | | Signed-off-by: Michael Cronenworth <mike@cchtml.com> | ||||
* | configure: Check for pthread_create() in pthread library | Roman Bogorodskiy | 2014-09-09 | 1 | -3/+3 |
| | | | | | | | Check for pthread_create() in pthread library instaed of pthread_mutexattr_init(). This fixes a linking error on FreeBSD. https://bugs.freedesktop.org/show_bug.cgi?id=75674 | ||||
* | p11-kit: Compilation fixes for previous commit | Stef Walter | 2014-09-09 | 1 | -4/+1 |
| | | | | Pushed the wrong version | ||||
* | p11-kit: Make proxy module respect critical = no | Stef Walter | 2014-09-09 | 1 | -37/+47 |
| | | | | | | | The p11-kit-proxy.so module would not respect the critical = no setting in module configuration, and fail if any module failed to initialize. https://bugs.freedesktop.org/show_bug.cgi?id=83651 | ||||
* | Fix build without debug | Roman Bogorodskiy | 2014-09-09 | 1 | -0/+2 |
| | | | | | | | | | | | | | When building without debug build fails with: CCLD p11-kit/p11-kit ./.libs/libp11-kit.so: undefined reference to `P11_RPC_CHECK_CALLS' cc: error: linker command failed with exit code 1 (use -v to see invocation) gmake[2]: *** [p11-kit/p11-kit] Error 1 This happens because P11_RPC_CHECK_CALLS is not defined when debugging is enabled, so provide a noop macro for that case. | ||||
* | trust: Show public-key-info in 'trust list --details' | Stef Walter | 2014-09-05 | 1 | -0/+14 |
| | | | | | Since the public-key-info is an important part of the way we represent trust, show it in 'trust list' if --details is present. | ||||
* | Release version 0.21.2 | Stef Walter | 2014-09-05 | 2 | -1/+11 |
| | |||||
* | trust: Produce a proper message for an invalid stapled extension | Stef Walter | 2014-09-05 | 1 | -1/+10 |
| | | | | | | Previously we would output a line like this: p11-kit: 'node != NULL' not true at lookup_extension | ||||
* | Move to non-recursive Makefile for building bins and libs | Stef Walter | 2014-08-15 | 133 | -589/+632 |
| | | | | Still use recursive for documentation and translation. | ||||
* | common: Fix regression introduced by last commit | Stef Walter | 2014-08-15 | 1 | -1/+1 |
| | | | | | | The last commit caused dirfd() to become undefined. https://bugs.freedesktop.org/show_bug.cgi?id=82617 | ||||
* | Fix build against older pthreads implementations | Baruch Siach | 2014-08-14 | 1 | -0/+6 |
| | | | | | | | | | | | | | | | | | Older pthreads implementations like glibc NPTL prior to version 2.12, and uClibc linuxthreads (both), need _XOPEN_SOURCE to expose pthread_mutexattr_settype() and THREAD_MUTEX_DEFAULT. The value 600 (SuSv3, POSIX.1-2001) is equivalent to _POSIX_C_SOURCE 200112L. Fixes the following build error: CC compat.lo compat.c: In function 'p11_mutex_init': compat.c:164:2: warning: implicit declaration of function 'pthread_mutexattr_settype' [-Wimplicit-function-declaration] compat.c:164:2: warning: nested extern declaration of 'pthread_mutexattr_settype' [-Wnested-externs] compat.c:164:36: error: 'PTHREAD_MUTEX_DEFAULT' undeclared (first use in this function) https://bugs.freedesktop.org/show_bug.cgi?id=82617 | ||||
* | Fix 'make upload-release' target | Stef Walter | 2014-08-14 | 1 | -2/+2 |
| | |||||
* | doc: Fix missing tag in p11-kit-sharing.xml | Stef Walter | 2014-08-11 | 1 | -0/+1 |
| | |||||
* | p11-kit: Fix various noise/issues highlighted by clang | Stef Walter | 2014-08-11 | 4 | -13/+13 |
| | |||||
* | Ignore clang scanner litter | Stef Walter | 2014-08-08 | 1 | -0/+1 |
| | |||||
* | trust: Don't use invalid public keys for looking up stapled extensions | Stef Walter | 2014-08-08 | 1 | -1/+1 |
| | | | | https://bugs.freedesktop.org/show_bug.cgi?id=82328 | ||||
* | trust: Print label of certificate when complaining about basic constraints | Stef Walter | 2014-08-08 | 1 | -1/+5 |
| | | | | https://bugs.freedesktop.org/show_bug.cgi?id=82328 | ||||
* | trust: Double check that index bucket is valid before access | Stef Walter | 2014-08-08 | 1 | -2/+2 |
| | |||||
* | p11-kit: Remove use after free in debug output code path | Stef Walter | 2014-08-08 | 1 | -1/+1 |
| | |||||
* | Quiten down scanner warnings about unused variables | Stef Walter | 2014-08-08 | 2 | -8/+2 |
| | |||||
* | common: Quiet down clang scanner with assertions | Stef Walter | 2014-08-08 | 1 | -1/+1 |
| | | | | | Quieten down the clang scanner by telling it to expect that our test assertions fail | ||||
* | Fix mostly erroneous scanner warnings in tests | Stef Walter | 2014-08-08 | 11 | -2/+22 |
| | |||||
* | trust: Fix leak in token loading error path | Stef Walter | 2014-08-08 | 1 | -0/+1 |
| | |||||
* | trust: Fix unlikely use of uninitialized memory in token loading | Stef Walter | 2014-08-08 | 1 | -3/+3 |
| | |||||
* | trust: Fix leak in trust list command | Stef Walter | 2014-08-08 | 1 | -0/+1 |
| | |||||
* | trust: Fix use after free and double free in extract command | Stef Walter | 2014-08-08 | 1 | -7/+4 |
| | |||||
* | trust: Remove dead while condition in anchor commond | Stef Walter | 2014-08-08 | 1 | -1/+1 |
| | |||||
* | p11-kit: Fix integer overflow in memset() argument | Stef Walter | 2014-08-08 | 1 | -1/+1 |
| | |||||
* | p11-kit: Fix bad check of asprintf() return value | Stef Walter | 2014-08-08 | 1 | -1/+1 |
| | |||||
* | configure.ac: Add subdir-objects to satisfy newer automakes | Stef Walter | 2014-08-08 | 1 | -1/+1 |
| | |||||
* | trust: Fix use of invalid memory in PEM parser | Stef Walter | 2014-08-08 | 1 | -3/+1 |
| | |||||
* | trust: Parse TRUSTED CERTIFICATE openssl format even without CertAux | Stef Walter | 2014-08-08 | 3 | -13/+151 |
| | | | | | | | | openssl sometimes outputs TRUSTED CERTIFICATE PEM files without the additional CertAux (ie: trust fields) information. It simply leaves that block out. This happens with a command like: $ openssl x509 -in my-cert.pem -out output -trustout | ||||
* | common: Allow specifying which tests to run on command line | Stef Walter | 2014-08-08 | 1 | -1/+33 |
| | | | | | | This modifies our common unit test code so we can specify full test paths on the command line, and restrict the run tests to the ones specified. Order is not respected at this time. | ||||
* | Release version 0.21.1 | Stef Walter | 2014-08-07 | 2 | -1/+7 |
| | |||||
* | po: Add new translations: oc | Stef Walter | 2014-08-07 | 3 | -1/+344 |
| | |||||
* | common: Don't do repeated linear reallocation of array memory | Stef Walter | 2014-08-07 | 1 | -1/+4 |
| | | | | | | | Some mallocs (notably on Windows) have really poor behavior when called repeatedly with a linearly growing buffer. https://bugzilla.redhat.com/show_bug.cgi?id=985419 | ||||
* | p11-kit: Tweak last commit, handle the not-forked case | Stef Walter | 2014-08-07 | 1 | -1/+4 |
| | | | | | When we hadn't forked, but were just not initialized, still return CKR_CRYPTOKI_NOT_INITIALIZED from managed modules. | ||||
* | p11-kit: Don't complain about C_Finalize called in wrong process | Stef Walter | 2014-08-07 | 1 | -6/+13 |
| | | | | | | When C_Finalize is called in the wrong process, it's often because of a caller unaware of forking. This is a painful area of PKCS#11, but at least for C_Finalize, lets not complain loudly about it. | ||||
* | p11-kit: Add a new 'isolate' pkcs11 config option | Stef Walter | 2014-07-08 | 3 | -12/+44 |
| | | | | | | | This sets 'remote' appropriately to run the module in a separate process. https://bugs.freedesktop.org/show_bug.cgi?id=80472 | ||||
* | p11-kit: Cleanup and add documentation for 'remote' option | Stef Walter | 2014-07-08 | 4 | -28/+59 |
| | | | | https://bugs.freedesktop.org/show_bug.cgi?id=54105 | ||||
* | p11-kit: Add 'p11-kit remote' command for isolating modules | Stef Walter | 2014-07-08 | 7 | -58/+161 |
| | | | | | This adds a new tool to the p11-kit command called 'remote'. This is the server side of remoting a PKCS#11 module. | ||||
* | rpc: Implement execution of another tool to transport PKCS#11 RPC | Stef Walter | 2014-07-08 | 9 | -44/+1600 |
| | |||||
* | mock: Minor testing tweaks to mock testing | Stef Walter | 2014-07-08 | 1 | -2/+2 |
| | |||||
* | modules: Make config file and module configs overridable by tests | Stef Walter | 2014-07-08 | 2 | -4/+18 |
| | |||||
* | test: Move some file and directory code into general test stuff | Stef Walter | 2014-07-08 | 5 | -129/+119 |
| | |||||
* | Add compatibility fdwalk() function | Stef Walter | 2014-07-08 | 3 | -0/+83 |
| | | | | | This is used when execing another process to close all open file descriptors that we don't wish to be inherited. | ||||
* | rpc: Implement PKCS#11 messages/client/server code | Stef Walter | 2014-07-08 | 14 | -2/+6163 |
| | | | | | | | | | | | | * This enables passing around bytes which represent PKCS#11 RPC calls. * Caller is responsible for connecting/disconnecting and so on. * Client side caller gets a mixin from p11_rpc_client_init() to call into, which generates callbacks with byte arrays to be transported. * Server side calls p11_rpc_server_handle() with a CK_FUNCTION_LIST_PTR on which relevant methods get called. * Doesn't yet implement the actual daemon or clients etc... https://bugs.freedesktop.org/show_bug.cgi?id=54105 | ||||
* | Fix typo: supress - > suppress | Andreas Metzler | 2014-07-07 | 4 | -4/+4 |
| | |||||
* | Release version 0.20.3 | Stef Walter | 2014-07-04 | 2 | -1/+11 |
| | |||||
* | Added test for non-null values in empty ID and label URI parts | Nikos Mavrogiannopoulos | 2014-07-04 | 1 | -0/+66 |
| |