p11-kit.git - Clone of https://github.com/p11-glue/p11-kit

	Commit message (Collapse)	Author	Age	Files	Lines
*	Implement code for writing PEM	Stef Walter	2013-02-05	1	-3/+111
\| \| \| \| \| \| \|	* Based on the gcr code * Bring in base64 output code from BSD * Make sure to output base64 lines of 64 character length since this is what OpenSSL expects
*	Move the X.509 extension parsing code in common/	Stef Walter	2013-02-05	1	-7/+184
\| \| \| \|	* So it can be used by other code, in addition to the trust stuff
*	Add p11_array_clear() function	Stef Walter	2013-02-05	1	-0/+27
\| \| \| \|	* Clears an array without freeing the array itself
*	Implement trust assertion PKCS#11 objects	Stef Walter	2013-02-05	2	-9/+10
\| \| \| \| \| \|	* Implement trust assertions for anchored and distrusted certs * Pinned certificate trust assertions are not implemented yet * Add an internal tool for pulling apart bits of certificates
*	Refactor how parsing of ASN.1 data and certificate extensions work	Stef Walter	2013-02-05	3	-0/+300
\|
*	Implement stapled certificate extensions internally	Stef Walter	2013-02-05	4	-19/+244
\| \| \| \| \| \| \| \| \| \| \| \|	* Use stapled certificate extensions to represent loaded trust policy * Build NSS trust objects from stapled certificate extensions * Add further attribute debugging for NSS trust objects * Use a custom certificate extension for the OpenSSL reject purpose data * Use SubjectKeyIdentifier for OpenSSL keyid data * Use ExtendedKeyUsage for OpenSSL trust purpose data * Implement simple way to handle binary DER OIDs, using the DER TLV length. DER OIDs are used in the CKA_OBJECT_ID value, and elsewhere. * Split out the building of NSS trust objects from the main parser
*	Add support for parsing PEM files	Stef Walter	2013-02-05	2	-5/+263
\|
*	Add basic trust module	Stef Walter	2013-02-05	4	-2/+400
\| \| \| \| \| \|	This is based off the roots-store from gnome-keyring and loads certificates from a root directory and exposes them as PKCS#11 objects.
*	Add basic checksum algorithms	Stef Walter	2013-02-05	2	-0/+153
\| \| \| \| \| \|	The SHA-1 and MD5 digests here are used for checksums in legacy protocols. We don't use them in cryptographic contexts at all. These particular algorithms would be poor choices for that.
*	Further tweaks and cleanup for functions dealing with PKCS#11 attributes	Stef Walter	2013-02-04	1	-17/+109
\| \| \| \| \| \| \| \|	* Check that the size is correct when looking for a boolean or a ulong. * Make sure that the length is not the invalid negative ulong. * Functions for dumping out attribute contents * Make it possible to use attributes in hash tables
*	Add generic buffer code	Stef Walter	2013-02-04	2	-0/+215
\| \| \| \|	Represents a block of memory that can be added to, parsed and so on
*	Use the stdbool.h C99 bool type	Stef Walter	2013-01-23	1	-42/+48
\| \| \| \| \| \|	It was getting really wild knowing whether a function returning an int would return -1 on failure or 0 or whether the int return value was actually a number etc..
*	Set strict debug preconditions during testing	Stef Walter	2013-01-09	1	-0/+4
\|
*	Add common functions for manipulating CK_ATTRIBUTE arrays	Stef Walter	2013-01-09	2	-0/+519
\|
*	Build common code into noinst libraries	Stef Walter	2013-01-09	1	-9/+5
\| \| \| \| \| \|	* This is cleaner than building the same source files all over the place over and over. * Works better with code coverage.
*	Move debug and library code into the common/ subdirectory	Stef Walter	2013-01-09	3	-0/+691
	Start using p11_ as our internal prefix rather than _p11_. We explicitly export p11_kit_ so this is fine as far as visibility. Move the threading, mutex, and module compat, dict, and array code into the common directory too. Take this opportunity to clean up a bit of internal API as well, since so many lines are being touched internally.