p11-kit.git - Clone of https://github.com/p11-glue/p11-kit

	Commit message (Collapse)	Author	Age	Files	Lines
*	Implement stapled certificate extensions internally	Stef Walter	2013-02-05	3	-26/+142
\| \| \| \| \| \| \| \| \| \| \| \|	* Use stapled certificate extensions to represent loaded trust policy * Build NSS trust objects from stapled certificate extensions * Add further attribute debugging for NSS trust objects * Use a custom certificate extension for the OpenSSL reject purpose data * Use SubjectKeyIdentifier for OpenSSL keyid data * Use ExtendedKeyUsage for OpenSSL trust purpose data * Implement simple way to handle binary DER OIDs, using the DER TLV length. DER OIDs are used in the CKA_OBJECT_ID value, and elsewhere. * Split out the building of NSS trust objects from the main parser
*	Better debugging and checks for attribute values	Stef Walter	2013-02-05	4	-86/+124
\|
*	Add tool for testing how fast the token loads	Stef Walter	2013-02-05	2	-0/+65
\|
*	Test a TRUSTED CERTIFICATE without any trust OIDs	Stef Walter	2013-02-05	2	-0/+38
\|
*	Add the builtin roots NSS specific object	Stef Walter	2013-02-05	2	-3/+30
\| \| \| \|	This tells NSS that this is a source of anchors.
*	Add support for openssl TRUSTED CERTIFICATE PEM files	Stef Walter	2013-02-05	2	-0/+95
\|
*	Add support for parsing PEM files	Stef Walter	2013-02-05	2	-0/+68
\|
*	Add basic trust module	Stef Walter	2013-02-05	17	-0/+1305
	This is based off the roots-store from gnome-keyring and loads certificates from a root directory and exposes them as PKCS#11 objects.