Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | Various style, typo and whitespace corrections | Adrian-Ken Rueegsegger | 2012-01-13 | 1 | -3/+2 | |
| | | ||||||
* | | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. | Tobias Brunner | 2012-01-12 | 1 | -0/+2 | |
| | | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically. | |||||
* | | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 2 | -2/+2 | |
| | | ||||||
* | | Fix whitespaces | Adrian-Ken Rueegsegger | 2012-01-12 | 2 | -16/+16 | |
| | | ||||||
* | | Some documentation corrections | Adrian-Ken Rueegsegger | 2012-01-12 | 8 | -33/+32 | |
| | | ||||||
* | | Fix gettid() on Android, which is defined in unistd.h there. | Tobias Brunner | 2012-01-12 | 1 | -3/+4 | |
| | | ||||||
* | | Use native gettid() if available (which is the case on Android). | Tobias Brunner | 2012-01-10 | 1 | -3/+11 | |
| | | ||||||
* | | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME. | Tobias Brunner | 2011-12-23 | 6 | -14/+16 | |
| | | ||||||
* | | Avoid integer overflow when parsing ASN.1 dates. | Tobias Brunner | 2011-12-23 | 1 | -2/+2 | |
| | | | | | | | | This only works properly if sizeof(time_t) > 4. | |||||
* | | Properly ASN.1 encode dates in certificates depending on the year. | Tobias Brunner | 2011-12-23 | 6 | -16/+21 | |
| | | ||||||
* | | Added atomic compare and swap operations. | Tobias Brunner | 2011-12-23 | 2 | -0/+48 | |
| | | | | | | | | Using a GCC atomic builtin if available or a global mutex otherwise. | |||||
* | | Also log PGP parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -19/+19 | |
| | | ||||||
* | | Log messages for PKCS1 and PEM parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -11/+11 | |
| | | ||||||
* | | Log most X.509 related messages in new ASN log group. | Tobias Brunner | 2011-12-16 | 5 | -57/+57 | |
| | | ||||||
* | | Log ASN.1 parsing in new ASN debug group. | Tobias Brunner | 2011-12-16 | 2 | -26/+26 | |
| | | ||||||
* | | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509). | Tobias Brunner | 2011-12-16 | 2 | -0/+4 | |
| | | | | | | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels. | |||||
* | | Log native thread ID when a thread is created. | Tobias Brunner | 2011-12-16 | 1 | -1/+16 | |
| | | | | | | | | | | If possible gettid() is used, otherwise pthread_self() is logged (which is not completely portable, but seems to work on most supported platforms). | |||||
* | | Log worker thread ID with two digits. | Tobias Brunner | 2011-12-16 | 1 | -2/+2 | |
| | | ||||||
* | | Make sure the certificate cache is flushed when plugins are unloaded. | Tobias Brunner | 2011-12-15 | 1 | -0/+3 | |
| | | | | | | | | | | This avoids segmentation faults when plugins implementing cert_t are already unloaded when the cache is flushed during destruction. | |||||
* | | Be less verbose if plugin dependecy not satisfied | Martin Willi | 2011-12-07 | 1 | -1/+1 | |
| | | ||||||
* | | Create a dummy pthread key for value "0", as some buggy PKCS#11 libraries ↵ | Martin Willi | 2011-12-07 | 1 | -0/+10 | |
| | | | | | | | | mangle it | |||||
* | | fixed copy-and-paste error | Andreas Steffen | 2011-12-04 | 1 | -1/+1 | |
| | | ||||||
* | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 3 | -63/+0 | |
| | | ||||||
* | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -2/+2 | |
| | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 3 | -0/+63 | |
| | | ||||||
* | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 3 | -63/+0 | |
| | | ||||||
* | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -3/+2 | |
| | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 3 | -0/+65 | |
| | | ||||||
* | | extended bio_reader and bio_writer to handle u_int64_t | Andreas Steffen | 2011-11-28 | 5 | -0/+84 | |
| | | ||||||
* | | Added ctime function to white list | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+1 | |
| | | ||||||
* | | Fixed compiler warnings for DH groups that define no subgroup. | Tobias Brunner | 2011-11-25 | 1 | -8/+16 | |
| | | ||||||
* | | Fixed missing initializer compiler warning. | Tobias Brunner | 2011-11-25 | 1 | -2/+2 | |
| | | ||||||
* | | Fixed compiler warnings regarding enum comparison. | Tobias Brunner | 2011-11-25 | 2 | -4/+4 | |
| | | | | | | | | | | | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity. | |||||
* | | pkcs11: Fixed a bug when creating public keys. | Tobias Brunner | 2011-11-09 | 1 | -1/+1 | |
|/ | ||||||
* | gcrypt does not support MD2 | Andreas Steffen | 2011-11-09 | 1 | -1/+0 | |
| | ||||||
* | assign get_features method | Andreas Steffen | 2011-11-07 | 1 | -1/+1 | |
| | ||||||
* | Change order of ocsp uris when parsing a cert | Thomas Egerer | 2011-11-04 | 1 | -1/+1 | |
| | ||||||
* | Handle certificates being on hold in a CRL | Thomas Egerer | 2011-11-04 | 3 | -1/+14 | |
| | | | | | | | Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not. | |||||
* | Use chunk_clear to memwipe shared secret | Thomas Egerer | 2011-11-04 | 1 | -1/+1 | |
| | ||||||
* | Fix resource leak in x509_ocsp_response | Thomas Egerer | 2011-11-04 | 1 | -0/+4 | |
| | ||||||
* | Common spelling errors fixed. | Tobias Brunner | 2011-11-03 | 1 | -1/+1 | |
| | ||||||
* | pkcs11: Make public key operations on tokens optional. | Tobias Brunner | 2011-11-03 | 1 | -20/+21 | |
| | ||||||
* | pkcs11: Make sure a key can be used for a given signature scheme. | Tobias Brunner | 2011-11-02 | 3 | -16/+31 | |
| | ||||||
* | pkcs11: Register ECDSA feature. | Tobias Brunner | 2011-11-02 | 1 | -1/+10 | |
| | ||||||
* | pkcs11: We have to create our own hashes for some signature schemes. | Tobias Brunner | 2011-11-02 | 4 | -12/+81 | |
| | ||||||
* | pkcs11: Lookup the public key of a private key by CKA_ID. | Tobias Brunner | 2011-11-02 | 2 | -0/+125 | |
| | | | | | | Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there. | |||||
* | pkcs11: Search for private keys in a more generic way. | Tobias Brunner | 2011-11-02 | 1 | -20/+19 | |
| | | | | | | Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key. | |||||
* | pkcs11: Added support to encode ECDSA public keys. | Tobias Brunner | 2011-11-02 | 1 | -0/+89 | |
| | ||||||
* | pkcs11: Parse ECDSA public keys and find/create them on tokens. | Tobias Brunner | 2011-11-02 | 1 | -2/+177 | |
| | ||||||
* | pkcs11: Added generic functions to find/create public keys on tokens. | Tobias Brunner | 2011-11-02 | 1 | -40/+75 | |
| |