Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Create a dummy pthread key for value "0", as some buggy PKCS#11 libraries ↵ | Martin Willi | 2011-12-07 | 1 | -0/+10 | |
| | | | | mangle it | |||||
* | fixed copy-and-paste error | Andreas Steffen | 2011-12-04 | 1 | -1/+1 | |
| | ||||||
* | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 3 | -63/+0 | |
| | ||||||
* | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -2/+2 | |
| | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 3 | -0/+63 | |
| | ||||||
* | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 3 | -63/+0 | |
| | ||||||
* | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -3/+2 | |
| | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 3 | -0/+65 | |
| | ||||||
* | extended bio_reader and bio_writer to handle u_int64_t | Andreas Steffen | 2011-11-28 | 5 | -0/+84 | |
| | ||||||
* | Added ctime function to white list | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+1 | |
| | ||||||
* | Fixed compiler warnings for DH groups that define no subgroup. | Tobias Brunner | 2011-11-25 | 1 | -8/+16 | |
| | ||||||
* | Fixed missing initializer compiler warning. | Tobias Brunner | 2011-11-25 | 1 | -2/+2 | |
| | ||||||
* | Fixed compiler warnings regarding enum comparison. | Tobias Brunner | 2011-11-25 | 2 | -4/+4 | |
| | | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity. | |||||
* | pkcs11: Fixed a bug when creating public keys. | Tobias Brunner | 2011-11-09 | 1 | -1/+1 | |
| | ||||||
* | gcrypt does not support MD2 | Andreas Steffen | 2011-11-09 | 1 | -1/+0 | |
| | ||||||
* | assign get_features method | Andreas Steffen | 2011-11-07 | 1 | -1/+1 | |
| | ||||||
* | Change order of ocsp uris when parsing a cert | Thomas Egerer | 2011-11-04 | 1 | -1/+1 | |
| | ||||||
* | Handle certificates being on hold in a CRL | Thomas Egerer | 2011-11-04 | 3 | -1/+14 | |
| | | | | | | | Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not. | |||||
* | Use chunk_clear to memwipe shared secret | Thomas Egerer | 2011-11-04 | 1 | -1/+1 | |
| | ||||||
* | Fix resource leak in x509_ocsp_response | Thomas Egerer | 2011-11-04 | 1 | -0/+4 | |
| | ||||||
* | Common spelling errors fixed. | Tobias Brunner | 2011-11-03 | 1 | -1/+1 | |
| | ||||||
* | pkcs11: Make public key operations on tokens optional. | Tobias Brunner | 2011-11-03 | 1 | -20/+21 | |
| | ||||||
* | pkcs11: Make sure a key can be used for a given signature scheme. | Tobias Brunner | 2011-11-02 | 3 | -16/+31 | |
| | ||||||
* | pkcs11: Register ECDSA feature. | Tobias Brunner | 2011-11-02 | 1 | -1/+10 | |
| | ||||||
* | pkcs11: We have to create our own hashes for some signature schemes. | Tobias Brunner | 2011-11-02 | 4 | -12/+81 | |
| | ||||||
* | pkcs11: Lookup the public key of a private key by CKA_ID. | Tobias Brunner | 2011-11-02 | 2 | -0/+125 | |
| | | | | | | Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there. | |||||
* | pkcs11: Search for private keys in a more generic way. | Tobias Brunner | 2011-11-02 | 1 | -20/+19 | |
| | | | | | | Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key. | |||||
* | pkcs11: Added support to encode ECDSA public keys. | Tobias Brunner | 2011-11-02 | 1 | -0/+89 | |
| | ||||||
* | pkcs11: Parse ECDSA public keys and find/create them on tokens. | Tobias Brunner | 2011-11-02 | 1 | -2/+177 | |
| | ||||||
* | pkcs11: Added generic functions to find/create public keys on tokens. | Tobias Brunner | 2011-11-02 | 1 | -40/+75 | |
| | ||||||
* | pkcs11: Store public key length in bits. | Tobias Brunner | 2011-11-02 | 1 | -3/+3 | |
| | ||||||
* | pkcs11: Fix encoding of RSA public keys. | Tobias Brunner | 2011-11-02 | 1 | -0/+4 | |
| | ||||||
* | pkcs11: Use create_object_attr_enumerator to encode RSA public key. | Tobias Brunner | 2011-11-02 | 1 | -17/+7 | |
| | ||||||
* | pkcs11: Instead of a mutex use a new session to do multipart operations. | Tobias Brunner | 2011-11-02 | 2 | -40/+66 | |
| | ||||||
* | pkcs11: Function added to retrieve multiple attributes from a single object. | Tobias Brunner | 2011-11-02 | 2 | -6/+62 | |
| | ||||||
* | pkcs11: Memory leak fixed in DH/ECDH implementation. | Tobias Brunner | 2011-11-02 | 1 | -0/+2 | |
| | ||||||
* | pkcs11: Invalid free fixed in DH/ECDH implementation. | Tobias Brunner | 2011-11-02 | 1 | -1/+4 | |
| | ||||||
* | pkcs11: Changed how pkcs11-manager is initialized. | Tobias Brunner | 2011-11-02 | 1 | -42/+32 | |
| | | | | | The manager is now created directly, but events and certificate loading is deferred. | |||||
* | pkcs11: Add attributes to specify what we use the DH/ECDH keys for. | Tobias Brunner | 2011-11-02 | 1 | -2/+10 | |
| | ||||||
* | pkcs11: Allow to build pkcs11 plugin on Android. | Tobias Brunner | 2011-10-31 | 1 | -0/+2 | |
| | ||||||
* | pkcs11: Use callback registration for pkcs11-manager. | Tobias Brunner | 2011-10-31 | 1 | -25/+73 | |
| | | | | | | Otherwise a plugin providing X509 decoding capabilities might be unloaded before the manager which will result in a segmentation fault when certificates in the manager's credential sets are to be destroyed. | |||||
* | pkcs11: Merged the ECDH into the DH implementation. | Tobias Brunner | 2011-10-31 | 6 | -405/+210 | |
| | ||||||
* | pkcs11: Use get_ck_attribute for ECDH. | Tobias Brunner | 2011-10-31 | 1 | -63/+13 | |
| | ||||||
* | pkcs11: Use get_ck_attribute for DH. | Tobias Brunner | 2011-10-31 | 1 | -28/+6 | |
| | ||||||
* | pkcs11: Method added to library to extract a single attribute from an object. | Tobias Brunner | 2011-10-31 | 2 | -1/+50 | |
| | ||||||
* | pkcs11: Added names for CKA_* constants. | Tobias Brunner | 2011-10-31 | 2 | -1/+123 | |
| | ||||||
* | pkcs11: Added support for ECDH. | Tobias Brunner | 2011-10-31 | 4 | -1/+422 | |
| | ||||||
* | pkcs11: Added definitions needed for ECDH to pkcs11.h. | Tobias Brunner | 2011-10-31 | 1 | -0/+24 | |
| | ||||||
* | pkcs11: Specify object class and key type when deriving DH secrets. | Tobias Brunner | 2011-10-31 | 1 | -0/+4 | |
| | | | | pkcs11_softtoken on OpenSolaris requires this (probably others too). | |||||
* | pkcs11: Add features support. | Tobias Brunner | 2011-10-31 | 3 | -84/+90 | |
| |