<feed xmlns='http://www.w3.org/2005/Atom'>
<title>p11-kit.git/trust/input, branch p11p</title>
<subtitle>Clone of https://github.com/p11-glue/p11-kit</subtitle>
<link rel='alternate' type='text/html' href='https://git.sunet.se/p11-kit.git/'/>
<entry>
<title>trust: Filter out duplicate extensions</title>
<updated>2018-01-31T13:54:43+00:00</updated>
<author>
<name>Daiki Ueno</name>
<email>dueno@redhat.com</email>
</author>
<published>2018-01-31T13:07:51+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/p11-kit.git/commit/?id=57697eda68a3343c2e54e5f8f3f4ce65a99383f5'/>
<id>57697eda68a3343c2e54e5f8f3f4ce65a99383f5</id>
<content type='text'>
The trust policy module keeps all the objects in the database, while
PKIX doesn't allow multiple extensions identified by the same OID can
be attached to a certificate.  Add a check to C_FindObjects to exclude
any duplicates and only return the first matching object.

It would be better if the module rejects such duplicates when loading,
but it would make startup slower.

https://bugzilla.redhat.com/show_bug.cgi?id=1141241
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The trust policy module keeps all the objects in the database, while
PKIX doesn't allow multiple extensions identified by the same OID can
be attached to a certificate.  Add a check to C_FindObjects to exclude
any duplicates and only return the first matching object.

It would be better if the module rejects such duplicates when loading,
but it would make startup slower.

https://bugzilla.redhat.com/show_bug.cgi?id=1141241
</pre>
</div>
</content>
</entry>
<entry>
<title>Revert "trust: Honor "modifiable" setting in persist file"</title>
<updated>2017-05-18T10:55:02+00:00</updated>
<author>
<name>Daiki Ueno</name>
<email>dueno@redhat.com</email>
</author>
<published>2017-05-18T08:45:26+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/p11-kit.git/commit/?id=acf8c4a91a76bf8049f6bfbd95b04e2e36bae4ea'/>
<id>acf8c4a91a76bf8049f6bfbd95b04e2e36bae4ea</id>
<content type='text'>
This reverts commit 8eed1e60b0921d05872e2f43eee9088cef038d7e, which
broke "trust anchor --remove".
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
This reverts commit 8eed1e60b0921d05872e2f43eee9088cef038d7e, which
broke "trust anchor --remove".
</pre>
</div>
</content>
</entry>
<entry>
<title>trust: Honor "modifiable" setting in persist file</title>
<updated>2017-02-20T11:44:05+00:00</updated>
<author>
<name>Daiki Ueno</name>
<email>dueno@redhat.com</email>
</author>
<published>2017-02-17T15:18:21+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/p11-kit.git/commit/?id=8eed1e60b0921d05872e2f43eee9088cef038d7e'/>
<id>8eed1e60b0921d05872e2f43eee9088cef038d7e</id>
<content type='text'>
Previously, all objects read from p11-kit persist files are marked as
modifiable when parsing, regardless of the explicit "modifiable: false"
setting in the file.

Reported by Kai Engert in:
https://bugs.freedesktop.org/show_bug.cgi?id=99797
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Previously, all objects read from p11-kit persist files are marked as
modifiable when parsing, regardless of the explicit "modifiable: false"
setting in the file.

Reported by Kai Engert in:
https://bugs.freedesktop.org/show_bug.cgi?id=99797
</pre>
</div>
</content>
</entry>
<entry>
<title>Move to non-recursive Makefile for building bins and libs</title>
<updated>2014-08-15T08:43:04+00:00</updated>
<author>
<name>Stef Walter</name>
<email>stef@thewalter.net</email>
</author>
<published>2014-08-15T06:41:43+00:00</published>
<link rel='alternate' type='text/html' href='https://git.sunet.se/p11-kit.git/commit/?id=677dee1a04058aefe8c7689f88da52afe3b4b4bb'/>
<id>677dee1a04058aefe8c7689f88da52afe3b4b4bb</id>
<content type='text'>
Still use recursive for documentation and translation.
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Still use recursive for documentation and translation.
</pre>
</div>
</content>
</entry>
</feed>
