summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* trust: Correctly handle persisting OIDs with zero lengthStef Walter2013-07-031-2/+3
|
* trust: Don't write out internal attributes when persistingStef Walter2013-07-034-15/+63
|
* trust: Add support for saving files with unique file namesStef Walter2013-07-038-114/+298
|
* path: Add p11_path_canon() functionStef Walter2013-07-034-9/+36
| | | | Cleans up a filename with readable characters.
* trust: Rename p11_index_batch() to p11_index_load()Stef Walter2013-07-036-22/+22
| | | | | | The name makes it clearer what's going on. This is only used during loading, so we can track whether a change has resulted from the trust module or from the file storage.
* trust: Implement reloading of token dataStef Walter2013-07-0314-407/+746
| | | | | | | | | | | | | | | * Reload token data whenever a new session is opened. * Only reload files/directories that have changed. * Move duplicate anchor/blacklist detection logic into the extract code. This is in line with the approach being discussed on the mailing lists and spec document. * New internal attribute CKA_X_ORIGIN set on all objects so we can track where an object came from, and replace it when reloaded. In general this is a prerequisite for modification of objects reload before modify is necessary to prevent multiple callers clobbering each other's changes.
* iter: Add iteration mode where session is not busyStef Walter2013-07-0310-57/+144
| | | | | | | | | | | In order to use the session we are iterating on for other tasks such as other C_FindObject() calls, we need to make sure that it's not in the middle of a find operation. Finish up the complete find operation in advance of returning objects from a session. Make this the default mode. The previous behavior remains as an option. Add tests.
* path: Add p11_path_prefix() functionStef Walter2013-07-033-0/+33
| | | | | Checks if a wellformed path is identical to or a prefix of another path.
* trust: Implement validation for creating/modifying objectsStef Walter2013-06-262-43/+661
|
* Fix dependency between p11-kit command and libraryStef Walter2013-06-251-1/+1
|
* Fix running trust module tests under distcheckStef Walter2013-06-251-10/+12
|
* Reorganize various componentsStef Walter2013-06-2576-826/+638
| | | | | | | * p11-kit library and tool in the p11-kit/ subdirectory * trust module and new trust tool in trust/ subdirectory * No more tools/ subdirectory * Lots less in the common/ subdirectory
* Merge branch 'stable'Stef Walter2013-06-176-14/+21
|\
| * trust: Move the extract-trust external placeholder command into trust/Stef Walter2013-06-175-6/+7
| |
| * trust: Print out usage when extract-trust run incorrectlyStef Walter2013-06-171-1/+6
| | | | | | | | Also sorta covers --help and -h usage
| * tools: Fix passing args to external commandsStef Walter2013-06-171-0/+4
| | | | | | | | | | There were various bugs passing arguments, with duplicates being passed, as well as certain arguments being skipped.t
| * tools: Only use our private path when looking for external commandsStef Walter2013-06-171-7/+4
| | | | | | | | | | | | | | | | | | Instead of looking for external commands in the path, just look for them in our private directory. We want to be conservative early on, and limit what sorta things we have to maintain later. We can later remove this restriction if a real use case presents itself.
* | trust: Writable module PKCS#11 token functionsStef Walter2013-06-174-30/+111
| | | | | | | | | | | | Although we don't actually write anything out yet, make the various PKCS#11 functions behave properly when faced with requests to write to token objects
* | trust: Correctly reflect the CK_TOKEN_INFO writability flagsStef Walter2013-06-146-3/+187
| | | | | | | | | | Correctly set the CKF_TOKEN_WRITE_PROTECTED flag for paths which we will be able to write to.
* | path: Add p11_path_parent() functionStef Walter2013-06-143-0/+55
| | | | | | | | | | Gets the parent element of the path, removing the last component. Handles trailing and duplicate path separators correctly.
* | path: Fix expanding of paths and testsStef Walter2013-06-142-25/+37
| |
* | common: Abort test cases when one failsStef Walter2013-06-131-0/+2
| |
* | Merge branch 'stable'Stef Walter2013-06-054-5/+166
|\ \ | |/
| * Release version 0.18.3Stef Walter2013-06-052-1/+6
| |
| * trust: Fix crash when C_Initialize args are NULLStef Walter2013-06-052-1/+22
| | | | | | | | https://bugs.freedesktop.org/show_bug.cgi?id=65401
| * trust: Fix reinitialization of trust moduleStef Walter2013-06-053-4/+139
| | | | | | | | | | | | | | | | | | Track number of C_Initialize calls, and require similar number of C_Finalize calls to finalize. This fixes leaks/disappearing sessions in the trust module. https://bugs.freedesktop.org/show_bug.cgi?id=65401
| * Fix uninitialized p11_library_oncemanphiz@gmail.com2013-05-281-1/+1
| | | | | | | | https://bugs.freedesktop.org/show_bug.cgi?id=57714
| * Force Mac OS shared library extension to .soStef Walter2013-05-281-1/+11
| | | | | | | | | | | | | | Darwin and libtool seem confused about what shared library extension they actually use. https://bugs.freedesktop.org/show_bug.cgi?id=57714
* | Fix uninitialized p11_library_oncemanphiz@gmail.com2013-05-281-1/+1
| | | | | | | | https://bugs.freedesktop.org/show_bug.cgi?id=57714
* | Force Mac OS shared library extension to .soStef Walter2013-05-281-1/+11
| | | | | | | | | | | | | | Darwin and libtool seem confused about what shared library extension they actually use. https://bugs.freedesktop.org/show_bug.cgi?id=57714
* | persist: Support for writing out p11-kit persist filesStef Walter2013-05-275-90/+587
| |
* | constants: Tweaks and add mechanismsStef Walter2013-05-272-253/+245
| |
* | pem: Write PEM data directly to a bufferStef Walter2013-05-275-56/+71
| |
* | url: Encode directly to a bufferStef Walter2013-05-274-46/+50
| |
* | Release version 0.19.1Stef Walter2013-05-272-1/+12
| |
* | Mark p11_kit_message() as a stable functionStef Walter2013-05-212-3/+3
| |
* | Fix building of applications using CRYPTOKI_GNU styleStef Walter2013-05-211-1/+3
| |
* | Bump the version for deprecated function documentationStef Walter2013-05-211-9/+9
| |
* | Fix up Makefile.am files for automake 1.13 warningsStef Walter2013-05-217-8/+8
| |
* | Our own unit testing frameworkStef Walter2013-05-2158-5188/+3901
| | | | | | | | | | | | | | | | * Support the TAP protocol * Much cleaner without having to carry around state * First class support for setup/teardown * Port the common tests * Wait on porting other tests until we've merged outstanding code
* | Further reorganization of the core module trackingStef Walter2013-05-211-188/+161
| | | | | | | | | | | | | | | | | | * Keep the module ownership apart from the tracking of module function pointers, since these are only relevant for unmanaged modules. * Less assumptions that each module has a raw unmanaged module function pointer. * More clarity in the naming of dictionaries tracking the modules.
* | Pull the argv parsing code into its own fileStef Walter2013-05-214-74/+164
| | | | | | | | So it can be used from multiple code paths
* | Support /xxx/yyy as an absolute path with Win32Stef Walter2013-05-212-5/+5
| | | | | | | | | | Because win32 code doesn't just run on windows, wine runs with unix style paths.
* | Bump the version number to unstableStef Walter2013-05-211-1/+1
| |
* | Add the log-calls module config optionStef Walter2013-05-2115-36/+2646
| | | | | | | | | | If 'log-calls = yes' is set then all the PKCS#11 modules are logged to stderr.
* | Manage C_CloseAllSessions function for multiple callersStef Walter2013-05-215-8/+275
| | | | | | | | | | | | Make C_CloseAllSessions work for different callers. Track the sessions that each caller opens and close just those when C_CloseAllSessiosn is called.
* | Update the proxy module to use managed PKCS#11 modulesStef Walter2013-05-2111-265/+1422
| | | | | | | | | | | | | | | | | | | | Each time C_GetFunctionList is called on the proxy module, a new managed PKCS#11 set of functions is returned. These are all cleaned up when the module is unloaded. We want the proxy module to continue to work even without the highly recommended libffi. For that reason we still keep the old behavior of sharing state in the proxy module.
* | p11-kit: Managed PKCS#11 module loadingStef Walter2013-05-2136-486/+4594
| | | | | | | | | | | | | | | | | | Support a new managed style module loading for PKCS#11 modules. This allows us to better coordinate between multiple callers of the same PKCS#11 modules and provide hooks into their behavior. This meant redoing the public facing API. The old methods are now deprecated, marked and documented as such.
* | Use libffi to implement mixins for managed codeStef Walter2013-05-168-3/+3265
| | | | | | | | | | | | * This allows us to call into subclassed PKCS#11 modules as if they were plain old PKCS#11 modules * libffi is an optional dependency
* | Add subclassable CK_X_FUNCTION_LISTStef Walter2013-05-153-4/+1561
| | | | | | | | | | | | | | | | | | | | One of the flaws in PKCS#11 for our usage is that each PKCS#11 module is not passed the pointer to the function list, ie: the vtable Here we define a new function list vtable, where each PKCS#11 function takes the vtable itself as the first argument. We use this new list internally to represent subclassable PKCS#11 modules for various features.
generated by cgit v1.1 at 2024-12-27 21:35:56 +0000