summaryrefslogtreecommitdiff
path: root/p11-kit/Makefile.am
Commit message (Collapse)AuthorAgeFilesLines
* filter: New virtual wrapper for access controlDaiki Ueno2017-02-081-0/+5
|
* build: Make libffi closure optionalDaiki Ueno2017-01-241-4/+1
| | | | | | | | libffi's closure support is not available on all platforms and may fail at run time if running under a stricter SELinux policy. Fallback to pre-compiled closures if it is not usable. https://bugs.freedesktop.org/show_bug.cgi?id=97611
* systemd: add per-user remoting socketLubomir Rintel2017-01-201-0/+11
| | | | | | This allows daemons outside user's session to use per-user PKCS#11 modules. Useful for letting VPN daemons or wpa_supplicant use certificates stored in user's GNOME keyring, etc.
* build: improve p11-kit-proxy symlink handlingRoman Bogorodskiy2017-01-091-1/+9
| | | | | | | | | | - Current command for creation of the p11-kit-proxy symlink uses shell brace expansion that isn't supported by all the shells (e.g. FreeBSD's /bin/sh does not support that). Replace it with the old-fashioned 'for' loop - Match extension of the source and the target, i.e. so links to so, dylib links to dylib (previously dylib linked to so) - Add an uninstall-local target to clean up the symlink
* build: Remove *.in files from EXTRA_DISTDaiki Ueno2016-11-151-2/+0
| | | | | The files created with AC_CONFIG_FILES are automatically added to the distribution.
* rpc: Send x-init-reserved to remote moduleDaiki Ueno2016-10-051-1/+6
| | | | | | | Signed-off-by: Stef Walter <stefw@redhat.com> * Fixed up indentation https://bugs.freedesktop.org/show_bug.cgi?id=80519
* Fix link of p11-kit-proxy.dylib on Mac OS XLeonardo Brondani Schenkel2016-10-031-1/+1
| | | | | | | | | However, on Mac OS X the library is named libp11-kit.dylib so in the above command the source of the link resolves to nothing, the destination becomes the source and the link to a non-existent file is created in the working directory. https://bugs.freedesktop.org/show_bug.cgi?id=98022
* remote: Run separate executable binary for 'p11-kit remote'Stef Walter2014-10-021-1/+12
| | | | | This allows security frameworks like SELinux or AppArmor to target it specifically.
* Move to non-recursive Makefile for building bins and libsStef Walter2014-08-151-74/+170
| | | | Still use recursive for documentation and translation.
* p11-kit: Add 'p11-kit remote' command for isolating modulesStef Walter2014-07-081-0/+2
| | | | | This adds a new tool to the p11-kit command called 'remote'. This is the server side of remoting a PKCS#11 module.
* rpc: Implement execution of another tool to transport PKCS#11 RPCStef Walter2014-07-081-1/+2
|
* rpc: Implement PKCS#11 messages/client/server codeStef Walter2014-07-081-0/+2
| | | | | | | | | | | | * This enables passing around bytes which represent PKCS#11 RPC calls. * Caller is responsible for connecting/disconnecting and so on. * Client side caller gets a mixin from p11_rpc_client_init() to call into, which generates callbacks with byte arrays to be transported. * Server side calls p11_rpc_server_handle() with a CK_FUNCTION_LIST_PTR on which relevant methods get called. * Doesn't yet implement the actual daemon or clients etc... https://bugs.freedesktop.org/show_bug.cgi?id=54105
* Don't try to symlink p11-proxy.so on windowsMilan Crha2014-06-201-5/+5
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=76594
* p11-kit: Rename list.c to lists.c to simplify debuggingStef Walter2013-08-281-1/+1
|
* trust: Fix the 'p11-kit extract' commandStef Walter2013-07-091-0/+1
| | | | | This is supposed to call over to 'trust extract' and wasn't working correctly.
* Fix dependency between p11-kit command and libraryStef Walter2013-06-251-1/+1
|
* Reorganize various componentsStef Walter2013-06-251-0/+20
| | | | | | | * p11-kit library and tool in the p11-kit/ subdirectory * trust module and new trust tool in trust/ subdirectory * No more tools/ subdirectory * Lots less in the common/ subdirectory
* Fix up Makefile.am files for automake 1.13 warningsStef Walter2013-05-211-1/+1
|
* Add the log-calls module config optionStef Walter2013-05-211-0/+1
| | | | | If 'log-calls = yes' is set then all the PKCS#11 modules are logged to stderr.
* Update the proxy module to use managed PKCS#11 modulesStef Walter2013-05-211-1/+1
| | | | | | | | | | Each time C_GetFunctionList is called on the proxy module, a new managed PKCS#11 set of functions is returned. These are all cleaned up when the module is unloaded. We want the proxy module to continue to work even without the highly recommended libffi. For that reason we still keep the old behavior of sharing state in the proxy module.
* p11-kit: Managed PKCS#11 module loadingStef Walter2013-05-211-2/+5
| | | | | | | | | Support a new managed style module loading for PKCS#11 modules. This allows us to better coordinate between multiple callers of the same PKCS#11 modules and provide hooks into their behavior. This meant redoing the public facing API. The old methods are now deprecated, marked and documented as such.
* Use libffi to implement mixins for managed codeStef Walter2013-05-161-1/+6
| | | | | | * This allows us to call into subclassed PKCS#11 modules as if they were plain old PKCS#11 modules * libffi is an optional dependency
* Separate library init from message codeStef Walter2013-04-031-1/+1
| | | | | | | | | | | Put library init/uninit code its into their own statically linked library so that they don't get linked into the p11-kit executable. Refactor the message code so that the library initialization can plug in its per thread message buffer. https://bugs.freedesktop.org/show_bug.cgi?id=63046
* Add a bit of infrastructure for running valgrindStef Walter2013-03-201-1/+2
| | | | | * make memcheck: Runs basic memory checking * make leakcheck: Also runs leak checking
* Respect destdir when creating package module config directoryAndreas Metzler2013-02-121-1/+1
|
* Add public iterator API to p11-kitStef Walter2013-02-051-0/+2
|
* Add basic trust moduleStef Walter2013-02-051-0/+1
| | | | | | This is based off the roots-store from gnome-keyring and loads certificates from a root directory and exposes them as PKCS#11 objects.
* Add a /usr/share/p11-kit/modules directory for package module configsStef Walter2013-02-051-0/+4
| | | | | | * Try to make /etc/pkcs11/modules for administrator use * Override the old pkg-config variables to help packages start using the new location
* Move the pkcs11.h header files into common directoryStef Walter2013-01-091-1/+2
| | | | | | | * Allows use of them across the whole project * Put a stub file in the p11-kit/ directory, so we can still refer to the headers using that path, which is what it will be at when in the installed includes directory.
* Build common code into noinst librariesStef Walter2013-01-091-26/+8
| | | | | | * This is cleaner than building the same source files all over the place over and over. * Works better with code coverage.
* Move debug and library code into the common/ subdirectoryStef Walter2013-01-091-21/+33
| | | | | | | | | | | Start using p11_ as our internal prefix rather than _p11_. We explicitly export p11_kit_ so this is fine as far as visibility. Move the threading, mutex, and module compat, dict, and array code into the common directory too. Take this opportunity to clean up a bit of internal API as well, since so many lines are being touched internally.
* Use correct shared library extension on windowsStef Walter2012-07-261-0/+14
| | | | | | | | * The windows shared libraries have the .dll extension * This means we also need separate directories for the test module configs on win32 https://bugzilla.gnome.org/show_bug.cgi?id=44740
* Fix test modules linking errorsStef Walter2012-05-011-0/+2
| | | | * And display warning messages in the debug output
* Provide compat getprogname() implementations on other OS'sStef Walter2012-05-011-1/+6
| | | | * And use them in our replacement err() and p11_kit_set_progname()
* Move the compat.[ch] headers into common directory/Stef Walter2012-04-301-2/+1
| | | | | * And the compat stuff in the p11-kit directory merged into util.c and util.h
* Add tests for enable-in and disable-inStef Walter2012-04-021-4/+4
|
* Build some test modules for testing main p11-kit functionalityStef Walter2012-04-021-7/+22
| | | | * And put together a test for duplicate modules
* Fix broken build on cygwin and mingwDr. Volker Zell2011-10-251-0/+2
| | | | * Add correct linking options for libintl
* Initial port to win32Stef Walter2011-10-171-0/+1
| | | | | | | | * Tests do not all yet pass, at least not on wine * Added abstraction of some non-portable functions in compat.h/c * Build with an argument like this for win32 support: ./autogen.sh --host=i586-mingw32msvc * This win32 port needs more work from interested parties
* Fix quoting of build variablesAndreas Metzler2011-09-261-2/+2
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=40985
* Expand the libdir path correctlyStef Walter2011-09-191-1/+8
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=40985
* Rename pkgconfig configuration directory variablesKalev Lember2011-09-141-1/+1
| | | | | | | | | | | | Renamed them to reduce ambiguity and to pave the way for exposing some additional parameters. p11_system_modules -> p11_system_config_modules p11_user_modules -> p11_user_config_modules configure --with-pkcs11-dir => configure --with-system-config
* Add example configuration documentation.Stef Walter2011-08-011-1/+5
| | | | * And also install example pkcs11.conf file.
* Make p11-kit-proxy.so link point to libp11-kit.so.0.0.0Stef Walter2011-07-281-1/+1
| | | | | | | * The link now points to the actual library, rather than to another link. https://bugzilla.redhat.com/show_bug.cgi?id=725905
* Add libtool style versioning variables to p11-kitStef Walter2011-07-271-1/+3
|
* Create a link for the proxy module.Stef Walter2011-07-271-1/+5
| | | | | | | | | | | | * Install proxy module at its own path which is not prefixed by 'lib' * Since the proxy module is the same as the library, and actually needs to be loaded as the same library in memory (due to resource tracking per process), use a symlink for proxy. * Add a variable to the pkg-config file which shows the path to the proxy module. ie: $ pkg-config --variable=proxy_module p11-kit-1 https://bugzilla.redhat.com/show_bug.cgi?id=725905
* Reimplement and remove apache licensed bits of code.Stef Walter2011-07-271-1/+1
| | | | | | | | | | * Reimplement the various bits of the hash table that were still based on the apache apr code. Use different algorithms for hashing, lookup and other stuff. * Use this as an opportunity to cleanup that code and make it more legible. https://bugzilla.redhat.com/show_bug.cgi?id=725905
* Implement support for registering and calling pinfile callbacksStef Walter2011-07-061-0/+3
| | | | | | * These are callbacks that hanlde the pinfile part of a PKCS#11 URI. * One library can register a callback that another can then call in a thread-safe and simple fashion.
* Store last failure message per thread.Stef Walter2011-06-091-1/+2
| | | | * Add p11_kit_message() function to get last message.
* Refactor configurationStef Walter2011-06-081-1/+1
| | | | | * Move configuration loading into conf.c * Have user modules with same name merge/override modules in system.