p11-kit.git - Clone of https://github.com/p11-glue/p11-kit

	Commit message (Collapse)	Author	Age	Files	Lines
*	trust: Refactor to include concept of the index	Stef Walter	2013-03-15	1	-0/+1
\| \| \| \| \| \| \| \| \| \|	* The index holds PKCS#11 objects whether for the token or for the session. * The index provides hook for a builder to expand or validate objects being added to the index. * In addition theres a change hook so that a builder can maintain state between objects, such as the compat NSS trust objects. https://bugs.freedesktop.org/show_bug.cgi?id=62329
*	Build with the libtasn1 CFLAGS properly	Stef Walter	2013-03-04	1	-0/+1
\| \| \| \| \| \|	Tweaks by: Roman Bogorodskiy <bogorodskiy@gmail.com> https://bugs.freedesktop.org/show_bug.cgi?id=61739
*	Implement trust assertion PKCS#11 objects	Stef Walter	2013-02-05	1	-1/+1
\| \| \| \| \| \|	* Implement trust assertions for anchored and distrusted certs * Pinned certificate trust assertions are not implemented yet * Add an internal tool for pulling apart bits of certificates
*	Implement stapled certificate extensions internally	Stef Walter	2013-02-05	1	-0/+1
\| \| \| \| \| \| \| \| \| \| \| \|	* Use stapled certificate extensions to represent loaded trust policy * Build NSS trust objects from stapled certificate extensions * Add further attribute debugging for NSS trust objects * Use a custom certificate extension for the OpenSSL reject purpose data * Use SubjectKeyIdentifier for OpenSSL keyid data * Use ExtendedKeyUsage for OpenSSL trust purpose data * Implement simple way to handle binary DER OIDs, using the DER TLV length. DER OIDs are used in the CKA_OBJECT_ID value, and elsewhere. * Split out the building of NSS trust objects from the main parser
*	Add support for parsing PEM files	Stef Walter	2013-02-05	1	-1/+2
\|
*	Add basic trust module	Stef Walter	2013-02-05	1	-0/+52
	This is based off the roots-store from gnome-keyring and loads certificates from a root directory and exposes them as PKCS#11 objects.