Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Refactor how parsing of ASN.1 data and certificate extensions work | Stef Walter | 2013-02-05 | 1 | -26/+2 |
| | |||||
* | Fill in certificate authority and trust data correctly | Stef Walter | 2013-02-05 | 1 | -0/+9 |
| | | | | | | | | | | | | * Fill in CKA_CERTIFICATE_CATEGORY properly for authorities based on the presence of BasicConstraints and/or v1 certificates * Fill in CKA_TRUSTED and CKA_X_DISTRUSTED based on whether the parser is running for anchors or blacklist * In addition support the concept of blacklisted certificates mixed in with the anchors (without any purposes) since that's what exists in the real world. * We do this after the various hooks have had a chance to mess with the certificate extensions and such. | ||||
* | Better debugging and checks for attribute values | Stef Walter | 2013-02-05 | 1 | -2/+30 |
| | |||||
* | Add basic trust module | Stef Walter | 2013-02-05 | 1 | -0/+220 |
This is based off the roots-store from gnome-keyring and loads certificates from a root directory and exposes them as PKCS#11 objects. |