p11-kit.git - Clone of https://github.com/p11-glue/p11-kit

	Commit message (Collapse)	Author	Age	Files	Lines
*	Abstract mmap() into a compat API	Stef Walter	2013-03-03	1	-21/+7
\| \| \| \| \|	The Win32 for mmap() is very different from Unix, so abstract this into our own p11_mmap_xxx() functions.
*	Use putenv() instead of setenv()	Stef Walter	2013-03-03	4	-4/+4
\| \| \| \|	Since older operating systems don't support setenv()
*	Only do shared object and DLL initialization in libraries	Stef Walter	2013-02-20	1	-0/+55
\| \| \| \| \| \|	Don't do library initialization on shared object load when not running in a library. We'll want to plug into this and do different things per library in the future.
*	Use the CN, OU or O of certificates to generate a label	Stef Walter	2013-02-05	2	-32/+41
\| \| \| \| \|	* This is in cases where the certificate information does not already have a friendly name or alias.
*	Move the X.509 extension parsing code in common/	Stef Walter	2013-02-05	2	-121/+80
\| \| \| \|	* So it can be used by other code, in addition to the trust stuff
*	Implement trust assertion PKCS#11 objects	Stef Walter	2013-02-05	7	-43/+783
\| \| \| \| \| \|	* Implement trust assertions for anchored and distrusted certs * Pinned certificate trust assertions are not implemented yet * Add an internal tool for pulling apart bits of certificates
*	Refactor how parsing of ASN.1 data and certificate extensions work	Stef Walter	2013-02-05	5	-664/+58
\|
*	Fill in certificate authority and trust data correctly	Stef Walter	2013-02-05	7	-163/+548
\| \| \| \| \| \| \| \| \| \| \| \|	* Fill in CKA_CERTIFICATE_CATEGORY properly for authorities based on the presence of BasicConstraints and/or v1 certificates * Fill in CKA_TRUSTED and CKA_X_DISTRUSTED based on whether the parser is running for anchors or blacklist * In addition support the concept of blacklisted certificates mixed in with the anchors (without any purposes) since that's what exists in the real world. * We do this after the various hooks have had a chance to mess with the certificate extensions and such.
*	Implement stapled certificate extensions internally	Stef Walter	2013-02-05	8	-366/+894
\| \| \| \| \| \| \| \| \| \| \| \|	* Use stapled certificate extensions to represent loaded trust policy * Build NSS trust objects from stapled certificate extensions * Add further attribute debugging for NSS trust objects * Use a custom certificate extension for the OpenSSL reject purpose data * Use SubjectKeyIdentifier for OpenSSL keyid data * Use ExtendedKeyUsage for OpenSSL trust purpose data * Implement simple way to handle binary DER OIDs, using the DER TLV length. DER OIDs are used in the CKA_OBJECT_ID value, and elsewhere. * Split out the building of NSS trust objects from the main parser
*	Better debugging and checks for attribute values	Stef Walter	2013-02-05	4	-86/+124
\|
*	Add tool for testing how fast the token loads	Stef Walter	2013-02-05	2	-0/+65
\|
*	Some debug info about which files are being loaded	Stef Walter	2013-02-05	1	-2/+15
\|
*	Test a TRUSTED CERTIFICATE without any trust OIDs	Stef Walter	2013-02-05	2	-0/+38
\|
*	Add the builtin roots NSS specific object	Stef Walter	2013-02-05	3	-4/+57
\| \| \| \|	This tells NSS that this is a source of anchors.
*	Add support for openssl TRUSTED CERTIFICATE PEM files	Stef Walter	2013-02-05	3	-40/+299
\|
*	Add support for parsing PEM files	Stef Walter	2013-02-05	4	-1/+108
\|
*	Add basic trust module	Stef Walter	2013-02-05	27	-0/+4724
	This is based off the roots-store from gnome-keyring and loads certificates from a root directory and exposes them as PKCS#11 objects.