summaryrefslogtreecommitdiff
path: root/lib/pkcs11x.c
Commit message (Collapse)AuthorAgeFilesLines
* pkcs11: forbid PKCS#11 extensions to be used in other than trust modulesNikos Mavrogiannopoulos2016-09-271-0/+5
| | | | | | That is, only use the CKA_X_DISTRUSTED and the extension override in p11-kit trust modules, to avoid conflicts with potentially other PKCS#11 extensions.
* pkcs11: only staple extensions from a trust module when they are from a ↵Nikos Mavrogiannopoulos2016-09-261-4/+12
| | | | | | | | | | non-distrusted certificate That is, make sure that the API for stapling extensions is only used for non-distrusted (blacklisted) certificates. The reason is to avoid duplicate extension entries from the p11-kit trust database. These come from blacklisted certificates, and we have no reason to support stapled extensions with blacklisted certificates.
* several spacing fixes to keep syntax-check happyNikos Mavrogiannopoulos2016-09-111-7/+7
|
* pkcs11: find_ext_cb: eliminated memory leakNikos Mavrogiannopoulos2016-05-031-0/+1
|
* gnutls_pkcs11_obj_get_exts: updated documentationNikos Mavrogiannopoulos2016-05-021-3/+6
|
* Removed the 'gnutls_' prefix from files to simplify file namingNikos Mavrogiannopoulos2015-08-231-3/+3
|
* Added GNUTLS_PKCS11_TOKEN_MODNAME for gnutls_pkcs11_token_get_infoNikos Mavrogiannopoulos2015-07-101-3/+3
| | | | That allows to obtain the shared module name of a token URL.
* doc: avoid using structure for opaque typesNikos Mavrogiannopoulos2015-03-201-1/+1
|
* pkcs11: eliminated the need for struct token_infoNikos Mavrogiannopoulos2014-11-061-3/+3
|
* simulate pkcs11x.h when it doesn't existNikos Mavrogiannopoulos2014-09-131-5/+1
|
* added missing fileNikos Mavrogiannopoulos2014-09-121-0/+299