summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Release version 0.18.60.18.6Stef Walter2013-10-102-1/+6
|
* do not assume dead code existence in autoconf checksAlon Bar-Lev2013-07-291-1/+1
| | | | | | | when compiler optimize source, it removes dead code so a linkage error in these cases are not visisble. Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com>
* Disable tests with setgid binaries when running in fakerootStef Walter2013-07-242-2/+8
| | | | | We use the FAKED_MODE environment variable as a way to detect fakeroot.
* build: support uclibc for program_invocation_short_nameAlon Bar-Lev2013-07-241-1/+1
| | | | | | | | requires errno.h to properly detect. Signed-off-by: Alon Bar-Lev <alon.barlev@gmail.com> https://bugs.freedesktop.org/show_bug.cgi?id=67125
* Use simple serial automake test harnessStef Walter2013-07-246-3/+108
| | | | | * Add a testing sanity check to see if we're catching errors * Fix a few other testing issues
* Avoid using the non-thread-safe strerror() functionStef Walter2013-07-2413-42/+160
| | | | https://bugzilla.redhat.com/show_bug.cgi?id=985481
* Don't use _GNU_SOURCEStef Walter2013-07-243-6/+17
| | | | | glibc declares functions completely different if in POSIX or GNU mode. Nastiness. Stop using _GNU_SOURCE all together.
* doc: Add identifiers to doc sections so gtk-doc doesn't autogen themStef Walter2013-07-183-10/+10
|
* Release version 0.18.50.18.5Stef Walter2013-07-182-1/+12
|
* Fix extract example in documentationStef Walter2013-07-181-1/+1
|
* url: Don't escape '6' in URL encodingStef Walter2013-07-181-1/+1
|
* Use getpwuid_r() instead of the non-thread-sofe getpwuid()Stef Walter2013-07-181-2/+9
|
* Fix p11_kit_space_strlen() result when empty stringStef Walter2013-07-183-3/+74
| | | | https://bugzilla.redhat.com/show_bug.cgi?id=985416
* Always pass size_t varargs to p11_hash_xxx() functionsStef Walter2013-07-185-13/+15
| | | | https://bugzilla.redhat.com/show_bug.cgi?id=985421
* Don't call memdup with zero length or NULL pointerStef Walter2013-07-183-7/+14
| | | | https://bugzilla.redhat.com/show_bug.cgi?id=985433
* Support expanding $XDG_CONFIG_HOME in user config pathsStef Walter2013-07-1811-21/+76
| | | | | | | | | | If ~/.config is specified as a prefix to a configured path, then it is expanded to the $XDG_CONFIG_HOME if that exists Add --with-user-config ./configure option to configure a different user config directory. Interpolate the right directories into documentation.
* Don't load configs from user directory when setuidStef Walter2013-07-1815-2/+472
| | | | | | | When running as setuid() or setgid() don't access the user's home directory, or use $HOME environment variables. https://bugzilla.redhat.com/show_bug.cgi?id=985014
* tools: Use $TMPDIR instead of $TEMPStef Walter2013-07-189-90/+85
| | | | | | | | | | | | TMPDIR is a more standard environment variable for locating the temp directory on Unix. In addition since this is only used in tests, remove the code from the generic p11_path_expand() func. In general remove the possibility for forks to put $HOME or $TEMP environment variables in configured paths. This was possible due to code in p11_path_expand() but not something we supported. https://bugzilla.redhat.com/show_bug.cgi?id=985017
* Fix various issues highlighted by coverity scannerStef Walter2013-07-188-14/+17
| | | | | | Among others fix possible usage of large stack allocation. Further issues are fixed in git master.
* open files with O_CLOEXEC when possibleStef Walter2013-07-184-79/+46
| | | | | | | | | | | | | This helps prevent leaked file descriptors when the library is used in a process which exec's. opendir() already uses O_CLOEXEC on platforms that support O_CLOEXEC so we don't need to make changes there. In addition read config files using p11_mmap_open() so that we get the simple benefits of O_CLOEXEC with the open() call there. https://bugzilla.redhat.com/show_bug.cgi?id=984986
* p11-kit: Abort initialization if critical module fails to initializeStef Walter2013-07-181-1/+1
| | | | https://bugzilla.redhat.com/show_bug.cgi?id=985023
* Add support for using freebl3 for SHA1 and MD5 hashingStef Walter2013-07-1010-2/+141
|
* Release version 0.18.40.18.4Stef Walter2013-06-242-1/+4
|
* trust: Move the extract-trust external placeholder command into trust/Stef Walter2013-06-175-6/+7
|
* trust: Print out usage when extract-trust run incorrectlyStef Walter2013-06-171-1/+6
| | | | Also sorta covers --help and -h usage
* tools: Fix passing args to external commandsStef Walter2013-06-171-0/+4
| | | | | There were various bugs passing arguments, with duplicates being passed, as well as certain arguments being skipped.t
* tools: Only use our private path when looking for external commandsStef Walter2013-06-171-7/+4
| | | | | | | | | Instead of looking for external commands in the path, just look for them in our private directory. We want to be conservative early on, and limit what sorta things we have to maintain later. We can later remove this restriction if a real use case presents itself.
* Release version 0.18.30.18.3Stef Walter2013-06-052-1/+6
|
* trust: Fix crash when C_Initialize args are NULLStef Walter2013-06-052-1/+22
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=65401
* trust: Fix reinitialization of trust moduleStef Walter2013-06-053-4/+139
| | | | | | | | | Track number of C_Initialize calls, and require similar number of C_Finalize calls to finalize. This fixes leaks/disappearing sessions in the trust module. https://bugs.freedesktop.org/show_bug.cgi?id=65401
* Fix uninitialized p11_library_oncemanphiz@gmail.com2013-05-281-1/+1
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=57714
* Force Mac OS shared library extension to .soStef Walter2013-05-281-1/+11
| | | | | | | Darwin and libtool seem confused about what shared library extension they actually use. https://bugs.freedesktop.org/show_bug.cgi?id=57714
* Release version 0.18.20.18.2Stef Walter2013-05-142-1/+4
|
* Patch to make test-lexer depend on ASN.1manphiz@gmail.com2013-05-141-1/+1
| | | | https://bugs.freedesktop.org/show_bug.cgi?id=64378
* Reduce libtasn1 dependency to 2.3Stef Walter2013-05-031-1/+1
| | | | * This passes all checks and is compatible
* Release version 0.18.10.18.1Stef Walter2013-04-152-1/+5
|
* doc: Use gtk-doc in the no-tmpl flavorStef Walter2013-04-042-30/+15
|
* manual: Use a consistent docbook versionStef Walter2013-04-046-12/+16
|
* Put the external tools in $libdir/p11-kitStef Walter2013-04-043-3/+6
| | | | | These are possibly architecture specific binaries, so they should be in $libdir/p11-kit and not in $datadir/p11-kit
* Release version 0.18.00.18.0Stef Walter2013-04-042-1/+9
|
* Fix off by one in date parsing codeStef Walter2013-04-041-1/+1
| | | | | We didn't treat the two digit year 00 as a valid year, whereas it actually represents the year 2000. This is in a non-critical code path.
* Don't print erroneous debug messages when skipping filesStef Walter2013-04-042-9/+11
| | | | | The parser automatically skips over files that it cannot parse. Don't print confusing debug messages about DER parse failures when it does so.
* Update to MurmurHash3Stef Walter2013-04-035-84/+91
| | | | | | | This should also fix problems with accessing memory in a non-aligned fashion on platforms where this causes problems. https://bugs.freedesktop.org/show_bug.cgi?id=62819
* Don't respect timezones for CKA_START_DATE or CKA_END_DATEStef Walter2013-04-034-371/+81
| | | | | | | | | | | | | The PKCS#11 specification does not note what timezone these dates are in. In addition the time values are not represented in PKCS#11. So don't reinterpret certificate dates, other than filling in the century for dates that have a two digit year. Lastly, these are low resolution optional fields so not being all strict about timezones here is appropriate. https://bugs.freedesktop.org/show_bug.cgi?id=62825
* trust: Fix logic for matching invalid NSS serial numbersStef Walter2013-04-032-47/+180
| | | | | | | | Sometimes NSS queries for trust objects using invalid serial numbers that do not have their DER decoding. We fixed this earlier, but want to make sure there are no corner cases, accidentally not matching serial numbers that happen to start with the same bytes as a DER TLV would.
* More compatible path munging and handling codeStef Walter2013-04-0319-175/+558
| | | | | | | | | | Centralize the path handling code, so we can remove unixy assumptions and have a chance of running on Windows. The current goal is to run all the tests on Windows. Includes some code from LRN <lrn1986@gmail.com> https://bugs.freedesktop.org/show_bug.cgi?id=63062
* Don't use free() on memory allocated by LocalFree()Stef Walter2013-04-031-1/+1
| | | | ihttps://bugs.freedesktop.org/show_bug.cgi?id=63046
* Separate library init from message codeStef Walter2013-04-0352-170/+294
| | | | | | | | | | | Put library init/uninit code its into their own statically linked library so that they don't get linked into the p11-kit executable. Refactor the message code so that the library initialization can plug in its per thread message buffer. https://bugs.freedesktop.org/show_bug.cgi?id=63046
* Don't use library locks from p11-kit toolStef Walter2013-04-032-4/+4
| | | | | | | The global library p11_library_mutex is for libraries to use, so don't use it from any code in common/, which is also used by the p11-kit tool https://bugs.freedesktop.org/show_bug.cgi?id=63046
* Add new script for setting up p11-kit for a maintainerStef Walter2013-04-032-0/+56
| | | | Add win32 cross build, and build out of tree