/
githubmirror
/
libksba
Обзор
Документация
Войти
/
githubmirror
/
libksba
Код
Запросы
0
Пакеты
0
Релизы
0
Аналитика
Безопасность
master
src/ChangeLog-2011
1 192 строки
37 KB
Werner Koch
Generate the ChangeLog from commit logs.
02 дек 2011, 02:30
02 дек 2011, 02:30
1120a33
Код
Авторство
О чём код?
2011-12-01 Werner Koch <wk@g10code.com> NB: ChangeLog files are no longer manually maintained. Starting on December 1st, 2011 we put change information only in the GIT commit log, and generate a top-level ChangeLog file from logs at "make dist". See doc/HACKING for details. 2011-02-28 Werner Koch <wk@g10code.com> * keyinfo.c (_ksba_algoinfo_from_sexp): New. (oid_from_buffer): Add arg WITH_SIG. * certreq.c (ksba_certreq_set_signing_key): Rename to .. (ksba_certreq_set_siginfo): new. Use new parser function. * libksba.def, libksba.vers, visibility.c, visibility.h: Change accordingly. 2011-02-25 Werner Koch <wk@g10code.com> * certreq.h (ksba_certreq_s): Add structure x509. * certreq.c (ksba_certreq_release): Free new fields. (ksba_certreq_set_serial, ksba_certreq_set_issuer) (ksba_certreq_set_validity, ksba_certreq_set_signing_key): New. (build_extensions): Add arg certmode and allow building of X.509 extensions. (build_cri): Add code to build an X.509 certificate. * libksba.def, libksba.vers: Add new functions. * visibility.c, visibility.h: Ditto. * ksba-config.in: Add option --host. * ksba.m4: Use --host for an consistency check. * version.c (compare_versions): Do not compare the patchlevel. 2010-09-13 Werner Koch <wk@g10code.com> * asn1-gentables.c (DEVNULL_NAME): New. (main): Use it for fopen. Suggested by Carlo Bramix. 2010-08-19 Werner Koch <wk@g10code.com> * dn.c (append_ucs2_value): Enlarge TMP buffer. Fixes bug#1269. 2010-08-02 Werner Koch <wk@g10code.com> * reader.c (ksba_reader_set_release_notify): New. (ksba_reader_release): Call notify function. * reader.h (struct ksba_reader_s): Add NOTIFY_CB and NOTIFY_CB_VALUE. * writer.c (ksba_writer_set_release_notify): New. (ksba_writer_release): Call notify function. * writer.h (struct ksba_writer_s): Add NOTIFY_CB and NOTIFY_CB_VALUE. * ksba.h, libksba.vers, libksba.def: Add new functions. 2010-07-15 Werner Koch <wk@g10code.com> * cms-parser.c (create_and_run_decoder): Add arg flags. (_ksba_cms_parse_enveloped_data_part_1): Handle NDEF recipientInfo sets. * ber-decoder.h (BER_DECODER_FLAG_FAST_STOP): New. * ber-decoder.c (_ksba_ber_decoder_decode): Add arg FLAGS. (decoder_next): Implement fast stop hack. 2010-05-06 Werner Koch <wk@g10code.com> * gen-help.c, gen-help.h: New. * Makefile.am: Build asn1-gentables and ber-dump also when cross compiling. (asn1_gentables_SOURCES, asn1_gentables_LDADD) (asn1_gentables_CFLAGS): Remove. (asn1-gentables): New rule. (asn1-parse.c): Add gen-help.h as dependency. (EXTRA_DIST): Add gen-help.c and gen-help.h. * asn1-parse.y [BUILD_GENTOOLS]: Include gen-help.h instead of util.h and ksba.h. (ksba_asn_parse_file): Use gpg_error_from_syserror. * asn1-func.c [BUILD_GENTOOLS]: Include gen-help.h instead of util.h and ksba.h. (resolve_identifier): Avoid the alloca. * asn1-gentables.c: Include gen-help instead of util.h and ksba.h. (sort_string_table): Remove useless printing of the string table. 2010-01-22 Werner Koch <wk@g10code.com> * util.c (ksba_calloc): Use gpg_er_set_errno. * ber-decoder.c (_ksba_ber_decoder_dump) (_ksba_ber_decoder_decode) [!HAVE_GETENV]: Set debug to 0. 2009-12-08 Marcus Brinkmann <marcus@g10code.de> * src/Makefile.am (LTRCCOMPILE): Refactor with ... (RCCOMPILE): ... this new macro. Add $(libksba_la_CPPFLAGS). (SUFFIXES): Add .lo. (.rc.o): Change to ... (.rc.lo): ... this implicit rule. (ksba_res_ldflag): Removed. (libksba_la_LDFLAGS): Remove ksba_res_ldflag usage. (libksba_la_LIBADD): Add ksba_res. 2009-07-02 Werner Koch <wk@g10code.com> * util.c (_ksba_ascii_memcasecmp, ascii_toupper): New. * dn.c (parse_rdn): Use it 2009-07-01 Werner Koch <wk@g10code.com> * dn.c (oid_name_tbl): Add dotted string representation of OIDs. (append_atv): Try to match BER encoded OIDs. 2009-06-29 Werner Koch <wk@g10code.com> * oid.c (ksba_oid_to_str): Add an overflow check so that we can detect bogus OIDs. * asn1-func.c (copy_value): Fix out-of-bounds assignment of a boolean to HELPBUF. Due to alignment rules this was not exploitable and we did not even used this code path. Reported by David Binderman. 2009-05-28 Werner Koch <wk@g10code.com> * der-encoder.c (_ksba_der_store_null, sum_up_lengths): Actually write out NULL tags. 2009-03-26 Werner Koch <wk@g10code.com> * cms.h (struct certlist_s): Allow for SHA-512. 2009-01-14 Werner Koch <wk@g10code.com> * ocsp.c (ksba_ocsp_set_requestor, ksba_ocsp_hash_request) (ksba_ocsp_set_sig_val, ksba_ocsp_add_cert): Mark unused args. * cms-parser.c (_ksba_cms_parse_enveloped_data_part_2): Ditto. * cms.c (ct_parse_data, ct_parse_digested_data) (ct_parse_encrypted_data, ct_build_data, ct_build_digested_data) (ct_build_encrypted_data): Ditto. * visibility.c (ksba_cms_release, ksba_cms_set_hash_function) (ksba_crl_release, ksba_crl_set_hash_function, ksba_ocsp_release) (ksba_certreq_release, ksba_certreq_set_hash_function) (ksba_reader_release, ksba_writer_release, ksba_asn_tree_release) (ksba_asn_tree_dump, ksba_name_ref, ksba_name_release): No return vor a void fucntion. Reported by Nelson H. F. Beebe. 2009-01-08 Werner Koch <wk@g10code.com> * keyinfo.c (get_algorithm): Initialize R_PARM_POS, R_PARM_LEN and R_PARM_TYPE. 2009-01-06 Werner Koch <wk@g10code.com> * keyinfo.c (sig_algo_table): Fix TeleTrust dsaWithRIPEMD160 encoding. Add TeleTrust sigS_ISO9796-2rndWithrsa_ripemd160. 2008-10-30 Werner Koch <wk@g10code.com> * ber-dump.c (one_file): Mark unused arg. * ber-help.c (_ksba_ber_count_tl): Ditto. 2008-10-30 Marcus Brinkmann <marcus@g10code.de> * ocsp.c (parse_context_tag): Don't trash the error value. 2008-09-04 Werner Koch <wk@g10code.com> * asn1-func.h (ksba_asn_create_structure): Remove unused prototype (ksba_asn1_create_tree): Ditto. (ksba_asn_read_value, ksba_asn_write_value): Ditto. * asn1-func.c (ksba_asn_delete_structure): Prefix name with underscore. * visibility.h (ksba_asn_delete_structure): Remove macros. (MARK_VISIBLEX): New. (ksba_asn_delete_structure): New. 2008-03-17 Werner Koch <wk@g10code.com> * cert.c (ksba_cert_get_image): Fix size_t/int format mismatch. Reported by Stéphane Corthésy. 2008-02-25 Werner Koch <wk@g10code.com> * visibility.h, visibility.c: New. * util.h: Include visibility.h. * keyinfo.c (pk_algo_table, sig_algo_table, enc_algo_table): Make const. (cryptval_to_sexp): Adjust for it. * dn.c (oid_name_tbl): Make const and static. * cms.c: Make oidstr_ const. * asn1-gentables.c (create_static_structure): Revamp to use a string table to reduce the relocation table. * asn1-func.h: Replace char* by offsets. * asn1-func2.c (ksba_asn_create_tree): Adjust for that change. 2008-02-22 Werner Koch <wk@g10code.com> * keyinfo.c (pkalgo_t): New. (algo_table_s): Add fields PARMELEM_STRING and PARMCTRL_STRING. Replace IS_ECC by PKALGO. Adjust all tables and users of IS_ECC. Add DSA parameter description. (TLV_LENGTH): Add PREFIX arg and change all callers. (_ksba_keyinfo_to_sexp): Parse parameters. (oid_from_buffer): Replace R_IS_ECC by R_PKALGO and allow for DSA. (_ksba_keyinfo_from_sexp): Revamp to support DSA. (sig_algo_table): Add dsaWithRIPEMD160, dsaWithSha224 and dsaWithSha256. 2008-02-21 Werner Koch <wk@g10code.com> * der-encoder.c (_ksba_der_write_algorithm_identifier): Add hack to allow not writing the parameter. * cms.c (store_smime_capability_sequence): Use this hack. 2008-02-01 Werner Koch <wk@g10code.com> * cert.c (get_name): Fix for unknown tags. 2008-01-11 Werner Koch <wk@g10code.com> * ber-decoder.c (decoder_next): Initialize NODE. Fixes bug#582. 2007-12-13 Werner Koch <wk@g10code.com> * keyinfo.c (algo_table_s): Replace the unused DIGEST_ALGO int by a string and changed all tables to use a string representation of the digest algo. (cryptval_to_sexp): Insert the hash algo element into the result. 2007-11-14 Werner Koch <wk@g10code.com> * ber-decoder.c (_ksba_ber_decoder_dump) (_ksba_ber_decoder_decode): Change envvar to KSBA_DEBUG_BER_DECODER. 2007-11-07 Werner Koch <wk@g10code.com> * cms.c (build_signed_data_attribute): Reset ATTRIDX for new signers. Use xfree and not free. 2007-11-03 Moritz Schulte <moritz@g10code.com> * ksba.h: Include <stdio.h>, since FILE* is used. 2007-08-08 Werner Koch <wk@g10code.com> * crl.c (ksba_crl_get_update_times): Require only THIS_UPDATE. 2007-07-04 Werner Koch <wk@g10code.com> Changed license to GPLv3. * asn1-func.c, asn1-parse.y, CertificateExample.c: Also changed to GPLv3 as they used to be GPLv2+. 2007-06-15 Werner Koch <wk@g10code.com> * Makefile.am (AM_CPPFLAGS): Add top_builddir/gl as gnulib may create a header. 2007-05-29 Werner Koch <wk@g10code.com> * versioninfo.rc.in: New. * libksba.def: New. * Makefile.am: Add code to build a W32 DLL. (install-data-local, uninstall-local): New. 2007-05-14 Werner Koch <wk@g10code.com> * sexp-parse.h (smklen): New. * cert.c: Include sexp-parse.h. (get_name): Use smklen to avoid the snprintf. 2007-05-09 Werner Koch <wk@g10code.com> * ksba.m4: Print found version on success. 2007-05-01 Werner Koch <wk@g10code.com> * crl.c (do_hash): Cast BUFFER to char* for arithmetics. * ksba.h (ksba_stop_reason_t): Remove trailing comma. * asn1-parse.y (CONST_IMPLICIT): Ditto. Reported by Peter O'Gorman. 2007-04-20 Werner Koch <wk@g10code.com> * keyinfo.c: Add OIDs for brainpool curves. 2007-04-19 Werner Koch <wk@g10code.com> * keyinfo.c (pk_algo_table): Removed the ecdsa entry. (sig_algo_table): Add X9.62 ecc signature algorithm entries. (_ksba_parse_algorithm_identifier): Replace by a call to _ksba_parse_algorithm_identifier2. (_ksba_parse_algorithm_identifier2): Add hack to cope with ecdsaWithSpecified. * cert.c (ksba_cert_get_digest_algo): Use of _ksba_parse_algorithm_identifier to parse the OID. 2007-04-06 Werner Koch <wk@g10code.com> * keyinfo.c (curve_names): New. (get_ecc_curve_oid): New. (_ksba_keyinfo_from_sexp): Support ECC. (oid_from_buffer): Ditto. (_ksba_keyinfo_to_sexp): Ditto. * oid.c (_ksba_oid_from_buf): New. 2007-01-30 Werner Koch <wk@g10code.com> * shared.h: Add constants for SHA-2. * keyinfo.c (sig_algo_table): Add SHA-256, SHA384 and SHA-512 from pkcs#1. 2006-12-21 Marcus Brinkmann <marcus@g10code.de> * cms.c (build_enveloped_data_header): Initialize CMS_TREE. Release CMS_TREE, and also TMPWRT always, just as IMAGE and ROOT. (build_signed_data_attributes): Release all this stuff that's not released. (build_signed_data_rest): Likewise. (ksba_cms_set_sig_val): Release SV and SV->algo on error. (ksba_cms_release): Free CMS->sig_val. * cert.c (ksba_cert_release): Release CERT->image. * ber-decoder.c (release_decoder_state): Release D->image.buf on error. 2006-12-20 Marcus Brinkmann <marcus@g10code.de> * reader.c (ksba_reader_release): Release R->u.mem.buffer if type is READER_TYPE_MEM. * cms.c (ksba_cms_release): Release CMS->signer_info. * cms-parser.c (_ksba_cms_parse_signed_data_part_2): On failure, release SI. 2006-12-18 Marcus Brinkmann <marcus@g10code.de> * cert.c (ksba_cert_release): Release cert->root and cert->asn_tree. (ksba_cert_read_der): Release cert->root and cert->asn_tree. * ber-decoder.c (_ksba_ber_decoder_decode): Release d->root. * asn1-func.c (do_expand_tree): Keep track of created nodes. (copy_tree): Likewise. (_ksba_asn_insert_copy): Likewise. (ksba_asn_tree_dump): Release tree if expanded. * asn1-func2.c (ksba_asn_create_tree): Keep track of created nodes. * asn1-parse.y (new_node): Fix assignment. 2006-11-29 Werner Koch <wk@g10code.com> * ocsp.c (parse_single_response): Fixed skipping of the NULL. * cert.c (ksba_cert_get_image): Cast an arg for printf. 2006-10-18 Werner Koch <wk@g10code.com> * cert.c (ksba_cert_get_key_usage): Map GPG_ERR_NO_VALUE to GPG_ERR_NO_DATA. This is required in case no extensions at all are available. (ksba_cert_get_cert_policies, ksba_cert_get_ext_key_usages) (ksba_cert_get_auth_key_id, get_simple_octet_string_ext): Ditto. 2006-08-31 Werner Koch <wk@g10code.com> * ocsp.h (struct ocsp_extension_s): New. * ocsp.c (extract_nonce): Renamed to .. (parse_response_extensions): .. this. Extended to save all extensions. (release_ocsp_extensions): New. (ksba_ocsp_release): Release new extension data. (ksba_ocsp_parse_response): Reset extesnion data. (parse_optional_boolean): New. (parse_single_extensions): New. * ksba.m4: Implement --api-version check. * ksba-config.in (echo_api_version): New option --api-version. * crl.c (GPG_ERR_UNKNOWN_CRIT_EXTN): Removed definition as we now require a decent libgpg-error. * ocsp.c (ksba_ocsp_get_responder_id): Implemented. Changed NAME from ksba_name_t* to char** and SHA1KEYHASH from unsigned char* to ksba_sexp_t*. Given that the function has always returned an not_implemented error code and thus was not useful at all, we don't consider this as an ABI change (still pointers) and the API change is not real as this function was never useful. 2006-08-30 Werner Koch <wk@g10code.com> * ocsp.c (extract_nonce): New. (ksba_ocsp_parse_response): Set status to replay on bad nonce. (ksba_ocsp_get_extension): New. (parse_response): Fixed storing of received_certs. * util.c (ksba_calloc): Protect against integer overflow. 2006-08-01 Werner Koch <wk@g10code.com> * dn.c (ksba_dn_teststr): Bump nparts to actually allow returning without an error. Hmmm, why did did t-dnparser didn't caught this problem? 2006-07-19 Werner Koch <wk@g10code.com> * dn.c (put_stringbuf_mem_skip): New. (append_quoted): New arg SKIP. Changed all callers. (append_ucs4_value, append_ucs2_value): Tell append_quoted to skip the zero bytes we detected. 2006-07-18 Werner Koch <wk@g10code.com> * dn.c (append_ucs2_value): Fixed second blank detection case. 2006-07-03 Werner Koch <wk@g10code.com> * ksba.h, ksba.c (ksba_dn_teststr): New. * dn.c (parse_rdn): New optionsl args ROFF and RLEN. Changed callers. (ksba_dn_der2str, ksba_dn_str2der): New. * libksba.vers: Added new functions. 2006-06-19 Werner Koch <wk@g10code.com> * ber-decoder.c (_ksba_ber_decoder_decode): always store value even if NODE is NULL. It used to work only because NODE used to be unitialized and thus most of the time yielded true. The 2006-05-03 fix unveiled the actual problem. 2006-06-08 Marcus Brinkmann <marcus@g10code.de> * cert.c (ksba_cert_get_crl_dist_point): Fix type of R_REASON. (parse_distribution_point): Fix type of REASON. 2006-05-11 Werner Koch <wk@g10code.com> * ber-decoder.c (decoder_next): Print error description returned from BER reader in debug mode. (struct ber_decoder_s): New fields OUTER_SEQUENCE_LENGTH, IGNORE_GARBAGE and FIRST_TAG_SEEN. (decoder_next): Implement hack for the Siemens CA to ignore a trailing byte. 2006-05-03 Werner Koch <wk@g10code.com> * ber-decoder.c (decoder_next): Zero out NODE. * ocsp.c (ksba_ocsp_prepare_request): Move requestExtensions into the TBSRequest. Reported by Daiko Ueno. 2006-04-23 Brad Hards <bradh@frogmouth.net> (mb) * ksba.h (ksba_crl_get_update_times): Rename parameter to avoid collision with C++ keywords. * ksba.h: Fix typos. 2006-03-20 Werner Koch <wk@g10code.com> * ber-decoder.c: Dump debug info always to stderr and not to stdout. (decoder_next): Take zero length SETs into account. 2005-11-13 Werner Koch <wk@g10code.com> * cert.c (ksba_cert_set_user_data): Fixed. * ksba.h (ksba_cert_set_user_data, ksba_cert_get_user_data): Add prototypes. 2005-11-11 Werner Koch <wk@g10code.com> * cert.h (struct cert_user_data): New. (struct ksba_cert_s): New field UDATA. * cert.c (ksba_cert_release): Release the UDATA list. (ksba_cert_set_user_data, ksba_cert_get_user_data): New. * libksba.vers: Add the new functions. 2005-09-28 Marcus Brinkmann <marcus@g10code.de> * Makefile.am (AM_CCPFLAGS): Renamed to AM_CPPFLAGS. 2005-07-21 Werner Koch <wk@g10code.com> * certreq.h (struct general_names_s): New. (struct ksba_certreq_s): New member SUBJECT_ALT_NAMES. * certreq.c (ksba_certreq_release): Free it. (add_general_names_to_extn): New. (build_cri): And build them here. * cert.c (get_name): Support dNSName and uRI. * certreq.c (ksba_certreq_add_subject): Ditto. 2005-06-15 Werner Koch <wk@g10code.com> * ksba.h, certreq.c (ksba_certreq_add_extension): Changed arg DER from unsigned char* to void*. * ksba.h, cms.c (ksba_cms_set_content_enc_algo): Changed arg IV from unsigned char* to void*. * ksba.h, cms.c (ksba_cms_get_content_enc_iv): Ditto. * ksba.h, cms.c (ksba_cms_set_message_digest): Changed arg DIGEST from char* to unsigned char*. 2005-06-02 Werner Koch <wk@g10code.com> * Makefile.am: Add flags for gnulib. * asn1-func.c: Include alloca.h. 2005-04-20 Werner Koch <wk@g10code.com> * time.c (_ksba_asntime_to_iso): Add arg IS_UTCTIME to allow for UTCTimes w/o seconds. * ocsp.c (parse_asntime_into_isotime): Set this arg. * crl.c (parse_to_next_update, parse_crl_entry): Ditto. * cert.c (ksba_cert_get_validity): Ditto. 2005-04-19 Werner Koch <wk@g10code.com> * Makefile.am: Don't have asn1-tables depend on built tools. * ocsp.c (ksba_ocsp_set_nonce): Set the length of the nonce. (write_request_extensions): New. (ksba_ocsp_prepare_request): Call new function. 2005-04-18 Werner Koch <wk@g10code.com> * crl.c (parse_crl_entry): Handle entry extensions. (store_one_entry_extension): New. (parse_enumerated): New. 2005-04-15 Werner Koch <wk@g10code.com> * cert.c (get_info_access): Fixed case of more than one AccessDescription. * ksba.h (ksba_cert_get_subj_key_id): New. * cert.c (get_simple_octet_string_ext): New. (ksba_cert_get_subj_key_id): New. * libksba.vers: Added ksba_cert_get_subj_key_id. * cert.c (ksba_cert_get_auth_key_id): Add support for keyIdentifier. * crl.c (ksba_crl_get_auth_key_id): Ditto. 2005-01-31 Werner Koch <wk@g10code.com> * cms-parser.c (_ksba_cms_parse_signed_data_part_2): Allow NDEF encoding for the set of certificates. 2005-01-21 Werner Koch <wk@g10code.com> * Makefile.am (ber_dump_SOURCES): Use per target flags to force object renaming. 2004-12-18 Werner Koch <wk@g10code.com> * Makefile.am (noinst_PROGRAMS): Don't generate them when cross compiling. (EXTRA_DIST): Include asn1-parse.c asn1-tables.c. (DISTCLEAN): Removed. 2004-12-15 Werner Koch <wk@g10code.com> * ksba.m4: Use proper quoting for use with automake 1.9. 2004-11-29 Werner Koch <wk@g10code.com> * cms.c (read_and_hash_cont): Added more code for the unusual non-NDEF things and factored common code out to .. (read_hash_block): .. new function. 2004-11-26 Werner Koch <wk@g10code.com> * util.c (_ksba_stpcpy): Renamed from stpcpy to avoid duble defines sympols in case libska gets statically linked. * util.h (stpcpy): Redefine it. 2004-08-17 Werner Koch <wk@g10code.de> * cert.c (ksba_cert_get_image): Replaced assert by proper error message. * ber-decoder.c (match_der): Fix for primitive implicit context tags. Argh, this whole decoder mess needs a full rewrite. 2004-08-16 Werner Koch <wk@g10code.de> * keyinfo.c: Fixed second DSA entry; a comma was missing. 2004-07-20 Werner Koch <wk@gnupg.org> * cert.c (_ksba_cert_get_issuer_dn_ptr): Renamed to .. (_ksba_cert_get_subject_dn_ptr): .. this. And return the subject's DN. * ocsp.c (issuer_name_hash): Use it here. Thanks to Bernhard Herzog for pointing this out. It revealed itself only in a multi-level certificate chain. 2004-06-08 Werner Koch <wk@gnupg.org> * certreq.c (ksba_certreq_add_extension): Removed unused variable. 2004-06-06 Werner Koch <wk@gnupg.org> * ksba.h: Comment cleanups. * certreq.c (ksba_certreq_add_extension): New. 2004-04-28 Werner Koch <wk@gnupg.org> * libksba.vers: Add new functions. * crl.h (crl_extn_s, crl_extn_t): New. (ksba_crl_s): Add member EXTENSION_LIST; * crl.c (ksba_crl_release): Free an extension list. (parse_one_extension, store_one_extension): New. (parse_crl_extensions): Store extensions. (ksba_crl_get_extension, ksba_crl_get_auth_key_id) (ksba_crl_get_crl_number): New. 2004-04-06 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_add_smime_capability): Oops, we forgot to store the parameters. * writer.c (do_writer_write): Fixed memory allocation and added an extra check. 2004-03-24 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_add_smime_capability): New. (ksba_cms_release): Free the capability list. (store_smime_capability_sequence): New. (build_signed_data_attributes): Include the smime capabilities. * cms.h (oidparmlist_s): New. (ksba_cms_s): Add element CAPABILITY_LIST. * der-encoder.c (_ksba_der_store_sequence): New. * asn1-func.c (_ksba_asn_is_primitive): New dummy type PRE_SEQUENCE. * der-encoder.c (set_nhdr_and_len, copy_nhdr_and_len): Support it. 2004-03-17 Werner Koch <wk@gnupg.org> * ber-help.c (_ksba_ber_parse_tl): Check for length overflow. (_ksba_ber_read_tl): Ditto. 2004-03-16 Werner Koch <wk@gnupg.org> * ocsp.c (ksba_ocsp_get_responder_id, ksba_ocsp_get_cert): New. 2004-03-15 Werner Koch <wk@gnupg.org> * Makefile.am: Support for version scripts. * libksba.vers: New. * ocsp.c (parse_response): Fixed parsing of optional certificates. 2004-03-09 Werner Koch <wk@gnupg.org> * ksba.h (ksba_set_hash_buffer_function): Add missing prototype. 2004-02-20 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_get_ext_key_usages): New. (ksba_cert_get_auth_key_id): Fix for the case that there is only the KeyIdentifier. 2004-02-13 Werner Koch <wk@gnupg.org> * reader.c, ksba.h (ksba_reader_clear): New. 2004-02-12 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_identify): Detect pkcs#12. * ksba.h: Add KSBA_CT_PCKS12. 2004-01-29 Werner Koch <wk@gnupg.org> * cms.c (build_signed_data_attributes): Arggg; noticed that severe bug shortly after the last release. Fixed wrong array size passed to qsort. 2004-01-28 Werner Koch <wk@gnupg.org> * dn.c: Updated the table and changed a few names only used for String->DER. Added a source specifier as a replacement for the allowed_by_rfc2253 field. 2004-01-19 Werner Koch <wk@gnupg.org> * cms.c (build_signed_data_attributes): Argh. We need to sort the attributes. (compare_attrarray): New. 2003-12-19 Werner Koch <wk@gnupg.org> * cms.c (build_signed_data_header): Fixed silly ==/= bug. 2003-12-09 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_set_sig_val): Fixed a code cleanup I did on Nov 25 and led to bad signature creation. Unfortunatley gpgsm has currently no real regression tests. BTW, why the hell didn't I wrote an entry for that cleanup. 2003-11-28 Werner Koch <wk@gnupg.org> * ocsp.h, ocsp.c: New. * ksba.h (ksba_status_t, ksba_ocsp_response_status_t): New. (ksba_ocsp_t): New. 2003-11-25 Werner Koch <wk@gnupg.org> * ksba.h: Added a few more CRL reason codes. 2003-11-21 Werner Koch <wk@gnupg.org> * oid.c (ksba_oid_from_str): Changed RBUF to unsigned char* and changed all callers to avoid incompatible pointer warnings. 2003-11-20 Werner Koch <wk@gnupg.org> * cert.c (_ksba_cert_get_issuer_dn_ptr): New. (_ksba_cert_get_public_key_ptr): New. (_ksba_cert_get_serial_ptr): New. * util.c (_ksba_hash_buffer): New. (ksba_set_hash_buffer_function): New. * cms.c: Include sexp-parse.h. (ksba_cms_set_sig_val): Use snext and smatch instead of open coding it. * sexp-parse.h: New. Taken from GnuPG 1.9. 2003-11-18 Werner Koch <wk@gnupg.org> * reader.c (ksba_reader_read): Return GPG_ERR_EOF and not -1. 2003-11-17 Werner Koch <wk@gnupg.org> * cert.c (get_name, ksba_cert_get_extension): Return GPG_ERR_EOF and not just -1. * ber-decoder.c (_ksba_ber_decoder_decode): Ditto. 2003-11-14 Werner Koch <wk@gnupg.org> * cms.c (write_encrypted_cont): Fixed test on EOF. * cert.c (ksba_cert_is_ca, ksba_cert_get_cert_policies) (ksba_cert_get_auth_key_id): Ditto. * ber-decoder.c (_ksba_ber_decoder_dump) (_ksba_ber_decoder_decode): Ditto. 2003-11-13 Werner Koch <wk@gnupg.org> * ber-decoder.c (eof_or_error): Replaced READ_ERROR with a system provided error. * crl.c (parse_to_next_update): Ditto. * cms-parser.c (parse_cms_version): Ditto. (_ksba_cms_parse_signed_data_part_1): * ber-help.c (eof_or_error): Ditto. * reader.c (ksba_reader_error): Changed to return gpg_error_t. * writer.c (ksba_writer_error): Ditto. 2003-11-12 Werner Koch <wk@gnupg.org> * writer.c (do_writer_write): Replaced WRITE_ERROR by one generated from errno. * asn1-parse.y (ksba_asn_parse_file): Replaced FILE_ERROR by one generated from errno. * cms.c (ksba_cms_new): Changed Interface to return an error code. * name.c (ksba_name_new): Ditto. * writer.c (ksba_writer_new): Ditto. * reader.c (ksba_reader_new): Ditto. * certreq.c (ksba_certreq_new): Ditto. * crl.c (ksba_crl_new): Ditto. * ksba.h: Removed all KSBA_ error codes and replaced them all over the package by the gpg-error.h codes. Include gpg-error.h * mkerrors: Removed. * Makefile.am: Removed generation of errors.c * asn1-gentables.c (one_file): Simplified error printing * ksba-config.in (libs,cflags): Add values for gpg-error. Remove duplicates. 2003-11-11 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_new): Changed interface. 2003-10-31 Werner Koch <wk@gnupg.org> Changed the representation of time. * ksba.h (ksba_isotime_t): New. * convert.h, cms.h, crl.h: Changed all data structure to use that new time object. * time.c (_ksba_asntime_to_epoch): Renamed to .. (_ksba_asntime_to_iso): .. this and rewrote for the new time format. (_ksba_asntime_from_epoch): Removed. Was never used. (_ksba_assert_time_format, _ksba_copy_time, _ksba_cmp_time) (_ksab_current_time): New. * cert.c (ksba_cert_get_validity): Changed for new time data type. * der-encoder.c (_ksba_der_store_time): Ditto. * crl.c (ksba_crl_get_update_times, ksba_crl_get_item) (parse_to_next_update, parse_crl_entry): Ditto. * cms.c (ksba_cms_get_signing_time, ksba_cms_set_signing_time): Ditto. 2003-10-21 Werner Koch <wk@gnupg.org> * dn.c (oid_name_tbl): Changed OIDLEN to size_t. (parse_rdn): Ditto. * ber-decoder.c (dump_tlv): Fixed format specifier for NHDR. Reported by Stephane Corthesy. 2003-08-20 Marcus Brinkmann <marcus@g10code.de> * ber-decoder.c (new_decoder_state): Initialize DS->cur.in_any. 2003-03-17 Werner Koch <wk@gnupg.org> * dn.c (count_quoted_string): Fixed detection of nonprintable chars for hex pairs. Use IA5STRING instead of UTF8 if the only reason is an at-sign. (parse_rdn): Fixed parsing of hash prefixed hex pairs. Use IA5STRING instead of UTF8 if the only reason is an at-sign. 2002-12-12 Werner Koch <wk@gnupg.org> * keyinfo.c (sig_algo_table): Added sha-1WithRSAEncryption. 2002-12-03 Werner Koch <wk@gnupg.org> * ber-decoder.c (cmp_tag): Handle ANY tag even when the classes don't match. Test case arecertificates with a id-aa-encrypKeyPref. 2002-11-25 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_get_sigattr_oids): New. (build_signed_data_attributes): Store the content-type. * der-encoder.c (_ksba_der_store_oid): Handle TYPE_ANY. 2002-10-22 Werner Koch <wk@gnupg.org> * asn1-parse.y (yyparse): Prefix with _ksba_asn1_. * asn1-func.c (_asn1_find_left): Made static. * dn.c (parse_rdn): Add a parse-only mode to determine the end os a part. (_ksba_dn_from_str): Parse the string in reversed order as specified by rfc2253. 2002-08-23 Werner Koch <wk@gnupg.org> * ksba.m4: Removed unnecessary libs * ksba-config.in: Made --prefix work for --libs. * Makefile.am (EXTRA_DIST): Add ksba.m4 2002-08-21 Werner Koch <wk@gnupg.org> * der-encoder.c (_ksba_der_copy_tree) * crl.c (ksba_crl_get_issuer) * cms.c (ksba_cms_get_issuer_serial) (ksba_cms_get_sig_val) (ksba_cms_get_enc_val) * cert.c (ksba_cert_get_image) (ksba_cert_hash) (ksba_cert_get_serial) (ksba_cert_get_sig_val): Removed all debugging output for encoding errors. 2002-08-13 Werner Koch <wk@gnupg.org> * ksba.m4: New. 2002-08-06 Werner Koch <wk@gnupg.org> * cms.h (signer_info_s, sig_val_s): New. Actually moved out of ksba_cms_s and made it pointers there. * cms.c (ksba_cms_release): Changed for new types of signer_info and sig_val. (ksba_cms_get_issuer_serial): Implemented index for signer_info. (ksba_cms_get_digest_algo): Ditto. (ksba_cms_get_message_digest): Ditto. (ksba_cms_get_sig_val): Ditto. (ksba_cms_hash_signed_attrs): Ditto. (build_signed_data_attributes): Build the list of signer_infos. (build_signed_data_rest): And process the list. (ksba_cms_set_sig_val): Append values. (build_signed_data_rest): Use the sig_val list. (ct_build_signed_data): Changed check for set sig_val. (build_signed_data_header): Fixed writing of more than one algo. * cms-parser.c (_ksba_cms_parse_signed_data_part_2): Create a list of signer_infos and not just one. 2002-08-05 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_add_cert): Don't add duplicates. * cert.c (_ksba_cert_cmp): New. 2002-07-04 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_identify): Make sure to read the full first 20 bytes. 2002-07-02 Werner Koch <wk@gnupg.org> * certreq.c (ksba_certreq_set_sig_val): Don't store a leanding zero. 2002-06-27 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_get_auth_key_id): Skip keyIdentifier tag. 2002-06-17 Werner Koch <wk@gnupg.org> * cms.c (write_encrypted_cont): Don't use write_octet_stream here because this is used with an implicit tag and the outer context already provides the constructed containter. 2002-06-13 Werner Koch <wk@gnupg.org> * writer.c (ksba_writer_write_octet_string): Correctly write undefined length octet strings. * cms.c (ct_build_signed_data): Write an end tag for non-detached sigs. (build_enveloped_data_header): Fix doc; it is an explicit octect string. (read_encrypted_cont): Read constructed octet strings. 2002-06-12 Werner Koch <wk@gnupg.org> * writer.c (ksba_writer_write_octet_string): New. * cms.c (write_encrypted_cont): Use it here. 2002-05-17 Werner Koch <wk@gnupg.org> * Makefile.am: Tweaked to avoid double compilations. * cms.c (ksba_cms_identify): New. 2002-05-16 Werner Koch <wk@gnupg.org> * cms-parser.c (_ksba_cms_parse_signed_data_part_1): Never allocate 0 bytes - this is not defined. 2002-05-04 Werner Koch <wk@gnupg.org> * dn.c (parse_rdn): Better detection of empty elements. 2002-04-27 Werner Koch <wk@gnupg.org> * cms.c (read_and_hash_cont): Handle constructed octet strings. * cms-parser.c (_ksba_cms_parse_signed_data_part_2): Eat one pending end tag. 2002-04-15 Werner Koch <wk@gnupg.org> * version.c: New. * dn.c (append_ucs4_value,append_ucs2_value): Implemented. * cert.c (ksba_cert_get_auth_key_id): New. * name.c (_ksba_name_new_from_der): Add support for "Name" type. * dn.c (_ksba_derdn_to_str): New. 2002-03-22 Werner Koch <wk@gnupg.org> * cert.c (get_name): Fixed enumerating of alternate names. * name.c: New. * ksba.h (KsbaName): New. Added defintions for the name functions. (KsbaCRLReason): Changed values to allow use as bit flags. * cert.c (parse_distribution_point): New. (ksba_cert_get_crl_dist_point): New. 2002-03-15 Werner Koch <wk@gnupg.org> * asn1-func.c (_ksba_asn_check_identifier): Better check against overflow, also the data used is static. 2002-03-13 Werner Koch <wk@gnupg.org> * cms.h (value_tree_s): New and use it for recp_info. (enc_val_s): New, use it in certlist and remove it from the ksba_cms_s and change all users. * cms.c (ksba_cms_set_enc_val): Allow multiple recipients. (ksba_cms_add_signer): Keep ordering of signers so that they can be implictly counted by an index. (build_enveloped_data_header): Fixed the creation of the RID. * cms.c (release_value_tree): New. (ksba_cms_release): And use it here. (ksba_cms_get_issuer_serial): Use the new recp_list structure and take the IDX into account. (ksba_cms_get_enc_val): Ditto. (ksba_cms_set_sig_val,ksba_cms_set_enc_val): Don't store a leading zero. * cms-parser.c (_ksba_cms_parse_enveloped_data_part_1): Handle multiple recipients. * cms.c (build_signed_data_rest): Write 3 end tags. (ct_build_enveloped_data): Write 4 end tags. 2002-03-12 Werner Koch <wk@gnupg.org> * cms-parser.c (_ksba_cms_parse_signed_data_part_2): Allow an empty set of signer infos. 2002-03-11 Werner Koch <wk@gnupg.org> * keyinfo.c: Fixed last change; forgot to set the length. 2002-03-09 Werner Koch <wk@gnupg.org> * keyinfo.c: Add algo for Telesec NetKey cards. 2002-02-19 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_get_cert_policies): New. 2002-02-07 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_release): Release the nodes. 2002-02-01 Marcus Brinkmann <marcus@g10code.de> * asn1-parse.y: Add missing colon at end of block. 2002-02-01 Werner Koch <wk@gnupg.org> * cms.c (ksba_cms_set_sig_val): Add kludge to allow "rsa" instead of an OID. 2002-01-28 Werner Koch <wk@gnupg.org> * oid.c (ksba_oid_from_str): Fixed docs and return type. * certreq.c (ksba_certreq_set_subject): Renamed to.. (ksba_certreq_add_subject): this and added logic to store subjectAltNames. (build_extensions): New. (build_cri): Write the extensions. * ber-help.c (_ksba_ber_encode_tl): New. 2002-01-25 Werner Koch <wk@gnupg.org> * cms.c (build_signed_data_attributes): Write the optional certs. * cert.c (ksba_cert_get_image): Don't return the image length but the parsed length. 2002-01-24 Werner Koch <wk@gnupg.org> * cms.h: Add new member cert_info_list. * cms.c (ksba_cms_add_cert): New. (ksba_cms_release): Release the cert info list. 2002-01-23 Werner Koch <wk@gnupg.org> * crl.c (parse_to_next_update): Use measured length to fixup the tbs_len after reading the name. Check tbs_len before checking for the entry list. * ksba.h (KsbaKeyUsage): New. * cert.c (ksba_cert_get_key_usage): New. * cert.c (get_name): New, implemented rfc822 AltNames. (ksba_cert_get_issuer,ksba_cert_get_subject): Use it. 2002-01-22 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_is_ca): New. * ber-help.c (premature_eof): New. (eof_or_error): Use it here. (_ksba_ber_parse_tl): New. 2002-01-21 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_get_extension): New. (read_extensions): New. (ksba_cert_release): Release the cached extension info. 2002-01-14 Werner Koch <wk@gnupg.org> * dn.c: Fixed oid table according to rfc2253. (append_atv): Do only use the allowed names. 2002-01-11 Werner Koch <wk@gnupg.org> * dn.c (append_atv): Don't write a trailing hash sign. * time.c (_ksba_asntime_to_epoch): Kludge to cope with the Y2038 problem. * crl.c (do_hash): New. Apply the hashing where needed. 2002-01-10 Werner Koch <wk@gnupg.org> * certreq.c, certreq.h: New. * keyinfo.c (_ksba_keyinfo_from_sexp): New. * der-encoder.c: Removed commented code. 2002-01-09 Werner Koch <wk@gnupg.org> * dn.c (count_quoted_string, parse_rdn, write_escaped): New. (_ksba_dn_from_str): Implemented. * ber-help.c (_ksba_ber_count_tl): New. * util.h (spacep): New. (hexdigitp): Now takes a pointer as arg. * writer.c (do_writer_write): Set the error flag when we are out of core. (ksba_writer_snatch_mem): New. 2002-01-08 Werner Koch <wk@gnupg.org> * writer.c (ksba_writer_set_mem): New. (do_writer_write): Implemented it here. (ksba_writer_get_mem): New. * tmttv2.asn (CertificationRequestInfo): Added. 2002-01-07 Werner Koch <wk@gnupg.org> * ksba.h (KsbaCRLReason): New. * crl.c: Basically works. 2002-01-05 Werner Koch <wk@gnupg.org> * asn1-func.c (_ksba_asn_find_node): Moved code to .. (find_node): new function which allows resolving of identifiers. (_ksba_asn_expand_tree): Use the resolving find_node here. * keyinfo.c (_ksba_parse_algorithm_identifier2): Reset len2 so that a given r_parm returns correct values. * ksba.h (KsbaCRL): New typedef and prototypes for the CRL functions. * crl.c, crl.h: New but not yet complete. 2001-12-20 Werner Koch <wk@gnupg.org> * cms.c (read_and_hash_cont): New. (ct_parse_signed_data): Use it here for non-detached signatures. * cms-parser.c (_ksba_cms_parse_signed_data_part_1): Store the inner content length. (_ksba_cms_parse_signed_data_part_2): Add dummy read code for CRLs. * cert.c (ksba_cert_set_serial): Changed to return an entire S-Exp and not just an octet string. * cms.c (ksba_cms_get_issuer_serial): Ditto. 2001-12-18 Werner Koch <wk@gnupg.org> * Makefile.am (DISTCLEANFILES): Add asn1-tables.c 2001-12-17 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_get_serial): Does now return a S-expression. * cms.c (ksba_cms_get_issuer_serial): Ditto. * keyinfo.c: Changed all functions to return canonical encoded S-Exp. * Makefile.am (asn1-tables.c): Fixed rule to work with VPATH builds. 2001-12-14 Werner Koch <wk@gnupg.org> * oid.c, time.c, cms.c : Moved atoi macros and digitp macro to .. * util.h: .. here. Fixed digitp macro. Added hexdigitp. 2001-12-13 Werner Koch <wk@gnupg.org> * cert.c (ksba_cert_get_issuer): Added an idx argument so that the function can be used to enumerate alternate names. (ksba_cert_get_subject): Ditto. Copyright 2001, 2002, 2003, 2004, 2005, 2008, 2009 g10 Code GmbH This file is free software; as a special exception the author gives unlimited permission to copy and/or distribute it, with or without modifications, as long as this notice is preserved. This file is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY, to the extent permitted by law; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.