Stef Walter [Tue, 19 Apr 2011 07:18:34 +0000 (09:18 +0200)]
gcr: In test-parser don't try to parse directories.
Stef Walter [Mon, 18 Apr 2011 11:16:49 +0000 (13:16 +0200)]
Use gpointer instead of guchar in several places.
This makes for cleaner and simpler code.
Stef Walter [Wed, 13 Apr 2011 05:25:42 +0000 (07:25 +0200)]
gcr: Implement debug tracing
* Instrument the certificate chain code.
Stef Walter [Sat, 9 Apr 2011 20:02:01 +0000 (22:02 +0200)]
Remove accidentally committed file.
Stef Walter [Fri, 8 Apr 2011 18:09:30 +0000 (20:09 +0200)]
gcr: Hide the widget class structs, until we finalize their super classes.
Hide the following GcrCertificateWidget, GcrCertificateWidgetClass,
GcrKeyWidget, GcrKeyWidgetClass, GcrUnlockOptionsWidget,
GcrUnlockOptionsWidgetClass
Currently these are derived from GtkAlignment, because we haven't yet
figured out their implementation correctly. We want them to be derived
from GtkWidget, or GtkBin (if it makes sense to have a child widget).
Stef Walter [Wed, 6 Apr 2011 20:25:41 +0000 (22:25 +0200)]
gcr: Complete documentation
Stef Walter [Wed, 6 Apr 2011 18:08:05 +0000 (20:08 +0200)]
gcr: Modernize tests. Use standard gtest type setup.
Stef Walter [Tue, 5 Apr 2011 20:37:24 +0000 (22:37 +0200)]
gck: Cleanup the documentation
Stef Walter [Thu, 31 Mar 2011 07:09:44 +0000 (09:09 +0200)]
gcr: Fix invalid assertions when using gcr_parser_parse_stream_xxx()
Stef Walter [Wed, 30 Mar 2011 13:06:07 +0000 (15:06 +0200)]
gcr: Implement gcr_certificate_basics_xxx() stubs properly.
Stef Walter [Fri, 25 Mar 2011 12:04:30 +0000 (13:04 +0100)]
Add correct version numbers to documentation.
Stef Walter [Wed, 23 Mar 2011 08:27:13 +0000 (09:27 +0100)]
Modernise the gck tests.
Stef Walter [Mon, 4 Apr 2011 10:20:37 +0000 (12:20 +0200)]
Release version 3.0.0
Stef Walter [Fri, 18 Mar 2011 18:23:42 +0000 (19:23 +0100)]
[gcr] Add deprecated functions for symbols lost since 2.32.x
* gcr_certificate_basics_xxx
* gcr_certificate_details_xxx
* gcr_importer_xxx_parser
Stef Walter [Wed, 9 Mar 2011 09:41:42 +0000 (10:41 +0100)]
Merge branch 'with-hkdf'
Stef Walter [Tue, 8 Mar 2011 17:10:19 +0000 (18:10 +0100)]
[egg] Complete implementation of openssl sytle PEM writing
The openssl PEM parser is particularly fragile, so write some
stringent tests to check.
Stef Walter [Mon, 7 Mar 2011 14:56:08 +0000 (15:56 +0100)]
[gck] Fix uri library-manufacturer test.
Stef Walter [Fri, 4 Mar 2011 18:04:23 +0000 (19:04 +0100)]
Transfer the color properly onto the certificate widget expander.
* Remains white when a text selection surrounds it, this is harder
to fix.
* Highlights properly on mouse over.
https://bugzilla.gnome.org/show_bug.cgi?id=643892
Stef Walter [Fri, 4 Mar 2011 17:43:29 +0000 (18:43 +0100)]
Calculate the minimal/natural size of certificate widget better.
* These are still just gueseses. But they're guesses that look good.
* Added a new GcrViewer implementation that is a scrolled viewer.
We use this in GcrCertificateWidget instead of using GtkScrolledWindow
directly.
https://bugzilla.gnome.org/show_bug.cgi?id=643892
Stef Walter [Wed, 2 Mar 2011 18:01:43 +0000 (19:01 +0100)]
Make the library-manufacturer in the trust uris actually match.
https://bugzilla.gnome.org/show_bug.cgi?id=641121
Stef Walter [Tue, 1 Mar 2011 11:19:17 +0000 (12:19 +0100)]
[gck] Support 'library-manufacturer' in PKCS#11 URIs properly.
https://bugzilla.gnome.org/show_bug.cgi?id=643574
Stef Walter [Tue, 1 Mar 2011 09:27:42 +0000 (10:27 +0100)]
Merge branch 'secret-content-type'
Stef Walter [Tue, 1 Mar 2011 09:19:10 +0000 (10:19 +0100)]
Merge branch 'hard-code-config'
Stef Walter [Mon, 28 Feb 2011 14:21:07 +0000 (15:21 +0100)]
[gcr] Remove support for pkcs11-options file.
In the next release we should be integrating with p11-kit which will
contain support for proper configuration of PKCS#11 modules. So for
this release we hard code the modules we'd like to use.
Stef Walter [Wed, 23 Feb 2011 17:55:29 +0000 (18:55 +0100)]
Use more modern gtest style for egg tests.
Stef Walter [Thu, 24 Feb 2011 09:35:58 +0000 (10:35 +0100)]
Implement HKDF for transport encryption security.
This is to hash the results of the DH key agreement, since the
generated key size rarely matches the size of our bulk
encryption key size.
* Add PKCS#11 algorithm CKM_G_HKDF_SHA256_DERIVE
* Change DH code so it always generates keys of prime size.
* Change CKM_DH_PKCS11_DERIVE mechanism to support truncating
or expanding keys on its own (without help from underlying
implementation) in accordance with PKCS#11. Although we no
longer use this.
* Add support for CKK_GENERIC_SECRET keys.
* Update prompt code to use HKDF in key negotiation.
* Add secret service dh-ietf1024-sha256-aes128-cbc-pkcs7 algo
which replaces the previous.
Stef Walter [Wed, 23 Feb 2011 17:55:29 +0000 (18:55 +0100)]
Use more modern gtest style for egg tests.
Claude Paroz [Wed, 9 Feb 2011 20:20:48 +0000 (21:20 +0100)]
Add translator comment about 'pinned certificate'
Ryan Stonecipher [Mon, 24 Jan 2011 20:42:02 +0000 (14:42 -0600)]
Fix undefined type in egg-asn1x.c
Mac OSX doesn't have a ulong type
https://bugzilla.gnome.org/show_bug.cgi?id=640362
Stef Walter [Wed, 19 Jan 2011 19:12:05 +0000 (13:12 -0600)]
Fix problems building tests using internal functions.
Recently the changes to libgck and libgcr --export-symbols-regex
broke the tests. Export different symbols when tests are enabled
or not.
Stef Walter [Wed, 19 Jan 2011 18:40:02 +0000 (12:40 -0600)]
Issue new test certificates.
Stef Walter [Tue, 4 Jan 2011 22:57:48 +0000 (16:57 -0600)]
[gcr] Redo the PKCS#11 configuration file.
Use /etc/pkcs11/pkcs11-options and pkcs11-options.defaults files
instead. Don't use XDG style stuff if we're not going to follow
the XDG base dir specification.
Stef Walter [Fri, 31 Dec 2010 14:06:31 +0000 (08:06 -0600)]
[gck] Update PKCS#11 URI to add library support.
Add library-description and library-description and library-manufacturer
parts. And refactor to support parsing in different contexts better.
Marek Černocký [Sat, 15 Jan 2011 16:04:09 +0000 (17:04 +0100)]
I18N fix - using ngettext
Emilio Pozuelo Monfort [Tue, 28 Dec 2010 18:19:07 +0000 (18:19 +0000)]
libgcr.so: Only export symbols that begin with gcr_
Bug #638216
Emilio Pozuelo Monfort [Tue, 28 Dec 2010 18:17:00 +0000 (18:17 +0000)]
libgck.so: Only export symbols that begin with gck_
Bug #638216
Stef Walter [Wed, 22 Dec 2010 21:14:13 +0000 (21:14 +0000)]
[gcr] More fixes for GTK+ 2.91.7
* gtk_widget_render_icon()
* gdk_cursor_unref()
Stef Walter [Wed, 22 Dec 2010 17:16:49 +0000 (17:16 +0000)]
[gcr] Make tests use pkcs11.conf.defaults from srcdir.
So that make distcheck passes, and tests run without
a prior 'make install'
Stef Walter [Wed, 22 Dec 2010 16:36:37 +0000 (16:36 +0000)]
Merge branch 'trust-store'
Stef Walter [Wed, 22 Dec 2010 16:00:28 +0000 (16:00 +0000)]
[gcr] PKCS#11 conf file is now in /etc/xdg
And install a pkcs11.conf.defaults file which is updated along
with gnome-keyring, and then a pkcs11.conf file which is editable
and can be overridden by admin/user.
Stef Walter [Wed, 22 Dec 2010 15:56:36 +0000 (15:56 +0000)]
[egg] Don't try to encode optional sequences if empty.
Stef Walter [Wed, 22 Dec 2010 15:55:55 +0000 (15:55 +0000)]
[egg] Remove non-deterministic checks in spawn tests.
These complete in a different thread, and the check is vulnerable
to a race condition.
Stef Walter [Wed, 22 Dec 2010 15:22:09 +0000 (15:22 +0000)]
[egg] Fix uninitialized list pointers.
Stef Walter [Wed, 22 Dec 2010 15:17:58 +0000 (15:17 +0000)]
Add missing files to distribution.
Stef Walter [Sat, 18 Dec 2010 18:21:02 +0000 (12:21 -0600)]
[gcr] Add config file for setting trust slot origin/storage
Looks up which PKCS#11 slots to use for trust assertion lookups
and storage in /etc/pkcs11.conf
Stef Walter [Sat, 18 Dec 2010 17:59:11 +0000 (11:59 -0600)]
[gck] Allow enumeration over slots as well as modules.
Can now enumerate object over a list of slots, as well as
a list of modules.
Stef Walter [Tue, 14 Dec 2010 00:57:38 +0000 (00:57 +0000)]
[gcr] Add distrusted GcrCertificateChainStatus
However no implementation yet.
Stef Walter [Mon, 13 Dec 2010 19:38:34 +0000 (19:38 +0000)]
[gcr] Fix memory leaks in trust lookup tests.
Stef Walter [Mon, 13 Dec 2010 19:38:13 +0000 (19:38 +0000)]
[gcr] Fix memory leaks in async functions.
g_async_result_get_source_object() refs its result.
Stef Walter [Mon, 13 Dec 2010 19:37:19 +0000 (19:37 +0000)]
[gcr] Fix memory leaks in certificate chain code.
Stef Walter [Mon, 13 Dec 2010 18:58:43 +0000 (18:58 +0000)]
Merge branch 'master' into trust-store
Stef Walter [Mon, 13 Dec 2010 18:58:14 +0000 (18:58 +0000)]
[gcr] Fix memory leaks in gcr test code.
Stef Walter [Mon, 13 Dec 2010 18:57:50 +0000 (18:57 +0000)]
[egg] Fix memory leaks in ASN.1 code.
Stef Walter [Thu, 9 Dec 2010 22:25:48 +0000 (22:25 +0000)]
[gcr] Fix Gtk+ version check.
2.91.6 has the new style-context code, not 2.91.5
Stef Walter [Mon, 13 Dec 2010 17:26:51 +0000 (17:26 +0000)]
Use term 'distrust' instead of 'untrust'
Suggested by Yaron Sheffer and describes the concept much
more aptly.
Stef Walter [Sat, 11 Dec 2010 13:16:28 +0000 (13:16 +0000)]
[gcr] Documentation fixes for GcrCertificateChain
Stef Walter [Sat, 11 Dec 2010 03:07:32 +0000 (03:07 +0000)]
[gcr] Certificate chain has a 'status' not a 'type'
This makes things clearer. Also add enum and flags types for
certificate chain stuff.
Stef Walter [Sat, 11 Dec 2010 03:07:06 +0000 (03:07 +0000)]
[gcr] Fix problem where issuer was returned instead of subject.
Stef Walter [Fri, 10 Dec 2010 23:04:16 +0000 (23:04 +0000)]
[gcr] Fix memory leak in certificate chain building.
Stef Walter [Fri, 10 Dec 2010 22:26:41 +0000 (22:26 +0000)]
Rename CKA_G_ trust prefix to CKA_X_ and move to own file.
Move the PKCS#11 trust extensions to its own file and give it
its own prefix.
Stef Walter [Fri, 10 Dec 2010 22:09:42 +0000 (22:09 +0000)]
Change terminology to 'pinned certificate' from 'exception'.
The matching terminology of 'anchored certificate' and 'pinned
certificate' makes things consistent and understandable.
Stef Walter [Fri, 10 Dec 2010 21:08:55 +0000 (21:08 +0000)]
[gcr] Add GcrCertificateChain
Represents a certificate chain, and has an operation which builds
the chain into a complete chain and identifies the type of chain.
Stef Walter [Fri, 10 Dec 2010 21:08:12 +0000 (21:08 +0000)]
[gcr] Fix type check macros for certificate implementations.
The type check macros for GcrSimpleCertificate and GcrPkcs11Certificate
were wrong.
Stef Walter [Fri, 10 Dec 2010 04:33:35 +0000 (04:33 +0000)]
[pkcs11] Fix up standalone modules for use in tests.
* Make the standalone modules always resident after loading.
* Install modules to a path that's published in the pkg-config file.
Stef Walter [Fri, 10 Dec 2010 04:31:55 +0000 (04:31 +0000)]
[gcr] Fix leak in gcr_pkcs11_certificate_lookup_issuer()
Stef Walter [Fri, 10 Dec 2010 04:31:06 +0000 (04:31 +0000)]
[gcr] Add function to load module from file.
Add gcr_pkcs11_add_module_from_file()
Stef Walter [Fri, 10 Dec 2010 01:09:04 +0000 (01:09 +0000)]
[gcr] Expose functions for setting which pkcs11 modules to use.
Add gcr_pkcs11_get_modules(), gcr_pkcs11_set_modules(), gcr_pkcs11_add_module(),
gcr_pkcs11_get_trust_lookup_modules(), gcr_pkcs11_get_trust_store_slot(),
gcr_pkcs11_get_trust_store_uri(), gcr_pkcs11_set_trust_store_uri()
Stef Walter [Thu, 9 Dec 2010 22:25:48 +0000 (22:25 +0000)]
[gcr] Fix Gtk+ version check.
2.91.6 has the new style-context code, not 2.91.5
Stef Walter [Tue, 7 Dec 2010 19:30:35 +0000 (19:30 +0000)]
[gcr] Complete documentation for various certificate types.
Stef Walter [Tue, 7 Dec 2010 18:47:49 +0000 (18:47 +0000)]
[gcr] Document trust storage and lookup functions.
Stef Walter [Tue, 7 Dec 2010 18:47:22 +0000 (18:47 +0000)]
[gcr] More build fixes.
Stef Walter [Mon, 6 Dec 2010 22:43:01 +0000 (22:43 +0000)]
[gcr] Implement GcrPkcs11Certificate which loads certs from PKCS#11
In particular we can lookup certs by issuer from the PKCS#11 store.
Stef Walter [Mon, 6 Dec 2010 22:28:36 +0000 (22:28 +0000)]
[gcr] Include libgck headers explictly in gcr headers.
When we derive objects from gck objects, we have to include the
headers properly and not try to hide them.
Stef Walter [Mon, 6 Dec 2010 22:00:41 +0000 (22:00 +0000)]
[gcr] Move to a single header model.
Similar to gtk, where you can only include <gcr/gcr.h> to prevent
future API breaks because of headers.
Stef Walter [Mon, 6 Dec 2010 21:45:04 +0000 (21:45 +0000)]
[gcr] Use void pointers instead of unsigned char for data.
Use void pointers to make like simpler and clearer.
Stef Walter [Mon, 6 Dec 2010 21:38:47 +0000 (21:38 +0000)]
[gcr] Add gcr_certificate_is_issuer() and finish up testing.
Add a function to test if a certificate is the issuer of another,
and finish up testing, fix some bugs.
Stef Walter [Mon, 6 Dec 2010 21:12:17 +0000 (21:12 +0000)]
[gcr] GcrSimpleCertificate tests.
Stef Walter [Mon, 6 Dec 2010 21:00:30 +0000 (21:00 +0000)]
Merge branch 'master' into trust-store
Stef Walter [Mon, 6 Dec 2010 20:59:48 +0000 (20:59 +0000)]
[gck] Don't load *.la files as PKCS#11 modules.
grumble, grumble, libtool, grumble.
Stef Walter [Mon, 6 Dec 2010 19:17:06 +0000 (19:17 +0000)]
Merge branch 'master' into trust-store
Stef Walter [Mon, 6 Dec 2010 19:16:25 +0000 (19:16 +0000)]
[gcr] Fix build for GTK+3 style-context changes.
Use new gtk_widget_override_background_color() function.
Stef Walter [Thu, 2 Dec 2010 18:53:50 +0000 (18:53 +0000)]
[gcr] Make GcrSimpleCertificate constructor accept simple pointer.
Make it easier to deal with data whether unsigned or signed,
gint8 or char, etc.
Stef Walter [Mon, 29 Nov 2010 22:24:59 +0000 (22:24 +0000)]
[gcr] Complete tests of gcr_trust_xxx functionality.
Stef Walter [Mon, 29 Nov 2010 22:22:39 +0000 (22:22 +0000)]
[gck] Fix crash in enumerator when C_FindObjects fails.
If C_FindObjects failed when used in a gck_enumerate_xxx()
and friends, then we would crash.
Stef Walter [Mon, 29 Nov 2010 22:21:49 +0000 (22:21 +0000)]
[gck] Add functionality for dumping PKCS#11 attributes.
gck_attribute_dump() and gck_attributes_dump()
Stef Walter [Wed, 24 Nov 2010 19:27:13 +0000 (19:27 +0000)]
[pkcs11] Rename CKA_G_REMOTE to CKA_G_PEER (better terminology)
* Also update various locations where we used 'remote' to 'peer'
Stef Walter [Wed, 24 Nov 2010 16:12:16 +0000 (16:12 +0000)]
[testing] Preprocess test files before searching for tests.
* Allows tests to be commented out or ifdefed.
* Faster building of tests.
* Other cleanup of tests.
Stef Walter [Tue, 23 Nov 2010 22:56:30 +0000 (22:56 +0000)]
[egg] Add utilities so GByteArray can be used in GHashTable.
Update xdg pkcs11 module to use these new utils.
Stef Walter [Tue, 23 Nov 2010 02:48:38 +0000 (02:48 +0000)]
[egg] Encode empty SET OF and SEQUENCE OF properly.
Make choices based on whether they contain any other real
valid elements inside.
Stef Walter [Tue, 23 Nov 2010 02:26:23 +0000 (02:26 +0000)]
[egg] Add functions testing ASN.1 and printing out messages.
Stef Walter [Tue, 23 Nov 2010 02:04:18 +0000 (02:04 +0000)]
[egg] Must select which choice when building ASN.1.
When building up ASN.1 must select which choice by using
the egg_asn1x_set_choice() function.
Stef Walter [Mon, 22 Nov 2010 22:05:17 +0000 (22:05 +0000)]
[egg] Implement egg_asn1x_set_raw_element() for explicitly tagged types.
Also fix encoding of explicitly tagged choice elements.
Stef Walter [Sun, 21 Nov 2010 03:06:00 +0000 (03:06 +0000)]
[egg] Produce proper messages for mismatched tags in DER parsing.
Stef Walter [Fri, 19 Nov 2010 19:38:32 +0000 (19:38 +0000)]
Fix up gcr library to support trust assertions.
Stef Walter [Fri, 19 Nov 2010 18:06:10 +0000 (18:06 +0000)]
Better ASN.1 test coverage and fixes.
Stef Walter [Thu, 11 Nov 2010 21:52:07 +0000 (21:52 +0000)]
Merge branch 'master' into trust-store
Danielle Madeley [Thu, 14 Oct 2010 02:11:09 +0000 (13:11 +1100)]
[gcr] Replace gp11-0 with gck in pkgconfig file
Stef Walter [Mon, 11 Oct 2010 00:37:24 +0000 (00:37 +0000)]
[gcr] Fix broken dispose of GcrCertificateWidget
Dispose and finalize of the gcr widgets was broken.
https://bugzilla.gnome.org/show_bug.cgi?id=631840
Stef Walter [Fri, 8 Oct 2010 13:46:32 +0000 (13:46 +0000)]
[gp11] Remove gp11 library.
Remove gp11 library now that seahorse has migrated to libgck.
libgck is the replacement for gp11
Stef Walter [Fri, 8 Oct 2010 01:24:50 +0000 (01:24 +0000)]
Release version 2.91.1