aboutsummaryrefslogtreecommitdiffstats
path: root/src/cert/x509cert
Commit message (Collapse)AuthorAgeFilesLines
* Fairly huge update that replaces the old secmem types with std::vectorlloyd2012-05-186-80/+104
| | | | | | using a custom allocator. Currently our allocator just does new/delete with a memset before deletion, and the mmap and mlock allocators have been removed.
* propagate from branch 'net.randombit.botan.tls-state-machine' (head ↵lloyd2012-04-251-2/+18
|\ | | | | | | | | | | a4741cd07f50a9e1b29b0dd97c6fb8697c038ade) to branch 'net.randombit.botan.cxx11' (head 116e5ff139c07000be431e07d3472cc8f3919b91)
| * Add very basic wildcarding in X509_Certificate::matches_dns_namelloyd2012-04-181-2/+18
| |
* | propagate from branch 'net.randombit.botan.tls-state-machine' (head ↵lloyd2012-02-202-43/+16
|\ \ | |/ |/| | | | | | | 0ceb9cde62a2b3614901ae85a53546d9fc641326) to branch 'net.randombit.botan.cxx11' (head 777e65950ef3706a82e5df20dcca7fcc999ca533)
| * Fixes for GCC 4.7.0 (r183974)lloyd2012-02-071-1/+1
| |
| * propagate from branch 'net.randombit.botan' (head ↵lloyd2011-06-131-42/+15
| |\ | | | | | | | | | | | | | | | 150bd11dd8090559ee1e83394b8283bf93a018de) to branch 'net.randombit.botan.c++0x' (head 7480693bb3f1e8a4e039a3e7ba3d9a7007f9730e)
| | * propagate from branch 'net.randombit.botan' (head ↵lloyd2011-03-082-8/+9
| | |\ | | | | | | | | | | | | | | | | | | | | dd068808e5bf87c982765a8bcc314996053a5bdd) to branch 'net.randombit.botan.c++0x' (head 34696d52a8148d64f7021b3e193fc56f051b9dd2)
| | * \ propagate from branch 'net.randombit.botan' (head ↵lloyd2011-02-111-44/+17
| | |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | 13a0d36dac3709f3cb88e830ed7f8cab9e7433ab) to branch 'net.randombit.botan.c++0x' (head 2221ad8796466e7e096645de77ba856a9c902d14)
| | | * \ propagate from branch 'net.randombit.botan' (head ↵lloyd2010-11-292-1/+109
| | | |\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fc8daa606ab7954eab48778d7236986747b719e4) to branch 'net.randombit.botan.c++0x' (head 2bf71b0a2e0e468d7eb3631e4ca284234f554729)
| | | * \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2010-11-041-44/+17
| | | |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 303b2518a80553214b1e5ab4d9b96ef54629cbc7) to branch 'net.randombit.botan.c++0x' (head d734eefabe4816be4dd3e3e6e7bb13b7ab5be148)
| | | | * \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2010-10-281-10/+10
| | | | |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2841fb518e20d2fe0a374e4f6b08bdbb14d5d158) to branch 'net.randombit.botan.c++0x' (head 0b9275139d6346bd3aa28d63bf8b8a03851d853d)
| | | | * \ \ \ propagate from branch 'net.randombit.botan' (head ↵lloyd2010-10-131-0/+1
| | | | |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 6581b789d58717bc6acee5c6a248e2d44c636e40) to branch 'net.randombit.botan.c++0x' (head 227a989ae94da8f4379ea4b9b0fc0ee8dbdde0c7)
| | | | * | | | | propagate from branch 'net.randombit.botan' (head ↵lloyd2010-10-131-44/+17
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 2898d79f992f27a328a3e41d34b46eb1052da0de) to branch 'net.randombit.botan.c++0x' (head 6cba76268fd69a73195760c021b7f881b8a6552c)
* | | | | | | | | Actually check CA signatures in Credentials_Manager. This area needs alloyd2012-02-012-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lot more work before this can be deployed.
* | | | | | | | | Add Credentials_Manager which is an interface to something that knowslloyd2012-01-032-0/+24
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | what certs, keys, etc are available to the app. Needs polishing but it seems like it should be sound.
* | | | | | | | Fix the very basic operations for encoding and decoding alloyd2011-05-171-5/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | certificate policies extension, though it's really not supported at all. Remove test code from secmem.h Fix building the examples
* | | | | | | | In X509_Certificate::to_string, don't print key ids if emptylloyd2011-04-061-2/+6
| |_|_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reduce size of serial numbers of new certs from 256 to 128 bits; 2**64 certs is _probably_ sufficient, given that it would take hundreds of exabytes of storage to hold that many certificates. :)
* | | | | | | Fix variable mask warning in Sun C++.lloyd2011-03-011-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Make comment clearer on how to enable stlport4 in Sun C++
* | | | | | | Use size_t rather than u32bit for loop variableslloyd2011-02-161-12/+12
| | | | | | |
* | | | | | | Some dependency fixeslloyd2011-02-111-0/+1
|/ / / / / /
* | | | | | Pull out variable, causes link problems in amalgamationlloyd2011-02-092-3/+3
| | | | | |
* | | | | | Convert the BER/DER coders to use size_t instead of u32bit for smalllloyd2011-02-093-12/+16
| |_|_|_|/ |/| | | | | | | | | | | | | | integer values. Update callers.
* | | | | Add X509_Certificate::to_stringlloyd2010-11-292-2/+110
|/ / / / | | | | | | | | | | | | The x509info example now just calls that
* | | / Add a BOTAN_DEPRECATED macro which can provide compile-timelloyd2010-11-021-0/+1
| |_|/ |/| | | | | | | | deprecation warnings (at least for GCC and VC++). Use in some places.
* | | s/u32bit/size_t/lloyd2010-10-181-10/+10
| |/ |/|
* | Split some of the ASN.1 types into their own headerslloyd2010-10-131-0/+1
|/
* Fix CRL reason codes and updating of CRLs. Add tests for both cases.lloyd2010-10-071-0/+2
|
* Add dependencieslloyd2010-09-241-0/+4
|
* Add missing info fileslloyd2010-09-201-0/+1
|
* Add a (clunky) function X509_Object::hash_used_for_signature thatlloyd2010-09-202-0/+26
| | | | | | | returns the hash function that was used to create the signature. Useful for a future X509 path validator that inform the user which hash(es) they are relying on and/or allowing the ability to reject hashes which are undesirable (MD2, MD5, etc)
* Don't use SecureVector to store certificate data; mlock'ed memory inlloyd2010-09-173-8/+8
| | | | | particular is precious. Really these could probably just as easily be std::vectors since even zeroizing the memory isn't relevant here.
* Hide X509_Object constructorlloyd2010-09-171-11/+11
|
* Remove dependencies on X509_Storelloyd2010-09-172-4/+19
|
* Split up src/cert/x509 into a set of modules, though mostly mutuallylloyd2010-09-176-0/+1775
dependent right now.