106 Commits

Author SHA1 Message Date
Justin Karneges
bf27824a9a use MemoryRegion instead of SecureArray, for hash, mac, and pkey sign/verify
svn path=/trunk/kdesupport/qca/; revision=677315
2007-06-18 21:31:14 +00:00
Justin Karneges
2db0ae1fcb remove unnecessary secure array usage in pkey api
svn path=/trunk/kdesupport/qca/; revision=674761
2007-06-12 23:49:25 +00:00
Justin Karneges
ab782c5ff4 remove unnecessary secure array usage from cert api
svn path=/trunk/kdesupport/qca/; revision=674313
2007-06-12 02:30:58 +00:00
Justin Karneges
22bda16af0 push x509 object comparisons into the provider
svn path=/trunk/kdesupport/qca/; revision=673069
2007-06-08 21:57:32 +00:00
Justin Karneges
c025229198 Provider qcaVersion, version, and deinit
svn path=/trunk/kdesupport/qca/; revision=673032
2007-06-08 20:05:04 +00:00
Justin Karneges
b755be598d fix msvc2003 warnings?
svn path=/trunk/kdesupport/qca/; revision=672967
2007-06-08 15:55:08 +00:00
Justin Karneges
27e04daa81 ConstraintType is now a class
svn path=/trunk/kdesupport/qca/; revision=672719
2007-06-07 22:46:11 +00:00
Justin Karneges
5a97d03b5b CertificateInfoType is now a class, average uses are still API compatible
svn path=/trunk/kdesupport/qca/; revision=672697
2007-06-07 21:31:12 +00:00
Brad Hards
231f7f8eb8 Switch Cipher::blockSize to return int, rather than unsigned int.
I think unsigned int was a bit more descriptive, but certainly
is non-standard.

svn path=/trunk/kdesupport/qca/; revision=670664
2007-06-02 11:22:26 +00:00
Justin Karneges
89b1cd4de4 fix msvc6 warnings
svn path=/trunk/kdesupport/qca/; revision=669680
2007-05-30 02:49:19 +00:00
Alon Bar-Lev
7084b57c19 Support for EMSA3_Raw signature/verification for RSA keys
svn path=/trunk/kdesupport/qca/; revision=668336
2007-05-26 01:10:47 +00:00
Justin Karneges
59ab0e0f07 comment out printfs
svn path=/trunk/kdesupport/qca/; revision=664899
2007-05-15 05:54:57 +00:00
Justin Karneges
e8698f909e support for certcollection pkcs7 reading
svn path=/trunk/kdesupport/qca/; revision=664897
2007-05-15 05:52:48 +00:00
Justin Karneges
7c1fc425ff stop after first successful decrypt
svn path=/trunk/kdesupport/qca/; revision=664869
2007-05-15 03:05:19 +00:00
Justin Karneges
7a923f1f6e use untrusted certs for verification
svn path=/trunk/kdesupport/qca/; revision=664842
2007-05-14 23:16:53 +00:00
Justin Karneges
a55a4f5bc8 take out warning about other-provider keys being experimental
svn path=/trunk/kdesupport/qca/; revision=664423
2007-05-13 22:03:45 +00:00
Justin Karneges
1d67a0eb1c don't deinit openssl
svn path=/trunk/kdesupport/qca/; revision=664009
2007-05-12 22:31:59 +00:00
Justin Karneges
1e2ce008e2 put the todo note about rsa_sign in here
svn path=/trunk/kdesupport/qca/; revision=662750
2007-05-09 02:58:25 +00:00
Justin Karneges
b606fb1e90 rsa_sign now returns error if the underlying sign fails
svn path=/trunk/kdesupport/qca/; revision=662451
2007-05-08 07:47:28 +00:00
Justin Karneges
7b3bfe7404 async cms signing
svn path=/trunk/kdesupport/qca/; revision=660844
2007-05-03 22:10:41 +00:00
Dirk Mueller
8fe846856a compile++
svn path=/trunk/kdesupport/qca/; revision=657873
2007-04-25 09:21:32 +00:00
Justin Karneges
9691ebda2f add only the constraints asked for
svn path=/trunk/kdesupport/qca/; revision=656248
2007-04-20 19:22:24 +00:00
Justin Karneges
466f2cce91 fix leaks
svn path=/trunk/kdesupport/qca/; revision=655237
2007-04-18 02:40:38 +00:00
Brad Hards
4e7430bd70 krazy cleanups.
svn path=/trunk/kdesupport/qca/; revision=654944
2007-04-17 12:06:03 +00:00
Alon Bar-Lev
edca3aba45 QSecureArray/QBigInteger -> QCA::SecureArray/QCA::BigInteger fixups
svn path=/trunk/kdesupport/qca/; revision=653607
2007-04-13 19:21:10 +00:00
Justin Karneges
39cd886afb QCAPlugin is now not a QObject, but subclasses are
svn path=/trunk/kdesupport/qca/; revision=653255
2007-04-13 00:42:19 +00:00
Justin Karneges
07104e0119 add tls issuer list support, prepare provider for remaining tls features
svn path=/trunk/kdesupport/qca/; revision=652442
2007-04-11 02:13:20 +00:00
Justin Karneges
3b68755b2f support for oids in cert info types
svn path=/trunk/kdesupport/qca/; revision=652064
2007-04-10 01:08:04 +00:00
Justin Karneges
637ba1b52c openssl and gnupg plugins now support build modes
svn path=/trunk/kdesupport/qca/; revision=648608
2007-03-31 20:14:49 +00:00
Justin Karneges
32cd6df7d8 use underscore instead of hyphen with Q_EXPORT_PLUGIN2
svn path=/trunk/kdesupport/qca/; revision=648549
2007-03-31 17:01:56 +00:00
Justin Karneges
657960e223 email address can be in two spots
svn path=/trunk/kdesupport/qca/; revision=648548
2007-03-31 16:52:54 +00:00
Justin Karneges
4e58da2674 fix p12 cert order, extract smime signer the proper way
svn path=/trunk/kdesupport/qca/; revision=647664
2007-03-29 03:24:15 +00:00
Justin Karneges
f1fdc01ca6 oops, compare against the right values
svn path=/trunk/kdesupport/qca/; revision=645965
2007-03-24 01:12:53 +00:00
Justin Karneges
dc4e2b6378 support reading multiple fields of the same type
svn path=/trunk/kdesupport/qca/; revision=645945
2007-03-23 22:28:14 +00:00
Brad Hards
da74d2d2d9 Update FSF address.
svn path=/trunk/kdesupport/qca/; revision=618716
2007-01-02 05:54:20 +00:00
André Wöbbeking
07197dc54e -pedantic
svn path=/trunk/kdesupport/qca/; revision=608497
2006-11-27 18:17:05 +00:00
Justin Karneges
28331808c2 preserve info order
svn path=/trunk/kdesupport/qca/; revision=605044
2006-11-15 05:21:41 +00:00
Justin Karneges
498fe8fff4 provider versioning, also added qcaVersion for runtime version check
svn path=/trunk/kdesupport/qca/; revision=604475
2006-11-12 23:01:27 +00:00
Brad Hards
11c52bf109 This implements the OpenSSL provider support for
Extended Validation certificates. 

The plan for KDE is that QCA will provide access
to the issuer name and certificate policies 
(which is already possible), plus access to the
special information fields. KDE will then decide
whether the certficate is really EV (based on
whether Konqi thinks the issuer is trustworthy
and the policy (which is issuer specific) denotes
EV.

svn path=/trunk/kdesupport/qca/; revision=601157
2006-11-02 10:18:17 +00:00
Brad Hards
46f5674dad A few small updates:
1. this provider now uses the "pkcs12" label instead of "pix",
to match a change I just committed into the main part of QCA.
2. Fix a crash that occurs when trying to output a KeyBundle
in PKCS12 format.
3. Implement support for "friendly name" when loading PKCS12
(.p12) format files.

svn path=/trunk/kdesupport/qca/; revision=597047
2006-10-19 09:48:23 +00:00
Brad Hards
a6c4264ea0 Implement the backend part of the Server Name Identification
(RFC3546).

Note that this will only work if your underlying OpenSSL implementation
also supports it, which is true for the 0.9.9 development (essentially
CVS HEAD for OpenSSL), but not for 0.9.8 or earlier.

This version should build with either 0.9.9 or 0.9.8, and should also
be OK with at least 0.9.7.

Also has some gratuitous whitespace changes courtesy of my new
xemacs configuration.

CCBUG: 122433

svn path=/trunk/kdesupport/qca/; revision=594801
2006-10-12 11:14:09 +00:00
Brad Hards
f8a55b4914 Updates to the openssl provider to allow us to handle
more than one altname of each type.

svn path=/trunk/kdesupport/qca/; revision=540405
2006-05-13 11:20:58 +00:00
Brad Hards
410ae19a64 This patch adds support for Cryptographic Message
Syntax (CMS) (which is closely related to PKCS7 / 
SMIME) signing/verifying for the "signed message"
type format (as opposed to detached signatures, which
are already supported).

I've already committed the unit tests for this, which
work correctly.

svn path=/trunk/kdesupport/qca/; revision=539592
2006-05-11 02:17:07 +00:00
Michaël Larouche
e77ac39a8c Oopps, revert my changes here. Somehow Q_INTERFACES doesn't work on my machine and I commented it out to make it compile.
svn path=/trunk/kdesupport/qca/; revision=531834
2006-04-20 12:10:01 +00:00
Michaël Larouche
efb22a688d Use QC_ENABLE_DEBUG for pkgconfig instead of QC_DEBUG
svn path=/trunk/kdesupport/qca/; revision=531632
2006-04-19 17:40:25 +00:00
Brad Hards
73ce308920 Add support for HMAC with SHA2 (224, 256, 384, 512)
capabilities.

svn path=/trunk/kdesupport/qca/; revision=525943
2006-04-03 12:00:31 +00:00
Justin Karneges
2c9fe4432c remove const for encrypt,decrypt,deriveKey
svn path=/trunk/kdesupport/qca/; revision=524786
2006-03-31 09:13:50 +00:00
Justin Karneges
557bef82cf support for cert chain completion and validation
svn path=/trunk/kdesupport/qca/; revision=524248
2006-03-30 06:04:14 +00:00
Brad Hards
6fa9ef4c7b Add in names for the Kerberos ciphers supported
by openssl 0.9.8a.

svn path=/trunk/kdesupport/qca/; revision=520145
2006-03-19 07:24:36 +00:00
Brad Hards
4a50787299 Implement sessionInfo().
svn path=/trunk/kdesupport/qca/; revision=519904
2006-03-18 09:47:49 +00:00