The_Great_Archive/xca
1
0
Fork 0
mirror of https://github.com/chris2511/xca.git synced 2026-09-14 02:56:18 +05:00
Code Issues Actions Packages Projects Releases Wiki Activity
1,365 Commits 8 Branches 114 Tags 18 MiB
27482fc080
Commit Graph

55 Commits

Author SHA1 Message Date
Christian Hohnstaedt
dda100c100 OSSL 1.1 vs. 1.0: Private keys 2017-06-19 08:33:29 +02:00
Christian Hohnstaedt
7f36322f0b OSSL 1.1 vs. 1.0: Extensions, Cert Details 2017-06-19 08:33:29 +02:00
Patrick Monnerat
ad6c2baae5 Add support for OpenSSL 1.1.0 
The API changed heavily. New functions arrived, old functions
disappeared and many structures became opaque.

This version of the patch implements pkcs11 signing as follows:
- openssl < 1.0.0: rsa & dsa without engine
- openssl 1.0.x: rsa, dsa & ec with engine
- openssl >= 1.1.0: rsa, dsa & ec without engine

In the operation, we therefore also gain implementation of dsa signing for openssl < 1.0.0 (ec disabled because EC_KEY_METHOD was not yet invented!).

I've given up trying to use a PKEY_ENGINE with openssl 1.1: seems not possible anymore.

I've succeeded compiling the patched xca with openssl 0.9.8n, 1.0.2j and 1.1.0e.
I've successfully tested pkcs11 signing using softhsm with openssl 1.0.2j and 1.1.0e.

The patch also removes gcc7 new warnings.
 2017-06-19 08:32:39 +02:00
Christian Hohnstaedt
e5541c6d67 SF. Bug. #81 Make xca qt5 compatible 
Extend XCA to also compile against Qt5
Remove directory from Qt includes
 2015-09-17 18:42:42 +02:00
Christian Hohnstaedt
2f61c8c711 SF. Bug. #107 error:0D0680A8:asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag 
Gracefully handle malformed Netscape extensions i.e.
Expected IA5 strings not IA5 tagged
 2015-09-17 13:02:48 +02:00
Christian Hohnstaedt
5b40ac664b Add Null-pointer-check and add support for OSCP_noCheck 2015-05-14 12:58:05 +02:00
Christian Hohnstaedt
c691c1cca5 Suuport nameConstraints and policyMappings when creating OpenSSL conf from cert 2015-05-14 12:58:05 +02:00
Christian Hohnstaedt
5fdb362f8c Support InhibitAnyPolicy and PolicyConstraint extensions 
... when exporting certificates to templates or OpenSSL configs
 2015-05-04 17:20:45 +02:00
Christian Hohnstaedt
9210df0626 Check Netscape extensions to be IA5 clean 2015-04-04 13:13:49 +02:00
Christian Hohnstaedt
cb6dc4427d SF Feat. Req. #70 ability to search certificates 
Add a Search line into the status bar to quickly
limit the view of items to those matching the
wildcard pattern case insensitive.
 2014-11-19 09:15:19 +01:00
Christian Hohnstaedt
0baa9173ea RedHat Bug #1164340 - segfault when viewing a RHEL entitlement certificate 
...in X509V3_EXT_get v3_lib.c:15

Fix the x509v3ext copy constructor
 2014-11-17 16:15:42 +01:00
Oliver Winker
4f7cd41732 Fix for openssl 1.0.1i 
Fixes following application error

Errors
error:0D0C40D8:asn1 encoding routines:c2i_ASN1_OBJECT:invalid object encoding
error:0D08303A:asn1 encoding routines:ASN1_TEMPLATE_NOEXP_D2I:nested asn1 error

Due to openssl 1.0.1i change:

   commit 03b04ddac162c7b7fa3c57eadccc5a583a00d291
   Author: Emilia Kasper <emilia@openssl.org>
   Date:   Wed Jul 2 19:02:33 2014 +0200

Commit messgae amended and
Signed-off-by: Christian Hohnstaedt <chohnstaedt@innominate.com>
 2014-08-13 11:54:22 +02:00
Christian Hohnstaedt
38ed0b60b5 Update Copyright dates 2012-05-06 11:16:44 +02:00
Christian Hohnstaedt
90dadf57cd Fix IPv6 address handling in v3 extensions 2011-06-08 06:19:16 +02:00
Christian Hohnstaedt
9f237b923c open database with 0600 permissions 
also avoid unused varaibles
 2010-08-26 06:39:30 +02:00
Christian Hohnstaedt
be8dca7663 Support for generalname IPv6 addresses 2010-07-24 09:23:12 +02:00
Christian Hohnstaedt
9085ecbd4e More support for public keys 
Extract public key from cert and request
Show public keys in requests- and cert-details in red
Allow using public keys for certs. Useful if not selfsigning
 2010-07-22 06:57:32 +02:00
Christian Hohnstaedt
a7c40be095 After all we are able to convert all extensions to config 
Add a button to the certificate detila dialog to show the
extensions as OpenSSL config

improve AuthKeyId

Allow selecting public keys for certificates.
This works if it is signed by an other cert.
 2010-07-21 17:52:17 +02:00
Christian Hohnstaedt
766192d61c improve extension to conf functionality 
get rid of ext_str_new() and ext_str_free()
use d2i() and XX_free() instead

support for unrecognized extensions as DER stream
improve altName: otherName
Support Bitfields: keyUsage and ns_certType
 2010-07-20 21:03:29 +02:00
Christian Hohnstaedt
0ec2462715 improve creating templates from cert 
- enhance parsing of CRL-DP, SAN, IAN and AuthInfoAcc
- add support for CertificatePolicies
 2010-07-20 07:28:51 +02:00
Christian Hohnstaedt
de851ed3a9 Changed all header includes to QT4 names and included the correct component name 
By Andreas Piesk. Thanks!

adapt to HEAD since the patch is based on 0.6.4

drop qt4/Qt include in list of includes during configuration
 2010-06-13 11:49:38 +02:00
Christian Hohnstaedt
02de3bfb8c improve advanced extensions and cert2template functionality 
- if subAltName, issAltName or crlDist contain commas, put them
   on the advanced tab
 - regard critical flag for the extensions above
 2010-03-14 09:34:25 +01:00
Christian Hohnstaedt
f1c528fcc9 update copyright information 2010-03-11 07:13:48 +01:00
Christian Hohnstaedt
01fa5628ed improve key-value input 
- add input validators
 - add information about valid characters and length
 - add translations
 - untranslate X509 specific expressions
 - add 'critical' checkbox to SAN IAN AIA CDP edit box
 2010-02-27 09:20:47 +01:00
Christian Hohnstaedt
3b600c1c6b improve token handling 
- support Token initializing
 - support deleting any certificates from tokens
 - fix prepare_card API
 - replace HTML entities when generating HTML ouput
 2010-02-17 07:20:18 +01:00
Christian Hohnstaedt
30f186caa3 compile fix for openssl 1.0.0 
- and remove trailing newline when displaying extension texts
 - show the correct year when displaying times. 2009 instead of 109
 2009-12-07 19:34:57 +01:00
Christian Hohnstaedt
7f3ce42d4d finish certificate to request transformation 
- Implement feature request [2213094] and [1108304]
 2009-12-05 09:07:04 +01:00
Christian Hohnstaedt
b5667920bd start certificate export to templates 2009-12-03 23:32:23 +01:00
Christian Hohnstaedt
9f900ae6f7 update copyright date to 2009 where appropriate 2009-11-24 17:54:21 +01:00
Christian Hohnstaedt
356cab3401 check for duplicate x509 v3 extensions 
- while taking extensions from the request, the advanced tab
   and the other tabs, extensions may be duplicated.

   They will be now diplayed in
   detail and duplicates are found and shown clearly.
   Warning message will allow for modifications.

 - Fixes
    [ 1881482 ] Copy extensions from request seems to fail
    [ 1998815 ] xca adds basic constraint "CA" twice resulting in invalid CA
 2009-03-03 21:52:32 +01:00
chris
d1524a44d7 fix auth key id 
- Fix: [ 2342561 ] Checkbox disabled in template dialog
 - Fix: [ 2088468 ] Create self signed w. ext."Authority Key Identifier" fails

 - Start fixing
    1998815: xca adds basic constraint "CA" twice resulting in invalid CA
 2009-02-26 08:09:55 +01:00
Christian
71afef8472 add validation button to see all extensions before creating the cert. 2007-11-25 19:23:52 +01:00
Christian Hohnstaedt
deec9eb993 Minor changes 
- Add predefined templates to the list of templates
 - fix extension duplication bug in post 0.6.3 release
 - change Password dialog text properties
 - remove unused/duplicate code in lib/pki_key.cpp
 2007-08-13 13:53:30 +02:00
Christian
4ef72b2b8f check for certificate and request errors and display them instead of crashing 2007-06-16 16:30:08 +02:00
Christian
0195dcf746 Request attributes added 
- remove extension and attribute tab in details dialog if
   no extensions or attributes available
 - documentation updated
   X509 request attributes (like challange password) can be set and viewed.
 2007-05-28 16:33:13 +02:00
Christian
8283d8e7b9 replace copyright notice in source files 
(copyright and licence itself remain unchanged)
fix configure to set Qt include dir
code justifying
 2007-04-12 12:25:28 +02:00
Christian
d4a90be207 replace "include <Qt/" by "include <" 2007-04-11 11:19:22 +02:00
Christian
b976c7d136 remove all usages of QT3 backward lib 
[ xca-Feature Requests-1692800 ]
 2007-04-03 10:37:26 +02:00
Christian Hohnstaedt
f0d2fa3e39 Fix warnings 
mv showItem() to db_base class
cleanup
Disable PKCS#7 signing and encryption
 2006-11-17 15:05:48 +01:00
Christian Hohnstaedt
51510e9390 remove sleepycat from licence info 
add connects for edit and doubleClick
 2006-11-14 23:04:16 +01:00
Christian
79cd9d4766 changes for doubleClick 2006-11-14 06:33:49 +01:00
Christian
813e115b8e Spaces deleted 2006-05-21 10:08:39 +02:00
chris2511
c6622680db push forward to QT4 2006-03-12 17:39:52 +00:00
chris2511
f56bf74ba5 add support for building on Mac OS X 
including app dir and dmg
Fix extension bug for requests
 2005-05-17 23:41:53 +00:00
chris2511
4f783fe7b0 fixed deleting of unneeded extensions from cert for request 2005-02-26 01:53:52 +00:00
chris2511
9a58b1513c add V3 extension support for Requests 2005-02-25 23:41:56 +00:00
chris2511
cd7207e74c add "edit" buttons for subject/issuer alt. name, crl dist. point and cert. auth. info access for easier data input. 2005-02-15 22:41:46 +00:00
chris2511
b4fa72433e search more intensive for the CRL signer, add /etc/xca/nid.txt 
to OID search path
 2004-02-18 00:03:02 +00:00
chris2511
8ce6067574 MS OIDs added 2003-08-07 12:40:15 +00:00
chris2511
37e803e444 This version works already pretty good 2003-07-06 16:28:21 +00:00