Commit Graph

25 Commits

Author SHA1 Message Date
Christian Hohnstaedt
1bbe5ede5c Fix default hash during startup 2018-03-30 22:29:00 +02:00
Christian Hohnstaedt
6e432238e7 Generalize, simplify and unify settings management
Add settings class to access the settings table in the database
Cache values and improve database writes.
Options dialog simplified
Replace getSetting / storeSetting
Unpack option flags to rows in the settings
2018-03-10 09:04:54 +01:00
Christian Hohnstaedt
cfc65af48a Add warning if the default hash algorithm is SHA1 or less 2017-11-13 17:40:15 +01:00
Christian Hohnstaedt
13580262f6 Change default hash to SHA-256 2017-10-24 12:15:58 +02:00
Patrick Monnerat
ad6c2baae5 Add support for OpenSSL 1.1.0
The API changed heavily. New functions arrived, old functions
disappeared and many structures became opaque.

This version of the patch implements pkcs11 signing as follows:
- openssl < 1.0.0: rsa & dsa without engine
- openssl 1.0.x: rsa, dsa & ec with engine
- openssl >= 1.1.0: rsa, dsa & ec without engine

In the operation, we therefore also gain implementation of dsa signing for openssl < 1.0.0 (ec disabled because EC_KEY_METHOD was not yet invented!).

I've given up trying to use a PKEY_ENGINE with openssl 1.1: seems not possible anymore.

I've succeeded compiling the patched xca with openssl 0.9.8n, 1.0.2j and 1.1.0e.
I've successfully tested pkcs11 signing using softhsm with openssl 1.0.2j and 1.1.0e.

The patch also removes gcc7 new warnings.
2017-06-19 08:32:39 +02:00
Christian Hohnstaedt
66071af0ce Support SigAlg2HashAlg for OpenSSL 0.9.8 2015-04-03 17:56:55 +02:00
Christian Hohnstaedt
595300617f SF Feat. Req. #80 Create new certificate, based on existing certificate 2015-04-03 14:52:39 +02:00
Christian Hohnstaedt
02d7856b74 Update version and copyright year 2015-02-19 09:06:55 +01:00
Christian Hohnstaedt
fa4085611c Add support for SHA-224 2015-02-13 09:41:10 +01:00
Christian Hohnstaedt
3cbd020bfc Update copyright notes 2013-11-20 09:32:39 +01:00
Christian Hohnstaedt
0105a2c1b7 SF Bug #82 Certificate Creation out of Spec
Add sha256, sha384 and sha512 when compiling against OpenSSL > 1.0.0
Thanks "dvo" for the patch proposal
2013-11-20 07:41:11 +01:00
Christian Hohnstaedt
38ed0b60b5 Update Copyright dates 2012-05-06 11:16:44 +02:00
Christian Hohnstaedt
1a3a417bb6 cleanup after closing a db and reset settings before opening it
Since OpenSC is not part of XCA anymore, set the default
PKCS#11 lib on windows to C:\WINDOWS\system32\opensc-pkcs11.dll

Also disable Token menu after closing a database.
2011-07-15 07:18:18 +02:00
Christian Hohnstaedt
00f1bbb5b3 Make EC parts of XCA depend on OpenSSL config
Some distributions ship an OpenSSL installation without
EC Support.
XCA evaluates the OPENSSL_NO_EC flag to disable EC

Thanks to Andreas Piesk for his patch
2011-01-06 07:01:29 +01:00
Christian Hohnstaedt
50f58f8919 fix hash selection 2010-08-26 23:44:36 +02:00
Christian Hohnstaedt
f1c528fcc9 update copyright information 2010-03-11 07:13:48 +01:00
Christian Hohnstaedt
81dfbec931 remember current hash-algorithm when changing keys
* fixes [2935458]
2010-01-22 07:42:45 +01:00
Christian Hohnstaedt
9f900ae6f7 update copyright date to 2009 where appropriate 2009-11-24 17:54:21 +01:00
Christian Hohnstaedt
76913168ed smart card related fixes
- fixes to not crash if Smart card support is missing
 - select correct list of hash algos by
   reading PKCS11 mechanisms per slot and save them among with
   the card in the db
 - remove debugging code
 - allow to configure the path to the PKCS#11 library
 - copy pkcs11 header-file into XCA lib
2009-11-04 18:59:55 +01:00
Christian Hohnstaedt
f82aad0c2a add support for Elliptic curve keys 2009-10-28 18:56:44 +01:00
Christian Hohnstaedt
0c99dbe7d1 drop md2 signing algorithm, because of security reasons 2009-09-05 11:55:57 +02:00
Christian Hohnstaedt
1a47ce9c22 make sha1 the default hash to avoid problems with other software
- fixes [ 1751397 ] "XCA makes invalid certs"
2009-03-02 21:53:09 +01:00
Christian Hohnstaedt
19ae733777 fix compiling issues 2007-11-22 20:13:59 +01:00
Christian
cab27442ce whitespace correction 2007-05-23 23:24:31 +02:00
Christian
b0b9cd1d00 Add options dialog, not done yet...
unfy hashAlgo handling (hashBox)
2007-05-13 20:09:45 +02:00