Commit Graph

736 Commits

Author SHA1 Message Date
Christian Hohnstaedt
47e2f6175f hack libp11 to work with Aloaha PKCS#11 library 2009-11-16 08:12:05 +01:00
Christian Hohnstaedt
9182afd71c support storing Certificates on the Smart-card 2009-11-15 19:40:55 +01:00
Christian Hohnstaedt
e61e58d917 improve and harden mechanism handling 2009-11-13 18:06:31 +01:00
Christian Hohnstaedt
2a1fc082df more fixes, improvements for Windows 2009-11-13 08:36:43 +01:00
Christian Hohnstaedt
f802de1db5 catch errors during card import
- improve reading of CKA_ID and support CKA_IDs longer than 1 byte
 - lib/Makefile pki_base has no Q_OBJECT
2009-11-12 08:14:15 +01:00
Christian Hohnstaedt
0aced7f2c4 improve Smart-card handling
- if PublicKey or Cert CKA_LABEL fails, try CKA_SUBJECT
 - don't use CKA_VALUE attribute on PUBLIC_KEY,
   because not everyone supports it.
   While being at it, add code for DSA and EC Cards.
 - load PKCS#11 engine only after database open.
 - avoid reloading the DLL on windows, because it is not supported.
   Windows users need to restart XCA after changing the PKCS#11 path
 - fix getSlotList() and return a QList<unsigned long>
2009-11-11 22:58:34 +01:00
Christian Hohnstaedt
c7dc959084 add a load button
- when changing the PKCS#11 library path in the options dialog
   a load button tries to load the lib and informs
   about failure or success
2009-11-11 09:25:59 +01:00
Christian Hohnstaedt
7e0a18dba2 improve windows build instruction and script 2009-11-10 23:29:40 +01:00
Christian Hohnstaedt
b49f06de51 fix warning 2009-11-10 13:58:36 +01:00
Christian Hohnstaedt
7b7f40f883 Remove hack for mingw-linker
- Windows compilation works without this hack
2009-11-10 13:33:35 +01:00
Christian Hohnstaedt
47e0cffb93 fix compilation with GNU GCC 4.4.0 and above
- by Samuli Suominen, thanks.
2009-11-10 13:33:35 +01:00
Christian Hohnstaedt
09bb3c32a4 update date in the docs 2009-11-10 11:53:48 +01:00
Christian Hohnstaedt
14a9b965da Feature request [1996192]
- Include "OCSPSigning" in misc/eku.txt
2009-11-10 11:51:33 +01:00
Christian Hohnstaedt
d1156d69c6 usability
- disable key selection if the subject of a request is modified
   during certificate rollout from a PKCS#10 request.
2009-11-10 09:34:16 +01:00
Christian Hohnstaedt
1da6b64925 update documentation 2009-11-10 09:22:45 +01:00
Christian Hohnstaedt
1f93c82010 pkcs#11 fixes
- support pkcs#11 library selection by file dialog
 - don't prompt for pin if CKF_PROTECTED_AUTHENTICATION_PATH
   untested, because of ENODEV on my desk
2009-11-06 08:18:38 +01:00
Christian Hohnstaedt
b48170af65 update Build instructions for Windows
- add libp11, libltdl, engine-pkcs11, opensc
 - suppress irritating compiler warnings when building xca
2009-11-05 13:18:23 +01:00
Christian Hohnstaedt
76913168ed smart card related fixes
- fixes to not crash if Smart card support is missing
 - select correct list of hash algos by
   reading PKCS11 mechanisms per slot and save them among with
   the card in the db
 - remove debugging code
 - allow to configure the path to the PKCS#11 library
 - copy pkcs11 header-file into XCA lib
2009-11-04 18:59:55 +01:00
Christian Hohnstaedt
f41411902f more Smart card
- add support to store a certificate on the card
   (did not work with my TCOS card, but in theory....)
 - init PIN via PUK
 - be more robust regarding card changes
 - improve PIN handling
2009-11-03 19:51:37 +01:00
Christian Hohnstaedt
7cf3862467 support to init the PIN via PUK (SO PIN)
- start support for binary passwords (hexencoded)
2009-11-02 08:01:49 +01:00
Christian Hohnstaedt
48f59e9d1a support for PIN changes of Smart card tokens. 2009-11-01 19:41:29 +01:00
Christian Hohnstaedt
5789037b36 more smart card
- import moved to "import" menu
 - initialliy support signing
 - remove debugging code
2009-10-30 17:59:19 +01:00
Christian Hohnstaedt
7fe7a06c7b merge Scard details and key details 2009-10-30 08:18:16 +01:00
Christian Hohnstaedt
dcf0c83b35 support smart card import
- import keys and certificates from a smart card and
   show them in an importMulti dialog
 - support exporting the public from smart card
2009-10-29 18:54:08 +01:00
Christian Hohnstaedt
4a0beaff54 add token ID for smart cards 2009-10-29 08:10:47 +01:00
Christian Hohnstaedt
1e54ce5f2c minor changes
- improve finding QT header
 - allow help dialog in parallel (non-modal)
2009-10-28 19:07:07 +01:00
Christian Hohnstaedt
f82aad0c2a add support for Elliptic curve keys 2009-10-28 18:56:44 +01:00
Christian Hohnstaedt
a04556d998 add missing image 2009-10-28 18:55:17 +01:00
Christian Hohnstaedt
f3aca31eed update documentation
- add step-by-step guide from Devin Reade <gdr@gno.org>
 - whitespace cleanup
2009-10-28 18:55:17 +01:00
Christian Hohnstaedt
66c7db0350 Start implementation of SmartCard support
- use PKCS#11
 - load keys and showing them works
2009-10-28 18:54:22 +01:00
Christian Hohnstaedt
de7165b5d8 add fix file-extension when creating databases on Linux, too
fix typo in changelog
2009-09-17 07:59:22 +02:00
Christian Hohnstaedt
21e0fb54d8 update changelog and version 2009-09-10 23:08:25 +02:00
Christian Hohnstaedt
11460f063f update copyright 2009-09-10 22:59:39 +02:00
Christian Hohnstaedt
a979808c7a update translation files 2009-09-10 07:58:43 +02:00
Christian Hohnstaedt
51a134626a fix initial time settings in NewX509 dialog 2009-09-10 07:58:39 +02:00
Christian Hohnstaedt
0b70d65690 update key images 2009-09-10 07:58:38 +02:00
Christian Hohnstaedt
6aed17386b look closer at errors 2009-09-10 07:58:38 +02:00
Christian Hohnstaedt
997c3fa711 replace key image and invalid cert icon 2009-09-08 22:46:01 +02:00
Christian Hohnstaedt
1866f49b55 minimum keysize 1024 bit 2009-09-05 11:55:57 +02:00
Christian Hohnstaedt
9ac65605f7 support modifying the CRL subject during signing 2009-09-05 11:55:57 +02:00
Christian Hohnstaedt
0c99dbe7d1 drop md2 signing algorithm, because of security reasons 2009-09-05 11:55:57 +02:00
Christian Hohnstaedt
a8a9870f43 fix certificate request verification
- invalid requests are now shown as FAILED
 - show SPKI challange and signatur algo correctly
 - fix formatting
2009-09-05 11:55:57 +02:00
Tino Keitel
6c2d6a69eb install the icon referenced in xca.desktop and use a less generic name
- xca.desktop referenced an icon file, but it wasn't installed

- the icon filename key.xpm was very generic, changed it to xca-32x32.xpm
2009-03-10 12:59:47 +01:00
Tino Keitel
ed6b858aaf fix typo in desktop file categories 2009-03-10 12:59:43 +01:00
Christian Hohnstaedt
eacef09f3d Merge branch 'master' of git.hohnstaedt.de:git/xca 2009-03-03 21:55:10 +01:00
Christian Hohnstaedt
356cab3401 check for duplicate x509 v3 extensions
- while taking extensions from the request, the advanced tab
   and the other tabs, extensions may be duplicated.

   They will be now diplayed in
   detail and duplicates are found and shown clearly.
   Warning message will allow for modifications.

 - Fixes
    [ 1881482 ] Copy extensions from request seems to fail
    [ 1998815 ] xca adds basic constraint "CA" twice resulting in invalid CA
2009-03-03 21:52:32 +01:00
Christian Hohnstaedt
41cbedf756 be more specific about file locations
- fixes [ 2087157 ] "Documentation chapter 11 wrong"
2009-03-02 22:02:04 +01:00
Christian Hohnstaedt
1a47ce9c22 make sha1 the default hash to avoid problems with other software
- fixes [ 1751397 ] "XCA makes invalid certs"
2009-03-02 21:53:09 +01:00
chris
0a93965df3 more german translation
- by Andreas Roth
2009-02-27 08:12:46 +01:00
chris
365ce4df4f fix locale support and commandline handling
- by Andreas Roth
2009-02-27 08:09:43 +01:00