Christian Hohnstaedt
766648be49
fix string conversion from QString to ASN1
...
Synopsis: When using special chars in the DN entries
they sometimes got corrupted.
- the toUtf8() method returned a temporary QByteArray
and the pointer to its memory became invalid befor using it.
- also checked other invalid uses of temporary QByteArray objects
2010-01-05 07:37:38 +01:00
Christian Hohnstaedt
9ba0dcfa89
fixes for MAC OSX SnowLeopard
...
from Boudewijn Rempt
2010-01-05 07:37:27 +01:00
Christian Hohnstaedt
232100eec7
fix BMPSTRING decoding
2009-12-09 08:18:58 +01:00
Christian Hohnstaedt
30f186caa3
compile fix for openssl 1.0.0
...
- and remove trailing newline when displaying extension texts
- show the correct year when displaying times. 2009 instead of 109
2009-12-07 19:34:57 +01:00
Christian Hohnstaedt
e293eb1f4f
support for pathlen of 0
2009-12-06 17:50:06 +01:00
Christian Hohnstaedt
dbad217a9f
improve file-dialog handling
...
- resize columns to fit to the longest entry
- Ask once if an existing file shall be overwritten
2009-12-06 16:39:17 +01:00
Christian Hohnstaedt
a7b30813f1
fix year while generating struct tm
2009-12-06 12:34:29 +01:00
Christian Hohnstaedt
ca69e1e882
fix filename handling
2009-12-05 19:09:47 +01:00
Christian Hohnstaedt
e44fb7b24c
implement getDefaultMD() for smart cards
2009-12-05 16:59:52 +01:00
Christian Hohnstaedt
0ea0d1d53a
also create template from requests
...
- fix artefacts regarding template-from-cert functionality
2009-12-05 16:00:26 +01:00
Christian Hohnstaedt
5d00ffadfb
for unknown DN entries display the OIDinstead of "unknown"
...
- add OID of nameDistinguisher to oids.txt
2009-12-05 12:54:15 +01:00
Christian Hohnstaedt
7f3ce42d4d
finish certificate to request transformation
...
- Implement feature request [2213094] and [1108304]
2009-12-05 09:07:04 +01:00
Christian Hohnstaedt
b5667920bd
start certificate export to templates
2009-12-03 23:32:23 +01:00
Christian Hohnstaedt
c0afdb0642
minor fixes
...
- fix engine path
- remove unneeded function
- fix to compile with OpenSSL 1.0.0
- parse SPKI values like filenames:
8Bit encoded on windows, utf8 otherwise
2009-12-03 08:17:51 +01:00
Christian Hohnstaedt
838fb6924d
add information to requests, wether they are already signed or not
...
- look for a certificate with the public key of the request
to decide whether it is already handled or not.
2009-11-29 12:28:31 +01:00
Christian Hohnstaedt
205fa72305
extend templates
...
- they now contain the not-well-defined information
2009-11-27 07:35:17 +01:00
Christian Hohnstaedt
fe8c2c2660
improve filename handling for databases
...
- allow "umlauts" and other non ASCII char in database filenames
using the OS dependent handling QString2filename, using
8Bit codepage encoding on Windows and UTF8 on linux and OS X
2009-11-25 09:06:22 +01:00
Christian Hohnstaedt
bd90901c10
change filename handling to support UTF8 names
2009-11-24 19:16:25 +01:00
Christian Hohnstaedt
9f900ae6f7
update copyright date to 2009 where appropriate
2009-11-24 17:54:21 +01:00
Christian Hohnstaedt
511a589341
drop senseless const
2009-11-24 17:42:16 +01:00
Christian Hohnstaedt
42da9ac574
reactivate functionality to change database password
...
- remove CRTL+X shortcuts from menu
- change DB pass not via button, but via file-menu.
2009-11-24 17:42:16 +01:00
Christian Hohnstaedt
44e17ae9da
minor fixes:
...
- remove debugging code
- allow DOCDIR to be different from PREFIX
2009-11-24 17:41:57 +01:00
Christian Hohnstaedt
58c44d2a87
improve PKCS#11 library-load logging
2009-11-19 22:13:28 +01:00
Christian Hohnstaedt
ffce5d1494
fix PKCS#12 and PEM import
2009-11-17 18:56:43 +01:00
Christian Hohnstaedt
467295e8ca
add the "no well-defined date" from RFC 5280 as checkbox
2009-11-16 18:27:21 +01:00
Christian Hohnstaedt
9182afd71c
support storing Certificates on the Smart-card
2009-11-15 19:40:55 +01:00
Christian Hohnstaedt
e61e58d917
improve and harden mechanism handling
2009-11-13 18:06:31 +01:00
Christian Hohnstaedt
2a1fc082df
more fixes, improvements for Windows
2009-11-13 08:36:43 +01:00
Christian Hohnstaedt
f802de1db5
catch errors during card import
...
- improve reading of CKA_ID and support CKA_IDs longer than 1 byte
- lib/Makefile pki_base has no Q_OBJECT
2009-11-12 08:14:15 +01:00
Christian Hohnstaedt
0aced7f2c4
improve Smart-card handling
...
- if PublicKey or Cert CKA_LABEL fails, try CKA_SUBJECT
- don't use CKA_VALUE attribute on PUBLIC_KEY,
because not everyone supports it.
While being at it, add code for DSA and EC Cards.
- load PKCS#11 engine only after database open.
- avoid reloading the DLL on windows, because it is not supported.
Windows users need to restart XCA after changing the PKCS#11 path
- fix getSlotList() and return a QList<unsigned long>
2009-11-11 22:58:34 +01:00
Christian Hohnstaedt
c7dc959084
add a load button
...
- when changing the PKCS#11 library path in the options dialog
a load button tries to load the lib and informs
about failure or success
2009-11-11 09:25:59 +01:00
Christian Hohnstaedt
b49f06de51
fix warning
2009-11-10 13:58:36 +01:00
Christian Hohnstaedt
47e0cffb93
fix compilation with GNU GCC 4.4.0 and above
...
- by Samuli Suominen, thanks.
2009-11-10 13:33:35 +01:00
Christian Hohnstaedt
1f93c82010
pkcs#11 fixes
...
- support pkcs#11 library selection by file dialog
- don't prompt for pin if CKF_PROTECTED_AUTHENTICATION_PATH
untested, because of ENODEV on my desk
2009-11-06 08:18:38 +01:00
Christian Hohnstaedt
76913168ed
smart card related fixes
...
- fixes to not crash if Smart card support is missing
- select correct list of hash algos by
reading PKCS11 mechanisms per slot and save them among with
the card in the db
- remove debugging code
- allow to configure the path to the PKCS#11 library
- copy pkcs11 header-file into XCA lib
2009-11-04 18:59:55 +01:00
Christian Hohnstaedt
f41411902f
more Smart card
...
- add support to store a certificate on the card
(did not work with my TCOS card, but in theory....)
- init PIN via PUK
- be more robust regarding card changes
- improve PIN handling
2009-11-03 19:51:37 +01:00
Christian Hohnstaedt
7cf3862467
support to init the PIN via PUK (SO PIN)
...
- start support for binary passwords (hexencoded)
2009-11-02 08:01:49 +01:00
Christian Hohnstaedt
48f59e9d1a
support for PIN changes of Smart card tokens.
2009-11-01 19:41:29 +01:00
Christian Hohnstaedt
5789037b36
more smart card
...
- import moved to "import" menu
- initialliy support signing
- remove debugging code
2009-10-30 17:59:19 +01:00
Christian Hohnstaedt
7fe7a06c7b
merge Scard details and key details
2009-10-30 08:18:16 +01:00
Christian Hohnstaedt
dcf0c83b35
support smart card import
...
- import keys and certificates from a smart card and
show them in an importMulti dialog
- support exporting the public from smart card
2009-10-29 18:54:08 +01:00
Christian Hohnstaedt
4a0beaff54
add token ID for smart cards
2009-10-29 08:10:47 +01:00
Christian Hohnstaedt
f82aad0c2a
add support for Elliptic curve keys
2009-10-28 18:56:44 +01:00
Christian Hohnstaedt
66c7db0350
Start implementation of SmartCard support
...
- use PKCS#11
- load keys and showing them works
2009-10-28 18:54:22 +01:00
Christian Hohnstaedt
de7165b5d8
add fix file-extension when creating databases on Linux, too
...
fix typo in changelog
2009-09-17 07:59:22 +02:00
Christian Hohnstaedt
6aed17386b
look closer at errors
2009-09-10 07:58:38 +02:00
Christian Hohnstaedt
1866f49b55
minimum keysize 1024 bit
2009-09-05 11:55:57 +02:00
Christian Hohnstaedt
9ac65605f7
support modifying the CRL subject during signing
2009-09-05 11:55:57 +02:00
Christian Hohnstaedt
a8a9870f43
fix certificate request verification
...
- invalid requests are now shown as FAILED
- show SPKI challange and signatur algo correctly
- fix formatting
2009-09-05 11:55:57 +02:00
Christian Hohnstaedt
356cab3401
check for duplicate x509 v3 extensions
...
- while taking extensions from the request, the advanced tab
and the other tabs, extensions may be duplicated.
They will be now diplayed in
detail and duplicates are found and shown clearly.
Warning message will allow for modifications.
- Fixes
[ 1881482 ] Copy extensions from request seems to fail
[ 1998815 ] xca adds basic constraint "CA" twice resulting in invalid CA
2009-03-03 21:52:32 +01:00