Christian Hohnstaedt
806312800d
Thales nCipher key generation changes for EC and DSA keys
...
Developed and tested by
Mak, Mcken <Mcken.Mak@thalesesec.com>
Thanks!
2016-01-16 07:54:54 +01:00
Christian Hohnstaedt
e5541c6d67
SF. Bug. #81 Make xca qt5 compatible
...
Extend XCA to also compile against Qt5
Remove directory from Qt includes
2015-09-17 18:42:42 +02:00
Christian Hohnstaedt
d55eb917e2
Silence compiler warnings about unused parameters
2015-08-11 07:17:56 +02:00
Christian Hohnstaedt
854d0dbde5
Minor fixes, remove debugging output
2015-05-18 17:51:20 +02:00
Christian Hohnstaedt
2909e79317
Move entropy functions into new class
...
Read and write .rnd file during start and exit
2015-04-08 06:54:55 +02:00
Christian Hohnstaedt
1138dad902
SF Bug #102 Weak entropy source used for key generation
...
On startup use "/dev/random" and "/dev/hwrng"
as additional entropy for the OpenSSL random pool.
Collect mouse position and key press time entropy
for seeding the openssl random pool before generating keys.
When using Smartcards, use the Smartcard RNG
as additional entropy source.
2015-04-06 14:19:10 +02:00
Christian Hohnstaedt
277b25af62
Check for crashes in PKCS#11 library and inform the user
2015-02-22 17:00:06 +01:00
Christian Hohnstaedt
c8e517912a
Refine PKCS#11 ECC named curve workaround for www.CardContact.de
2014-11-22 11:50:37 +01:00
Christian Hohnstaedt
7b4ea0c130
Fix DSA token signing
2014-11-13 20:10:18 +01:00
Christian Hohnstaedt
b9dd27a915
Fix EC token key generation
2014-11-13 20:10:18 +01:00
Christian Hohnstaedt
9321c92f3e
DSA add Token keygen for DSA and start DSA token signing
2014-11-12 22:19:43 +01:00
Christian Hohnstaedt
2512a22aa7
Load and store DSA keys on a token
2014-11-12 22:19:43 +01:00
Christian Hohnstaedt
6927dc1b0c
Fix signed/unsigned warning
2014-11-05 06:57:46 +01:00
Christian Hohnstaedt
65debf1e60
Fix my ENGINEs memory and reference handling
...
and remove some unused things
2014-11-01 10:02:57 +01:00
Christian Hohnstaedt
fed1a9584a
Remove debugging code
2014-10-31 07:21:11 +01:00
Christian Hohnstaedt
8ed9bab7df
Support EC key generation on PKCS#11 token
...
move EC builtin sources into extra class and file
2014-10-31 00:23:39 +01:00
Christian Hohnstaedt
ad93cebf5c
PKCS#11: Make EC and RSA signatures work with ENGINE WIP
2014-10-31 00:17:19 +01:00
Christian Hohnstaedt
9710a78592
First preparation of version 1.0.0
...
update changelog and documentation
avoid warnings about unused variables
2014-04-11 19:29:46 +02:00
Christian Hohnstaedt
8168ca5181
QMessageBox: protect against HTML parsing
...
The default message box displays the message as HTML
Don't do that.
Thanks to Artur Czyz (artur_czyz at wp.pl) for finding it.
2014-04-11 19:29:45 +02:00
Christian Hohnstaedt
38ed0b60b5
Update Copyright dates
2012-05-06 11:16:44 +02:00
Christian Hohnstaedt
cb128e675b
improve stoken selection dialog
2011-07-16 10:18:16 +02:00
Christian Hohnstaedt
1a3a417bb6
cleanup after closing a db and reset settings before opening it
...
Since OpenSC is not part of XCA anymore, set the default
PKCS#11 lib on windows to C:\WINDOWS\system32\opensc-pkcs11.dll
Also disable Token menu after closing a database.
2011-07-15 07:18:18 +02:00
Christian Hohnstaedt
a710c1751f
mark public keys and certificates explicit as public
2011-04-30 17:42:56 +02:00
Christian Hohnstaedt
b622e64209
consolidate Password and Pin input dialogs
...
change storage type of passwords from char[] to QByteArray
Create PwDialog class and drop passWrite and passRead
Create Passwd class derived from QBytearray
move PKCS12 password input to PwDialog
2011-04-30 07:53:26 +02:00
Christian Hohnstaedt
b59ecd1410
add extra checks for pkcs#11 lib
...
lt_dlopen() asserts the filename, so assure
valid content
add validity checks when using the session p11slot
2010-10-30 08:05:21 +02:00
Christian Hohnstaedt
9eaad7020a
Fix PKCS#11 library handling
...
In case of an empty PKCS#11 library list, the default was
selected again.
Now the list remains empty and the Token menu stays disabled.
2010-09-01 18:40:43 +02:00
Christian Hohnstaedt
05d347743f
Show message box when Pin entry via Pinpad is necessary
2010-08-28 16:52:58 +02:00
Christian Hohnstaedt
23ad77b6f0
Support multiple PKCS#11 provider
2010-08-11 23:12:48 +02:00
Christian Hohnstaedt
d34cc82e1f
avoid the need of pkcs11 engine
...
the sole use of the engine was signing.
But on the other hand it had to be compiled for all platforms
and it prevented the use of multiple PKCS#11 libs.
2010-08-10 21:58:51 +02:00
Christian Hohnstaedt
f572eb3898
Messageboxes use the Buttongroup
...
The buttongroup behaves as expected on different Environments
update translation
2010-08-06 19:08:14 +02:00
Christian Hohnstaedt
de851ed3a9
Changed all header includes to QT4 names and included the correct component name
...
By Andreas Piesk. Thanks!
adapt to HEAD since the patch is based on 0.6.4
drop qt4/Qt include in list of includes during configuration
2010-06-13 11:49:38 +02:00
Christian Hohnstaedt
23eb4ef7cd
create unique attlist from pki
2010-04-01 19:36:32 +02:00
Christian Hohnstaedt
abbf284e53
ask whether to store new certs with token-key to the key on the token
2010-03-14 09:34:25 +01:00
Christian Hohnstaedt
1102308dfc
extend Multi-import dialog to token-manager
...
- add token information
- add "Delete token" button
2010-03-14 09:34:25 +01:00
Christian Hohnstaedt
cceec6a700
improve PKCS#11 lib loading for Windows
2010-03-12 08:17:25 +01:00
Christian Hohnstaedt
f1c528fcc9
update copyright information
2010-03-11 07:13:48 +01:00
Christian Hohnstaedt
c6c5b2e696
fix login to work with protected authentication path
2010-03-10 07:13:09 +01:00
Christian Hohnstaedt
4eba4c01c9
add thread during token-keygeneration
...
- set cursor to "wait" durng p11->C_... calls
2010-03-02 21:55:41 +01:00
Christian Hohnstaedt
7e90bd80f9
add new Menu item: Token
...
- manage PINs and tokens via this menu
- update documentation
2010-03-02 08:23:25 +01:00
Christian Hohnstaedt
8b842925bc
improve PIN changing dialogs
...
- use token.label to identify the slot
- show min and max PIN lengths when changing USER and SO PIN
- sanitize token strings like label
- pad token strings correctly with ' ' 0x20
- reenable "Init Security token"
2010-02-28 15:07:25 +01:00
Christian Hohnstaedt
825fea569d
improve token handling
...
- add tokenInfo.model to the card information, revamp tokenInfo
- add driverInfo()
- use token_info.label (card_label) as token descriptor for reading passwords
- use only CKA_LABEL as internal name
2010-02-28 10:31:53 +01:00
Christian Hohnstaedt
59f99fb33c
allow certificates to be written to any token
...
- consolidate token-select dialog
- update changelog
2010-02-24 21:04:52 +01:00
Christian Hohnstaedt
2b38e53cc3
add CKA_ID to stored certificates
...
- extend ID from 4 to 8 bytes
- remove some debugging code
- enable and test PIN and PUK changing
2010-02-24 00:51:40 +01:00
Christian Hohnstaedt
345cdc1083
improve messages and usability
...
- update german translation
2010-02-21 16:24:00 +01:00
Christian Hohnstaedt
3b600c1c6b
improve token handling
...
- support Token initializing
- support deleting any certificates from tokens
- fix prepare_card API
- replace HTML entities when generating HTML ouput
2010-02-17 07:20:18 +01:00
Christian Hohnstaedt
d362a9c51e
add new Token-features
...
- replace occurances of "Smart Card" by "Token"
- Support for creating keys on a token
- Store existing keys on a token
- delete keys and certs from a token
- update docs
2010-02-17 07:20:18 +01:00
Christian Hohnstaedt
fe8c2c2660
improve filename handling for databases
...
- allow "umlauts" and other non ASCII char in database filenames
using the OS dependent handling QString2filename, using
8Bit codepage encoding on Windows and UTF8 on linux and OS X
2009-11-25 09:06:22 +01:00
Christian Hohnstaedt
9182afd71c
support storing Certificates on the Smart-card
2009-11-15 19:40:55 +01:00
Christian Hohnstaedt
e61e58d917
improve and harden mechanism handling
2009-11-13 18:06:31 +01:00
Christian Hohnstaedt
0aced7f2c4
improve Smart-card handling
...
- if PublicKey or Cert CKA_LABEL fails, try CKA_SUBJECT
- don't use CKA_VALUE attribute on PUBLIC_KEY,
because not everyone supports it.
While being at it, add code for DSA and EC Cards.
- load PKCS#11 engine only after database open.
- avoid reloading the DLL on windows, because it is not supported.
Windows users need to restart XCA after changing the PKCS#11 path
- fix getSlotList() and return a QList<unsigned long>
2009-11-11 22:58:34 +01:00