Commit Graph

58 Commits

Author SHA1 Message Date
Christian Hohnstaedt
806312800d Thales nCipher key generation changes for EC and DSA keys
Developed and tested by
 Mak, Mcken <Mcken.Mak@thalesesec.com>

Thanks!
2016-01-16 07:54:54 +01:00
Christian Hohnstaedt
e5541c6d67 SF. Bug. #81 Make xca qt5 compatible
Extend XCA to also compile against Qt5
Remove directory from Qt includes
2015-09-17 18:42:42 +02:00
Christian Hohnstaedt
d55eb917e2 Silence compiler warnings about unused parameters 2015-08-11 07:17:56 +02:00
Christian Hohnstaedt
854d0dbde5 Minor fixes, remove debugging output 2015-05-18 17:51:20 +02:00
Christian Hohnstaedt
2909e79317 Move entropy functions into new class
Read and write .rnd file during start and exit
2015-04-08 06:54:55 +02:00
Christian Hohnstaedt
1138dad902 SF Bug #102 Weak entropy source used for key generation
On startup use "/dev/random" and "/dev/hwrng"
as additional entropy for the OpenSSL random pool.

Collect mouse position and key press time entropy
for seeding the openssl random pool before generating keys.

When using Smartcards, use the Smartcard RNG
as additional entropy source.
2015-04-06 14:19:10 +02:00
Christian Hohnstaedt
277b25af62 Check for crashes in PKCS#11 library and inform the user 2015-02-22 17:00:06 +01:00
Christian Hohnstaedt
c8e517912a Refine PKCS#11 ECC named curve workaround for www.CardContact.de 2014-11-22 11:50:37 +01:00
Christian Hohnstaedt
7b4ea0c130 Fix DSA token signing 2014-11-13 20:10:18 +01:00
Christian Hohnstaedt
b9dd27a915 Fix EC token key generation 2014-11-13 20:10:18 +01:00
Christian Hohnstaedt
9321c92f3e DSA add Token keygen for DSA and start DSA token signing 2014-11-12 22:19:43 +01:00
Christian Hohnstaedt
2512a22aa7 Load and store DSA keys on a token 2014-11-12 22:19:43 +01:00
Christian Hohnstaedt
6927dc1b0c Fix signed/unsigned warning 2014-11-05 06:57:46 +01:00
Christian Hohnstaedt
65debf1e60 Fix my ENGINEs memory and reference handling
and remove some unused things
2014-11-01 10:02:57 +01:00
Christian Hohnstaedt
fed1a9584a Remove debugging code 2014-10-31 07:21:11 +01:00
Christian Hohnstaedt
8ed9bab7df Support EC key generation on PKCS#11 token
move EC builtin sources into extra class and file
2014-10-31 00:23:39 +01:00
Christian Hohnstaedt
ad93cebf5c PKCS#11: Make EC and RSA signatures work with ENGINE WIP 2014-10-31 00:17:19 +01:00
Christian Hohnstaedt
9710a78592 First preparation of version 1.0.0
update changelog and documentation
avoid warnings about unused variables
2014-04-11 19:29:46 +02:00
Christian Hohnstaedt
8168ca5181 QMessageBox: protect against HTML parsing
The default message box displays the message as HTML
Don't do that.

Thanks to Artur Czyz (artur_czyz at wp.pl) for finding it.
2014-04-11 19:29:45 +02:00
Christian Hohnstaedt
38ed0b60b5 Update Copyright dates 2012-05-06 11:16:44 +02:00
Christian Hohnstaedt
cb128e675b improve stoken selection dialog 2011-07-16 10:18:16 +02:00
Christian Hohnstaedt
1a3a417bb6 cleanup after closing a db and reset settings before opening it
Since OpenSC is not part of XCA anymore, set the default
PKCS#11 lib on windows to C:\WINDOWS\system32\opensc-pkcs11.dll

Also disable Token menu after closing a database.
2011-07-15 07:18:18 +02:00
Christian Hohnstaedt
a710c1751f mark public keys and certificates explicit as public 2011-04-30 17:42:56 +02:00
Christian Hohnstaedt
b622e64209 consolidate Password and Pin input dialogs
change storage type of passwords from char[] to QByteArray
Create PwDialog class and drop passWrite and passRead
Create Passwd class derived from QBytearray
move PKCS12 password input to PwDialog
2011-04-30 07:53:26 +02:00
Christian Hohnstaedt
b59ecd1410 add extra checks for pkcs#11 lib
lt_dlopen() asserts the filename, so assure
valid content
add validity checks when using the session p11slot
2010-10-30 08:05:21 +02:00
Christian Hohnstaedt
9eaad7020a Fix PKCS#11 library handling
In case of an empty PKCS#11 library list, the default was
selected again.
Now the list remains empty and the Token menu stays disabled.
2010-09-01 18:40:43 +02:00
Christian Hohnstaedt
05d347743f Show message box when Pin entry via Pinpad is necessary 2010-08-28 16:52:58 +02:00
Christian Hohnstaedt
23ad77b6f0 Support multiple PKCS#11 provider 2010-08-11 23:12:48 +02:00
Christian Hohnstaedt
d34cc82e1f avoid the need of pkcs11 engine
the sole use of the engine was signing.
But on the other hand it had to be compiled for all platforms
and it prevented the use of multiple PKCS#11 libs.
2010-08-10 21:58:51 +02:00
Christian Hohnstaedt
f572eb3898 Messageboxes use the Buttongroup
The buttongroup behaves as expected on different Environments

update translation
2010-08-06 19:08:14 +02:00
Christian Hohnstaedt
de851ed3a9 Changed all header includes to QT4 names and included the correct component name
By Andreas Piesk. Thanks!

adapt to HEAD since the patch is based on 0.6.4

drop qt4/Qt include in list of includes during configuration
2010-06-13 11:49:38 +02:00
Christian Hohnstaedt
23eb4ef7cd create unique attlist from pki 2010-04-01 19:36:32 +02:00
Christian Hohnstaedt
abbf284e53 ask whether to store new certs with token-key to the key on the token 2010-03-14 09:34:25 +01:00
Christian Hohnstaedt
1102308dfc extend Multi-import dialog to token-manager
- add token information
 - add "Delete token" button
2010-03-14 09:34:25 +01:00
Christian Hohnstaedt
cceec6a700 improve PKCS#11 lib loading for Windows 2010-03-12 08:17:25 +01:00
Christian Hohnstaedt
f1c528fcc9 update copyright information 2010-03-11 07:13:48 +01:00
Christian Hohnstaedt
c6c5b2e696 fix login to work with protected authentication path 2010-03-10 07:13:09 +01:00
Christian Hohnstaedt
4eba4c01c9 add thread during token-keygeneration
- set cursor to "wait" durng p11->C_... calls
2010-03-02 21:55:41 +01:00
Christian Hohnstaedt
7e90bd80f9 add new Menu item: Token
- manage PINs and tokens via this menu
 - update documentation
2010-03-02 08:23:25 +01:00
Christian Hohnstaedt
8b842925bc improve PIN changing dialogs
- use token.label to identify the slot
 - show min and max PIN lengths when changing USER and SO PIN

 - sanitize token strings like label
 - pad token strings correctly with ' ' 0x20
 - reenable "Init Security token"
2010-02-28 15:07:25 +01:00
Christian Hohnstaedt
825fea569d improve token handling
- add tokenInfo.model to the card information, revamp tokenInfo
 - add driverInfo()
 - use token_info.label (card_label) as token descriptor for reading passwords
 - use only CKA_LABEL as internal name
2010-02-28 10:31:53 +01:00
Christian Hohnstaedt
59f99fb33c allow certificates to be written to any token
- consolidate token-select dialog

 - update changelog
2010-02-24 21:04:52 +01:00
Christian Hohnstaedt
2b38e53cc3 add CKA_ID to stored certificates
- extend ID from 4 to 8 bytes
 - remove some debugging code
 - enable and test PIN and PUK changing
2010-02-24 00:51:40 +01:00
Christian Hohnstaedt
345cdc1083 improve messages and usability
- update german translation
2010-02-21 16:24:00 +01:00
Christian Hohnstaedt
3b600c1c6b improve token handling
- support Token initializing
 - support deleting any certificates from tokens
 - fix prepare_card API
 - replace HTML entities when generating HTML ouput
2010-02-17 07:20:18 +01:00
Christian Hohnstaedt
d362a9c51e add new Token-features
- replace occurances of "Smart Card" by "Token"
 - Support for creating keys on a token
 - Store existing keys on a token
 - delete keys and certs from a token
 - update docs
2010-02-17 07:20:18 +01:00
Christian Hohnstaedt
fe8c2c2660 improve filename handling for databases
- allow "umlauts" and other non ASCII char in database filenames
   using the OS dependent handling QString2filename, using
   8Bit codepage encoding on Windows and UTF8 on linux and OS X
2009-11-25 09:06:22 +01:00
Christian Hohnstaedt
9182afd71c support storing Certificates on the Smart-card 2009-11-15 19:40:55 +01:00
Christian Hohnstaedt
e61e58d917 improve and harden mechanism handling 2009-11-13 18:06:31 +01:00
Christian Hohnstaedt
0aced7f2c4 improve Smart-card handling
- if PublicKey or Cert CKA_LABEL fails, try CKA_SUBJECT
 - don't use CKA_VALUE attribute on PUBLIC_KEY,
   because not everyone supports it.
   While being at it, add code for DSA and EC Cards.
 - load PKCS#11 engine only after database open.
 - avoid reloading the DLL on windows, because it is not supported.
   Windows users need to restart XCA after changing the PKCS#11 path
 - fix getSlotList() and return a QList<unsigned long>
2009-11-11 22:58:34 +01:00