 David Howells
|
a511e1af8b
KEYS: Move the point of trust determination to __key_link()
|
%!s(int64=9) %!d(string=hai) anos |
|
David Howells
|
cfb664ff2b
X.509: Move the trust validation code out to its own file
|
%!s(int64=9) %!d(string=hai) anos |
|
David Howells
|
bda850cd21
PKCS#7: Make trust determination dependent on contents of trust keyring
|
%!s(int64=9) %!d(string=hai) anos |
|
David Howells
|
6c2dc5ae4a
X.509: Extract signature digest and make self-signed cert checks earlier
|
%!s(int64=9) %!d(string=hai) anos |
|
David Howells
|
77d0910d15
X.509: Retain the key verification data
|
%!s(int64=9) %!d(string=hai) anos |
|
David Howells
|
146aa8b145
KEYS: Merge the type-specific data with the payload data
|
%!s(int64=9) %!d(string=hai) anos |
|
David Howells
|
fd19a3d195
PKCS#7: Improve and export the X.509 ASN.1 time object decoder
|
%!s(int64=10) %!d(string=hai) anos |
|
David Howells
|
b92e6570a9
X.509: Extract both parts of the AuthorityKeyIdentifier
|
%!s(int64=10) %!d(string=hai) anos |
 Dmitry Kasatkin
|
8dd609805b
KEYS: use swapped SKID for performing partial matching
|
%!s(int64=11) %!d(string=hai) anos |
|
David Howells
|
dd2f6c4481
X.509: If available, use the raw subjKeyId to form the key description
|
%!s(int64=11) %!d(string=hai) anos |
|
David Howells
|
4155942000
PKCS#7: Better handling of unsupported crypto
|
%!s(int64=11) %!d(string=hai) anos |
|
David Howells
|
46963b774d
KEYS: Overhaul key identification when searching for asymmetric keys
|
%!s(int64=11) %!d(string=hai) anos |
|
David Howells
|
84aabd46bf
X.509: Add bits needed for PKCS#7
|
%!s(int64=11) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
c7c8bb237f
ima: provide support for arbitrary hash algorithms
|
%!s(int64=12) %!d(string=hai) anos |
|
Dmitry Kasatkin
|
3fe78ca2fb
keys: change asymmetric keys to use common hash definitions
|
%!s(int64=12) %!d(string=hai) anos |
|
David Howells
|
b426beb6ee
X.509: Embed public_key_signature struct and create filler function
|
%!s(int64=12) %!d(string=hai) anos |
|
David Howells
|
57be4a784b
X.509: struct x509_certificate needs struct tm declaring
|
%!s(int64=12) %!d(string=hai) anos |
|
David Howells
|
67f7d60b3a
KEYS: Store public key algo ID in public_key struct
|
%!s(int64=12) %!d(string=hai) anos |
|
David Howells
|
a5752d11b3
MODSIGN: Fix 32-bit overflow in X.509 certificate validity date checking
|
%!s(int64=13) %!d(string=hai) anos |
|
David Howells
|
c26fd69fa0
X.509: Add a crypto key parser for binary (DER) X.509 certificates
|
%!s(int64=13) %!d(string=hai) anos |
