1
0
mirror of https://github.com/opencryptoki/opencryptoki.git synced 2026-10-25 17:39:16 +03:00

Commit Graph

  • 8308d008c8 EP11: DH: Add CKA_VALUE_BITS after C_CreateObject and C_UnwrapKey Ingo Franzki 2022-01-31 17:11:12 +01:00
  • b08b0ba91b COMMON: DH: Do not create default CKA_VALUE_BITS for import and unwrap Ingo Franzki 2022-01-31 16:51:59 +01:00
  • 598934934f EP11: Filter out attributes that are not applicable for key type Ingo Franzki 2022-01-31 15:36:19 +01:00
  • e1a8131394 TESTCASE: Do not pass invalid attributes in unwrap template Ingo Franzki 2022-01-31 15:32:43 +01:00
  • 31422adb07 EP11: Trace EP11 blob attributes on Keygen, Unwrap, Derive Ingo Franzki 2022-01-28 15:22:34 +01:00
  • 44edc53d13 COMMON: Update attributes in p11_get_cka() Ingo Franzki 2022-01-28 15:20:50 +01:00
  • 35fb096393 ICSF: replace PBKDF implementation by libcrypto call Ingo Franzki 2022-01-20 17:25:03 +01:00
  • 08eaca0238 Change /var/run to /run/opencryptoki for pid file and sockets Ingo Franzki 2022-01-20 11:43:25 +01:00
  • 86cda35eec p11sak: User friendly error when mechanism or key size is not supported Ingo Franzki 2022-01-21 10:28:01 +01:00
  • 2e889507d0 p11sak: User friendly error in case of policy rejections Ingo Franzki 2022-01-20 15:31:24 +01:00
  • f041a59006 P11SAK: different attr sets for pub and prv key FinnCallies 2022-01-18 15:15:27 +01:00
  • cf0b855ae1 ICA: Check fur successful pthread_mutex_lock() Ingo Franzki 2022-01-14 15:20:54 +01:00
  • 16007527c5 P11SAK: CKA_PRIVATE now set by OCK FinnCallies 2022-01-13 11:44:05 +01:00
  • 05ead3dc0e MAN: Update security note in opencryptoki man page Ingo Franzki 2022-01-03 10:56:25 +01:00
  • 521d24f9b5 P11SAK: Rename existing routine Joerg Schmidbauer 2021-12-14 13:02:35 +01:00
  • 0b40349bf4 P11SAK: handle case where config file is not available Joerg Schmidbauer 2021-12-14 10:33:21 +01:00
  • 8e9800b492 ICA/EP11: Support libica version 4 Ingo Franzki 2021-12-07 16:39:28 +01:00
  • be0f49bc36 COMMON: Add trace message for CKA_PUBLIC_KEY_INFO in private key Ingo Franzki 2021-12-07 16:31:30 +01:00
  • cab3b29fc7 Statistics: Add support for producing machine readable JSON output Ingo Franzki 2021-11-15 16:17:55 +01:00
  • 49dd9cd89c Statistics: Collect statistics for CI runs Ingo Franzki 2021-10-26 16:12:18 +02:00
  • c12656dd65 pkcsstats: New tool to display mechanism usage statistics Ingo Franzki 2021-10-12 17:24:33 +02:00
  • 7d47d3654b Statistics: Allow to enable or disable collection in opencryptoki.conf Ingo Franzki 2021-10-18 17:16:47 +02:00
  • 37b725771e Statistics: Count internal crypto operations Ingo Franzki 2021-10-15 14:49:56 +02:00
  • 42b3e8b88e Statistics: Add implicit mechanism counting Ingo Franzki 2021-10-15 11:02:58 +02:00
  • de164f895f Statistics: Add statistics support Ingo Franzki 2021-10-04 15:38:06 +02:00
  • 3fea29baa9 API: Unlock GlobMutex if user and group check fails Ingo Franzki 2021-11-18 10:15:53 +01:00
  • b5cd51e137 TESTCASE: tok2tok_transport: Enhance error handling Ingo Franzki 2021-11-17 17:04:16 +01:00
  • d847dcdcec icsf: use generic config parser Ingo Franzki 2021-11-05 14:17:47 +01:00
  • 1f0497b779 pkcsicsf: use generic config parser Ingo Franzki 2021-11-05 10:59:52 +01:00
  • 6147f160fc pkcsslotd: Check for opencryptoki.conf file permissions Ingo Franzki 2021-11-04 10:40:26 +01:00
  • 192bd514a2 common: remove old config file parser Ingo Franzki 2021-10-01 17:00:50 +02:00
  • 7200d7411c pkcstok_migrate: Use new generic config file parser Ingo Franzki 2021-10-01 15:52:45 +02:00
  • 3f8f232a47 pkcsslotd: Use new generic config file parser Ingo Franzki 2021-10-01 13:30:08 +02:00
  • c06ffa0ef6 Makefile: Fix make files for building the config parser Ingo Franzki 2021-11-08 14:47:31 +01:00
  • 683bb11a66 API: Add CKM_IBM_ED25519_SHA512 to policy Juergen Christ 2021-11-09 14:40:31 +01:00
  • b80631dff0 CONFIG: Add some unit tests Juergen Christ 2021-11-08 15:13:48 +01:00
  • a808caf1ac CONFIG: Fix dump output of bare list Juergen Christ 2021-11-08 15:13:15 +01:00
  • a67dfb1949 EP11: Fix DSA private key template on generate Juergen Christ 2021-11-03 11:44:14 +01:00
  • a163664c62 testcases: Skip tests in case of policy rejections Ingo Franzki 2021-10-27 13:08:21 +02:00
  • 3ae7a6def2 COMMON: Fix derived key if CKA_VALUE_LEN is not in template Juergen Christ 2021-10-29 11:11:20 +02:00
  • 5ffdbc19b8 COMMON: Fix creation of CKA_VALUE_LEN on C_CreateObject Juergen Christ 2021-10-27 11:03:11 +02:00
  • 49ddce061f Fix for SSL3 and AES keys Juergen Christ 2021-10-14 12:38:16 +02:00
  • 3b0a198aa9 Exploit mechanism table Juergen Christ 2021-10-13 17:39:53 +02:00
  • 3a05fa8079 Install default strength configuration Juergen Christ 2021-10-12 11:02:59 +02:00
  • c233e5b842 TEST: Policy, hashmap, and mechtable tests Juergen Christ 2021-09-23 16:48:19 +02:00
  • 3db637164b DOC: Added small development documentation Juergen Christ 2021-09-10 14:27:19 +02:00
  • 8df74e7c8d Implement and enforce policies Juergen Christ 2021-10-12 11:36:28 +02:00
  • 1026d2a244 API: Add hashmap Juergen Christ 2021-09-10 14:15:49 +02:00
  • c677418be6 COMMON: String translations Juergen Christ 2021-10-12 11:04:24 +02:00
  • 6fd188cefb DOC: Add example policy and strength configurations Juergen Christ 2021-09-10 13:57:54 +02:00
  • c96f608763 API: Add Mechanism table Juergen Christ 2021-10-12 11:26:47 +02:00
  • eb1aaa5bf1 MAN: Add config manpages Juergen Christ 2021-09-10 14:09:11 +02:00
  • d3a637026a INCLUDE: Introduce new constants Juergen Christ 2021-09-10 13:56:09 +02:00
  • 7b6a35c65a PKCSSLOTD: Update tokversion in example config Juergen Christ 2021-09-10 13:51:42 +02:00
  • 56c55d2c76 COMMON: Split utility and ec files. Juergen Christ 2021-09-10 11:53:13 +02:00
  • 275f5e55eb COMMON: Always use object_mgr_create_final Juergen Christ 2021-07-30 18:42:05 +02:00
  • 945a46aecd EP11: Add support for CKM_GENERIC_SECRET_KEY_GEN Ingo Franzki 2021-11-03 14:37:02 +01:00
  • 72c65e0b61 List all configured slots with C_GetSlotList and 'pkcsconf -t' Ingo Franzki 2021-10-12 13:31:38 +02:00
  • b80f3f2c07 pkcsslotd: Remove unused code Ingo Franzki 2021-10-04 11:51:14 +02:00
  • 8ab1059bd2 Bumping up to version-3.17.0 v3.17.0 Patrick Steuer 2021-10-08 11:04:55 +02:00
  • bea3f2d799 EP11: Don't set tokdata->initialized to true too early Ingo Franzki 2021-10-11 17:13:16 +02:00
  • 3d4c60622e pkcsep11_session: Fix typo in man page Ingo Franzki 2021-10-11 11:45:56 +02:00
  • a7141b70f5 ICA: Fix detection of SHA3 mechanism availability Ingo Franzki 2021-10-11 10:21:22 +02:00
  • 36f15b3676 API: Unload legacy provider in case of error during C_Initialize Ingo Franzki 2021-10-08 11:22:25 +02:00
  • a6e88ce934 TESTCASES: p11sak_test.sh: Minor typo in message Ingo Franzki 2021-10-08 11:00:59 +02:00
  • b0377e97d4 Fix a typo in trace log Takanari Hayama 2021-10-12 13:55:52 +09:00
  • aa878a9602 ICSF: Fix debug code in SC_GetAttributeValue Juergen Christ 2021-10-08 12:04:45 +02:00
  • a81a6f063d EP11: Fix debug code in SC_GetAttributeValue Juergen Christ 2021-10-08 12:03:29 +02:00
  • 7c9e52d9cb COMMON: Fix debug code in SC_GetAttributeValue Juergen Christ 2021-10-08 12:02:02 +02:00
  • 7d19749187 API: Clear TokData to prevent double free Juergen Christ 2021-10-08 10:09:34 +02:00
  • 0cdf2800d5 EP11: Fix compile error Juergen Christ 2021-10-08 09:44:34 +02:00
  • fa3f5923fb EP11: Use APQN_ALLOWLIST. Juergen Christ 2021-10-07 15:41:22 +02:00
  • 46c13806cf EP11: Don't expose CKM_IBM_CPACF_WRAP Juergen Christ 2021-10-07 15:39:23 +02:00
  • b985dc0533 ICSF: Fix comparisons in pkcsicsf Juergen Christ 2021-10-07 16:34:19 +02:00
  • 2627c52020 COMMON: Fix bug introduced during load/unload refactoring Juergen Christ 2021-10-07 15:01:15 +02:00
  • 530f239cfa EP11: Fix also memory leak in non-size mech queries. Juergen Christ 2021-10-07 13:34:52 +02:00
  • 9aaa696439 EP11: Fix potential memory leak in ep11tok_get_mechanism_list Juergen Christ 2021-10-07 12:34:12 +02:00
  • c9e0f49501 COMMON: Avoid double free of digest context Ingo Franzki 2021-10-05 15:01:35 +02:00
  • 3dc5127272 SOFT: Enable single-DES when compiled with OpenSSL 3.0 Ingo Franzki 2021-10-05 13:36:18 +02:00
  • 325bac511c API: OpenSSL 3.0: Also load the legacy provider to support DES Ingo Franzki 2021-10-05 13:13:36 +02:00
  • 881385f638 ICA: Return CKR_KEY_SIZE_RANGE if RSA key size is not supported Ingo Franzki 2021-10-04 09:54:47 +02:00
  • 4c2b1609a8 TESTCASE: AES wrap tests: Use supported RSA key size Ingo Franzki 2021-10-01 14:38:52 +02:00
  • ac481efc96 ICA: Adjust min/max key sizes for RSA mechanisms according to libica's support Ingo Franzki 2021-10-01 14:25:48 +02:00
  • fbf819dc32 CONFIG: Fix makefile Juergen Christ 2021-09-09 10:14:54 +02:00
  • a961915a83 CONFIG: Bugfix Juergen Christ 2021-09-09 09:57:08 +02:00
  • e030240aee Config: Bugfix for version masks Juergen Christ 2021-10-01 16:19:17 +02:00
  • aa9e1e078a Config: Add bare word constants Juergen Christ 2021-10-01 14:39:52 +02:00
  • 83114b0133 Rework part of token initialization Juergen Christ 2021-10-06 09:59:35 +02:00
  • 0c5493e135 pkcsep11_session: Display max and available EP11 sessions per APQN Ingo Franzki 2021-09-29 10:29:40 +02:00
  • 8af1897503 [P11SAK] test automation FinnCallies 2021-09-21 11:58:23 +02:00
  • b6ce752313 [P11SAK] redirected errors to stderr FinnCallies 2021-09-27 13:07:55 +02:00
  • b2a4406550 [P11SAK] adding all option for list-key FinnCallies 2021-09-21 11:58:23 +02:00
  • fa90ebfdb4 [P11SAK] std attr value set by OCK (issue fix 425) FinnCallies 2021-09-21 11:58:23 +02:00
  • 7ce0556adb [P11SAK] output extension + manpage + config file FinnCallies 2021-09-21 11:58:23 +02:00
  • 0704c93b09 [P11SAK] output bug fixes + format changes FinnCallies 2021-09-21 11:58:23 +02:00
  • cc3296b7cc textual changes only FinnCallies 2021-09-20 15:28:07 +02:00
  • 7036daecef pkcstok_migrate: Better preserve comments during config file migration Ingo Franzki 2021-09-29 14:21:55 +02:00
  • 1d0f493f60 pkcstok_migrate: Check if backup folder/files exist already and fail early Ingo Franzki 2021-09-29 13:47:44 +02:00
  • 70614e7efd pkcstok_migrate: Don't show error if SHM is not existent Ingo Franzki 2021-09-29 13:30:30 +02:00
  • f283837c41 pkcstok_migrate: Also migrate an empty token data store Ingo Franzki 2021-09-29 13:27:08 +02:00