Commit Graph

Select branches

Hide Pull Requests

2.4.3.1

3.1pre_branch

IBM

RHEL5

SABPerformance

cleanup

fedora-extras-fc5

log-refactor

master

opencryptoki-next

pre-build-overhaul

v2.4

v2.4.1

v2_11-restructure

v3.10

v3.5.1

v3.8

v3.9

#100

#101

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#117

#118

#119

#120

#121

#122

#123

#124

#125

#126

#127

#127

#128

#129

#129

#130

#131

#133

#134

#135

#136

#137

#138

#139

#140

#141

#142

#148

#149

#150

#151

#152

#154

#155

#156

#157

#158

#159

#160

#161

#162

#164

#165

#167

#168

#169

#170

#172

#173

#175

#176

#178

#179

#180

#181

#182

#183

#184

#185

#187

#188

#192

#193

#194

#195

#196

#197

#198

#199

#200

#201

#203

#204

#206

#207

#208

#209

#210

#212

#213

#214

#215

#216

#217

#221

#222

#223

#224

#225

#226

#227

#231

#232

#233

#235

#236

#237

#238

#239

#240

#241

#244

#245

#246

#247

#248

#249

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#270

#272

#273

#274

#275

#276

#277

#278

#279

#281

#283

#284

#286

#288

#289

#290

#291

#292

#294

#295

#296

#297

#300

#301

#302

#303

#305

#306

#307

#308

#309

#310

#313

#314

#315

#316

#318

#320

#323

#324

#325

#326

#327

#328

#329

#332

#334

#335

#336

#338

#342

#343

#345

#346

#347

#348

#349

#350

#351

#352

#354

#355

#356

#359

#360

#361

#362

#363

#364

#365

#366

#367

#369

#371

#372

#373

#374

#375

#376

#377

#378

#379

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#390

#391

#392

#394

#396

#398

#399

#400

#402

#403

#405

#406

#407

#408

#409

#410

#411

#412

#413

#414

#416

#417

#418

#419

#421

#426

#427

#428

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#44

#440

#442

#443

#444

#446

#447

#448

#449

#45

#450

#453

#456

#457

#458

#459

#46

#461

#462

#463

#464

#466

#468

#47

#470

#471

#472

#473

#474

#475

#476

#477

#478

#479

#48

#482

#483

#484

#487

#488

#489

#49

#490

#491

#492

#494

#496

#499

#50

#503

#504

#505

#506

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#528

#529

#53

#53

#530

#531

#532

#533

#535

#536

#537

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#563

#564

#565

#566

#567

#568

#569

#570

#571

#572

#575

#576

#58

#580

#581

#582

#583

#584

#585

#587

#588

#589

#59

#59

#590

#591

#592

#593

#594

#595

#597

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#626

#627

#628

#629

#63

#630

#631

#632

#633

#637

#638

#639

#64

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#667

#668

#669

#67

#670

#672

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#695

#696

#698

#699

#70

#700

#701

#702

#704

#705

#706

#707

#708

#709

#71

#710

#711

#712

#713

#714

#715

#716

#717

#718

#719

#72

#72

#720

#721

#722

#724

#725

#726

#727

#728

#729

#73

#730

#732

#733

#734

#735

#736

#737

#738

#739

#74

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#76

#76

#760

#761

#763

#766

#767

#768

#77

#771

#772

#774

#775

#776

#777

#778

#78

#780

#781

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#80

#800

#801

#802

#803

#804

#805

#806

#807

#808

#81

#810

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#849

#85

#850

#851

#852

#853

#854

#855

#856

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#878

#88

#880

#882

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#898

#899

#90

#90

#900

#901

#902

#903

#904

#906

#907

#908

#909

#91

#91

#910

#911

#912

#913

#914

#915

#916

#917

#919

#92

#920

#921

#922

#923

#924

#925

#926

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#956

#957

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#975

#976

#976

#977

#978

#979

#98

#980

#981

#982

#984

#985

#986

#99

v2.3.2

v2.3.3

v2.4.2

v2.4.3

v2.4.3.1

v3.0

v3.1

v3.10.0

v3.11.0

v3.11.1

v3.12.0

v3.12.1

v3.13.0

v3.14.0

v3.15.0

v3.15.1

v3.16.0

v3.17.0

v3.18.0

v3.19.0

v3.2

v3.20.0

v3.21.0

v3.22.0

v3.23.0

v3.24.0

v3.25.0

v3.26.0

v3.27.0

v3.3

v3.4

v3.4.1

v3.5

v3.6

v3.6.1

v3.6.2

v3.7.0

v3.8.0

v3.8.1

v3.8.2

v3.9.0

Mono Color

• 99d778b3fa icsf: add support for key wrapping Marcelo Cerri 2013-03-13 14:50:31 -03:00
• 366a0ffab4 token-specific functions for key wrapping Add the new token-specific functions t_wrap_key and t_unwrap_key. Marcelo Cerri 2013-03-13 13:46:10 -03:00
• feb07e2217 new_host.c: fix indentation for SC_WrapKey() and SC_UnwrapKey() Marcelo Cerri 2013-03-13 13:21:47 -03:00
• f8b9560f42 icsf: add functions to wrap and unwrap keys Marcelo Cerri 2013-03-12 17:45:45 -03:00
• a14b43f4ff fix: add missing checks in icsf.c Marcelo Cerri 2013-03-12 17:45:22 -03:00
• 2e58fc9a02 fix: remove unused variables Marcelo Cerri 2013-03-12 17:44:58 -03:00
• a46a26865a icsf: add support for simple PK signing This change adda support for signing using one of the following mechanisms: CKM_RSA_X_509, CKM_RSA_PKCS Marcelo Cerri 2013-03-11 13:50:41 -03:00
• 994f356dfb icsf: remove mechanisms related to hashed PK signing These mechanisms will be supported when CSFPOWH is implemented. Marcelo Cerri 2013-03-11 13:47:44 -03:00
• d18116aac7 Remove MD2. Joy Latten 2013-03-10 23:47:59 -05:00
• 005d5fea36 Cleanup if error in ICSF's token specific sign_init and verify_init. Joy Latten 2013-03-10 23:45:41 -05:00
• 1a730a222f Add HMAC Multipart testcase. Joy Latten 2013-03-10 23:43:10 -05:00
• 0bc26b3933 Add token specific ICSF sign and verify. Joy Latten 2013-03-10 23:25:54 -05:00
• c0f9831467 Add token specific sign and verify to ock. Joy Latten 2013-03-10 23:22:21 -05:00
• f928d8a210 Allocate data for chain_data in an array. Joy Latten 2013-03-10 23:16:50 -05:00
• ac02c607b5 Add hmac sign and verify in icsf layer. Joy Latten 2013-03-10 23:11:17 -05:00
• 3111fc30a6 Remove unsupported hash algorithms Currently we dont support some of the hash algos. Add them back in when support is added. Joy Latten 2013-03-10 22:56:54 -05:00
• 6979d34e59 This fixes a lock not being released. Sometimes, for example for local hashing, user does not have to log in, thus there won't be an ldap descriptor. So in close_session() icsf_logout would fail. Thus in token_specific_close_session would fail to release the sess_list_mutex lock. A new call to openSession would hang since it was waiting on this lock Joy Latten 2013-03-10 22:50:30 -05:00
• 1f7d18d935 fix: use long int instead of int for numeric attributes Marcelo Cerri 2013-03-08 12:08:27 -03:00
• aa5ffa8460 testcase: adding copyobjects Eduardo Otubo 2013-03-07 15:59:37 -03:00
• 331cb313fd icsf: adding t_copy_object Eduardo Otubo 2013-02-20 10:22:35 -03:00
• cef4a6a97f icsf: pass return code to icsf_to_ock_err() Marcelo Cerri 2013-03-08 16:03:09 -03:00
• 82df06991e icsf: add support for asymmetric encryption Marcelo Cerri 2013-03-07 12:00:10 -03:00
• a51e4af7af icsf: add support for sign/verify/encrypt/decrypt with asymmetric keys Marcelo Cerri 2013-02-25 14:27:03 -03:00
• 1ff854d0e3 icsf: add token-specific function to generate key pairs Marcelo Cerri 2013-02-22 13:23:55 -03:00
• 448ff87e44 token-specific function for key pair generation Add a new token-specific function t_generate_key_pair. Marcelo Cerri 2013-02-21 10:48:21 -03:00
• 9d65a272bd new_host.c: fix formatting in SC_GenerateKeyPair() Marcelo Cerri 2013-02-21 10:34:45 -03:00
• 3d063b266a icsf.c: add function to generate key pair Add the function icsf_generate_key_pair() that calls the ICSF service CSFPGKP. Marcelo Cerri 2013-02-21 10:02:45 -03:00
• f6ed08d8a1 fix: fix multi-part decryption and encryption Change multi-part decryption and encryption to always return all output data available. Marcelo Cerri 2013-02-26 12:34:06 -03:00
• d10d40bf4f common: add utility functions to handle attribute arrays Add the following functions: - free_attribute_array() - dup_attribute_array() - get_attribute_by_type() - add_to_attribute_array() Marcelo Cerri 2013-02-22 13:19:48 -03:00
• 785dc18894 Add a testcase for C_DestroyObjects Joy Latten 2013-02-25 12:48:20 -06:00
• 098c569b58 Add ock token specific t_destroy_object to icsf token. Joy Latten 2013-02-25 12:44:13 -06:00
• 34ddc70f6f Changed symmetric testcases to accept "-securekey" if using securekey token. This ensures only published test vectors are not run on secure key tokens. Before we were checking for securekey based on mode name, but this won't work for ICSF whose model name is not hardcoded or set by OCK. Joy Latten 2013-02-25 12:20:26 -06:00
• b059f55d82 the output length was an unusual looking number and not correct. It seems reading an int into an unsigned long does not work well with ber_scanf. Joy Latten 2013-02-25 12:01:29 -06:00
• 837d82097f get_mechanism_list corrections needed for ICSF token Debora V Babb 2013-02-25 10:20:58 -06:00
• b72bfdd51a icsf_specific.c: formatting fixes Replace spaces with tabs in indentation and break some long lines. Marcelo Cerri 2013-02-27 15:00:48 -03:00
• 5c01712285 icsf: use icsf_to_ock_err() This commit just uses the function icsf_to_ock_err() in a few remaining places. Marcelo Cerri 2013-02-27 14:55:28 -03:00
• 835f488205 Added icsf_to_ock_err function - If error occurs in a function that uses icsf_call, uses new function to convert the reason code to an ock error. - Replaced NULL with reason variable in some function calls - Made changes per design change and feedback comments - Corrected some OCK_LOG_DEBUG calls that failed to compile with debug enabled Debora V Babb 2013-02-26 07:35:39 -08:00
• 5c58e5259e icsf: add token-specific functions to de/encrypt data Add the token-specific functions related to the following PKCS#11 functions: Marcelo Cerri 2013-02-15 13:26:45 -02:00
• d1324c2a20 icsf: add function to get block sizes used by ICSF Marcelo Cerri 2013-02-15 13:25:43 -02:00
• 294654da2a icsf: update de/encryption functions to return the expected length Update icsf_secret_key_encrypt() and icsf_secret_key_decrypt() to return the expected length of the output buffer when it is NULL. Marcelo Cerri 2013-02-06 16:36:35 -02:00
• 85527ce9e7 new_host.c: fix formatting for decryption and encryption functions Marcelo Cerri 2013-02-04 14:00:58 -02:00
• 713b6de689 add token-specific functions for symmetric decryption and encryption Add 8 new token-specific functions to symmetric key encryption/decryption. Marcelo Cerri 2013-02-04 13:48:17 -02:00
• a0cd3eedf1 icsf: add functions for symmetric decryption and encryption Marcelo Cerri 2013-01-29 15:00:15 -02:00
• e1c72aa4fb Add a findobjects testcase. Joy Latten 2013-02-12 17:24:01 -06:00
• ce8459f832 icsf's init_token needs to purge the object btree and start anew. Joy Latten 2013-02-12 17:17:40 -06:00
• 22a7880b6d Clear out the memory for the map. Noticed when trying to compare icsf_object_records in findobject, there was often garbage so compare would fail. Joy Latten 2013-02-12 17:16:21 -06:00
• d71e8c12a4 Add t_find_objects_init to ock and ICSF token. Joy Latten 2013-02-12 17:15:13 -06:00
• fb9ac47add Add attributes to icsf_list() and icsf_list_objects(). Joy Latten 2013-02-12 17:02:52 -06:00
• 1d42e265f3 Move encoding of attributes before icsf_list so icsf_list can call it and not have to add a declaration. Joy Latten 2013-02-12 16:58:09 -06:00
• 49f823998c Removed rule_array since it is not needed when getting an attribute value. Joy Latten 2013-02-01 13:44:33 -06:00
• 05d4f65d5e Add a pkcs11 tescase to test get and set attribute values. Note: expand and add more tests later. Joy Latten 2013-02-01 13:39:48 -06:00
• 66ff0bbb17 Add token specific set attribute value to ock and icsf. Joy Latten 2013-02-01 13:24:42 -06:00
• dc3601653c Add set attribute value to the icsf layer. Joy Latten 2013-02-01 13:11:59 -06:00
• 6faca5d7fc Let calling program determine if it wants a sequence of a sequence when ber encoding attributes. Joy Latten 2013-02-01 13:09:38 -06:00
• ba3487fed6 Remove reference to session_object in icsf. Joy Latten 2013-02-01 13:06:19 -06:00
• 47761e045a Add token specific get attribute value call to ock and icsf. Joy Latten 2013-02-01 13:04:10 -06:00
• b1cf5953bf Add get attribute value (CSFPGAV) to the icsf layer. Joy Latten 2013-02-01 12:37:09 -06:00
• f9cc95069f Free context after decrypting and don't use obsoleted calls. Joy Latten 2013-02-01 12:35:06 -06:00
• c5fe69e11f icsf: global object handles across sessions This commit updates the ICSF object handle management code to use unique object handles across every session in an application. Marcelo Cerri 2013-01-31 13:56:15 -02:00
• df2415fa59 btree: fix for bt_destroy The value of freed nodes should not be freed by bt_destroy(), it points to the next node in the free_list and not to real data. Marcelo Cerri 2013-01-31 13:54:35 -02:00
• 18d1a2c8ac fix type of variable used as length for ber_printf In 64-bits systems, ber_printf expects a 64-bits unsigned integer as length when the option "o" is given. Marcelo Cerri 2013-01-24 13:04:32 -02:00
• 9db5b6af91 icsf: add t_close_session and t_final functions These functions are responsible for freeing data specific to ICSF sessions, destroying session objects and disconnecting from the remote host. Marcelo Cerri 2013-01-21 17:44:29 -02:00
• 1790e426bc add t_close_session function Update the token structures and SC_CloseSession to use the new token-specific function. Marcelo Cerri 2013-01-17 13:20:02 -02:00
• 951eb96eb2 icsf: add support for object creation This commit adds to ICSF token the token-specific function for object creation. Marcelo Cerri 2013-01-21 13:32:50 -02:00
• 4ff466d21a token-specific function for object creation Add a new token-specific function t_create_object. Marcelo Cerri 2013-01-21 13:24:30 -02:00
• e42d47ce4d fix formatting and indentation in SC_CreateObject(), in the file common/new_host.c Marcelo Cerri 2013-01-21 13:21:27 -02:00
• f6d77e6b59 icsf: add reason argument to functions in icsf.c Usually ICSF services return a return code and a reason code. This change updates the functions in the icsf.c file to use the ICSF return code as the function return code and adds and output argument for the reason code. Marcelo Cerri 2013-01-25 13:26:09 -02:00
• be088dcc97 icsf: fix wrong variable sid in destroy_objects Marcelo Cerri 2013-01-25 13:25:47 -02:00
• a444272faf icsf: use a RW lock for sessions Change the way the sessions list is protected, replacing the futex with a RW lock for that. Marcelo Cerri 2013-01-16 14:18:46 -02:00
• 8fb1fd2466 Change lock ICSF's t_login to protect shared memory Change the point where the futex is locked to cover any access to shared memory in token_specific_login. Marcelo Cerri 2013-01-16 13:30:04 -02:00
• f0ac30c0aa Indent with tabs instead of spaces in icsf_specific.c Marcelo Cerri 2013-01-16 13:25:57 -02:00
• 899a5a077e add some comments about ICSF tag numbers and services Include some comments in icsf.c and icsf.h to make clear the service that is called and how tag numbers work. Marcelo Cerri 2013-01-15 10:06:16 -02:00
• 0eab53db4f fix: rename t_session() to t_open_session() Also rename token_specific_session() to token_specific_open_session(). Marcelo Cerri 2013-01-14 21:20:26 -02:00
• 36efff3b3f fix: remove unused macro ICSF_DIR Marcelo Cerri 2013-01-14 17:19:27 -02:00
• b8677c32c6 icsf: add support for symmetric key generation Marcelo Cerri 2013-01-14 15:13:37 -02:00
• 9a3bf94996 token-specific function for symmetric key generation Add a new token-specific function t_generate_key for symmetric key generation. Marcelo Cerri 2013-01-14 15:02:13 -02:00
• a25c9ed480 fix formatting for SC_GenerateKey in new_host.c Fix indentation and break long lines. Marcelo Cerri 2013-01-14 14:54:33 -02:00
• a4a73b4352 icsf: keep LDAP handle in a global structure Add a list of open sessions that will keep the handle for the LDAP connection. Marcelo Cerri 2013-01-14 13:24:04 -02:00
• 31e83be9bc update token specific login function Update token_specific_login to use a SESSION* argument instead of slot id. Marcelo Cerri 2013-01-14 13:00:31 -02:00
• 87dff3f348 update token specific open session function Marcelo Cerri 2013-01-14 12:53:46 -02:00
• 2c9b29bb23 icsf: add support for mechanisms in icsf_generate_secret_key Add a new argument in icsf_generate_secret_key that specifies the mechanism that has to be used. This means that SSL keys are now supported. Marcelo Cerri 2013-01-10 13:51:23 -02:00
• 6e03c00e35 icsf: add ASN.1 description for icsf_generate_secret_key Add the ASN.1 sysntax for the CSFPGSK service used by icsf_generate_secret_key. Marcelo Cerri 2013-01-10 13:57:38 -02:00
• 5e4e83e8bd icsf: add support for symmetric key generation Add a new function icsf_generate_secret_key that calls the CSFPGSK service to create a key. Marcelo Cerri 2013-01-09 14:46:21 -02:00
• 9aaa95c9bd icsf: update icsf_list to use icsf_call Update the generic listing function to use icsf_call and to reduce duplicated code. Marcelo Cerri 2013-01-09 14:41:03 -02:00
• f70e4c4171 icsf: remove icsf_destroy function Removes the icsf_destroy function replacing it with icsf_call calls. Marcelo Cerri 2013-01-09 14:28:53 -02:00
• 9ee12970f0 icsf: add a generic function for all ICSF services Marcelo Cerri 2013-01-09 14:23:50 -02:00
• cfe643cfcd icsf: better usage of handle helper functions Marcelo Cerri 2013-01-09 10:48:26 -02:00
• 41fd03a05f icsf: update list of numeric attributes Marcelo Cerri 2013-01-09 10:12:50 -02:00
• 6eca867373 icsf: remove unused parameter in icsf_create_object Marcelo Cerri 2013-01-08 10:18:52 -02:00
• a3975371f3 fix: remove unused parameters in printf in a macro Marcelo Cerri 2013-01-04 14:52:27 -02:00
• fd00e5a721 Correct OKC_LOG_DEBUG to OCK_LOG_DEBUG Debora V Babb 2013-01-03 21:58:39 -08:00
• 0286a45b19 Add token specific login for icsf. Also includes changes needed since icsf token specific login needs slot id passed as well. Debora V Babb 2012-12-18 09:20:18 -08:00
• 6148dba4b0 add a token_specific_session to icsf_stdll Joy Latten 2012-12-17 00:46:46 -06:00
• 6f8011b6b9 Add t_set_pin to the icsf token. Joy Latten 2012-12-14 18:07:57 -06:00
• 900734c94d Add t_init_pin to the icsf token. Joy Latten 2012-12-14 17:31:01 -06:00
• ec480f489e Add icsf files and dirs to gitignore. Joy Latten 2012-12-14 17:15:31 -06:00
• e505f6ea70 Added comments to ica token's tok struct Joy Latten 2012-12-14 17:12:18 -06:00
• 142816eec7 cca token's tok_struct had mis-placed functions. Joy Latten 2012-12-14 17:09:49 -06:00
• e0a5118178 Added comments to soft token's tok_struct. Joy Latten 2012-12-14 17:03:31 -06:00
• ac13fe8c96 icsf: implement t_init_token Marcelo Cerri 2012-12-06 13:11:26 -02:00