rpm/pam_pkcs11
SHA256
1
0
Fork 0
forked from pool/pam_pkcs11
Code Pull Requests Activity
factory
pam_pkcs11/pam_pkcs11-0.6.10-ChangeLog.git
Stanislav Brabec 723b74d01c Accepting request 670003 from home:sbrabec:branches:security:chipcard 
- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.

OBS-URL: https://build.opensuse.org/request/show/670003
OBS-URL: https://build.opensuse.org/package/show/security:chipcard/pam_pkcs11?expand=0&rev=26
2019-01-30 22:17:49 +00:00

4974 lines
177 KiB
Plaintext
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

commit b606e3bf72e3c6ab02d3e3bfd886b078b224eace
Author: Paul Wolneykien <manowar@altlinux.org>
Date: Tue Sep 11 20:57:39 2018 +0300
0.6.10
- Fixed some security issues (thx @frankmorgner):
(https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/)
-- fixed buffer overflow with long home directory;
-- fixed wiping secrets (now using OpenSSL_cleanse());
-- verify using a nonce from the system, not the card.
commit ce2839db418132f330a7276f68c31d6d2714fdc6
Author: Paul Wolneykien <manowar@altlinux.org>
Date: Tue Sep 11 20:53:21 2018 +0300
Fixed extra "0" argument passed to `cleanse()`
commit 0f686d278f670b15fe27ec4c17b7b7a014a0efb8
Author: Frank Morgner <frankmorgner@gmail.com>
Date: Mon Aug 27 13:12:08 2018 +0200
README.md: removed license section
... we have a COPYING file anyway
fixes some formatting
commit 8d27a4f7ae9b00484fc9b10ffb1230e157730693
Author: Frank Morgner <frankmorgner@gmail.com>
Date: Mon Aug 27 13:02:56 2018 +0200
Update README.md
- project is maintained
- as wiki is empty, we use its main description (converted to MD) here
commit 1e048875e7fd5e230d8e45cd4b15d6386087f9b1
Merge: a0c9b6f 94325a2
Author: Paul Wolneykien <wolneykien@gmail.com>
Date: Mon Aug 20 11:13:30 2018 +0300
Merge pull request #26 from gkloepfer/master
Fixed segfault and fetch problems when checking CRLs
commit a0c9b6ffc020944f03f57e7de66ad4363d52125d
Author: Frank Morgner <frankmorgner@gmail.com>
Date: Sat May 26 00:10:49 2018 +0200
fixed wiping secrets with OpenSSL_cleanse()
Thanks to Eric Sesterhenn from X41 D-SEC GmbH
for reporting the problems.
commit a37fe986997b2d2fefc350c43650cc8193389235
Author: Frank Morgner <frankmorgner@gmail.com>
Date: Fri May 25 23:53:44 2018 +0200
fixed buffer overflow with long home directory
Thanks to Eric Sesterhenn from X41 D-SEC GmbH
for reporting the issue.
commit cc51b3e2720ea862d500cab2ea517518ff39a497
Author: Frank Morgner <frankmorgner@gmail.com>
Date: Fri May 25 23:46:41 2018 +0200
verify using a nonce from the system, not the card
Thanks to Eric Sesterhenn from X41 D-SEC GmbH
for reporting the problem.
commit 94325a2c2b03a10b7618375f828c90063881227e
Author: Gil Kloepfer <ghub0216@kloepfer.org>
Date: Thu Aug 17 07:51:25 2017 -0500
Fixed segfault and fetch problems when checking CRLs
Fixed segfault issue in src/common/cert_vfy.c that occurs when
an attempt is made to check a certificate's CRL. This seems to
be caused by changes that happened in the OpenSSL API, and got
overlooked during updates to the code.
Also fixed a problem in src/common/uri.c in the builtin URI fetch
via HTTP where an extra newline (and missing carriage-returns) were
sent, causing the HTTP request to fail.
commit 8a3e8c667ed615ca2608c04414de69fdae5b6787
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Wed Sep 28 13:44:52 2016 +0200
Fix typo
Thanks to Debian lintian
I: libpam-pkcs11: spelling-error-in-binary lib/pam_pkcs11/ldap_mapper.so
enought enough
commit 1ce1f92b0a5fa56e46b240e1eeff9081915266dd
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Wed Sep 28 13:42:09 2016 +0200
Fix typo
Thanks to Debian lintian:
I: libpam-pkcs11: spelling-error-in-binary
lib/pam_pkcs11/opensc_mapper.so allways always
I: libpam-pkcs11: spelling-error-in-binary lib/pam_pkcs11/ldap_mapper.so
allways always
commit 8b2d4f3f5c74426578c6d971829e441bcfcb3d55
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Wed Sep 28 13:39:30 2016 +0200
manpage: fix typo
Thanks to Debian lintian:
I: libpam-pkcs11: spelling-error-in-manpage
usr/share/man/man1/pkcs11_eventmgr.1.gz Alternativly Alternatively
commit 79f351c3a84743b8b691050725db84ddb95bdc63
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Wed Sep 28 10:56:06 2016 +0200
Release 0.6.9
commit fad145e2169877ef50667dadaa9b5a93b4c22c69
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Wed Sep 28 10:36:54 2016 +0200
Distribute pam-pkcs11-ossl-compat.h
The file pam-pkcs11-ossl-compat.h was introduced in
df45f3e9cd6b2d990a9fbcd862e32a096644325 but was not present in any
Makefile.am
commit e3ffb2f8f6a7e66ee31b771f6d15871b5bcea160
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Tue Sep 27 15:55:06 2016 +0200
pkcs11_listcerts: do not fail on certificate error
If the verification of a certificates fails then display an error and
continue with the next certificate instead of exiting.
A certificate verification failure may be expected (certificate expired
or not able to find the CA root certificate). And the valid certificate
that we want to use may be the next in the list.
commit 78a2eb372829ffb9fc8fb35c10b0bf9c5c59d5fa
Author: Doug Engert <deengert@gmail.com>
Date: Sun Sep 25 14:54:39 2016 -0500
Use i2d_ASN1_INTEGER to get serial number
OpenSSL-1.1 does not support i2c_ASN1_INTEGER.
Changes to be committed:
modified: cert_info.c
commit 367e78710b6e8a14a62d27b8c069e8a09d117533
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Fri Sep 23 16:58:20 2016 +0200
Upgrade gettext from 0.17 to 0.19
commit 0907bc9894a1302a6fc34ff67b24335cf7c04e07
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Fri Sep 23 16:31:22 2016 +0200
Fix compilation using NSS
configure.ac was bogus and the argument -DHAVE_NSS was not correctly
used.
So the compilation was using OpenSSL library instead of NSS library.
commit df45f3e9cd6b2d990a9fbcd862e332a096644325
Author: Doug Engert <deengert@gmail.com>
Date: Wed Aug 24 18:49:33 2016 -0500
Build with OpenSSL-1.1.0
Add support to build with OpenSSL-1.1.0-pre6
Many of the OpenSSL routines have changed, and many structures are now hidden.
The OpenSSL-1.1 API is now being used. The common/pam-pkcs11-ossl-compat.h
header implements an OpenSSL-API interface to older versions using #defines
and inline code.
The code has bee compiled using OpenSSL-1.1.0-pre6, OpenSSL-1.0.1 and OpenSSL-1.0.2
IT HAS NOT BEEN TESTED, I expect anyone interested in using this code can
do the testing.
Changes to be committed:
modified: common/cert_info.c
modified: common/cert_st.h
modified: common/cert_vfy.c
new file: common/pam-pkcs11-ossl-compat.h
modified: mappers/openssh_mapper.c
commit b236a776e741082703893e2b2bb909cbc87878e2
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Fri Sep 23 16:05:14 2016 +0200
TODO: Debian packaging is available
Remove this task from the TODO list.
The Debian package exists since 2008. Thanks to Daniel Baumann.
commit adaef9133dd6da33a6cd4a2d2ca214a6f94d0bb8
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 22 11:06:38 2016 +0200
Create README.md
The project is no more maintained
commit 8bdd8195de6318ad575a73d8ce0f9f787d461c0c
Author: Steve Vickruck <stevev@stevev.org>
Date: Sun Nov 15 14:58:38 2015 +0000
Fixed src/pam_pkcs11/Makefile.am: libintl not linked properly
commit 57578eb3d96522f008163abfd46aa875487a986b
Author: Steve Vickruck <stevev@stevev.org>
Date: Fri Nov 13 13:37:58 2015 +0000
Typo fix: debuging -> debugging
commit ae68bd5de36a83e62e47430ac134411d5fc42872
Author: Steve Vickruck <stevev@stevev.org>
Date: Wed Nov 11 13:43:06 2015 +0000
modified src/pam_pkcs11/pam_pkcs11.c: OpenPAM support for *BSD/OS X; provide wrapper for pam_prompt to fix SIGSEGV due to OpenPAM pam_prompt not accepting NULL resp arg
commit 0a8d61cf4040787e07bdff963049ae51a07f23a4
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Wed Nov 18 10:24:58 2015 +0100
src/common/pkcs11_lib.c: code reformat
reindent Steve Vickruck code
commit 75e01766827a8ef14b9f15ec10ca16e4ed120dfa
Author: Steve Vickruck <stevev@stevev.org>
Date: Wed Nov 11 13:40:38 2015 +0000
modified src/common/pkcs11_lib.c: check for changed slot count and update slot list
commit 90c6062871b01491c6dc900cafe196f39db19f1b
Merge: afea9be 425ecee
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Nov 10 17:34:19 2015 +0100
Merge pull request #16 from stevev1/master
improper use of free()
commit 425eceed822a40d182cb4a63541159cc7fb3076b
Author: Steve Vickruck <stevev@stevev.org>
Date: Tue Nov 10 11:29:05 2015 +0000
modified src/common/pkcs11_lib.c: don't free() static buffer from getpass()
commit afea9be620d675b1afc1b2eef119e9f6afb42872
Merge: a64a4e6 1094af0
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Oct 23 22:34:59 2015 +0200
Merge pull request #15 from r3pek/master
Update documentation referring generic mapper
Add documentation for "serial" match
commit 1094af09e070a1fdf1a86f3a5b4bd451fe432e80
Author: Carlos Silva <r3pek@r3pek.org>
Date: Fri Oct 23 21:19:09 2015 +0100
Update documentation refering generic mapper
Add the "serial" match
commit a64a4e65440ac8ce63c10a9115ed15ff5bd7297a
Merge: b24848e 386f38f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Oct 23 20:28:32 2015 +0200
Merge pull request #14 from r3pek/master
Add serialNumber as a valid search option for generic_mapper
commit 386f38f1ae69b495a82fc3ad42457f9a46398265
Author: Carlos Silva <r3pek@r3pek.org>
Date: Fri Oct 23 16:38:12 2015 +0100
Add "serial" as a valid option
commit 98712f4f02b999791ce2f36b3f3acdf63b814646
Author: Carlos Silva <r3pek@r3pek.org>
Date: Fri Oct 23 16:36:40 2015 +0100
Add CERT_SERIAL as a valid option
commit b24848eb42bafee3d61101794a27a9bdaf3eb2a2
Merge: cad9413 39701be
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Oct 2 09:42:23 2015 +0200
Merge pull request #13 from madscientist159/master
Do not fail if card was already unlocked, e.g. by a previous PAM module
commit 39701be2812d30c8e323046b18c4067207d1a035
Author: Timothy Pearson <kb9vqf@pearsoncomputing.net>
Date: Thu Oct 1 15:16:01 2015 -0500
Do not fail if card was already unlocked, e.g. by a previous PAM module
commit cad9413a3585cfa13eb4cc590e98c3d044b20bc3
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Sun Sep 27 16:24:40 2015 +0200
.gitignore: ignore some other files
commit 054f7fc7b0d6ff2ddd1c805def22bbda65a8bb0c
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Sun Sep 27 16:19:34 2015 +0200
Doxygen: update .conf from 1.7.1 to 1.8.9.1
Some tags were obsolete.
Upgrade using "doxygen -u doxygen.conf.in"
commit 81ec0726eaacc89fbc316f8eb646860f0136b86a
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Sun Sep 27 16:07:21 2015 +0200
Makefile.am: generate ChangeLog.git
The code repository moved from subversion to git.
We now generate ChangeLog.git instead of ChangeLog.svn.
commit 2a1b4dda9d50c67641c8c43a22a2469aeac9b356
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Sun Sep 27 15:54:18 2015 +0200
configure: document --disable-debug
The debugging code is used by default.
The provided ./configure option is to _disable_ debugging so the
possible option is --disable-debug not --enable-debug.
commit 06bc42a848617402c8df8b5b3b84f0f1039531bc
Author: Ludovic Rousseau <ludovic.rousseau@free.fr>
Date: Sat Sep 26 21:24:20 2015 +0200
Make --disable-debug work again
Thanks to Marcus Ilgner fro the patch.
commit d4352d32c08764fe5be787b3fdb0a7cb011ab8ac
Author: Marcus Ilgner <mail@marcusilgner.com>
Date: Sat Sep 26 00:56:58 2015 +0200
Add .gitignore for generated files
commit e401dd7959f338914ed7d7cae98de9eff7b7c0a0
Merge: 324cb8a 0586364
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Aug 28 20:50:53 2015 +0200
Merge pull request #11 from alexandreaguiar/master
Update portuguese translation
commit 0586364ca7933664e6113101b11ae2c1f53753f9
Author: Alexandre Souza Aguiar <alexandre.aguiar@serpro.gov.br>
Date: Fri Aug 28 15:38:53 2015 -0300
Update portuguese translation
commit 324cb8aa6b694d7347bfaaf3576d9fdffc55ac76
Merge: 800de01 32ff511
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Aug 27 16:28:26 2015 +0200
Merge pull request #10 from alexandreaguiar/master
Fix translation of line 208 "Smartcard authentication starts"
commit 32ff511504dc88fc28e5968ae54d7422b7712232
Author: Alexandre Souza Aguiar <alexandre.aguiar@serpro.gov.br>
Date: Wed Aug 26 14:07:11 2015 -0300
Fix translation of line 208 "Smartcard authentication starts"
commit 800de010b19587c3b83168005e2a666baf445018
Merge: 40e1c99 afec6ff
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 26 17:25:18 2015 +0200
Merge pull request #9 from alexandreaguiar/master
Fix language pt_br to pt_BR
commit afec6ff345bcd080d3f94a7bd413dadee66b3601
Author: Alexandre Souza Aguiar <alexandre.aguiar@serpro.gov.br>
Date: Wed Aug 26 11:48:26 2015 -0300
Change configure.ac to fix language from pt_br to pt_BR
commit 06f1d135eed976197dd85449e310b8129886b818
Author: Alexandre Souza Aguiar <alexandre.aguiar@serpro.gov.br>
Date: Wed Aug 26 11:43:38 2015 -0300
Rename pt_br.po to enable translation
commit 40e1c99041455e5aff6484b06b6bf5bd49526689
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Fri Apr 3 16:09:01 2015 +0200
Revert the previous patch.
The code was correct and should continue to check the next certificate.
commit 4ef003ac43405f6391bf965a043f9fe4c4704f1d
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Fri Apr 3 15:00:16 2015 +0200
pam_sm_authenticate(): ignore invalid certificates
The code stopped on the first invalid certificate. This is problematic
if the card contains certificates that have expired or are not yet
valid.
Thanks to 建明 for the bug report
https://sourceforge.net/p/opensc/mailman/message/33698763/
commit 1cbb55e3d4154715de191a44df76ae92810c8598
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:43:11 2014 +0200
Update po/it.po
commit 422727e0c0402dea46f0dde31a97bd3172cb44e0
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:31:28 2014 +0200
Update ax_pthread.m4
The macro has a new name
commit c370dbf40499d83c33c4c35777c62d89b91a6bcf
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:26:08 2014 +0200
Add AM_PROG_AR
/usr/share/automake-1.14/am/ltlibrary.am: warning: 'libcommon.la': linking libtool libraries using a non-POSIX
/usr/share/automake-1.14/am/ltlibrary.am: archiver requires 'AM_PROG_AR' in 'configure.ac'
src/common/Makefile.am:16: while processing Libtool library 'libcommon.la'
commit bf2a2232019e8f342335e58a3490d6b4dd18e02e
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:23:24 2014 +0200
Update configure.ac
Run autoupdate
commit d73e0070d683309f7719ef3cf9f764fd86a84048
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:10:20 2014 +0200
Fix field precision specifier
ldap_mapper.c: In function `ldap_build_partial_cert_filter':
ldap_mapper.c:731:3: warning: field precision specifier `.*' expects argument of type `int', but argument 5 has type `long int' [-Wformat=]
DBG2("ldap_build_cert_filter(): unrecognized certificate "
^
ldap_mapper.c:736:3: warning: field precision specifier `.*' expects argument of type `int', but argument 5 has type `long int' [-Wformat=]
DBG2("ldap_build_cert_filter(): no values for certificate "
^
ldap_mapper.c:740:2: warning: field precision specifier `.*' expects argument of type `int', but argument 5 has type `long int' [-Wformat=]
DBG4("ldap_build_cert_filter(): building subfilter '%.*s'='%.*s'",
^
ldap_mapper.c:740:2: warning: field precision specifier `.*' expects argument of type `int', but argument 7 has type `long int' [-Wformat=]
commit bcba14aafc53f4850386101b0124a91f36881ff0
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:06:59 2014 +0200
Fix format error
ldap_mapper.c: In function `ldap_get_certificate':
ldap_mapper.c:1079:4: warning: format `%s' expects a matching `char *' argument [-Wformat=]
DBG("ldap_first_entry() failed: %s");
^
commit ce0cd5a186ce57278f2fbc2af2176d8ddd59cf39
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:03:59 2014 +0200
Remove unused variables
ldap_mapper.c: In function `ldap_mapper_match_user':
ldap_mapper.c:1210:6: warning: unused variable `i' [-Wunused-variable]
int i=0;
^
commit dd11d505a3425c2272285b942588d601b3aacade
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:02:31 2014 +0200
Remove unused variables
ldap_mapper.c:906:8: warning: unused variable `bv_val' [-Wunused-variable]
void *bv_val;
^
ldap_mapper.c:902:14: warning: unused variable `ber' [-Wunused-variable]
BerElement *ber = NULL;
^
commit b4229fa07c253c0f74cf3fff1868b89b4207b586
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 10:01:01 2014 +0200
Remove unused variables
ldap_mapper.c:842:15: warning: unused variable `i' [-Wunused-variable]
unsigned int i;
^
ldap_mapper.c:841:35: warning: unused variable `der_len' [-Wunused-variable]
size_t buf_len, user_filter_len, der_len;
^
ldap_mapper.c:840:17: warning: unused variable `der' [-Wunused-variable]
unsigned char *der;
^
commit c7f4a9a6dda7dc10287f489d9cba1b39e852cbeb
Merge: 97855e8 c42da2a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Aug 28 09:58:38 2014 +0200
Merge pull request #6 from nalind/master
Changes (most of them optional) to how the LDAP mapper does matching
commit 97855e85a8b5766063667e858671472169048887
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 09:55:06 2014 +0200
Update po/remove-potcdate.sin
commit bde79c585c1e64a59a6e9817e79b6f47bb1ff631
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Thu Aug 28 09:53:01 2014 +0200
Rename po/remove-potcdate.sin
commit c42da2ab7832e7e935fdc0493effd420a00b299d
Author: Nalin Dahyabhai <nalin@redhat.com>
Date: Tue Aug 26 18:07:51 2014 -0400
Treat "attribute_map" as a list of ANDed clauses
As before, an "attribute_map" entry can specify a single LDAP attribute
and type of certificate data to compare it with. Modify this so that a
list entry can include multiple clauses joined by an '&' character.
commit 75f819358dd7ffed0cc5e5738d64cdf8c8619c50
Author: Nalin Dahyabhai <nalin@redhat.com>
Date: Tue Aug 26 17:36:01 2014 -0400
Add "attribute_map" to LDAP mapping
Add an "attribute_map" list setting. Items in the list take the form
"ldap_attribute_name=cert_attribute", where "ldap_attribute_name" is an
attribute that we'll name in a search filter, and cert_attribute is one
of "cn", "subject", "kpn", "email", "upn", "uid", or "cert".
When searching the directory, we'll try the configured map attribute
pairs before falling back to the traditional map: the attribute named by
the "attribute" configuration setting should contain the certificate.
commit 3f1f9adb32475cc1bfc9016d5c8f723cef8d8d3d
Author: Nalin Dahyabhai <nalin@redhat.com>
Date: Tue Aug 26 15:24:51 2014 -0400
Add an LDAP "uid_attribute", use it to speed up
Add an option to name an attribute of a user entry in the directory
server which contains the user name. If it's specified, search for
entries that just match the certificate, and read the user name from a
matching entry. If not, fall back to the old method of iterating
through all user names to find an entry that matches both the user name
and the certificate. The first method should be faster.
commit 95fdf12d66cee3af0cdcc8ff9704f220b7317c08
Author: Nalin Dahyabhai <nalin@redhat.com>
Date: Tue Aug 26 14:37:08 2014 -0400
Skip reading user certificates from LDAP
Since we're letting the server handle matching the user's certificate,
we don't need to bother with caching certificates that we've read from
the directory server.
commit e4e023e6710c7e1ed4a7390aa0e66dc12df6422a
Author: Nalin Dahyabhai <nalin@redhat.com>
Date: Tue Aug 26 14:13:05 2014 -0400
When searching LDAP, filter on the certificate
When searching LDAP for an entry for a user, incorporate the contents of
the certificate in the filter that we send to the directory server. Now
that we let the directory server look for entries with the certificate
in them, we don't need to walk the list of certificates in the retrieved
entry to check for matches, because the server says they're there.
commit f7e4ef273f22c514591d8fb35b2adfb72fdf8c48
Author: Nalin Dahyabhai <nalin@redhat.com>
Date: Tue Aug 26 13:23:12 2014 -0400
Move building the LDAP filter into a subfunction
Move building the filter that we use to find the user's entry into a
subfunction, in preparation for giving it more capabilities.
commit 4c4eaede5b71441ccab7918ecd21e38ee5e6a632
Merge: 809b788 80a2c6d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Mar 8 11:05:59 2014 +0100
Merge pull request #5 from maxxer/master
libpam-pkcs11 Italian translation
commit 809b7889c58434abd0d00bb9d229ffb24d1440aa
Merge: a1689f8 7354b2b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Mar 8 11:05:00 2014 +0100
Merge pull request #4 from logich/patch-1
pam_pkcs11.conf options doc update
commit 80a2c6d6e60480abd84f2745dc3e79b4112f7703
Author: Lorenzo Milesi <maxxer@yetopen.it>
Date: Wed Mar 5 17:31:52 2014 +0100
Italian translation
commit 7354b2bba6acc766d8ea08b8258af114616e8979
Author: logich <logan@roestrace.com>
Date: Wed Mar 5 08:10:13 2014 -0800
pam_pkcs11.conf options doc update
I’d like to suggest adding the two options card_only and wait_for_card to the README file just after line 102:
card_only
Always try to get the userid from the certificate, don't prompt for the user name if
the card is present, and if the token is present, then we must use it to authenticate.
wait_for_card
This option needs card_only to be set. This will make the system wait for the
token to be inserted on login, or after login it will require the same token be
inserted to unlock the system.
commit a1689f8cc26254766c01d5b34ce257bc257c3039
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:52:37 2014 +0100
Fix compiler warnings
pkcs11_lib.c: In function `refresh_slots':
pkcs11_lib.c:1037:5: warning: format `%d' expects argument of type `int', but argument 5 has type `CK_ULONG' [-Wformat]
pkcs11_lib.c: In function `init_pkcs11_module':
pkcs11_lib.c:1118:3: warning: format `%d' expects argument of type `int', but argument 5 has type `CK_ULONG' [-Wformat]
pkcs11_lib.c:1141:3: warning: format `%d' expects argument of type `int', but argument 5 has type `CK_ULONG' [-Wformat]
pkcs11_lib.c: In function `get_certificate_list':
pkcs11_lib.c:1579:5: warning: format `%x' expects argument of type `unsigned int', but argument 5 has type `CK_CERTIFICATE_TYPE' [-Wformat]
pkcs11_lib.c: In function `sign_value':
pkcs11_lib.c:1725:3: warning: format `%d' expects argument of type `int', but argument 5 has type `long unsigned int' [-Wformat]
pkcs11_lib.c:1747:7: warning: format `%d' expects argument of type `int', but argument 5 has type `CK_ULONG' [-Wformat]
pkcs11_lib.c:1755:3: warning: format `%d' expects argument of type `int', but argument 5 has type `CK_ULONG' [-Wformat]
commit 1f8eab1fc0fcac720d8fce05f9290f0bfc6f298b
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:49:50 2014 +0100
Fix compiler warnings
base64.c: In function `base64_encode':
base64.c:92:2: warning: format `%d' expects argument of type `int', but argument 5 has type `size_t' [-Wformat]
base64.c:92:2: warning: format `%d' expects argument of type `int', but argument 6 has type `size_t' [-Wformat]
base64.c:92:2: warning: format `%d' expects argument of type `int', but argument 7 has type `size_t' [-Wformat]
commit 476b49da51de1754c01c6f00c85ee7b1635234a3
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:38:33 2014 +0100
Fix bug and compiler warning
subject_mapper.c: In function `subject_mapper_module_init':
subject_mapper.c:112:3: warning: conversion lacks type at end of format [-Wformat]
subject_mapper.c:112:3: warning: too many arguments for format [-Wformat-extra-args]
commit 6fe97a457df9d4d719e0922053ea74e1c5c09ce9
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:37:54 2014 +0100
Fix bug and compiler warning
uid_mapper.c: In function `uid_mapper_module_init':
uid_mapper.c:134:3: warning: conversion lacks type at end of format [-Wformat]
uid_mapper.c:134:3: warning: too many arguments for format [-Wformat-extra-args]
commit 3fd81878a506d2e27189f1b3ea1090fdfdf9b462
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:37:12 2014 +0100
Fix bug and compiler warning
openssh_mapper.c: In function `mapper_module_init':
openssh_mapper.c:384:3: warning: conversion lacks type at end of format [-Wformat]
openssh_mapper.c:384:3: warning: too many arguments for format [-Wformat-extra-args]
commit 73e4fabd398fbb6be82dd6ce9a2f82300d93f714
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:36:10 2014 +0100
Fix bug and compiler warning
null_mapper.c: In function `null_mapper_module_init':
null_mapper.c:93:3: warning: conversion lacks type at end of format [-Wformat]
null_mapper.c:93:3: warning: too many arguments for format [-Wformat-extra-args]
commit a7bc9e59ef568818a23c35314580d14a49699c95
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:35:00 2014 +0100
Fix bug and compiler warning
pwent_mapper.c: In function `pwent_mapper_module_init':
pwent_mapper.c:170:3: warning: conversion lacks type at end of format [-Wformat]
pwent_mapper.c:170:3: warning: too many arguments for format [-Wformat-extra-args]
commit 00dbebf4452072050fcb1b8365cafc438baf10a3
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:33:05 2014 +0100
Fix compiler warning
card_eventmgr.c:77:9: warning: format ‘%lX’ expects argument of type ‘long unsigned int’, but argument 5 has type ‘int’ [-Wformat]
commit 2ea408a0c4d210979290ea510711fa36521e52b0
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:26:43 2014 +0100
Fix compiler warning
pkcs11_eventmgr.c:439:2: warning: format ‘%d’ expects argument of type ‘int’, but argument 5 has type ‘long unsigned int’ [-Wformat]
commit f619569be0869507325b55e0d518d67505134d3a
Author: Ludovic Rousseau <ludovic.rousseau@gmail.com>
Date: Mon Feb 24 11:18:26 2014 +0100
Check debug_print() format and arguments
Use GCC format (archetype, string-index, first-to-check) to check the
arguments correspond to the format string
http://gcc.gnu.org/onlinedocs/gcc-3.1/gcc/Function-Attributes.html
commit 616d7ad9160123f021c7da414d83e7c075b89848
Merge: dd7fa2f 8aa5cf8
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 24 11:13:24 2014 +0100
Merge pull request #3 from tuxmania87/master
unlogical string comparison resolved, wrong debug pointer cast resolved
commit 8aa5cf87846ed716ed9a127a8ad583f8dbcbdce0
Author: Robert Hartmann <hartmann@kryptograf.net>
Date: Mon Feb 24 09:40:20 2014 +0100
Fixed mapping error in find_user() for generic_mapper
commit ac2de77ba1a612958074664dcd64ad1a051da508
Author: Robert Hartmann <hartmann@kryptograf.net>
Date: Tue Feb 18 11:30:37 2014 +0100
unlogical string comparison resolved, wrong debug pointer cast resolved
commit dd7fa2fe691cb66d7779951b5c5763be130730a9
Merge: ed5daac caecdc7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 12 05:40:17 2013 -0700
Merge pull request #2 from tcatm/master
Fix pam_pkcs11.xsl
commit caecdc74faea8ab4b7fc315c69bbe5b8bb4c6904
Author: Nils Schneider <nils@nilsschneider.net>
Date: Wed Jun 12 14:24:41 2013 +0200
Fix pam_pkcs11.xsl
Let /etc/xml/catalog resolve docbook.xsl instead of
using a hardcoded path.
commit ed5daacfd5a51c57b79d8cfa8f4784e28c521095
Merge: 75613e3 2b16129
Author: Martin Paljak <martin@martinpaljak.net>
Date: Sun Feb 24 06:46:18 2013 -0800
Merge pull request #1 from Flameeyes/master
A few build system fixes
Tested as working on Debian wheezy.
commit 2b16129e9c9e685b6aaaa80d740096353d95ab7a
Author: Diego Elio Pettenò <flameeyes@flameeyes.eu>
Date: Sat Feb 23 16:10:56 2013 -0800
build: remove an outdated reference to INCLUDE in favour of AM_CFLAGS.
commit 9c0b922227897d889d939871f64a1a0bd9427e56
Author: Diego Elio Pettenò <flameeyes@flameeyes.eu>
Date: Sat Feb 23 16:06:55 2013 -0800
build: do not search for a target.
This is not a compiler, so it should not have a target.
commit 353fecb2ba508a3b8696ea83afcf120ab7e8e117
Author: Diego Elio Pettenò <flameeyes@flameeyes.eu>
Date: Sat Feb 23 16:05:10 2013 -0800
build: rename configure.in for compatibility with new autoconf/automake.
commit 11de1146685e7933795d5083c9c51595d60d2200
Author: Diego Elio Pettenò <flameeyes@flameeyes.eu>
Date: Sat Feb 23 16:03:17 2013 -0800
build: only export PAM interface symbols.
commit 75613e32dfc49e1174d55ed37c18ce84cabadb47
Author: Frédéric Combeau <frederic.combeau@cea.fr>
Date: Wed Dec 12 11:26:18 2012 +0100
pam_sm_authenticate: support many certificates
" I use pam_pkcs11 0.6.8 with libcurl but without nss. My tokens works
fine but they can contain 4 or 5 certificates (with corresponding rsa
keys).
My certificates are not all from the same PKI, so they are not certified
by the same ACs.
The problem I encounter with pam_pkcs11 is that if the first certificate
it tries to verify is not certified by ACs I installed on my
workstation, I got an error 2328 because verify_certificate() return -4
and pam_pkcs11 stops (line 584 of src/pam_pkcs11/pam_pkcs11.c : goto
auth_failed_nopw;), not trying to verify others certificates in my
token. I do not really want to install all ACs (including CRLs, ...) of
my certificates of my token on every workstations.
I tried to add a "continue;" in pam_pkcs11.c in the switch test for the
error 2328 : if verify_certificate() returns -4, pam_pkcs11 prints the
error message "error 2328: ..." and with the continue command,
pam_pkcs11 continues to process the next certificates and everything
works great.
Maybe I missed something that explains why pam_pkcs11 stops processing
certificates if the verification of a certificate returns -4. "
Thanks to Frédéric Combeau for the bug report and patch
http://www.opensc-project.org/pipermail/opensc-devel/2012-December/018723.html
commit 5ebe9d09fe35165c61ca08267be6d6f0594a686a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun Jul 1 15:48:51 2012 +0000
- Licence is GPL v2+ (a line was missing)
- update FSF address
commit e3c5693883c56a12ee53b1f05665a6f0378d05cc
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Apr 24 13:44:19 2012 +0000
Fix log message
Use "%d token(s)" instead of "%d tokens" since we may have less than 2
tokens
commit bbd60c82ce51921f728e8d378fdf8c3b23d368b2
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Apr 24 13:37:45 2012 +0000
Major reformat using indent(1)
--blank-lines-after-declarations
--blank-lines-after-procedures
--brace-indent0
--continuation-indentation4
--dont-break-procedure-type
--dont-line-up-parentheses
--indent-level4
--tab-size4
--no-blank-lines-after-declarations
--no-space-after-function-call-names
commit 5dfaaefb75e1889bbd86e56d977542e4ef6d82c1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Apr 24 13:33:17 2012 +0000
Log error of C_Initialize/C_Initialize if any
commit 54c5db08f433aa9d213f9d1fed17a05139af10d8
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Apr 24 13:26:02 2012 +0000
Reformat and remove extra white spaces
commit ea9db83baab55fd88b5c57f203e961affea47c95
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 18:32:48 2012 +0000
regenerate
commit d1f5862d6cfcc6f7390ee8552910fc795b9058b3
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 18:31:50 2012 +0000
Fix typo: authentification -> authentication
commit 63451e9499aa32163337d4f6982ff6924cccd36e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 17:09:21 2012 +0000
Release 0.6.8
commit b19910b563605411ef00bf3bd246933db74285d2
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 17:08:42 2012 +0000
Fix typo: writeable -> writable
Reported by Debian lintian tool
commit 2f4779a88f1d3ff018aba5dd9891cf5d977214a9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 17:04:42 2012 +0000
Update
commit b481aefbd553dbd3be2c4a311f017c81557ed766
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 16:55:20 2012 +0000
Use a direct string instead of a variable
Fix compiler error when Debian hardening is used:
pam_pkcs11.c:810:4: error: format not a string literal and no format
arguments [-Werror=format-security]
commit 7e033f1c19937d768242ccd35a5e4f9fe1a6eae6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 16:48:37 2012 +0000
Add support of variadic parameters for pam_prompt()
Systems without pam_prompt() and using our own version of pam_prompt()
can now use a variable number of parameters as on GNU/Linux.
commit 68ab0f27696cfc7f71e567f59595ad1c7c9eb3fb
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 16:29:34 2012 +0000
Use a direct string instead of variable
Fix compiler errors when Debian hardening is used:
pam_pkcs11.c:198:3: error: format not a string literal and no format
arguments [-Werror=format-security]
commit 2415e80f023ff69746d756a272af73853cd46664
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 16:06:52 2012 +0000
Fix compiler warning
pam_pkcs11.c:154:5: warning: passing argument 2 of `conv->conv' from
incompatible pointer type [enabled by default]
pam_pkcs11.c:154:5: note: expected `const struct pam_message **' but
argument is of type `struct pam_message **'
commit 77a3a814e8745ac45075d763058577e795f6e09a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 7 16:01:36 2012 +0000
Remove extra spaces
commit 0329729aa28a97ab045df536cee0e0932ad75793
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Nov 8 21:35:33 2011 +0000
Check for HAVE_CURL_CURL_H instead of HAVE_CURL
This define is set by configure.in test AC_CHECK_HEADERS([curl/curl.h])
Thanks to Hannu Kotipalo for the bug report
commit 733135f420684136df05902d698944ed7bcd71b0
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 18 12:51:47 2011 +0000
get_private_key(): search for a specific ID if any
Fixes bug #392 "pam_pkcs11 uses first found private key for signing, not one matching certificate"
http://www.opensc-project.org/opensc/ticket/392
commit dc5401da54e27718d61a30b78b68a9407359181a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 18 12:46:57 2011 +0000
get_private_key(): remove unused CKA_KEY_TYPE template attribute.
See bug #392 "pam_pkcs11 uses first found private key for signing, not one matching certificate"
http://www.opensc-project.org/opensc/ticket/392
commit 76609d1163620c3717261f5a38f49e1d3b408662
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 18 11:50:56 2011 +0000
Fix spelling error
commit 3d86830e6efa463f8fddb555ee6b477e2c07efea
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 18 11:50:10 2011 +0000
Fix spelling error
commit baaa1862c80e03f32d94f3c6a5fc8fa279963c08
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 18 11:42:47 2011 +0000
Login in all cases, not just for NSS
Fixes Ticket #393 "pkcs11_inspect does not ask for card PIN"
http://www.opensc-project.org/opensc/ticket/393
commit 82c4cee45a1122982e615f0cfe6ea1089467809f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Aug 18 19:39:44 2011 +0000
Update from Jakub Bogusz
commit e4878715bbef0dd2e62e0599d96256c851bef025
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Aug 6 13:31:09 2011 +0000
Release 0.6.7
commit fae6e86a186c8b2c36910d8c3c1a750c5c1f4a76
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Aug 6 13:30:37 2011 +0000
Update
commit 30a5b2909c3b1d3f2582d342b23f1d922378bc5d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun Jul 17 15:48:28 2011 +0000
Add Turkish l18n file
Thanks to Ozan Çağlayan
http://www.opensc-project.org/pipermail/opensc-devel/2011-July/016952.html
commit 056207700a709c95fd7eef83997e0fe308d20406
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Jun 30 09:07:55 2011 +0000
silent build by default
commit a34c48c9b15a4b437a562326e23af3d8b9ad37b1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Jun 10 11:52:48 2011 +0000
Remove useless cast
commit 72e4fe5732a3b2c7349d71d63f3171d2b006ad1e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Jun 10 11:50:10 2011 +0000
Fix compiler warning
pwent_mapper.c: In function 'pwent_mapper_find_user':
pwent_mapper.c:75: warning: 'str' is used uninitialized in this function
commit cb5e1d2442c4652a589513d07a9b78cf3b5cd922
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri May 27 07:16:53 2011 +0000
Use "domainname" instead of "domain"
Fix Ticket #363 "fix ms mapper example"
commit 9213284e96229e9b6985a55926ebbcf81285a6ce
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 7 09:08:03 2011 +0000
Clarify between CA and CA root certificate
commit 1c6b88ca0955f5848cdf6f339f4e74a8a6f98d8d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 7 08:00:40 2011 +0000
Rename make_hash_link into pkcs11_make_hash_link
commit 1b6cca93df1a39c29599dd20cf95edfecfb9dae6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Mar 22 08:30:44 2011 +0000
Improved error messages
Thanks to Dominik Fischer for the patch
" It adds displaying error messages to the user via pam_prompt. Because in
GDM the messages disappear so quick, I've added a new option
"err_display_time". After a message is shown with pam_prompt, a
"sleep(err_display_time)" is called. This gives the user a chance to
read the message. Also I prepend every message with an error number,
because this number is easier to remember, if a user reports a problem.
The messages can be disabled via the "quiet" option. "
http://www.opensc-project.org/pipermail/opensc-devel/2011-March/016184.html
commit 2c2fcce568a73a6d9358925619b16725d3d40876
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun Mar 20 14:57:08 2011 +0000
pwent_mapper_find_user(): add a missing line for the previous patch
Thanks to Dominik Fischer
http://www.opensc-project.org/pipermail/opensc-devel/2011-March/016173.html
commit 286610a6933c7b3797691a8d9a7e580771729d9e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun Mar 20 11:04:57 2011 +0000
pwent_mapper_find_user() searches through all available passwd db
entries to find an user. This takes a very long time, if you have many
users (10000). Additionally, if you have nss-ldap configured, it
transfers a large amount of data (which is expensive on mobile
connections...).
Included you find a patch to speed up user finding for the pwent_mapper.
It first tries to find a user directly by calling getpwnam() with the
found CN. If this fails, the old mechanism is used. (I think the second
step could probably even be removed: I can't find a situation where the
getpwnam() does not work.)
Please have a look at the patch. If it's OK please include it in further
pam_pkcs11 releases (so I don't have to patch every new pam_pkcs11
release on my own ;-) ).
Kind regards
Dominik Fischer
http://www.opensc-project.org/pipermail/opensc-devel/2011-March/016167.html
commit 36e757ffa2976ca7f9cd71d33fd66509abacc249
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 18:00:46 2011 +0000
Remove useless code
pam_pkcs11.c:281:6: warning: Value stored to 'rv' is never read
rv = pam_get_item(pamh, PAM_USER, &user);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pam_pkcs11.c:269:10: warning: Value stored to 'rv' is never read
rv = pam_get_item(pamh, PAM_SERVICE, &service);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
commit 85a31346945f2906fbf5ddcc9dd1699d82507a85
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:59:32 2011 +0000
Remove useless code
pam_config.c:302:3: warning: Value stored to 'res' is never read
res=sscanf(argv[i],"slot_num=%d",&configuration.slot_num);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
commit 4c4af5bd747a6ad42f168298073634e37803d0b6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:58:16 2011 +0000
Fix a clang warning without changing the code semantic
mapper_mgr.c:201:10: warning: Field access results in a dereference of a null
pointer (loaded from variable 'last')
last->next= item;
~~~~ ^
commit 5227d1a36b66b90b290bcce56512ebb3e613e101
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:50:48 2011 +0000
Remove usless code
pkcs11_eventmgr.c:268:17: warning: Value stored to 'res' is never read
res=sscanf(argv[i],"expire_time=%d",&expire_time);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pkcs11_eventmgr.c:264:17: warning: Value stored to 'res' is never read
res=sscanf(argv[i],"polling_time=%d",&polling_time);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
pkcs11_eventmgr.c:595:7: warning: Value stored to 'rv' is never read
rv = ph->fl->C_Initialize(NULL);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~
pkcs11_eventmgr.c:594:7: warning: Value stored to 'rv' is never read
rv = ph->fl->C_Finalize(NULL);
^ ~~~~~~~~~~~~~~~~~~~~~~~~
pkcs11_eventmgr.c:569:3: warning: Value stored to 'rv' is never read
rv = ph->fl->C_Initialize(NULL);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~
pkcs11_eventmgr.c:568:3: warning: Value stored to 'rv' is never read
rv = ph->fl->C_Finalize(NULL);
^ ~~~~~~~~~~~~~~~~~~~~~~~~
commit 59bbd4728d3451105ce932af8191cdf3e83ef7d7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:48:57 2011 +0000
Remove useless code
card_eventmgr.c:231:17: warning: Value stored to 'res' is never read
res=sscanf(argv[i],"timeout_limit=%d",&timeout_limit);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
card_eventmgr.c:227:17: warning: Value stored to 'res' is never read
res=sscanf(argv[i],"timeout=%d",&timeout);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
card_eventmgr.c:271:5: warning: Value stored to 'res' is never read
res=fscanf(fd, "%ld", &temp);
^ ~~~~~~~~~~~~~~~~~~~~~~~~
card_eventmgr.c:301:5: warning: Value stored to 'res' is never read
res=write(fd, tmp, strlen(tmp));
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~
commit dd163e205e51855760239f3a2467b1e62ea685d6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:46:10 2011 +0000
Remove useless code
scconf.c:195:2: warning: Value stored to 'ret' is never read
ret = scconf_put_str(block, option, !value ? "false" : "true");
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
scconf.c:585:3: warning: Value stored to 'r' is never read
r = 0;
^ ~
scconf.c:711:3: warning: Value stored to 'r' is never read
r = 0;
^ ~
commit 97b1715855f10c3685916fe0cd7e6c7cde5da00d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:43:27 2011 +0000
Remove useless code
ldap_mapper.c:800:13: warning: Although the value stored to 'ret' is used in the
enclosing expression, the value is never actually read from 'ret'
if ( 0 != (ret = ldap_unbind_s(ldap_connection))) {
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
ldap_mapper.c:668:3: warning: Value stored to 'rv' is never read
rv = ldap_add_uri (uris, uri, &buffer, &buflen);
^ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
commit 5a738a654d8e868e4cd94d14b13b3fe88ca4e569
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:40:34 2011 +0000
BN_append(): remove useless code
cert_info.c:654:2: warning: Value stored to 'res' is never read
res=BN_bn2bin(bn,buff+1);
^ ~~~~~~~~~~~~~~~~~~~~
cert_info.c:649:25: warning: Value stored to 'pt' is never read
res= int_append(pt,0);pt+=res;
^ ~~~
commit 43603c125e618c20a57ac21c2db187bd64721eb7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:39:25 2011 +0000
int_append(): remove useless code
cert_info.c:631:3: warning: Value stored to 'pt' is never read
*pt++= (n&0x000000ff) >>0;
^~~~
commit a45744d262f6d25964644577af49b776e4421059
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:37:43 2011 +0000
free_uri(): fix a memory leak
uri.c:175:14: warning: Field access results in a dereference of a null pointer
(loaded from variable 'uri')
if(!uri->file) free(uri->file->data);
~~~ ^
commit 317d0b53e12e6c811079a80166c2511a1396f4f9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 17:33:07 2011 +0000
Fix to clang warnings
pkcs11_lib.c:1323:3: warning: Value stored to 'rv' is never read
rv = -1;
^ ~~
pkcs11_lib.c:1346:3: warning: Value stored to 'rv' is never read
rv = -1;
^ ~~
commit 7e381ee5ace3af210568818b30e03fd168368f3d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jan 22 14:37:58 2011 +0000
close_pkcs11_session(): CKR_FUNCTION_NOT_SUPPORTED is a valid error code
and not an error.
Closes ticket #30 "pam_pkcs11 cert_vfy failed with Feitian card"
commit 63c40e048b10eb041b31261273ef8f61728aeb1a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Nov 20 19:46:50 2010 +0000
release 0.6.6
commit 74732dfa6309a359cd39820d31b992438d26c826
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 18 09:17:38 2010 +0000
Use daemon implementation from daemon.c when needed (for example on
Solaris 10)
See http://www.opensc-project.org/pipermail/opensc-user/2010-November/004331.html
commit 389dc9a7d113b0547b9d430dce8ef562d1cb76b9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 18 09:13:11 2010 +0000
Use config.h instead of includes.h
Define _PATH_DEVNULL if needed. It was defined in includes.h in OpenSSH
commit 6638e73774109c3644f1aafe316348f366704677
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 18 09:10:49 2010 +0000
new file from OpenSSH version 5.6p1 openssh-5.6p1/openbsd-compat/daemon.c
The licence is BSD 3-clause so compatible with the LGPL v2+ used by
pam_pkcs11
commit f13b0ece6747475525cf1b93d666ced52792d1fe
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Oct 25 12:44:17 2010 +0000
Fix the change in revision 470
Thanks (again) to Arfrever Frehtes Taifersar Arahesis
http://www.opensc-project.org/pipermail/opensc-devel/2010-October/015175.html
commit ca9d081270954ee50c00a048f3c5313c9426cead
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Oct 25 08:47:31 2010 +0000
Default is to use pcsc-lite. The argument is --without-pcsclite to
disable pcsc-lite use/support
Thanks to Arfrever Frehtes Taifersar Arahesis for the bug report
http://www.opensc-project.org/pipermail/opensc-devel/2010-October/015172.html
commit 018023c450500c4fc5221778337c0ad4ddb9cf62
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Oct 23 20:52:39 2010 +0000
rename make_hash_link.sh in pkcs11_make_hash_link
commit 3428e53e6bfc59d0889d8ffb362e239bf76e515c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Oct 23 20:27:59 2010 +0000
Display ${libdir} value
commit 8cc4d7512aa6b2df56b00712698c77624c3b219b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Oct 23 20:18:47 2010 +0000
rename make_hash_link.sh to pkcs11_make_hash_link to match the manpage
name
commit a6d2e47642a2eacbadd34fe509bad7d21906818b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 14:50:26 2010 +0000
Unload the mapper also on success
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-October/015150.html
commit 21762db1366ae159553d208a6a090097a103b78f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 08:05:03 2010 +0000
Update from doxygen version 1.5.6 to 1.7.1
commit e4c0d6b0c8d8db44338bfe801ee762de929a95ed
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 07:58:23 2010 +0000
release 0.6.5
commit 11f6fd558cd81bcafa6180bbb3b952108b4afe8b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 07:51:02 2010 +0000
regenerate
commit 46a85a6fccddf029f5128daf62e2c436a87f46c1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 07:46:14 2010 +0000
Add the missing strndup.h file
commit d9e71851ad14476821a2327684ed82b552b1408d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 07:40:03 2010 +0000
get_http(): check if complete message was transmitted
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-October/015137.html
commit 220cc82188efda14cbdde741281a7baeb0dcad49
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 07:36:49 2010 +0000
get_http(): allocate enough memory to fit http-request
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-October/015137.html
commit 97680d3fcb8f7102bb3a6e1663e9d9ba6efae446
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 07:35:54 2010 +0000
get_http(): add missing return statement
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-October/015137.html
commit 70b9b47f48492d88f51073152271fd6a7bd11ec8
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 19 07:31:02 2010 +0000
If dlopen() is not found in libdl we try to find it without specifying a
library before exiting in error.
I don't remember why I used this code. Maybe dlopen() is not in libdl on
some systems.
commit debd195986f83154ac08acd43bcb71436c652bce
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Oct 16 13:21:36 2010 +0000
Translate a string
commit 8d824399788f376113dcd027591df011c42e657b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Oct 16 13:20:54 2010 +0000
Regenerate
commit 77a4423ff6f4f4c8fbda8c00109eefa2d96a80ee
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Oct 16 13:19:42 2010 +0000
Replace "Found the %s." by "%s found."
Thanks to Mr Dash Four for the bug report
http://www.opensc-project.org/pipermail/opensc-devel/2010-October/015135.html
commit 9edd2c4728aa009c861ad7f42b4ff645e00af91b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Oct 15 07:34:12 2010 +0000
crypto_init(): fix a typo in log message
commit 76a7b07e0ca65df9a8d9e1021ec1aa548518a9e1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 22 11:28:55 2010 +0000
pkcs11_pass_login(): check if the PIN returned by getpass is NULL
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-September/014976.html
commit 9c4a86b2fb22d44ee0ee08f07329561c832299a3
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 22 07:12:11 2010 +0000
pkcs11_pass_login(): log an error if pkcs11_login() fails
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-September/014964.html
commit f886c31fecb1862e4a060e9a30fb3620544d0a88
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 22 07:10:21 2010 +0000
pkcs11_pass_login(): do not clean a zero length PIN
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-September/014964.html
commit 7941cabe438cbdb5b7cb8b3b33640b6dcdc5e917
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 22 07:05:17 2010 +0000
Show PIN code in debug output only if DEBUG_SHOW_PASSWORD is defined
(not defined by default)
Thanks to Andre Zepezauer for the bug report
http://www.opensc-project.org/pipermail/opensc-devel/2010-September/014964.html
commit 877babd43fb911574d9b64796f8b1216eb0e3c9c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 21 09:53:51 2010 +0000
parse_config_file(): get the debug value from the configuration file
Thanks to Andre Zepezauer for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-September/014949.html
commit caea4fec05672d0c672ed4cc31ccc89b999cbc8e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 25 08:26:39 2010 +0000
Do not call SCardEstablishContext() before daemonize since pcsc-lite
handles are invalid after a fork.
Thanks to Patrik Martinsson for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2010-August/014632.html
commit e5c5efe271fa1f4d297dfaedaebeb910f65664a6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Aug 19 22:09:18 2010 +0000
Use SCARD_READERSTATE instead of SCARD_READERSTATE_A since it was
removed in pcsc-lite >= 1.6.2
commit 9b7cfcd2258e8b8eb0d38021f08d66fdf9732a1d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Aug 14 16:19:36 2010 +0000
Patch for #239 and #240 (handle more than one cert/pattern matching)
Thanks to Wolf Geldmacher for the patch.
http://www.opensc-project.org/pipermail/opensc-devel/2010-June/014405.html
" Here's a patch to solve the issues I've encountered using pam_pkcs11.
In regards to #239 (pam_pkcs11 only looks at first certificate on
token):
The fix for this turns out to be somewhat problematic, and I'm not at
all sure, whether my implementation of the fix is a valid one.
The basic problem (as I understood it from analyzing the code) is that
finder functions of the mappers return a char*, allowing for a single
value (NULL) to signalize failure and return the key if no mapping (i.e.
no value associated with the key) was found (cf. comment for
mapfile_find in src/mappers/mapper.c). Thus a caller (i.e. find_user in
src/pam_pkcs11/mapper_mgr.c) cannot distinguish between a mapping or a
key being returned and thus will prematurely terminate on the first
certificate that passes the other validity tests.
The fix provided changes the finder function interface by requiring an
additional out parameter that is set to 1, if a real mapping value was
returned and remains unchanged otherwise. This fix breaks existing
loadable mappers.
I considered overloading of the value returned (e.g. having a
byte/substring as first character of the value returned to be able to
distinguish between a value and a key being returned) which would
preserve the interface to the mappers, but refrained from implementing
it that way as I believe this to be unclean and prone to difficult to
track errors.
Another solution I considered was the addition of another entry to the
structure encapsulating the mappers (e.g. a finder2 method), but as this
is no better in breaking the interface for loadable mappers and
duplicates code I forfeited this solution, too.
If somebody could look into the problem and come up with a solution that
preserves the interface to external mappers while allowing the
distinction between keys and values, I'd be more than happy to implement
it.
It might also may make sense to add a new configuration parameter for
the new behaviour of find_user, allowing existing applications to
continue to work with keys being returned instead of values (Feedback
anyone? The comment for find_user actually states that a mapping value
is returned).
In regards to #240 (Allow pattern matching in pam_pkcs11):
I restricted this to only work for mapfiles and the implementation
turned out to be quite simple - it's essentially an 11 line change in
src/mappers/mapper.c - and is triggered by the specification of a fully
anchored (i.e. *must* have initial "^" and *must* end in "$") pattern as
key in a mapfile.
This now allows syntax like
^.*/serialNumber=xxx-xxx-xxx-xxx$ -> username
in all mapfiles.
The patch attached contains the changes for both issues.
Cheers,
Wolf "
commit 564355857ed49a7b6ff8eb646388e944bf36d359
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Aug 13 16:44:58 2010 +0000
Do not use a variadic parameter for pam_prompt. It is not supported on
FreeBSD.
commit 3b237ade4109fa0d345d3d684b86ab2dc93bb20b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Aug 12 22:07:51 2010 +0000
Add a new header file to define strndup if needed.
pkcs11_setup.c: In function ‘scconf_replace_str_list’:
pkcs11_setup.c:73: warning: implicit declaration of function ‘strndup’
pkcs11_setup.c:73: warning: incompatible implicit declaration of built-in function ‘strndup’
commit 5b52cebb4dc133c23f82a04acf947cc57a3a9aad
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Aug 12 21:45:03 2010 +0000
Revert changeset 301 parsing arguments in pam_config.c but skip the
first argument in command line tools.
Thanks to halfline for the patch. Closes ticket #29
commit 203e101db638c17a455efc6f951aabedcd9d286f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jun 12 15:43:46 2010 +0000
release 0.6.4
commit dc7c23a0e2244151784eb6c5b67d2db8b020d731
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jun 12 15:30:46 2010 +0000
translate a string
commit 94ac80b4b132c6005a739513d3b974b2445f36a3
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Jun 12 15:29:04 2010 +0000
regenerate
commit 22e498d5d75bd88f2e09abd0ffc9aa1cac4af514
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jun 8 08:01:32 2010 +0000
Fixes Ticket #26 "Additional check for local X11 Display"
commit fb66d1b73d3cbf121cdd87d88c7926442d1cd2e7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jun 8 07:54:09 2010 +0000
Revert revision 422 since Solaris 10 does not support pam_prompt() with
a variable number of parameters (like printf)
Also remove some cast since Solaris 10 does not have the same prototype
for pam_* functions
GNU/Linux uses "const" parameters but Solaris does not.
commit e2adcb89d6cdc881c6f5a51cea46275395520744
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 7 14:53:17 2010 +0000
Add support of CKF_PROTECTED_AUTHENTICATION_PATH for pinpad readers.
If a pinpad is present the PIN/password is not asked by PAM but by the
pinpad only.
Closes: Ticket #19 "enabled pinpad: confusing keyboard interaction"
commit 31e1d26c35c8af8c8e6a45a00d4cd14c5274582c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun May 30 12:08:11 2010 +0000
Add dutch translation
Thanks to Guy Zelck
commit 0f1581b1e89fb687660901e0badc9c1ca5bcd91f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Apr 20 19:05:17 2010 +0000
add Brazilian Portuguese Translation
Thanks to Anderson Goulart
commit 2473998fb38d045c5511893c63820e9e02aab2f4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 21:02:43 2010 +0000
use #ifdef instead of #if
Fix
pam_pkcs11.c:46:5: warning: "ENABLE_NLS" is not defined
commit 159c471a6c50d0388fa7731742eff7bb228d37b1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 20:53:10 2010 +0000
Use stdlib.h instead of malloc.h (not present on Mac OS X for example)
commit 30ca76abe4a700e177b74a40c3aa27e457d04f78
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 15:21:46 2010 +0000
Closes: Ticket #22 "get_slot_login_required missing from NSS side."
commit 9bff4ad0c7e84d2ccf8a843cf2f1243d013a6633
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 15:17:34 2010 +0000
Fix compiler when used with NSS
algorithm.c:54: error: conflicting types for ‘Alg_get_digest_by_name’
./alg_st.h:50: note: previous declaration of ‘Alg_get_digest_by_name’ was here
commit 5b516d03e217abdc8ff1ade38ae3b01a33e6d570
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 15:10:28 2010 +0000
Closes: Ticket #21 "Update for German translation"
commit c908faef26b2afbbed19209b9c0d87626f373ad4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 15:07:28 2010 +0000
regenerate
commit c7e5ed37e6dd2e40b99a964766d2cf7aac2e4a62
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:54:58 2010 +0000
Release 0.6.3
commit 6e79c826244e5af805181d56ce28690f4e661da7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:52:33 2010 +0000
Fix
uri.c: In function ‘get_from_uri’:
uri.c:595: warning: enumeration value ‘unknown’ not handled in switch
commit 4e8df5e2de9fdc05a0ec7e4dce1126459c1092e6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:49:49 2010 +0000
Fix a potential bug
ldap_mapper.c: In function ‘ldap_get_certificate’:
ldap_mapper.c:601: warning: ‘rv’ may be used uninitialized in this function
commit 182896cb07b4944eb5f8a913a36bf95158652c91
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:47:04 2010 +0000
Directly use pam_prompt() to format the string instead of sprintf()
Fix
pam_pkcs11.c: In function ‘pam_sm_authenticate’:
pam_pkcs11.c:289: warning: format not a string literal and no format arguments
pam_pkcs11.c:358: warning: format not a string literal and no format arguments
pam_pkcs11.c:386: warning: format not a string literal and no format arguments
pam_pkcs11.c:407: warning: format not a string literal and no format arguments
pam_pkcs11.c:428: warning: format not a string literal and no format arguments
commit 8f7a2f239353886dfd6eaca51c7743ff78f0dfcd
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:41:23 2010 +0000
Fix compiler warnings
pam_pkcs11.c: In function ‘pam_sm_authenticate’:
pam_pkcs11.c:622: warning: field precision should have type ‘int’, but argument 4 has type ‘long unsigned int’
pam_pkcs11.c:622: warning: field precision should have type ‘int’, but argument 4 has type ‘long unsigned int’
pam_pkcs11.c:639: warning: field precision should have type ‘int’, but argument 4 has type ‘long unsigned int’
pam_pkcs11.c:639: warning: field precision should have type ‘int’, but argument 4 has type ‘long unsigned int’
pam_pkcs11.c:661: warning: field precision should have type ‘int’, but argument 4 has type ‘long unsigned int’
pam_pkcs11.c:661: warning: field precision should have type ‘int’, but argument 4 has type ‘long unsigned int’
commit 38330a6e6bad47857cd39dda74651e210c3846f0
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:38:23 2010 +0000
Fix compiler warning
card_eventmgr.c: In function ‘signal_trap’:
card_eventmgr.c:302: warning: unused parameter ‘sig’
commit 13e1abd2b2d09008d91daa9797894df7054a7185
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:35:14 2010 +0000
Fix compiler warning
pkcs11_lib.c: In function ‘crypto_init’:
pkcs11_lib.c:934: warning: unused parameter ‘policy’
commit b7422928730153a133a9042c7d76458c91ed5001
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:33:38 2010 +0000
Update a cast to fix a compiler warning
pkcs11_lib.c: In function ‘get_certificate_list’:
pkcs11_lib.c:1520: warning: passing argument 2 of ‘d2i_X509’ from incompatible pointer type
/usr/include/openssl/x509.h:940: note: expected ‘const unsigned char **’ but argument is of type ‘CK_BYTE **’
commit 7bd62b8110e63d21b595a4034dbb40429e5cb0f2
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sat Apr 10 14:31:12 2010 +0000
Use a cast to fix compilers warnings
pkcs11_lib.c: In function ‘find_slot_by_slotlabel_and_tokenlabel’:
pkcs11_lib.c:1264: warning: pointer targets in passing argument 1 of ‘strlen’ differ in signedness
/usr/include/string.h:397: note: expected ‘const char *’ but argument is of type ‘CK_UTF8CHAR *’
pkcs11_lib.c:1264: warning: pointer targets in passing argument 2 of ‘__builtin_strcmp’ differ in signedness
pkcs11_lib.c:1264: note: expected ‘const char *’ but argument is of type ‘CK_UTF8CHAR *’
pkcs11_lib.c:1264: warning: pointer targets in passing argument 2 of ‘__builtin_strcmp’ differ in signedness
pkcs11_lib.c:1264: note: expected ‘const char *’ but argument is of type ‘CK_UTF8CHAR *’
pkcs11_lib.c:1264: warning: pointer targets in passing argument 1 of ‘strlen’ differ in signedness
/usr/include/string.h:397: note: expected ‘const char *’ but argument is of type ‘CK_UTF8CHAR *’
pkcs11_lib.c:1264: warning: pointer targets in passing argument 2 of ‘__builtin_strcmp’ differ in signedness
pkcs11_lib.c:1264: note: expected ‘const char *’ but argument is of type ‘CK_UTF8CHAR *’
pkcs11_lib.c:1264: warning: pointer targets in passing argument 2 of ‘__builtin_strcmp’ differ in signedness
pkcs11_lib.c:1264: note: expected ‘const char *’ but argument is of type ‘CK_UTF8CHAR *’
commit 5eaebe5ed52dcafc4caa9db6768c0202ac4acee6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 8 07:28:32 2010 +0000
Fix typos in comments
commit 3178f05f50fd60bbb2d6aefa1152ba1ac3f0853d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 14:32:52 2010 +0000
generate the example files pam_pkcs11.conf.example and
pam.d_login.example with the correct libdir path
Closes: Ticket #213 "pam-pkcs11: wrong path in
/etc/pam_pkcs11/pam_pkcs11.conf for mappers"
commit f024ddf0baaf3830e9cfbb52015c6161cc0b9786
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 14:09:42 2010 +0000
Add a "quiet" configuration option
Closes: Ticket #25 "Quiet Mode for pam_pkcs11"
commit f0a9a1d16e69dcb290512c24180a163f967949e6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:55:49 2010 +0000
Fix
cert_vfy.c: In function ‘download_crl’:
cert_vfy.c:125: warning: passing argument 2 of ‘d2i_X509_CRL’ from incompatible pointer type
cert_vfy.c:131: warning: passing argument 2 of ‘d2i_X509_CRL’ from incompatible pointer type
commit f857b5bce1abf5f4a0f256e71e70f69e7d1884d6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:54:26 2010 +0000
Fix
cert_vfy.c: In function ‘setup_store’:
cert_vfy.c:347: warning: initialization discards qualifiers from pointer target type
cert_vfy.c:354: warning: initialization discards qualifiers from pointer target type
cert_vfy.c:373: warning: initialization discards qualifiers from pointer target type
cert_vfy.c:380: warning: initialization discards qualifiers from pointer target type
commit d9d2e15afffffab349d1d2548aea4a2ab24ddcaa
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:52:14 2010 +0000
Fix
debug.c: In function ‘debug_print’:
debug.c:63: warning: format not a string literal and no format arguments
commit b65049680d70601180d30008a94276c99c68ae0d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:47:30 2010 +0000
Fix
pkcs11_eventmgr.c: In function ‘parse_args’:
pkcs11_eventmgr.c:231: warning: assignment discards qualifiers from pointer target type
commit 8a3e00a2524de30e5de724f35d82014d344e7c5f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:46:35 2010 +0000
Fix
card_eventmgr.c: In function ‘parse_args’:
card_eventmgr.c:189: warning: assignment discards qualifiers from pointer target type
commit cfaabb84138787d6ac9b7841869bf3f91267d022
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:43:39 2010 +0000
module argument of load_pkcs11_module() is now a (const char *)
Fix
pkcs11_inspect.c: In function ‘main’:
pkcs11_inspect.c:70: warning: passing argument 1 of ‘load_pkcs11_module’ discards qualifiers from pointer target type
pkcs11_listcerts.c: In function ‘main’:
pkcs11_listcerts.c:70: warning: passing argument 1 of ‘load_pkcs11_module’ discards qualifiers from pointer target type
pklogin_finder.c: In function ‘main’:
pklogin_finder.c:72: warning: passing argument 1 of ‘load_pkcs11_module’ discards qualifiers from pointer target type
etc.
commit 2ee11e7fabb63fc3e702ec91a9b08c667aae1256
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:36:19 2010 +0000
Fix
cert_info.c: In function ‘cert_key_alg’:
cert_info.c:815: warning: initialization discards qualifiers from pointer target type
commit 7b9fa6b09c8caa762478b67a0b45cd376e54df4e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:32:07 2010 +0000
Fix
cert_info.c: In function ‘cert_info_sshpuk’:
cert_info.c:694: warning: passing argument 2 of ‘str_append’ discards qualifiers from pointer target type
cert_info.c:708: warning: passing argument 2 of ‘str_append’ discards qualifiers from pointer target type
commit fe4d146b1031d17d270397739321990284752665
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:31:04 2010 +0000
cert_info_sshpuk(): use (const char *) for type to avoid compiler
warning
cert_info.c: In function ‘cert_info_sshpuk’:
cert_info.c:690: warning: assignment discards qualifiers from pointer target type
cert_info.c:705: warning: assignment discards qualifiers from pointer target type
commit 345f104b804c88ab71a106708e186796b273a508
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:28:37 2010 +0000
Change return type of Alg_get_digest_by_name() to avoid a compiler
warning
algorithm.c: In function ‘Alg_get_digest_by_name’:
algorithm.c:74: warning: return discards qualifiers from pointer target type
commit 654e5a82d150b4bdf558d918ace2c0db860b21fd
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:25:49 2010 +0000
Use (const char *) for configuration strings instead of (char *)
commit 3179751e7e1b5f9fff32c189f94e530cb9928500
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:15:16 2010 +0000
Do not use sscanf() to not overwrite the buffers
commit 97771cd0b86d5ae8f96206b5c179a0f85ddd44d9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:11:25 2010 +0000
Use DEBUG_CONFIG to trace the configuration
commit 37f678fb4363b8dd2a1a7960d1e0a2412e7af429
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 13:01:23 2010 +0000
pam_sm_authenticate(): also log the module name that failed to load
commit 43c7cbd53d55700c2af4b03632cba3ff3dc25409
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 7 12:49:53 2010 +0000
Do not cast malloc return value
commit 57b42caedd9619755d4ecb8fce2ca2983e1bf401
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Apr 2 16:47:22 2010 +0000
Correctly initialize initArgs and .pReserved in particular
Fixes Ticket #24 "PKCS#11 Module initialized with incomplete data."
commit ae4aee202086a9711a8a7cae6484f39e9d053345
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Apr 2 13:27:26 2010 +0000
Do not prompt for a username if one is already available.
Fixes Ticket #23
commit d9f0a266849cf7bfef9ccd1215c2b03da039ad10
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Feb 3 17:41:41 2010 +0000
opensc_mapper_match_certs(): PATH_MAX is not defined (unlimited) on Hurd
The correct solution would be to use a dynamic allocation
commit db8ce9747c189637acccb6f08520334b34986f37
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Feb 3 17:39:21 2010 +0000
release 0.6.2
commit 2989c7fb7b1eceb600c427c7a06b46fcf18c193c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun Jan 3 16:32:48 2010 +0000
fix hyphen-used-as-minus-sign
See http://lintian.debian.org/tags/hyphen-used-as-minus-sign.html
commit 869184d64c04f5d14ece76a36eb0cdb80ae80004
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun Jan 3 16:30:39 2010 +0000
fix spelling error
commit 71b360534a6b843116f756fe04f22f6aecb214ca
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Sun Jan 3 16:29:46 2010 +0000
fix spelling error
commit 9dea81ba5276c366bca139a11f7efbbcb6816fe6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Dec 17 11:00:11 2009 +0000
document use_module
commit 47fa4bc41ae620cab934c4284150475ec7f11829
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Dec 17 10:59:49 2009 +0000
use ERR1() instead of DBG1() in case of error
commit a570325060f0c35831cb8ae9b1cf7bdd948ab05f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Dec 17 10:44:59 2009 +0000
use printf() instead of DBG1() to display the certificates even if debug
mode is not used
commit 7670889710515c610f67cbfa013b696d3e77225d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Dec 17 10:33:12 2009 +0000
add an EXAMPLE section
commit d79f79376153e53bf335420e6c1275f8c76f7b17
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Dec 17 09:59:13 2009 +0000
use @PACKAGE_VERSION@ so that configure replaces it by the correct value
commit c59b2ca24869ac8432b36b62c2f43a6939a6e5b5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Dec 17 09:58:33 2009 +0000
generate doc/doxygen.conf
commit 86e8f6d8e6b812adee8534f27c5d2442516db99d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Dec 16 16:46:18 2009 +0000
add missing man pages
commit e822dfc39cca7edd474a707ca93d943e8de42f2a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Dec 16 16:45:46 2009 +0000
add support of "debug" argument
commit 681befb84c3387588104dae12c91dd40bcf682e7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Dec 16 15:50:49 2009 +0000
The manpages do not use #PKGVERSION# any more. No need to convert them
commit 84a42f4eebdf603de4f8b58228647fe90e83dc6c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Dec 16 15:38:10 2009 +0000
link with $(LIBDL)
commit d8a1dae86460aa9bbeba71d27a833186e96aeabd
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Dec 16 15:37:40 2009 +0000
add a check for dlopen() in libdl
commit 5b64c0ac3255a095b0ff7ea62544dcc25b737892
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Dec 3 08:40:22 2009 +0000
"pam_pkcs11 doesn't work with cards with no PIN installed. It tries to
C_Login() whenever PIN is really needed and fails with "C_Login()
failed: 0x00000102".
I've made a patch which corrects this behavior:
* implements get_slot_login_required() function what checks whether
current slot requires login
* makes pam_pkcs11 ask for PIN only if it is needed"
Thanks to Oleg Smirnov for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2009-December/012929.html
commit 547c1b9de63ad016cd88257a14ad10ee687b433c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 6 11:51:09 2009 +0000
use -shared to avoid builing the useless static libraries
Thanks to Diego Elio Pettenò for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2009-October/012598.html
commit e08f826e8076ef39681f63e753263edf60ceba48
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 6 08:08:33 2009 +0000
do not define static library in configure.in but use the .la files in
the Makefile.am
commit 553e4085ee63d03f8becc69aec9ce1a809f73b00
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 6 07:57:54 2009 +0000
Do not use a custom install override rule
Thanks to Diego Elio Pettenò for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2009-October/012587.html
commit 8a2ecec8857452a5471060e3d6c56610cf8f8297
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 6 07:53:19 2009 +0000
use ../pam_pkcs11/libfinder.la instead of directly pointing to .o files
commit 557d0802d40ca91ecd9b4be79fc5814410753c74
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 6 07:52:57 2009 +0000
create a libfinder.la library for tools in src/tools/
commit ab1d8e674de5efba3625d9f7c26f2be7e68ff4f5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 6 07:23:31 2009 +0000
install examples in doc dir instead of pkgdata dir.
Thanks to Diego Elio Pettenò for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2009-October/012587.html
commit a49f1fc3fdd431d0f09890735a3a88badb746ed1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Sep 21 12:08:21 2009 +0000
sync with scconf from OpenSC
commit e3ec22e4ca7092b9abc2bf67f47631ebb5cec4f8
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 17 07:55:14 2009 +0000
find_slot_by_slotlabel(): also check the slot is present
Thanks to Aro RANAIVONDRAMBOLA for the patch
http://www.opensc-project.org/pipermail/opensc-user/2009-August/003231.html
commit c829e240997315448b6d249c27533330533d793b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 2 12:32:55 2009 +0000
card_eventmgr.c:80: warning: nested extern declaration of ‘environ’
commit 5ebce8eb6f053f568fccb69e590e51deb7cc2fa8
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 2 12:32:18 2009 +0000
pkcs11_eventmgr.c:118: warning: nested extern declaration of ‘environ’
commit 506d4876df4de8f62347436dce447e66ece18788
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 2 12:28:36 2009 +0000
use the standard format for NAME section
W: libpam-pkcs11: manpage-has-bad-whatis-entry usr/share/man/man1/pkcs11_eventmgr.1.gz
commit 2948a2e5d1185016525d7ef4a5de45c200bc028f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jul 6 07:49:46 2009 +0000
cert_info_sshpuk(): avoid a buffer overflow followed by a crash
Thanks to Joshua Kinard for the bug report
commit a97547ec12e0ea680c372bcb49def0a963bd708c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Jul 3 07:52:56 2009 +0000
correct typos and remove spaces at end of lines
commit b1a4745ac82effea1d0a6c62f1e643b82f103d85
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Jun 12 08:09:46 2009 +0000
release 0.6.1
commit 2c1104cbc052859044b5f7ac77a08f60c8404ffb
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Jun 12 08:05:29 2009 +0000
update Doxygen comments
commit 2427543a679d7af6ed3d006bb34048e77e312680
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Jun 12 07:55:51 2009 +0000
updated using doxygen -u
commit 9819302be7820701a0c87d8cdff9a1e10251c5d5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Jun 12 07:51:38 2009 +0000
update
commit f8402014596d0014d98c5fb1e5df83bedb9fc9c8
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Dec 19 10:21:48 2008 +0000
BN_append(): avoid a possible memory leak (detected by cppcheck tool)
commit 8d87a3373ecc57aada7b5749cee2eda64cdd045e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 6 14:48:39 2008 +0000
ldap_get_certificate(): in case NSS is used
- use CERT_NewTempCertificate() to create a certificate
- use CERT_DestroyCertificate() to free a certificate
thanks to Robert Relyea for the idea
http://www.opensc-project.org/pipermail/opensc-devel/2008-November/011418.html
commit fba80e606c8d355a9076d20e9d41f0a52d0eeac9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 6 14:28:46 2008 +0000
remove trailing tab and space characters
commit 0d9ba2c8b9001fbee4dcc64a193fbbd2702b6da7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 6 13:41:43 2008 +0000
ldap_get_certificate(): check the value of ldap_x509[rv] instead of
ldap_x509. The previous test was never true
commit 439975cd2678fe5d9cd0cbe7be3462635f2770fa
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 6 13:39:37 2008 +0000
ldap_get_certificate(): typo in log message
commit d20232a09aedeb556bca933c26da2923b4101f4d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Nov 6 13:39:05 2008 +0000
ldap_get_certificate(): check returned value of malloc()
commit 9c46072511f4a4095be77a1eba047d7237d189d6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Nov 4 10:08:49 2008 +0000
use == instead of CERT_CompareCerts() to compare two NSS certificates.
Thanks to Robert Relyea for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2008-October/011406.html
commit c2b45fd31cbabb730e93595e23caf07f26f40a02
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Oct 24 08:22:13 2008 +0000
common/cert_st.h: define CERT_cmp to be either CERT_CompareCerts for NSS
or X509_cmp for OpenSSL
mappers/ldap_mapper.c: use CERT_cmp() instead of X509_cmp() the same
code should work with NSS or OpenSSL
commit b787757b1aa7cb9d0e7e7e5d25254df73d270373
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Oct 16 08:08:05 2008 +0000
declare local function password_passthrough() static
pkcs11_lib.c:169: warning: no previous prototype for 'password_passthrough'
commit 13f79b66962ce74fd6e56b771c2d10759a94a1d4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Oct 16 08:05:49 2008 +0000
find_slot_by_number(): slot_num is unsigned int so to not check for
slot_num >= 0
pkcs11_lib.c:353: warning: comparison of unsigned expression >= 0 is always true
commit 946a97f2434fc37c83fbc9fdbc95a5c18950c869
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Oct 16 08:03:48 2008 +0000
opensc_mapper_match_certs(): local variables are only used if NSS is not
used
commit 8df09c90db50b713340f6521803e2ebe68a00f37
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Oct 16 07:59:25 2008 +0000
declare two functions static to avoid no previous prototype warnings
commit e3c1d397acf4fec69bbedc90df3e2b986b759867
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Oct 16 07:56:01 2008 +0000
include .h files to avoid implicit declaration warnings
Thanks to Stanislav Brabec for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2008-October/011390.html
commit 7b622e68138ce8c2b99157b0aa62a16dacb34c6a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Oct 16 07:47:48 2008 +0000
pkcs11_lib.c:295: error: conflicting types for 'find_slot_by_number'
pkcs11_lib.h:34: error: previous declaration of 'find_slot_by_number' was here
commit a1909a1e3f5ea2d336c8d3d938519fef43248124
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 14 07:59:25 2008 +0000
pkcs11_lib.c: In function 'find_slot_by_number':
pkcs11_lib.c:1143: warning: comparison between signed and unsigned
pkcs11_lib.c:1150: warning: comparison between signed and unsigned
commit 4d131e190fd45e0ad4c944d888a408f9e9cf4dc5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 14 07:56:38 2008 +0000
rename index in idx
pkcs11_lib.c:1212: warning: declaration of 'index' shadows a global declaration
/usr/include/string.h:304: warning: shadowed declaration is here
commit 5484e5e2f648091d0f548654038dd12b9e164935
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 14 07:52:56 2008 +0000
cert_info.c:841: warning: pointer targets in passing argument 1 of
'bin2hex' differ in signedness
commit 46454e9674e7ba5f919d9986046731efb88be50b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 14 07:47:15 2008 +0000
Passing slot_description= and token_type= on the command line was not
handled correctly (crash)
commit 3cc71f802802692c836342c12c6b55609d5fcc9c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 14 07:42:10 2008 +0000
pkcs11_lib.c:124: warning: implicit declaration of function 'isspace'
commit bfa342290d0b9b55419881b96bbd0884fa8ad0e1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Oct 14 07:36:46 2008 +0000
Allow to configure the token name in the different PAM prompts. Default
value is "Smart card". See token_type= configuration in
etc/pam_pkcs11.conf
Thanks to Huie-Ying Lee for the patch.
commit ce8c3f762977400f1f144d62b22d6a72e3e1c5c6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Sep 26 08:38:11 2008 +0000
add missing secutil.h
Thanks to Stanislav Brabec for the patch
commit a6897e175541ae4b5a008908c6194265d99c8350
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Sep 26 08:34:00 2008 +0000
correctly close ] and )
commit 4c0e0d472c41f3285823643e2ef39ef341d25224
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Sep 26 08:10:46 2008 +0000
Patch from Jacob Berkman improves Microsoft UPN OID support.
Thanks to Stanislav Brabec
http://www.opensc-project.org/pipermail/opensc-devel/2008-September/011336.html
commit 708322cd9d51aff3515658d48f35c0831ce4f3f7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Sep 26 08:00:41 2008 +0000
add NSS (Network Security Service) config sample
commit 98b7d19a26338cc1ae0e7cdc24df6063f8cf0b24
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Sep 26 07:55:26 2008 +0000
Add support of domainnickname.
Thanks to Jacob Berkman for the patch and Stanislav Brabec for the
forward
commit 4e6d2a5b55f119917193f4ee728a671468ead2a6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Sep 26 07:50:41 2008 +0000
add a missing ; at end of line
Thanks to Stanislav Brabec for the patch
Closes OpenSC ticket #154
commit a89a253e54da2d807434dd0cd9eea1045e990a93
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 25 07:53:26 2008 +0000
load_pkcs11_module(): do not check that the group ownership of
libpkcs11.so is 0. It is 2 on Solaris.
Thanks to Huie-Ying Lee for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2008-September/011334.html
commit 11d74021770ab4b1d6d1772b841d69f2afce31de
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 16 08:33:56 2008 +0000
Use daemon() only if supported by the platform (it is not available on
Solaris)
Thanks to Huie-Ying Lee for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2008-September/011326.html
commit fe2b6d06b36d1cbe5469db9612811dd09ec1b8d1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri Sep 12 08:47:01 2008 +0000
Patch to use identify a token by its slot description instead of slot number
Thanks to Huie-Ying Lee for the patch
http://www.opensc-project.org/pipermail/opensc-devel/2008-September/011317.html
======================================
Problem
======================================
Currently, the pam_pkcs11 module uses slot_num for the slot/token selection.
However, this is not safe because there is no guaranteed ordering of slots
returned from the PKCS#11 C_GetSlotList() function, according to the RSA
PKCS#11 specification.
On Solaris OS, the libpkcs11 library uses plug-ins to provide the slots. An
administrator can install or uninstall a plug-in by using a utility command
called "cryptoadm" on Solaris. Therefore, a particular slot may be associated
with different slot numbers on different systems or even on the same system on
different runs.
======================================
Solution
======================================
To address the above issue, our solution is to replace the "slot_num" entry
with a "slot_description" entry in the "pam_pkcs11.conf" configuration file for
the slot/token selection as illustrated below.
- pam_pkcs11.conf -
pkcs11_module default {
module = /usr/lib/libpkcs11.so;
description = "Solaris PKCS#11 Cryptographic Framework library";
#
# Which slot to use. The slot is specified by the slot description.
# For example, slot_description = "Sun Crypto Softtoken".
#
# An administrator can use the "cryotoadm list -v" command to find
# all the available slots and their slot descriptions. For more
# information, see the libpkcs11(3LIB) and cryptoadm(1m) man pages.
#
# The default value is "none" which means to use the first slot with
# an available token.
#
slot_description = "none"
...
}
The slot_description field will be used to specify the slot to be used. Its
value should be the slot label for the slot, which is basically the same as the
slotDescription string in the CK_SLOT_INFO structure returned from the
C_GetSlotInfo() function.
In the original slot_num design, when slot_num is 0, it means to use the first
slot with an available token. To provide a similar functionality, an
administrator can specify slot_description to be "none", which also means to
use the first slot with an available token.
commit d3c17dfcd2f7a8b89c479d2d5a2ca0a6589cc67a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 9 15:09:19 2008 +0000
find_slot_by_number: complete patch in revision 330
commit 92d9f8cf0cb50cff39ec6e92c4247e02e7234afe
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 9 15:07:11 2008 +0000
find_slot_by_number(): BUG: the slot index is slot_num and not i
thanks to Huie-Ying Lee for the patch
commit bce462ddaba01a66cff4f1712acb23c272ba7741
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 9 15:04:00 2008 +0000
pk_configure(): correct a typo "slot_nume" -> "slot_num"
Thanks to Huie-Ying Lee for the patch
commit d3dc1e567911b29fb276b56414c45e057704e744
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 9 14:56:44 2008 +0000
upgrade (copy from OpenSC)
commit 883cf989203c5579aedddecfd9cf2b582a65cb05
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Wed Aug 27 09:27:34 2008 +0000
fix script for wiki export.
commit b09e9d1c86d5415c13209dd3795cf02f3a60691b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Aug 19 07:48:58 2008 +0000
Provide strndup for platforms without this function (Solaris)
commit 6a72d499e32efafd79a02137d6d00362b7f12cd7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Aug 12 06:38:36 2008 +0000
do_init(): typo: use ldapdefport instead of defport
Patch from Huie-Ying Lee
http://www.opensc-project.org/pipermail/opensc-devel/2008-August/011239.html
commit 18d5c805bd1b2500837f4b1d391611ae9d4b756b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Aug 12 06:32:52 2008 +0000
protect variables with "" before checking the variable length
Patch from Huie-Ying Lee
http://www.opensc-project.org/pipermail/opensc-devel/2008-August/011239.html
commit 4970a1fba971add72874c09f54061d58422fe602
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Fri May 30 13:50:27 2008 +0000
avoir a double free error when a reader is disconnected and reconnected.
Thanks to Frédéric Combeau for the patch
commit 53b48080da7f605ccdaf7362e513e6413c455e17
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Mar 31 09:22:31 2008 +0000
use confdir instead of the hardcoded value /etc/pam_pkcs11
commit 9e3d1952e510cceb73412f26636852e63ce79be5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Mar 31 09:16:55 2008 +0000
parse_config_file(): also log the error message
commit 33dc24a35bc675c7493776480dd2fbf84dfca38b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Mar 25 14:48:35 2008 +0000
add support of CONFDIR instead of the hardcoded "/etc/pam_pkcs11/"
commit 7ca97ae5870708c87f00394ff60a8da4c3d5f189
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Mar 25 14:48:00 2008 +0000
add --with-confdir=DIR to configure the directory containing
pam_pkcs11.conf, card_eventmgr.conf and pkcs11_eventmgr.conf (default
/etc/pam_pkcs11)
commit 9a8f1bcee82800b1e71853ea1fa7b0db32cb5b4f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Mar 20 09:11:20 2008 +0000
use 0x%08lX instead of %x to format a PKCS#11 error code
commit 817a878905d739a3b8ffecab1d071863df2f71c6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 10:23:40 2008 +0000
doxygen.conf is used by generate-api.sh so api/index.html target must
depends on it
commit c9a5127159f5f6df31881f6f5375fb263ce812af
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 10:16:11 2008 +0000
add po/remove-potcdate.sin
commit ef6038dca4bc5eeed3697067082cc5939f9eeb1c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 10:10:49 2008 +0000
add gettext M4 macros
commit ca603dc4cc96accf3ea22449ecc9cb98a2ab927f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 10:08:55 2008 +0000
use gettext 0.17 instead of 0.16.1
commit db2e965359014d5836d4f1ec957ba9bddb5d564a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 10:03:09 2008 +0000
add po/remove-potcdate.sed
commit 9c4e9d039c970d04b08a6858a0be3129fef6c424
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 10:00:43 2008 +0000
add po/Makefile.in.in from gettext 0.17-2
commit 6ea5cd0e31cbbcc1c4f68cb9233651b7cf5a2e52
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 09:59:36 2008 +0000
add config.rpath from gettext 0.17-2
commit f05f31013fc1d7f2b426d97e64991de8fa4478b9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 09:54:32 2008 +0000
add void as parameter for thats_all_folks() definition
card_eventmgr.c:64: warning: old-style function definition
commit a2529e6e4cd00d01ecde7a2f97a0896f1277d466
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 09:53:37 2008 +0000
add void as parameter for parse_config_file() and get_a_token()
pkcs11_eventmgr.c:193: warning: old-style function definition
pkcs11_eventmgr.c:354: warning: old-style function definition
commit 80a404b54e5d91ed8561dff474c1ae5426214cd5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 09:51:08 2008 +0000
add void as parameter in parse_config_file() definition
card_eventmgr.c:157: warning: old-style function definition
commit 20f84af6581b2a7309ec982bfdb9c018614ec22a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 09:39:21 2008 +0000
#define LDAP_DEPRECATED 1 so that deprecated functions are declared.
The code should be updated to avoid the deprecated functions.
See ticket #18
commit 992ea49e96535ed6ac227d5a6da612ccde324afc
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 09:17:13 2008 +0000
declare is_spaced_str() as static
pam_pkcs11.c:62: warning: no previous prototype for ‘is_spaced_str’
commit f37fb04d37a99973efaa191693e802fd7f2cfaf3
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Feb 25 09:13:00 2008 +0000
add void in the declaration of get_debug_level
debug.c:31: warning: old-style function definition
commit c5eb2a47d7d6ded2c76175068f1a8e5b8f7a6f3e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 13 09:00:31 2007 +0000
add German (de) l10n
Thanks to Peter Winterer
commit 0bd19f3469b0fe025f9a230d01dbb68afe0ddd24
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 13 08:59:52 2007 +0000
update using "make update-po"
commit 7803181c768fb9656f13fa338e464db6ffbf4aba
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 11 09:14:54 2007 +0000
add Russian l10n
Thanks to Sergio
commit 31a687dc136f134353e64d01bd4cb56c5de3597b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 13 08:55:52 2007 +0000
arguments starts at argv[1] and not argv[0]
Avoids a warning message: "argument pkcs11_inspect is not supported
by this module"
commit 81e32c5ce8069a3496393277ffbbb725e6fdc937
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Jun 14 21:28:40 2007 +0000
add Polish (.pl) translation
Thanks to Jakub Bogusz
commit f77275bff18086ba30d7903b9cda64a877b5196f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Jun 14 21:27:51 2007 +0000
remove a duplicate config.rpath in EXTRA_DIST
commit a2780245292de5f6132f1117a8299eceb719b96a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 11 12:19:59 2007 +0000
release 0.6.0
commit 4688e38b3c7404256091c608973438d32b4375cc
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 11 12:19:25 2007 +0000
update to version 0.6.0
commit d4843f20a684eb89fb4c87c06838fb9e603a2571
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 11:22:25 2007 +0000
declare pname as unsigned to avoid:
pkcs11_setup.c:436: warning: comparison between signed and unsigned
pkcs11_setup.c:454: warning: comparison between signed and unsigned
commit bd590d3d00da885f36a9f648a41ebecc0868fac2
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 11:20:44 2007 +0000
declare local functions static
commit 5caf97e7444a3683a300deebb7c3a38a10ed8637
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 11:18:20 2007 +0000
pkcs11_setup.c:44: attention : duplicate ‘const’
commit e8688309c86474e75baa12c13de79d4081248ff0
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 11:17:05 2007 +0000
execute_event(): change parameter type from char * to const char *
commit 708df71c5da101386a9193de18961bed6cd4362b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 11:15:57 2007 +0000
remove unused (and duplicate) global variable expire_count
commit 0468c20d561ea44f2b3b8cbe98492d6b1a484efc
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 11:05:46 2007 +0000
declare local functions static
commit 2156720a381e529b23501dbf7aafbd5c49b57bba
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 10:02:23 2007 +0000
pklogin_finder.c:37: attention : ‘user’ may be used uninitialized in this function
commit a01af4d9a393b720c02ecfd3d7830be23eb5c5a7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 09:55:45 2007 +0000
opensc_mapper_match_certs(): #include <openssl/pem.h> to avoid:
opensc_mapper.c:103: warning: implicit declaration of function 'PEM_read_bio_X509'
opensc_mapper.c:103: warning: initialization makes pointer from integer without
a cast
commit 4f9044be10f9eaf84913e2b0fc0095e8c26001fa
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 09:50:11 2007 +0000
warning: ISO C90 forbids mixed declarations and code
commit f5332c4cd3a67d5935981652c63e46cf9fd91fad
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 09:43:53 2007 +0000
ldap_add_uri(): declare the function static
ldap_mapper.c:549: warning: no previous prototype for 'ldap_add_uri'
commit 4d76b3c777e65da386b8630c55b62aef6ee59ea6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 09:42:22 2007 +0000
do_open(): rename parameter ssl_on to ssl_on_local to avoid:
ldap_mapper.c:373: warning: declaration of 'ssl_on' shadows a global
declarationldap_mapper.c:108: warning: shadowed declaration is here
commit d62087db4e6ba0b3a53adc679ca84e22cb4c2a39
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 09:39:25 2007 +0000
use C instead of C++ comments
warning: C++ style comments are not allowed in ISO C90
commit 024ed3c7a62c399f89f96cdca45a9a086fbd75b7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Jun 6 09:29:45 2007 +0000
BN_append(): only free(data) if data has been allocated
commit 55c807d9f3276b529fae6379f784bd9865dd84cd
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 08:47:26 2007 +0000
add french l10n
commit dcc267b8f3a8977f8244a2818803f4dca407afc6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 08:28:40 2007 +0000
sync two texts to use the same l10n string
commit a33358b54f1f6fb60dda9983f74e364b3f460a0a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 08:26:38 2007 +0000
set svn:ignore property
commit cbba717e77001672cc0949d17a104932ddec5445
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 08:25:21 2007 +0000
update
commit c1ab2e8c426fe4db846d60cea924711b5d29917d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 08:19:34 2007 +0000
distribute config.rpath
commit 3424181b2161a35c7e597e6d0abd58af6528885d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 08:09:14 2007 +0000
NSS patch part 3 of 3 from Robert Relyea: l10n support
commit 1e45aca5f36e6593f04e8625ece03e6096db2427
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 07:09:32 2007 +0000
generate a distribute ChangeLog.svn
commit 934f8762669b87ae7d46f05d8d90f4321d250f0b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 07:04:41 2007 +0000
update svn:ignore
commit 7e0449035c51c47783896a4f1212d0d2d9e5c6b6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 06:59:56 2007 +0000
set svn:ignore properties
commit 2199d1762238918ddcb634d24d0eb87e11a99384
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 22 06:48:56 2007 +0000
new file from pam_pkcs11 NSS patch part 2/3
I just forgot to commit it with revision 270
commit 0e9be16e47207456b625caf8816fc69b21bc0884
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon May 21 08:22:00 2007 +0000
pam_prompt() is only available on recent PAM versions.
check if security/pam_ext.h exists and provide our own pam_prompt()
function if not.
Thanks to Robert Relyea for the patch
commit f067b4f61cab2de2fb68340117140d38a7a218de
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon May 21 08:19:49 2007 +0000
typos in comments
commit 7dd9466105f30c7b6fe9c4b7de936c04a2fcaf24
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon May 21 08:13:00 2007 +0000
pam_pkcs11 NSS patch part 2/3 from Robert Relyea
http://www.opensc-project.org/pipermail/opensc-devel/2007-April/009751.html
Here's patch installment 2 of 3.
This patch adds some new semantics to allow pam_pkcs11 to play nice in
both command line and gui applications. The heart of this change adds
three new configuration options.
card_only:
1. If card only is set, pam_pkcs11 does not prompt for the user name
if the token is inserted, but gets the user name from the token.
2. If a token is inserted, it must be used to log in with, failure to
unlock the token, or validate the certs will cause login to fail.
3. If we logged in using a smart card, we must now authenticate using
that same smart card.
4. card_only is required to activate the remaining 2 options. If
card_only is not set, the current pam_pkcs11 semantics apply (with the
exception of some prompt name changes and the environment variables
described below).
wait_for_token:
wait_for_token is only meaningful if card_only is set.
if wait_for_token is set, then pam_pkcs11 will block waiting for an
appropriate token to be inserted. An appropriate token is:
1) a token that is inserted in the slot specified for login in the config
file (if no slot is specified a token inserted in any slot).
2) a token which matches the token used to log in initially. (only applies
if you are logged in and you used a token to do so).
screen_savers:
is a list of screen saver services. This list is only parsed if card_only is
set. Basically the screen saver will bypass pam_pkcs11 if a token was not
used to login (The basic idea is you always unlock the screen saver with
the same mechanism you used to login).
The other major change is the addition of new environment variables:
PKCS11_LOGIN_TOKEN_NAME - the name of the token used to log into the system.
PKCS11_LOGIN_CERT_ISSUER - the issuer of the cert used to log in
(rendered as a human readable string).
PKCS11_LOGIN_CERT_SERIAL - the serial number of the cert used to log in
(rendered as colon separated hex value).
These environment variables are set at initial login.
pam_pkcs11 uses PKCS_LOGIN_TOKEN_NAME to determine whether or not it
needs to use a specific token to log into.
screen savers use this environment variable to determine
if it needs to kick in on token removal (this allows screen savers to be
picky about when to kick in -- they don't have to kick in if you insert or
remove a token that wasn't used to log into).
pam_krb uses the PKCS11_LOGIN_CERT_ISSUER and PKCS11_LOGIN_CERT_SERIAL to
determine which specific certificate was used to login in (issuer/serial
number uniquely identifies a certificate).
Typical usage for the patch:
For a normal (card_only) case, your pam line would look like:
auth [success=ok authinfo_unavail=2 ignore=2 default=die] pam_pkcs11.so
For the case where you want to require the smart card as part of the
authentication, your pam config line would look like:
auth [success=ok ignore=2 default=die] pam_pkcs11.so wait_for_card
If you share your pam_config file with all our services, you can restrict
which services require smart card login with a pam_succeed_if before your
pam_pkcs11 line:
auth [success=3 default=ignore] pam_succeed_if.so service notin
login:gdm:xdm:kdm:xscreensaver:gnome-screensaver:kscreensaver quiet use_uid
--------------------------------------------------
The patch itself, file by file:
src/pam_pkcs11/pam_pkcs11.c -
Most of the patch is in here. The implementation of the environment
variables and new options are in this patch. In addition to the these,
the patch has the following change:
1) a bug fix for passing the password on in the pam_stack (required to
pam_krb to successfully implement pkinit).
2) use the pam_syslog() function instead of syslog().
3) use of pam_prompt to allow gui apps to display important information.
src/pam_pkcs11/pam_config.[ch] -
parse the new options in pam_pkcs11.conf.
src/tools/pkcs11_setup.c -
src/tools/Makefile.am
This is a new tool to allow command line editting of pam_pkcs11.conf and
pkcs11_eventmgr.conf. It only supports adding insertion/removal actions and
changing the default token. We don't actually use it any more, but it
may have utility to others. I think the command may need some work to be more
general.
It's purpose is to allow perl/python/your favorite scripting language access
to display and modify portions of the pam_pkcs11.conf file. (Feel free
to drop it if you like, I've included it for completeness).
src/tools/pkcs11_eventmgr.c -
bug fix for a crash if module loading fails.
src/common/cert_info.c
Add the ability to fetch the certificate serial number when using the
open ssl library.
src/common/pkcs11_lib.[ch]
Add find_slot_by_number_and_label() which optionally adds the token name as
part of the slot selection criteria. Used by pam_pkcs11 in the case we are
authenticating after we have already logged in.
Add wait_for_token() which waits until an approriate token is inserted. Used
to implement the wait_for_token option.
src/common/strings.c
Fix bug in bin2hex where it would trash the heap if asked to output a string
for a zero length buffer.
commit ab63c91ff71a4c9cdb576fed0abc7dcf5ee37186
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 15 07:18:24 2007 +0000
C_Initalize should be called after each fork
The pkcs11_eventmgr first C_Initialize then becomes a daemon... The
PKCS#11 standard states that after fork the user must call C_Initialize
again, in order to allow proper library initialization at new process.
Also, don't quit on major errors... try to reinitialize.
Closes ticket #14. Thanks to Alon Bar-Lev for the patch
commit d04a309b01ebf839d4717151ddc3c6d32600ba4b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 9 08:48:00 2007 +0000
ldap-patches from Sandro Wefel
http://www.opensc-project.org/pipermail/opensc-devel/2007-April/009764.html
which offers:
- support for more than one LDAP server as fallback system
- support of secure connection (SSL+TLS) because someone may use simple
authentication with username and password
- multiple certificates per attribute
- LDAP-URI support
- selection of base, one-level or subtree search
- timeout support and a somewhat enhanced documentation.
commit 659537846a75bfdecf6be2466a077364bad7b3b5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 9 08:15:07 2007 +0000
typo in debug message
commit 9d67858a6c5ea083a978c0e10f1e87762d0ae4c6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 9 08:13:38 2007 +0000
typo: command line argument was checked against "pcs11_module=" instead
of "pkcs11_module="
commit 95ce60653d29b6e5adad3b1e2ca90934f2636c0a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 9 08:11:47 2007 +0000
typo in a debug message
commit c1e98700c31ebea6a69c05252e22df6f43cd75b3
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 14:14:49 2007 +0000
#include <stdio.h> de declare sprintf() and sscanf()
commit 83375ac3459d30dcf9756eaaf5f635a71656fa86
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 14:12:19 2007 +0000
use ERR() instead of DBG() to log errors so they are displayed (in red)
even if debug is not used
commit f338dc63a65ace8981ed5ad14e5514af4f82ac99
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 14:11:12 2007 +0000
log the error "Remote login (from %s) is not (yet) supported if DISPLAY
is not local"
commit 11f016aa0a746b39c5ee6abc4f2991d5c802e983
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:53:12 2007 +0000
use #ifdef instead of #if to avoid a
pkcs11_inspect.c:96:5: warning: "HAVE_NSS" is not defined
commit 53696c8ebbd017f14de2fa0869fc12e89f28dded
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:45:17 2007 +0000
declare local functions as static
commit 7839fee0fc9c13de8b752399c86d94dbd2dd5610
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:41:32 2007 +0000
display_config() is defined but its use is commented so also comments its
definition
commit 9d74ad25d550a9deeaab951e0df10dabbf6af810
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:40:05 2007 +0000
declare display_config() and parse_config_file() as static
commit 293b73ac2f84e2c823bfeb06c952d01b3136e1b6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:32:49 2007 +0000
get_mapped_entries(): remove a duplicate variable declaration
generic_mapper.c:75: warning: declaration of 'res' shadows a previous local
commit b043c04f4b673f928b7c8342eba3e2f04d3b066e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:31:04 2007 +0000
digest_mapper_module_init(): initialise a variable
digest_mapper.c:111: warning: 'hash_alg_string' may be used
uninitialized in this function
commit 1b5ee12f9d1edcc2968c6ae67f0a334acb1a5bca
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:22:28 2007 +0000
crypto_init(): add a missing return value
commit 784c970ba13fcf460744307d9c5415aaa835b4b3
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:21:49 2007 +0000
remove 3 unused variables
commit 3e564e713dffcedbff9a8ff5e995cefaf3841ba0
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:20:44 2007 +0000
load_pkcs11_module(): rename variable C_GetFunctionList to
C_GetFunctionList_ptr to avoid a compiler warning
pkcs11_lib.c:640: warning: declaration of 'C_GetFunctionList' shadows a global declaration
rsaref/pkcs11f.h:59: warning: shadowed declaration is here
commit ec7226fd157e7c53f3cd3d752f7cf43bfa05d7ef
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:15:07 2007 +0000
add a const to avoid compiler warnings
commit d2beb7be3f82198d714918f5cef7a3f06b3e412b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:09:52 2007 +0000
debug_print(): declare t as (const char *) to avoid a compiler warning
commit 28b456ecc398131da85d8a7e3725a57d77d5f277
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 13:08:50 2007 +0000
#include <unistd.h>
debug.c:38: warning: implicit declaration of function 'isatty'
commit fc90533aed7be1fe1661720e9f3c1d8dab8f0ec1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 12:55:33 2007 +0000
cert_info_upn(): remove two unused variables
commit 702a647345c2fc6b07d051ceea29b24dbbfb186b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 12:54:04 2007 +0000
setup_store(): declare the function static to avoid a compiler warning
cert_vfy.c:321: warning: no previous prototype for 'setup_store'
commit 82c2bcf96011b894edd7ebfe3e433f1bbbd7421a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 12:51:16 2007 +0000
set_error(): use const char * to avoid compiler warnings
commit 59b04dd5b34fa69320e93947ce978e91b913a8a1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 10:09:12 2007 +0000
debug_print(): use const char * for file and format arguments to avoid
compiler warnings
commit 00c0416cbf834ef0ba51955aeef84504494cee11
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 10:07:57 2007 +0000
buf_eat_till(): change third argument to const char * instead of char *
to avoid sclex.c:128: warning: passing argument 3 of 'buf_eat_till'
discards qualifiers from pointer target type
commit bee3b51174bb3291c10a7b1f338891ebe028a513
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Apr 12 07:13:53 2007 +0000
add missing new files for the NSS patch included in revision 238
commit 5085d1dcff514e59a03c72e017b13187f230dbb7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 11 13:58:19 2007 +0000
#include <nss/secmod.h> to avoid compiler warnings
commit fbe49aed331f6c34aebb148797086c32fd94995b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 11 13:51:20 2007 +0000
use AC_HELP_STRING() to format the help message
commit fb43163bb851931f4a367a4e369bb6d8ed551df6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 11 07:22:08 2007 +0000
pkcs11_eventmgr.c:502: attention : passing argument 2 of
‘load_pkcs11_module’ from incompatible pointer type
use &ph instead of ph
commit 657395da143ce8c532c66a53741bad2c77732366
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 11 07:16:04 2007 +0000
pam_pkcs11.c:393: warning: label 'auth_failed' defined but not used
commit c4af4deec50a024bca17285807c3d7789ff66d1c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 11 07:13:56 2007 +0000
digest_mapper.c:114: warning: assignment discards qualifiers from
pointer target type
commit 3b77e81207c6102bd5997c1137afc4e087312d96
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 11 07:04:53 2007 +0000
NSS patch from Robert Relyea
http://www.opensc-project.org/pipermail/opensc-devel/2007-April/009724.html
------------------------------------------------------------------------
Introduction to the pam_pkcs11-nss.patch
This patch adds compile time support for the NSS crypto libraries. It
optionally replaces the raw PKCS #11 operations and open SSL certificate
processing with functionsprovided by the NSS crypto libraries. This change is
controlled by a configure option, '--with-nss' or '--without-nss'.
--without-nss is the default. This package requires nss 3.10 as a minimum.
When --with-nss is selected, pam_pkcs11 can support the following:
1) multiple simultaeous pkcs #11 modules used for authentication. NSS already
handles multiple smart card handlers running at the same time. This means you
can configure your box to log in with both CAC and pkcs #12 tokens by loading
both sets of modules. This support must be configured in pam_pkcs11, otherwise
NSS will only use the user selected pkcs11 module, same as the current direct
to pkcs #11 support.
2) Optional OCSP support. This support is built into NSS already. If you
compile --with-nss, you can simply turn it on.
3) with --with-nss, pkcs11_eventmgr automatically uses C_WaitForSlotEvent for
those tokens that support it, and pull for those that don't. (NSS has this
support built in).
4) with --with-nss, any cert key type NSS supports will work correctly (RSA,
DSA, ECDSA, etc).
5) nss automatically supports part of the certificate chain stored on the smart
card. This allows you to store a single root certificate in the database and
keep the intermediates on the token itself.
6) src/common/rsaref is not need to build any of pam_pkcs11 (if --with-nss is
used).
Other differences when --with-nss and --without-nss:
1) The crl policy is ignored. NSS handles crls automatically already. It
uses standard external tools to keep crls up-to-date.
2) The tools will only display user certs, that is certificates for which the
token claims to hold the private key for.
The patch itself
The changes in this patch can be categorized in the following broad categories:
1) build changes.
2) interface changes to make the crypto operations more generic.
3) implement the NSS versions of the base crypto functions.
Changes by file
./configure.in:
1. switch between the nss module and the openssl depending on the state of
--with-nss. (openssl is the default).
2. added environment variables CRYPO_CFLAGS and CRYPTO_LIBS
3. added the AM conditional HAVE_NSS
./src/common -- This is where most of the NSS specific code lives. Basically
the following interface changes were made:
./src/common/pkcs11_lib.c ./src/common/pkcs11_lib.h
cert_object_t and pkcs11_handle_t were made opaque handles. Applications no
longer have direct access to their member functions members are accessed
through accessor functions. These new accessor functions are:
find_slot_by_number: Takes a pkcs11_handle_t, an input slot number, and
returns a generic slot number and success for failure. The input slot number
is the same 'ones' based index into the SlotList. The generic slot number is
library specific (NSS now returns the slotID, the non-NSS code returns the
'zero' based index into the SlotList). If the input slot number is zero, the
first present smart card is returned.
get_slot_label: takes a pkcs11_handle_t and returns the label for the
currently opened slot.
get_X509_certificate: takes a cert_object_t and returns the X509 Cert. NOTE:
the X509 certificate itself has been made into a generic handle which could
be either an openssl X509 or an NSS CERTCertificate. see cert_st.h for more
info.
crypto_init: This function is called to set up the crypto system. It takes
a pointer to the cert policy to help setup. While not exactly an accessor
function, it is new.
In addition to these accessors, the following existing functions have changed:
load_pkcs11_module: now allocates a pkcs11_handle_t and returns it. Since
pkcs11_handle_t's are opaque, applications no longer know how big they are,
and therefore can't allocate them from the stack.
get_certificate_list (was get_certificate): returns an array of pointers to
cert_object_t's. unlike the short-lived get_certificate_list in the branch,
this function actually operates as an accessor function. The returned
certificate list is still 'owned' by the pkcs11_handle_t. Subsequent calls to
get_certificate_list will return the same array as the previous calls. The
array is freed automatically when the pkcs11_handle_t is closed (just as it
is in the original base code). This change was necessary because
pkcs11_handle_t is no longer accessible (it no longer holds the same data in
the different implementations).
get_private_key: takes a handle to a cert_object_t. It looks up the private
key for that object and returns failure if it can't find it. This change is
because the patch gets rid of the chosen cert field. Applications chose the
cert and pass the cert directly into this and the sign function.
sign_value: takes a cert_object_t. If the cert_object_t does not have a
private key, then sign_value will fail. If get_private_key was not called on
cert_object_t at some time in the past, sign_value will automatically call
it. This change was also motivated by the removal of the chosen_cert field.
Another way of implementing the get_private_key/sign_value is to create an
new chosen cert accessor function and reverting the implementation for these
two functions. The new APIs, however, allow for multiple certs to sign in a
single pkcs11_handle_t context.
./src/common/cert_st.h ./src/common/cert_info.h ./src/common/cert_vfy.h
The only interface changes here are:
1) adding nss_dir and ocsp_policy to cert_policy_st.
2) changing the definition of X509 depending on whether which cert library
we are using (X509 for openSSL, CERTCertificate or NSS). The use of a
#define here limitted the extent of the patch in other modules.
3) generic defines for algorithm types.
4) addition of 3 new CERT_Info types. (Issuer, serial number, key algorithm).
cert_st.h is a new function, which other files can include in place of
<openssl/x509.h>
./src/common/cert_info.c ./src/common/cert_vfy.c
These basically accepted the new NSS implementations for the certificate
verify and info functions. These patches are relatively straight forward.
The original API did not need any tweaking.
./src/common/algorithm.c ./src/common/alg_st.h
These new files provide generic API's to do access the hash algorithm to
pass to cert_info. If access to actual hashing or crypto were
needed, the new functions could be added here. Like cert_st.h, alg_st.h
replaces the use of <openssl/evp.h>
./src/common/NSPRerrs.h ./src/common/SECerrs.h ./src/common/secutil.h
./src/common/SSLerrs.h
These new files provide the NSS error message mappings.
Changes in ./src/common make up about 65% of the patch.
./src/mappers/*.c
The mapper functions were changes to use the generic form of hashing defined
in alg_st.h. (mostly replacing <openssl/x509v3.h> with cert_st.h and NULL
in cert_info with ALGORITHM_NULL).
exceptions: opensc_mapper.c and oopenssh_mapper.c are not implemented for
NSS because of the use of BIO directly.
These changes make up less than 10 % of the patch.
./src/pam_pkcs11/pam_config.c
Added support to fetch nss_dir and ocsp_policy.
./src/pam_pkcs11/pam_pkcs11.c
Change to use the new API. These changes include:
1) calling the new crypto_init function instead of the various openSSL
init functions.
2) pam_pkcs11 now holds a pointer to the pkcs11_handle_t rather than a static
version. A large number of diffs are simply changing &ph to ph.
3) Use the accessor functions to get the slotnum and the cert list.
4) chosen_cert is now a local variable rather than a field in pkcs11_handle_t
5) move pkcs11_login back before the get_certificate_list. Some tokens need
be to authenticated before we can read the certificates. More importantly,
the NSS cert code is only returning user certificates (certificates with the
private keys). Only a small number of tokens know now to identify user
certificates if you aren't logged in. Since this change is a reversion of
a previous change in this version of pam_pkcs11, we may need to do more
to reconcile it. Perhaps putting explicit #ifdef HAVE_NSS around the early
login, adding a later login with #ifndef HAVE_NSS.
6) the get_private_key call was moved into sign_value, so it's removed
from pam_pkcs11 itself. It would be easy to revert this change and continue
to call get_private_key directly.
./src/tools/pkcs11_eventmgr.c
pkcs11_eventmgr is basically 2 implementations of the pkcs11_eventmgr
stitched together with ifdefs. A reasonable todo would be to build the
proper generic interfaces to have a 'clean' pkcs11_eventmgr and hide the
details in src/common/pkcs11_lib.c like we do with all the rest. The existing
code doesn't even use the generic init calls that already exist.
./src/tools/*.c [the rest]
The same type of generic changes made to pam_pkcs11.c
commit b71688df42b044634556faedec6a3bdb13d232b0
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 4 13:50:05 2007 +0000
svn propset svn:keywords Id
commit c426014f85ad9be6d40ea8000be2dcdb85cf1a57
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 4 13:49:14 2007 +0000
use $Id:$ instead of $Id$
commit b2edf872f9943837c1f972d2c7559d7f295601ec
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 4 13:45:13 2007 +0000
use ERR() (instead of DBG()) in case of errors
commit 12f9a2c39478e3cee558e95ff0d4cd8520b04d40
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 4 13:44:44 2007 +0000
add support for ERR?() macros
commit 2048fe4745525de878e14ce0c893ecf5812b2b8a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 4 09:52:54 2007 +0000
Set svn:keywords Id property to replace $Id$
commit dd28746e5522a93021b0171263013bc2dafbf7ac
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 4 09:47:38 2007 +0000
display the lib name in case of loading error
commit a2e07b453e5ef046d8cbd166f12c2a7bb849f474
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Apr 4 09:43:44 2007 +0000
use $(FOO) instead of @FOO@
commit f8504ef7510b406a4f43a8c6419d6ae1d295f5df
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Thu Mar 16 21:38:05 2006 +0000
simply the revision, drop the m4 code.
it didn't turn out the way I wanted it
(does not contain the _repository_/_branch_ revision).
commit e7bb9409b8c25979bdc4840bc2469e7ea99d73f4
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Sun Jan 22 21:16:22 2006 +0000
change to opensc-project till opensc.org dns is back.
commit 08f5f6b444e8ecdca71f138a1fcad3420776d434
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Sun Jan 22 21:09:37 2006 +0000
move to opensc-project till opensc.org dns is back.
commit 9954fac2e76677b834fc6c19ee80805f07b31286
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jan 3 08:20:40 2006 +0000
substitute Revision keyword
commit 8b4dd4b85e67f7bb979c54e3bcf3fdbfa9ee0f22
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Jan 2 17:19:16 2006 +0000
use svn revision based version numbers
commit 64c1af0f1d32c5d1c7dfd7e88b4c28879b2e6a28
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Dec 23 12:27:09 2005 +0000
Add either file or hashdir support for CACerts and local CRL's
commit 72d89f0fee93ced44e2e84692aaa4e89711379b0
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Dec 23 10:04:54 2005 +0000
Add comodity functions for pathname checks
commit e5abc45c1511c4d9939c0309839d22b3fe4d84df
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Dec 15 15:10:34 2005 +0000
Make pkcs11_listcerts more verbose
commit 59eca33a0cfb4552cecd081ec2c20aa92be9b5c1
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Dec 15 13:34:52 2005 +0000
Improved extraction of Certificates and Private Keys
commit f9b6d68af5d788687ad45ac6452a05b2fffcb2c0
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Dec 15 10:24:05 2005 +0000
move key_object_t, slot_t and pkcs11_handle_t to pkcs11_lib.h as they are not part of standard RSA headers
commit 6800828cac0673014c7c21846e8aec7b7eb837a5
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 12 16:13:02 2005 +0000
Runtime config option for non-null C_Initialize() argument
commit 6b83a3e671cfd6c1f37a0857d332f6f5078439e7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Dec 12 14:55:25 2005 +0000
do not redefine LIBS and CFLAGS in configure.in but use PTHREAD_LIBS and
PTHREAD_CFLAGS in Makefile.am when needed instead
commit ab84aa319cc42409229325dd6edd77f44e4860cc
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Dec 12 14:49:09 2005 +0000
do not use AC_DEFINE(HAVE_PTHREAD, 1, ...) since it is already done by
ACX_PTHREAD() if its first argument is not defined
commit 12307185f73de51e1d7ed32576402d3fd4c1515e
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 12 13:44:17 2005 +0000
Add native thread support for C_Initialize
commit 637c2abef33ee819e0d4deae7d176286fb046620
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Dec 10 16:08:21 2005 +0000
Bugfixes + make pkcs11_listcerts behaviour closer to pam module to ease debug
commit 103e9df9310ade275790b56c968f6a548aa542b6
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Dec 10 13:03:27 2005 +0000
pam module only calls C_Login when really needed
commit e40df308439f42f950a75128c91d85b9c157c1dc
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Dec 10 13:01:41 2005 +0000
Stupid bug in dbg output at pkcs11_listcerts
commit d1ad2e04d3ffb969e83e3a504287ae34093abd17
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Dec 9 13:23:07 2005 +0000
pkcs11_inspect now uses get_certificate_list()
commit 75ee29484e03f355651db939ddb0085fe37262c6
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Dec 9 13:06:33 2005 +0000
pklogin_finder now uses get_certificate_list()
commit 70049e8389f0ea5a98269fbc3dd967669fedc333
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Dec 9 12:34:26 2005 +0000
Add pkcs11_listcerts tool to enumerate card certificates
commit 9bfc2b765dc4b5275f3787fc033ecceee22a0e8b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Dec 9 12:32:49 2005 +0000
Add get_certificate_list() to common/pkcs11_lib.c
commit 8ad3722bfa8e3fa36045dcf1acd94a2473205f00
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Dec 9 12:31:09 2005 +0000
Move add_cert() from mappers/opensc_mapper.c to common/cert_info.c
commit e496762b6f040b851a2a0142e6926579a6095cd2
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 5 14:17:35 2005 +0000
Documentation updates
commit 098ff6138d7cb985f2efc62126e87675dabcda52
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 5 13:56:47 2005 +0000
Perform/skip CA check acording to configuration file
commit e79e44ae023b7a7f59112a8c0e745e3f4e8364c4
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 5 12:51:53 2005 +0000
Perform/Skip signature check according configuration file
commit 6638576892b59a99389043c90a1e7dd4d783b921
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 5 11:59:30 2005 +0000
Prepare for configurable ca,crl,and signature verification
commit c9ad90f8b781694a11df59dbb836cef9e0d019c4
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 5 10:33:21 2005 +0000
Get tools using pkcs11_pass_login()
commit 00112585039f8f9b8aa0c100405ac0ced89d59a3
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Dec 5 10:14:44 2005 +0000
Add pkcs11_pass_login() method to pkcs11_lib
commit 1b2ec1cff3705f2253a51b94f18285d112d10b56
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Dec 1 12:34:06 2005 +0000
Comment libp11 stuff in configure.in
commit 170e4d71074e70369dbc5c629ca7110ff8be37c3
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Dec 1 12:30:34 2005 +0000
Rename pkcs11.c to pkcs11_lib.c and add hheader file
commit 0c25c10416a1e665279fdc9c3fb4c028927e1b0b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Nov 30 10:46:23 2005 +0000
Minor change to rsaref/pkcs11_readme
commit c415f2fe31ba4c200023939af1185de82e3c89f3
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Nov 30 10:41:41 2005 +0000
Move rsaref files to an independent directory
commit d8768f41058c5cd78dd4efa5eca5209b9de7b571
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Nov 30 09:55:11 2005 +0000
Add libp11 support to configure.in
commit af0120e5c5a5c3f51a524e6ac6096d3a101b4381
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Nov 14 15:51:17 2005 +0000
debug_print(): use syslog(3) instead of printf() when stdout is not a
tty, for example when using gdm.
commit 2320ac96df427bb99379db1945fc3f179ea7be9a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Oct 3 13:00:16 2005 +0000
rephrase the a "Secure your PAM configuration" paragraph
commit f667a212b038369004e9adb4db7b10b2fecd4340
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 13:43:58 2005 +0000
create an empty aclocal directory
commit aec4e90100b26891fec15dc834ab259893cbd7c4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 13:35:51 2005 +0000
use AC_HELP_STRING
commit 924f72562f2a9c6b191db48f0c93a629ad804d18
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 13:15:55 2005 +0000
files in aclocal/ are not used
commit df695e161404f2620b5a20e6b1804b6be8037aab
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 13:13:09 2005 +0000
check for OPENSSL before PCSC since the first PKG_CHECK_MODULES() shall
not be in an if or some variables will not be initialized
commit 9881a25dd2b3ad0591afb1c4c9647cbd89ff24ec
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 11:56:27 2005 +0000
improve detection code for PCSC
commit 870eb8bf6275d71a68479768b5e8b3bc90d2b487
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 08:15:19 2005 +0000
The generic_mapper.so is not a external lib anymore (by default) but is
internal. Update the configuration sample file to reflect that.
Closes ticket #9 "Generic mapper is statically linked by default -
config not in sync". Thanks to Ville Skyttä for the bug and patch.
commit 717e668e0c925db675588c199d05e47bb8bdc8d9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 08:08:56 2005 +0000
comment out example configuration lines so the files can be directly
installed by distribution packages.
Closes ticket #10. Thanks to Ville Skyttä for the bug report and patch
commit 103b21ae474d81f2ed50a6fc829b6de75a1da5a6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 08:05:25 2005 +0000
removed since they are generated from the .xml version and are available
from http://www.opensc.org/doc/pam_pkcs11/pam_pkcs11.html and
http://www.opensc.org/doc/pam_pkcs11/mappers_api.html
commit 9a1fe83bf17edd54d1d9cf69eadf49f5b65e6522
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu Sep 29 07:58:29 2005 +0000
remove a ' ' before ']'
commit ce07f7ca0a2e7887c76fef5ef152cfcfdbce9286
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 27 12:41:23 2005 +0000
play with colors
commit e2caedca58ba4b02df51f53effd68016c6fc9f5b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 27 12:40:51 2005 +0000
regenerate
commit 89e3e05fd70c817b85f057c6e5a0ae64d13ed13c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 27 12:40:33 2005 +0000
corrections
commit d23d1b35519642e7fbaf25bff3860bf0f57e5389
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Sep 26 06:48:22 2005 +0000
Use LPSTR instead of LPTSTR to compile with pcsc-lite 1.2.0
Thanks to Ville Skytta for the bug report
commit a661f530be02d12e381404c2bdfa18be2cea75d3
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 14 09:51:41 2005 +0000
use -nv instead of --non-verbose since wget 1.10 now uses --no-verbose
instead. Grr!
commit c18c8574a08311cce942a305a31f1f4310c08c09
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Sep 13 12:49:06 2005 +0000
Do not just use PKG_CHECK_MODULES() to test the presence of pcsc-lite
but also check for winscard.h and libpcsclite
Some distributions do not provide libpcsclite.pc (like SuSE 9.3)
commit fa5b394b0523fd9254ddc2a8dea7a984699bceac
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Sep 10 07:59:49 2005 +0000
Many fixes to get 'gcc -Wall -pedantic' friendly
commit 57bfc5a119ae7dc75d63c72b0c0811a28c262c6f
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 8 18:23:53 2005 +0000
Patches from AJ to sync to all others OpenSC projects
commit bd9e12c89f2af0169adf50e697e60473031eb82b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 8 15:41:18 2005 +0000
Changelog NEWS and README's updates
commit beb72ab61a169e929b92dd9dfdf432c1a4e2fa2c
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 19:54:10 2005 +0000
Add Ville Skytta to AUTHORS (original pam_pkcs11.spec file)
commit 13b4aee6cff9afdf7db8c724e1c9690a3785f065
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 18:59:33 2005 +0000
More changes to 'pam_pkcs11.spec' from FC4 team
commit 5ce450c32e11501dff5b3ee47da2aac97f0419aa
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 17:35:24 2005 +0000
Fix license to be LGPL in pam_pkcs11.spec file
commit f245dc04e46038fdd281856b6d94b74a651de7b0
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 16:58:52 2005 +0000
pam_pkcs11.spec: create independent 'pam_pkcs11-ldap' package
commit abc6ec9b93d2d567f6f283212cad3c9931fd8dab
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 12:52:57 2005 +0000
Changed 'LDAP_SCOPE_SUB' to 'LDAP_SCOPE_SUBTREE' in ldap_mapper.c
commit a337ea4920f5da879e08303865cdcee3bab99680
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 7 12:22:19 2005 +0000
regenerate
commit 12c1f27257eeac1f235cd058bcb2e6c1602676e4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Sep 7 12:22:07 2005 +0000
regenerate
commit ffac13ee9d153150e99efd317d1ee13813c46a81
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 11:17:52 2005 +0000
More 'TODO' updates
commit 337e6e427a5e1e84f6e06d934091a526158cf044
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 10:48:06 2005 +0000
Changelog updates
commit 44f457d1b554d56379cc22e147b57ea7dcdff22f
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 10:40:48 2005 +0000
'TODO' roadmap updated
commit 0728158f1e038eea65ceb735923d17b0c760c794
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 10:21:14 2005 +0000
ldap_mapper.c: add finder() and entries() methods. Update AUTHORS file
commit 3374f26ef68e5b551aa6655ff7195c7dafa52cf2
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 10:02:50 2005 +0000
opensc_mapper.c: Fixes in comments and debug output
commit 13e403c802afa7bb415cd698fc9e6723877c5a4a
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 09:13:07 2005 +0000
configure.in: Add '-lldap' and '-lcurl' to LIBS when needed
commit 858643bda6f6f9b29bc4029206fa6b71e7c00409
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 08:44:12 2005 +0000
rename 'docs' to 'doc'
commit 0f39d761c01a7dfd5f3ec0463d65d8f319a19d61
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 08:09:55 2005 +0000
Change files to use directory 'doc' instead of 'docs'
commit 1cb4dc73888e30a867752e3ffc7910972e179b5a
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 07:50:08 2005 +0000
missing #endif in ldap_mapper.c
commit 8044846b88bcbedf6de2dc0f90a8770b13f263c4
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 07:11:59 2005 +0000
Set cURL,LDAP,DocBook as configure options in configure.in
commit 2133fb4ed87d1020622c85ed98a75f381af5f881
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 07:08:32 2005 +0000
Update ldap mapper configuration data in pam_pkcs11.conf.example
commit 066dba842bd0ff5f933a0a0b4f3e54c1578d430e
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 07:06:17 2005 +0000
Add src/common/uri.c conditional compilation of cURL and LDAP support
commit c65add405976f9428e22cbac928f48fac3fe094b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 07:03:04 2005 +0000
Preliminary version of LDAP mapper
commit 98e8b56e98bdc9d54cbcc339ef9f07609c565592
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 06:56:24 2005 +0000
Compile LDAP mapper only if ldap support is included
commit 030ff822b9e1df40b62c3ddad83ff9092b9622cf
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 06:53:52 2005 +0000
Fix /home/jantonio/.ssh/authorized_keys filename generation
commit a4ebc79d5430d66130556977730effd8fe9d132d
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Sep 7 06:52:10 2005 +0000
Add header files to libscconf_la_SOURCES in src/scconf/Makefile.am
commit d9860224a6f198c0c1f7ba95c371a732d6cee64b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Sep 6 09:41:40 2005 +0000
Add README.ldap_mapper documentation file
commit 95a5dad8f182d85f3133c005cbcff00e99eed51e
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Sep 6 07:37:55 2005 +0000
OpenSSH mapper: move auth_keys filename composition out of key parsing routines
commit 41d208792809fb69c1af12217021d77104818cfd
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Sep 6 07:10:22 2005 +0000
Add email if found to ssh-pubk output of openssh_mapper::inspect()
commit d426b9b9c259561bd23dc9686d8b995cf8e897b9
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Sep 5 17:26:21 2005 +0000
cert_info.c::cert_info_sshpuk() fixed. OpenSSH mapper written
commit dd0247be4b0ac5571858ac689b4b008d105193e9
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Sep 5 09:00:41 2005 +0000
Remove redundant base64_to_bin() at cert_vfy.c
commit 13fc275e7e8d7266d713ae31d432d771fab2fbed
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Sep 5 06:46:34 2005 +0000
make export-wiki.sh and generate-api.sh executable
commit a75b3d645ee37c295602d063bb8bd20b3901c6dc
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Sep 3 11:18:16 2005 +0000
Add base64 API encoding functions to properly handle rsa-ssh keys
commit 5fd43505d092abd44a090e9ef9edb90a19ccd20c
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Sep 3 10:24:53 2005 +0000
mapper.h cert_vfy.[ch] doxygen updates. Mapper api doc updates
commit e85a3d5e00689ab6d516038259aece0e0894609a
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Sep 3 09:27:11 2005 +0000
Make cert_info.[ch] and uri.[ch] doxygen aware
commit 25a2c7fef37482667c75f39b903a954d3873f94b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Sat Sep 3 08:48:27 2005 +0000
Make error.[ch] and debug.[ch] doxygen aware
commit 92749f6681ab5c7cbd912f0408544976520a0d22
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Sep 2 19:47:49 2005 +0000
Make src/common/string.h doxygen friendly
commit 85051c62eb204d73a4880e9d40f6e10ec0366004
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Sep 2 12:19:01 2005 +0000
added doxygen API documentation at 'make dist'
commit bdd1792fcdd5d569678fd5c7ee1c5bc534d01624
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri Sep 2 10:11:47 2005 +0000
Do 'make maintainer-clean' work according OpenSC Team convention
commit 0ff3a6c7342fcd4758f8767bef960f9189cbd9ff
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 1 20:02:09 2005 +0000
Revert install path of pam_pkcs11.so as broke some 'make distcheck'
commit 48ce4a5a8d32917c94ee4ae91c9ba4069f43a1dd
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 1 13:20:51 2005 +0000
ChangeLog updated
commit 6d733103867e3142005f2fd2dc3d52a28544216e
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 1 13:04:10 2005 +0000
OpenSC mapper implementation based on AJ's pam_opensc source code
commit 9312274c3d9daa4920159af8342430548100a50e
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 1 11:17:41 2005 +0000
Do not install pam_pkcs11.la and pam_pkcs11.a
commit a7f44ef43f960a4b9f9fbaf841cc580cdb1afc36
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 1 11:13:38 2005 +0000
pam_pkcs11.so to be installed under /lib/security instead of /usr/lib/security
commit 1c4e8fcc9d56fcdb7bcc3f735710d3ea8184e5e4
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Sep 1 10:22:28 2005 +0000
pam_pkcs11.spec updates: create pam_pkcs11 and pam_pkcs11-pcsc RPM packages
commit 7cf2db381bfd277cc7bfdb3f26bea4ce0d6c86ee
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 18:44:36 2005 +0000
Updated pam_pkcs11.xml to reflect changes in mapper API and doc
commit d14ce7d2dbe1cdfbe2126ba162d8fe607728a022
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 18:23:22 2005 +0000
Set to be statically linked those mappers that no depends on external libraries
commit 8881fbf013e66b686755b0c8e716cca6987bdc13
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 18:05:16 2005 +0000
Mapper API documentation writting finished
commit c17351a7f736f3f8d5e329c7ed8e9f9fb5caa90f
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 16:12:55 2005 +0000
Fixed sample code in Mapper API doc
commit 9e167c0d2b9e27e991b591a1b2c588976e1ac5d0
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 16:05:31 2005 +0000
More work in Mapper API documentation...
commit 1ae9989fd02e6d0258ab981bd498ce107ec1db9a
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 14:50:41 2005 +0000
Assume static mapper with default settings when no mapper configuration block is provided
commit 9489443fab849b648877db29e7322ed88b7a6abe
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 14:33:19 2005 +0000
Proper handling of debug_level on enter/exit mapper(s) code
commit fa96e9d5432b9a59432a4661fb370fe105b05b89
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 14:18:44 2005 +0000
add a HOWTO chapter
commit f4f14888f76f3a54d2a99a9494ba283e276407a9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 14:04:45 2005 +0000
remove paths from the executed commands
commit b818fc085dd2eea0afa6ec0cb0e9b8e35376b6d7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 12:53:35 2005 +0000
pam_sm_authenticate(): check if DISPLAY is defined before checking if it
is a local or remote login
commit ce740492e6b59d1906819514323d99dcdd5623b5
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 12:31:16 2005 +0000
Mapper API documentation update
commit ffbbcc1bb70d0c8c0c64965997d358db4a04abab
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 12:14:40 2005 +0000
inspect_certificate(): print "Printing data for mapper %s" on stdout
instead of debug output.
commit 5fe3ecc67e912cf2e5bb9d62f590745195119e4b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 12:09:22 2005 +0000
add definition of DBG5 if no debug is used
commit 70960ad47752deec4a9a5a8c684fdc38a9781ee6
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Aug 31 11:33:26 2005 +0000
Set default values in mappers. Config file fixes
commit a88ad948008a6cae29db1f6a36b248f360480050
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 11:27:48 2005 +0000
@LIBMAPPERS@ already includes @LIBSCCONF@ @LIBCOMMON@ and @OPENSSL_LIBS@
commit 0df126ca1bce6c8b095cc94604647afe0790af64
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 09:59:53 2005 +0000
@LIBMAPPERS@ alredy include @LIBSCCONF@ @LIBCOMMON@ so we can remove
them here
commit 4108afe52eee08615ac006b95cf46590f221e8f4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 09:59:17 2005 +0000
libmappers.la uses functions from scconf/ and common/ so we link with
these libraries
commit 507455555cc89ac6ff3dc120b94e945037d99cfb
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 09:57:39 2005 +0000
libcommon_la_LIBADD = @OPENSSL_LIBS@
We use OpenSSL so we link with it
commit 9f155d5985f8617b1f514384dfe3ee42b3769496
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 09:54:52 2005 +0000
load_module(): initialise res variable to NULL to avoid a compiler warning
commit e4ea513d74baef0e48610163a4816cfb3dc450da
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 07:59:36 2005 +0000
default OpenSC module is now /usr/lib/opensc-pkcs11.so
commit 7511285cbb3c96ac8632a6c99a1ac4fb71ac997d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed Aug 31 07:37:10 2005 +0000
improve comments
commit 03398541bac2b2bde85addea6651d5af57898666
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Aug 30 18:40:28 2005 +0000
Mapper API manual update
commit 6ccc2aad50b606e8bcf74942325bfa963fff6266
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Aug 30 17:20:11 2005 +0000
Simplify and optimize mapper interface
commit 9bdf7add3ae2a8ee1474c5da38fec406af1e0d5c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Aug 30 14:58:57 2005 +0000
update
commit d5165313017ffbf7692dda97aec33fea8d573054
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Aug 30 13:15:54 2005 +0000
add mappers_api.html to svn tarball
commit ef789abef756aedf807f86f8dcf8a0d111535e5c
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Aug 30 12:49:51 2005 +0000
stupid bug in docs/Makefile.am
commit 8a2cd6d85121b468cf7cab13a498067b9b32a09a
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Aug 30 12:46:27 2005 +0000
Add Mappers API documentation (wip)
commit 9e222b8cf6e7903337c008386c7317ed3c2266e5
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Aug 30 09:28:34 2005 +0000
Fixes for some '-Wall -pedantic' warnings
commit 92feeae30c4b759bf0fc7fa26eac0e3130f6baf2
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Aug 29 19:30:55 2005 +0000
Bugfixes on compiling some static mappers
commit 2432b3fafd03ec7a5ba1e3a190104c7a1734a808
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Aug 29 18:13:23 2005 +0000
Mappers now supports static linking
commit 7b2e0bae2bcdd38cd2ddc60a8357e4f6fea0001e
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Aug 29 17:26:37 2005 +0000
Adding mappers header files
commit 7244cc9e41e6c1643d0be574a39b7225e3175641
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Aug 29 16:51:12 2005 +0000
Move mapper.[ch] to libmapper
commit 32cc86d5e04f1e170ee791aa1da8cbaf99bae7dc
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 14:08:38 2005 +0000
change official site URL to http://www.opensc.org/pam_pkcs11/
commit b7a0e5d90ff6f4be376980149090cb22ded43e0c
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 14:05:02 2005 +0000
remove empty lines in <userinput> parts
commit c9a05b8eac9e10becea2711b6e707d3f7a112d80
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 14:02:23 2005 +0000
chapter 3. Fundamentals: include the reference in the text instead as a
footnote
commit 35c45d522a57f1ec0b9e25747cb76149452d7521
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 13:59:47 2005 +0000
add section numbering
commit d0a6c82bf25d1e5e8105643955971bb2c9c06033
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 13:51:56 2005 +0000
chapter 2. Introduction: include the references in the text instead as
footnote
commit b4633eeb267d4ccd87fea53eb6ebb6c138e2e169
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 13:16:31 2005 +0000
use <email></email> instead of &lt; &gt; for emails
commit 0ca73ec6724c77a5596bc80b1abfef680e8a1601
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Aug 29 13:15:26 2005 +0000
Preliminary work on statically linked mappers
commit 0e287bc5ef633ab4e089f89e28590246e2b2bdbe
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 13:02:30 2005 +0000
minor editing
commit 214b92fb4369666a5fcaf205f2c9730d3370ef68
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 12:49:29 2005 +0000
minor editing
commit 3fe7df692e6f8492f3ce568d078f15c7225e262f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 12:42:48 2005 +0000
minor editing
commit 6d2d1ac2520602b9867b04e6a9683c968d9e8c9d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 12:31:12 2005 +0000
remove the NOTE about running the lib as root using a suid bit.
You should not do that.
commit da41417143766a0e909eab44e1699f61797dbe87
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 12:28:40 2005 +0000
improve style
commit efa86a2aaf392ab64280a7179b917af95ad7b377
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Aug 29 11:27:07 2005 +0000
OpenSC PKCS#11 lib is now /usr/lib/opensc-pkcs11.so instead of
/usr/lib/pkcs11/opensc-pkcs11.so
commit 3eba554f7e66ffabd9d54353350b7c36e202693f
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 12:17:46 2005 +0000
remove 'MAINTAINERCLEANFILES = pam_pkcs11.html' as pam_pkcs11.html is
stored in subversion and should not be removed
commit 6e962e9780e559b5839c6b19178b63fee56e9945
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 11:59:32 2005 +0000
use @OPENSSL_CFLAGS@ and @OPENSSL_LIBS@
commit e72bbf2c0126489d8c113cb66d8de5904bbd969a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 11:58:42 2005 +0000
use @OPENSSL_CFLAGS@ and @OPENSSL_LIBS@
commit 39faebf84718350c6f1d3cddb93ce7c742f263fb
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 11:58:21 2005 +0000
use PKG_CHECK_MODULES to find OpenSSL
commit 9f05513ecc484cccb198a15fe771d48a16a6d6b5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 10:10:33 2005 +0000
remove test on HAVE_PCSC_OLD, old pcsc-lite is not more supported
commit 215729e34694843f199a96df8b5fa915aa444b6d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 10:09:58 2005 +0000
do not compile card_eventmgr if pcsc-lite is not installed
commit 22c7712e2c0037a290021f95713c821b28028298
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 10:09:01 2005 +0000
greatly simplify the detection of pcsc-lite
define HAVE_PCSC to allow conditional compilation (do not compile tools
using pcsc-lite if pcsc-lite is not installed)
commit 4094bb366168ebac2bbb69a9c9b99e7857fbb786
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue Jul 5 09:37:22 2005 +0000
pam_sm_authenticate(): fail if the user is remote (XMDCP)
commit aa5884b26dbb9e06a2cf43a0a4363fa97b581ec3
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Jun 13 10:28:31 2005 +0000
Support for nonstandard openssl paths (openssl.m4 missing)
commit fb2e02e982762ef059446b809e7c9cb1b0740819
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Mon Jun 13 10:27:54 2005 +0000
Support for nonstandard openssl paths
commit 8649e6bacaa56ed41cdb9886468f5c863d1276ad
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Jun 9 20:07:22 2005 +0000
Preliminary work on OpenSC mapper
commit d1f26ec5f75803aedc2e5d279f51301c7fdc70ea
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Jun 9 10:52:43 2005 +0000
Updated User Manual
commit ad67938afb5281d1707423221453ee2ef28527e4
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Jun 9 10:47:37 2005 +0000
Updated ChangeLog
commit 8bde44089362af53e0c77abe42a5e123e239dd05
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Jun 9 10:44:59 2005 +0000
Implemented cert(PEM),pubk(PEM),pubk(SSH) data entries
commit ea1a66a2e8eed435d6927f12f2dce40f4ea750a6
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Jun 9 10:40:47 2005 +0000
Finished openssh-mapper.c coding
commit 395a02b50c78aff1b835b69ed436a86ebf36ef5b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Jun 9 07:43:30 2005 +0000
pkcs11_inspect: print correct certificate number
commit 6753eb0557b18d3492c3f4ff831cf7824290aca4
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Jun 8 11:13:46 2005 +0000
more work on extracting certificate's public key
commit 4f38d16944997cb24b712b7596899707a2605478
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Jun 7 12:23:26 2005 +0000
Add openssh_mapper.c to svn :-)
commit 3b14b432b94e633230ae65bb6ff3d369f477521e
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Jun 7 12:15:07 2005 +0000
OpenSSH mapper documentation typos
commit 7835f2202965e15bcc5410582b1fbf745f03b073
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Jun 7 12:10:20 2005 +0000
OpenSSH mapper documentation
commit f1fd3d39481569eaa641abec6feccbd0e9167a3b
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Jun 7 11:39:09 2005 +0000
Adding OpenSSH mapper (work-in-progress)
commit 30f70eed5edd73ece7928dbd567bed74de077877
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue Jun 7 09:07:56 2005 +0000
Added new methods for string mgmt
commit 0d47edc5eda86970e94a01df06c3fa4004066414
Author: Martin Paljak <martin@martinpaljak.net>
Date: Mon Jun 6 14:14:39 2005 +0000
Correct name
commit 0908c49d44e8d2f8c02b4e5873106c4219408c53
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 14:10:06 2005 +0000
english grammar correction
commit ce796f4309b18525ce1b386f4eb5592f581564d4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 14:09:57 2005 +0000
english grammar corrections
commit 40abafec35cc70f8b9f0ddf7ca31669fa7913641
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 13:19:47 2005 +0000
do not call tidy since it modifies the generated html in a bad way
commit 766fa99f0a8a7595ba4933014b6909f2e0b91bba
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 13:14:51 2005 +0000
correct some punctuation (end of phrase dot, extra space in parenthesis)
commit 45e6a2df5a7d09e62b6326fe5c99b78d49c3405a
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 12:59:12 2005 +0000
remove <prompt> tags and reformat <userinput> data
commit b67ce9d1c0b44fb3d4e47da862feb7e6409a5fdb
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 12:18:48 2005 +0000
use firstname & surname instead of the invalid name tag
commit 50b0770f147f5af81a1ee877e88ac44efcb8e84e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 08:25:29 2005 +0000
re-add this generated file since it is displayed by the website
commit d71704dc4a7655e43e0901948163eb96ac2510ff
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 08:19:35 2005 +0000
Declare the DTD using <!DOCTYPE ...> so that rxp (XML validator) can
find it
commit b3ef7b67c902a33f881720ccef2b85e3a65be9a5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 08:11:05 2005 +0000
file generated from pam_pkcs11.xml so should not be in subversion
commit 8264c0288234bca32afb09704d45b0e93c8b8439
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 08:09:39 2005 +0000
remove shade.verbatim declaration since it is useless(?) and generates
warnings:
The shade.verbatim parameter is deprecated. Use CSS instead,
commit 3ff5dcbae5cfeafe82a4b13e53f421c1b83a496d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 08:05:08 2005 +0000
do not use a hard coded path for docbook.xsl
commit d22413d60037922acdb7d185d350121f66815565
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 08:04:43 2005 +0000
use --path to specify different locations to find docbook.xsl
commit cf4178750ab092817ee4b24c37e8fcbc1cc6c21d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:56:41 2005 +0000
remove the definition of MAINTAINERCLEANFILES since the indicated files
are already removed by the implicit 'make maintainer-clean'
commit ce057da0187d6bec6af30803f022d7f61bad78b9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:54:55 2005 +0000
do not use 'MAINTAINERCLEANFILES = Makefile.in' since is it implicit
'make maintainer-clean' can be used to remove Makefile.in files
commit 18e0e479c5864b5b35dc2dd696e6e05d7dc9de01
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:48:13 2005 +0000
get_mapent(): skip comment lines
commit 650169add0b8764409e659c79aee33b1b3333bbe
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:32:54 2005 +0000
get_mapent(): allocate len+1 instead of len bytes to store a
NULL-terminated string
commit 16b08e798112d81dcd2b59bf55ab486564e16088
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:27:28 2005 +0000
add a \n for a printf()
commit b03b046afa939475ac9243440dbc3123f5670f79
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:26:27 2005 +0000
add pam_pkcs11.html to MAINTAINERCLEANFILES (make maintainer-clean)
commit 736564007898e38018531a47a5e7a2de67cb8d90
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:24:42 2005 +0000
the html files also depends on $(STYLESHEET)
commit 4cc89290ac6e6102f299272a0e4d2b4803aa5d42
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon Jun 6 07:18:55 2005 +0000
use * instead of "*" to match the files
commit cb49a45f1f90fece3d8c922a10c52362ccb46061
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 13:29:57 2005 +0000
only set first_loop = FALSE; after looping on all readers
commit 9593b23f4a005a19bb3077af8f95a1282be3d85d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 13:24:41 2005 +0000
cleanly exit in case of error (remove pidfile)
commit e7a64ad0130094e65a76fcd4c18227f625d0e8dd
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 13:22:01 2005 +0000
cleanly exit in case of error (remove pidfile)
commit 8546e5addbdf64567445fd95cdc9e74ccd7b4a00
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 13:18:19 2005 +0000
exit if no reader is found at startup
commit 61429f54204f7d4e060e2a15ea5a58b9d58ba9f6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 09:49:03 2005 +0000
remove card state parsing debug
commit e026099a8e404b659f49c83c87a6fd7560d90dd5
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 09:43:18 2005 +0000
remove \n in debug strings
commit 9edde5ff05ac3b8e8a23b93f9855a4d395bb7b38
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 09:41:42 2005 +0000
trap signals even if pidfile=<> argument is not used so we always have a
clean exit
commit 48a9b4a2005f293fd5ca9430a26a59b104be22ce
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 09:35:28 2005 +0000
remove the timestamp information
commit fc6cfad1959d0076afb4d91aba1cd51574438531
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 24 09:28:40 2005 +0000
main(): remove a useless call to fflush(stdout); that was directly
imported from pcsc_scan
commit 380a9b578a79d5e1b14d5febb2b7a59c2b913e09
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon May 23 12:41:57 2005 +0000
document kill and pidfile= arguments
commit 2b53dffef77bac2fbc1339b68b562d941f91e54d
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Mon May 23 09:10:49 2005 +0000
add support for kill and pidfile=<filename>
commit 389f87e55581563851683be54eae153baa4f6ce3
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu May 19 09:31:35 2005 +0000
Add Ludovic to author's list
commit cf63bb1543d9055431a7f1000626ce7af2cea577
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu May 19 09:27:26 2005 +0000
Generic mapper documentation
commit 7221762803862997dec22a9b71831287c18681db
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 13:51:13 2005 +0000
add two missing \n with fprintf(stderr,..)
commit 4e9ed9e9d449b3ea4a7d7859a2f8933f7ca92b83
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 08:51:16 2005 +0000
convert spaces in tab
commit bb958681d46f1beae6aa68af502e157d8c048ba7
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 08:16:26 2005 +0000
add two missing \n with fprintf(stderr,..)
commit d8c862c79eb5e2693ea098d23b6ae636068a8a5e
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 07:02:56 2005 +0000
generic_mapper_find_user()/generic_mapper_match_user(): remove two
unused variables
commit 95472f9ef98317e011cacfc457ff8b43722fcbaa
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 06:54:53 2005 +0000
do not use `ls *` to get the list of files but "*" to correctly manage
files with spaces in their name
commit 66a7a2ce428bf973bf9008327d8640bd5e785899
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 06:48:30 2005 +0000
do not save/restore the current directory since we do not need to
commit c4de0eb6426c43264aa88078e28824414ace662b
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 06:46:28 2005 +0000
remove space characters at end of lines
commit 1d8069eb72ea901f41771b2ede872b3b8377e4f9
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 06:44:35 2005 +0000
display the filename of files we can't do anything with. Maybe it is
because the format is wrong or they can't be read or whatever.
commit 545a0250c810f8a2db8b4a6e0bbf7af4ea85f849
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 06:40:42 2005 +0000
revert my previous patch. We need to redirect stderr since the
certificate may not be in pem format and openssl will shout
commit fbb45351658f0d925ab1e762a111798d47df3d76
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 06:31:25 2005 +0000
do not redirect stderr to /dev/null in the hash generation to get errors
like "Permission denied" if the certificate can't be read
commit bdf6d23b9d01e9a6f2f2496e0b8b5b8cd52a67a4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 18 06:29:47 2005 +0000
in the test of the presence of openssl we escape the result string to
have only one strings even with space characters
commit 9c5a4f597769ca82150c4fb82ff92e279176c8fc
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Tue May 17 19:18:32 2005 +0000
typos in generic_mapper.c
commit 8fb67f7b3e24197d35760c9e310466e79897fc46
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 17 15:14:27 2005 +0000
check that openssl is installed
commit 90dda8b87f756f7b6cda64dd6f9b28a9f1b73110
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 17 14:19:09 2005 +0000
add _DEFAULT_MAPPER_FIND_USER to avoid an undefined symbol:
mapper_find_user
commit 67c8b98056680202dafde5b9c083bfd050dd88a2
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Tue May 17 13:33:45 2005 +0000
add @LIBCOMMON@ to ldap_mapper_la_LIBADD and opensc_mapper_la_LIBADD to
avoid missing symbols at link time
commit 9c9af4d8f629622a79bd78f619052e3b8de32765
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu May 12 08:19:03 2005 +0000
reformat
commit afa60c7625b7de96c5a22687f3ecb6b6f57ae374
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu May 12 07:52:12 2005 +0000
rephrase and reformat
commit ac2e94646e2f60b6964c35c054a777cfa9b1f486
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu May 12 07:47:29 2005 +0000
reformat
commit 9c860737d42b8a14e7864adab9d1e73a0175e1a1
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu May 12 07:39:41 2005 +0000
rephrase and reformat
commit 87bbd531cf34a4fa77f8c10482ef663c8b446ec4
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu May 12 06:27:46 2005 +0000
reformat
commit 7a7db2ee0a50c247b13ec48828167ebdbd46fdc6
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Thu May 12 06:21:15 2005 +0000
rephrase and reformat
commit 9a69f99253834303309503a7d549e22651ade7eb
Author: Ludovic Rousseau <ludovic.rousseau+github@gmail.com>
Date: Wed May 11 17:57:55 2005 +0000
rephrase and reformat
commit 94a86e3663085fba70862134adae59b25ae586aa
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Fri May 6 07:54:20 2005 +0000
Makefile fix for x64 arch
commit 6cecad47a42a1f27fb932d5d595ceea9b690b92d
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Thu Apr 14 16:21:22 2005 +0000
generic_mapper coding finished
commit 7001592858ea471a3f360807f8c9bf22bbec3471
Author: Juan Antonio Martinez <jonsito@teleline.es>
Date: Wed Apr 13 11:06:18 2005 +0000
preliminary works on generic mapper
commit 21cd7094abb97fae6efabf22e4dee15ddb604313
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Tue Apr 12 21:09:07 2005 +0000
add bootstrap script for developers and the snapshot mechanism.
commit a4d1f27c5ca0ec26dbf9199a2371774c17ab1ab2
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Tue Apr 12 20:46:52 2005 +0000
set the version to "WIP" (work in progress) for the snapshot script.
commit b85b032f2906e9a949284beb99dc0045a4b63744
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Tue Apr 12 19:41:29 2005 +0000
remove a few Makefile.in on make maintainer-clean
commit d9803c13a26203b8d7680ed279f99ba5a82636d4
Merge: 0f8590b 5ed63ba
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Tue Apr 12 19:40:26 2005 +0000
copy release 0.5.2 to trunk.
commit 5ed63ba934aec5e82416f8eb29d556250505a673
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Tue Apr 12 19:37:31 2005 +0000
import current version 0.5.2
commit 0f8590b5ebc082ff1e79454b984b75dd121d8267
Author: Andreas Jellinghaus <andreas@ionisiert.de>
Date: Tue Apr 12 19:33:29 2005 +0000
add minimal structure.
View Git Blame Copy Permalink