lp://staging/~henrik-ziegeldorf/hipl/pisa

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

6031. By Henrik Ziegeldorf on 2011-12-15

Add missing encoding format parameter in test cases.

6030. By Henrik Ziegeldorf on 2011-12-12

Read certificates in DER format, too.

6029. By Henrik Ziegeldorf on 2011-12-12

Fix by Christoph Viethen.

Show stopper:
 - variable "algo" didn't get set to anything any more (staying at pre-initialized value 0), causing the code not to generate signatures

Misc. changes:
 - initialize issuer_hit var with NUL bytes so it becomes possible to detect whether "issuerhit" is specified in the hip_cert.cnf file
 - if "issuerhit" is not specified in that config file, use this hipd's default hit instead (should typically be the same anyway)

 - don't fail when section "[ hip_x509v3_name ]" doesn't exist in hip_cert.cnf file - contents of this section doesn't seem to be used for anything at all

 - workaround: catch the case of "days =" not being specified in config - assume ~10 seconds default cert. validity instead (prevents generation of a broken certificate with identical start and end times) (can't just force the user to specify the value in the config, because an end time might have been specified through hipconf, in which case the config value wouldn't even be needed)

Cosmetics:
 - replace /* */ with // comments in some of the places
 - replace occurences of hip_local_hostid_db with HIP_DB_LOCAL_HID (see #define in hipd/hidb.h)

6028. By Henrik Ziegeldorf on 2011-12-01

Use correct key during certificate creation. Use openssl free functions to free evp keys.

6027. By Henrik Ziegeldorf on 2011-12-01

Initialize cert option of rule to NULL.

6026. By Henrik Ziegeldorf on 2011-11-22

cosmetics: Fixed spelling.

6025. By Henrik Ziegeldorf on 2011-11-22

Remove superflous parsing of pisa option.

6024. By Henrik Ziegeldorf on 2011-11-22

Remove pisa root cert option. Read root certs from firewall rules instead.

6023. By Henrik Ziegeldorf on 2011-11-22

Add -cert option to rule management.

6022. By Henrik Ziegeldorf on 2011-11-22

Uninit pisa module.