Arzhan Kinzhalin
6830bff00b
Fail if remove args are not X.509 certs.
2017-09-29 00:11:50 +00:00
Arzhan Kinzhalin
3a536574e9
Clean up, fix documentation.
2017-09-28 20:14:29 +00:00
Arzhan Kinzhalin
cd0eb4be30
Remove unused function.
2017-09-28 18:32:43 +00:00
Arzhan Kinzhalin
f04e6292a2
Organize error handling.
2017-09-28 18:28:31 +00:00
Arzhan Kinzhalin
b3a163e510
Change use of SHA256 to SHA1.
...
Mozilla stores information on the distrusted certificates as SHA1 and
no certificate file itself. In order to make easier to support
Mozilla-distrusted certificates in the future, use the same digest as
the primary source of the trust information (Mozilla) does.
2017-09-28 17:25:29 +00:00
Arzhan Kinzhalin
e915b5c06f
Add license (GPLv2).
2017-09-25 17:26:48 +00:00
Arzhan Kinzhalin
0882ad620a
Generate PEM bundle.
2017-09-21 09:02:19 +00:00
Arzhan Kinzhalin
8777cfb3a5
Minor clean up.
2017-09-19 16:18:05 +00:00
Arzhan Kinzhalin
ba48733abd
Handle duplicates gracefully on generate.
2017-09-18 18:45:41 +00:00
Arzhan Kinzhalin
67b7c29083
Generate corresponding Java keystore.
...
Using p11-kit generate Java keystore in compat/.
2017-09-18 05:17:29 +00:00
Arzhan Kinzhalin
a2f07392b2
Add --force to add command.
...
Allow adding trust to non-root certificate. Adding leaf or intermediate
certificates can cause inconsistent behavior, depending on the
implementation of cert chain verification. However, it might be
necessary in some cases of very broken implementation of peers (e.g.
badly configured web servers).
2017-09-05 20:09:59 +00:00
Arzhan Kinzhalin
a5f9cb4240
Check if the certificate is distrusted on add.
2017-08-24 01:03:22 +00:00
Arzhan Kinzhalin
824653e7a6
Set proper permissions on stage.
2017-08-23 17:28:35 +00:00
Arzhan Kinzhalin
42d18b2a50
Add cmd_check. Make distrusted dir before copying.
2017-08-23 17:27:04 +00:00
Arzhan Kinzhalin
42126997f7
Refactor to get rid of fifos.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
64b7421544
Add test for non-certificate.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
52a5b2bf00
Actually check for openssl.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
e9833dc45b
Simplify rehashing/get rid of pushd/popd.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
94fcefbaf1
Simplify printing.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
c808831ba5
Use $() syntax instead of `` in tests as well.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
01ba7be8f7
Remove the test store on clean up.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
d8e9d8ac98
Refactor/simplify the tests. Fix verbose mode.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
f1da34e095
Use $() syntax instead of ``.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
5f66f542f3
Address misc review comments.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
afacec9e8e
Change function syntax to POSIX.
2017-07-29 00:19:53 +00:00
Arzhan Kinzhalin
2385179211
Remove the certificates properly.
...
The CLR_CLEAR_TRUST_SRC is immutable. If we remove trust to
Clear-supplied CA, then it should be distrusted as opposed to removed.
2017-07-12 23:54:04 -07:00
Arzhan Kinzhalin
ffe28b135b
Fix the multiline variable check.
2017-07-12 23:53:20 -07:00
Arzhan Kinzhalin
6dcc51b5e4
Clean up: remove trailing spaces.
2017-07-12 23:46:35 -07:00
Arzhan Kinzhalin
677e40801e
Implement check for non-root CA when adding.
2017-07-11 22:02:49 +00:00
Arzhan Kinzhalin
eac7ec7985
Clean up. Style. Correct tests.
2017-07-11 03:49:31 +00:00
Arzhan Kinzhalin
6aeb2f48a6
Add tests.
2017-07-10 23:19:19 +00:00
Arzhan Kinzhalin
5a5284c52d
Fix the check (case of multiple certs).
2017-07-10 23:18:38 +00:00
Arzhan Kinzhalin
99d5ac727b
Implement support for adding multiple certificates.
2017-07-10 23:17:09 +00:00
Arzhan Kinzhalin
4c7ad2417e
Regenerate store on add.
2017-07-10 17:43:40 +00:00
Arzhan Kinzhalin
a3d624fe25
Do not re-generate store when nothing changed.
2017-07-09 18:43:18 +00:00
Arzhan Kinzhalin
c0264a8e00
Clean up.
2017-07-09 05:18:39 +00:00
Arzhan Kinzhalin
b4dbdd44b1
Add working implementation of remove command.
2017-07-09 05:15:18 +00:00
Arzhan Kinzhalin
cd43cd0c0a
Change the meaning of the id from an int to a sha.
2017-07-08 05:45:26 +00:00
Arzhan Kinzhalin
15b3cda395
Change which to command -v.
...
Thanks to Icarus for the lesson.
2017-07-08 05:45:26 +00:00
Arzhan Kinzhalin
18dbc0870c
Clean up.
2017-07-08 05:45:17 +00:00
Arzhan Kinzhalin
ade2987baa
Clean up.
2017-07-06 20:42:13 +00:00
Arzhan Kinzhalin
41798c2590
Mention --help in the help output.
2017-07-06 20:37:46 +00:00
Arzhan Kinzhalin
1bf7a3f115
Add support for happy --help in on clrtrust.
2017-07-06 07:56:30 +00:00
Arzhan Kinzhalin
9718b04a68
Warn about distrust only if there's one.
2017-07-06 07:55:55 +00:00
Arzhan Kinzhalin
c0cadc993c
Implement list command.
2017-07-06 07:54:58 +00:00
Arzhan Kinzhalin
3d4b76df76
Implement distrust in generate.
2017-07-01 04:35:18 +00:00
Arzhan Kinzhalin
ed6abf7bed
Rename the command implementation func.
...
Rename: cmd_store_generate => cmd_generate for consistency.
2017-07-01 03:33:17 +00:00
Arzhan Kinzhalin
c7d1371ad7
Add Intel Corporation copyright.
2017-07-01 01:24:05 +00:00
Arzhan Kinzhalin
3d79c36589
Add test infrastructure and 'make check' target.
...
Most of the tests are for the 'generate' command. Features not
implemented are skipped to ensure ca-certs package is buildable.
2017-06-30 07:01:43 +00:00
Arzhan Kinzhalin
8145b35749
Change the shebang.
2017-06-30 03:42:44 +00:00
Arzhan Kinzhalin