Marcel Poul [Wed, 18 Jan 2012 19:39:24 +0000 (19:39 +0000)]
methods loading cert from X509 as well as file added
Daniel Kouřil [Wed, 18 Jan 2012 19:07:28 +0000 (19:07 +0000)]
Addressed some warnings
Marcel Poul [Wed, 18 Jan 2012 15:34:18 +0000 (15:34 +0000)]
load priv. key and request to canl_cred
Marcel Poul [Wed, 18 Jan 2012 15:31:50 +0000 (15:31 +0000)]
make some parameters const.
Marcel Poul [Wed, 18 Jan 2012 15:30:52 +0000 (15:30 +0000)]
no need for this method call anymore
Marcel Poul [Wed, 18 Jan 2012 15:19:30 +0000 (15:19 +0000)]
make set_(key,cert)_file() method more efficient
Daniel Kouřil [Wed, 18 Jan 2012 13:50:47 +0000 (13:50 +0000)]
- SSL-specific calls grouped in a separate header
- added API to set flags
- added API to use PKCS11 objects
Marcel Poul [Wed, 18 Jan 2012 13:49:03 +0000 (13:49 +0000)]
requests handling methods definitions
Marcel Poul [Wed, 18 Jan 2012 12:32:55 +0000 (12:32 +0000)]
call method by its new namcall method by its new name
Marcel Poul [Wed, 18 Jan 2012 12:28:34 +0000 (12:28 +0000)]
clean new canl_cred struct.
Daniel Kouřil [Wed, 18 Jan 2012 12:21:41 +0000 (12:21 +0000)]
Made the error codes start sufficiently high
Marcel Poul [Wed, 18 Jan 2012 12:17:45 +0000 (12:17 +0000)]
request handling structure added
Daniel Kouřil [Wed, 18 Jan 2012 09:48:06 +0000 (09:48 +0000)]
removed unnecessary calls
Daniel Kouřil [Wed, 18 Jan 2012 09:04:50 +0000 (09:04 +0000)]
some notes
Daniel Kouřil [Tue, 17 Jan 2012 20:14:39 +0000 (20:14 +0000)]
Temporarily hard-wired host credentials to be used by the server side
Daniel Kouřil [Tue, 17 Jan 2012 20:14:22 +0000 (20:14 +0000)]
correct the order of params
Daniel Kouřil [Tue, 17 Jan 2012 20:14:05 +0000 (20:14 +0000)]
- polished the methods and their prototypes in the authN "object"
- don't call the ssl routines directly but solely through the object
Daniel Kouřil [Tue, 17 Jan 2012 20:13:38 +0000 (20:13 +0000)]
per-connection SSL context remove from the contexts
Daniel Kouřil [Tue, 17 Jan 2012 20:13:20 +0000 (20:13 +0000)]
SSL_CTX removed from the global context.
Daniel Kouřil [Tue, 17 Jan 2012 20:12:55 +0000 (20:12 +0000)]
Iterate over (potentially) multiple available authentication methods
- some cleanup of the authN "object" methods
Daniel Kouřil [Tue, 17 Jan 2012 20:12:38 +0000 (20:12 +0000)]
Initialization of SSL contexts moved to more appropriate places
- credentials locations became unhandled
Daniel Kouřil [Tue, 17 Jan 2012 20:12:20 +0000 (20:12 +0000)]
Added ssl_finish() to free the global context
Daniel Kouřil [Tue, 17 Jan 2012 20:12:04 +0000 (20:12 +0000)]
Pass SSL_CTX as a parameter to the initialization routines.
Daniel Kouřil [Tue, 17 Jan 2012 20:11:47 +0000 (20:11 +0000)]
added ssl_free() to cleanup per-connection contexts
Daniel Kouřil [Tue, 17 Jan 2012 20:11:30 +0000 (20:11 +0000)]
initialize all the authN mechs available.
Daniel Kouřil [Tue, 17 Jan 2012 20:11:12 +0000 (20:11 +0000)]
define a per-connection context for the particular authN mechs
Daniel Kouřil [Tue, 17 Jan 2012 20:10:56 +0000 (20:10 +0000)]
update_error can be be passed err codes, too
Daniel Kouřil [Tue, 17 Jan 2012 20:10:37 +0000 (20:10 +0000)]
- fixed the connection loop
Daniel Kouřil [Tue, 17 Jan 2012 20:10:21 +0000 (20:10 +0000)]
routines to establish authentication grouped into a single structure
Daniel Kouřil [Tue, 17 Jan 2012 20:10:00 +0000 (20:10 +0000)]
ssl_init() moved among the other ssl calls
Marcel Poul [Tue, 17 Jan 2012 15:31:47 +0000 (15:31 +0000)]
methods for init. and free credential structures
Marcel Poul [Tue, 17 Jan 2012 13:55:31 +0000 (13:55 +0000)]
make the library build again
Marcel Poul [Tue, 17 Jan 2012 13:54:24 +0000 (13:54 +0000)]
stubs of methods handling peer credentials and certificate requests
Marcel Poul [Tue, 17 Jan 2012 13:52:09 +0000 (13:52 +0000)]
structer holding peer credentials defined
Marcel Poul [Tue, 17 Jan 2012 13:49:57 +0000 (13:49 +0000)]
typo
Marcel Poul [Fri, 13 Jan 2012 21:11:50 +0000 (21:11 +0000)]
use CN for server cert verification if approp. extensions are not present
Daniel Kouřil [Fri, 13 Jan 2012 14:52:01 +0000 (14:52 +0000)]
Added examples for the new API (X.509 credentials handling)
Daniel Kouřil [Fri, 13 Jan 2012 14:50:49 +0000 (14:50 +0000)]
make the examples build again
Daniel Kouřil [Fri, 13 Jan 2012 14:38:42 +0000 (14:38 +0000)]
Examples moved to ... examples
Daniel Kouřil [Fri, 13 Jan 2012 14:36:28 +0000 (14:36 +0000)]
API to handle certificate and requests
Daniel Kouřil [Fri, 13 Jan 2012 14:32:35 +0000 (14:32 +0000)]
canl_ctx_set_ssl_cred() added to public API
- removed the previous attempts
Zdeněk Šustr [Fri, 13 Jan 2012 11:21:50 +0000 (11:21 +0000)]
Front matter facelift
Marcel Poul [Thu, 12 Jan 2012 15:18:18 +0000 (15:18 +0000)]
server hostname check on certificate extensions
Zdeněk Šustr [Thu, 12 Jan 2012 10:16:53 +0000 (10:16 +0000)]
Spin off section on reading configuration and use it in both UG and AG
Zdeněk Šustr [Thu, 12 Jan 2012 09:39:11 +0000 (09:39 +0000)]
Playing with footnote marks
Daniel Kouřil [Thu, 12 Jan 2012 09:36:43 +0000 (09:36 +0000)]
make it build again
Daniel Kouřil [Thu, 12 Jan 2012 09:36:06 +0000 (09:36 +0000)]
Prototype polishing
- added a type for the canl return code
- added a define to posibly express "exportability" of a symbol
Daniel Kouřil [Thu, 12 Jan 2012 09:27:49 +0000 (09:27 +0000)]
Make canl_io_connect() retun a canl_code (to be consistent with other calls)
Zdeněk Šustr [Thu, 12 Jan 2012 09:20:01 +0000 (09:20 +0000)]
Extended description for some cfg files, preparation for a new config file (commented out)
Daniel Kouřil [Thu, 12 Jan 2012 08:58:48 +0000 (08:58 +0000)]
Introduced other (optional) parameters of the connect/accept routines
Daniel Kouřil [Thu, 12 Jan 2012 08:51:39 +0000 (08:51 +0000)]
Introduced other (optional) parametrs of the connect routine
Daniel Kouřil [Thu, 12 Jan 2012 08:47:51 +0000 (08:47 +0000)]
Principal handling
- this introduces dependency on a gssapi.h header
Daniel Kouřil [Thu, 12 Jan 2012 08:35:58 +0000 (08:35 +0000)]
Callback has been moved
Daniel Kouřil [Thu, 12 Jan 2012 08:22:51 +0000 (08:22 +0000)]
Removed unused cred_handler
Daniel Kouřil [Thu, 12 Jan 2012 08:21:13 +0000 (08:21 +0000)]
SSL/PKI specific calls moved to canl_ssl.h
Daniel Kouřil [Thu, 12 Jan 2012 08:16:24 +0000 (08:16 +0000)]
Make the functional usable with c++
Marcel Poul [Wed, 11 Jan 2012 22:17:00 +0000 (22:17 +0000)]
stub of method for post handshake cert check (server cert)
Marcel Poul [Wed, 11 Jan 2012 22:14:45 +0000 (22:14 +0000)]
structure for peer's identity information (not credentials) added
Zdeněk Šustr [Wed, 11 Jan 2012 19:01:55 +0000 (19:01 +0000)]
Smoke Test clarifications
Marcel Poul [Wed, 11 Jan 2012 16:41:25 +0000 (16:41 +0000)]
no need to use BIO; seg. fault avoided.
Marcel Poul [Wed, 11 Jan 2012 15:48:55 +0000 (15:48 +0000)]
check whether paths to certs returned by voms methods are correct
Zdeněk Šustr [Wed, 11 Jan 2012 15:38:06 +0000 (15:38 +0000)]
New section on config files. Not 100-% sure about including startup scripts, but found no better place.
Zdeněk Šustr [Wed, 11 Jan 2012 10:36:00 +0000 (10:36 +0000)]
DG facelift
Daniel Kouřil [Wed, 11 Jan 2012 10:30:35 +0000 (10:30 +0000)]
Work around the globus bug that actually makes it impossible to specify own OID to import_creds. See https://bugzilla.mcs.anl.gov/globus/show_bug.cgi?id=7238
Zdeněk Šustr [Tue, 10 Jan 2012 14:52:31 +0000 (14:52 +0000)]
Preparing for a new version and an updated package list.
Suppressing a few orphans
Zdeněk Šustr [Tue, 10 Jan 2012 13:19:39 +0000 (13:19 +0000)]
A few paragraphs on Job History
Marcel Poul [Tue, 10 Jan 2012 12:40:08 +0000 (12:40 +0000)]
client uses VOMS method to get proxy filenames, (should change default behavior)
František Dvořák [Sun, 1 Jan 2012 13:51:42 +0000 (13:51 +0000)]
New packaging for caNl.
František Dvořák [Wed, 28 Dec 2011 17:55:53 +0000 (17:55 +0000)]
Debian packaging for PX.
František Dvořák [Wed, 28 Dec 2011 17:54:29 +0000 (17:54 +0000)]
Debian packaging for L&B: emi-lb and yaim modules.
František Dvořák [Wed, 28 Dec 2011 17:46:17 +0000 (17:46 +0000)]
Debian packaging for L&B.
František Dvořák [Wed, 28 Dec 2011 17:36:46 +0000 (17:36 +0000)]
Polishing Debian packaging of L&B/JP common.
František Dvořák [Wed, 28 Dec 2011 17:30:22 +0000 (17:30 +0000)]
Install also testplan.
František Dvořák [Wed, 28 Dec 2011 17:24:24 +0000 (17:24 +0000)]
configure updates:
- fix etics-less build:
- distinguish source directories for configure and build
- kludge side effects in perl
- wrap package descriptions to 79 columns (80 still too high for Debian)
- properly substitute copyright file for Debian packages
- java location for Debian
František Dvořák [Fri, 23 Dec 2011 20:18:02 +0000 (20:18 +0000)]
RPM packaging fixes: no packages renames as it would break upgrade, fix build of lb.logger-msg, arch-specific build dependencies.
František Dvořák [Mon, 19 Dec 2011 20:59:58 +0000 (20:59 +0000)]
Working upgrade (from EMI-1) after tearing packages apart.
František Dvořák [Mon, 19 Dec 2011 15:08:17 +0000 (15:08 +0000)]
Debian packaging of L&B/JP common subsystem.
František Dvořák [Mon, 19 Dec 2011 15:04:23 +0000 (15:04 +0000)]
Debian packaging of jobid subsystem:
- based on template from dh_make
- debian/rules based on EMI Debian packaging tutorial
- multiple packages from one module
František Dvořák [Mon, 19 Dec 2011 13:31:09 +0000 (13:31 +0000)]
Start-up scripts according to Fedora Packaging Guidelines.
František Dvořák [Mon, 19 Dec 2011 11:02:39 +0000 (11:02 +0000)]
Sync configure.
František Dvořák [Mon, 19 Dec 2011 10:53:23 +0000 (10:53 +0000)]
Packaging fixes.
František Dvořák [Mon, 19 Dec 2011 10:50:40 +0000 (10:50 +0000)]
PX subsystem RPM packaging.
Marcel Poul [Sun, 18 Dec 2011 22:10:03 +0000 (22:10 +0000)]
do not use openSSL method calls in canl API
Marcel Poul [Sat, 17 Dec 2011 10:33:16 +0000 (10:33 +0000)]
use proper method to get human readable error string from netdb error code
Marcel Poul [Sat, 17 Dec 2011 00:50:13 +0000 (00:50 +0000)]
do not use h_errno variable
Marcel Poul [Sat, 17 Dec 2011 00:32:15 +0000 (00:32 +0000)]
include some more headers
Marcel Poul [Sat, 17 Dec 2011 00:27:51 +0000 (00:27 +0000)]
return CANL_ERROR values where appropriate
František Dvořák [Fri, 16 Dec 2011 18:32:00 +0000 (18:32 +0000)]
Dependency required to build with gss module.
František Dvořák [Fri, 16 Dec 2011 16:36:37 +0000 (16:36 +0000)]
Typo in spec file.
František Dvořák [Fri, 16 Dec 2011 16:29:16 +0000 (16:29 +0000)]
Resync configure.
František Dvořák [Fri, 16 Dec 2011 16:15:04 +0000 (16:15 +0000)]
Changing age properly in branched configurations with the new packaging.
František Dvořák [Fri, 16 Dec 2011 13:18:23 +0000 (13:18 +0000)]
RPM packaging for EMI-2 - L&B subsystem.
František Dvořák [Fri, 16 Dec 2011 13:11:22 +0000 (13:11 +0000)]
RPM packaging for EMI2 - L&B/JP common subsystem.
František Dvořák [Fri, 16 Dec 2011 12:57:51 +0000 (12:57 +0000)]
RPM packaging for EMI-2 - jobid subsystem. For libraries, there are libNAME and NAME-devel subpackages, NAME is metapackage depending on NAME-devel.
František Dvořák [Fri, 16 Dec 2011 12:53:06 +0000 (12:53 +0000)]
Rework rpm and debian packaging toward the self-managed packages.
Packaging changes:
- two-stage package generator using templates in ./project:
1) etics - alter configure command
2) build - generate final package sources
- build only source packages (.src.rpm, debian tar) in packaging stage,
binary packages built in mock stage
- sources distribution tarball ugly generated from VCS commands
- source package generated without checking build dependencies and cleaning
- fake package changelogs entry (generated packages)
- still using package.summary and package.description for "main" packages
- wrap the text in description
- verbose copy during packaging
- support different package name and module name (requires different spec-file name)
- hack due to axis1.4 location in EMI
Marcel Poul [Thu, 15 Dec 2011 20:09:07 +0000 (20:09 +0000)]
use standard directories and files for certificates and keys
Marcel Poul [Thu, 15 Dec 2011 16:48:51 +0000 (16:48 +0000)]
ssl library init while creating context
František Dvořák [Thu, 15 Dec 2011 11:07:57 +0000 (11:07 +0000)]
Packaging fixes (install not as default target, empty directory).
Zdeněk Šustr [Wed, 14 Dec 2011 13:55:36 +0000 (13:55 +0000)]
Modified to reflect version 3.2.0-1
Zdeněk Šustr [Wed, 14 Dec 2011 13:40:53 +0000 (13:40 +0000)]
Updating version, ChangeLog and copying the most recent configure from ./org.glite.lb for v. 4.4.0-1