]> WPIA git - cassiopeia.git/log
cassiopeia.git
6 years agofix: use correct prepared statement for writing logs master
Felix Dörre [Wed, 15 Nov 2017 00:04:49 +0000 (01:04 +0100)]
fix: use correct prepared statement for writing logs

Change-Id: Ib309a1d3b9e6455671999229d6d6fdea7fe51283

6 years agochg: write future logs to database
Felix Dörre [Wed, 8 Nov 2017 14:38:45 +0000 (15:38 +0100)]
chg: write future logs to database

Change-Id: I6f768c6a5c0961ba1c3ff3309827b1964cf95026

6 years agochg: make cassiopeia conform to db schema version 33
Felix Dörre [Sun, 5 Nov 2017 14:33:34 +0000 (15:33 +0100)]
chg: make cassiopeia conform to db schema version 33

Change-Id: I3d8661bb1e009f9c9d2c9d66bd627c9c43adb7f3

6 years agochg: changelog script to provide reproducible versioning
Felix Dörre [Mon, 6 Nov 2017 21:14:20 +0000 (22:14 +0100)]
chg: changelog script to provide reproducible versioning

Change-Id: I0f02fb1a6c8ab4a4cf42b288255cd26a8dfd3214

6 years agoupd: reduce logging of successful CRL signing
Felix Dörre [Sat, 26 Aug 2017 07:31:24 +0000 (09:31 +0200)]
upd: reduce logging of successful CRL signing

Change-Id: I19272a44582f44bc52ffc4ce4713a95fe16abaff

6 years agoMerge "fix: mark failed OCSP signature attempts to prevent re-signing"
Benny Baumann [Sat, 3 Jun 2017 19:44:42 +0000 (21:44 +0200)]
Merge "fix: mark failed OCSP signature attempts to prevent re-signing"

6 years agoMerge "add: handle the 'noOCSP' feature in the include section"
Benny Baumann [Sat, 3 Jun 2017 19:44:25 +0000 (21:44 +0200)]
Merge "add: handle the 'noOCSP' feature in the include section"

6 years agofix: mark failed OCSP signature attempts to prevent re-signing
Felix Dörre [Fri, 26 May 2017 11:34:30 +0000 (11:34 +0000)]
fix: mark failed OCSP signature attempts to prevent re-signing

Change-Id: I62cb3d5906722a00442725c0a8f7dd66027f6606

6 years agoadd: handle the 'noOCSP' feature in the include section
Felix Dörre [Fri, 26 May 2017 11:33:30 +0000 (11:33 +0000)]
add: handle the 'noOCSP' feature in the include section

Change-Id: I4b1b92796f7c021c847ba45f67291bc1d5b78860

6 years agofix: misspelled test name
Lucas Werkmeister [Wed, 31 May 2017 21:29:32 +0000 (23:29 +0200)]
fix: misspelled test name

Change-Id: Ie767e802779136071d8cd1c01dd35ba504a73992

6 years agoupd: debian package compat to v9
Felix Dörre [Mon, 1 May 2017 13:46:30 +0000 (13:46 +0000)]
upd: debian package compat to v9

Change-Id: Id91e92382e00b0ddb2fbc7aaf3233b81d849849f

6 years agoadd: make target to check formatting
Felix Dörre [Sat, 29 Apr 2017 07:11:27 +0000 (07:11 +0000)]
add: make target to check formatting

Change-Id: I118f618ee48a0d8d4bf51d85ccde9c2fc13029df

6 years agoupd: extract actual ocsp signing into own method
Felix Dörre [Sun, 23 Apr 2017 20:55:35 +0000 (20:55 +0000)]
upd: extract actual ocsp signing into own method

Change-Id: I6b2c12f67af4b745c1e4d87f8006ed14eaa414da

6 years agofmt: code cleanup in X509.cpp
Felix Dörre [Sun, 23 Apr 2017 20:55:35 +0000 (20:55 +0000)]
fmt: code cleanup in X509.cpp

Change-Id: I0f89c49b6d253874bb371520e8b48047d8251b49

6 years agoadd: configuration of OCSP path
Felix Dörre [Thu, 20 Apr 2017 19:46:52 +0000 (19:46 +0000)]
add: configuration of OCSP path

Change-Id: Ibb81366d3e93485559ac68103d15b165c74822fd

6 years agoadd: signing of OCSP certificates
Felix Dörre [Sat, 8 Apr 2017 20:26:03 +0000 (22:26 +0200)]
add: signing of OCSP certificates

Change-Id: If9298ce309986604d53e82f9b3bc16536dfc70f0

6 years agofmt: extract lambdas to make them better formatted
Felix Dörre [Sun, 23 Apr 2017 14:14:24 +0000 (14:14 +0000)]
fmt: extract lambdas to make them better formatted

Change-Id: Ice57713c46e7c671e5e3440d7b9b6ed624ef73ee

7 years agofmt: run format script excluding lambdas
Felix Dörre [Sun, 23 Apr 2017 11:10:51 +0000 (11:10 +0000)]
fmt: run format script excluding lambdas

Change-Id: Icb292c8c3298f924398eccaadeb3d164721e9bc7

7 years agofix: check cert before operating on it
Felix Dörre [Sun, 9 Apr 2017 17:15:51 +0000 (17:15 +0000)]
fix: check cert before operating on it

Change-Id: I61c13d2e0e9c62d0833fff08b05bc4ded31ada98

7 years agoMerge "add: documentation of the signing protocol"
Felix Dörre [Wed, 19 Apr 2017 22:42:18 +0000 (00:42 +0200)]
Merge "add: documentation of the signing protocol"

7 years agoMerge "fmt: whitespace, padding and indentation formatting"
Felix Dörre [Wed, 19 Apr 2017 22:29:31 +0000 (00:29 +0200)]
Merge "fmt: whitespace, padding and indentation formatting"

7 years agoMerge "upd: improve format script"
Lucas Werkmeister [Tue, 18 Apr 2017 20:19:20 +0000 (22:19 +0200)]
Merge "upd: improve format script"

7 years agoadd: documentation of the signing protocol
Felix Dörre [Thu, 30 Mar 2017 08:48:33 +0000 (10:48 +0200)]
add: documentation of the signing protocol

Change-Id: I39dfb2181b808be6d9b28d91f864b0a2bcac4d24

7 years agoupd: improve format script
Lucas Werkmeister [Tue, 28 Feb 2017 13:13:09 +0000 (14:13 +0100)]
upd: improve format script

- exec astyle to shave off a fork()
- Align pointers to names. In

      int* a, b;

  only a is a pointer, b isn’t. The alignment to names,

      int *a, b;

  makes this clearer.
- Don’t create backup files – everything’s under version control.
- Don’t format the libraries, there’s no point in that.
- Spell out the recursive option (long form), for readability and
  consistency with the other options (which we also spell out).

Change-Id: Id87beb4351e8b63ae4c492b44f57d38561c2fc85

7 years agofmt: whitespace, padding and indentation formatting
Benny Baumann [Wed, 22 Mar 2017 22:39:44 +0000 (23:39 +0100)]
fmt: whitespace, padding and indentation formatting

Change-Id: I10baff23ab801e4b6fa47f3e943172bbce726ba5

7 years agoMerge "chg: rename package name and all references to it"
Benny Baumann [Wed, 22 Mar 2017 21:38:53 +0000 (22:38 +0100)]
Merge "chg: rename package name and all references to it"

7 years agoadd: building instructions
Martin Gummi [Tue, 21 Mar 2017 20:25:46 +0000 (21:25 +0100)]
add: building instructions

Change-Id: I8d85b4e0ba9d0b6c2b28e0ac9b513725ba67d43e

7 years agochg: rename package name and all references to it
Martin Gummi [Wed, 22 Mar 2017 00:17:05 +0000 (01:17 +0100)]
chg: rename package name and all references to it

Change-Id: I5fca377ef0093f128c9a2aaa7facc69f4d0811da

7 years agochg: Make the signer actively reject MD5 and SHA1
Benny Baumann [Mon, 6 Mar 2017 08:05:26 +0000 (09:05 +0100)]
chg: Make the signer actively reject MD5 and SHA1

Change-Id: Icb4ca0df56e284944c6840b2cb4b0852fe7999a6

7 years agofix: be able to load CAs without private key
Felix Dörre [Tue, 28 Feb 2017 13:01:36 +0000 (14:01 +0100)]
fix: be able to load CAs without private key

this is needed for the signer-client to load CAs when
he does not have the according private key.

Change-Id: Ib1a9c6fd9cde6ec3af1414f2b22faa22d1fa6fea

7 years agofix: Duplicate ASN1_TIME of certificate's notBefore substructure to decouple lifetimes
Benny Baumann [Sun, 26 Feb 2017 00:13:43 +0000 (01:13 +0100)]
fix: Duplicate ASN1_TIME of certificate's notBefore substructure to decouple lifetimes

Also introduces two more error checks to avoid null-pointer dereference

Change-Id: Ic797e4bb7b080dad205316cb67fe48426eb25fe3

7 years agocfg: Remove some legacy stuff from OpenSSL
Benny Baumann [Sun, 26 Feb 2017 00:13:34 +0000 (01:13 +0100)]
cfg: Remove some legacy stuff from OpenSSL

Disabling OpenSSL unit tests as they break when disabling weak ciphers

Change-Id: I710314f456d3b93964ad020a9e83bbb1a70582c5

7 years agocfg: Partially optimize debug builds
Benny Baumann [Sun, 26 Feb 2017 00:13:20 +0000 (01:13 +0100)]
cfg: Partially optimize debug builds

Change-Id: I0eeed3d577419beae3de8335660d241cfeeca236

7 years agoremove remaining dependencies to mysql
Felix Dörre [Wed, 1 Feb 2017 08:35:33 +0000 (09:35 +0100)]
remove remaining dependencies to mysql

Change-Id: I0ac6452ca6b1d285a0c35c4a71d7669e414a9ef5

7 years agoupd: fix problem with tm-initializer
Felix Dörre [Mon, 9 Jan 2017 17:36:14 +0000 (18:36 +0100)]
upd: fix problem with tm-initializer

gcc's error message was: ISO C++ does not allow C99 designated initializers

Change-Id: I5d8869db0eb0707772a56d8262eb64f8bbc74029

7 years agodel: log message every 5 seconds when there is no task
Felix Dörre [Wed, 21 Dec 2016 19:18:23 +0000 (20:18 +0100)]
del: log message every 5 seconds when there is no task

The log message appeared every 5 seconds regardless of whether there is a job or not. This spammed the logfiles with a useless message every 5 seconds.

Change-Id: I2f1c434539631815f364ffde667f16945b6f503f

7 years agoupd: cleanups; 'std::swap' and '= {}'
Felix Dörre [Thu, 15 Dec 2016 09:14:38 +0000 (10:14 +0100)]
upd: cleanups; 'std::swap' and '= {}'

Change-Id: Iec5605a0618debb539aef1924b02e4ccfb444f8d

7 years agoupd: more valgrind stuff
Felix Dörre [Fri, 2 Dec 2016 23:52:56 +0000 (23:52 +0000)]
upd: more valgrind stuff

7 years agoupd: clean up valgrind stuff
Felix Dörre [Fri, 2 Dec 2016 23:33:53 +0000 (23:33 +0000)]
upd: clean up valgrind stuff

7 years agoupd: openssl to 1.1.0
Felix Dörre [Fri, 2 Dec 2016 11:33:35 +0000 (11:33 +0000)]
upd: openssl to 1.1.0

7 years agoupdate openssl-update-script
Felix Dörre [Fri, 2 Dec 2016 11:31:58 +0000 (11:31 +0000)]
update openssl-update-script

7 years agoupd: port src to openssl 1.1
Felix Dörre [Fri, 2 Dec 2016 11:31:19 +0000 (11:31 +0000)]
upd: port src to openssl 1.1

7 years agoMerge branch 'libs/detectcoll/local'
Felix Dörre [Sat, 29 Oct 2016 14:28:42 +0000 (16:28 +0200)]
Merge branch 'libs/detectcoll/local'

7 years agoupd: fix compilance issues
Felix Dörre [Sat, 29 Oct 2016 14:28:25 +0000 (16:28 +0200)]
upd: fix compilance issues

7 years agoMerge branch 'master' into libs/detectcoll/local
Felix Dörre [Sat, 29 Oct 2016 14:27:00 +0000 (16:27 +0200)]
Merge branch 'master' into libs/detectcoll/local

7 years agofix: we don't require mysql anymore...
Felix Dörre [Mon, 5 Sep 2016 00:33:45 +0000 (02:33 +0200)]
fix: we don't require mysql anymore...

7 years agominifixes
Felix Dörre [Thu, 30 Jun 2016 08:29:06 +0000 (10:29 +0200)]
minifixes

7 years agofix: backport of unique_ptr
Felix Dörre [Fri, 27 May 2016 19:49:43 +0000 (21:49 +0200)]
fix: backport of unique_ptr

8 years agofix: make_unique is already defined in gcc 4.9
Felix Dörre [Wed, 6 Apr 2016 11:06:42 +0000 (13:06 +0200)]
fix: make_unique is already defined in gcc 4.9

8 years agofix: we do not want to include issuer and serial as AKI
Felix Dörre [Wed, 6 Apr 2016 10:49:43 +0000 (12:49 +0200)]
fix: we do not want to include issuer and serial as AKI

8 years agofix: remove leading zeros of serials
Felix Dörre [Sat, 26 Mar 2016 21:25:08 +0000 (22:25 +0100)]
fix: remove leading zeros of serials

8 years agofix: remove formatted logging where not needed
Felix Dörre [Fri, 19 Feb 2016 15:14:25 +0000 (16:14 +0100)]
fix: remove formatted logging where not needed

8 years agoupd: catch exception when logging exceptions
Felix Dörre [Thu, 28 Jan 2016 11:27:04 +0000 (12:27 +0100)]
upd: catch exception when logging exceptions

8 years agoupd: only throwing exceptions now
Felix Dörre [Tue, 26 Jan 2016 22:58:56 +0000 (23:58 +0100)]
upd: only throwing exceptions now

8 years agoupd: check follow-up chunk-headers on re-assembling them
Felix Dörre [Tue, 26 Jan 2016 22:05:21 +0000 (23:05 +0100)]
upd: check follow-up chunk-headers on re-assembling them

8 years agofix: nicen check for empty RDN
Felix Dörre [Tue, 26 Jan 2016 22:01:11 +0000 (23:01 +0100)]
fix: nicen check for empty RDN

8 years agofix: check for nullptr can be direct
Felix Dörre [Tue, 26 Jan 2016 21:58:45 +0000 (22:58 +0100)]
fix: check for nullptr can be direct

8 years agofix: more stable crl overriding
Felix Dörre [Tue, 26 Jan 2016 21:56:24 +0000 (22:56 +0100)]
fix: more stable crl overriding

8 years agofix: also send chunks, when body is empty
Felix Dörre [Tue, 26 Jan 2016 21:29:05 +0000 (22:29 +0100)]
fix: also send chunks, when body is empty

8 years agoadd: implement command chunking especially for FULL_CRL-commands
Felix Dörre [Tue, 26 Jan 2016 15:34:47 +0000 (16:34 +0100)]
add: implement command chunking especially for FULL_CRL-commands

8 years agoupd: factor out paths in CRL writing
Felix Dörre [Tue, 26 Jan 2016 15:33:28 +0000 (16:33 +0100)]
upd: factor out paths in CRL writing

8 years agofix: better choose CAcert if multiple are available
Felix Dörre [Sat, 23 Jan 2016 17:29:57 +0000 (18:29 +0100)]
fix: better choose CAcert if multiple are available

8 years agofix: delete empty RDNs
Felix Dörre [Sat, 23 Jan 2016 17:29:17 +0000 (18:29 +0100)]
fix: delete empty RDNs

8 years agoupd: start the counting part of the serial with a '1'
Felix Dörre [Sat, 23 Jan 2016 17:28:27 +0000 (18:28 +0100)]
upd: start the counting part of the serial with a '1'

8 years agofix: resource (fd) leak in CRL class
Felix Dörre [Sat, 23 Jan 2016 17:27:47 +0000 (18:27 +0100)]
fix: resource (fd) leak in CRL class

8 years agoupd: more verbose error messages on malloc fail
Felix Dörre [Sat, 23 Jan 2016 17:26:41 +0000 (18:26 +0100)]
upd: more verbose error messages on malloc fail

8 years agofix testcases
Felix Dörre [Thu, 12 Nov 2015 09:41:01 +0000 (10:41 +0100)]
fix testcases

8 years agoupd: use central position to do line buffering
Felix Dörre [Wed, 11 Nov 2015 15:28:42 +0000 (16:28 +0100)]
upd: use central position to do line buffering

8 years agomore logging of revocation, fix revocation write-back
Felix Dörre [Mon, 9 Nov 2015 08:58:13 +0000 (09:58 +0100)]
more logging of revocation, fix revocation write-back

8 years agoadding crl and ca-issuers url
Felix Dörre [Sun, 8 Nov 2015 10:32:22 +0000 (11:32 +0100)]
adding crl and ca-issuers url

8 years agofix: psql, store serials in lowercase
Felix Dörre [Sun, 8 Nov 2015 10:31:57 +0000 (11:31 +0100)]
fix: psql, store serials in lowercase

8 years agosurrond client main-loop with better catches
Felix Dörre [Sun, 8 Nov 2015 10:30:58 +0000 (11:30 +0100)]
surrond client main-loop with better catches

8 years agofix: catch another exception
Felix Dörre [Wed, 14 Oct 2015 22:46:10 +0000 (00:46 +0200)]
fix: catch another exception

8 years agochange to postgres with libpqxx
Felix Dörre [Tue, 13 Oct 2015 11:02:20 +0000 (13:02 +0200)]
change to postgres with libpqxx

8 years agoslip-rework midstade... broken
Felix Dörre [Mon, 24 Aug 2015 01:26:51 +0000 (03:26 +0200)]
slip-rework midstade... broken

8 years agoupd: remarks from FJW
Felix Dörre [Sat, 15 Aug 2015 16:00:49 +0000 (18:00 +0200)]
upd: remarks from FJW

8 years agoupd: various logging updates
Felix Dörre [Thu, 13 Aug 2015 22:45:53 +0000 (00:45 +0200)]
upd: various logging updates

8 years agofix: the record reading code
Felix Dörre [Sun, 2 Aug 2015 22:55:56 +0000 (00:55 +0200)]
fix: the record reading code

8 years agoMerge remote-tracking branch 'origin/master' into tmp/logger
Felix Dörre [Sun, 2 Aug 2015 22:23:29 +0000 (00:23 +0200)]
Merge remote-tracking branch 'origin/master' into tmp/logger

8 years agoadd: Include missing header for C++ Exception Handling
Benny Baumann [Sat, 1 Aug 2015 09:39:43 +0000 (11:39 +0200)]
add: Include missing header for C++ Exception Handling

8 years agodatabase structure changed. use the new column here also
Felix Dörre [Tue, 28 Jul 2015 21:16:15 +0000 (23:16 +0200)]
database structure changed. use the new column here also

8 years agofix: make the logger compile
Felix Dörre [Tue, 21 Jul 2015 21:12:11 +0000 (23:12 +0200)]
fix: make the logger compile

8 years agofmt: Whitespace, indentation, generic source formatting
Benny Baumann [Sat, 18 Jul 2015 18:40:24 +0000 (20:40 +0200)]
fmt: Whitespace, indentation, generic source formatting

8 years agochg: Updated formatting command
Benny Baumann [Sat, 18 Jul 2015 15:39:48 +0000 (17:39 +0200)]
chg: Updated formatting command

8 years agochg: Modify the code to use the new logger
Benny Baumann [Mon, 8 Jun 2015 22:18:01 +0000 (00:18 +0200)]
chg: Modify the code to use the new logger

8 years agoupd: Reimported logger library by Florian Weber from updated upstream
Benny Baumann [Sat, 18 Jul 2015 18:51:53 +0000 (20:51 +0200)]
upd: Reimported logger library by Florian Weber from updated upstream

8 years agoadd: Import Logging functionality by Florian Weber
Benny Baumann [Mon, 8 Jun 2015 11:20:28 +0000 (13:20 +0200)]
add: Import Logging functionality by Florian Weber

Original source at https://github.com/Florianjw/simple_logger/

Minor modifications and source formatting have been applied

8 years agofix: add catch-all block around main in signer
Florian Weber [Sat, 6 Jun 2015 14:55:01 +0000 (16:55 +0200)]
fix: add catch-all block around main in signer

This fixes the problem that destructors aren't called during
stack-unwinding, if the exception in question is never caught,
which might in the worst-case prevent the wiping of private keys.

8 years agochg: replace default std::shared_ptr<…>() with explicit nullptr for empty return...
Florian Weber [Sat, 6 Jun 2015 14:51:47 +0000 (16:51 +0200)]
chg: replace default std::shared_ptr<…>() with explicit nullptr for empty return values

8 years agochg: introduce std::make_shared where appropriate
Florian Weber [Sat, 6 Jun 2015 02:12:17 +0000 (04:12 +0200)]
chg: introduce std::make_shared where appropriate

8 years agochg: remove useless destructor and simplify connect-method
Florian Weber [Sat, 6 Jun 2015 01:39:55 +0000 (03:39 +0200)]
chg: remove useless destructor and simplify connect-method

8 years agochg: Add virtual destructor to abstract class JobProvider
Florian Weber [Sat, 6 Jun 2015 01:30:57 +0000 (03:30 +0200)]
chg: Add virtual destructor to abstract class JobProvider

8 years agofix: Ambiguity when compiling
Benny Baumann [Sat, 6 Jun 2015 14:45:40 +0000 (16:45 +0200)]
fix: Ambiguity when compiling

8 years agofix: Avoid unnecessary constructor calls/allocations
Benny Baumann [Sat, 6 Jun 2015 00:09:34 +0000 (02:09 +0200)]
fix: Avoid unnecessary constructor calls/allocations

8 years agofix: Use auto& to avoid deep copy of std::shared_ptr
Benny Baumann [Sat, 6 Jun 2015 00:08:27 +0000 (02:08 +0200)]
fix: Use auto& to avoid deep copy of std::shared_ptr

8 years agoadd: load CAs based on prefixes
Felix Dörre [Sat, 30 May 2015 13:26:58 +0000 (15:26 +0200)]
add: load CAs based on prefixes

9 years agofix: Use the long way to get a formatted date
Benny Baumann [Sun, 22 Mar 2015 09:52:16 +0000 (10:52 +0100)]
fix: Use the long way to get a formatted date

9 years agoadd: Much more logging when creating a certificate
Benny Baumann [Sat, 21 Mar 2015 18:01:19 +0000 (19:01 +0100)]
add: Much more logging when creating a certificate

9 years agoadd: script to generate changelog
Felix Dörre [Sat, 21 Mar 2015 17:42:33 +0000 (18:42 +0100)]
add: script to generate changelog

9 years agoadd: better logfile opening, better connection ending
Felix Dörre [Sat, 21 Mar 2015 17:00:24 +0000 (18:00 +0100)]
add: better logfile opening, better connection ending