Werner Koch 9976285ff0

sm: Support more HMAC algos in the pkcs#12 parser. ...

* sm/minip12.c (oid_hmacWithSHA1): New.  Also for the SHA-2 algos.
(digest_algo_from_oid): New.
(set_key_iv_pbes2): Add arg digest_algo.
(crypt_block): Ditto.
(decrypt_block): Ditto.
(parse_bag_encrypted_data): Parse the optional prf part and get the
hmac algorithm.
(parse_shrouded_key_bag): Ditto.
(p12_build): Pass SHA1 for digest_algo.

* sm/t-minip12.c (run_one_test): Print failed values in verbose mode.

* tests/samplekeys/nistp256-openssl-self-signed.p12: New.
* tests/samplekeys/Description-p12: Add this one.
* tests/Makefile.am (EXTRA_DIST): Ditto.
--

This supports the modern algorithms, i.e. using SHA256 for the KDF
which is the default in openssl unless the -legacy option is used.

GnuPG-bug-id: 6536

2023-10-06 11:22:59 +02:00

..

call-agent.c

agent: Add trustlist flag "de-vs".

2023-09-07 17:14:10 +02:00

call-dirmngr.c

sm: Fix use of value NONE in gnupg_isotime_t type.

2023-08-28 08:39:16 +02:00

certchain.c

agent: New flag "qual" for the trustlist.txt.

2023-09-07 17:12:33 +02:00

certcheck.c

gpgsm: Support verification of nistp521 signatures.

2022-11-15 10:46:03 +01:00

certdump.c

sm: Fix a bug in the rfc2253 parser

2020-08-28 09:09:34 +02:00

certlist.c

gpgsm: Add --always-trust feature.

2023-08-31 11:13:38 +02:00

certreqgen-ui.c

gpgsm: Cleanup the use of GCRY_PK_ECC and GCRY_PK_ECDSA.

2022-11-14 18:16:49 +01:00

certreqgen.c

gpg,gpgsm: Extend the use of allow-ecc-encr and vsd-allow-ocb

2023-03-24 13:50:37 +01:00

ChangeLog-2011

Generate the ChangeLog from commit logs.

2011-12-01 11:09:02 +01:00

decrypt.c

gpgsm: Avoid warnings due to enum conversions

2023-08-28 08:49:45 +02:00

delete.c

sm: Fix issuer certificate look error due to legacy error code.

2023-02-24 17:46:39 +01:00

encrypt.c

gpgsm: New option --input-size-hint.

2023-07-05 12:04:08 +02:00

export.c

sm: Fix issuer certificate look error due to legacy error code.

2023-02-24 17:46:39 +01:00

fingerprint.c

gpgsm: Allow ECC encryption keys with just keyAgreement specified.

2022-10-28 12:17:46 +02:00

gpgsm-w32info.rc

w32: Add manifest files to most binaries

2020-10-02 17:04:12 +02:00

gpgsm.c

gpgsm: Add --always-trust feature.

2023-08-31 11:13:38 +02:00

gpgsm.h

agent: Add trustlist flag "de-vs".

2023-09-07 17:14:10 +02:00

gpgsm.w32-manifest.in

w32: Add missing manifests and set a requestedExecutionLevel.

2023-05-25 11:10:21 +02:00

import.c

sm: Fix use of value NONE in gnupg_isotime_t type.

2023-08-28 08:39:16 +02:00

keydb.c

sm: Fix issuer certificate look error due to legacy error code.

2023-02-24 17:46:39 +01:00

keydb.h

sm: On Windows close the kbx files at several places.

2021-03-02 19:01:07 +01:00

keylist.c

sm: Fix use of value NONE in gnupg_isotime_t type.

2023-08-28 08:39:16 +02:00

Makefile.am

sm: Complete rewrite of the PKCS#12 parser

2023-07-05 14:21:16 +02:00

minip12.c

sm: Support more HMAC algos in the pkcs#12 parser.

2023-10-06 11:22:59 +02:00

minip12.h

sm: Complete rewrite of the PKCS#12 parser

2023-07-05 14:21:16 +02:00

misc.c

gpgsm: Some more ECC support backported.

2022-11-14 17:23:06 +01:00

passphrase.c

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

passphrase.h

Change all http://www.gnu.org in license notices to https://

2016-11-05 12:02:19 +01:00

qualified.c

Replace most of the remaining stdio calls by estream calls.

2020-10-21 21:09:38 +02:00

server.c

gpgsm: Add --always-trust feature.

2023-08-31 11:13:38 +02:00

sign.c

gpgsm: Create binary detached sigs with definite form length octets.

2023-09-07 16:44:29 +02:00

t-minip12.c

sm: Support more HMAC algos in the pkcs#12 parser.

2023-10-06 11:22:59 +02:00

verify.c

gpgsm: Strip trailing zeroes from detached signatures.

2023-09-07 16:38:35 +02:00