Commit Graph

682 Commits

Author SHA1 Message Date
e81b08e02d Fix a comment 2025-06-20 09:58:45 +02:00
0c85d54800 Handle missing certificate names 2025-06-19 17:56:54 +02:00
772bc22c94 Handle null return from curl_easy_init 2025-06-19 14:32:24 +02:00
d65a2b5286 Fix various typos 2025-06-19 14:18:26 +02:00
a3fcf41e1a Check memory allocation 2025-06-19 12:00:29 +02:00
e00caac3db cmake: drop USE_WIN32 define
This was added in #423, but it's only use was then removed in #435.
2025-06-18 18:46:28 +02:00
dd9b81281f Support loading OpenSSL 3.0+ providers without -pkcs11module option (e.g., CNG) 2025-06-05 17:13:10 +02:00
6b56aef073 Add tests for handling JavaScript files 2025-06-05 14:41:36 +02:00
52bfff5756 Avoid variable reuse 2025-06-04 18:42:41 +02:00
4d52e9cc4b JavaScript format fix. 2025-06-04 18:38:28 +02:00
3292b02650 JavaScript support
Resolves #437
2025-06-04 10:04:17 +02:00
50c23daa4c Code simplification
No functional change intended.
2025-06-03 08:20:52 +02:00
9b7dae4572 Support loading arbitrary engines via ENGINE_by_id()
Use ENGINE_by_id() for any engine name that doesn't contain a dot,
assuming it's an engine ID. If the name includes a dot (e.g., a file
extension), treat it as a path to a dynamic engine module.

See #436 for discussion.
2025-06-02 20:32:26 +02:00
62438908cb Skip the "lib" prefix when guessing engine ID
Fix #436
2025-05-30 16:59:25 +02:00
829e770250 Use _WIN32 instead of USE_WIN32 for MinGW compatibility 2025-05-27 10:17:03 +02:00
a6c7c25dae Update NEWS 2025-05-14 11:29:13 +02:00
10ca3a06ea Suppress compiler warnings 2025-05-06 10:42:53 +02:00
9ea7e85468 Fix engine-less builds 2025-05-06 10:42:53 +02:00
68e8845ef1 Improve PKCS#7 verification with OpenSSL 3.5
Enhanced verification logic for PKCS#7 signedData structures by introducing a dedicated `verify_pkcs7_data()` function. This update addresses compatibility with older OpenSSL versions (< 3.0.5) and ensures correct handling of detached signed content using a BIO buffer.
The change enables support for PKCS#7 inner content (RFC 2315, section 7), as per OpenSSL PR#22575.
Refactored timestamp and authenticode verification functions to reduce duplication and properly manage X509_STORE and X509_CRL structures.
2025-05-01 11:21:29 +02:00
475ea95ba3 Fix control flow and braces for engine and provider support 2025-05-01 11:21:29 +02:00
d352dcc1a5 Do not try to load engine twice 2025-04-18 10:46:20 +02:00
7734382436 Remove Ubuntu 20.04 from CI as it's no longer supported 2025-04-16 11:48:05 +02:00
d425d8bf25 fix capitalization ws2_32.lib
Windows and MacOS are both case-insensitive, and hence the issue of wrong capitalisation may not have surfaced. 

I am forming a recipe for cross-compilation for the Julia BinarBuilder environment, which uses Linux x86_64 as the host system. However, as it uses a sensitive filesystem, I hit a linking error that could only be fixed by changing the capitalization of `Ws2_32.lib` to lowercase. 

More on that can be found in the pull request:
https://github.com/JuliaPackaging/Yggdrasil/pull/10950
2025-04-16 11:47:49 +02:00
4568c890cc Fixed resource leaks, CID 1639164, 1639165, 1639167, 1639168, 1639169 2025-03-31 13:19:35 +02:00
4bd167a8be Fixed directly dereferencing parameter p7, CID 1576008 2025-03-31 13:19:35 +02:00
e7405fa839 Simplify error handling in PKCS#7 certificate loading, CID 1639170 2025-03-31 13:19:35 +02:00
776e2ec7b6 Fix memory management for ministream and difat in MSI output, CID 1639166 2025-03-31 13:19:35 +02:00
838aaaee8d libp11 PKCS#11 provider support 2025-03-28 14:05:12 +01:00
e8f19a6efe Added verbose output for digest encryption algorithm and signature during verification 2024-12-31 13:53:46 +01:00
3a8e25e5bb Added support for multiple OID types in signer info attribute 2024-12-17 17:27:50 +01:00
7d1b460dfe Style updates 2024-12-06 22:19:00 +01:00
bc3e9e2172 Disable environment updates for Python setup 2024-12-06 22:19:00 +01:00
21bce757ef Remove specific CMake version setup for macOS 2024-12-06 22:19:00 +01:00
6a43f62835 Remove Python3_EXECUTABLE 2024-12-06 22:19:00 +01:00
8780e6f8e4 Fixed pip install 2024-12-06 22:19:00 +01:00
78a23caa54 Retain needrestart package in Linux dependency installation 2024-12-06 22:19:00 +01:00
d92927aff4 Switch to venv on Linux 2024-12-06 22:19:00 +01:00
4f412b5989 Removed VIRTUAL_ENV 2024-12-06 22:19:00 +01:00
e6f3ff631d Switch to venv on Windows 2024-12-06 22:19:00 +01:00
09135aabb8 Check Python and cryptography version in Windows CI workflow 2024-12-06 22:19:00 +01:00
de983e680f Configured macOS environment for arm64 architecture 2024-12-06 22:19:00 +01:00
dc827b94e5 Switch to venv on macOS 2024-12-06 22:19:00 +01:00
40ce811701 Fixed conditional compilation for CURL and proxy support 2024-10-25 17:48:01 +02:00
db5b4c4dc0 Add the "-engineCtrl" option to control hardware and CNG engines (#405)
Documentation updated for CNG engine 1.1 compatibility.
2024-09-08 19:23:38 +02:00
4ee429792d Refactor imports to use explicit submodule imports and organize class/function imports 2024-09-06 11:58:28 +02:00
27686c0b0c Missing part of 4dd836bab1 2024-09-05 11:43:25 +02:00
21133f9c3b Added the '-blobFile' option to specify a file containing the blob content 2024-09-04 17:51:35 +02:00
64305d6415 tests: add import for python-cryptography >= 43.0.0
write_pkcs12_container method raises following error message with
python-cryptography-43.0.0:

  Error: module 'cryptography.hazmat.primitives.serialization' has no attribute 'pkcs12'

Explicit import of the pkcs12 module resolves the issue.
2024-09-02 13:05:55 +02:00
4dd836bab1 Initial 2.10-dev commit 2024-06-29 21:58:55 +02:00
f57c213207 Use the installed version of Python 2024-06-29 20:52:55 +02:00