Ondřej Surý
994e656977
Replace custom isc_boolean_t with C standard bool type
2018-08-08 09:37:30 +02:00
Ondřej Surý
cb6a185c69
Replace custom isc_u?intNN_t types with C99 u?intNN_t types
2018-08-08 09:37:28 +02:00
Ondřej Surý
71877806e8
Fix ax_check_openssl to accept yes and improve it to modern autotools standard
2018-07-23 22:10:52 +02:00
Ondřej Surý
c3b8130fe8
Make OpenSSL mandatory
2018-07-19 12:47:03 -04:00
Ondřej Surý
96907d636d
Add .gitignore for PKCS#11 test files
2018-07-11 07:56:48 +02:00
Ondřej Surý
7ee8a7e69f
address win32 build issues
...
- Replace external -DOPENSSL/-DPKCS11CRYPTO with properly AC_DEFINEd
HAVE_OPENSSL/HAVE_PKCS11
- Don't enforce the crypto provider from platform.h, just from dst_api.c
and configure scripts
2018-05-22 16:32:21 -07:00
Ondřej Surý
23c1f7e506
Enforce usage of OpenSSL or PKCS#11 library in platform.h header
2018-05-13 19:18:56 -07:00
Ondřej Surý
55a10b7acd
Remove $Id markers, Principal Author and Reviewed tags from the full source tree
2018-05-11 13:17:46 +02:00
Ondřej Surý
843d389661
Update license headers to not include years in copyright in all applicable files
2018-02-23 10:12:02 +01:00
Tinderbox User
672586440b
update copyright notice / whitespace
2017-09-09 23:46:01 +00:00
Evan Hunt
509ba96497
[rt45019] separate DNS_CRYPTO_LIBS from ISC_OPENSSL_LIBS and use both
2017-09-07 22:05:20 -07:00
Mark Andrews
8ee6f289d8
4450. [port] Provide more nuanced HSM support which better matches
...
the specific PKCS11 providers capabilities. [RT #42458 ]
2016-08-19 08:02:51 +10:00
Mark Andrews
0c27b3fe77
4401. [misc] Change LICENSE to MPL 2.0.
2016-06-27 14:56:38 +10:00
Tinderbox User
99bbb58ce7
update copyright notice / whitespace
2016-05-04 23:45:36 +00:00
Evan Hunt
699f790c49
[master] update pkcs11 headers
...
4353. [cleanup] Update PKCS#11 header files. [RT #42175 ]
2016-05-04 15:55:03 -07:00
Francis Dupont
3759f10fc5
added print.h includes, updated copyrights
2015-05-23 14:21:51 +02:00
Evan Hunt
a4e76a630e
[master] update gitignore files; use rev-parse to get srcid
2014-06-17 13:49:30 -07:00
Evan Hunt
acbb301e64
[master] better error output when initializing pkcs11
...
3786. [func] Provide more detailed error codes when using
native PKCS#11. "pkcs11-tokens" now fails robustly
rather than asserting when run against an HSM with
an incomplete PCKS#11 API implementation. [RT #35479 ]
2014-03-12 20:52:01 -07:00
Mark Andrews
2729aea3c1
3738. [bug] --enable-openssl-hash failed to build. [RT #35343 ]
2014-02-13 15:09:08 +11:00
Evan Hunt
dbb012765c
[master] merge libiscpk11 to libisc
...
3735. [cleanup] Merged the libiscpk11 library into libisc
to simplify dependencies. [RT #35205 ]
2014-02-11 21:20:28 -08:00
Evan Hunt
12bf5d4796
[master] address several issues with native pkcs11
2014-01-18 11:51:07 -08:00
Francis Dupont
e2258edfef
libtoolized pkcs11 Makefile.in files
2014-01-16 10:35:24 +01:00
Mark Andrews
e20788e121
update copyrights
2014-01-16 15:19:24 +11:00
Mark Andrews
75e5062bc5
#include <isc/print.h>
2014-01-15 12:30:50 +11:00
Evan Hunt
ba751492fc
[master] native PKCS#11 support
...
3705. [func] "configure --enable-native-pkcs11" enables BIND
to use the PKCS#11 API for all cryptographic
functions, so that it can drive a hardware service
module directly without the need to use a modified
OpenSSL as intermediary (so long as the HSM's vendor
provides a complete-enough implementation of the
PKCS#11 interface). This has been tested successfully
with the Thales nShield HSM and with SoftHSMv2 from
the OpenDNSSEC project. [RT #29031 ]
2014-01-14 15:40:56 -08:00