CVS log for pegasus/src/Pegasus/Common/SSLContext.cpp
	Help

Request diff between arbitrary revisions

BUG#: 9676
TITLE: Mergeout from head of tree to branch TASK-PEP317_pullop-branch

DESCRIPTION: Modified and added files from head since last mergeout. This
brings task branch up to head of tree as of 23 July 2014

BUG#: 9908
TITLE: SSL/TLS Compression Algorithm Information Leakage Vulnerability

DESCRIPTION:

BUG#: 9743
TITLE: [SSL]pegasus will not be NIST 800-131a compliant

DESCRIPTION:

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch. Comment out some diagnostics.
Fix issue with diff from head

DESCRIPTION: Pick up issue for mergeout where we did not pick up two
commits in head about 5 weeks ago (TLS.cpp, CMPISCMOUtilities.cpp)
even if I do not know why.  Comment out some diagnostics.

BUG#: 9863
TITLE: [ SSL] disable SSLv2 completely in pegasus

DESCRIPTION:

BUG#: 9861
TITLE: [SSL]TLSv1.2 implementation is rigid, not allowing higher protocol

DESCRIPTION:

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch.Mergeout from head of tree 10 March 2014

DESCRIPTION: This is mergout out to bring up to date this branch. From
previous mergeout

BUG#: 9046
TITLE: mem leak in _makeSSLContext() in SSLContext.cpp

DESCRIPTION:

PEP#: 317
TITLE: PEP 317, Pull Operations mergeout and code cleanup.

DESCRIPTION: No new functionality added but cleaned up a number of issues.
Merged out up to 25 August. Note that most functions run today except for
OpenExecQuery which is not tested.  See the readme.pulloperations for more
details

PEP#: 362
TITLE: Restful and Webadmin Clean up

DESCRIPTION:

PEP#: 362
TITLE: Restful and Webadmin Clean up

DESCRIPTION:

BUG#: 9753
TITLE: Unify the ctors of SSLContext under experimental into one

DESCRIPTION:

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

BUG#: 9748

TITLE: build break on due to interface change in SSL*_Method

DESCRIPTION:

BUG#: 9747
TITLE: Build breaks on SSLContext.cpp when SSL is not enabled

DESCRIPTION:

BUG#: 9601

TITLE: Support only TLSv1.2 protocol for security compilance

DESCRIPTION:

PEP#: 317
TITLE: Update merge out from last 2.13.0.

DESCRIPTION: Sync with 2.13.0 just before release.  Note that we kept
the Development status.

BUG#: 9689
TITLE: SSL/TLS Compression Algorithm Information Leakage Vulnerability .
DESCRIPTION: Added NO_COMPRESSION algorithm for OPENSSL 1.0 and other versions.

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#: 9610
TITLE: rpm build failed due to unused variable error

DESCRIPTION:

BUG#:9545

TITLE:Build break (Warning) when PEGASUS_REMOVE_TRACE=true

DESCRIPTION:

BUG#:9482
TITLE: Cleanup unused parameters warnings in the pegcommon library and half of interal SLP API

DESCRIPTION:

BUG#: 9315

TITLE: Optimization :Use SSL_MODE_RELEASE_BUFFERS to reduce memory

DESCRIPTION:

BUG#: 9999
TITLE: Merge out head to Task-PEP317 branch using Task Makefile

DESCRIPTION:  Update this working branch to Pegasus Head of Tree as of
about 8 Oct 2011

BUG#: 9041
TITLE: Leak detected in cimserver with invalid sslCipherSuite value
DESCRIPTION: Deleted SSL Context when there is a failure to set ssl cipher.

BUG#: 9045
TITLE: Compile break in SSLContext on z/OS since cipher suite update
DESCRIPTION: fixed the problem

BUG#: 8952
TITLE:  Support configurable cipher suite in Pegasus
DESCRIPTION: Added support for configuring cipher suites

BUG#: 8949
TITLE: Build failure in SSLContext.cpp with latest versions of openSSL

BUG#: 8924
TITLE: cimserver crashes when compiled with -D_FORTIFY_SOURCE=2 option
DESCRIPTION: Used CIMDateTime constructor to directly create the CIMDateTime object.

BUG#: 8845
TITLE: Enhancement to SSLCertificateInfo to expose the whole certificate
DESCRIPTION: Added new function under experimental interfaces to get the peer certificate.

BUG#: 8778
TITLE: Build failure in SSLContext.cpp with latest versions of openSSL

BUG#: 8549
TITLE: Enhance the SSLException message for server certificate load failure.
DESCRIPTION: Updated the message with the certificate file path.

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7854
TITLE: PEP# 316 - Replace PEG_TRACE_STRING with PEG_TRACE

DESCRIPTION: Replace PEG_TRACE_STRING with PEG_TRACE

PEP#: 305
TITLE: VxWorks Port

DESCRIPTION: Ongoing VxWorks porting

PEP#: 328
TITLE: Solaris Porting

DESCRIPTION: Ongoing Solaris Porting

BUG#: 7770
TITLE: Arguments are incompatible with corresponding format string conversions
DESCRIPTION: Match printf and scanf conversion formats with corresponding argument types.

BUG#: 7451
TITLE: Need to check return value of X509_STORE_new.
DESCRIPTION:  Added checks for NULL returns from X509_STORE_new.

BUG#:7749
TITLE: Trace Level checking (everything, but Pegasus/Server)

DESCRIPTION:

BUG#: 7742
TITLE: Unreferenced variables
DESCRIPTION: Remove unused variable definitions.

BUG#: 7689
TITLE: Compile error in CIMServer.cpp
DESCRIPTION: Restore the restriction of the SSL dependency to the Common library.

BUG#: 5693
TITLE: cimserver logs no warning message at startup and connection time when the server certificate is expired or invalid
DESCRIPTION: Detect an invalid server certificate and log a warning.

BUG#:7472
TITLE:PASE only, change umeGenerateRandomNumber() call in SSLContext.cpp

DESCRIPTION: commit approved patch.

BUG#: 2229
TITLE: Coding error makes it possible to never uninitialize SSL library
DESCRIPTION: Abstract the SSL environment initialization into its own class.

BUG#: 7445
TITLE: CRL store memory is mismanaged and leaked
DESCRIPTION: Use a SharedPtr to track the lifetimes of CRL store objects, to allow an SSLSocket connection to use the X509_STORE pointer from the SSLContext after the SSLContext reloads it CRL store while also cleaning up dynamic memory on destruction.

BUG#: 7431
TITLE: Memory leak in SSLCallback::verificationCRLCallback
DESCRIPTION: Free the memory for the CRL store context object.

BUG#: 7429
TITLE: Memory leak in SSLContext
DESCRIPTION: Delete the dynamic memory allocated while loading a private key.

BUG#: 7413
TITLE: Memory leak in SSLContext
DESCRIPTION: Delete the dynamic memory allocated while loading a private key.

BUG#: 6994
TITLE: Multiple Certificate based authentication audit log entries logged for client connections from within cimserver
DESCRIPTION: Perform certificate based authentication audit logging in the socket accept() method rather than the SSL certificate verification callback to ensure it is only done on the server side of a connection.

BUG#:6808
TITLE: Complete some PASE code.

DESCRIPTION: Add some PASE code that forgot to commit in PEP 284.

PEP#: 284
TITLE: PEP 284 - Port Pegasus to i5/PASE platform: Step four, function and bundles change

DESCRIPTION: Undo the changes for FILE: SSLContext.cpp 1.83 -> 1.84,
this change has not been reviewed yet.

BUG#: 6825
TITLE: Cleanup SSL error tracing in TLS module
DESCRIPTION: Updated the current SSL trace to DiscardedData which will be traced only on error.

BUG#: 6785
TITLE: Non-portable whitespace warnings from makedepend
DESCRIPTION: Remove space characters that precede preprocessor directives.

BUG#:6606
PEP#:284
TITLE: PEP 284 - Port Pegasus to i5/PASE platform: Step four, function and bundles change

DESCRIPTION: PEP 284 - Port Pegasus to i5/PASE platform: Step four, function and bundles change

BUG#: 6574
TITLE: Compile warnings in SSLContext.cpp
DESCRIPTION: Remove the explicit inclusion of the thread ID in trace messages.

BUG#: 6537
TITLE: Compile failure in SSLContext.cpp
DESCRIPTION: Updated trace statements to work with the new PEG_TRACE_STRING macro.

BUG#:5739
PEP#:284
TITLE: remove OS400 code

DESCRIPTION: Port Pegasus to i5/PASE platform: Step one, remove obsolete OS400 code

BUG#: 6037
TITLE: PEP 286 Privilege Separation
DESCRIPTION: Implement privilege separation for the CIM Server.  This allows the CIM Server to run without privilege, using a separate small process to perform privileged operations as necessary.

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Merge with latest changes.

BUG#: 6381
TITLE: PEP 258 Certificate based authentication audit logging

DESCRIPTION: Updated SSLSocket and SSLCallbackInfo to pass IP address to the SSL callback. Added audit interfaces and audit log calls for logging Certificate based authentication and user validation attempts.

BUG#: 6318
TITLE: Avoid using Formatter in trace statements
DESCRIPTION: Use the PEG_TRACE macro instead of PEG_TRACE_STRING with a Formatter-generated string value.  Also do some related clean-up.

BUG#:6300
TITLE: Performance - simplify internal Tracer interface and use the more efficent Trace macros (2.6)

DESCRIPTION:

PEP#: 286
TITLE: Privilege Separation
DESCRIPTION: Merge PEP286_PRIVILEGE_SEPARATION_BRANCH into the HEAD.

BUG#:6207
TITLE: Performance - make OpenPegasus use its more efficent Trace macros

DESCRIPTION:

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 286
TITLE: Privilege Separation

DESCRIPTION: Ongoing privilege separation work.

PEP#: 268
TITLE: PEP#268 SSLClientCertificate Propagation

Description: Code change

PEP#: 268
TITLE: SSLClientCertificateChain Propagation

DESCRIPTION: Code changes

BUG#: 5872
TITLE: Compile warnings in Common directory
DESCRIPTION: Resolve HP-UX compile warnings.

BUG#: 5840
TITLE: Common modules do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

PEP#: 268
TITLE: SSLClientCertificateChain Propagation

DESCRIPTION: Code changes

BUG#: 5440
TITLE: Failure in SSLContext.cpp
DESCRIPTION: Corrected the submittal of the approved patch.

BUG#: 5440
TITLE: OpenVMS - pthread_t defined as 64 bits - causing failure in SSLContext.cpp.

DESCRIPTION: Remove _get_thread_id routine and ifdef out CRYPT_set_id_callback for VMS.

BUG#: 5430
TITLE: Build fails in SSLContext.cpp
DESCRIPTION: Fix the CRYPTO_set_id_callback setup for platforms that use pthreads.

BUG#:5298
TITLE: switch Pegasus from blocking to non-blocking writes

DESCRIPTION:

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: Fixed error in SSL thread id callback usage.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: Fixed compiler error in this module relating to Threads::self()
    usage.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: This patch cleans up the IPC related classes. It (1) reorganizes
related classes into their own headers, (2) makes the mutex class recursive to
eliminate recursive lock exclusion logic, (3) reimplements condition variables,
renames dozens of global functions.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: IPC Refactoring Branch Work

BUG#:5226
TITLE: switch Pegasus from blocking to non-blocking writes

DESCRIPTION: Committed third patch, aka approved version

BUG#: 5134
TITLE: Network.h: a new place for network definitions.

DESCRIPTION: This patch collects network-related definitions and includes into a single file (Network.h)

BUG#: 4891
TITLE: Allow SSL CRL functionality to be optionally disabled

DESCRIPTION: Added a build-time configuration setting PEGASUS_ENABLE_SSL_CRL_VERIFICATION. Updated the ssltrustmgr, CertificateProvider, Config and SSLContext components.

BUG#: 4878
TITLE: Allow SSL CRL functionality to be optionally disabled

DESCRIPTION: Added a build-time configuration setting PEGASUS_ENABLE_SSL_CRL_VERIFICATION. Updated the ssltrustmgr, CertificateProvider, Config and SSLContext components.

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

PEP#: 244
TITLE: Pegasus Server Profile support

DESCRIPTION:

- Merge branch with latest changes from trunk
- Cache repository info in Interop provider for much faster response times during ElementConformsToProfile operations

BUG#: 4652
TITLE: Nightly Build Failure running SSL_TS1 test on RHAS 2.1 IPF

DESCRIPTION: Updated the X509_get_issuer_name to use the currentCert object instead of ctx current_cert pointer as does not appear to be initialized properly.

BUG#: 4598
TITLE: allow propagation of client cert chain as part of client auth info

DESCRIPTION:
Submitted proposed fix

BUG#: 4368
TITLE: CRL verification callback is called more than once during certificate verification

DESCRIPTION:
Removed extraneous call.

BUG#: 4422
TITLE: Possible Memory/Resource Leak in SSLContextRep

DESCRIPTION: Fixed as approved.

BUG#: 4544
TITLE: Windows build error in SSLContext.cpp

DESCRIPTION:

Include Config.h, which defines in the Platform-specific macros via the Platform header file, before testing the OS type macro.

BUG#: 3532
TITLE: Corrected Windows related #ifdefs

DESCRIPTION: Was using platform variable when either OS variable or compiler variable was more appropriate.

BUG#:4330
TITLE: Memory leak during connect() call.

DESCRIPTION: Submit the 2.5 fix documented in Bugzilla 2563 to the OpenPegasus 2.4.3 base line.

BUG#:4060
TITLE:cimserver crashes when sslClientVerificationMode set to required

DESCRIPTION:
Submit approved fix

BUG#:4053
TITLE:certificate provider cannot handle some hex serial numbers

DESCRIPTION:
Submit approved fix

BUG#: 3934
TITLE: Compile warning in SSLContext.h
DESCRIPTION: Removed the optional parameter from the new SSLCallbackInfo constructor and restored the previous constructor to allow both forms of use.

BUG#: 3400
TITLE: Incompatible changes in SSLContext.h

DESCRIPTION: Committed changes to put back methods that were removed (and mark them deprecated) and create a "rep" for SLLCallbackInfo.

BUG#: 2563
TITLE: Memory leak during connect() call

Description:
Submitted proposed fix

BUG#: 2742
TITLE: OS/40O porting changes for 2.5

DESCRIPTION: Add call to activate openssl *srvpgm on os/400 and get exports

BUG#: 3190
TITLE: Destroyer is obsolete

DESCRIPTION: Fixed as suggested.

BUG#: 3105
TITLE: Make setCRLStore in SSLContext.h private
DESCRIPTION: Removed the setCRLStore method from the SSLContext class and updated SSLContextManager to directly call SSLContextRep::setCRLStore.

BUG#:2901
TITLE:  SSLContextMgr CRL refresh is not working

DESCRIPTION:
Submitted proposed fixed, adding a way to reset the crlstore for a deletion
or update operation

BUG#:2931
TITLE:  Cannot disable SSLv2 in SSLContext

DESCRIPTION:
Submitted approved fix

BUG#:2587
TITLE: Pegasus crash during SSLCallback::verificationCallback

DESCRIPTION:
Implemented missing copy constructor property

PEP#:187
TITLE: SSL Cert Mgmt Enhancements

DESCRIPTION:

Fixed a CRL callback bug

PEP#: 187
TITLE: SSL Cert Mgmt Enhancements

DESCRIPTION

Check in CRL callback

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

PEP#:187
TITLE: SSL Cert Mgmt Enhancements

DESCRIPTION: Back out part of CRL callback

BUG#: 2366
TITLE: Windows build failure in SSLContext.cpp
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Need to include <wincrypt.h> on windows.
We must use the windows version instead of the
openssl version, as specified in X509.h

BUG#: 2356
TITLE: Nightly build failure on Linux - compiling AuthenticationInfoRep.cpp
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

RHEL30 fix.  Add #define OPENSSL_NO_KRB5 1

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

BUG#: 1875
TITLE: Fixed warnings on Solaris with Sunworkshop.

DESCRIPTION: Changed to use a class to do the real work of the callback, the C function callback just forwards the call to a static method of the class.  Also, added some typedefs to get rid of some other warnings from Sunworkshop.

BUG#: 1875
TITLE: Partial fix for anachronism warnings on Solaris.

DESCRIPTION: Added extern "C" to callback used by OpenSSL.

BUG#: 1874
TITLE: Cimserver crashes when using SSL
DESCRIPTION: Removed an offending 'throw' statement that was missed out during AutoMutex changes

BUG#: 1090
TITLE: Mutex's May Not Be Unlocked Resulting in Hang
DESCRIPTION:  Updated files to use AutoMutex.

BUG#: 1520
TITLE: [HP-RK] "invalid datetime format" expection thrown because getDateTime cannot handle V_ASN1_GENERALIZEDTIME from OpenSSL

DESCRIPTION: Updated the SSL certificate date/time parsing to handle the V_ASN1_GENERALIZEDTIME format.

BUG#: 1696
TITLE: HP[Nag] Remove unused flag PEGASUS_SSL_DEVRANDOM

DESCRIPTION: The compile time flag PEGASUS_SSL_DEVRANDOM is not being used. Remove this flag and related code in SSLContext.cpp.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 AuthenticationInfo changes

BUG#: 1603
TITLE: sslcontext.h, compile error on windows
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

fix build break on windows

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

BUG#: 753
TITLE: [HP-RK] Remove deprecated interfaces

DESCRIPTION: Removed the code segments that were enabled by the PEGASUS_USE_DEPRECATED_INTERFACES compile flag.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Fix global callback problem.
Collect all certificate information during callback and store it for later use.

PEP#: 155
TITLE: HP[Nag] SSL client certificate verification for CIMExport requests

DESCRIPTION: Added SSL client certificate verification support for CIMExport requests received on the new export port. To enable this feature set the config property enableSSLExportClientVerification to true and specify the indication trust store using the config property exportSSLTrustStore. Username password authentication is not done and CIMOperation requests are not processed on the export port.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

added comments

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

added comments

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

More logging....

#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

Minor changes, code cleanup
#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag

BUG#: 1319
TITLE: SSL client authentication not fully implemented

DESCRIPTION:

--adds support for SSL client verification
  via the enableSSLClientVerification flag

HP-RK Bugzilla 1005 (Exclude deprecated interfaces by default).

Bug 1026: Fix SSL compiler problems for vc60

PEP 55 Update license on source files to current license text and date

IBM:HR:BUG 485

IBM:HR:BUG 485

IBM:HR:BUG459

(head) new socket class heirarchy and test

pep_88 local domain sockets and ssl sockets

merge with 2.3 localized code

IBM:HR,PEP58,r2.3:Globalization Changes - Common

HP-Nag: Added backward compatibility for using key and certificate from a single file when key file is not specified or the specified key file does not exists.

HP-Nag: PEP-74 - Made enhancements to SSLCertificateInfo class to provide more information from X509 certificate to the callback function. Modified SSLContext to take cert file and key file as two seperate parameters. Added a new config property 'sslKeyFilePath' and modified CIMServer to pass cert file and key file paths to SSLContext.

SF-HP Bug 257: Added SSL locking callback implementation. The locking callback is required to perform locking on shared OpenSSL data strucures.

HP-Nag: Modified SSLContext to use /dev/random and /dev/urandom (PEP:35). Added private constructor in SSLContext that take certPath and certKeyPath as parameters and modified CIMServer.cpp to pass certKeyPath instead of certPath (Fix for Bug:209).

merged with STABLE branch

HP-RK API Review: Remove Boolean isCIMClient parameter from SSLContext constructor.

HP-RK Fix compile error.

HP-RK API Review: Make SSLContext and SSLCertificateInfo default constructors private.  Change the SSLContext parameter to CIMClient::connect() from a pointer to an object reference.

HP-RK Fix SSL compile.

HP-RK API Review: SSLContext rework.  Renamed CertificateInfo class to SSLCertificateInfo, VERIFY_CERTIFICATE to SSLCertificateVerifyFunction.  Added copy constructor to SSLContext class.  Moved SSLCertificateInfo member data to a Rep class in the .cpp file.

HP-RK Fix SSL compile.

HP-RK API Review: Change String::allocateCString() to getCString().

HP-RK API Review: Remove throw() clauses from API.

HP-RK API Review: Restructured exceptions to move internal exceptions to an InternalExceptions module.  Combined definitions of overlapping CIMClientExceptions and Exceptions.  Removed unused exception definitions.  This is just the first step in cleaning up the exceptions from a developer API perspective.

YZ-HP: Linked openssl lib on LINUX_IA64 plateform. Fixed createInstance problem on the RT_IndicationProvider.

HP-Nag: Added tracing to TLS code, added a config property enableClientCertification and made changes in the TLS code to use this property.

HP-RK Update license header.

HP-Nag: Moved SSLContext class out of TLS files, created SSLContextRep to hide member functions and data from the users of SSLContext. Also included CertificateInfo in SSLContext files and removed the CertificateInfo files.