CVS log for pegasus/src/Pegasus/Common/SSLContext.h
	Help

Request diff between arbitrary revisions

PEP#: 317
TITLE: PEP 317, Pull Operations mergeout and code cleanup.

DESCRIPTION: No new functionality added but cleaned up a number of issues.
Merged out up to 25 August. Note that most functions run today except for
OpenExecQuery which is not tested.  See the readme.pulloperations for more
details

PEP#: 362
TITLE: Restful and Webadmin Clean up

DESCRIPTION:

PEP#: 362
TITLE: Restful and Webadmin Clean up

DESCRIPTION:

BUG#: 9753
TITLE: Unify the ctors of SSLContext under experimental into one

DESCRIPTION:

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

BUG#: 9601

TITLE: Support only TLSv1.2 protocol for security compilance

DESCRIPTION:

BUG#: 9999
TITLE: Merge out head to Task-PEP317 branch using Task Makefile

DESCRIPTION:  Update this working branch to Pegasus Head of Tree as of
about 8 Oct 2011

BUG#: 8952
TITLE:  Support configurable cipher suite in Pegasus
DESCRIPTION: Added support for configuring cipher suites

BUG#: 8845
TITLE: Enhancement to SSLCertificateInfo to expose the whole certificate
DESCRIPTION: Added new function under experimental interfaces to get the peer certificate.

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

PEP#: 328
TITLE: Solaris Porting

DESCRIPTION: Ongoing Solaris Porting

BUG#: 7769
TITLE: doxygen warnings in C++ interfaces
DESCRIPTION: Resolve doxygen warnings in the API documentation.

BUG#: 7689
TITLE: Compile error in CIMServer.cpp
DESCRIPTION: Restore the restriction of the SSL dependency to the Common library.

BUG#: 3482
TITLE: More documentation problems
DESCRIPTION: Fix doc++/doxygen errors.

BUG#: 7445
TITLE: CRL store memory is mismanaged and leaked
DESCRIPTION: Use a SharedPtr to track the lifetimes of CRL store objects, to allow an SSLSocket connection to use the X509_STORE pointer from the SSLContext after the SSLContext reloads it CRL store while also cleaning up dynamic memory on destruction.

BUG#: 6934
TITLE: Need a mechanism to optionally disable the use of random file
DESCRIPTION: Added a PEGASUS_USE_SSL_RANDOMFILE build-time configuration option, removed unused targets in Makefile.Release and some additional cleanup

BUG#: 6381
TITLE: PEP 258 Certificate based authentication audit logging

DESCRIPTION: Updated SSLSocket and SSLCallbackInfo to pass IP address to the SSL callback. Added audit interfaces and audit log calls for logging Certificate based authentication and user validation attempts.

PEP#: 268
TITLE: PEP#268 SSLClientCertificate Propagation

Description: Code change

PEP#: 268
TITLE: SSLClientCertificateChain Propagation

DESCRIPTION: Code changes

PEP#: 268
TITLE: SSLClientCertificateChain Propagation

DESCRIPTION: Code changes

BUG#: 5840
TITLE: Common modules do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

PEP#: 268
TITLE: SSLClientCertificateChain Propagation

DESCRIPTION: Code changes

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 4027
TITLE: SSLCallbackInfo class does not declare a copy constructor or assignment operator
DESCRIPTION: Add private assignment operator, default constructor, and copy constructor declarations.

BUG#: 3934
TITLE: Compile warning in SSLContext.h
DESCRIPTION: Removed the optional parameter from the new SSLCallbackInfo constructor and restored the previous constructor to allow both forms of use.

BUG#: 3932
TITLE: SSLCallbackInfo class does not declare a copy constructor or assignment operator
DESCRIPTION: Added private, unimplemented assignment operators and copy constructor.

BUG#: 3400
TITLE: Incompatible changes in SSLContext.h

DESCRIPTION: Committed changes to put back methods that were removed (and mark them deprecated) and create a "rep" for SLLCallbackInfo.

BUG#: 3105
TITLE: Make setCRLStore in SSLContext.h private
DESCRIPTION: Removed the setCRLStore method from the SSLContext class and updated SSLContextManager to directly call SSLContextRep::setCRLStore.

BUG#:3105
TITLE: Make setCRLStore private

DESCRIPTION:

moved function declaration from public to private

BUG#:2901
TITLE:  SSLContextMgr CRL refresh is not working

DESCRIPTION:
Submitted proposed fixed, adding a way to reset the crlstore for a deletion
or update operation

BUG#:2672
TITLE: SSLContext.h shouldn't have OpenSSL header files includes

DESCRIPTION:

Implemented proposed fix
exiting.

PEP#: 187
TITLE: SSL Certificate Management Enhancements

DESCRIPTION: Added functionality to update trust store cache on deletion of a certificate from either the trust store or the CRL store. Created a new SSLContextManager class that owns the SSLContext objects. CIMServer and Certificate providers use SSLContextManager to create a new context and to update the trust store cache.

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2356
TITLE: Nightly build failure on Linux - compiling AuthenticationInfoRep.cpp
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

RHEL30 fix.  Add #define OPENSSL_NO_KRB5 1

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

BUG#: 1875
TITLE: Fixed warnings on Solaris with Sunworkshop.

DESCRIPTION: Removed declaration friend function that was used for callback.  Substituted a friend class instead.

PEP#: 181
TITLE: OpenPegasus 2.4 SDK Packaging Definition

DESCRIPTION: Add Experimental Interface within the DOC++ captured comment.  Removed developer names from files packaged as part of SDK. Updated SDKMakefile.

BUG#: 1875
TITLE: Partial fix for anachronism warnings on Solaris.

DESCRIPTION: Added extern "C" to callback used by OpenSSL.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 AuthenticationInfo changes

BUG#: 1603
TITLE: sslcontext.h, compile error on windows
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

fix build break on windows

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

BUG#: 753
TITLE: [HP-RK] Remove deprecated interfaces

DESCRIPTION: Removed the code segments that were enabled by the PEGASUS_USE_DEPRECATED_INTERFACES compile flag.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Fix global callback problem.
Collect all certificate information during callback and store it for later use.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

More logging....

#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag

BUG#: 1319
TITLE: SSL client authentication not fully implemented

DESCRIPTION:

--adds support for SSL client verification
  via the enableSSLClientVerification flag

HP-RK Bugzilla 1005 (Exclude deprecated interfaces by default).

PEP 55 Update license on source files to current license text and date

g10n changes merged

HP-Nag: PEP60 - Added SSL support for CIM/XML Indications delivery using ExportClient. Defined a new config property 'sslTrustFilePath' to specify certificate trust store on the CIM Server.

HP-Nag: PEP-74 related fix for a problem on Linux IA32.

HP-Nag: PEP-74 - Made enhancements to SSLCertificateInfo class to provide more information from X509 certificate to the callback function. Modified SSLContext to take cert file and key file as two seperate parameters. Added a new config property 'sslKeyFilePath' and modified CIMServer to pass cert file and key file paths to SSLContext.

HP-Nag: Modified SSLContext to use /dev/random and /dev/urandom (PEP:35). Added private constructor in SSLContext that take certPath and certKeyPath as parameters and modified CIMServer.cpp to pass certKeyPath instead of certPath (Fix for Bug:209).

HP-RK PEP34: Enhancement of doc++ documentation in SDK header files.

merged with STABLE branch

HP-RK API Review: Remove Boolean isCIMClient parameter from SSLContext constructor.

HP-RK API Review: Remove Boolean isCIMClient parameter from SSLContext constructor.

HP-RK API Review: Clarify meaning of SSLCertificateVerifyFunction callback pointer parameter to SSLContext constructor.

HP-RK API Review: Make SSLContext and SSLCertificateInfo default constructors private.  Change the SSLContext parameter to CIMClient::connect() from a pointer to an object reference.

HP-RK API Review: SSLContext rework.  Renamed CertificateInfo class to SSLCertificateInfo, VERIFY_CERTIFICATE to SSLCertificateVerifyFunction.  Added copy constructor to SSLContext class.  Moved SSLCertificateInfo member data to a Rep class in the .cpp file.

HP-RK API Review: Remove throw() clauses from API.

HP-RK API Review: Restructured exceptions to move internal exceptions to an InternalExceptions module.  Combined definitions of overlapping CIMClientExceptions and Exceptions.  Removed unused exception definitions.  This is just the first step in cleaning up the exceptions from a developer API perspective.

HP-[CAKG] Replace Config[platform] files with Linkage.h files

HP-RK Update license header.

HP-Nag: Moved SSLContext class out of TLS files, created SSLContextRep to hide member functions and data from the users of SSLContext. Also included CertificateInfo in SSLContext files and removed the CertificateInfo files.