CVS log for pegasus/src/Pegasus/Common/SSLContext.h
	Help

Request diff between arbitrary revisions

BUG#: 9753
TITLE: Unify the ctors of SSLContext under experimental into one

DESCRIPTION:

BUG#: 9601

TITLE: Support only TLSv1.2 protocol for security compilance

DESCRIPTION:

BUG#: 8952
TITLE:  Support configurable cipher suite in Pegasus
DESCRIPTION: Added support for configuring cipher suites

BUG#: 8845
TITLE: Enhancement to SSLCertificateInfo to expose the whole certificate
DESCRIPTION: Added new function under experimental interfaces to get the peer certificate.

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7769
TITLE: doxygen warnings in C++ interfaces
DESCRIPTION: Resolve doxygen warnings in the API documentation.

BUG#: 7689
TITLE: Compile error in CIMServer.cpp
DESCRIPTION: Restore the restriction of the SSL dependency to the Common library.

BUG#: 3482
TITLE: More documentation problems
DESCRIPTION: Fix doc++/doxygen errors.

BUG#: 7445
TITLE: CRL store memory is mismanaged and leaked
DESCRIPTION: Use a SharedPtr to track the lifetimes of CRL store objects, to allow an SSLSocket connection to use the X509_STORE pointer from the SSLContext after the SSLContext reloads it CRL store while also cleaning up dynamic memory on destruction.

BUG#: 6934
TITLE: Need a mechanism to optionally disable the use of random file
DESCRIPTION: Added a PEGASUS_USE_SSL_RANDOMFILE build-time configuration option, removed unused targets in Makefile.Release and some additional cleanup

BUG#: 6381
TITLE: PEP 258 Certificate based authentication audit logging

DESCRIPTION: Updated SSLSocket and SSLCallbackInfo to pass IP address to the SSL callback. Added audit interfaces and audit log calls for logging Certificate based authentication and user validation attempts.

BUG#: 5840
TITLE: Common modules do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 3934
TITLE: Compile warning in SSLContext.h
DESCRIPTION: Removed the optional parameter from the new SSLCallbackInfo constructor and restored the previous constructor to allow both forms of use.

BUG#: 3932
TITLE: SSLCallbackInfo class does not declare a copy constructor or assignment operator
DESCRIPTION: Added private, unimplemented assignment operators and copy constructor.

BUG#: 3400
TITLE: Incompatible changes in SSLContext.h

DESCRIPTION: Committed changes to put back methods that were removed (and mark them deprecated) and create a "rep" for SLLCallbackInfo.

BUG#: 3105
TITLE: Make setCRLStore in SSLContext.h private
DESCRIPTION: Removed the setCRLStore method from the SSLContext class and updated SSLContextManager to directly call SSLContextRep::setCRLStore.

BUG#:3105
TITLE: Make setCRLStore private

DESCRIPTION:

moved function declaration from public to private

BUG#:2901
TITLE:  SSLContextMgr CRL refresh is not working

DESCRIPTION:
Submitted proposed fixed, adding a way to reset the crlstore for a deletion
or update operation

BUG#:2672
TITLE: SSLContext.h shouldn't have OpenSSL header files includes

DESCRIPTION:

Implemented proposed fix
exiting.

PEP#: 187
TITLE: SSL Certificate Management Enhancements

DESCRIPTION: Added functionality to update trust store cache on deletion of a certificate from either the trust store or the CRL store. Created a new SSLContextManager class that owns the SSLContext objects. CIMServer and Certificate providers use SSLContextManager to create a new context and to update the trust store cache.

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2356
TITLE: Nightly build failure on Linux - compiling AuthenticationInfoRep.cpp
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

RHEL30 fix.  Add #define OPENSSL_NO_KRB5 1

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

BUG#: 1875
TITLE: Fixed warnings on Solaris with Sunworkshop.

DESCRIPTION: Removed declaration friend function that was used for callback.  Substituted a friend class instead.

PEP#: 181
TITLE: OpenPegasus 2.4 SDK Packaging Definition

DESCRIPTION: Add Experimental Interface within the DOC++ captured comment.  Removed developer names from files packaged as part of SDK. Updated SDKMakefile.

BUG#: 1875
TITLE: Partial fix for anachronism warnings on Solaris.

DESCRIPTION: Added extern "C" to callback used by OpenSSL.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 AuthenticationInfo changes

BUG#: 1603
TITLE: sslcontext.h, compile error on windows
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

fix build break on windows

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

BUG#: 753
TITLE: [HP-RK] Remove deprecated interfaces

DESCRIPTION: Removed the code segments that were enabled by the PEGASUS_USE_DEPRECATED_INTERFACES compile flag.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Fix global callback problem.
Collect all certificate information during callback and store it for later use.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

HP-RK Bugzilla 1005 (Exclude deprecated interfaces by default).

PEP 55 Update license on source files to current license text and date

HP-Nag: PEP60 - Added SSL support for CIM/XML Indications delivery using ExportClient. Defined a new config property 'sslTrustFilePath' to specify certificate trust store on the CIM Server.

HP-Nag: PEP-74 related fix for a problem on Linux IA32.

HP-Nag: PEP-74 - Made enhancements to SSLCertificateInfo class to provide more information from X509 certificate to the callback function. Modified SSLContext to take cert file and key file as two seperate parameters. Added a new config property 'sslKeyFilePath' and modified CIMServer to pass cert file and key file paths to SSLContext.

HP-Nag: Modified SSLContext to use /dev/random and /dev/urandom (PEP:35). Added private constructor in SSLContext that take certPath and certKeyPath as parameters and modified CIMServer.cpp to pass certKeyPath instead of certPath (Fix for Bug:209).

HP-RK PEP34: Enhancement of doc++ documentation in SDK header files.

HP-RK API Review: Remove Boolean isCIMClient parameter from SSLContext constructor.

HP-RK API Review: Remove Boolean isCIMClient parameter from SSLContext constructor.

HP-RK API Review: Clarify meaning of SSLCertificateVerifyFunction callback pointer parameter to SSLContext constructor.

HP-RK API Review: Make SSLContext and SSLCertificateInfo default constructors private.  Change the SSLContext parameter to CIMClient::connect() from a pointer to an object reference.

HP-RK API Review: SSLContext rework.  Renamed CertificateInfo class to SSLCertificateInfo, VERIFY_CERTIFICATE to SSLCertificateVerifyFunction.  Added copy constructor to SSLContext class.  Moved SSLCertificateInfo member data to a Rep class in the .cpp file.

HP-RK API Review: Remove throw() clauses from API.

HP-RK API Review: Restructured exceptions to move internal exceptions to an InternalExceptions module.  Combined definitions of overlapping CIMClientExceptions and Exceptions.  Removed unused exception definitions.  This is just the first step in cleaning up the exceptions from a developer API perspective.

HP-[CAKG] Replace Config[platform] files with Linkage.h files

HP-RK Update license header.

HP-Nag: Moved SSLContext class out of TLS files, created SSLContextRep to hide member functions and data from the users of SSLContext. Also included CertificateInfo in SSLContext files and removed the CertificateInfo files.