CVS log for pegasus/src/Pegasus/Common/SSLContextRep.h
	Help

Request diff between arbitrary revisions

BUG#: 9676
TITLE: TASK-PEP317_pullop-branch.Mergeout from head of tree 10 March 2014

DESCRIPTION: This is mergout out to bring up to date this branch. From
previous mergeout

BUG#: 9674
TITLE: Pegasus with SSL support - “OPENSSL_Uplink(10111000,08): no OPENSSL_Applink” error

DESCRIPTION:

PEP#: 317
TITLE: PEP 317, Pull Operations mergeout and code cleanup.

DESCRIPTION: No new functionality added but cleaned up a number of issues.
Merged out up to 25 August. Note that most functions run today except for
OpenExecQuery which is not tested.  See the readme.pulloperations for more
details

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

PEP#: 362
TITLE: Syncing up with head of CVS

DESCRIPTION:

BUG#: 9601

TITLE: Support only TLSv1.2 protocol for security compilance

DESCRIPTION:

BUG#: 9999
TITLE: TASK_317-Pull Operations update.

DESCRIPTION: This update brings this branch back in line with the current
head of tree and cleans up a number of outstanding issues in the code.  Note
That there are still a lot of outstanding issues being worked on.

BUG#: 9603
TITLE: Memory leak detected in MAIN

DESCRIPTION: This is for 2.12 -branch

BUG#: 9595
TITLE: Memory leak detected in MAIN

DESCRIPTION:

BUG#:9482
TITLE: Cleanup unused parameters warnings in the pegcommon library and half of interal SLP API

DESCRIPTION:

BUG#: 9999
TITLE: Merge out head to Task-PEP317 branch using Task Makefile

DESCRIPTION:  Update this working branch to Pegasus Head of Tree as of
about 8 Oct 2011

BUG#: 8952
TITLE:  Support configurable cipher suite in Pegasus
DESCRIPTION: Added support for configuring cipher suites

PEP#: 347
TITLE: Separate internal modules from current libpegcommon library

DESCRIPTION: Correcting Makefiles and #includes of modules  affected by the reorganization of pegcommon.

BUG#: 8335
TITLE: On OpenVMS only one SSL callback is implemented causing SSL calls to be non-thread safe

DESCRIPTION: Add OpenVMS specific thread ID code

BUG#: 8324
TITLE: On OpenVMS only one SSL callback is implemented causing SSL calls to be non-thread safe

DESCRIPTION: Implement thread ID callback for OpenVMS

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

PEP#: 328
TITLE: Solaris Porting

DESCRIPTION: Ongoing Solaris Porting

BUG#: 7760
TITLE: Code clean-up based on cadvise warnings.
DESCRIPTION: Changes include clean-up for potential NULL pointer dereferences, unnecessary ;, assignments in conditionals, etc.

BUG#: 7689
TITLE: Compile error in CIMServer.cpp
DESCRIPTION: Restore the restriction of the SSL dependency to the Common library.

BUG#: 5693
TITLE: cimserver logs no warning message at startup and connection time when the server certificate is expired or invalid
DESCRIPTION: Detect an invalid server certificate and log a warning.

BUG#: 2229
TITLE: Coding error makes it possible to never uninitialize SSL library
DESCRIPTION: Abstract the SSL environment initialization into its own class.

BUG#: 7445
TITLE: CRL store memory is mismanaged and leaked
DESCRIPTION: Use a SharedPtr to track the lifetimes of CRL store objects, to allow an SSLSocket connection to use the X509_STORE pointer from the SSLContext after the SSLContext reloads it CRL store while also cleaning up dynamic memory on destruction.

BUG#: 6381
TITLE: PEP 258 Certificate based authentication audit logging

DESCRIPTION: Updated SSLSocket and SSLCallbackInfo to pass IP address to the SSL callback. Added audit interfaces and audit log calls for logging Certificate based authentication and user validation attempts.

BUG#: 5840
TITLE: Common modules do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: This patch cleans up the IPC related classes. It (1) reorganizes
related classes into their own headers, (2) makes the mutex class recursive to
eliminate recursive lock exclusion logic, (3) reimplements condition variables,
renames dozens of global functions.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: IPC Refactoring Branch Work

BUG#: 5126
TITLE: Hidden default visibility for shared-library symbols (GCC 4.0 only)

DESCRIPTION: This patch introduces symbol exportation for GCC (similar to that used in Windows that requires the PEGASUS_???_LINKAGE macro).

PEP#: 233
TITLE: Updated Embedded Instance Support branch

DESCRIPTION:

- Merged with latest code from 2.5.1

- Modified ObjectNormalizer to use a CIMOMHandle instead of the repository and to normalize the instances in an embedded instance property.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 4598
TITLE: allow propagation of client cert chain as part of client auth info

DESCRIPTION:
Submitted proposed fix

BUG#: 4422
TITLE: Possible Memory/Resource Leak in SSLContextRep

DESCRIPTION: Fixed as approved.

BUG#: 3400
TITLE: Incompatible changes in SSLContext.h

DESCRIPTION: Committed changes to put back methods that were removed (and mark them deprecated) and create a "rep" for SLLCallbackInfo.

BUG#:2901
TITLE:  SSLContextMgr CRL refresh is not working

DESCRIPTION:
Submitted proposed fixed, adding a way to reset the crlstore for a deletion
or update operation

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Fix global callback problem.
Collect all certificate information during callback and store it for later use.

PEP#: 155
TITLE: HP[Nag] SSL client certificate verification for CIMExport requests

DESCRIPTION: Added SSL client certificate verification support for CIMExport requests received on the new export port. To enable this feature set the config property enableSSLExportClientVerification to true and specify the indication trust store using the config property exportSSLTrustStore. Username password authentication is not done and CIMOperation requests are not processed on the export port.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

PEP#: 165
BRANCH: RELEASE_2_3_2-branch
TITLE: SSL client verification

DESCRIPTION

#ifdef'ing bugzilla 1319/PEP165 code
with PEGASUS_232_CLIENT_VERIFICATION flag

BUG#: 1319
TITLE: SSL client authentication not fully implemented

DESCRIPTION:

--adds support for SSL client verification
  via the enableSSLClientVerification flag

PEP 55 Update license on source files to current license text and date

(head) new socket class heirarchy and test

pep_88 local domain sockets and ssl sockets

HP-Nag: PEP-74 - Made enhancements to SSLCertificateInfo class to provide more information from X509 certificate to the callback function. Modified SSLContext to take cert file and key file as two seperate parameters. Added a new config property 'sslKeyFilePath' and modified CIMServer to pass cert file and key file paths to SSLContext.

SF-HP Bug 257: Added SSL locking callback implementation. The locking callback is required to perform locking on shared OpenSSL data strucures.

HP-Nag: Modified SSLContext to use /dev/random and /dev/urandom (PEP:35). Added private constructor in SSLContext that take certPath and certKeyPath as parameters and modified CIMServer.cpp to pass certKeyPath instead of certPath (Fix for Bug:209).

merged with STABLE branch

HP-RK API Review: Remove Boolean isCIMClient parameter from SSLContext constructor.

HP-RK API Review: SSLContext rework.  Renamed CertificateInfo class to SSLCertificateInfo, VERIFY_CERTIFICATE to SSLCertificateVerifyFunction.  Added copy constructor to SSLContext class.  Moved SSLCertificateInfo member data to a Rep class in the .cpp file.

HP-RK API Review: Change String::allocateCString() to getCString().

HP-RK API Review: Remove throw() clauses from API.

HP-RK API Review: Restructured exceptions to move internal exceptions to an InternalExceptions module.  Combined definitions of overlapping CIMClientExceptions and Exceptions.  Removed unused exception definitions.  This is just the first step in cleaning up the exceptions from a developer API perspective.

HP-[CAKG] Replace Config[platform] files with Linkage.h files

HP-RK Update license header.

HP-Nag: Moved SSLContext class out of TLS files, created SSLContextRep to hide member functions and data from the users of SSLContext. Also included CertificateInfo in SSLContext files and removed the CertificateInfo files.