CVS log for pegasus/src/Pegasus/Common/TLS.cpp
	Help

Request diff between arbitrary revisions

BUG#: 9964
TITLE: Fixed compilation with uset PEGASUS_HAS_SSL.

DESCRIPTION:

BUG#: 9946
TITLE: Use MSG_PEEK to check for connection.

DESCRIPTION: When checking if a clinet connection is alive, use
recv(...,MSG_PEEK) instead of blunt read().

BUG#: 9861
TITLE: [SSL]TLSv1.2 implementation is rigid, not allowing higher protocol

DESCRIPTION:

BUG#:9482
TITLE: Cleanup unused parameters warnings in the pegcommon library and half of interal SLP API

DESCRIPTION:

BUG#: 8273
TITLE: Remove trailing space characters
DESCRIPTION: Remove meaningless whitespace.

BUG#: 8123
TITLE: Update copyright/license text

DESCRIPTION:

Fixing trailing spaces in copyright/license text

BUG#: 8123
TITLE: Update Coyright/License text

DESCRIPTION:

Adding the new copyright/license text to almost all files

BUG#: 7770
TITLE: Arguments are incompatible with corresponding format string conversions
DESCRIPTION: Match printf and scanf conversion formats with corresponding argument types.

BUG#:7749
TITLE: Trace Level checking (everything, but Pegasus/Server)

DESCRIPTION:

BUG#: 1092
TITLE: Potential socket leaks in HTTPConnector::connect()
DESCRIPTION: Use automatic objects to prevent resource leaks.

BUG#: 7469
TITLE: Build failure in CIMClientRep.cpp on Windows
DESCRIPTION: Limit the inclusion of SSL header files to the Common library.

BUG#: 7445
TITLE: CRL store memory is mismanaged and leaked
DESCRIPTION: Use a SharedPtr to track the lifetimes of CRL store objects, to allow an SSLSocket connection to use the X509_STORE pointer from the SSLContext after the SSLContext reloads it CRL store while also cleaning up dynamic memory on destruction.

BUG#: 5979
TITLE: some icu bundles in src/Pegasus/msg not fit for source code
DESCRIPTION: Make the message IDs consistent between the source code and the message bundles.

BUG#: 7181
TITLE: Socket connection attempts should time out
DESCRIPTION: Use a non-blocking socket when creating a client connection, so that a connect attempt may time out.

BUG#: 6994
TITLE: Multiple Certificate based authentication audit log entries logged for client connections from within cimserver
DESCRIPTION: Perform certificate based authentication audit logging in the socket accept() method rather than the SSL certificate verification callback to ensure it is only done on the server side of a connection.

BUG#: 6941
TITLE: SSL_accept failure trace should also capture the Client IP address
DESCRIPTION: Updated the trace to also capture the client IP address

BUG#: 6825
TITLE: Cleanup SSL error tracing in TLS module
DESCRIPTION: Updated the current SSL trace to DiscardedData which will be traced only on error.

BUG#: 6800
TITLE: Use z/OS UNIX Domain socket ioctl() function for client verification instead of files

DESCRIPTION: Add zOS function to retrieve and process a userID from the UNIX Local Domain socket.

BUG#: 6700
TITLE: zOS: Pegasus dos not close AT-TLS client socket after the client disconnect
DESCRIPTION: Change the semantics of MP_Socket::incompleteReadOccurred to apply better across platforms.

BUG#: 6598
TITLE: Remove OpenSSL dependency from Common header files
DESCRIPTION: Only include OpenSSL header files from Pegasus source files, not Pegasus header files.  Also, consolidate the definition of SSL-related macros in config.mak.

BUG#: 6381
TITLE: PEP 258 Certificate based authentication audit logging

DESCRIPTION: Updated SSLSocket and SSLCallbackInfo to pass IP address to the SSL callback. Added audit interfaces and audit log calls for logging Certificate based authentication and user validation attempts.

BUG#: 6297
TITLE: Some source files no longer meet chksrc requirements
DESCRIPTION: Format according to the coding conventions.

BUG#:6207
TITLE: Performance - make OpenPegasus use its more efficent Trace macros

DESCRIPTION:

BUG#:5338
TITLE: 20s timeout value for client and socket should be defined as a Constant

DESCRIPTION:

BUG#: 6018
TITLE: TLS.cpp should include more detailed error code

DESCRIPTION:
Add more informative error code.

BUG#: 5840
TITLE: Common modules do not meet chksrc requirements
DESCRIPTION: Remove tab characters and author names and shorten lines that are wider than 80 characters.

BUG#: 5634
TITLE: PEP 259 SSL Certificate Management Command Interfaces - phase 4

DESCRIPTION: Removed export SSL connection code and config parameters exportSSLTrustStore and enableExportSSLClientVerification. Added cimcrl and cimtrust man pages. Updated SSL guidelines document.

BUG#: 5346
TITLE: z/OS: Use z/OS ATTLS function for client verification instead of SSL.

DESCRIPTION: Submit proposed code changes + remove names.

BUG#: 5314
TITLE: IPC Refactoring

DESCRIPTION: This patch cleans up the IPC related classes. It (1) reorganizes
related classes into their own headers, (2) makes the mutex class recursive to
eliminate recursive lock exclusion logic, (3) reimplements condition variables,
renames dozens of global functions.

BUG#:5334
TITLE: set default for socketWriteTimeout in case there is no PEGASUS_HAS_SSL

DESCRIPTION: committing proposed patch

BUG#: 5289
TITLE: TLS.cpp gives unreachable code message.

DESCRIPTION: Normal return now exits using previously unreachable code, add PEG_METHOD_EXIT to error returns.

BUG#:5226
TITLE: switch Pegasus from blocking to non-blocking writes

DESCRIPTION: Committed third patch, aka approved version

BUG#: 5134
TITLE: Network.h: a new place for network definitions.

DESCRIPTION: This patch collects network-related definitions and includes into a single file (Network.h)

BUG#: 4878
TITLE: Allow SSL CRL functionality to be optionally disabled

DESCRIPTION: Added a build-time configuration setting PEGASUS_ENABLE_SSL_CRL_VERIFICATION. Updated the ssltrustmgr, CertificateProvider, Config and SSLContext components.

BUG#: 4549
TITLE: Peer certificate should be freed in all cases

DESCRIPTION: Fixed as approved

BUG#: 4666
TITLE: Compile warning building TLS.cpp

DESCRIPTION: Modified to return empty array instead of NULL.

BUG#: 4691
TITLE: Update Licenses to 2006

DESCRIPTION: Updates most of the licenses to 2006. The slp_client directories are excluded for the moment pending discussion. This change has passed unit and system tests.  Note that this changes just about EVERY file in Pegasus.

BUG#: 4666
TITLE: Compile warning building TLS.cpp

DESCRIPTION: Modified to return empty array (instead of NULL), in the case where there is no SSLCallbackInfo.

BUG#: 4212
TITLE: Potential memory leak in SSLSocket constructor

DESCRIPTION: Committed fix with try/catch/rethrow to catch leak.

BUG#: 4598
TITLE: allow propagation of client cert chain as part of client auth info

DESCRIPTION:
Submitted proposed fix

BUG#: 4273
TITLE: Remote SSL clients intermittently error out with responses still pending

DESCRIPTION: Updated the SSLSocket::incompleteReadOccurred to check for system errors EAGAIN and EINTR. This fix will prevent a client from closing a connection in case these errors are encountered during reads.

BUG#: 4210
TITLE: Made additional PEGASUS_SOCKET related changes.

DESCRIPTION:

BUG#: 4202
TITLE: Fixed problem with checkin for 3166.

DESCRIPTION: Made changes so that sockets are now of type PEGASUS_SOCKET instead of Sint32.

BUG#: 3166
TITLE: Changed to use PEGASUS_SOCKET define

DESCRIPTION: Changed so that sockets are now of type PEGASUS_SOCKET instead of Sint32.

BUG#: 4115
TITLE: HTTPConnection _handleReadEvent should complete connection setup
DESCRIPTION: Finish connection setup in the HTTPConnection::_handleReadEvent method, when necessary.  Also move the SSLContext mutex locking responsibility to the SSLSocket class, which contains the protected logic.

BUG#:4041
TITLE:Pegasus doesn't correcly handle incomplete SSL records

DESCRIPTION:
Submit approved fix

BUG#: 3400
TITLE: Incompatible changes in SSLContext.h

DESCRIPTION: Committed changes to put back methods that were removed (and mark them deprecated) and create a "rep" for SLLCallbackInfo.

BUG#: 2182
TITLE: Removed non-empty exception specifications.

DESCRIPTION:

PEP#: 101
TITLE: AutoPtr Enhancement

DESCRIPTION: AutoPtr updates has been made

BUG#: 2656
TITLE: License statement update to 2005

DESCRIPTION: All .h, .cpp and the wql, cql, compile *.l and *.y files along
with the .java files in providermanager2/jmpi updated to use the license
statement in doc/license.txt
Tested on windows and visual test of all diffs.

BUG#: 2594
TITLE:  Fix Linux Compiler Warnings

DESCRIPTION: Fixed compiler warnings for Linux builds.

PEP#: 187
TITLE: SSL cert Mgmt Enhancements
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Check in bulk of code, including Schema, CertificateProvider and changes to Common, Config, and Server files.

BUG#: 2196
TITLE: Copyright update

DESCRIPTION: Update all .cpp and .h files for new license and
update the doc/license.txt file.  Note that there were also
a couple of files that had to be fixed because they had violated
the comments rules (ex. blank line at head of file or in the case of
xmlwriter.cpp a comment line //=========  which drove the strip
function nuts.  These were fixed.  This has been compiled and tested
on windows.

BUG#: 1648
TITLE: Potential race condition in SSL autormatic truststore update
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

Change Mutex to AutoMutex

BUG#: 1648
TITLE: Potential race condition in SSL autormatic truststore update
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

Mutexed truststore operations

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 AuthenticationInfo changes

BUG#: 1603
TITLE: sslcontext.h, compile error on windows
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

fix build break on windows

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Ballot 60 changes

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Fix global callback problem.
Collect all certificate information during callback and store it for later use.

PEP#: 155
TITLE: HP[Nag] SSL client certificate verification for CIMExport requests

DESCRIPTION: Added SSL client certificate verification support for CIMExport requests received on the new export port. To enable this feature set the config property enableSSLExportClientVerification to true and specify the indication trust store using the config property exportSSLTrustStore. Username password authentication is not done and CIMOperation requests are not processed on the export port.

PEP#: 165
TITLE: SSL client verification
USER: Heather Sterling
MAIL: hsterl@us.ibm.com

DESCRIPTION

Adding SSL client verification support.
Build with PEGASUS_USE_SSL_CLIENT_VERIFICATION to enable the feature.

Bug 1026: Fix SSL compiler problems for vc60

PEP 55 Update license on source files to current license text and date

Fixed up change: Bugzilla 751: Corrupt trace output, probable access violation

Bugzilla 751: Corrupt trace output, probable access violation

(head) new socket class heirarchy and test

IBM:HR,PEP58,r2.3:Globalization Changes - Common

HP-[DME] Modified handleReadEvent to deal with an incomplete read when using SSL.

HP-[DME] Modified code to delay only if the error SSL_ERROR_WANT_READ is detected.

HP-DME: Add retry code when attempting to read SSL socket.

HP-RK API Review: Restructured exceptions to move internal exceptions to an InternalExceptions module.  Combined definitions of overlapping CIMClientExceptions and Exceptions.  Removed unused exception definitions.  This is just the first step in cleaning up the exceptions from a developer API perspective.

YZ-HP: Linked openssl lib on LINUX_IA64 plateform. Fixed createInstance problem on the RT_IndicationProvider.

HP-Nag: Added tracing to TLS code, added a config property enableClientCertification and made changes in the TLS code to use this property.

HP-RK Update license header.

HP-[Bapu Patil] Fixed Bug 102

HP-Nag: Moved SSLContext class out of TLS files, created SSLContextRep to hide member functions and data from the users of SSLContext. Also included CertificateInfo in SSLContext files and removed the CertificateInfo files.

HP-Nag: Implemented Certification verification code in TLS.cpp, created a new class CertificateInfo to pass certificate information to the clients call back function. Modified CIMServer.cpp and the Command lines that are using SSLContext to pass the certificate verification call back function. Fixed few display messages in cimconfig command.

HP-RK Update constructor for non-SSL version of SSLContext constructor.

HP-Nag: Implemented Certification verification code in TLS.cpp, created a new class CertificateInfo to pass certificate information to the clients call back function.

HP-RK Clean up Linux compiler warnings.

HP-RK Fix HP-UX compile errors.

HP-[Bapu Patil] Made changes to support SSL on HP-UX.

Merged dev branch into main trunk.

file TLS.cpp was initially added on branch dev.