1. 05 Jun, 2014 1 commit
  2. 04 Jun, 2014 3 commits
    • Dave Cridland's avatar
      a17da995
    • Dave Cridland's avatar
      OF-405 : Perform proper path validation on certificate chains · 78e4eff7
      Dave Cridland authored
      What this patch actually does is place existing certificates into a CertStore,
      including those from its (untrusted) keystore, the trust store, and any from
      the chain supplied by the peer, and then rebuild a chain back to a known trust
      anchor (from the trust store).
      
      This strategy will cope with unknown ICAs in chains, abbreviated chains, and so
      on, and replaces attempts to specifically handle self-signed certificates.
      
      That last said, there is an explicit shortcut to handle self-signed certificates
      which are supplied as end-entity certificates. These are simply checked against
      the trust store without any attempt to build a path.
      78e4eff7
    • Dave Cridland's avatar
      Update shipped truststore to match Mozilla's shipped CAs · 73b59106
      Dave Cridland authored
      I don't think we should be maintaining our own set if at all possible, this
      patch was created by creating a new keystore and inserting every certificate
      from an Ubuntu system's Mozilla ca-certificates set:
      
      rm -f ./src/security/truststore
      for x in /usr/share/ca-certificates/mozilla/*.crt; do
      	y=`basename -s .crt $x`
      	keytool -import -storepass changeit -keystore ./src/security/truststore -alias $y -file $x -noprompt
      done
      73b59106
  3. 02 Jun, 2014 7 commits
  4. 01 Jun, 2014 2 commits
  5. 30 May, 2014 1 commit
  6. 29 May, 2014 3 commits
  7. 27 May, 2014 1 commit
  8. 25 May, 2014 1 commit
  9. 24 May, 2014 1 commit
  10. 21 May, 2014 1 commit
  11. 19 May, 2014 2 commits
  12. 18 May, 2014 4 commits
  13. 17 May, 2014 2 commits
  14. 16 May, 2014 3 commits
  15. 15 May, 2014 2 commits
  16. 13 May, 2014 2 commits
  17. 12 May, 2014 1 commit
  18. 11 May, 2014 1 commit
  19. 10 May, 2014 2 commits