| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
| |
|
|
|
|
|
|
| |
* lasso/lasso.c:
add a table to Initialization documentation section about
general runtime flags.
|
|
|
|
|
| |
* lasso/lasso.c:
this flag is useless, that's me that is stupid.
|
|
|
|
|
|
|
| |
private keys
* lasso/id-ff/server.c lasso/id-ff/serverprivate.h:
add methods lasso_server_get_private_key and lasso_server_get_encryption_private_key.
|
|
|
|
|
| |
* lasso/id-ff/login.c:
list all error codes and their semantic with respect to this call.
|
|
|
|
|
| |
* lasso/id-ff/login.c:
add code for intializaing request for SAML 2.0, shows how to handler errors codes.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
errors.c by ordering error codes
* lasso/errors.h lasso/errors.c
- add to report non schema conforming XML trees, decyrption
failure due to missing private keys and invalid signatures on assertions.
- update documentation of LASSO_SERVER_ERROR_PROVIDER_NOT_FOUND,
LASSO_SERVER_ERROR_ADD_PROVIDER_PROTOCOL_MISMATCH,
* lasso/build_strerror.py:
before outputting switch cases, order error codes
name lexically in order to reduce change lines
when adding new error codes.
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
verifying signature
* lasso/id-ff/provider.c:
there is now 2 methods to verify signatures, methods calling the old
one must now choose whether to call the liberty one of the SAML 2.0
one.
|
|
|
|
|
|
|
| |
* lasso/xml/tools.c:
this new function is a placeholder for the new SAML 2.0 semantic
following query signature validation function. It will start with the
old code of lasso_query_verify_signature.
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* lasso/id-ff/server.c:
mark private_key as not mandatory as regression tests expect it to
not be mandatory.
test if loading of private key to encryption_private_key private
field worked, if not abort the constructor and return NULL.
* lasso/id-ff/server.h:
fix name of constructors argument to corresponds with comments
(binding generator use this correspondance to apply annotation from
comments to the model obtained by parsing the headers).
|
|
|
|
| |
show warnings
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* bindings/bindings.py:
parse idwsf_strings.h to get ID-WSF constants.
* bindings/utils.py:
add an is_rc check function, to check for 'error code' return type.
* bindings/perl/lang.py:
only raise errors for 'int' or 'gint' return type
* bindings/python/lang.py:
- always create a normal function binding.
- for functions starting with 'get' try to create a corresponding
property, but if a corresponding member already exists, fails, and
print a warning about getter function/member field clash.
- make type dispatching on return_type more explicite.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* lasso/xml/tools.c:
xmlsec is not able to load a certificate public key without checking
it against trusted root certificate, so we must work around and load
the key by hand.
lasso_xmlsec_load_private_key_from_buffer is made more robust in the
same (loading of the key was extracted inside
_lasso_xmlsec_load_key_from_buffer) and now can load certificates and
keys directly embedded inside KeyValue nodes (in total opposition to
the XMLDsig specification but...), with or without PEM headers.
* tests/metadata/Makefile.am tests/metadata/metadata_06.xml
tests/metadata_tests.c:
add test case for RSAKeyValue public keys.
|
|
|
|
|
| |
* bindings/python/lang.py:
transition to bindings/utils.py methods broke getters.
|
|
|
|
|
|
|
| |
* lasso/xml/tools.c:
adding the flag XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS make
xmlSec able to load certificate, the 'hand made' code to load
certificate is then useless.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
lasso_xml_parse_memory_with_error
* lasso/id-ff/profile.c: (lasso_profile_get_request_type_from_soap_msg)
use lasso_xml_parse_memory_with_error instead of xmlParseMemory, use
error code output argument to log error reports.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
metadata loading function
* (init_from_xml) fail initialization if we cannot load the metadatas,
and log a warning.
* extract _lasso_provider_load_metadata_from_buffer from
lasso_provider_load_metadata_from_buffer, which accept a length
parameter. use it inside lasso_provider_load_metadata, instead of
xmlParseFile.
* (lasso_provider_load_public_key) use lasso_xmlsec_load_key_info and
lasso_xmlsec_load_private_key to load the public keys.
|
| |
|
|
|
|
| |
parallel builds
|
|
|
|
|
|
|
|
|
|
|
| |
* tools.c:
add lasso_xml_parse_file, based on g_file_get_contents and
lasso_xml_parse_memory.
add lasso_xml_parse_memory_with_error which instead of logging
errors, can return the xmlError structure.
add lasso_xmlsec_load_key_info, which allows to load keys from
ds:KeyInfo XML nodes. It also support the "Lasso" bug of using
ds:KeyValue directly to store base64 encoded keys and certificates.
|
| |
|
|
|
|
|
| |
* lasso/utils.h: add lasso_trace, which as a printf signature.
* xml/xml.c: add more trace to node initialization code.
|
| |
|
| |
|
|
|
|
|
|
|
|
| |
* provider.c:
add annotation for nullable arguments (necessary for bindings of
new_from_buffer).
* server.c: add annotations, allow to set encryption_private_key from
buffers
|
|
|
|
|
|
|
| |
* bindings/perl/lang.py:
data type not common to Perl and C must be allocated for the duration
of the call (mainly GList and xmlNode), but after the call they must
be deallocated.
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
* lasso/id-wsf-2.0/profile.c: release private data object.
* lasso/saml-2.0/login.c: free NameID content after construction.
* lasso/xml/tools.c: free algorithm attribute content in
lasso_node_decrypt_xmlnode.
* lasso/xml/xml.c: release cutom_element->nodename in destructor.
remove useless finalize method.
* tests/basic_tests.c: release xmldoc after use.
* tests/random_tests.c: free resut of lasso_node_dump.
|
|
|
|
| |
return a const char*
|
| |
|
|
|
|
| |
lasso_node_encrypt do not leak the keys manager
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* lang.py: use lasso_unref instead of g_object_unref.
* lang.py: handle 'optional' annotation for more types, needed by
ID-WSF bindings.
* lang.py, gobject_handling.c: check object type before making the C
call
* Makefile.am: improve silent rules, hide all normal output, show
errors, and with V=1 shows everything
* glist_handling.c, gobject_handling.c: make local functions static
* t/Lasso.t: add non regression test for method receiver type checking.
* glist_handlind.c; remove unused convertion functions.
* lang.py: clear the semi-assigned list and croak if all list elements
do not convert to non-NULL values.
|
|
|
|
|
|
|
|
| |
case formatting function for WsAddressing namespace
* bindings/utils.py:
type have LassoWsAddr prefix but function have the lasso_wsa_ prefix,
so we have to adjust generated prefix.
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
existing family of macros
|
| |
|
|
|
|
| |
implementation for older python versions
|
| |
|
|
|
|
|
|
|
|
| |
* bindings/java/Makefile.am bindings/perl/Makefile.am
bindings/php5/Makefile.am bindings/python/Makefile.am:
use AM_V_GEN, or similar variable for all steps of binding
generation, normal output can be activated with the V=1 argument to
the 'make' command.
|
|
|
|
|
|
| |
* bindings/java/Makefile.am:
use := to provoke eager evaluation so that java-list mode is not
called many times.
|
|
|
|
|
|
| |
* bindings/bindings.py:
if files from bindings are using absolute instead of relatives header
paths they can be independant of the lasso source.
|