summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* Use new SAML2 strings instead of hardcoding query string field namesBenjamin Dauvergne2010-02-103-6/+7
|
* Add documentation about runtime flagsBenjamin Dauvergne2010-02-101-0/+39
| | | | | | * lasso/lasso.c: add a table to Initialization documentation section about general runtime flags.
* Remove follow-idwsf-stupid-semantic flagBenjamin Dauvergne2010-02-101-10/+0
| | | | | * lasso/lasso.c: this flag is useless, that's me that is stupid.
* Add internal methods to LassoServer to get the signature and encryption ↵Benjamin Dauvergne2010-02-102-0/+37
| | | | | | | private keys * lasso/id-ff/server.c lasso/id-ff/serverprivate.h: add methods lasso_server_get_private_key and lasso_server_get_encryption_private_key.
* Add complete error code listing for lasso_login_process_response_msgBenjamin Dauvergne2010-02-101-1/+25
| | | | | * lasso/id-ff/login.c: list all error codes and their semantic with respect to this call.
* Update code example for LassoLoginBenjamin Dauvergne2010-02-101-14/+78
| | | | | * lasso/id-ff/login.c: add code for intializaing request for SAML 2.0, shows how to handler errors codes.
* Add error codes, update error codes documentation, reduce changes in ↵Benjamin Dauvergne2010-02-104-270/+301
| | | | | | | | | | | | | | | errors.c by ordering error codes * lasso/errors.h lasso/errors.c - add to report non schema conforming XML trees, decyrption failure due to missing private keys and invalid signatures on assertions. - update documentation of LASSO_SERVER_ERROR_PROVIDER_NOT_FOUND, LASSO_SERVER_ERROR_ADD_PROVIDER_PROTOCOL_MISMATCH, * lasso/build_strerror.py: before outputting switch cases, order error codes name lexically in order to reduce change lines when adding new error codes.
* Add strings for SAML2 field names for POST, Redirect and Artifact bindingsBenjamin Dauvergne2010-02-101-0/+5
|
* Update documentation of the registry moduleBenjamin Dauvergne2010-02-101-11/+16
|
* Adapt LassoProvider methods to care for protocol profile version when ↵Benjamin Dauvergne2010-02-101-7/+31
| | | | | | | | | verifying signature * lasso/id-ff/provider.c: there is now 2 methods to verify signatures, methods calling the old one must now choose whether to call the liberty one of the SAML 2.0 one.
* Add a function to validate query signatures using SAML 2.0 semanticBenjamin Dauvergne2010-02-102-0/+121
| | | | | | | * lasso/xml/tools.c: this new function is a placeholder for the new SAML 2.0 semantic following query signature validation function. It will start with the old code of lasso_query_verify_signature.
* Propagate change of name for LASSO_PP_ definesBenjamin Dauvergne2010-02-102-10/+10
|
* Core: in LassoServer constructors, test if private_key is loadableBenjamin Dauvergne2010-02-082-14/+26
| | | | | | | | | | | | * lasso/id-ff/server.c: mark private_key as not mandatory as regression tests expect it to not be mandatory. test if loading of private key to encryption_private_key private field worked, if not abort the constructor and return NULL. * lasso/id-ff/server.h: fix name of constructors argument to corresponds with comments (binding generator use this correspondance to apply annotation from comments to the model obtained by parsing the headers).
* in lasso_xmlsec_load_private_key_from_buffer, do not let xmlSecBase64Decode ↵Benjamin Dauvergne2010-02-081-0/+2
| | | | show warnings
* fix bad operation in bindings.pyBenjamin Dauvergne2010-02-051-1/+1
|
* Bindings: restore ID-WSF constants, improve python getters,Benjamin Dauvergne2010-02-044-89/+89
| | | | | | | | | | | | | | | * bindings/bindings.py: parse idwsf_strings.h to get ID-WSF constants. * bindings/utils.py: add an is_rc check function, to check for 'error code' return type. * bindings/perl/lang.py: only raise errors for 'int' or 'gint' return type * bindings/python/lang.py: - always create a normal function binding. - for functions starting with 'get' try to create a corresponding property, but if a corresponding member already exists, fails, and print a warning about getter function/member field clash. - make type dispatching on return_type more explicite.
* Core: Finish support for all XMLDsig key formatsBenjamin Dauvergne2010-02-044-42/+116
| | | | | | | | | | | | | | | * lasso/xml/tools.c: xmlsec is not able to load a certificate public key without checking it against trusted root certificate, so we must work around and load the key by hand. lasso_xmlsec_load_private_key_from_buffer is made more robust in the same (loading of the key was extracted inside _lasso_xmlsec_load_key_from_buffer) and now can load certificates and keys directly embedded inside KeyValue nodes (in total opposition to the XMLDsig specification but...), with or without PEM headers. * tests/metadata/Makefile.am tests/metadata/metadata_06.xml tests/metadata_tests.c: add test case for RSAKeyValue public keys.
* Binding python: fix getter for non-object fieldsBenjamin Dauvergne2010-02-041-5/+13
| | | | | * bindings/python/lang.py: transition to bindings/utils.py methods broke getters.
* Core: in lasso_xmlsec_load_key_info add flag to let xmlSec load certificatesBenjamin Dauvergne2010-02-041-0/+1
| | | | | | | * lasso/xml/tools.c: adding the flag XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS make xmlSec able to load certificate, the 'hand made' code to load certificate is then useless.
* Tests: add more checking to dump generation code in login_tests.cBenjamin Dauvergne2010-02-041-5/+9
|
* Tests: adapt server constructor settings to recent changesBenjamin Dauvergne2010-02-041-2/+7
|
* Core: in lasso_profile_get_request_type_from_soap_msg use ↵Benjamin Dauvergne2010-02-041-2/+10
| | | | | | | | lasso_xml_parse_memory_with_error * lasso/id-ff/profile.c: (lasso_profile_get_request_type_from_soap_msg) use lasso_xml_parse_memory_with_error instead of xmlParseMemory, use error code output argument to log error reports.
* Core: in provider.c, make lasso_provider_load_metadata_from_buffer the main ↵Benjamin Dauvergne2010-02-041-122/+62
| | | | | | | | | | | | | metadata loading function * (init_from_xml) fail initialization if we cannot load the metadatas, and log a warning. * extract _lasso_provider_load_metadata_from_buffer from lasso_provider_load_metadata_from_buffer, which accept a length parameter. use it inside lasso_provider_load_metadata, instead of xmlParseFile. * (lasso_provider_load_public_key) use lasso_xmlsec_load_key_info and lasso_xmlsec_load_private_key to load the public keys.
* Core: use lasso_xml_parse_file to load affiliation fileBenjamin Dauvergne2010-02-041-1/+1
|
* Binding java: Makefile.am has multiple target rules, it cannot support ↵Benjamin Dauvergne2010-02-041-0/+2
| | | | parallel builds
* Core: in tools.c, add function to load XML files and KeyInfo nodesBenjamin Dauvergne2010-02-042-3/+156
| | | | | | | | | | | * tools.c: add lasso_xml_parse_file, based on g_file_get_contents and lasso_xml_parse_memory. add lasso_xml_parse_memory_with_error which instead of logging errors, can return the xmlError structure. add lasso_xmlsec_load_key_info, which allows to load keys from ds:KeyInfo XML nodes. It also support the "Lasso" bug of using ds:KeyValue directly to store base64 encoded keys and certificates.
* SAML 2.0: in name_id_management.c, rework lasso_name_id_management_new_from_dumpBenjamin Dauvergne2010-02-041-8/+6
|
* Core: add more memory tracing, add a tracing macroBenjamin Dauvergne2010-02-042-20/+41
| | | | | * lasso/utils.h: add lasso_trace, which as a printf signature. * xml/xml.c: add more trace to node initialization code.
* Tests: in valgrind suppressions file add more GLib suppressionsBenjamin Dauvergne2010-02-041-0/+117
|
* Tests: in basic_tests.c, re-enable parsing of LassoWsuTimestamp objectsBenjamin Dauvergne2010-02-041-5/+1
|
* Core: use lasso_node_new_from_dump to implement _new_from_dump methodsBenjamin Dauvergne2010-02-046-95/+51
| | | | | | | | * provider.c: add annotation for nullable arguments (necessary for bindings of new_from_buffer). * server.c: add annotations, allow to set encryption_private_key from buffers
* Binding perl: add cleanup for temporary data of trampoline codeBenjamin Dauvergne2010-02-041-13/+25
| | | | | | | * bindings/perl/lang.py: data type not common to Perl and C must be allocated for the duration of the call (mainly GList and xmlNode), but after the call they must be deallocated.
* SAML 2.0: in samlp2_response.c, simplify code path for assertion encryptionBenjamin Dauvergne2010-02-041-21/+15
|
* Fix leaksBenjamin Dauvergne2010-02-046-15/+17
| | | | | | | | | | | * lasso/id-wsf-2.0/profile.c: release private data object. * lasso/saml-2.0/login.c: free NameID content after construction. * lasso/xml/tools.c: free algorithm attribute content in lasso_node_decrypt_xmlnode. * lasso/xml/xml.c: release cutom_element->nodename in destructor. remove useless finalize method. * tests/basic_tests.c: release xmldoc after use. * tests/random_tests.c: free resut of lasso_node_dump.
* Fix leaks, change signature of lasso_provider_get_sp_name_qualifier, make it ↵Benjamin Dauvergne2010-02-047-14/+16
| | | | return a const char*
* in lasso/xml/tools.c, remove leaks of xmlSecKey and xmlNodeBenjamin Dauvergne2010-02-041-9/+11
|
* in lasso_xmlsec_load_private_key, do not leak the file buffer, in ↵Benjamin Dauvergne2010-02-042-5/+7
| | | | lasso_node_encrypt do not leak the keys manager
* Binding perl: many improvementsBenjamin Dauvergne2010-02-015-149/+75
| | | | | | | | | | | | | | | * lang.py: use lasso_unref instead of g_object_unref. * lang.py: handle 'optional' annotation for more types, needed by ID-WSF bindings. * lang.py, gobject_handling.c: check object type before making the C call * Makefile.am: improve silent rules, hide all normal output, show errors, and with V=1 shows everything * glist_handling.c, gobject_handling.c: make local functions static * t/Lasso.t: add non regression test for method receiver type checking. * glist_handlind.c; remove unused convertion functions. * lang.py: clear the semi-assigned list and croak if all list elements do not convert to non-NULL values.
* Bindings: re-add binding for lasso_session_get_assertions for perl, special ↵Benjamin Dauvergne2010-02-012-1/+1
| | | | | | | | case formatting function for WsAddressing namespace * bindings/utils.py: type have LassoWsAddr prefix but function have the lasso_wsa_ prefix, so we have to adjust generated prefix.
* Bindings: use lasso_return_xxx macros instead of GLib onesBenjamin Dauvergne2010-02-014-43/+43
|
* ID-WSF: remove useless new_from_message methodsBenjamin Dauvergne2010-02-0156-502/+4
|
* Core: in utils.h, add macros to replace verbose g_return_val_if_failBenjamin Dauvergne2010-02-011-0/+12
|
* Core: document return values of lasso_login_validate_request_msgBenjamin Dauvergne2010-02-011-1/+17
|
* Utils: lasso_unref, a safe g_object_unref, and add some document about ↵Benjamin Dauvergne2010-02-012-9/+71
| | | | existing family of macros
* Core: do not emit messages inside lasso_check_versionBenjamin Dauvergne2010-02-011-12/+0
|
* Bindings: os.path.relpath is only present since python 2.6, add a local ↵Benjamin Dauvergne2010-02-011-0/+16
| | | | implementation for older python versions
* Add a dist-hook to remove .svn directories before taring the distBenjamin Dauvergne2010-02-011-0/+3
|
* Bindings: make binding generation more silentBenjamin Dauvergne2010-02-014-20/+29
| | | | | | | | * bindings/java/Makefile.am bindings/perl/Makefile.am bindings/php5/Makefile.am bindings/python/Makefile.am: use AM_V_GEN, or similar variable for all steps of binding generation, normal output can be activated with the V=1 argument to the 'make' command.
* Binding java: use eager evalutation to get list of sources filesBenjamin Dauvergne2010-02-011-1/+1
| | | | | | * bindings/java/Makefile.am: use := to provoke eager evaluation so that java-list mode is not called many times.
* Bindings: use 'absolute' header paths to produces bindingsBenjamin Dauvergne2010-01-291-11/+21
| | | | | | * bindings/bindings.py: if files from bindings are using absolute instead of relatives header paths they can be independant of the lasso source.