Граф коммитов

138 Коммитов

Автор SHA1 Сообщение Дата
Lucas Garron fc9159fd23 Replace `README.md` with a notice linking to the new location. 2021-10-04 13:17:49 -07:00
Lucas Garron 128cbc9ee6 Add deprecation notice.
See https://github.com/github/smimesign/pull/84
2021-10-04 12:31:18 -07:00
Lucas Garron 16f316c1de Update Go testing to a single CI job. 2021-09-27 18:16:21 -07:00
Lucas Garron 11c2774f0d v0.1.2
Release notes:

- Fix signatureAlgorithm in signerInfos to use correct OIDs. #28
- fix interoperability with Go 1.15 encoding/asn1 SET OF ordering #29

(Note: the version number has skipped, to match the `smimesign` release this will be a part of.
2021-09-27 17:58:26 -07:00
Lucas Garron b6d3dd6d5c Auto-publish release tags to GitHub. 2021-09-27 17:56:20 -07:00
Kevin Jones 08af9dd4b1
Merge pull request #28 from ddz/ddz/fix-signature-algorithm-oid
Fix signatureAlgorithm in signerInfos to use correct OIDs.
2021-06-25 15:21:42 -04:00
Dino A. Dai Zovi 5395cb740e
Fix signatureAlgorithm in signerInfos to use correct OIDs.
This changes the OID from id-ecPublicKey (1.2.840.10045.2.1)
to ecdsa-with-SHA256 (1.2.840.10045.4.3.2) for ECDSA, for example.
2021-06-25 18:22:59 +00:00
Kevin Jones aab18ec9e6
Merge pull request #29 from ddz/ddz/fix-signed-attribute-order
fix interoperability with Go 1.15 encoding/asn1 SET OF ordering
2021-06-25 13:20:53 -04:00
Michael Ryan Dempsey 9676f6c2aa
fix verify_test on go1.16
DSAWithSHA1 removed from crypto/x509 in go1.16, check for unsupported
error
2021-06-14 01:12:50 +00:00
Michael Ryan Dempsey 5921d95194
sort certlist in digicert timestamp signed data 2021-06-14 01:12:46 +00:00
Dino A. Dai Zovi 697a3c4e84
fix interoperability with Go 1.15 encoding/asn1 SET OF ordering
X690 Section 11.6 specifies a required order for SET OFs in DER.
Go 1.15 updated encoding/asn1 to perform this ordering, which caused
a discrepancy between the order of the attributes in SignerInfo
and the order in the marshaled form generated by MarshaledForSigning().

The attributes are now sorted before calling MarshaledforSigning()
to ensure consistency. This fixes interoperability with other systems
(e.g. OpenSSL CMS) for signatures generated by ietf-cms when compiled
with Go >= 1.15.

In order to verify signatures created by Go < 1.15 on Go >= 1.15,
we need to preserve the received order of SignedAttributes. This
adds a MarshaledForVerification() method to Attributes that behaves
similarly to OpenSSL's CMS_Attributes_Verify template in cms_asn1.c.

This change also adds tests for interoperability with Go < 1.15,
Go >= 1.15, and OpenSSL CMS.

Fixes #25
2021-06-14 01:11:29 +00:00
Lucas Garron c0e5968de5
v0.1.0
Release notes:

- The URL has moved from github.com/mastahyeti/cms to github.com/github/ietf-cms .
- No code changes.
2020-08-11 17:53:34 -07:00
Lucas Garron dc87612aeb Fix typo in a badge. 2020-08-11 17:52:43 -07:00
Lucas Garron c14eb797c3 Add macOS and Windows tests. 2020-08-11 17:50:13 -07:00
Lucas Garron a562cecc6e Split Go 1.10 test into a separate file. 2020-08-11 17:39:32 -07:00
Lucas Garron 37849a0f88 Fix CI for 1.10. 2020-08-11 17:24:26 -07:00
Lucas Garron f54e6a351d
Merge pull request #23 from josephlr/ci
timestamp_test: Fix CI
2020-08-11 17:20:45 -07:00
Lucas Garron 2ef640c319 Update dependencies and references for v0.1.0 2020-08-11 17:05:36 -07:00
Joe Richey 355b8b805d timestamp_test: Fix CI
A later version of Go changed the error string for some x509 errors,
causing the CI to fail. Fix the test to just test for an error prefix.

Signed-off-by: Joe Richey <joerichey@google.com>
2020-05-20 04:02:59 -07:00
Ben Toews c91ec66551
Merge pull request #18 from matthias50/add-DSAWithSHA1
Add mapping from algo OID to x509 SignatureAlgorithm for DSAWithSHA1
2019-05-30 14:25:31 -06:00
Matt Martin d9efaa419a Added test case to verify validation pkcs7 doc signed with DSAWithSHA1 2019-05-30 14:16:26 -05:00
Matt Martin 051715c972 Add mapping from algo OID to x509 SignatureAlgorithm for DSAWithSHA1 2019-05-17 10:27:50 -05:00
Ben Toews 119fef08a0
Merge pull request #17 from mastahyeti/1.12
Add go 1.12.x to the build matrix
2019-05-01 15:54:31 -06:00
Ben Toews 22b5b705cf
add go 1.12.x to the build matrix 2019-05-01 15:50:59 -06:00
Ben Toews f93201ef5d
Merge pull request #16 from mastahyeti/mod
Add go.mod and go.sum
2019-05-01 15:44:55 -06:00
Ben Toews cd8e0ba44b
add go.mod and go.sum 2019-05-01 15:43:59 -06:00
Ben Toews ec6fafdd65
Merge pull request #14 from mastahyeti/signingtime-utc
Use UTC for SigningTime attribute
2018-12-04 12:58:13 -07:00
Ben Toews 6cec551ec7
use utc for signingtime (gpgsm interoperability) 2018-12-04 12:51:55 -07:00
Ben Toews f987d536de
Merge pull request #13 from mastahyeti/signingtime
Include SigningTime attribute in signatures
2018-12-04 12:39:01 -07:00
Ben Toews d8dd28df90
include SigningTime attribute in signatures 2018-12-04 12:33:30 -07:00
Ben Toews f17ec46647
Merge pull request #12 from mastahyeti/1.11
Go 1.11
2018-09-13 10:37:45 -06:00
Ben Toews 641ef24aa5
Merge pull request #11 from mastahyeti/ts-usage-fix
Check for ExtKeyUsageTimeStamping when verifying timestamp
2018-09-13 10:30:42 -06:00
Ben Toews a53a60e80d
add go 1.11 to build matrix 2018-09-13 10:29:39 -06:00
Ben Toews 7d9fa1cbb5
always check for ExtKeyUsageTimeStamping when verifying timestamp 2018-09-13 10:19:18 -06:00
Ben Toews c3a1cf2cb7
protocol: don't require si to include SigningTime attribute 2018-09-13 10:05:05 -06:00
Ben Toews 96ee1e4d80
Merge pull request #10 from mastahyeti/signing-algo-fix
Protocol: Allow signature to specify signing algo instead of just pk algo
2018-09-13 08:26:06 -06:00
Ben Toews b96dcfac80
protocol: simplify the signature algorithm hash lookup 2018-09-06 14:00:39 -06:00
Ben Toews 48a236fea6
protocol: allow signature to specify entire signature algo instead of just pk algo 2018-09-06 13:54:16 -06:00
Ben Toews bb6e65b931
oid: be more consistent in OID variable namning 2018-09-06 13:52:54 -06:00
Ben Toews 140c79d120
provide working example of sign/verify 2018-08-07 16:12:57 -06:00
Ben Toews a229af0c48
Merge pull request #5 from mastahyeti/get-set-certs
Methods for getting/setting certificates from SignedData
2018-07-25 18:02:54 -06:00
Ben Toews cf575600b6
methods for getting/setting certificates from SignedData 2018-07-25 17:58:00 -06:00
Ben Toews 88f9fea490
fix some docs 2018-07-05 10:28:44 -06:00
Ben Toews a1633c6d90
Merge pull request #4 from AntonioMA/master
Add a verifier that returns the full chains
2018-07-05 10:24:47 -06:00
Antonio M. Amaya 605c9d4ca0 Changed the existing API and fixed tests 2018-07-05 17:03:27 +02:00
Antonio M. Amaya 2dbc1ad9e8 Add a verifier that returns the full chains 2018-06-28 18:53:55 +02:00
Ben Toews 7414bf379b
Merge pull request #2 from mastahyeti/tsp
Time Stamp Protocol support
2018-06-21 16:36:54 -06:00
Ben Toews 6afcdeadd6
simplify some import statements 2018-06-21 16:14:14 -06:00
Ben Toews 9fbf80e130
specify install script for travis
The 1.10.x build was running `go get -v -t ./...`, but the 1.x build was ommitting the `-t`
2018-06-21 16:08:47 -06:00
Ben Toews 5d9ff1b131
Merge branch 'master' into tsp 2018-06-21 15:28:27 -06:00