bf209e0fc8
Refactor SpcIndirectDataContent parsing helpers
2026-05-26 17:27:46 +02:00
68a6826cd1
Use ASN1_STRING and ASN1_INTEGER APIs instead of direct struct access
2026-05-26 17:27:46 +02:00
ea5d15862d
cmake: add documentation generation, GNU install dirs, and uninstall target
2026-05-26 17:27:46 +02:00
bdde95635f
attach-signature flow moved to digest-only verification semantics
...
attach-signature now uses digest-only verification instead of full
signature validation; output file is not kept if digest verification fails
2026-04-02 17:43:43 +02:00
d0ef178a9a
Remove redundant NULL assignments, CID 1669015
2026-02-25 14:07:58 +01:00
e126ab3e4a
Fix memory leak of compressedData on error paths, CID 1669014
2026-02-25 14:07:58 +01:00
a1fb6600fb
Fix handling OpenSSL initialization errors
2026-02-11 16:23:57 +01:00
8227c68ceb
Do not export osslsigncode.c consts
2026-02-11 15:50:25 +01:00
c988b48063
Refactor UI method cleanup
2026-02-11 15:48:17 +01:00
6cf70b4af2
Initial 2.14-dev commit
2026-02-10 23:17:56 +01:00
97a9ade6ec
Release 2.13
...
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org >
2026-02-10 22:51:25 +01:00
f2f33bb131
Move providers_cleanup() back
2026-02-10 19:10:00 +01:00
202b2c2866
Separate OpenSSL and functional initialization
2026-02-10 18:37:48 +01:00
2a5409b7c4
Fix header bounds validation in PE page hash calculation
2026-02-09 16:15:21 +01:00
87bce8e372
Fix memory leaks on error paths in PE signing
2026-02-09 16:15:21 +01:00
f7ace57c81
Validate PE attribute certificate table bounds
2026-02-09 16:15:21 +01:00
92f8761b47
Fix heap corruption in PE page hash calculation
2026-02-06 15:41:01 +01:00
09d3312fd9
Fixed integer overflow, integer underflow and Out-of-Bounds Read
2026-02-06 11:39:49 +01:00
9d02a20aec
Fix unsafe ZIP size handling and allocation checks
2026-02-04 10:13:03 +01:00
f190ec5d87
Fix double free in ZIP local header
2026-02-04 10:13:03 +01:00
4b30d6be28
Initial 2.12-dev commit
2026-02-03 17:20:29 +01:00
fac8164622
Release 2.12
...
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org >
2026-02-02 17:53:25 +01:00
cbee1e723c
Fixed buffer overflow while extracting msg digest
...
Reported and fixed by Antoni Klajn, Opera
2026-02-02 17:37:45 +01:00
f90327df09
Initial 2.12-dev commit
2026-01-21 00:08:58 +01:00
f3a590be69
Release 2.11
...
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org >
2026-01-20 23:53:33 +01:00
6631a5f10b
Update trusted certificate list
2026-01-20 23:21:33 +01:00
9924f0c085
Minor style improvements
...
- Reorder checks by corresponding RFC 5280 section numbers.
- Simplify comments.
2026-01-20 23:21:33 +01:00
7d85ac5f04
Add GitHub issue and PR templates
2026-01-09 14:41:02 +01:00
feebbcd4d9
Print current CRL during certificate verification
2026-01-07 13:36:43 +01:00
d787541107
tests: add digitalSignature keyUsage to leaf certificate
2025-12-31 11:38:21 +01:00
6390ae2746
Add keyUsage digitalSignature validation for signer certificate
2025-12-31 11:38:21 +01:00
a472d7fbff
Comment returned CRL Content-Type
2025-12-22 19:26:21 +01:00
27172a07ca
Patch CRL fetch failure from expected file type
...
`application/octet-stream` response types caused CRL/TSA-CRL fetch failures
2025-12-22 19:22:01 +01:00
d77ddb9443
Disable keep-alive and remove the shutdown workaround.
...
Some RFC 3161 TSA servers (e.g. time.certum.pl) advertise
"Connection: close" but delay closing the connection,
when keep-alive was requested. The client waited for EOF and
attempted to work around this by explicitly shutting down the socket.
2025-12-19 15:11:12 +01:00
988f72249b
Simplify ASLR/PIE flags check for macOS
2025-12-16 06:42:01 +01:00
c23f92ca68
Improve PKCS#11 and CNG usage instructions in README
2025-09-22 11:16:29 +02:00
842bd94aaf
Remove duplicate certs from sorted X509 chain
2025-09-19 17:02:21 +02:00
1d72c3da8c
Improve key/cert loading logic and standardize usage file argument names
2025-09-19 17:02:21 +02:00
d792e8d0db
Use bio_new_file() wrapper instead of BIO_new_file() for consistent file handling
2025-09-19 17:01:02 +02:00
bbdfc1d98a
Avoid undefined behavior with BIO_get_fp by replacing BIO_new_file with fopen + BIO_new_fp
2025-09-19 17:01:02 +02:00
5ac11e9f58
Fix -Wsign-conversion warning in x509_name_to_utf8()
2025-07-01 12:21:44 +02:00
55541c6ace
Initial 2.11-dev commit
2025-06-23 21:42:26 +02:00
8329a14f8b
Release 2.10
...
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org >
2025-06-23 21:36:13 +02:00
343b0af1fe
Put globs in quotes
2025-06-23 21:21:34 +02:00
d440f32780
Codespell Action
2025-06-23 21:13:47 +02:00
fb082942d2
Descriptive Action name
2025-06-23 21:05:51 +02:00
025e808c01
docs: fix typos in README
2025-06-20 16:26:18 +02:00
23b6d7782c
docs: fix typo in appx comments
2025-06-20 16:14:25 +02:00
4c3a1e887c
docs: fix typos in README
2025-06-20 16:04:36 +02:00
97ee163e31
Document script file support
2025-06-20 14:06:05 +02:00
olszomal