54 Commits

Author SHA1 Message Date
olszomal bdde95635f attach-signature flow moved to digest-only verification semantics
attach-signature now uses digest-only verification instead of full
signature validation; output file is not kept if digest verification fails
2026-04-02 17:43:43 +02:00
Michał Trojnara 6cf70b4af2 Initial 2.14-dev commit 2026-02-10 23:17:56 +01:00
Michał Trojnara 97a9ade6ec Release 2.13
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2026-02-10 22:51:25 +01:00
Michał Trojnara 4b30d6be28 Initial 2.12-dev commit 2026-02-03 17:20:29 +01:00
Michał Trojnara fac8164622 Release 2.12
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2026-02-02 17:53:25 +01:00
Michał Trojnara f90327df09 Initial 2.12-dev commit 2026-01-21 00:08:58 +01:00
Michał Trojnara f3a590be69 Release 2.11
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2026-01-20 23:53:33 +01:00
Michał Trojnara 55541c6ace Initial 2.11-dev commit 2025-06-23 21:42:26 +02:00
Michał Trojnara 8329a14f8b Release 2.10
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2025-06-23 21:36:13 +02:00
Michał Trojnara 0c85d54800 Handle missing certificate names 2025-06-19 17:56:54 +02:00
Michał Trojnara d65a2b5286 Fix various typos 2025-06-19 14:18:26 +02:00
olszomal dd9b81281f Support loading OpenSSL 3.0+ providers without -pkcs11module option (e.g., CNG) 2025-06-05 17:13:10 +02:00
Michał Trojnara 3292b02650 JavaScript support
Resolves #437
2025-06-04 10:04:17 +02:00
olszomal a6c7c25dae Update NEWS 2025-05-14 11:29:13 +02:00
olszomal 838aaaee8d libp11 PKCS#11 provider support 2025-03-28 14:05:12 +01:00
Małgorzata Olszówka db5b4c4dc0 Add the "-engineCtrl" option to control hardware and CNG engines (#405)
Documentation updated for CNG engine 1.1 compatibility.
2024-09-08 19:23:38 +02:00
olszomal 21133f9c3b Added the '-blobFile' option to specify a file containing the blob content 2024-09-04 17:51:35 +02:00
Michał Trojnara 4dd836bab1 Initial 2.10-dev commit 2024-06-29 21:58:55 +02:00
Michał Trojnara 76ee550c9d Release 2.9
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2024-06-29 20:16:47 +02:00
olszomal 2b3228d549 Changed error output to stderr instead of stdout 2024-06-05 16:54:21 +02:00
olszomal 476168e09e Added the "-ignore-crl" option to disable CRL online verification 2024-06-03 12:16:02 +02:00
Małgorzata Olszówka 6e5bef14e9 Rewrite making test certificates (#393)
Also updates obsolete curl dependencies with zlib.
2024-05-22 18:59:53 +02:00
Michał Trojnara ded1f7aa67 Use native HTTP client with OpenSSL 3.0 or later (#378)
Co-authored-by: olszomal <Malgorzata.Olszowka@stunnel.org>
2024-04-09 19:33:31 +02:00
olszomal c73f82b558 Set the NONCE field in a TSA request 2024-03-08 16:59:34 +01:00
Michał Trojnara b294f5d18f Initial 2.9-dev commit 2024-03-05 16:34:32 +01:00
Michał Trojnara 699bc85d0a Release 2.8
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2024-03-03 23:32:15 +01:00
olszomal 656051676f Changelog update 2024-02-29 17:57:22 +01:00
Michał Trojnara 86a594b087 NEWS.md entry for Microsoft PowerShell signing
Closes #37
2024-02-22 16:39:57 +01:00
olszomal 1bc7fc36b8 Connect to CRL Distribution Points through the configured proxy when verifying 2024-02-19 12:19:44 +01:00
olszomal dac68a3a4d Disable CRL Distribution Points online verification 2024-02-15 12:30:50 +01:00
olszomal 44ca1f38e6 PKCS9_SEQUENCE_NUMBER authenticated attribute support 2024-01-23 19:00:22 +01:00
olszomal 0985c47990 Add a new "-index" option to enable verification or addition of attributes to the signature at a certain position 2024-01-23 19:00:22 +01:00
olszomal 64e1bba96b Add a new command extract-data to extract a PKCS#7 data content to be signed 2023-12-19 13:07:19 +01:00
olszomal 0db17be606 Listing each member of the CAT file 2023-11-20 17:20:03 +01:00
Michał Trojnara ecb17709fc Initial 2.8-dev commit 2023-09-19 22:03:02 +02:00
Michał Trojnara 9ebd79ad18 Release 2.7
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2023-09-19 21:51:05 +02:00
Michał Trojnara 1700455533 APPX support (#303)
Co-authored-by: Maciej Panek <Maciej.panek@punxworks.com>
Co-authored-by: olszomal <Malgorzata.Olszowka@stunnel.org>
2023-09-19 21:23:32 +02:00
Małgorzata Olszówka (she/her) c04b229ce2 Built-in TSA response generation (#281) 2023-07-28 16:03:04 +02:00
Michał Trojnara a509a66c65 Initial 2.7-dev commit 2023-05-30 17:23:46 +02:00
Michał Trojnara 0a0fdfe96a Release 2.6
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2023-05-29 23:10:39 +02:00
olszomal 3d7b8d2a21 Get Certificate Revocation List from a CRL distribution point 2023-04-16 10:43:24 +02:00
Michał Trojnara b8cb44fa47 initial 2.6 commit 2022-08-12 22:09:34 +02:00
Michał Trojnara 36cdea56de release 2.5
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2022-08-12 21:59:52 +02:00
Michał Trojnara 7510e3c553 initial 2.5 commit 2022-08-02 21:43:44 +02:00
Michał Trojnara 225a8f78fa release 2.4
Signed-off-by: Michał Trojnara <Michal.Trojnara@stunnel.org>
2022-08-02 21:29:07 +02:00
olszomal 60fe5d15fe use CMake instead of Makefile 2022-05-25 20:27:21 +02:00
olszomal 44eeeb1515 updated NEWS.md 2022-04-12 11:41:27 +02:00
olszomal 82185eef18 enable "-h {md5,sha1,sha2(56),sha384,sha512}" option for "attach -signature" and "add" commands
enable "-require-leaf-hash" option for "attach-signature" command
2022-04-12 11:41:27 +02:00
olszomal 4c1b972f9e set the default message digest to sha256 2022-04-12 11:41:27 +02:00
Michał Trojnara 0459fb99ef initial 2.4 commit 2022-03-06 21:00:38 +01:00