Commit Graph

  • 4dd836bab1 Initial 2.10-dev commit Michał Trojnara 2024-06-29 21:58:55 +02:00
  • f57c213207 Use the installed version of Python Michał Trojnara 2024-06-29 20:42:19 +02:00
  • 76ee550c9d Release 2.9 2.9 Michał Trojnara 2024-06-29 20:16:47 +02:00
  • 2b3228d549 Changed error output to stderr instead of stdout olszomal 2024-06-05 12:25:20 +02:00
  • bad6e96e0f Not only include Code Signing certificates Michał Trojnara 2024-06-04 13:25:51 +02:00
  • 3c8c74a8c3 Handled memory reallocation error olszomal 2024-06-03 14:12:50 +02:00
  • 771014a41e Fixed uint32_t overflow when attaching a new MSI sector olszomal 2024-06-03 13:13:22 +02:00
  • 476168e09e Added the "-ignore-crl" option to disable CRL online verification olszomal 2024-06-03 12:02:33 +02:00
  • be4f010535 Fixed to get CAT content value olszomal 2024-06-03 08:39:20 +02:00
  • 2c27e2e37d Fix Ubuntu 24.04 build Michał Trojnara 2024-05-31 21:00:39 +02:00
  • b829e7a802 Fix macos build with GitHub Actions Michał Trojnara 2024-05-31 20:52:03 +02:00
  • d0ae214cb4 Verified number of MSI sectors olszomal 2024-05-31 14:28:38 +02:00
  • 9b1a6c9fb8 Failed to get CAT content olszomal 2024-05-31 12:24:25 +02:00
  • 41b662a8fe Checked cFolders value olszomal 2024-05-31 12:20:10 +02:00
  • 5232734071 Fix fuzzer error - failed to sort central directory entry olszomal 2024-05-29 14:18:10 +02:00
  • 996cf20fa9 Fixed msi dirent memory leak olszomal 2024-05-29 14:17:10 +02:00
  • 825c9dad7c Add '-login' option to force a login to PKCS11 engines Brad Hughes 2024-05-02 17:01:27 -04:00
  • 6e5bef14e9 Rewrite making test certificates (#393) Małgorzata Olszówka 2024-05-22 18:59:53 +02:00
  • a53bd2bdb3 Diagnostic formatting improvements Michał Trojnara 2024-04-18 09:49:55 +02:00
  • e4d471b885 Code signing CA certificates Michał Trojnara 2024-04-16 16:50:25 +02:00
  • bcb9737dda Remove the "openssl version" step from CI Michał Trojnara 2024-04-15 19:34:50 +02:00
  • 7a5389b719 Fixed cmake test cURL support olszomal 2024-04-10 15:50:58 +02:00
  • d9f0a8dade Fixed missing Crypt32.lib when linking openssl statically olszomal 2024-04-10 14:54:16 +02:00
  • aa8c8dd720 Type casting of the read() return value olszomal 2024-04-10 09:41:31 +02:00
  • 16c5e5aa4a Squashed logically dead code for curl response code for openssl version 3.0.0 and later, CID 1585046 olszomal 2024-04-10 09:35:12 +02:00
  • ded1f7aa67 Use native HTTP client with OpenSSL 3.0 or later (#378) Michał Trojnara 2024-04-09 19:33:31 +02:00
  • 6ad2679f17 Read the password from stdin if desired Steve McIntyre 2024-03-21 14:24:50 +00:00
  • 4776f43f04 Improved manual olszomal 2024-03-26 10:05:18 +01:00
  • d9db038c65 Sort central directory entries in ascending order by offset olszomal 2024-03-20 09:28:59 +01:00
  • e8ef027776 Simplify base64 decoding in script.c Michał Trojnara 2024-03-11 12:10:20 +01:00
  • 0a0761746f Fixed memory corruption olszomal 2024-03-08 13:26:40 +01:00
  • f51e2a4869 Intercepted X509_V_FLAG_CHECK_SS_SIGNATURE verify error olszomal 2024-03-08 09:53:09 +01:00
  • 093ed12c66 Supported CRL decoding in DER and PEM format olszomal 2024-03-08 09:38:41 +01:00
  • 71a046a2d0 Ignore missing PKCS#9 signing time field (NID_pkcs9_signingTime: 1.2.840.113549.1.9.5) in the CMS_ContentInfo structure. Timestamping time for verification is get from embedded content in this CMS_ContentInfo structure. olszomal 2024-03-08 09:00:24 +01:00
  • c73f82b558 Set the NONCE field in a TSA request olszomal 2024-03-08 08:35:47 +01:00
  • b294f5d18f Initial 2.9-dev commit Michał Trojnara 2024-03-05 16:34:32 +01:00
  • e07bb7d6b2 Update workflow components Michał Trojnara 2024-03-05 15:51:29 +01:00
  • 699bc85d0a Release 2.8 2.8 Michał Trojnara 2024-03-03 23:32:15 +01:00
  • 192e7a732b Fixed memory leaks olszomal 2024-02-29 10:05:02 +01:00
  • 656051676f Changelog update olszomal 2024-02-29 12:21:26 +01:00
  • 3998bcabb2 Simplify BIO chain free up and FILE_FORMAT_CTX cleanup olszomal 2024-02-28 15:12:20 +01:00
  • fa40c57f80 Simplify checking whether a signature exists olszomal 2024-02-27 12:27:42 +01:00
  • 0b93a94ffa Fixed cross-signed root CA certificate olszomal 2024-02-27 16:31:17 +01:00
  • 105fd3af4a Fix handling of printf format specifiers olszomal 2024-02-27 09:57:34 +01:00
  • 86a594b087 NEWS.md entry for Microsoft PowerShell signing Michał Trojnara 2024-02-22 16:39:57 +01:00
  • 1dea73b038 Install python@3.8 on macOS required for the Github Actions CI olszomal 2024-02-21 13:46:32 +01:00
  • b661ed08ed Fix fuzzer error - corrupted data content olszomal 2024-02-20 15:07:14 +01:00
  • ead0584611 Disable curl dependence olszomal 2024-02-20 14:02:55 +01:00
  • bd7751147e Update Windows build documentation Michał Trojnara 2024-02-20 10:03:06 +01:00
  • 1bc7fc36b8 Connect to CRL Distribution Points through the configured proxy when verifying olszomal 2024-02-16 14:09:27 +01:00
  • 42e9733916 Fix python 3 compatibility in server_http.py (#350) Zeijlon (ThinLinc Team) 2024-02-16 12:39:48 +01:00
  • b2024cee9d Add -ignore-cdp option to help olszomal 2024-02-15 13:40:29 +01:00
  • 9d152b8477 Fix url resource leak, CID 1583652, 1583653 olszomal 2024-02-15 13:31:05 +01:00
  • 7a02d51a83 Print failed certificate chain retrieved from the signature olszomal 2024-02-15 12:27:40 +01:00
  • dac68a3a4d Disable CRL Distribution Points online verification olszomal 2024-02-15 12:12:24 +01:00
  • bd1ab77f44 Improve variable names and comments Michał Trojnara 2024-02-13 17:39:01 +01:00
  • 5ee859db2c Fixed out-of-bounds access, CID 1583604 olszomal 2024-02-13 11:43:06 +01:00
  • ee3c51f6d5 Check BIO_write_ex() return value, CID 1583605 olszomal 2024-02-12 13:43:12 +01:00
  • cedb8b5798 Print default -CAfile in "osslsigncode -v" Michał Trojnara 2024-02-12 12:28:27 +01:00
  • dcf58a00e7 Fixed getting content olszomal 2024-02-10 07:16:23 +01:00
  • 4576895718 Initial script (text) format support Michał Trojnara 2024-02-12 10:54:18 +01:00
  • 1bdcad619e Remove http proxy configuration that may change behavior olszomal 2024-02-06 15:36:43 +01:00
  • 31b046cf98 Fix dereference after null check, CID 1576008 olszomal 2024-01-24 09:01:23 +01:00
  • f3ac2c0c6f Fix resource leak, CID 1576007 olszomal 2024-01-24 08:58:53 +01:00
  • f22c83514c Simplify obtaining an existing signature and creating a new one olszomal 2024-01-23 15:13:21 +01:00
  • 44ca1f38e6 PKCS9_SEQUENCE_NUMBER authenticated attribute support olszomal 2024-01-22 14:00:48 +01:00
  • 0985c47990 Add a new "-index" option to enable verification or addition of attributes to the signature at a certain position olszomal 2024-01-19 14:31:15 +01:00
  • aa158e40ec Fix BIO memory leak olszomal 2024-01-10 15:30:48 +01:00
  • 5da62de5ef Fixed adding signing time olszomal 2024-01-05 14:38:59 +01:00
  • 4d08fbb2c1 Only use IPv4 127.0.0.1 for tests Michał Trojnara 2023-12-21 11:33:48 +01:00
  • 98b004edda Ignore garbage in PE sigpos/siglen Michał Trojnara 2023-12-20 11:16:06 +01:00
  • 34bf3bc525 tests for extract-data command olszomal 2023-12-19 13:02:03 +01:00
  • 64e1bba96b Add a new command extract-data to extract a PKCS#7 data content to be signed olszomal 2023-12-19 12:59:28 +01:00
  • 46bcaa9d88 Skip a null stream warning olszomal 2023-12-18 09:47:10 +01:00
  • 867e0d446d Fixed APPX file specific: attach-signature command olszomal 2023-12-18 09:35:04 +01:00
  • 7285778cb0 Use X509_LOOKUP_load_file() to load certificates with a lookup using the implementation X509_LOOKUP_file() olszomal 2023-12-01 09:58:33 +01:00
  • c909ba82d7 tests: fixed string formatting in Python version earlier than 2.6 olszomal 2023-11-22 09:26:31 +01:00
  • 7b60d6447d tests: initialize resp_data olszomal 2023-11-22 09:12:13 +01:00
  • 588a1a0b5f Use default certificates when the HTTP server fails olszomal 2023-11-21 15:54:02 +01:00
  • 8a9b275494 Fixed unmap_file() segmentation fault olszomal 2023-11-21 09:39:52 +01:00
  • 0db17be606 Listing each member of the CAT file olszomal 2023-11-20 15:10:24 +01:00
  • f9ad19d4a2 Signature index presentation olszomal 2023-11-14 09:35:44 +01:00
  • b9ca24d423 Check MsiDigitalSignatureEx olszomal 2023-11-14 09:30:26 +01:00
  • 8d2b562244 Group warnings for CAT files olszomal 2023-11-13 14:59:13 +01:00
  • 6f4e9ab597 Fix dereference after null check, CID 1570976 olszomal 2023-11-13 14:54:59 +01:00
  • 6d6270094e Simplify unlinking outfile olszomal 2023-11-13 10:23:59 +01:00
  • 57563716d1 Enable x mode modifier if available olszomal 2023-11-09 11:38:22 +01:00
  • 8ab8a133f7 Overwriting an existing file is not supported olszomal 2023-11-08 15:44:17 +01:00
  • ef5047038e Delete the output file in case of error olszomal 2023-11-07 13:17:37 +01:00
  • e290e03341 tests: Add more tests for catalog files. olszomal 2023-11-03 09:46:59 +01:00
  • 900ffed596 Enable verification that a catalog file was signed by a valid certificate. Simplify setting and signing a content blob. Clean up a support library. olszomal 2023-11-03 09:31:22 +01:00
  • 33253afb5e Remove unneeded variables Michał Trojnara 2023-10-17 17:10:28 +02:00
  • 3aba55e5e0 Code simplification Michał Trojnara 2023-10-17 16:58:57 +02:00
  • 898a53b2a7 Create a certificate chain sorted in ascending order by DER encoding olszomal 2023-10-17 14:50:42 +02:00
  • 75ce1dadf5 Add missing dependencies for install in fresh ubuntu Joe Tylka 2023-10-06 17:47:08 -04:00
  • 4166476030 Initial Dockerfile Michał Trojnara 2023-10-09 17:24:22 +02:00
  • a5690f2d19 Fixed resource leak, CID 1566947, 1566965, 1566967, 1568542, 1568543 olszomal 2023-10-09 15:45:10 +02:00
  • cdb75578e9 fixed windows segmentation fault olszomal 2023-10-06 14:20:03 +02:00
  • e2ab4a152d improved verify callbacks olszomal 2023-10-05 09:53:41 +02:00
  • b8e690f3bd Work around a GitHub Actions regression Michał Trojnara 2023-10-06 17:58:37 +02:00