Page Menu
Home
GnuPG
Search
Configure Global Search
Log In
Files
F18824745
TODO
No One
Temporary
Actions
View File
Edit File
Delete File
View Transforms
Subscribe
Mute Notifications
Award Token
Size
2 KB
Subscribers
None
TODO
View Options
-*- outline -*-
* src/dn.c:
** Check that error handling of bad utf-8 encoding is correct
** There is an ambiguity in rfc2253.
This is related to the handling of spaces around delimiters. At one
place it talks about whitespace and few lines later it talks about
just the space characters which must be ignored. How should that be
solved? This is only related to spaces at the beginning or end of a
name part when old style quoting is not used.
* src/der-decoder.c:
** should work on a stripped down parse tree
** Allow to specify the desired top element.
Or a list so that it can detect the needed tree itself
* src/der-encoder.c
** Setting default values is missing
** Tags > 31 are not supported.
* src/asn1-*
** Cleanup the used data structures and remove unneeded functions.
** Think about a public API to the Asn functions.
* src/cms*
** split some stuff from cms.c into a new cms-build.c
** can't handle CRL infos in certificates
This is not a problem within the Aegypten project as CRL aren't be
retrieved by online means.
** cant't handle unprotected attributes
e.g. for counter signatures. Not needed in Aegypten.
* src/keyinfo.c
** Do we need to support BER encoded stuff?
* src/time.c
** Allow for other timezones
* src/reader.c
** ksba_reader_unread limited to 100 bytes
Actually the reader is limited to 100 bytes over the first unread
size. Easy to fix.
* General
** The ASN.1 parse tree is not released in all places
** Some memory is not released in case of errors.
* src/crl.c
** certificateIssuer not supported
To support this we need to have an extended ksba_crl_get_item
function to either return the issuer or at least set a flag to
indicate that such an extension is available. If this new API is
used we will move detection of the critical certificateIssuer
extension into the old ksba_crl_get_item and bail out only there.
If the new version of that function is used there won't be a need to
bail out. Example of a CRL using this extension:
http://pks.telesec.de/telesec/servlet/download_cr (2006-09-04).
** Allow fetching of all entry extensions.
File Metadata
Details
Attached
Mime Type
text/plain
Expires
Mon, Dec 23, 1:16 PM (48 m, 2 s)
Storage Engine
local-disk
Storage Format
Raw Data
Storage Handle
7e/9c/c594204b7357c04023a1a9d740c0
Attached To
rK libksba
Event Timeline
Log In to Comment