Rev: ChangeLog:1.568
Rev: doc/TODO:1.132
Rev: src/nettle/ChangeLog:1.153
Rev: src/spki/testsuite/.cvsignore:1.6

New test for %t.

Rev: src/nettle/testsuite/sexp-format-test.c:1.4

Rev: src/nettle/ChangeLog:1.152
Rev: src/nettle/TODO:1.5
Rev: src/spki/ChangeLog:1.22
Rev: src/spki/certificate.h:1.17

(format_string): Deleted function.
(sexp_vformat): New %t specifier, formatting an optional display
type. Deleted %z specifier. Instead, introduced a new modifier "0"
that can be used with %s, %l and %t, which says that the data is
NUL-terminated.

Rev: src/nettle/sexp-format.c:1.5
Rev: src/nettle/sexp.h:1.11

formatting s-expressions.

Rev: src/nettle/rsa2sexp.c:1.4

Rev: src/nettle/buffer.c:1.4

s-expressions.
(do_dsa_public_spki_key): Likewise.
* src/spki.c (spki_pkcs5_encrypt): Likewise.
(make_ssh_hostkey_tag): Likewise.
(spki_hash_data): Likewise.
* src/rsa_keygen.c (rsa_generate_key): Likewise.
* src/rsa.c (do_rsa_public_spki_key): Likewise.
* src/lsh.c (do_lsh_lookup): Likewise.
* src/dsa_keygen.c (dsa_generate_key): Likewise.

Rev: src/dsa.c:1.36
Rev: src/dsa_keygen.c:1.23
Rev: src/lsh.c:1.171
Rev: src/rsa.c:1.24
Rev: src/rsa_keygen.c:1.12
Rev: src/spki.c:1.43

(spki_tag_intersect): The ordering of a and b (with a having the
"widest" type) was wrong.

Rev: src/spki/tag.c:1.10

for comparisons.

Rev: src/spki/reduce.c:1.2

functons to use it when they fail.
(spki_parse_principal): Changed to parse a complete subject or
issuer subexpression.
(spki_parse_acl_entry): Use new spki_parse_principal.
(spki_parse_cert): Likewise.
(spki_parse_tag): Don't assert that expression is of the right
type, simply call spki_parse_fail.

Rev: src/spki/parse.c:1.10
Rev: src/spki/parse.h:1.10

used when comparing principals.
(spki_5_tuple_fix_aliases): #if:ed out this function, as it didn't
seem robust enough. Also #if:ed out all uses.

Rev: src/spki/certificate.c:1.18

Rev: src/spki/testsuite/Makefile.am:1.10

(filter_by_date): New functions.
(test_main): Process the red-test filter expressions. Omit some
tests that seem broken, or use features that we haven't
implemented yet. Don't ASSERT that the resulting 5-tuple list is
non-empty, some test cases result in empty lists.

Rev: src/spki/testsuite/cdsa-reduce-test.c:1.2

Rev: src/spki/testsuite/cdsa-reduce-test.c:1.1

cdsa.

Rev: src/spki/testsuite/cdsa-cases/1.in:1.1
Rev: src/spki/testsuite/cdsa-cases/1.out:1.1
Rev: src/spki/testsuite/cdsa-cases/10.in:1.1
Rev: src/spki/testsuite/cdsa-cases/10.out:1.1
Rev: src/spki/testsuite/cdsa-cases/1000.in:1.1
Rev: src/spki/testsuite/cdsa-cases/11.in:1.1
Rev: src/spki/testsuite/cdsa-cases/11.out:1.1
Rev: src/spki/testsuite/cdsa-cases/12.in:1.1
Rev: src/spki/testsuite/cdsa-cases/12.out:1.1
Rev: src/spki/testsuite/cdsa-cases/13.in:1.1
Rev: src/spki/testsuite/cdsa-cases/13.out:1.1
Rev: src/spki/testsuite/cdsa-cases/14.in:1.1
Rev: src/spki/testsuite/cdsa-cases/14.out:1.1
Rev: src/spki/testsuite/cdsa-cases/15.in:1.1
Rev: src/spki/testsuite/cdsa-cases/15.out:1.1
Rev: src/spki/testsuite/cdsa-cases/16.in:1.1
Rev: src/spki/testsuite/cdsa-cases/16.out:1.1
Rev: src/spki/testsuite/cdsa-cases/17.in:1.1
Rev: src/spki/testsuite/cdsa-cases/17.out:1.1
Rev: src/spki/testsuite/cdsa-cases/18.in:1.1
Rev: src/spki/testsuite/cdsa-cases/18.out:1.1
Rev: src/spki/testsuite/cdsa-cases/19.in:1.1
Rev: src/spki/testsuite/cdsa-cases/19.out:1.1
Rev: src/spki/testsuite/cdsa-cases/2.in:1.1
Rev: src/spki/testsuite/cdsa-cases/2.out:1.1
Rev: src/spki/testsuite/cdsa-cases/20.in:1.1
Rev: src/spki/testsuite/cdsa-cases/20.out:1.1
Rev: src/spki/testsuite/cdsa-cases/21.in:1.1
Rev: src/spki/testsuite/cdsa-cases/21.out:1.1
Rev: src/spki/testsuite/cdsa-cases/22.in:1.1
Rev: src/spki/testsuite/cdsa-cases/22.out:1.1
Rev: src/spki/testsuite/cdsa-cases/23.in:1.1
Rev: src/spki/testsuite/cdsa-cases/23.ou1:1.1
Rev: src/spki/testsuite/cdsa-cases/23.out:1.1
Rev: src/spki/testsuite/cdsa-cases/24.in:1.1
Rev: src/spki/testsuite/cdsa-cases/24.out:1.1
Rev: src/spki/testsuite/cdsa-cases/25.in:1.1
Rev: src/spki/testsuite/cdsa-cases/25.out:1.1
Rev: src/spki/testsuite/cdsa-cases/26.in:1.1
Rev: src/spki/testsuite/cdsa-cases/26.out:1.1
Rev: src/spki/testsuite/cdsa-cases/27.in:1.1
Rev: src/spki/testsuite/cdsa-cases/27.out:1.1
Rev: src/spki/testsuite/cdsa-cases/28.in:1.1
Rev: src/spki/testsuite/cdsa-cases/28.out:1.1
Rev: src/spki/testsuite/cdsa-cases/29.in:1.1
Rev: src/spki/testsuite/cdsa-cases/29.ou1:1.1
Rev: src/spki/testsuite/cdsa-cases/29.out:1.1
Rev: src/spki/testsuite/cdsa-cases/3.in:1.1
Rev: src/spki/testsuite/cdsa-cases/3.out:1.1
Rev: src/spki/testsuite/cdsa-cases/30.in:1.1
Rev: src/spki/testsuite/cdsa-cases/30.out:1.1
Rev: src/spki/testsuite/cdsa-cases/31.in:1.1
Rev: src/spki/testsuite/cdsa-cases/31.out:1.1
Rev: src/spki/testsuite/cdsa-cases/32.in:1.1
Rev: src/spki/testsuite/cdsa-cases/32.ou1:1.1
Rev: src/spki/testsuite/cdsa-cases/32.out:1.1
Rev: src/spki/testsuite/cdsa-cases/33.in:1.1
Rev: src/spki/testsuite/cdsa-cases/33.out:1.1
Rev: src/spki/testsuite/cdsa-cases/34.in:1.1
Rev: src/spki/testsuite/cdsa-cases/34.out:1.1
Rev: src/spki/testsuite/cdsa-cases/35.in:1.1
Rev: src/spki/testsuite/cdsa-cases/35.out:1.1
Rev: src/spki/testsuite/cdsa-cases/36.in:1.1
Rev: src/spki/testsuite/cdsa-cases/36.out:1.1
Rev: src/spki/testsuite/cdsa-cases/37.in:1.1
Rev: src/spki/testsuite/cdsa-cases/37.out:1.1
Rev: src/spki/testsuite/cdsa-cases/38.in:1.1
Rev: src/spki/testsuite/cdsa-cases/38.out:1.1
Rev: src/spki/testsuite/cdsa-cases/39.in:1.1
Rev: src/spki/testsuite/cdsa-cases/39.out:1.1
Rev: src/spki/testsuite/cdsa-cases/4.in:1.1
Rev: src/spki/testsuite/cdsa-cases/4.out:1.1
Rev: src/spki/testsuite/cdsa-cases/40.in:1.1
Rev: src/spki/testsuite/cdsa-cases/40.out:1.1
Rev: src/spki/testsuite/cdsa-cases/41.in:1.1
Rev: src/spki/testsuite/cdsa-cases/41.out:1.1
Rev: src/spki/testsuite/cdsa-cases/42.in:1.1
Rev: src/spki/testsuite/cdsa-cases/42.out:1.1
Rev: src/spki/testsuite/cdsa-cases/43.in:1.1
Rev: src/spki/testsuite/cdsa-cases/43.ou1:1.1
Rev: src/spki/testsuite/cdsa-cases/43.out:1.1
Rev: src/spki/testsuite/cdsa-cases/44.in:1.1
Rev: src/spki/testsuite/cdsa-cases/44.out:1.1
Rev: src/spki/testsuite/cdsa-cases/45.in:1.1
Rev: src/spki/testsuite/cdsa-cases/45.out:1.1
Rev: src/spki/testsuite/cdsa-cases/46.in:1.1
Rev: src/spki/testsuite/cdsa-cases/46.out:1.1
Rev: src/spki/testsuite/cdsa-cases/47.in:1.1
Rev: src/spki/testsuite/cdsa-cases/47.out:1.1
Rev: src/spki/testsuite/cdsa-cases/48.in:1.1
Rev: src/spki/testsuite/cdsa-cases/48.out:1.1
Rev: src/spki/testsuite/cdsa-cases/49.in:1.1
Rev: src/spki/testsuite/cdsa-cases/49.out:1.1
Rev: src/spki/testsuite/cdsa-cases/5.in:1.1
Rev: src/spki/testsuite/cdsa-cases/5.out:1.1
Rev: src/spki/testsuite/cdsa-cases/50.in:1.1
Rev: src/spki/testsuite/cdsa-cases/50.out:1.1
Rev: src/spki/testsuite/cdsa-cases/51.in:1.1
Rev: src/spki/testsuite/cdsa-cases/51.out:1.1
Rev: src/spki/testsuite/cdsa-cases/52.in:1.1
Rev: src/spki/testsuite/cdsa-cases/52.out:1.1
Rev: src/spki/testsuite/cdsa-cases/53.in:1.1
Rev: src/spki/testsuite/cdsa-cases/53.out:1.1
Rev: src/spki/testsuite/cdsa-cases/54.in:1.1
Rev: src/spki/testsuite/cdsa-cases/54.out:1.1
Rev: src/spki/testsuite/cdsa-cases/55.in:1.1
Rev: src/spki/testsuite/cdsa-cases/55.out:1.1
Rev: src/spki/testsuite/cdsa-cases/56.in:1.1
Rev: src/spki/testsuite/cdsa-cases/56.out:1.1
Rev: src/spki/testsuite/cdsa-cases/57.in:1.1
Rev: src/spki/testsuite/cdsa-cases/57.out:1.1
Rev: src/spki/testsuite/cdsa-cases/58.in:1.1
Rev: src/spki/testsuite/cdsa-cases/58.out:1.1
Rev: src/spki/testsuite/cdsa-cases/59.in:1.1
Rev: src/spki/testsuite/cdsa-cases/59.out:1.1
Rev: src/spki/testsuite/cdsa-cases/6.in:1.1
Rev: src/spki/testsuite/cdsa-cases/6.out:1.1
Rev: src/spki/testsuite/cdsa-cases/60.in:1.1
Rev: src/spki/testsuite/cdsa-cases/60.out:1.1
Rev: src/spki/testsuite/cdsa-cases/61.in:1.1
Rev: src/spki/testsuite/cdsa-cases/61.out:1.1
Rev: src/spki/testsuite/cdsa-cases/62.in:1.1
Rev: src/spki/testsuite/cdsa-cases/62.out:1.1
Rev: src/spki/testsuite/cdsa-cases/63.in:1.1
Rev: src/spki/testsuite/cdsa-cases/63.out:1.1
Rev: src/spki/testsuite/cdsa-cases/64.in:1.1
Rev: src/spki/testsuite/cdsa-cases/64.out:1.1
Rev: src/spki/testsuite/cdsa-cases/65.in:1.1
Rev: src/spki/testsuite/cdsa-cases/65.out:1.1
Rev: src/spki/testsuite/cdsa-cases/66.in:1.1
Rev: src/spki/testsuite/cdsa-cases/66.out:1.1
Rev: src/spki/testsuite/cdsa-cases/67.in:1.1
Rev: src/spki/testsuite/cdsa-cases/67.out:1.1
Rev: src/spki/testsuite/cdsa-cases/68.in:1.1
Rev: src/spki/testsuite/cdsa-cases/68.out:1.1
Rev: src/spki/testsuite/cdsa-cases/69.in:1.1
Rev: src/spki/testsuite/cdsa-cases/69.out:1.1
Rev: src/spki/testsuite/cdsa-cases/7.in:1.1
Rev: src/spki/testsuite/cdsa-cases/7.out:1.1
Rev: src/spki/testsuite/cdsa-cases/70.in:1.1
Rev: src/spki/testsuite/cdsa-cases/70.out:1.1
Rev: src/spki/testsuite/cdsa-cases/71.in:1.1
Rev: src/spki/testsuite/cdsa-cases/71.out:1.1
Rev: src/spki/testsuite/cdsa-cases/72.in:1.1
Rev: src/spki/testsuite/cdsa-cases/72.out:1.1
Rev: src/spki/testsuite/cdsa-cases/73.in:1.1
Rev: src/spki/testsuite/cdsa-cases/73.out:1.1
Rev: src/spki/testsuite/cdsa-cases/74.in:1.1
Rev: src/spki/testsuite/cdsa-cases/74.out:1.1
Rev: src/spki/testsuite/cdsa-cases/75.in:1.1
Rev: src/spki/testsuite/cdsa-cases/75.out:1.1
Rev: src/spki/testsuite/cdsa-cases/76.in:1.1
Rev: src/spki/testsuite/cdsa-cases/76.out:1.1
Rev: src/spki/testsuite/cdsa-cases/77.in:1.1
Rev: src/spki/testsuite/cdsa-cases/77.out:1.1
Rev: src/spki/testsuite/cdsa-cases/78.in:1.1
Rev: src/spki/testsuite/cdsa-cases/78.out:1.1
Rev: src/spki/testsuite/cdsa-cases/79.in:1.1
Rev: src/spki/testsuite/cdsa-cases/79.out:1.1
Rev: src/spki/testsuite/cdsa-cases/8.in:1.1
Rev: src/spki/testsuite/cdsa-cases/8.out:1.1
Rev: src/spki/testsuite/cdsa-cases/80.in:1.1
Rev: src/spki/testsuite/cdsa-cases/80.out:1.1
Rev: src/spki/testsuite/cdsa-cases/81.in:1.1
Rev: src/spki/testsuite/cdsa-cases/81.out:1.1
Rev: src/spki/testsuite/cdsa-cases/82.in:1.1
Rev: src/spki/testsuite/cdsa-cases/82.out:1.1
Rev: src/spki/testsuite/cdsa-cases/83.in:1.1
Rev: src/spki/testsuite/cdsa-cases/83.out:1.1
Rev: src/spki/testsuite/cdsa-cases/84.in:1.1
Rev: src/spki/testsuite/cdsa-cases/84.out:1.1
Rev: src/spki/testsuite/cdsa-cases/85.in:1.1
Rev: src/spki/testsuite/cdsa-cases/85.out:1.1
Rev: src/spki/testsuite/cdsa-cases/86.in:1.1
Rev: src/spki/testsuite/cdsa-cases/86.out:1.1
Rev: src/spki/testsuite/cdsa-cases/87.in:1.1
Rev: src/spki/testsuite/cdsa-cases/87.out:1.1
Rev: src/spki/testsuite/cdsa-cases/88.in:1.1
Rev: src/spki/testsuite/cdsa-cases/88.out:1.1
Rev: src/spki/testsuite/cdsa-cases/89.in:1.1
Rev: src/spki/testsuite/cdsa-cases/89.out:1.1
Rev: src/spki/testsuite/cdsa-cases/9.in:1.1
Rev: src/spki/testsuite/cdsa-cases/9.out:1.1
Rev: src/spki/testsuite/cdsa-cases/90.in:1.1
Rev: src/spki/testsuite/cdsa-cases/90.out:1.1
Rev: src/spki/testsuite/cdsa-cases/91.in:1.1
Rev: src/spki/testsuite/cdsa-cases/91.out:1.1

Rev: src/spki/ChangeLog:1.21

syntax.
* testsuite/read-acl-test.c (test_main): Likewise.

* testsuite/read-cert-test.c (test_main): Need to initialize the
cert.

Rev: src/spki/testsuite/lookup-acl-test.c:1.3
Rev: src/spki/testsuite/read-acl-test.c:1.6
Rev: src/spki/testsuite/read-cert-test.c:1.5

Rev: src/spki/tag.c:1.9
Rev: src/spki/tag.h:1.5

(spki_principal_add_keyspki_principal_add_md5,
spki_principal_add_sha1): Initialize alias field.
(HASH_MATCH): New macro.
(spki_principal_fix_aliases): New function.
(spki_principal_by_key): Setup alias pointers if we add a key for
which a hash is already known.
(spki_principal_free_chain): New function.
(spki_5_tuple_init): New function.
(spki_5_tuple_fix_aliases): New function.
(spki_acl_parse): Call spki_5_tuple_fix_aliases before returning.
(format_valid, spki_acl_format): New functions.
(spki_process_sequence_no_signatures): Bug fix in looping over the
sequence. Call spki_5_tuple_fix_aliases before returning.
(spki_date_since_ever): Represent a time far ago.
(spki_date_for_ever): Represent a time far into the future.

* certificate.h (struct spki_principal): New field, alias.
(spki_date_since_ever, spki_date_for_ever): New constant globals.
(SPKI_DATE_CMP): New macro.

Rev: src/spki/certificate.c:1.17
Rev: src/spki/certificate.h:1.16

* reduce.c: New file.
(spki_5_tuple_reduce): New function.

Rev: src/spki/Makefile.am:1.8
Rev: src/spki/reduce.c:1.1

initializer.
(spki_parse_acl_entry): Deleted initialization, the caller should
initialize the 5-tuple. Updated the syntax to include a real
subject expression.
(spki_parse_cert): Deleted initialization, the caller should
initialize the 5-tuple. Fixed syntax check of subject expressions.

Rev: src/spki/parse.c:1.9
Rev: src/spki/parse.h:1.9

Rev: src/spki/ChangeLog:1.20
Rev: src/spki/index.html:1.1

inclusive to less inclusive.
(spki_tag_intersect): New function.

Rev: src/spki/tag.c:1.8
Rev: src/spki/tag.h:1.4

Rev: src/spki/ChangeLog:1.19

set/set inclusions.

Rev: src/spki/testsuite/tag-test.c:1.3

spki_acl_by_authorization_first and
spki_acl_by_authorization_next.

Rev: src/spki/testsuite/lookup-acl-test.c:1.2

Rev: src/spki/testsuite/testutils.c:1.3
Rev: src/spki/testsuite/testutils.h:1.7

custom allocation.

* certificate.c (spki_realloc): Deleted function.
(spki_acl_init): Use nettle_realloc.
(acl_by_auth): Take a struct spki_tag argument.
(spki_acl_by_authorization_next): Likewise.
(spki_acl_by_authorization_first): Likewise.
(spki_5_tuple_free_chain): Use spki_tag_release.

Rev: src/spki/certificate.c:1.16
Rev: src/spki/certificate.h:1.15

(spki_next_subexpr): Deleted function.
(spki_parse_tag): Use spki_tag_compile to convert tag to internal
representation.

Rev: src/spki/parse.c:1.8
Rev: src/spki/parse.h:1.8

(tag_list, tag_atom, tag_range): New functions, isolating type
casts. Replaced typecasts in the rest of the code with function
calls.
(spki_tag_set_new): Normalize sets with a single element.
(spki_tag_compile): Get the tag expressions in a list in the right
order.
(spki_tag_from_sexp): New function.
(atom_prefix): New function.
(atom_equal): Change dto use new string type.
(set_includes, list_includes, spki_tag_includes): Rewrote to work
with the tree representation of tags, rather than with plain strings.

Rev: src/spki/tag.c:1.7
Rev: src/spki/tag.h:1.3

Rev: src/spki/tag.c:1.6

(spki_tag_compile): Removed const.
(spki_tag_compile): Cast &spki_tag_any to a non-const pointer when
returning it.
(spki_cons_nreverse): New function.
(spki_tag_set_new): New function, normalizing sets inside sets.
Also reordered functions, putting operations on strings and lists
first.

Rev: src/spki/ChangeLog:1.18
Rev: src/spki/tag.c:1.5

(spki_tag_compile): Removed const.
(spki_tag_compile): Cast &spki_tag_any to a non-const pointer when
returning it.

Rev: src/spki/tag.c:1.4

Rev: src/nettle/ChangeLog:1.151
Rev: src/nettle/buffer.c:1.3

Rev: src/spki/testsuite/tag-test.c:1.2

New structs, used for representing a tag. Strings and tags are
reference counted. Added a set of contructors and book-keeping
functions.
(enum spki_range_type): New enum.
(spki_tag_classify): An list must start with a string.
(spki_tag_compile): New function.
(spki_tag_release): New function.

* tag.c (set_includes): Fixed recovery if matching fails in the
middle of one of the elements.
(spki_tag_includes): For SPKI_TAG_ANY, advance past the (*)
expression.

Rev: src/spki/tag.c:1.3
Rev: src/spki/tag.h:1.2

Rev: src/nettle/testsuite/testutils.c:1.20

(libnettle_a_SOURCES): Added buffer-init.c and realloc.c.

Rev: src/nettle/Makefile.am:1.54

now.

Rev: src/nettle/sexp.c:1.13
Rev: src/nettle/sexp.h:1.10

* shadata.c: Likewise.

Rev: src/nettle/desdata.c:1.2
Rev: src/nettle/shadata.c:1.2