aboutsummaryrefslogtreecommitdiff
path: root/projects/hsm/mgmt-keystore.c
AgeCommit message (Collapse)Author
2018-09-05When erasing the whole keystore, optionally preserve the login PINs.Paul Selkirk
2018-04-19Implement hash-based signatures, per draft-mcgrew-hash-sigs-08.txtPaul Selkirk
2017-10-15Cleanup: All drivers return HAL_StatusTypeDef rather than magic values.Paul Selkirk
Note: This affects libhal/ks_token.c, which uses the keystore driver directly.
2017-10-11Cleanup 'unused parameter' warnings, a couple of which are actual coding errors.Paul Selkirk
2017-10-11Cleanup: signed/unsigned mismatches, mostly in loop countersPaul Selkirk
2017-05-28Track API changes in libhal ks9 branch.Rob Austein
2017-04-12Handle race condition while fetching key metadata for display.Rob Austein
Fetching a list of keys and all of their metadata isn't an atomic process, nor, probably, should it be, so we need to cope with things like a key being deleted via the RPC interface while we're fetching its metadata for display on the console interface.
2017-04-11Track API changes on sw/libhal pkcs8 branch.Rob Austein
2017-02-21Use libcli return codes where appropriate; show whether PINs are set.Paul Selkirk
2017-02-21Use bulk erase in the one place it makes sense.Paul Selkirk
2016-12-23Don't wrap key number in "keystore show keys".Rob Austein
2016-11-15Reinitialize keystore data structures after wiping keystore flash.Rob Austein
2016-11-14Track removal of hal_rpc_pkey_list().Rob Austein
2016-11-14hal_rpc_pkey_find() -> hal_rpc_pkey_open().Rob Austein
2016-11-01Tweak CLI keystore commands for latest libhal RPC keystore API.Rob Austein
Using {-1} as a client handle in the CLI is a kludge, but the new stricter libhal keystore code really wants us to be consistent about this, so as long as any part of the CLI is using client {-1}, it all needs to do so. This still isn't really right, the CLI probably needs a different set of access rules than those which apply to the RPC calls, but I'm deferring that until we know what the "final" (for this branch) version of the RPC API looks like, and have done whatever refactoring might be required in the libhal keystore drivers.
2016-10-09Track changes to libhal pkey API.Rob Austein
2016-10-07Track changes to libhal RPC pkey API.Rob Austein
2016-09-27"keystore erase" now clears entire keystore flash.Rob Austein
Now that we're using more than just the first few sectors of the keystore flash, we need a command to clear the whole thing. This is not quite right yet, because it doesn't yet notify libhal's ks_flash driver that the entire content of the flash has been yanked out from under it. In theory, we should be able to erase the entire flash in a single operation using the bulk erase command command (0xC7), but I couldn't get that to do anything (no error reported, no visible effect), so, for now, we erase by sectors.
2016-09-09Track removal of `type` argument from hal_rpc_pkey_find().Rob Austein
2016-09-02Whack with club until working with new keystore API.Rob Austein
Basic stuff like "keystore show keys", "keystore delete key", and the PIN commands all work with the new keystore code. Some of the management commands are still broken. Some of the old management commands were using libhal-internal APIs for which no real equivalent exists anymore. Some of the old management commands were doing things that, um, never could have worked as written.
2016-07-21Use a fresh port of libcli, which retains more of the original API.Paul Selkirk
2016-07-12Re-disable 'keystore set key'; hexdump binary key names; remove unused ↵Paul Selkirk
'show' commands.
2016-07-12Restore 'keystore set|rename|delete' commands; access key by index as well ↵Paul Selkirk
as name.
2016-07-09Clean up the CLI.Fredrik Thulin
A lot of the commands were just useful when testing/implementing features for the Alpha. Remove them now that they have been merged to projects/cli-test.
2016-06-29add commands to clear pin or whole keystoreFredrik Thulin
2016-06-29cleanupFredrik Thulin
2016-06-26PIN-based loginPaul Selkirk
2016-06-23Add masterkey and keystore commands.Fredrik Thulin