Skip to content

[DNM][Collections] Signing (all, 1): certificate and key types #3260

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 2 commits into from

Conversation

yim-lee
Copy link
Contributor

@yim-lee yim-lee commented Feb 12, 2021

This is part 1 of a series of PRs to support package collection signing on all platforms. Originally #3238.

Depends on #3259

yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 12, 2021
This is part 2 of a series of PRs to support package collection signing on **non-Apple** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
This is part 1 of a series of PRs to support package collection signing
on **Apple** platforms. Originally
swiftlang#3238.

Modifications:
- New `PackageCollectionsSigning` module
- Add `Certificate` type
- Add EC and RSA key types
This is part 1 of a series of PRs to support package collection signing on **non-Apple** platforms. Originally swiftlang#3238.

Depends on swiftlang#3259
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 13, 2021
This is part 2 of a series of PRs to support package collection signing on **non-Apple** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
@yim-lee
Copy link
Contributor Author

yim-lee commented Feb 13, 2021

@swift-ci please smoke test macOS

@yim-lee yim-lee changed the title [DNM][Collections] Signing (non-apple, 1): certificate and key types [DNM][Collections] Signing (all, 1): certificate and key types Feb 13, 2021
@tomerd tomerd added the next waiting for next merge window label Feb 16, 2021
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 18, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
@yim-lee
Copy link
Contributor Author

yim-lee commented Feb 18, 2021

We can no longer merge this PR on its own. Rolling this into #3265 and closing.

@yim-lee yim-lee closed this Feb 18, 2021
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 18, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 18, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 18, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 20, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 22, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 26, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Feb 26, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 2, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 9, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 10, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 11, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 11, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 12, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 12, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 13, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 20, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit to yim-lee/swift-package-manager that referenced this pull request Mar 22, 2021
This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally swiftlang#3242.

Depends on swiftlang#3260, swiftlang#3264
yim-lee added a commit that referenced this pull request Mar 24, 2021
* [Collections] Signing (all, 1): certificate and key types

This is part 1 of a series of PRs to support package collection signing on **all** platforms. Originally #3238.

Depends on #3259

* [Collections] Signing (all, 2): signed collections

This is part 2 of a series of PRs to support package collection signing on **all** platforms. Originally #3242.

Depends on #3260, #3264

* [Collections] Signing (all, 3): certificate validations

This is part 3 of a series of PRs to support package collection signing on **all** platforms. Originally #3245.

Depends on #3265, #3269

* [Collections] Signing (all, 3.b): OCSP support for non-Apple platforms

This is part 3.b of a series of PRs to support package collection signing on **all** platforms.

Depends on #3270

Modifications:
- Add `PackageCollectionsSigningLibc` module
- Add OCSP support for non-Apple platforms through `PackageCollectionsSigningLibc`

* Use shared callbackQueue and diagnosticsEngine in tests

* Update platform check

* Better OCSP error handling and cache OCSP results

* Don't default to BoringSSL

* OpenSSL license

* fixup

* Use ptr.count

* Don't blindly drop X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION error

* Add withUnsafeMutablePointer for accessing underlying X509 pointer

* Fix leaks

* Use withExtendedLifetime

* OSCP response handling

* Delete remove from cache call

* OCSP should fail open

* Verify OCSP response

* Create new X509_STORE per invocation
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
next waiting for next merge window
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants