)]}' { "log": [ { "commit": "16492f8e5d3fb18afc85c3542c9ab2768a94fd4d", "tree": "659f53d86e9e3c49f0b1ff6d13437e1f956dde21", "parents": [ "23aa2ef10a68da7a15a9b1cacf94873fdf77f887" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jun 26 21:38:11 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Tue Jul 08 17:30:38 2014" }, "message": "Enable the chaps system-wide token.\n\nBUG\u003dchromium:210525\nTEST\u003dmanual\n\nChange-Id: Ib52d65af99a2e9082b9b572598b9dfe5f638fc25\nReviewed-on: https://chromium-review.googlesource.com/205793\nTested-by: Philipp Neubeck \u003cpneubeck@chromium.org\u003e\nReviewed-by: Philipp Neubeck \u003cpneubeck@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "23aa2ef10a68da7a15a9b1cacf94873fdf77f887", "tree": "7de5e07d83c752318af748ba669a0af1b6c1d3ff", "parents": [ "5a13df95a50ac3f6a3f8f44fdefce63f30de2e26" ], "author": { "name": "Bertrand SIMONNET", "email": "bsimonnet@chromium.org", "time": "Fri Jun 20 22:25:41 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Thu Jun 26 02:31:39 2014" }, "message": "chaps: Update gyp files to depend on metrics\u0027 standalone ebuild.\n\nMetrics is now installed by chromeos-base/metrics.\nPlatform2 packages should depend on it through the variable:deps mechanism\ninstead of depending directly on metrics\u0027 gyp file.\n\nBUG\u003dchromium:387923\nTEST\u003dBuild platform2. metrics gets installed and the tests succeed.\nTEST\u003dTrybot run on daisy-release, lumpy-incremental-paladin, link-release,\n duck-release, x86-mario-release.\n\nCQ-DEPEND\u003dCL:205312\n\nChange-Id: I85cefefe2c61af805d92e5b1e8f88b1f4edcbef1\nReviewed-on: https://chromium-review.googlesource.com/205298\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nTested-by: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\nCommit-Queue: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\n" }, { "commit": "5a13df95a50ac3f6a3f8f44fdefce63f30de2e26", "tree": "98f265fe68b13885c75b0639e45931e41b6e1f4e", "parents": [ "281490e6c59496b59b77f90ddba0f73d8fa27702" ], "author": { "name": "Alex Deymo", "email": "deymo@chromium.org", "time": "Mon Jun 23 18:26:36 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Tue Jun 24 20:04:09 2014" }, "message": "Allow C++ exceptions on chaps.\n\nChaps uses try/catch to interact with dbus-c++.\n\nBUG\u003dchromium:386443\nTEST\u003demerge-link platform2 (with the changes to common.gypi)\nCQ-DEPEND\u003dCL:205242\n\nChange-Id: Ic705325846e487df33cbb5277bdea241286eacf6\nReviewed-on: https://chromium-review.googlesource.com/205227\nTested-by: Alex Deymo \u003cdeymo@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nCommit-Queue: Alex Deymo \u003cdeymo@chromium.org\u003e\n" }, { "commit": "281490e6c59496b59b77f90ddba0f73d8fa27702", "tree": "74bb21cbae0eef26528ccc36a74e6e39b9eb0c62", "parents": [ "d0d2e9d2776a3ec0755de192bb59748499a49540" ], "author": { "name": "Bertrand SIMONNET", "email": "bsimonnet@chromium.org", "time": "Wed Jun 04 20:19:45 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Wed Jun 18 11:00:24 2014" }, "message": "chaps: Migrate libchromeos to its own ebuild\n\nAll platform2 packages should have their own ebuild that will be compiled\nindependently. Packages should DEPEND on libchromeos and should not have a gyp\ndependency on libchromeos\u0027s gyp file anymore.\n\nBUG\u003dchromium:381372\nTEST\u003demerge-daisy libchromeos \u0026\u0026 emerge-daisy platform2 work\nTEST\u003dtrybot run on daisy, link, mario and duck.\nTEST\u003dtrybot run on lumpy-incremental-paladin.\n\nCQ-DEPEND\u003dCL:202748\n\nChange-Id: I404b80bd6a358f0a403bc7d827c5a4e1d8e9ce61\nReviewed-on: https://chromium-review.googlesource.com/202761\nTested-by: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nCommit-Queue: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\n" }, { "commit": "d0d2e9d2776a3ec0755de192bb59748499a49540", "tree": "04265134f2599dba6c88d213336437a41914ef1f", "parents": [ "4d58b4ae609b28f19e6fb86517efddc73ab6eb4f" ], "author": { "name": "Alex Deymo", "email": "deymo@chromium.org", "time": "Wed Jun 11 04:04:52 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Thu Jun 12 01:41:03 2014" }, "message": "Link chaps with libprotobuf-lite instead of libprotobuf.\n\nThe attributes.proto file already has the option:\n option optimize_for \u003d LITE_RUNTIME;\nwhich generates code compatible with the protobuf-lite version of the\nlibrary. This patch makes the code link using the -lite version\ninstead of the full version.\n\nBUG\u003dchromium:383182\nTEST\u003dChecked that no undefined symbol on chapsd is provided by libprotobuf but not libprotobuf-lite.\nTEST\u003dbuild_packages on link and checked with ldd that libprotobuf-lite is used:\n$ ldd /build/link/usr/lib64/libchaps.so /build/link/usr/sbin/chapsd /build/link/usr/bin/chaps_client | grep proto\nTEST\u003dlocal `make` works; resulting build-opt-local/chapsd uses libprotobuf-lite.\n\nChange-Id: I9fddbf0136ff97ba06d13d69afeadcbe515291be\nReviewed-on: https://chromium-review.googlesource.com/203336\nTested-by: Alex Deymo \u003cdeymo@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Alex Deymo \u003cdeymo@chromium.org\u003e\n" }, { "commit": "4d58b4ae609b28f19e6fb86517efddc73ab6eb4f", "tree": "48c187581cfd869b5f1ac91f16c158e06f98fb99", "parents": [ "8e2cc5885443e7f51631f0a756db15068be7e5ba" ], "author": { "name": "Bertrand SIMONNET", "email": "bsimonnet@chromium.org", "time": "Mon Jun 02 21:12:02 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Tue Jun 03 04:25:27 2014" }, "message": "chaps: Update gyp files to use libchromeos from src/platform2\n\nlibchromeos was moved from src/platform to src/platform2. This CL updates\nthe gyp files to use the new location.\n\nBUG\u003dchromium:370258\nTEST\u003dFEATURES\u003dtest emerge-amd64-generic platform2\nTEST\u003dtrybot run on daisy, link, mario and duck\n\nCQ-DEPEND\u003dCL:202334\n\nChange-Id: Iffedad8665ba84d9cc0491d8d9fc620019d972f1\nReviewed-on: https://chromium-review.googlesource.com/202336\nReviewed-by: Prathmesh Prabhu \u003cpprabhu@chromium.org\u003e\nTested-by: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\nCommit-Queue: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\n" }, { "commit": "8e2cc5885443e7f51631f0a756db15068be7e5ba", "tree": "b340edb52cc90b4e8dce2958c3d30d504b2b0728", "parents": [ "b3a8c3b08da54a13be0025c0cf6d49ee2b0f2304" ], "author": { "name": "Bertrand SIMONNET", "email": "bsimonnet@chromium.org", "time": "Wed May 28 23:22:43 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Sat May 31 01:46:01 2014" }, "message": "chaps: Update gyp file to use src/platform2/common-mk\n\nWe are moving the packages built by platform2\u0027s ebuild into src/platform2.\nWe need packages to use src/platform2/common-mk instead of\nsrc/platform/common-mk.\n\nBUG\u003dchromium:378554\nTEST\u003demerge-daisy platform2\nTEST\u003dtrybot run on daisy, link, mario and duck\n\nCQ-DEPEND\u003dCL:201938\n\nChange-Id: Iaa2460d6fc79933aaea265a85f46de24d7e79983\nReviewed-on: https://chromium-review.googlesource.com/201954\nTested-by: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\nReviewed-by: Prathmesh Prabhu \u003cpprabhu@chromium.org\u003e\nCommit-Queue: Bertrand Simonnet \u003cbsimonnet@chromium.org\u003e\n" }, { "commit": "b3a8c3b08da54a13be0025c0cf6d49ee2b0f2304", "tree": "fc331e68b9ae928cbe0bf63da1cdd0dae963f984", "parents": [ "67013883b3465c684f60f7714499020441ad003e" ], "author": { "name": "Ben Chan", "email": "benchan@chromium.org", "time": "Thu May 22 01:22:22 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Fri May 23 17:56:15 2014" }, "message": "chaps: Update to build against libchrome-271506.\n\nBUG\u003dchromium:375032\nTEST\u003d`FEATURES\u003dtest emerge-$BOARD chaps`\n\nChange-Id: I63fb7b970ce2a3b3912447adc0f4a8f28fcfee2c\nReviewed-on: https://chromium-review.googlesource.com/201204\nTested-by: Ben Chan \u003cbenchan@chromium.org\u003e\nCommit-Queue: Ben Chan \u003cbenchan@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "67013883b3465c684f60f7714499020441ad003e", "tree": "935ce1bb64ab4b6b06aec645f4fdcadb60ee4f6a", "parents": [ "0d19ca99ac60f5775ee00cf46635598d898fb34f" ], "author": { "name": "mukesh agrawal", "email": "quiche@chromium.org", "time": "Fri Apr 25 20:22:12 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Sat Apr 26 02:45:58 2014" }, "message": "chaps: assure that we get the D-Bus name we want\n\nThe old DBus::Connection::request_name method doesn\u0027t necessarily\nsucceed, and it doesn\u0027t tell us when it fails. This means that\nchaps might keep running, even though no one can talk to it over\nD-Bus.\n\nSwitch to the new acquire_name method, which actually reports\nwhether or not we got the name we asked for. Abort if we didn\u0027t\nget the name, so that a useless process doesn\u0027t stick around.\n\nBUG\u003dchromium:364548\nTEST\u003dunit tests\n\nChange-Id: I04c0777e757c2a52f49dcc807a45a49803a5e165\nReviewed-on: https://chromium-review.googlesource.com/197066\nTested-by: mukesh agrawal \u003cquiche@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: mukesh agrawal \u003cquiche@chromium.org\u003e\n" }, { "commit": "0d19ca99ac60f5775ee00cf46635598d898fb34f", "tree": "29b1cece63a12ba75be9c2c1a6b202ae680ad076", "parents": [ "bbdeeb7512dc52c32ffd3ef56a52f55749ad458f" ], "author": { "name": "Ben Chan", "email": "benchan@chromium.org", "time": "Wed Apr 16 22:42:45 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Thu Apr 17 16:42:30 2014" }, "message": "chaps: Remove libbase_ver override in gyp file.\n\nCL:194476 modified platform2 to build against libchrome-242728. The\nlibbase_ver override in the gyp file is no longer needed.\n\nThis CL also updates the fallback version of BASE_VER in Makefile from\n180609 to 242728.\n\nBUG\u003dchromium:361748\nTEST\u003d`FEATURES\u003dtest emerge-$BOARD platform2`\nTEST\u003dVerify that chapsd is linked against libchrome-242728.\n\nChange-Id: I14177a61796c877765cbd8ff2dd3441ebe4699d1\nReviewed-on: https://chromium-review.googlesource.com/195281\nTested-by: Ben Chan \u003cbenchan@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Ben Chan \u003cbenchan@chromium.org\u003e\n" }, { "commit": "bbdeeb7512dc52c32ffd3ef56a52f55749ad458f", "tree": "40e07c9e6e7ebe773bcca2ecc665b185a7dee730", "parents": [ "3b7456834a0b57d3126f86ca8388d0a673e68bd5" ], "author": { "name": "Daniel Erat", "email": "derat@chromium.org", "time": "Tue Mar 25 20:13:09 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Thu Apr 10 01:13:45 2014" }, "message": "chaps: Update for libchrome-242728.\n\nBUG\u003dchromium:356428\nTEST\u003dbuilt it; tests pass\nCQ-DEPEND\u003dCL:192952\n\nChange-Id: I314618b7c57d09bdbb8b41e049e7e1e8024c35ba\nReviewed-on: https://chromium-review.googlesource.com/191540\nReviewed-by: Daniel Erat \u003cderat@chromium.org\u003e\nTested-by: Daniel Erat \u003cderat@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "3b7456834a0b57d3126f86ca8388d0a673e68bd5", "tree": "bf2a0ec6e345d15d90da131d1857cc3577ca3c47", "parents": [ "734d8c2da5927c2551c6355757273bb851d139c9" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 04 00:59:19 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Fri Apr 04 23:59:41 2014" }, "message": "Add \u0027set noparent\u0027 to OWNERS file.\n\nBUG\u003dnone\nTEST\u003dnone\n\nChange-Id: I6b4ca92060ee0b3574c967b6a6632ce6db48a88d\nReviewed-on: https://chromium-review.googlesource.com/193180\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "734d8c2da5927c2551c6355757273bb851d139c9", "tree": "01a70338f2ffbb79a72d1da76617430d955a05be", "parents": [ "eb0828551dd8d59d1c4d993447e9c7e1fb425436" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jan 30 01:40:48 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Wed Feb 12 19:40:49 2014" }, "message": "Return proper space-padded values where the PKCS #11 spec requires.\n\nBUG\u003dchromium:210090\nTEST\u003dunit, manual\n\nChange-Id: Ia34dd35e43296fd875f1cbcd5bf04f3b3eb8d7c1\nReviewed-on: https://chromium-review.googlesource.com/184454\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "eb0828551dd8d59d1c4d993447e9c7e1fb425436", "tree": "b2cbec34040923d0347165750b6c668f5d376d38", "parents": [ "eca44063dbaf94032a35579955a3c6413c53d8cd" ], "author": { "name": "Ben Chan", "email": "benchan@chromium.org", "time": "Wed Feb 12 04:44:55 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Wed Feb 12 19:39:58 2014" }, "message": "chaps: Update metrics dependency to use slotted libmetrics library.\n\nBUG\u003dchromium:342866\nCQ-DEPEND\u003dCL:185187\nCQ-DEPEND\u003dCL:186026\nTEST\u003dTrybot run on paladin, release, and chromiumos-sdk builders.\n\nChange-Id: I0f153821e59ab705413eb638fdafb517f26b828a\nReviewed-on: https://chromium-review.googlesource.com/186092\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nTested-by: Ben Chan \u003cbenchan@chromium.org\u003e\nCommit-Queue: Ben Chan \u003cbenchan@chromium.org\u003e\n" }, { "commit": "eca44063dbaf94032a35579955a3c6413c53d8cd", "tree": "0675b9bf14f400b121e748f90842f56fd5a99bf0", "parents": [ "89ed542c77fe0ecf111f9f0829739148413fbc76" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Jan 24 23:39:17 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Wed Feb 12 03:48:20 2014" }, "message": "Added proper support for delayed TPM SRK availability.\n\nIf a TPM has not been owned it does not have an SRK and cannot be used\nby Chaps. If chapsd starts before TPM ownership occurs it will now wait\nand finish initialization tasks until after the TPM is owned. Until the\nTPM is owned all LoadToken calls will fail.\n\nIf no TPM is available on the system, chapsd will warn and continue to\nserve dbus calls but fail any attempts to load a token.\n\nBUG\u003dchromium:210525\nTEST\u003dunit, manual\n\nChange-Id: I9b9d177f3b43b4ae5dd11c1ebf83daa5c21971c8\nReviewed-on: https://chromium-review.googlesource.com/183851\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "89ed542c77fe0ecf111f9f0829739148413fbc76", "tree": "6df8fb439b9de674121a17a9a980048d3305dec6", "parents": [ "df4bf03272ec516ee7a04ac9e9676222effd4198" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Feb 04 02:16:27 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Wed Feb 12 00:40:56 2014" }, "message": "Enable a system PKCS #11 token behind a flag.\n\nIf chapsd is started with the --auto_load_system_token switch and\n/var/lib/chaps exists, it will load a token from that directory during\ninitialization.\n\nAlso added support for importing PKCS #8 formatted private keys as well\nas a --slot option in p11_replay, which help to test this feature.\n\nBUG\u003dchromium:210525\nTEST\u003dunit, manual\n\nChange-Id: I29d2ee90fa98de6b549cc007ace46d57d345bed9\nReviewed-on: https://chromium-review.googlesource.com/184784\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "df4bf03272ec516ee7a04ac9e9676222effd4198", "tree": "56b996a6294fe36d45b01b66c51b09d6c0474d3c", "parents": [ "731c97ce1396300aeedbbb9309ee63d84c3c1a9f" ], "author": { "name": "Gaurav Shah", "email": "gauravsh@google.com", "time": "Fri Feb 07 01:48:10 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Sat Feb 08 04:20:49 2014" }, "message": "chaps: do not build pam_helper_mock\n\nThis relies on pam headers being present and we do not use\nit anyway right now.\n\nBUG\u003dchromium:339404\nTEST\u003dcros_workon_make --test platform2 no longer fails with pam headers\n in the buildroot.\nChange-Id: Ibd12f79ee1d0c241c8544925ccfae10be47017c9\nReviewed-on: https://chromium-review.googlesource.com/185285\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nTested-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\n" }, { "commit": "731c97ce1396300aeedbbb9309ee63d84c3c1a9f", "tree": "f86985e5d9f08bf939f58e080d26b62caa025f24", "parents": [ "0398d33e3041ffafee8468f551af9926acc28a8a" ], "author": { "name": "Richard Barnette", "email": "jrbarnette@chromium.org", "time": "Fri Jan 31 19:17:47 2014" }, "committer": { "name": "Richard Barnette", "email": "jrbarnette@chromium.org", "time": "Fri Jan 31 19:22:18 2014" }, "message": "Revert \"Enable a system PKCS #11 token.\"\n\nThis reverts commit 0398d33e3041ffafee8468f551af9926acc28a8a.\n\nThis change is suspected in network_VPNConnect failures\n\nBUG\u003dchromium:339743\n\nChange-Id: If1c340282e0dd3eb3fe41f7651483894c8e9efd2\nReviewed-on: https://chromium-review.googlesource.com/184482\nReviewed-by: Richard Barnette \u003cjrbarnette@chromium.org\u003e\nTested-by: Richard Barnette \u003cjrbarnette@chromium.org\u003e\n" }, { "commit": "0398d33e3041ffafee8468f551af9926acc28a8a", "tree": "54eb77ebaf08643550f56420d69d789ee7e2085e", "parents": [ "f9259e7cbc65d8a44c78bfecb19aeaf6a64c633f" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jan 16 22:31:06 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Fri Jan 31 03:01:01 2014" }, "message": "Enable a system PKCS #11 token.\n\nAlso added support for importing PKCS #8 formatted private keys as well\nas a --slot option in p11_replay, which helps to test this feature.\n\nBUG\u003dchromium:210525\nTEST\u003dunit, manual, platform_Pkcs11* autotests\n\nChange-Id: I301029286432a568436bb1ce9d592a5a74ae9c9f\nReviewed-on: https://chromium-review.googlesource.com/183525\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "f9259e7cbc65d8a44c78bfecb19aeaf6a64c633f", "tree": "f86985e5d9f08bf939f58e080d26b62caa025f24", "parents": [ "f47ec7517bcbfb05bee8328e6fb9c2a5f3369647" ], "author": { "name": "Ben Chan", "email": "benchan@chromium.org", "time": "Tue Jan 28 07:10:33 2014" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Tue Jan 28 19:58:51 2014" }, "message": "Replace deprecated scoped_array\u003cT\u003e with scoped_ptr\u003cT[]\u003e\n\nBUG\u003dchromium:338610\nTEST\u003dBuild and run unit tests.\n\nChange-Id: If124895f42c5a5de9f86d301e748e08efc0e2381\nReviewed-on: https://chromium-review.googlesource.com/184081\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Ben Chan \u003cbenchan@chromium.org\u003e\nTested-by: Ben Chan \u003cbenchan@chromium.org\u003e\n" }, { "commit": "f47ec7517bcbfb05bee8328e6fb9c2a5f3369647", "tree": "e35da1d484ec7259a87625f0cb46c068b5f8c8ae", "parents": [ "252e932db31fa7d977320262d4c1784f49499151" ], "author": { "name": "Liam McLoughlin", "email": "lmcloughlin@chromium.org", "time": "Tue Nov 05 21:15:37 2013" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Thu Jan 23 01:50:55 2014" }, "message": "Add new libchaps_static target to compile chaps binaries against\n\nMaking -fvisibility\u003dinternal the default for all project means\nthese targets can\u0027t see symbols they expect in the shared library\nanymore. Compiling them against a thin static library means they\ncan again.\n\nBUG\u003dchromium:315245, chromium:327830\nTEST\u003dx86-generic-full and daisy-full trybots pass\nCQ-DEPEND\u003dCL:175752\n\nChange-Id: Ibbd1ac9881faaf81abe56c3e197862e90855ad60\nReviewed-on: https://chromium-review.googlesource.com/175751\nReviewed-by: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\nTested-by: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\nCommit-Queue: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\n" }, { "commit": "252e932db31fa7d977320262d4c1784f49499151", "tree": "483cc2e8cf8290cdb7597dfdc948260b0fd94651", "parents": [ "44c9bc2b52beaeb6a30342c75fa1ea1392a33314" ], "author": { "name": "Ryo Hashimoto", "email": "hashimoto@chromium.org", "time": "Mon Dec 09 07:01:38 2013" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Tue Dec 17 08:00:20 2013" }, "message": "Remove org.chromium.Chaps.service\n\nThis file is not used\n\nBUG\u003dchromium:305600\nTEST\u003demerge-x86-generic platform2\nCQ-DEPEND\u003dCL:179311\n\nChange-Id: I97e4213d43b00029c3d4a74e06b3ffe39d0dc9b6\nReviewed-on: https://chromium-review.googlesource.com/179310\nReviewed-by: Ryo Hashimoto \u003chashimoto@chromium.org\u003e\nCommit-Queue: Ryo Hashimoto \u003chashimoto@chromium.org\u003e\nTested-by: Ryo Hashimoto \u003chashimoto@chromium.org\u003e\n" }, { "commit": "44c9bc2b52beaeb6a30342c75fa1ea1392a33314", "tree": "5771158ef386ddb67d8115d4989f8620dec0cac0", "parents": [ "d30919761626cf26fa1e3347ea0867defdf5a8d3" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Nov 14 01:21:20 2013" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Fri Nov 22 00:46:08 2013" }, "message": "Added GetTokenList to mock.\n\nBUG\u003dchromium:318900\nTEST\u003dunit\n\nChange-Id: I371d0126dc1bf184a8b1672852408c9e65bcc682\nReviewed-on: https://chromium-review.googlesource.com/176754\nReviewed-by: Will Drewry \u003cwad@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "d30919761626cf26fa1e3347ea0867defdf5a8d3", "tree": "c5a167d9fd93f9d8f36c5ee1d9aa5b3240c52c90", "parents": [ "e5046c50a1b5b5b88389fcb92b45edf5895a52b2" ], "author": { "name": "Liam McLoughlin", "email": "lmcloughlin@chromium.org", "time": "Fri Sep 13 20:15:50 2013" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Fri Oct 25 01:31:58 2013" }, "message": "Add chaps to Platform2\n\nBUG\u003dchromium:220003\nTEST\u003dRun ALL the trybots\nCQ-DEPEND\u003dCL:56290\n\nChange-Id: Iefe1c0b49015e62899c775c39119a2acb645a26e\nReviewed-on: https://chromium-review.googlesource.com/64873\nReviewed-by: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\nTested-by: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\nCommit-Queue: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\n" }, { "commit": "e5046c50a1b5b5b88389fcb92b45edf5895a52b2", "tree": "4f4c635b5cf99960b6703c557a4040d6d2fac76c", "parents": [ "85f9c56f6e68e0cc7b5bbb78c6b7385f1bedd50b" ], "author": { "name": "Yunlian Jiang", "email": "yunlian@google.com", "time": "Wed Oct 23 19:58:40 2013" }, "committer": { "name": "chrome-internal-fetch", "email": "chrome-internal-fetch@google.com", "time": "Wed Oct 23 23:53:10 2013" }, "message": "chaps: remove unused variables.\n\nBUG\u003dchromium:310772\nTEST\u003dFEATURES\u003d\"test\" emerge-lumpy chaps passes.\n\nChange-Id: I4f2a26d217a59267c768f9db4236462d101d607c\nReviewed-on: https://chromium-review.googlesource.com/174319\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Yunlian Jiang \u003cyunlian@chromium.org\u003e\nTested-by: Yunlian Jiang \u003cyunlian@chromium.org\u003e\n" }, { "commit": "85f9c56f6e68e0cc7b5bbb78c6b7385f1bedd50b", "tree": "e1559bb343b950481ecc585d8bd0d619a1a74f7f", "parents": [ "d6c9c81e5f9b089809ddb5d2fe5745ce8e0b70bc" ], "author": { "name": "Aaron Gable", "email": "agable@google.com", "time": "Sat Sep 28 01:35:54 2013" }, "committer": { "name": "Mike Frysinger", "email": "vapier@chromium.org", "time": "Tue Oct 01 03:39:08 2013" }, "message": "Rewrite git/gerrit/gerrit-int urls to googlesource\n\nBUG\u003dchromium:281665,chromium:290413\n\nTEST\u003dNone\n\nChange-Id: Ie1cfef651b8cfaa49212aeda32a7f58ae4674b5b\nReviewed-on: https://chromium-review.googlesource.com/171264\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nTested-by: Mike Frysinger \u003cvapier@chromium.org\u003e\n" }, { "commit": "d6c9c81e5f9b089809ddb5d2fe5745ce8e0b70bc", "tree": "fdbc773799eaeaca2799bddecbba60f0dd77ceb4", "parents": [ "2a89aea942e746d4cdb6c1f3cd5a80fab098821a" ], "author": { "name": "David Drysdale", "email": "drysdale@google.com", "time": "Tue Jul 23 10:45:57 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Thu Aug 01 18:08:10 2013" }, "message": "Get Chaps building under Linux again.\n\nDefine NO_METRICS if metrics library not available.\nEncapsulate UMA event generation in a MetricsWrapper class.\n\nTEST\u003dRan tests under Chromium OS and Linux\nBUG\u003dNone\nChange-Id: Ia39f07347d684e1c34bfea738e844378e27b6371\nReviewed-on: https://gerrit.chromium.org/gerrit/62987\nReviewed-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nTested-by: David Drysdale \u003cdrysdale@google.com\u003e\nCommit-Queue: David Drysdale \u003cdrysdale@google.com\u003e\n" }, { "commit": "2a89aea942e746d4cdb6c1f3cd5a80fab098821a", "tree": "df4b9949377269e7d7a9f882a33016e7fc9a0702", "parents": [ "2ed7e6748279a2b0a4b11f690541d2ab47fee50a" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Jul 23 22:24:44 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Wed Jul 24 02:02:38 2013" }, "message": "Made C_Finalize safer when called from a signal-handler.\n\nPreviously, a WaitableEvent instance was used to signal threads waiting\non C_WaitForSlotEvent. This raised a SIGABRT if C_Finalize was called\nduring a signal handler. Now a simple slow poll is used with a side\neffect that waiting threads may take a while to realize C_Finalize has\nbeen called.\n\nNote: It should not be considered safe to call C_Finalize from a signal\nhandler; don\u0027t do this. But for those that do, this change should make\nit safer than it was.\n\nBUG\u003dchromium:243147\nTEST\u003dunit, network_VPNConnect/control.l2tpipsec_psk\n\nChange-Id: I386720a958173541c0620be28ed4c8f9f9b63568\nReviewed-on: https://gerrit.chromium.org/gerrit/63122\nReviewed-by: Paul Stewart \u003cpstew@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "2ed7e6748279a2b0a4b11f690541d2ab47fee50a", "tree": "03c76d5f54e35d18d0c17760a5346c5a022b3bb1", "parents": [ "fe8756fce85dc6bf46709966b1aa41d3eee14b55" ], "author": { "name": "Sarah Harvey", "email": "saharvey@chromium.org", "time": "Thu Jun 06 00:04:14 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Wed Jun 26 03:22:26 2013" }, "message": "Set CKA_LABEL attribute for importing X509 certificates via p11_replay.\n\nX509 certificates will only be shown under \"Your Certificates\" in the\nCertificate Manager if both of the following two conditions are met:\n (a) a corresponding private key is imported.\n (b) the CKA_LABEL attribute is set, and set to a non-empty string.\nIf either of these conditions are not met, the certificate is displayed under\n\"Others\" in the Certificate Manager.\n\nNote: The corresponding private key does not need to have the CKA_LABEL\nattribute to be set, nor does it have to match.\n\nThis label is set in different ways based on the type of certificate\n(see chromium:202503 and chromium:237870). How the label is set doesn\u0027t\nactually affect where the certificate is displayed, so for testing purposes\nwe just set this to \"testing_cert\".\n\nBUG\u003dchromium:196315\nTEST\u003dBuilt image and successfully imported certificate via p11_replay. Certificate is correctly displayed under \"Your Certificates\" in the Certificate Manager.\n\nChange-Id: I0aec63aa20dd8118011ce102336ebb82d82d7011\nReviewed-on: https://gerrit.chromium.org/gerrit/57681\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Sarah Harvey \u003csaharvey@chromium.org\u003e\nCommit-Queue: Sarah Harvey \u003csaharvey@chromium.org\u003e\n" }, { "commit": "fe8756fce85dc6bf46709966b1aa41d3eee14b55", "tree": "6762d1f35928c898dab6bbeca8417ac956db86a6", "parents": [ "ba15b019cba57ca14c3f9de4aa9f12b91da33a90" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jun 20 21:55:34 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Tue Jun 25 22:32:11 2013" }, "message": "Added support for unique temp directories in unit tests.\n\nThis allows multiple unit test instances to run concurrently on the same\nsystem. Previously, they would attempt to use the same directory in\n/tmp which caused test failures.\n\nBUG\u003dchromium:252001\nTEST\u003dconcurrent unit test runs\n\nChange-Id: I5dee9392a40569cb26b2d202276f6c82c30bfcd4\nReviewed-on: https://gerrit.chromium.org/gerrit/59488\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "ba15b019cba57ca14c3f9de4aa9f12b91da33a90", "tree": "9abbe51bdae377e2fd299a1b4b872aa4cf6e9a59", "parents": [ "0d781f4a9ef0d7ecc2869dd4516e371c87259b08" ], "author": { "name": "Sarah Harvey", "email": "saharvey@chromium.org", "time": "Tue Jun 04 21:26:08 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Tue Jun 18 23:11:56 2013" }, "message": "Adding support for decoding X.509 SubjectPublicKeyInfo public keys in p11_replay.\n\nSupport for this was added in an attempt to determine why p11_replay\nwasn\u0027t importing certificates correctly.\n\nBUG\u003dchromium:196315\nTEST\u003dBuilt image and successfully used p11_replay to import X.509 SubjectPublicKeyInfo public keys\n\nChange-Id: Ic515f95a22248c258e12ce68473908165c0e81ef\nReviewed-on: https://gerrit.chromium.org/gerrit/57522\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Sarah Harvey \u003csaharvey@chromium.org\u003e\nCommit-Queue: Sarah Harvey \u003csaharvey@chromium.org\u003e\n" }, { "commit": "0d781f4a9ef0d7ecc2869dd4516e371c87259b08", "tree": "e66f4457f66ced4f460b14b34bd14597ef79c8ff", "parents": [ "71bde795da52a434d5b66dd4ffe1f33f071a661a" ], "author": { "name": "Elly Fong-Jones", "email": "ellyjones@chromium.org", "time": "Thu Jun 06 15:22:15 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Wed Jun 12 16:22:30 2013" }, "message": "[chaps] add GetTokenList to TokenManager.\n\nBUG\u003dchromium:205206\nTEST\u003dunit\n\nChange-Id: I3eca3fc993d6e89e3c61baf13081840721c1f82f\nSigned-off-by: Elly Fong-Jones \u003cellyjones@chromium.org\u003e\nReviewed-on: https://gerrit.chromium.org/gerrit/57788\n" }, { "commit": "71bde795da52a434d5b66dd4ffe1f33f071a661a", "tree": "dbd2d05f0bca863aadff1e7fd13870a995a1d567", "parents": [ "07458d281bf150505411cd9ceb2977773ff90887" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Fri May 10 10:28:45 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Tue Jun 04 17:08:26 2013" }, "message": "C++ readability review for Ross McIlroy (rmcilroy@google.com)\n\nOriginally submitted in https://gerrit.chromium.org/gerrit/#/c/49331/.\n\nBUG\u003dNone\nTEST\u003dCompiled and ran tests.\n\nChange-Id: I605e870bdc3c6f7c601a87cf0098fd2aa7e8254b\nReviewed-on: https://gerrit.chromium.org/gerrit/50785\nReviewed-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "07458d281bf150505411cd9ceb2977773ff90887", "tree": "dc45aa4e74ed9df92ad16464ae20475d23fbfabe", "parents": [ "fa5af8f9fe43d19a5ca52c3dabaf4ca4d3379d87" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu May 23 22:47:44 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Mon Jun 03 21:32:57 2013" }, "message": "Added a GetTokenPath() interface method.\n\nGetTokenPath allows clients to query the loaded path for any slot.\n\nAlso did some refactoring:\n- Renamed LoginEventListener -\u003e TokenManagerInterface\n- Renamed LoginEventClient -\u003e TokenManagerClient\n- Moved method documentation to TokenManagerInterface\n- TokenManagerClient inherits TokenManagerInterface\n- TokenManagerInterface uses FilePath for paths\n- Fixed LoadToken dbus interface to marshal slot_id as uint64_t\n- Fixed ClearVector and ClearString to not use const_cast\n\nBUG\u003dchromium:241503\nTEST\u003dunit,platform_Pkcs11InitOnLogin\n\nChange-Id: I9a574188bbe701ae46a21196ff88e07be2039749\nReviewed-on: https://gerrit.chromium.org/gerrit/56539\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "fa5af8f9fe43d19a5ca52c3dabaf4ca4d3379d87", "tree": "5ac2e64846f9dac3ca977a0fad14e056b635a1f6", "parents": [ "8b5a92a632e511550dc85d88b19e73df29ca64ed" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue May 28 20:47:26 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Mon Jun 03 21:32:57 2013" }, "message": "Rename login_event* to token_manager*.\n\nThis CL paves the way for some refactoring. We want git to track this\nas a rename, not a delete / create so the rename itself is split out.\n\nRefactoring CL: https://gerrit.chromium.org/gerrit/56539\n\nBUG\u003dNone\nTEST\u003demerge\n\nChange-Id: I7d6d6fd2626743816842d3dba223f5c7a4b22182\nReviewed-on: https://gerrit.chromium.org/gerrit/56839\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "8b5a92a632e511550dc85d88b19e73df29ca64ed", "tree": "823445d1802e0bd211ee8732c862790bd1dd7142", "parents": [ "ffb9d36770e2888daf64753debe4a12e413ae892" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue May 21 00:22:39 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Tue May 21 23:15:26 2013" }, "message": "Added --list_tokens to the usage output.\n\nAlso alphabetized command arguments.\n\nBUG\u003dNone\nTEST\u003dRan p11_replay --help\n\nChange-Id: I5a8677b64fe893025905e88e533b23371559ed83\nReviewed-on: https://gerrit.chromium.org/gerrit/55854\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "ffb9d36770e2888daf64753debe4a12e413ae892", "tree": "c5ec42f5c6309ecacc0a24dfcd7b650da44d6f6a", "parents": [ "3f104bfc59da894873f0e867e8856324e431e834" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu May 09 18:18:56 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Fri May 10 20:24:32 2013" }, "message": "Added support for user-supplied token labels.\n\nNow the label for a token can be supplied when that token is loaded.\nThis makes it possible to differentiate tokens when multiple user\nprofiles are in use.\n\nBUG\u003dchromium:239445\nTEST\u003dunit, manual\nCQ-DEPEND\u003dCL:50673\n\nChange-Id: I500d9357c0ce62b4fd8557ee9930417d8eacff74\nReviewed-on: https://gerrit.chromium.org/gerrit/50680\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "3f104bfc59da894873f0e867e8856324e431e834", "tree": "886fdcb37c44696d9d80e5892991cd055a933e1c", "parents": [ "a90c13b903a4284138f3dca61e9c70108e5b276b" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Wed May 08 11:25:15 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Fri May 10 10:49:44 2013" }, "message": "chaps: Salt users password before using it as authorization data to load token.\n\nModify isolate_login_client to salt the users password before using it as\nauthorization data when loading the users token. On the Linux build, we\nuse PKCS5_PBKDF2_HMAC with SHA512 as the key derivation function to add\nthis salt.\n\nTEST\u003dBuilt and ran tests, installed PAM module on Linux and tested, checked\nresult of SaltAuthData function manually against reference data.\nBUG\u003dNone\n\nChange-Id: I6d7cfe0e96f8065ba04c3f8dd7f50a77d9c2506c\nReviewed-on: https://gerrit.chromium.org/gerrit/50447\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nReviewed-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "a90c13b903a4284138f3dca61e9c70108e5b276b", "tree": "6ecace0f4da518a4fe7ca56a324420603f25a4ab", "parents": [ "268e8fc2a8475a137822e0d1b9fac10c8f60a50c" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Tue Apr 30 16:49:46 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Fri May 10 10:49:43 2013" }, "message": "chaps: Change chaps dbus config to have configurable policy permissions.\n\nThis change enables the chaps dbus configuration to be configured depending\nupon the platform it is being installed on. On ChromeOS it will continue to\nbe only accessable to members of the pkcs11 group. On Linux, it will be\naccessable to any user, since on Linux we use isolates to ensure a user can\nonly access their own token.\n\nTEST\u003dBuilt and ran tests. Tested using trybot. Ran on Linux to ensure correct\ndbus interaction.\nBUG\u003dNone\nCQ-DEPEND\u003dCL:50460\n\nChange-Id: I02f90d386ca3c851be93858410af60ca3b4e14a0\nReviewed-on: https://gerrit.chromium.org/gerrit/49594\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "268e8fc2a8475a137822e0d1b9fac10c8f60a50c", "tree": "c7777c0d7e551b48cc84bd1e6311e5f16935c626", "parents": [ "da6df43f3518f98a34f2be0c828368371c466baa" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon May 06 20:25:49 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Thu May 09 23:36:50 2013" }, "message": "Added a database repair attempt during initialization.\n\nAlso added metrics for corruption events.\n\nBUG\u003dchrome-os-partner:17610\nTEST\u003dunit, manual\nCQ-DEPEND\u003dCL:50241\n\nChange-Id: Ie0db759e7f799c51aa72fb6e0200b1bed2424792\nReviewed-on: https://gerrit.chromium.org/gerrit/50510\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "da6df43f3518f98a34f2be0c828368371c466baa", "tree": "88cd1bd4e6ea86e251a2df7592b91378e95ef493", "parents": [ "62c5c44e5588059ea4dd6351bc2c594b3460d09d" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Thu Apr 25 18:15:19 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Thu May 09 17:04:27 2013" }, "message": "chaps: Provide a pam module which logs in a user to chaps on Linux.\n\nThis change adds a pam module to chaps which is built when building chaps\nfor Linux. When this module is added, it will open an isolate for the user\nwhen they login, and load their user token into that isolate. On logout,\nthe isolate will be closed, unloading the token if all sessions have\nbeen closed.\n\nThe change also adds a simple \"make install\" option for Linux.\n\nTEST\u003dBuilt and run on Linux, testing pam module login / logout /\nchange password functionality.\nBUG\u003dNone\nCQ-DEPEND\u003dCL:50461\n\nChange-Id: I0cf443873c895e1e2cd6ea966a4ab26caa2a9f34\nReviewed-on: https://gerrit.chromium.org/gerrit/49331\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "62c5c44e5588059ea4dd6351bc2c594b3460d09d", "tree": "0fc832da7a005037d6f6c624d9fafded8ddb7f84", "parents": [ "325879697520e66c3afdfe6adaceb3da48e50b26" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Tue Apr 30 16:37:15 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Tue May 07 10:28:37 2013" }, "message": "chaps: Modify chapsd to run as root user on Linux.\n\nEnable support for configuring the user which runs chapsd at\ncompile time, and have the Linux build use root, rather than\nchaps user. This makes installing on Linux using a deb package\npossible without having to add user chaps.\n\nTEST\u003dCompile and run tests.\nBUG\u003dNone\n\nChange-Id: Ibda57b0cd194e6ac076d9a141b8b10c4f0074e2c\nReviewed-on: https://gerrit.chromium.org/gerrit/49593\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "325879697520e66c3afdfe6adaceb3da48e50b26", "tree": "931e1a0a62055bd2d4553c36234257161bd7203d", "parents": [ "38e705c7ae25e8f41b2468531a844d1934c6d937" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed May 01 23:53:03 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Tue May 07 07:03:17 2013" }, "message": "Added a slot_id output parameter to the OnLogin call.\n\nWhen cryptohome configures a Chaps token it will now receive the\nidentifier of the PKCS #11 slot on which the token is loaded. This\nallows cryptohome to maintain a mapping between multiple users and their\ntokens.\n\nBUG\u003dchromium:205206\nTEST\u003dunit, platform_Pkcs11Events autotest\nCQ-DEPEND\u003dCL:49962\n\nChange-Id: Ib6a587ce5232ce4e093e778e1c9105c46e223daa\nReviewed-on: https://gerrit.chromium.org/gerrit/49960\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: David James \u003cdavidjames@chromium.org\u003e\n" }, { "commit": "38e705c7ae25e8f41b2468531a844d1934c6d937", "tree": "d77b06dc8eb9ae2a967ae449a7284149359efaf3", "parents": [ "c129cd4ded05c3759ba7ec6f0b0a0b2c543e49dc" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Thu Apr 11 13:54:18 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Sat May 04 01:13:14 2013" }, "message": "chaps: Add isolate support to the chaps daemon.\n\nModifies chaps to enable it to support isolated slot lists.\nEach dbus request is modified to take an isolate credential, and\nthe request will only operate on slots which are part of the\nisolate associated with the credential. When chaps starts, a default\nisolate is created which has a well known credential, other\nisolates can be created for each user with the OpenIsolate call.\n\nAlso fixed slot_manager_tests which were not compiling\n(crosbug.com/224166) and added isolate specific tests.\n\nTEST\u003dBuilt and ran all chaps tests on Linux. Tested on remote buildbot.\nBUG\u003dchromium:224166\nCQ-DEPEND\u003dCL:49888, CL:49890\n\nChange-Id: If775ab5def739acb9319521840ca8c5f7237edc9\nSigned-off-by: Ross McIlroy \u003crmcilroy@google.com\u003e\nReviewed-on: https://gerrit.chromium.org/gerrit/47856\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nReviewed-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "c129cd4ded05c3759ba7ec6f0b0a0b2c543e49dc", "tree": "20034f9646d6072f93e3e28f784efc4204f368de", "parents": [ "bd88d0e672a1e103e8c8bb819ff2d306ceda1db4" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Tue Apr 30 16:59:04 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Fri May 03 11:33:31 2013" }, "message": "chaps: Add libmemenv check to chaps build, and disable memenv if not\navailable.\n\nThe libmemenv library is not part of the standard libleveldb-dev debian\npackage. We only use this library for testing, so to enable chaps to be\nbuilt as a debian package, add a check for whether libmemenv is available\nwhen building, and disable it\u0027s usage if it is not available.\n\nTEST\u003dbuilt and ran tests on Linux and cbuildbot\nBUG\u003dNone\n\nChange-Id: I19594ceccb2c82a87fa8938ec93f85e92d42a9cc\nReviewed-on: https://gerrit.chromium.org/gerrit/49597\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "bd88d0e672a1e103e8c8bb819ff2d306ceda1db4", "tree": "d8f5f9b2c8a9995d8372f55f16a7a7f6172efd9d", "parents": [ "0483ee3684827278aacc0635a6822b4cc24780b2" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Thu Apr 25 17:51:06 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Fri Apr 26 16:06:36 2013" }, "message": "Fix a bug in ChangeTokenAuth introduced in cl 47569.\n\nFix an issue with the chaps_adaptor ChangeTokenAuth method used by the Linux\nbuild (without the DBus::Error param) which caused it to recursivly call itself.\n\nTEST\u003dBuilt and ran on Linux and changed a users token auth data.\nBUG\u003dNone\n\nChange-Id: If2c50b9f02939e30f96fbb73d5b7bb86b3f31f4d\nReviewed-on: https://gerrit.chromium.org/gerrit/49193\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "0483ee3684827278aacc0635a6822b4cc24780b2", "tree": "eba1929e54bab7a996bb8e15df320199edfc7798", "parents": [ "3d160ba8bcaae432501df11fdd671c2f334b836f" ], "author": { "name": "Ross McIlroy", "email": "rmcilroy@google.com", "time": "Fri Mar 15 10:27:44 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Wed Apr 24 16:58:23 2013" }, "message": "chaps: Changes required to build Chaps for Linux.\n\nModifies chaps to enable it to be built for Linux as well as ChromeOS.\nSome complications are different required libaries used by ChromeOS and\nLinux and the different format of the DBus generated interface.\n\nTEST\u003dBuilt and ran Chaps on Linux, and ran tests on Linux. Also ran\non remote trybot with alex-paladin and alex-x86 configs.\nBUG\u003dnone\n\nChange-Id: I43843af04fec6156c0a16b5fed96250c8bbbb196\nSigned-off-by: Ross McIlroy \u003crmcilroy@google.com\u003e\nReviewed-on: https://gerrit.chromium.org/gerrit/47569\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nReviewed-by: Mike Frysinger \u003cvapier@chromium.org\u003e\nCommit-Queue: Ross McIlroy \u003crmcilroy@chromium.org\u003e\nTested-by: Ross McIlroy \u003crmcilroy@chromium.org\u003e\n" }, { "commit": "3d160ba8bcaae432501df11fdd671c2f334b836f", "tree": "6e2eb24568cd82cf3dd5313ec59ba37fc7e15d3d", "parents": [ "e47b41d2de6dc924e6e875f06d5fe8e21dcc8e93" ], "author": { "name": "Gaurav Shah", "email": "gauravsh@google.com", "time": "Wed Mar 27 03:29:48 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Wed Mar 27 18:35:21 2013" }, "message": "chaps: Make unit tests building behave with gtest-1.6\n\nDisable a bunch of tests under the #if GTEST_IS_THREADSAFE. These are\nnot currently being built or run (gtest-1.4 is not thread safe) and\nneed to be fixed to even compile, let alone run.\n\nBUG\u003dchromium:211445,chromium:224166\nTEST\u003dbuilt and ran with both current gtest-1.4 and gtest-1.6.\n\nChange-Id: I180abf8ce4338230a5d78ca3d1d2fdadbf675a57\nReviewed-on: https://gerrit.chromium.org/gerrit/46605\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nTested-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\n" }, { "commit": "e47b41d2de6dc924e6e875f06d5fe8e21dcc8e93", "tree": "990b28b27f07732170f31ccc62c90d8ebe385dc3", "parents": [ "9b7694d2bd03488d32a322efd4c97860e60af950" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Mar 15 02:01:01 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Sat Mar 16 00:22:15 2013" }, "message": "Support the import of existing TPM-wrapped keys.\n\nThis CL makes it possible to create a private key object which already\nholds a TPM-wrapped private key using the conventional Chaps vendor\nattributes. This allows keys used in other parts of the system to be\nimported into a PKCS #11 token.\n\nPreviously the read-only-on-create policy was set to true for internal\nattributes because there was no reason not to. Now that we have a use\ncase for creating objects with internal attributes, this restriction has\nbeen lifted.\n\nBUG\u003dchromium-os:37815\nTEST\u003dUnit tests; Manually tested importing an existing key.\n\nChange-Id: I457da852b999d323dbdd6cb39b3b1f37f550fa1b\nReviewed-on: https://gerrit.chromium.org/gerrit/45534\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "9b7694d2bd03488d32a322efd4c97860e60af950", "tree": "456e92294053e3866ce2d611aff3fdde714f8f0d", "parents": [ "ca96daa1da55bc34590c983d13bbad8d5bd55a2e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Feb 28 23:12:19 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Mon Mar 04 21:43:19 2013" }, "message": "A few tweaks to support a fully mocked mode.\n\nThis change allows other packages linking with libchaps.so to use the\nlibrary with a mock interface. This effectively allows unit tests to\nwork with a mock PKCS #11 library.\n\nBUG\u003dNone\nTEST\u003d- Chaps unit tests\n - Cryptohome unit tests which use a mock Chaps interface\n\nChange-Id: I26edd2e177273707438fd7664e00ccc92435aba1\nReviewed-on: https://gerrit.chromium.org/gerrit/44332\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "ca96daa1da55bc34590c983d13bbad8d5bd55a2e", "tree": "a4e4c8313873f9647f5bc346c35eae37033fc3e7", "parents": [ "1d9fe927b754c92f5274228f195dc4c94891e825" ], "author": { "name": "Liam McLoughlin", "email": "lmcloughlin@chromium.org", "time": "Sun Mar 03 15:44:10 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Mon Mar 04 19:10:04 2013" }, "message": "Add changes from CL 26276 to support Clang in common.mk\n\nAlso make protobuf-compiled source files respect CXXFLAGS\n\nBUG\u003dchromium-os:32017\nTEST\u003dCompile chaps with Clang/GCC, all tests passed\n\nChange-Id: I486b8404d9f17686185b802dfde221e304060465\nReviewed-on: https://gerrit.chromium.org/gerrit/44507\nTested-by: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Queue: Liam McLoughlin \u003clmcloughlin@chromium.org\u003e\n" }, { "commit": "1d9fe927b754c92f5274228f195dc4c94891e825", "tree": "4c8bc91e30c14b9e7942bd7427505379bbff8a56", "parents": [ "80e2bd82e37b10c72cc5af63ee705379955a4fa1" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Feb 15 22:34:23 2013" }, "committer": { "name": "ChromeBot", "email": "chrome-bot@google.com", "time": "Thu Feb 21 01:59:04 2013" }, "message": "Updated to use libchrome-180609.\n\nBUG\u003dchromium-os:38929\nTEST\u003dunit, manual, relevant autotests\nCQ-DEPEND\u003dCL:43670\n\nChange-Id: I08385a73db5a370593ad7a1e6735eff80e349c11\nReviewed-on: https://gerrit.chromium.org/gerrit/43435\nReviewed-by: Chris Masone \u003ccmasone@chromium.org\u003e\nCommit-Queue: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "80e2bd82e37b10c72cc5af63ee705379955a4fa1", "tree": "21c1942d9a04e83433ab0a7af6b6ce0346f647c1", "parents": [ "56cab06b8a1fcf5058346e4b061fb2a171f62e22" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed Nov 07 20:21:59 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Fri Nov 09 01:25:15 2012" }, "message": "Added a lock to serialize chaps requests.\n\nThe lock serializes requests at the chaps client proxy layer. This\nfixes a problem where all the requests were being sent to chapsd and the\nchapsd dispatcher flooded and dropped requests.\n\nA replay test has been added to p11_replay which floods the dispatcher\nin the same way Chrome does.\n\nBUG\u003dchromium:152655\nTEST\u003dRun all unit tests.\n Run \u0027p11_replay --digest_test\u0027 and ensure there is no five minute\n hang.\n\nChange-Id: I5ee851ec0f4a88d72c561ec8a3674b487c78bd8d\nReviewed-on: https://gerrit.chromium.org/gerrit/37546\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Ready: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "56cab06b8a1fcf5058346e4b061fb2a171f62e22", "tree": "d76ff8693a04b2392c6ae5fe308582f30fe54860", "parents": [ "6a60a7512d5776f468196ab6abe490467e535d3d" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Oct 23 02:08:38 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Tue Oct 23 21:47:00 2012" }, "message": "Fixed non-POD static data types.\n\nBUG\u003dchromium:157060\nTEST\u003dRan all unit tests; manual tests which use PKCS #11.\n\nChange-Id: Ied73499b48efe6818e628538597c0994dfc9995c\nReviewed-on: https://gerrit.chromium.org/gerrit/36302\nReviewed-by: Gaurav Shah \u003cgauravsh@chromium.org\u003e\nCommit-Ready: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "6a60a7512d5776f468196ab6abe490467e535d3d", "tree": "b7984b16762c61f9152aa29c7519352fff45a6f8", "parents": [ "36d13d406be6018ff852b9cb2ff5eb2b34299491" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Sep 11 23:45:01 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Wed Sep 19 22:33:32 2012" }, "message": "Added code to work around key load failures.\n\nIf a key is evicted it may not be possible to reload it. In this case\ntcsd will return TCS_E_KM_LOADFAILED from an operation that uses a\nprivate key. The workaround is to unload and load the key again with a\nnew handle. In order to isolate the handle churn to a single layer,\nTSS handles are virtualized in TPMUtilityImpl.\n\nBUG\u003dchrome-os-partner:13878\nTEST\u003dRan all unit tests and relevant autotests.\n Manually attempted to reproduced the problem and verified that the\n reload logic was operating correctly. This condition is evidenced\n by a warning in the syslog: \"TCS load failure: attempting to reload\n key.\".\n\nChange-Id: I3961456db3ac383a2721a9d0c102a4ae3dac1642\nReviewed-on: https://gerrit.chromium.org/gerrit/33023\nReviewed-by: Kees Cook \u003ckeescook@chromium.org\u003e\nCommit-Ready: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "36d13d406be6018ff852b9cb2ff5eb2b34299491", "tree": "e68fb834f2f4200c0e45718555e209a8655e65ea", "parents": [ "2ba09fd112ec9fb1c7a3b1c64bb32a65fdf3d3ed" ], "author": { "name": "J. Richard Barnette", "email": "jrbarnette@chromium.org", "time": "Fri Sep 14 22:08:23 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Sat Sep 15 00:01:06 2012" }, "message": "Fix chapsd upstart job start and stop conditions.\n\nThe \u0027ui\u0027 job has a post-stop script that depends indirectly on\nchapsd. In order for \u0027ui\u0027 to shut down cleanly, chapsd must remain\nrunning until the \u0027stopping boot-services\u0027 event. This fix changes\nthe \u0027chapsd\u0027 job so that a) it only depends on the public\nboot-services interface, and that b) the chaps daemon stays running\nlong enough for a clean shutdown.\n\nBUG\u003dchromium-os:33354\nTEST\u003dobserve no errors logged by chromeos_shutdown\nTEST\u003drun platform_BootPerfServer, and check both startup and shutdown times\n\nChange-Id: Ib63268b547bf9ef3dc9de64149421a4fe6a5b2ff\nReviewed-on: https://gerrit.chromium.org/gerrit/33364\nTested-by: Richard Barnette \u003cjrbarnette@chromium.org\u003e\nReviewed-by: Scott James Remnant \u003ckeybuk@chromium.org\u003e\nCommit-Ready: Richard Barnette \u003cjrbarnette@chromium.org\u003e\n" }, { "commit": "2ba09fd112ec9fb1c7a3b1c64bb32a65fdf3d3ed", "tree": "f32fb95fc59bb70f3f0522fd7ab7d6e8ca4946fb", "parents": [ "3bdb958ce2cb8bb605c78f5c82d39b15adb19c56" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed Sep 12 23:58:11 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Thu Sep 13 01:37:41 2012" }, "message": "Added more timing data to p11_replay output.\n\nBUG\u003dNone\nTEST\u003dManual\n\nChange-Id: Ia63168846fe7dca9d621b17c8216f31e72647768\nReviewed-on: https://gerrit.chromium.org/gerrit/33148\nReviewed-by: Christopher Wiley \u003cwiley@chromium.org\u003e\nCommit-Ready: Darren Krahn \u003cdkrahn@chromium.org\u003e\nTested-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\n" }, { "commit": "3bdb958ce2cb8bb605c78f5c82d39b15adb19c56", "tree": "40f1bec096b2499958e3ca9f641ad1949091af59", "parents": [ "4f0c7ea0a36060940dd5788452df12e2d7b829f4" ], "author": { "name": "Christopher Wiley", "email": "wiley@chromium.org", "time": "Fri Sep 07 17:52:32 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Fri Sep 07 21:21:42 2012" }, "message": "chaps: Add dependency for chaps_client.o on...\n\n...chaps_proxy_generated.h\n\nApprarently if you build chaps enough you expose that we\u0027re missing this\ndependency.\n\nBUG\u003dchromium-os:34223\nTEST\u003dStill compiles\n\nChange-Id: I607fbb8363b0e10df601f33b63fd0ccec4bbcef6\nReviewed-on: https://gerrit.chromium.org/gerrit/32565\nTested-by: Christopher Wiley \u003cwiley@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Ready: Christopher Wiley \u003cwiley@chromium.org\u003e\n" }, { "commit": "4f0c7ea0a36060940dd5788452df12e2d7b829f4", "tree": "97812912d516c75eb0806839fc7453570597534e", "parents": [ "354cf7b96f5db2db31fbeccf1f44f5600cf067ea" ], "author": { "name": "Christopher Wiley", "email": "wiley@chromium.org", "time": "Wed Jul 25 18:19:39 2012" }, "committer": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Mon Jul 30 21:48:12 2012" }, "message": "chaps: Add manual key/cert reads to p11_replay\n\nAdd facillities to p11_replay to allow users to load certificates and\nprivate keys into a token via the command line. We accept DER encoded\nkeys and certificates in flat files for right now. We need this\nfunctionality to be able to load our test certificates into the TPM for\nwifi authentication testing.\n\nBUG\u003dchromium-os:31586\nTEST\u003dRun wifi tests with this tool, tests work as expected\nChange-Id: I3a163f9aaf7e95f70f95b90d1f92706f119d4063\nReviewed-on: https://gerrit.chromium.org/gerrit/28411\nTested-by: Christopher Wiley \u003cwiley@chromium.org\u003e\nReviewed-by: Darren Krahn \u003cdkrahn@chromium.org\u003e\nCommit-Ready: Christopher Wiley \u003cwiley@chromium.org\u003e\n" }, { "commit": "354cf7b96f5db2db31fbeccf1f44f5600cf067ea", "tree": "accc644a4e1555f0809f1827c6f234a2a8d6de86", "parents": [ "e1c54ee4646b520b4b3f85d2885b73abe51c46a6" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jun 14 20:38:15 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon Jun 18 20:48:11 2012" }, "message": "Moved to the latest version of common.mk.\n\n- The new common.mk defaults to -fvisibility\u003dinternal so PKCS #11 entry\n points and the LoginEventClient class have been exported explicitly.\n- Tests have been cleaned up and live tests now run without errors.\n- Generated code now resides in the output directory. This means\n #include statements for these headers must lose the \u0027chaps/\u0027 prefix.\n- A default output directory of \u0027build-opt-local\u0027 is used. The ebuild\n specifies \u0027build-opt\u0027 so output generated by running \u0027make\u0027 locally\n will not collide with output generated by \u0027emerge\u0027.\n- Tests now run on arm platforms in qemu.\n\nBUG\u003dchromium-os:28051\nTEST\u003d\u0027FEATURES\u003dtest emerge\u0027 on lumpy, zgb, arm-generic\n\nChange-Id: Ie7759aec3f6f86c78eafa41414192bf67ef08fc4\n" }, { "commit": "e1c54ee4646b520b4b3f85d2885b73abe51c46a6", "tree": "2ba042a539b0dc3156ab92ab8072f55d55aea188", "parents": [ "7c886fe55f5eb8b505b42b3cb7d9b654fe29f775", "1e50870759e8c3a743db32804813423b62155f2d" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Sat Jun 16 01:25:35 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Sat Jun 16 01:25:35 2012" }, "message": "Merge \"Limit chaps debug setting to a single restart.\"" }, { "commit": "7c886fe55f5eb8b505b42b3cb7d9b654fe29f775", "tree": "a63f4c23e359c3b131b8f3e20195e7aec7ae619a", "parents": [ "e01d34e7bb0f7843ba0ac6ee9764aafbd0db91b7" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Jun 12 04:11:08 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Jun 15 23:33:37 2012" }, "message": "Use SecureBlob for authorization data and the master key.\n\nBUG\u003dchromium-os:27681\nTEST\u003dRan all unit tests.\n\nChange-Id: Ic1ebbf65704247a23ff9ff14f8aedfcad84ec73f\n" }, { "commit": "1e50870759e8c3a743db32804813423b62155f2d", "tree": "895a357a6d919d73927f78b2b4fb39fc473e8362", "parents": [ "e01d34e7bb0f7843ba0ac6ee9764aafbd0db91b7" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Jun 15 21:28:04 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Jun 15 21:28:04 2012" }, "message": "Limit chaps debug setting to a single restart.\n\nThis prevents debug logging from being left on inadvertently.\n\nBUG\u003dNone\nTEST\u003dManual\n\nChange-Id: If5fb7f09dc92829c8b114aa4d6dc13c10c118855\n" }, { "commit": "e01d34e7bb0f7843ba0ac6ee9764aafbd0db91b7", "tree": "366ee49c6ef602ef83c989f3a222c7657b4879f3", "parents": [ "bf5e09838155a5583243826f5680c780452e27c9" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jun 07 23:58:05 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jun 14 20:55:43 2012" }, "message": "Added support for chaps_debug files.\n\nThese files are created / removed by the chaps_debug crosh command.\n\nBUG\u003dNone\nTEST\u003dManual\n\nChange-Id: I276c59031c674e71647a04b64706740cb9defeca\n" }, { "commit": "bf5e09838155a5583243826f5680c780452e27c9", "tree": "f9b9530c662aeaf8c662115b0615d21739aea333", "parents": [ "7bf17655b4b8984f45ec13a9caac873b856112c9" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Jun 07 23:52:11 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Jun 08 17:44:26 2012" }, "message": "A few changes related to the removal of opencryptoki.\n\n- Cleaned up cryptoki.h.\n- Removed opencryptoki option from upstart script.\n\nBUG\u003dchromium-os:21022\nTEST\u003dRan all platform_Pkcs11* autotests.\n\nChange-Id: I192e0fedbb4614ee0d96c1e347da6ae416ac3551\n" }, { "commit": "7bf17655b4b8984f45ec13a9caac873b856112c9", "tree": "d722a45545e56a614e55711cda5bf25c3c2e3c3d", "parents": [ "fbd18df7212cb02e93c88c76e4f6f975bb5dc8e8", "2b51956a340eeefa0ffe4c7c7e0376d5f3b5a66b" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Thu Jun 07 19:07:40 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Thu Jun 07 19:07:40 2012" }, "message": "Merge \"Added list_objects options to p11_replay.\"" }, { "commit": "fbd18df7212cb02e93c88c76e4f6f975bb5dc8e8", "tree": "e7679c5894b08a2271349a29f8fbdbd1cab27b06", "parents": [ "50105d129051e3bf11957e1eec978c8ce927676e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon Jun 04 22:28:54 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Jun 05 00:19:44 2012" }, "message": "Store only a single byte of the auth data hash.\n\nStoring a single byte still allows a reasonable sanity check but is not\nvery useful for a brute-force attack.\n\nBUG\u003dNone\nTEST\u003dRan all unit tests; ran platform_Pkcs11ChangeAuthData.\n\nChange-Id: I9f3a36d9258b6125c6fec85419abd78e6eda7d76\n" }, { "commit": "2b51956a340eeefa0ffe4c7c7e0376d5f3b5a66b", "tree": "de540105b41194e0798d9a55b0a95a78977ff2ca", "parents": [ "50105d129051e3bf11957e1eec978c8ce927676e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Jun 05 00:03:56 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Jun 05 00:03:56 2012" }, "message": "Added list_objects options to p11_replay.\n\nBUG\u003dchromium-os:29776\nTEST\u003dManual\n\nChange-Id: I392c1b9fc277264a2e439079cc3aa29eb2e43b08\n" }, { "commit": "50105d129051e3bf11957e1eec978c8ce927676e", "tree": "2d7c8de9cafa2408b76b4ee8265521ea23e764d5", "parents": [ "fb7a014f192196bd810d183001ffd086d3483da6" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu May 31 21:22:11 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon Jun 04 20:15:17 2012" }, "message": "Added support in p11_replay for key injection and key labels.\n\nAlso, improved logging in a few places.\n\nBUG\u003dNone\nTEST\u003dManual; Run platform_Pkcs11Events autotest.\n\nChange-Id: I42738d18693e516a5a8f0d3bd7518e3867b0f89c\n" }, { "commit": "fb7a014f192196bd810d183001ffd086d3483da6", "tree": "00054acfa46ad7b8c9a8b1c435962062cb5fda14", "parents": [ "5630e259808886a5ccaca7b0c98e557f6af8a7d2" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri May 25 17:09:46 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri May 25 20:07:04 2012" }, "message": "Cleaned up commands that have been moved to chaps_client.\n\nBUG\u003dNone\nTEST\u003dManual\n\nChange-Id: Ia72d0ffed4b56042916cb483a49610d7e7f27c82\n" }, { "commit": "5630e259808886a5ccaca7b0c98e557f6af8a7d2", "tree": "7b5363a39c38b294a164d29c7d0eb1e0063be7e5", "parents": [ "9c68ab5634ecc20188ea538df58e086a45bb9a8c" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Sat May 19 00:59:09 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri May 25 19:00:04 2012" }, "message": "Added an authorization data hash.\n\nAuthorization data will only be sent to the TPM if it matches this hash.\nThis shields the TPM from bad authorization data which can cause it to\nenter dictionary-attack-defense mode. Also, fixed a bug found during\ntesting: the private object mutex should not be signaled in the\nObjectPoolImpl::DeleteAll method.\n\nNote: This CL is security-relevant. Previously a hash of the\nauthorization data was not stored.\n\nBUG\u003dchromium-os:30836\nTEST\u003dRan all unit tests. Ran platform_Pkcs11ChangeAuthData autotest.\n\nChange-Id: I7c65205e858f74f8a69e13cfe8ae00eb2de75bf2\n" }, { "commit": "9c68ab5634ecc20188ea538df58e086a45bb9a8c", "tree": "01d68b31eb78d0a03d4ea2ecf2de14dfeab80167", "parents": [ "68eb0aad63c246ed839b6b5187d4955cf1194b4b" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue May 22 19:57:44 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue May 22 19:57:44 2012" }, "message": "Removed support for less secure encrypted blob format.\n\nBUG\u003dchromium-os:31023\nTEST\u003dRan all unit tests; manually tested existing objects are loaded.\n\nChange-Id: I612d2f9729179b89bae306d3cc8ee3afc9b1b92a\n" }, { "commit": "68eb0aad63c246ed839b6b5187d4955cf1194b4b", "tree": "c0935212e56b545d1678973453416fe87bd1155c", "parents": [ "04d149b0c9855d0304501b866535228a895fac9a" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu May 10 17:10:58 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue May 22 00:08:58 2012" }, "message": "Moved the expensive part of token termination onto a worker thread.\n\nThe effect is that the OnLogout event is quick and consistent. There is\nno noticeable difference (at the ms level) between this OnLogout\nimplementation and not doing anything in the OnLogout handler. File\nsystem handles are still closed synchronously so a race condition does\nnot exist with ui.conf killing processes with open handles.\n\nBUG\u003dchromium-os:29933\nTEST\u003dRan all unit tests.\n Ran platform_Pkcs11Init* autotests.\n Tested timing by manually unloading with active keys.\n Manually verified that chapsd does not get killed on logout.\n\nChange-Id: I8f73b15aeb4691232b890cfb1a3a26b870788fdb\n" }, { "commit": "04d149b0c9855d0304501b866535228a895fac9a", "tree": "4f7738d38e97cee828ef333ee49d454e7a29deaa", "parents": [ "53b8abebc22f0b9ebe7bd530dcd57b3433e69f90" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue May 15 23:54:26 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon May 21 17:59:43 2012" }, "message": "Created a dbus method which sets the log level and a chaps client.\n\nCombined with a crosh command, this will allow verbose logging to be\nenabled in normal mode. The chaps client also includes some of the\nchaps-specific commands from p11_replay. These will be removed from\np11_replay once the dependent autotests have been updated.\n\nBUG\u003dchromium-os:30835\nTEST\u003dRan all unit tests.\n Manually tested setting log level.\n Manually tested using all chaps_client commands.\n\nChange-Id: If74949ffb6c2116528262b70a5e86e7cfd180bdf\n" }, { "commit": "53b8abebc22f0b9ebe7bd530dcd57b3433e69f90", "tree": "5f765c2d50c3a964603fe9d96a9d746616802054", "parents": [ "b4115cfa914f84c0fd6f8cf60a5b015c4f4f862f", "848a4abdd650471b1ba15f24c3880ea35817316b" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Wed May 16 23:05:39 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Wed May 16 23:05:39 2012" }, "message": "Merge \"Implemented fall-back to software for out-of-range private key sizes.\"" }, { "commit": "848a4abdd650471b1ba15f24c3880ea35817316b", "tree": "da1e915d592fe5651d99131c2c6226dca482de5d", "parents": [ "53e6ae6b2de146c87aff2870ad8a7698eefd7261" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon May 14 19:13:41 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed May 16 16:56:20 2012" }, "message": "Implemented fall-back to software for out-of-range private key sizes.\n\nAlso:\n - Added logging to \u0027not supported\u0027 errors.\n - Updated p11_replay so software keys can be tested.\n - Updated RSA key size and output buffer size checks.\n\nBUG\u003dchromium-os:29974\nTEST\u003dRan all unit tests.\n Manually imported sample certs attached to bug.\n Manually tested generation and use of large keys using p11_replay.\n\nChange-Id: I0750aca70cbfdc4b776a7e356aaa3b4268811d99\n" }, { "commit": "b4115cfa914f84c0fd6f8cf60a5b015c4f4f862f", "tree": "5e0a9dfae95e2d277d0ab89de46e7fad93673781", "parents": [ "53e6ae6b2de146c87aff2870ad8a7698eefd7261" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon May 14 23:57:44 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed May 16 16:38:52 2012" }, "message": "Implemented recovery from bad authorization data.\n\nIf the authorization data passed to OnLogin is not correct, private\nobjects cannot be used. In practice, the correctness of the\nauthorization data should be checked before loading a token but in the\nevent this happens the response is to do the following:\n 1) Delete all objects, public and private.\n 2) Initialize a new key hierarchy with the given auth data.\n\nIf initializing a key hierarchy fails either the first time it runs or\nduring this recovery step, the private object condition will be set to\navoid blocking incoming requests for private object operations.\n\nBUG\u003dchromium-os:30668\nTEST\u003dRan all unit tests, including two new ones.\n Manually tested bad auth data cases using p11_replay.\n\nChange-Id: I9ad20aa072dd08f9206f05ecf3c1559a842bde93\n" }, { "commit": "53e6ae6b2de146c87aff2870ad8a7698eefd7261", "tree": "c0df8f1cca69fb42cb307df5f43ea6ad8f1f75a6", "parents": [ "dc60c311082eb6473bce764a04d8f9611abc6b8e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon May 07 19:52:52 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue May 15 23:39:41 2012" }, "message": "Improved logging of attributes.\n\nBUG\u003dNone\nTEST\u003dUnit tests, manually tested log output.\n\nChange-Id: Ic897648f97644e94bec53864233a76098890a56f\n" }, { "commit": "dc60c311082eb6473bce764a04d8f9611abc6b8e", "tree": "032d9044e471eec13540f9439c5140c489bfae4e", "parents": [ "5862b4378e83434c95d7cc7f2f2d28222fff1df6" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed May 02 21:55:14 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri May 11 18:54:46 2012" }, "message": "Improved encryption/authentication of persistent objects.\n\nNow a MAC is computed after encryption and includes the IV. Also\nSafeMemcmp is used when verifying the MAC before decryption. Existing\nobjects are migrated to the new format.\n\nBUG\u003dNone\nTEST\u003dRan all unit tests. Manually tested migration of existing objects.\n\nChange-Id: If2f8b5fbcc8ea2c46e4e1c2fcea87e3ff6ecb24c\n" }, { "commit": "5862b4378e83434c95d7cc7f2f2d28222fff1df6", "tree": "c43e6cda0c616241bdf4449a126ff6276f2d7e2e", "parents": [ "9743c02b6f1847bba8ab2f18873f4e157f692071" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Sat May 05 05:12:02 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Sat May 05 05:12:02 2012" }, "message": "Fixed an HMAC compatibility problem.\n\nDue to a previous bug, the MAC for some public objects still exist as\ncomputed with the master key (used for private objects). This CL\ntolerates this case and considers such MACs valid.\n\nBUG\u003dchromium-os:30577\nTEST\u003dRan all unit tests.\n\nChange-Id: I364a8c724a898a6bed1b8c37e1ed5d0f41d2f2ba\n" }, { "commit": "9743c02b6f1847bba8ab2f18873f4e157f692071", "tree": "84c600d81f00138d76563a64e5283ce445916eef", "parents": [ "1ffe60cdfe036411fffaa3cd93c90c45ac0e6918" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri May 04 19:23:01 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri May 04 19:23:01 2012" }, "message": "Fixed a 32-bit to 64-bit conversion error.\n\nBUG\u003dchromium-os:30145\nTEST\u003dRan all unit tests. Manually tested SPDY.\n\nChange-Id: I98a8eab260a74f8700393c7bbcb201d0652447d3\n" }, { "commit": "1ffe60cdfe036411fffaa3cd93c90c45ac0e6918", "tree": "adacab5af261b4483edfd8a02f1637cfa16342f5", "parents": [ "50c57af2336f8bcfc1419f07ee949e7310703b5c" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed May 02 21:12:44 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed May 02 22:08:10 2012" }, "message": "Defined NSS-specific constants to improve logging.\n\nBUG\u003dNone\nTEST\u003dRan all unit tests. Manually checked logs for readable constants.\n\nChange-Id: Ic23ecf1937fc54d6e8daee04eb4fbd23dc2ab13e\n" }, { "commit": "50c57af2336f8bcfc1419f07ee949e7310703b5c", "tree": "cf186344fabaedbbdf5da5d44525e97f7af5bf74", "parents": [ "2a230eb54be38abc3140489a958968a7e8d4f516", "7bd6f6b27170e8250cc54439fe401a2c47c2774d" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Wed May 02 19:06:35 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Wed May 02 19:06:35 2012" }, "message": "Merge \"Improved handling of corrupted database.\"" }, { "commit": "2a230eb54be38abc3140489a958968a7e8d4f516", "tree": "0ddd22dd0ee54beefe11c2098ed46ece212a9749", "parents": [ "bdc9868d9ea19913b91f8e09f278821627f0cd73", "da2ced6c9f2b56af53928d6cf280ff3a7cf52174" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Wed May 02 19:06:30 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Wed May 02 19:06:30 2012" }, "message": "Merge \"Modified p11_replay to not attempt any other operations after unload.\"" }, { "commit": "bdc9868d9ea19913b91f8e09f278821627f0cd73", "tree": "d12e8307c4140f81684a22efb03bfcb8297f6c62", "parents": [ "d6c82cd5d687d20f7f735ff3f94b21085a5a9fb2", "c6aa0acb19404619696a2688f0b64e0a3781ba2e" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Wed May 02 19:06:30 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Wed May 02 19:06:30 2012" }, "message": "Merge \"Default public keys and certificates to CKA_PRIVATE \u003d false.\"" }, { "commit": "d6c82cd5d687d20f7f735ff3f94b21085a5a9fb2", "tree": "588a2d29acc4519808ec72b911fded25edd2819c", "parents": [ "f2496f67daf8f7b158dcd762beb8e1ad4317003c", "503a27a8ae75dea4e2c7f5dc4a1a6dbc2fbec884" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Wed May 02 19:06:29 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Wed May 02 19:06:29 2012" }, "message": "Merge \"Fixed HMAC bug. Public object MACs were incorrectly generated.\"" }, { "commit": "7bd6f6b27170e8250cc54439fe401a2c47c2774d", "tree": "446bbbc57a12ba1e6726015cd2f23c3478216649", "parents": [ "da2ced6c9f2b56af53928d6cf280ff3a7cf52174" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed Apr 25 20:16:00 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon Apr 30 17:39:08 2012" }, "message": "Improved handling of corrupted database.\n\nNow a database directory is backed up when it cannot be opened. This\nallows PKCS #11 services to proceed with a functional database while\nkeeping the corrupt database for diagnosis.\n\nBUG\u003dNone\nTEST\u003dplatform_Pkcs11InitUnderErrors\n\nChange-Id: Iecfeff548239eb542f6c73b21e9a5dcd3010155b\n" }, { "commit": "da2ced6c9f2b56af53928d6cf280ff3a7cf52174", "tree": "0afcf057bc5e178a4764726f6312607ab0967e19", "parents": [ "c6aa0acb19404619696a2688f0b64e0a3781ba2e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Mon Apr 23 23:11:01 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 27 19:27:28 2012" }, "message": "Modified p11_replay to not attempt any other operations after unload.\n\nBUG\u003dNone\nTEST\u003dManual\n\nChange-Id: I557b93bba20ea86ca94875a1f0a1ef1270ec8803\n" }, { "commit": "c6aa0acb19404619696a2688f0b64e0a3781ba2e", "tree": "5d96fc789721273ca955ad5649848c61d624d6f6", "parents": [ "503a27a8ae75dea4e2c7f5dc4a1a6dbc2fbec884" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 27 18:44:28 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 27 18:49:36 2012" }, "message": "Default public keys and certificates to CKA_PRIVATE \u003d false.\n\nSome applications (including NSS) don\u0027t always specify the CKA_PRIVATE\nattribute and previously this always defaulted to true. For public keys\nand certificates this attribute set to false is more appropriate and\nallows faster access to certificates on login.\n\nBUG\u003dNone\nTEST\u003dRan all unit tests; manual tests.\n\nChange-Id: Iafbcae09fe377d8cf4097cf63bdac05a78c16e74\n" }, { "commit": "503a27a8ae75dea4e2c7f5dc4a1a6dbc2fbec884", "tree": "45eb196d119d374e39d06ad82c2f0b300b2e32ae", "parents": [ "bd9123bfcc51c2cb3393bc41b180df0f755a9105" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 27 00:18:33 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 27 00:18:33 2012" }, "message": "Fixed HMAC bug. Public object MACs were incorrectly generated.\n\nBUG\u003dNone\nTEST\u003dRan all unit tests. Manually tested using the following steps:\n - Create a directory owned by chaps (e.g. /tmp/chaps)\n - Restart chapsd\n - Create a new token and generate a key pair:\n \u003e sudo p11_replay --load --path\u003d/tmp/chaps --auth\u003d1234 --generate\n - Unload the new token:\n \u003e sudo p11_replay --unload --path\u003d/tmp/chaps\n - Load the token again and immediately list objects (before the token\n master key can be decrypted by the TPM):\n \u003e sudo p11_replay --load --path\u003d/tmp/chaps --auth\u003d1234; pkcs11-tool\n --module\u003dlibchaps.so -O\n - Verify that the output of this command lists a public key. Before\n this fix the output would not list any objects.\n - Wait a few seconds (so the master key is decrypted).\n - List objects again:\n \u003e pkcs11-tool --module\u003dlibchaps.so -O\n - Verify that the output lists both the public and private keys.\n\nChange-Id: Id11603cad9732878d72218a82444cf0b7f36e34b\n" }, { "commit": "f2496f67daf8f7b158dcd762beb8e1ad4317003c", "tree": "eb9dcceb3da0059996268fe244251ca6777d87ec", "parents": [ "bd9123bfcc51c2cb3393bc41b180df0f755a9105" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed Apr 25 20:18:45 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed Apr 25 20:43:21 2012" }, "message": "Fixed a hang during unit testing.\n\nSlotManagerImpl::OnLogin creates a thread to perform asynchronous token\ninitialization. The version of gtest and gmock we currently use is not\nthread-safe which can cause hangs. For now, all tests calling OnLogin\nhave been disabled.\n\nBUG\u003dNone\nTEST\u003dRan all unit tests.\n Created new unit test which reproduces the problem often.\n\nChange-Id: I518e07ef594253fb4f2b1c00762dffb4986acfee\n" }, { "commit": "bd9123bfcc51c2cb3393bc41b180df0f755a9105", "tree": "be24a1a61bd60fc266846b0715d7fcabae6a10f3", "parents": [ "827d06bb36daa2c2e0026c0848c7e0ebbc24c4f4", "efad1515200d5a6a8aa353eb03043c4dfad0658c" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Fri Apr 20 22:40:36 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Fri Apr 20 22:40:36 2012" }, "message": "Merge \"Fixed a memory / handle leak.\"" }, { "commit": "efad1515200d5a6a8aa353eb03043c4dfad0658c", "tree": "eda38a914d717744c90a34f05fb6561ff38bbbae", "parents": [ "e8e38d4767fd236c2b34b24e26a77804a5efb72e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 20 21:42:04 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 20 21:42:04 2012" }, "message": "Fixed a memory / handle leak.\n\nEach leveldb iterator holds an open file handle. This needs to be closed\nso chapsd doesn\u0027t get killed on logout.\n\nBUG\u003dchromium-os:29665\nTEST\u003dRan all unit tests; manually verified all handles close correctly.\n\nChange-Id: Ie63443e7f345455a41a0c9b56eadd0dda974e60b\n" }, { "commit": "827d06bb36daa2c2e0026c0848c7e0ebbc24c4f4", "tree": "25b133736d885e038c72445832be17fd0f5d1867", "parents": [ "ac9e9174317dc80febbd93960384a99d890b2928", "33ebccfcc0e02d7e7874a8379fd5ecfcaa0cc36f" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Fri Apr 20 21:33:13 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Fri Apr 20 21:33:13 2012" }, "message": "Merge \"Added more robust handling of TPM failures.\"" }, { "commit": "ac9e9174317dc80febbd93960384a99d890b2928", "tree": "9ba42676f07c034e2a12bf58673af500735cb63d", "parents": [ "e8e38d4767fd236c2b34b24e26a77804a5efb72e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 20 16:16:56 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Fri Apr 20 16:16:56 2012" }, "message": "Cleaned up unused code.\n\nThe todo bug has been closed WontFix.\n\nBUG\u003dchromium-os:22297\nTEST\u003dnone\n\nChange-Id: I3c2a620aaecdc29400c4b85ac8f56bc2fcdf0d35\n" }, { "commit": "33ebccfcc0e02d7e7874a8379fd5ecfcaa0cc36f", "tree": "aa45e9a1499168938a15e4dd4e78ae2e9c24f3cd", "parents": [ "e8e38d4767fd236c2b34b24e26a77804a5efb72e" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Apr 19 22:40:13 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Thu Apr 19 22:40:13 2012" }, "message": "Added more robust handling of TPM failures.\n\nPreviously, if the TPM failed to initialize a LOG(FATAL) killed the\nprocess. Now a token will not be loaded but TPM initialization will be\nreattempted each time a request to load a token is received.\n\nBUG\u003dchromium-os:29703\nTEST\u003dRan all unit tests; created new unit test.\n Manually tested with functional TPM and with fake TPM failure.\n\nChange-Id: If757a01c35c8208a18ac1567c95cf418f8f15f12\n" }, { "commit": "e8e38d4767fd236c2b34b24e26a77804a5efb72e", "tree": "f5972d682d70139475f697abb82175510848ed82", "parents": [ "d8c6b0b89bc71fb1b4b5572ea14dc952fa2197f6" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed Apr 11 17:32:19 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Wed Apr 18 17:19:15 2012" }, "message": "Enable the Chaps PKCS #11 implementation by default.\n\nBUG\u003dchromium-os:22543\nTEST\u003dManually tested that an update that includes this change will cause\nChaps to be enabled on the next reboot.\n\nChange-Id: I20d51ec81ababc996df495e2441e1eaf72b4148a\n" }, { "commit": "d8c6b0b89bc71fb1b4b5572ea14dc952fa2197f6", "tree": "fead2f2b19405ed7bcfb348ca4964ff5917e1988", "parents": [ "56956ffde4cd6d44ea2f23065c85befa72c80993", "9497d90e7337afed35bb4ed72c673282efe5597f" ], "author": { "name": "Gerrit", "email": "chrome-bot@google.com", "time": "Tue Apr 17 22:38:51 2012" }, "committer": { "name": "Gerrit Code Review", "email": "gerrit@gerrit.golo.chromium.org", "time": "Tue Apr 17 22:38:51 2012" }, "message": "Merge \"Fixed flushing of objects modified after initial creation.\"" }, { "commit": "56956ffde4cd6d44ea2f23065c85befa72c80993", "tree": "7efa6c11d1858ccbe4d5c22d81c8de2edd15bdee", "parents": [ "89428b119d959c2c8d21430533005d5ee925f9f2" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Apr 17 21:27:30 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Apr 17 21:57:13 2012" }, "message": "Fixed a race condition between chapsd and chaps clients.\n\nThis race condition exhibits itself in practice when cryptohome restarts\nchapsd and then waits for the process to be respawned before making\ncalls. If cryptohome calls between the time that chapsd has started and\nthe time it begins servicing dbus then the calls fail.\n\nThis is suspected of causing apparent certificate loss.\n\nBUG\u003dchromium:120767\nTEST\u003dRan all unit tests.\n Manually tested:\n - Ran client but not service.\n - Ran client and then service after a short delay.\n - Ran service and then client.\n\nChange-Id: I0a9105e3d10b0b359ed3faa0c91516c57dffa304\n" }, { "commit": "9497d90e7337afed35bb4ed72c673282efe5597f", "tree": "faa1f58b41be5bf7fc8839b3614d8c51c69d04b8", "parents": [ "89428b119d959c2c8d21430533005d5ee925f9f2" ], "author": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Apr 17 17:26:55 2012" }, "committer": { "name": "Darren Krahn", "email": "dkrahn@chromium.org", "time": "Tue Apr 17 17:26:55 2012" }, "message": "Fixed flushing of objects modified after initial creation.\n\nBUG\u003dchromium:120767\nTEST\u003dNew unit test; manually tested.\n\nChange-Id: I79335c99a6616fdfb5286ccadcb5831d99833498\n" } ], "next": "89428b119d959c2c8d21430533005d5ee925f9f2" }