[Opensc-commits] [OpenSC/libp11] 0c7a5a: Tighten up debug logging to include detail of each...

[minfrin <no...@gi...>]

  Branch: refs/heads/master
  Home:   https://github.com/OpenSC/libp11
  Commit: 0c7a5af6b0352d33c8ca214026405e69107deb7c
      https://github.com/OpenSC/libp11/commit/0c7a5af6b0352d33c8ca214026405e69107deb7c
  Author: minfrin <mi...@us...>
  Date:   2022-03-20 (Sun, 20 Mar 2022)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  Tighten up debug logging to include detail of each step.

Make lists more obvious. Include details of the module being loaded,
the tokens being scanned, and the reasons for not finding objects.


  Commit: 8cd6f9440b7cf8b1de7c79869e74ba6c474e098c
      https://github.com/OpenSC/libp11/commit/8cd6f9440b7cf8b1de7c79869e74ba6c474e098c
  Author: minfrin <mi...@us...>
  Date:   2022-03-20 (Sun, 20 Mar 2022)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  Correct the handling of the plural on certificates.


  Commit: 4c6d0f32602f904b27fd07ab9d6e06cb0bbcd319
      https://github.com/OpenSC/libp11/commit/4c6d0f32602f904b27fd07ab9d6e06cb0bbcd319
  Author: minfrin <mi...@us...>
  Date:   2022-03-20 (Sun, 20 Mar 2022)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  Log how we came to choose a certificate or key.


  Commit: 5316c33e7b484d2dd692ea74242dc6700b7e5a25
      https://github.com/OpenSC/libp11/commit/5316c33e7b484d2dd692ea74242dc6700b7e5a25
  Author: minfrin <mi...@us...>
  Date:   2022-03-20 (Sun, 20 Mar 2022)

  Changed paths:
    M src/eng_back.c

  Log Message:
  -----------
  When ID and label are specified, both need to match, not either.

To fix this id-match OR label-match was replaced with id-match AND
label-match.

A tiebreak was added when multiple matching certificates could be
returned. The certificate with the latest expiry wins, and if we
still have a tie we deterministically choose a certificate using
X509_cmp().

If we do not specify a certificate, we return the first certificate
(or first certificate with an ID) as before.

Debug logging updated to show the expiry date used in the decision.


Compare: https://github.com/OpenSC/libp11/compare/745129cb4b37...5316c33e7b48