|
7222
|
1 |
Shim is licensed under an overarching BSD license and have some subcomponents licensed under OpenSSL licenses. It also contains a certificate from DigiCert.
|
|
|
2 |
|
|
|
3 |
./COPYRIGHT:
|
|
|
4 |
./netboot.c:
|
|
|
5 |
./replacements.c:
|
|
|
6 |
./shim.c:
|
|
|
7 |
Copyright 2012 Red Hat, Inc <[email protected]>
|
|
|
8 |
|
|
|
9 |
Redistribution and use in source and binary forms, with or without
|
|
|
10 |
modification, are permitted provided that the following conditions
|
|
|
11 |
are met:
|
|
|
12 |
|
|
|
13 |
Redistributions of source code must retain the above copyright
|
|
|
14 |
notice, this list of conditions and the following disclaimer.
|
|
|
15 |
|
|
|
16 |
Redistributions in binary form must reproduce the above copyright
|
|
|
17 |
notice, this list of conditions and the following disclaimer in the
|
|
|
18 |
documentation and/or other materials provided with the
|
|
|
19 |
distribution.
|
|
|
20 |
|
|
|
21 |
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
|
22 |
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
|
23 |
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
|
24 |
FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
|
|
25 |
COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
|
|
|
26 |
INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
|
27 |
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
|
28 |
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
29 |
HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
|
30 |
STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
|
31 |
ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
|
32 |
OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
33 |
|
|
|
34 |
Significant portions of this code are derived from Tianocore
|
|
|
35 |
(http://tianocore.sf.net) and are Copyright 2009-2012 Intel
|
|
|
36 |
Corporation.
|
|
|
37 |
|
|
|
38 |
Copyright (c) 2009 - 2014, Intel Corporation. All rights reserved.<BR>
|
|
|
39 |
|
|
|
40 |
* Copyright (c) 1998- 2014 The OpenSSL Project. All rights reserved.
|
|
|
41 |
|
|
|
42 |
./Cryptlib/Include/openssl/:
|
|
|
43 |
./Cryptlib/OpenSSL/crypto/:
|
|
|
44 |
./Cryptlib/OpenSSL/e_os.h:
|
|
|
45 |
/* Copyright (C) 1995-1998 Eric Young ([email protected])
|
|
|
46 |
* All rights reserved.
|
|
|
47 |
*
|
|
|
48 |
* This package is an SSL implementation written
|
|
|
49 |
* by Eric Young ([email protected]).
|
|
|
50 |
* The implementation was written so as to conform with Netscapes SSL.
|
|
|
51 |
*
|
|
|
52 |
* This library is free for commercial and non-commercial use as long as
|
|
|
53 |
* the following conditions are aheared to. The following conditions
|
|
|
54 |
* apply to all code found in this distribution, be it the RC4, RSA,
|
|
|
55 |
* lhash, DES, etc., code; not just the SSL code. The SSL documentation
|
|
|
56 |
* included with this distribution is covered by the same copyright terms
|
|
|
57 |
* except that the holder is Tim Hudson ([email protected]).
|
|
|
58 |
*
|
|
|
59 |
* Copyright remains Eric Young's, and as such any Copyright notices in
|
|
|
60 |
* the code are not to be removed.
|
|
|
61 |
* If this package is used in a product, Eric Young should be given attribution
|
|
|
62 |
* as the author of the parts of the library used.
|
|
|
63 |
* This can be in the form of a textual message at program startup or
|
|
|
64 |
* in documentation (online or textual) provided with the package.
|
|
|
65 |
*
|
|
|
66 |
* Redistribution and use in source and binary forms, with or without
|
|
|
67 |
* modification, are permitted provided that the following conditions
|
|
|
68 |
--
|
|
|
69 |
* 1. Redistributions of source code must retain the copyright
|
|
|
70 |
* notice, this list of conditions and the following disclaimer.
|
|
|
71 |
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
72 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
73 |
* documentation and/or other materials provided with the distribution.
|
|
|
74 |
* 3. All advertising materials mentioning features or use of this software
|
|
|
75 |
* must display the following acknowledgement:
|
|
|
76 |
* "This product includes cryptographic software written by
|
|
|
77 |
* Eric Young ([email protected])"
|
|
|
78 |
* The word 'cryptographic' can be left out if the rouines from the library
|
|
|
79 |
* being used are not cryptographic related :-).
|
|
|
80 |
* 4. If you include any Windows specific code (or a derivative thereof) from
|
|
|
81 |
* the apps directory (application code) you must include an acknowledgement:
|
|
|
82 |
* "This product includes software written by Tim Hudson ([email protected])"
|
|
|
83 |
*
|
|
|
84 |
* THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
|
|
|
85 |
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
86 |
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
87 |
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
|
88 |
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
89 |
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
90 |
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
91 |
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
|
92 |
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
|
93 |
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
94 |
* SUCH DAMAGE.
|
|
|
95 |
*
|
|
|
96 |
* The licence and distribution terms for any publically available version or
|
|
|
97 |
* derivative of this code cannot be changed. i.e. this code cannot simply be
|
|
|
98 |
* copied and put under another distribution licence
|
|
|
99 |
* [including the GNU Public Licence.]
|
|
|
100 |
*/
|
|
|
101 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
102 |
*
|
|
|
103 |
* Portions of the attached software ("Contribution") are developed by
|
|
|
104 |
* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
|
|
|
105 |
*
|
|
|
106 |
* The Contribution is licensed pursuant to the Eric Young open source
|
|
|
107 |
* license provided above.
|
|
|
108 |
*
|
|
|
109 |
* The binary polynomial arithmetic software is originally written by
|
|
|
110 |
* Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
111 |
*
|
|
|
112 |
*/
|
|
|
113 |
* This product includes cryptographic software written by Eric Young
|
|
|
114 |
* ([email protected]). This product includes software written by Tim
|
|
|
115 |
* Hudson ([email protected]).
|
|
|
116 |
*
|
|
|
117 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
118 |
* ECDH support in OpenSSL originally developed by
|
|
|
119 |
* SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project.
|
|
|
120 |
*/
|
|
|
121 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
122 |
*
|
|
|
123 |
* Portions of the attached software ("Contribution") are developed by
|
|
|
124 |
* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
|
|
|
125 |
*
|
|
|
126 |
* The Contribution is licensed pursuant to the OpenSSL open source
|
|
|
127 |
* license provided above.
|
|
|
128 |
*
|
|
|
129 |
* The elliptic curve binary polynomial software is originally written by
|
|
|
130 |
* Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
131 |
*
|
|
|
132 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
133 |
*
|
|
|
134 |
* The Elliptic Curve Public-Key Crypto Library (ECC Code) included
|
|
|
135 |
* herein is developed by SUN MICROSYSTEMS, INC., and is contributed
|
|
|
136 |
* to the OpenSSL project.
|
|
|
137 |
*
|
|
|
138 |
* The ECC Code is licensed pursuant to the OpenSSL open source
|
|
|
139 |
* license provided below.
|
|
|
140 |
*
|
|
|
141 |
* The ECDH software is originally written by Douglas Stebila of
|
|
|
142 |
* Sun Microsystems Laboratories.
|
|
|
143 |
*
|
|
|
144 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
145 |
* ECDH support in OpenSSL originally developed by
|
|
|
146 |
* SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project.
|
|
|
147 |
|
|
|
148 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
149 |
*
|
|
|
150 |
* Portions of the attached software ("Contribution") are developed by
|
|
|
151 |
* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
|
|
|
152 |
*
|
|
|
153 |
* The Contribution is licensed pursuant to the OpenSSL open source
|
|
|
154 |
* license provided above.
|
|
|
155 |
*
|
|
|
156 |
* ECC cipher suite support in OpenSSL originally written by
|
|
|
157 |
* Vipul Gupta and Sumit Gupta of Sun Microsystems Laboratories.
|
|
|
158 |
*
|
|
|
159 |
* Copyright (c) 2004, Richard Levitte <[email protected]>
|
|
|
160 |
* All rights reserved.
|
|
|
161 |
*
|
|
|
162 |
* Redistribution and use in source and binary forms, with or without
|
|
|
163 |
* modification, are permitted provided that the following conditions
|
|
|
164 |
* are met:
|
|
|
165 |
* 1. Redistributions of source code must retain the above copyright
|
|
|
166 |
* notice, this list of conditions and the following disclaimer.
|
|
|
167 |
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
168 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
169 |
* documentation and/or other materials provided with the distribution.
|
|
|
170 |
*
|
|
|
171 |
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
|
172 |
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
173 |
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
174 |
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
|
175 |
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
176 |
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
177 |
--
|
|
|
178 |
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
179 |
* SUCH DAMAGE.
|
|
|
180 |
*/
|
|
|
181 |
* @author Vincent Rijmen <[email protected]>
|
|
|
182 |
* @author Antoon Bosselaers <[email protected]>
|
|
|
183 |
* @author Paulo Barreto <[email protected]>
|
|
|
184 |
*
|
|
|
185 |
* This code is hereby placed in the public domain.
|
|
|
186 |
*
|
|
|
187 |
* THIS SOFTWARE IS PROVIDED BY THE AUTHORS ''AS IS'' AND ANY EXPRESS
|
|
|
188 |
* OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
|
|
189 |
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
190 |
* ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS OR CONTRIBUTORS BE
|
|
|
191 |
* LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
|
192 |
* CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
|
193 |
* SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
|
|
|
194 |
* BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
|
195 |
* WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
|
|
|
196 |
* OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE,
|
|
|
197 |
* EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
198 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
199 |
* Binary polynomial ECC support in OpenSSL originally developed by
|
|
|
200 |
* SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project.
|
|
|
201 |
*/
|
|
|
202 |
/*
|
|
|
203 |
* Blowfish as implemented from 'Blowfish: Springer-Verlag paper' (From
|
|
|
204 |
* LECTURE NOTES IN COMPUTER SCIENCE 809, FAST SOFTWARE ENCRYPTION, CAMBRIDG E
|
|
|
205 |
* SECURITY WORKSHOP, CAMBRIDGE, U.K., DECEMBER 9-11, 1993)
|
|
|
206 |
*/
|
|
|
207 |
* Copyright Patrick Powell 1995
|
|
|
208 |
* This code is based on code written by Patrick Powell <[email protected]>
|
|
|
209 |
* It may be used for any purpose as long as this notice remains intact
|
|
|
210 |
* on all source code distributions.
|
|
|
211 |
*/
|
|
|
212 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
213 |
*
|
|
|
214 |
* Portions of the attached software ("Contribution") are developed by
|
|
|
215 |
* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
|
|
|
216 |
*
|
|
|
217 |
* The Contribution is licensed pursuant to the Eric Young open source
|
|
|
218 |
* license provided above.
|
|
|
219 |
*
|
|
|
220 |
* The binary polynomial arithmetic software is originally written by
|
|
|
221 |
* Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
222 |
|
|
|
223 |
|
|
|
224 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
225 |
*
|
|
|
226 |
* The Elliptic Curve Public-Key Crypto Library (ECC Code) included
|
|
|
227 |
* herein is developed by SUN MICROSYSTEMS, INC., and is contributed
|
|
|
228 |
* to the OpenSSL project.
|
|
|
229 |
*
|
|
|
230 |
* The ECC Code is licensed pursuant to the OpenSSL open source
|
|
|
231 |
* license provided below.
|
|
|
232 |
*
|
|
|
233 |
* In addition, Sun covenants to all licensees who provide a reciprocal
|
|
|
234 |
* covenant with respect to their own patents if any, not to sue under
|
|
|
235 |
* current and future patent claims necessarily infringed by the making,
|
|
|
236 |
* using, practicing, selling, offering for sale and/or otherwise
|
|
|
237 |
* disposing of the ECC Code as delivered hereunder (or portions thereof),
|
|
|
238 |
* provided that such covenant shall not apply:
|
|
|
239 |
* 1) for code that a licensee deletes from the ECC Code;
|
|
|
240 |
* 2) separates from the ECC Code; or
|
|
|
241 |
* 3) for infringements caused by:
|
|
|
242 |
* i) the modification of the ECC Code or
|
|
|
243 |
* ii) the combination of the ECC Code with other software or
|
|
|
244 |
* devices where such combination causes the infringement.
|
|
|
245 |
*
|
|
|
246 |
* The software is originally written by Sheueling Chang Shantz and
|
|
|
247 |
* Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
248 |
* NOTE: This file is licensed pursuant to the OpenSSL license below and may
|
|
|
249 |
* be modified; but after modifications, the above covenant may no longer
|
|
|
250 |
* apply! In such cases, the corresponding paragraph ["In addition, Sun
|
|
|
251 |
* covenants ... causes the infringement."] and this note can be edited out;
|
|
|
252 |
* but please keep the Sun copyright notice and attribution.
|
|
|
253 |
*/
|
|
|
254 |
* Invert a, reduce modulo p, and store the result in r. r could be a. Uses
|
|
|
255 |
* Modified Almost Inverse Algorithm (Algorithm 10) from Hankerson, D.,
|
|
|
256 |
* Hernandez, J.L., and Menezes, A. "Software Implementation of Elliptic
|
|
|
257 |
* Curve Cryptography Over Binary Fields".
|
|
|
258 |
|
|
|
259 |
* From "Message Authentication" R.R. Jueneman, S.M. Matyas, C.H. Meyer IEEE
|
|
|
260 |
* Communications Magazine Sept 1985 Vol. 23 No. 9 p 29-40 This module in
|
|
|
261 |
* only based on the code in this paper and is almost definitely not the sam e
|
|
|
262 |
* as the MIT implementation.
|
|
|
263 |
/* @(#)des.h 2.2 88/08/10 4.0 RPCSRC; from 2.7 88/02/08 SMI */
|
|
|
264 |
/*
|
|
|
265 |
* Sun RPC is a product of Sun Microsystems, Inc. and is provided for
|
|
|
266 |
* unrestricted use provided that this legend is included on all tape
|
|
|
267 |
* media and as a part of the software program in whole or part. Users
|
|
|
268 |
* may copy or modify Sun RPC without charge, but are not authorized
|
|
|
269 |
* to license or distribute it to anyone else except as part of a product or
|
|
|
270 |
* program developed by the user.
|
|
|
271 |
*
|
|
|
272 |
* SUN RPC IS PROVIDED AS IS WITH NO WARRANTIES OF ANY KIND INCLUDING THE
|
|
|
273 |
* WARRANTIES OF DESIGN, MERCHANTIBILITY AND FITNESS FOR A PARTICULAR
|
|
|
274 |
* PURPOSE, OR ARISING FROM A COURSE OF DEALING, USAGE OR TRADE PRACTICE.
|
|
|
275 |
*
|
|
|
276 |
* Sun RPC is provided with no support and without any obligation on the
|
|
|
277 |
* part of Sun Microsystems, Inc. to assist in its use, correction,
|
|
|
278 |
* modification or enhancement.
|
|
|
279 |
*
|
|
|
280 |
* SUN MICROSYSTEMS, INC. SHALL HAVE NO LIABILITY WITH RESPECT TO THE
|
|
|
281 |
* INFRINGEMENT OF COPYRIGHTS, TRADE SECRETS OR ANY PATENTS BY SUN RPC
|
|
|
282 |
* OR ANY PART THEREOF.
|
|
|
283 |
*
|
|
|
284 |
* In no event will Sun Microsystems, Inc. be liable for any lost revenue
|
|
|
285 |
* or profits or other special, indirect and consequential damages, even if
|
|
|
286 |
* Sun has been advised of the possibility of such damages.
|
|
|
287 |
*
|
|
|
288 |
* Sun Microsystems, Inc.
|
|
|
289 |
* 2550 Garcia Avenue
|
|
|
290 |
* Mountain View, California 94043
|
|
|
291 |
*/
|
|
|
292 |
/*
|
|
|
293 |
* Generic DES driver interface
|
|
|
294 |
* Keep this file hardware independent!
|
|
|
295 |
* Copyright (c) 1986 by Sun Microsystems, Inc.
|
|
|
296 |
*/
|
|
|
297 |
/* Original version from Steven Schoch <[email protected]> */
|
|
|
298 |
|
|
|
299 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
300 |
* ECDH support in OpenSSL originally developed by
|
|
|
301 |
* SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project.
|
|
|
302 |
*/
|
|
|
303 |
|
|
|
304 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
305 |
*
|
|
|
306 |
* The Elliptic Curve Public-Key Crypto Library (ECC Code) included
|
|
|
307 |
* herein is developed by SUN MICROSYSTEMS, INC., and is contributed
|
|
|
308 |
* to the OpenSSL project.
|
|
|
309 |
*
|
|
|
310 |
* The ECC Code is licensed pursuant to the OpenSSL open source
|
|
|
311 |
* license provided below.
|
|
|
312 |
*
|
|
|
313 |
* The software is originally written by Sheueling Chang Shantz and
|
|
|
314 |
* Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
315 |
*
|
|
|
316 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
317 |
*
|
|
|
318 |
* The Elliptic Curve Public-Key Crypto Library (ECC Code) included
|
|
|
319 |
* herein is developed by SUN MICROSYSTEMS, INC., and is contributed
|
|
|
320 |
* to the OpenSSL project.
|
|
|
321 |
*
|
|
|
322 |
* The ECC Code is licensed pursuant to the OpenSSL open source
|
|
|
323 |
* license provided below.
|
|
|
324 |
*
|
|
|
325 |
* The software is originally written by Sheueling Chang Shantz and
|
|
|
326 |
* Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
327 |
*
|
|
|
328 |
*/
|
|
|
329 |
|
|
|
330 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
331 |
* Portions originally developed by SUN MICROSYSTEMS, INC., and
|
|
|
332 |
* contributed to the OpenSSL project.
|
|
|
333 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
334 |
*
|
|
|
335 |
* Portions of the attached software ("Contribution") are developed by
|
|
|
336 |
* SUN MICROSYSTEMS, INC., and are contributed to the OpenSSL project.
|
|
|
337 |
*
|
|
|
338 |
* The Contribution is licensed pursuant to the OpenSSL open source
|
|
|
339 |
* license provided above.
|
|
|
340 |
*
|
|
|
341 |
* The elliptic curve binary polynomial software is originally written by
|
|
|
342 |
* Sheueling Chang Shantz and Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
343 |
|
|
|
344 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
345 |
* Portions of this software developed by SUN MICROSYSTEMS, INC.,
|
|
|
346 |
* and contributed to the OpenSSL project.
|
|
|
347 |
*/
|
|
|
348 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
349 |
*
|
|
|
350 |
* The Elliptic Curve Public-Key Crypto Library (ECC Code) included
|
|
|
351 |
* herein is developed by SUN MICROSYSTEMS, INC., and is contributed
|
|
|
352 |
* to the OpenSSL project.
|
|
|
353 |
*
|
|
|
354 |
* The ECC Code is licensed pursuant to the OpenSSL open source
|
|
|
355 |
* license provided below.
|
|
|
356 |
*
|
|
|
357 |
* The ECDH software is originally written by Douglas Stebila of
|
|
|
358 |
* Sun Microsystems Laboratories.
|
|
|
359 |
*
|
|
|
360 |
*/
|
|
|
361 |
* Copyright (c) 2002 Bob Beck <[email protected]>
|
|
|
362 |
* Copyright (c) 2002 Theo de Raadt
|
|
|
363 |
* Copyright (c) 2002 Markus Friedl
|
|
|
364 |
* All rights reserved.
|
|
|
365 |
*
|
|
|
366 |
* Redistribution and use in source and binary forms, with or without
|
|
|
367 |
* modification, are permitted provided that the following conditions
|
|
|
368 |
* are met:
|
|
|
369 |
* 1. Redistributions of source code must retain the above copyright
|
|
|
370 |
* notice, this list of conditions and the following disclaimer.
|
|
|
371 |
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
372 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
373 |
* documentation and/or other materials provided with the distribution.
|
|
|
374 |
*
|
|
|
375 |
* THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY
|
|
|
376 |
* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
|
|
|
377 |
* WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
|
378 |
* DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE FOR ANY
|
|
|
379 |
* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
|
380 |
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
|
381 |
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
|
|
|
382 |
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
|
|
383 |
* (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
|
|
|
384 |
* THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
385 |
*
|
|
|
386 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
387 |
* ECDH support in OpenSSL originally developed by
|
|
|
388 |
* SUN MICROSYSTEMS, INC., and contributed to the OpenSSL project.
|
|
|
389 |
* Copyright 2002 Sun Microsystems, Inc. ALL RIGHTS RESERVED.
|
|
|
390 |
*
|
|
|
391 |
* The Elliptic Curve Public-Key Crypto Library (ECC Code) included
|
|
|
392 |
* herein is developed by SUN MICROSYSTEMS, INC., and is contributed
|
|
|
393 |
* to the OpenSSL project.
|
|
|
394 |
*
|
|
|
395 |
* The ECC Code is licensed pursuant to the OpenSSL open source
|
|
|
396 |
* license provided below.
|
|
|
397 |
*
|
|
|
398 |
* The ECDH engine software is originally written by Nils Gura and
|
|
|
399 |
* Douglas Stebila of Sun Microsystems Laboratories.
|
|
|
400 |
*
|
|
|
401 |
* symbol names have been changed, with permission from the author.
|
|
|
402 |
*/
|
|
|
403 |
|
|
|
404 |
/* $LP: LPlib/source/LPdir.h,v 1.1 2004/06/14 08:56:04 _cvs_levitte Exp $ */
|
|
|
405 |
/*
|
|
|
406 |
* Copyright (c) 2004, Richard Levitte <[email protected]>
|
|
|
407 |
* All rights reserved.
|
|
|
408 |
*
|
|
|
409 |
* Redistribution and use in source and binary forms, with or without
|
|
|
410 |
* modification, are permitted provided that the following conditions
|
|
|
411 |
* are met:
|
|
|
412 |
* 1. Redistributions of source code must retain the above copyright
|
|
|
413 |
* notice, this list of conditions and the following disclaimer.
|
|
|
414 |
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
415 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
416 |
* documentation and/or other materials provided with the distribution.
|
|
|
417 |
*
|
|
|
418 |
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
|
|
|
419 |
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
420 |
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
421 |
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
|
|
|
422 |
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
423 |
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
424 |
--
|
|
|
425 |
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
426 |
* SUCH DAMAGE.
|
|
|
427 |
*/
|
|
|
428 |
|
|
|
429 |
--
|
|
|
430 |
* http://developer.intel.com/design/security/rng/redist_license.htm
|
|
|
431 |
*/
|
|
|
432 |
* This seeding method was proposed in Peter Gutmann, Software
|
|
|
433 |
* Generation of Practically Strong Random Numbers,
|
|
|
434 |
* http://www.usenix.org/publications/library/proceedings/sec98/gutmann.html
|
|
|
435 |
* revised version at http://www.cryptoengines.com/~peter/06_random.pdf
|
|
|
436 |
* (The assignment of entropy estimates below is arbitrary, but based
|
|
|
437 |
* on Peter's analysis the full poll appears to be safe. Additional
|
|
|
438 |
* interactive seeding is encouraged.)
|
|
|
439 |
--
|
|
|
440 |
* the original copyright message is:
|
|
|
441 |
*
|
|
|
442 |
* (C) Copyright Microsoft Corp. 1993. All rights reserved.
|
|
|
443 |
*
|
|
|
444 |
* You have a royalty-free right to use, modify, reproduce and
|
|
|
445 |
* distribute the Sample Files (and/or any modified version) in
|
|
|
446 |
* any way you find useful, provided that you agree that
|
|
|
447 |
* Microsoft has no warranty obligations or liability for any
|
|
|
448 |
* Sample Application Files which are modified.
|
|
|
449 |
* Written by Ulf Moeller. This software is distributed on an "AS IS" basis,
|
|
|
450 |
* WITHOUT WARRANTY OF ANY KIND, either express or implied.
|
|
|
451 |
*/
|
|
|
452 |
/* EME-OAEP as defined in RFC 2437 (PKCS #1 v2.0) */
|
|
|
453 |
|
|
|
454 |
/* Copyright (c) 2004 Kungliga Tekniska Högskolan
|
|
|
455 |
* (Royal Institute of Technology, Stockholm, Sweden).
|
|
|
456 |
* All rights reserved.
|
|
|
457 |
*
|
|
|
458 |
* Redistribution and use in source and binary forms, with or without
|
|
|
459 |
* modification, are permitted provided that the following conditions
|
|
|
460 |
--
|
|
|
461 |
* 1. Redistributions of source code must retain the above copyright
|
|
|
462 |
* notice, this list of conditions and the following disclaimer.
|
|
|
463 |
*
|
|
|
464 |
* 2. Redistributions in binary form must reproduce the above copyright
|
|
|
465 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
466 |
* documentation and/or other materials provided with the distribution.
|
|
|
467 |
*
|
|
|
468 |
* 3. Neither the name of the Institute nor the names of its contributors
|
|
|
469 |
* may be used to endorse or promote products derived from this software
|
|
|
470 |
* without specific prior written permission.
|
|
|
471 |
*
|
|
|
472 |
* THIS SOFTWARE IS PROVIDED BY THE INSTITUTE AND CONTRIBUTORS ``AS IS'' AND
|
|
|
473 |
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
|
474 |
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
|
475 |
* ARE DISCLAIMED. IN NO EVENT SHALL THE INSTITUTE OR CONTRIBUTORS BE LIABLE
|
|
|
476 |
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
|
477 |
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
|
478 |
--
|
|
|
479 |
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
|
480 |
* SUCH DAMAGE.
|
|
|
481 |
*/
|
|
|
482 |
/* Calaculates and sets the affine coordinates of an EC_POINT from the given
|
|
|
483 |
* compressed coordinates. Uses algorithm 2.3.4 of SEC 1.
|
|
|
484 |
* Note that the simple implementation only uses affine coordinates.
|
|
|
485 |
*
|
|
|
486 |
* This algorithm is patented by Certicom Corp. under US Patent 6,141,420
|
|
|
487 |
* (for licensing information, contact [email protected]).
|
|
|
488 |
* This function is disabled by default and can be enabled by defining the
|
|
|
489 |
* preprocessor macro OPENSSL_EC_BIN_PT_COMP at Configure-time.
|
|
|
490 |
*/
|
|
|
491 |
|
|
|
492 |
./crypt_blowfish.c:
|
|
|
493 |
* Written by Solar Designer <solar at openwall.com> in 1998-2011.
|
|
|
494 |
* No copyright is claimed, and the software is hereby placed in the public
|
|
|
495 |
* domain. In case this attempt to disclaim copyright and place the software
|
|
|
496 |
* in the public domain is deemed null and void, then the software is
|
|
|
497 |
* Copyright (c) 1998-2011 Solar Designer and it is hereby released to the
|
|
|
498 |
* general public under the following terms:
|
|
|
499 |
*
|
|
|
500 |
* Redistribution and use in source and binary forms, with or without
|
|
|
501 |
* modification, are permitted.
|
|
|
502 |
*
|
|
|
503 |
--
|
|
|
504 |
* as part of a software package, or anywhere else to improve security,
|
|
|
505 |
* ensure compatibility, or for any other purpose. I would appreciate
|
|
|
506 |
* it if you give credit where it is due and keep your modifications in
|
|
|
507 |
* the public domain as well, but I don't require that in order to let
|
|
|
508 |
* you place this code and any modifications you make under a license
|
|
|
509 |
* of your choice.
|
|
|
510 |
*
|
|
|
511 |
* This implementation is mostly compatible with OpenBSD's bcrypt.c (prefix
|
|
|
512 |
* "$2a$") by Niels Provos <provos at citi.umich.edu>, and uses some of his
|
|
|
513 |
* ideas. The password hashing algorithm was designed by David Mazieres
|
|
|
514 |
|
|
|
515 |
./crypt_blowfish.h:
|
|
|
516 |
* Written by Solar Designer <solar at openwall.com> in 2000-2011.
|
|
|
517 |
* No copyright is claimed, and the software is hereby placed in the public
|
|
|
518 |
* domain. In case this attempt to disclaim copyright and place the software
|
|
|
519 |
* in the public domain is deemed null and void, then the software is
|
|
|
520 |
* Copyright (c) 2000-2011 Solar Designer and it is hereby released to the
|
|
|
521 |
* general public under the following terms:
|
|
|
522 |
*
|
|
|
523 |
* Redistribution and use in source and binary forms, with or without
|
|
|
524 |
* modification, are permitted.
|
|
|
525 |
*
|
|
|
526 |
|
|
|
527 |
|
|
|
528 |
./fallback.c:
|
|
|
529 |
* Copyright 2012-2013 Red Hat, Inc.
|
|
|
530 |
* All rights reserved.
|
|
|
531 |
*
|
|
|
532 |
* See "COPYING" for license terms.
|
|
|
533 |
*
|
|
|
534 |
* Author(s): Peter Jones <[email protected]>
|
|
|
535 |
*/
|
|
|
536 |
|
|
|
537 |
|
|
|
538 |
./include/PeImage.h:
|
|
|
539 |
Copyright (c) 2006 - 2010, Intel Corporation. All rights reserved.<BR>
|
|
|
540 |
Portions copyright (c) 2008 - 2009, Apple Inc. All rights reserved.<BR>
|
|
|
541 |
This program and the accompanying materials
|
|
|
542 |
are licensed and made available under the terms and conditions of the BSD License
|
|
|
543 |
which accompanies this distribution. The full text of the license may be found at
|
|
|
544 |
http://opensource.org/licenses/bsd-license.php.
|
|
|
545 |
|
|
|
546 |
THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
|
547 |
WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
|
548 |
|
|
|
549 |
|
|
|
550 |
./lib/configtable.c:
|
|
|
551 |
* Copyright 2013 <[email protected]>
|
|
|
552 |
*
|
|
|
553 |
* see COPYING file
|
|
|
554 |
*
|
|
|
555 |
|
|
|
556 |
|
|
|
557 |
./lib/console.c:
|
|
|
558 |
* Copyright 2012 <[email protected]>
|
|
|
559 |
* Copyright 2013 Red Hat Inc. <[email protected]>
|
|
|
560 |
*
|
|
|
561 |
* see COPYING file
|
|
|
562 |
*/
|
|
|
563 |
|
|
|
564 |
|
|
|
565 |
./lib/execute.c:
|
|
|
566 |
* Copyright 2012 <[email protected]>
|
|
|
567 |
*
|
|
|
568 |
* see COPYING file
|
|
|
569 |
* Code Copyright 2012 Red Hat, Inc <[email protected]>
|
|
|
570 |
*
|
|
|
571 |
* Redistribution and use in source and binary forms, with or without
|
|
|
572 |
* modification, are permitted provided that the following conditions
|
|
|
573 |
* are met:
|
|
|
574 |
*
|
|
|
575 |
* Redistributions of source code must retain the above copyright
|
|
|
576 |
* notice, this list of conditions and the following disclaimer.
|
|
|
577 |
*
|
|
|
578 |
* Redistributions in binary form must reproduce the above copyright
|
|
|
579 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
580 |
* documentation and/or other materials provided with the
|
|
|
581 |
* distribution.
|
|
|
582 |
*
|
|
|
583 |
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
|
584 |
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
|
585 |
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
|
586 |
* FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
|
|
587 |
* COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
|
|
|
588 |
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
|
589 |
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
|
590 |
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
591 |
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
|
592 |
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
|
593 |
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
|
594 |
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
595 |
*
|
|
|
596 |
*/
|
|
|
597 |
|
|
|
598 |
|
|
|
599 |
./lib/guid.c:
|
|
|
600 |
./lib/security_policy.c:
|
|
|
601 |
./lib/shell.c:
|
|
|
602 |
./lib/simple_file.c:
|
|
|
603 |
* Copyright 2012 <[email protected]>
|
|
|
604 |
*
|
|
|
605 |
* see COPYING file
|
|
|
606 |
*/
|
|
|
607 |
|
|
|
608 |
|
|
|
609 |
./lib/variables.c:
|
|
|
610 |
* Copyright 2012 <[email protected]>
|
|
|
611 |
*
|
|
|
612 |
* see COPYING file
|
|
|
613 |
*
|
|
|
614 |
--
|
|
|
615 |
* Copyright (c) 2011 - 2012, Intel Corporation. All rights reserved.<BR>
|
|
|
616 |
* This program and the accompanying materials
|
|
|
617 |
* are licensed and made available under the terms and conditions of the BSD License
|
|
|
618 |
* which accompanies this distribution. The full text of the license may be found
|
|
|
619 |
* at
|
|
|
620 |
* http://opensource.org/licenses/bsd-license.php
|
|
|
621 |
*
|
|
|
622 |
* THE PROGRAM IS DISTRIBUTED UNDER THE BSD LICENSE ON AN "AS IS" BASIS,
|
|
|
623 |
* WITHOUT WARRANTIES OR REPRESENTATIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED.
|
|
|
624 |
|
|
|
625 |
|
|
|
626 |
./replacements.h:
|
|
|
627 |
* Copyright 2013 Red Hat, Inc <[email protected]>
|
|
|
628 |
*
|
|
|
629 |
* Redistribution and use in source and binary forms, with or without
|
|
|
630 |
* modification, are permitted provided that the following conditions
|
|
|
631 |
* are met:
|
|
|
632 |
*
|
|
|
633 |
* Redistributions of source code must retain the above copyright
|
|
|
634 |
* notice, this list of conditions and the following disclaimer.
|
|
|
635 |
*
|
|
|
636 |
* Redistributions in binary form must reproduce the above copyright
|
|
|
637 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
638 |
* documentation and/or other materials provided with the
|
|
|
639 |
* distribution.
|
|
|
640 |
*
|
|
|
641 |
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
|
642 |
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
|
643 |
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
|
644 |
* FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
|
|
645 |
* COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
|
|
|
646 |
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
|
647 |
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
|
648 |
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
649 |
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
|
650 |
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
|
651 |
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
|
652 |
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
653 |
*/
|
|
|
654 |
|
|
|
655 |
./ucs2.h:
|
|
|
656 |
* Copyright 2013 Red Hat, Inc <[email protected]>
|
|
|
657 |
*
|
|
|
658 |
* Redistribution and use in source and binary forms, with or without
|
|
|
659 |
* modification, are permitted provided that the following conditions
|
|
|
660 |
* are met:
|
|
|
661 |
*
|
|
|
662 |
* Redistributions of source code must retain the above copyright
|
|
|
663 |
* notice, this list of conditions and the following disclaimer.
|
|
|
664 |
*
|
|
|
665 |
* Redistributions in binary form must reproduce the above copyright
|
|
|
666 |
* notice, this list of conditions and the following disclaimer in the
|
|
|
667 |
* documentation and/or other materials provided with the
|
|
|
668 |
* distribution.
|
|
|
669 |
*
|
|
|
670 |
* THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
|
|
671 |
* "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
|
|
672 |
* LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
|
673 |
* FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
|
|
|
674 |
* COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
|
|
|
675 |
* INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
|
|
|
676 |
* (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
|
|
|
677 |
* SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
|
678 |
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
|
679 |
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
|
680 |
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
|
681 |
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
682 |
*
|
|
|
683 |
* Significant portions of this code are derived from Tianocore
|
|
|
684 |
* (http://tianocore.sf.net) and are Copyright 2009-2012 Intel
|
|
|
685 |
* Corporation.
|
|
|
686 |
*/
|
|
|
687 |
|
|
|
688 |
|
|
|
689 |
The Certificate is issued to Oracle Corporation: https://www.digicert.com/ssl-cps-repository.htm
|
|
|
690 |
This certificate is intended for the following purpose(s):
|
|
|
691 |
Ensures software came from software publisher
|
|
|
692 |
Protects software from alteration after publication
|
|
|
693 |
2.16.840.1.114412.3.2
|
|
|
694 |
Issued to: Oracle Corporation
|
|
|
695 |
Issued by: DigiCert EV Code Signing CA (SHA2)
|
|
|
696 |
Valid from 6/25/2014 to 6/30/2017
|
|
|
697 |
|
|
|
698 |
|
|
|
699 |
DigiCert Certificate Terms of Use
|
|
|
700 |
|
|
|
701 |
These terms apply to each digital certificate (Certificate) issued by DigiCert, Inc., a Utah corporation (DigiCert) to an entity, as identified in the account or issued certificates (Customer). Customer and DigiCert agree as follows:
|
|
|
702 |
|
|
|
703 |
Requests. Customer may request SSL Certificates only for domain names registered to Customer, an affiliate of Customer, or an entity that expressly authorizes DigiCert to allow Customer to obtain and manage Certificates for the domain name. DigiCert may limit the number of domain names that Customer may include in a single Certificate in its sole discretion.
|
|
|
704 |
|
|
|
705 |
Verification. After receiving a request for a Certificate through the Account, DigiCert will review the request and attempt to verify the relevant information in accordance with the DigiCert CPS and industry guidelines. Verification is subject to DigiCerts sole satisfaction, and DigiCert may refuse to issue a Certificate for any reason. DigiCert shall notify Customer if a certificate request is refused and provide a reason for the refusal. Certificate Practices Statement or CPS means DigiCerts written statement of the policies and practices used to operate its PKI infrastructure. DigiCerts CPS documents are available at https://www.digicert.com/ssl-cps-repository.htm.
|
|
|
706 |
|
|
|
707 |
Certificate Life Cycle. The lifecycle of an issued Certificate depends on the selection made by Customer when ordering the Certificate, the requirements in the CPS, and the intended use of the Certificate. DigiCert may modify Certificate lifecycles for unissued Certificates as necessary to comply with requirements of (i) the agreement with Customer, (ii) industry standards, (iii) DigiCerts auditors, or (iv) an Application Software Vendor. Customer shall not use Certificates after their expiration date. Application Software Vendors means an entity that displays or uses Certificates in connection with a distributed root store in which DigiCert participates or will participate. Certificates containing internal server names or private IP addresses must expire on or before Nov 1, 2015.
|
|
|
708 |
|
|
|
709 |
Issuance. If verification is completed to DigiCerts satisfaction, DigiCert will issue the requested Certificate and deliver the Certificate to Customer. DigiCert may deliver the Certificate using any reasonable means of delivery. Typically, DigiCert will deliver Certificates via email to an address specified by Customer, as an electronic download in the Account, or in response to an API call made by Customer. Certificates are issued from a DigiCert root or intermediate certificate selected by DigiCert. Customer shall abide by all applicable laws and regulations when ordering and using Certificates, including United States export laws. Customer is responsible for obtaining and maintaining any license necessary to distribute the Certificates to end users and systems. Customer acknowledges that the Certificates are not available in countries restricted by the Office of Foreign Assets Control.
|
|
|
710 |
|
|
|
711 |
Certificate License. Effective immediately after delivery and continuing until the Certificate expires or is revoked, Customer may use, for the benefit of the Certificates subject, each issued Certificate and corresponding Key Set for the purposes described in the CPS, in accordance with all applicable laws, and in accordance with terms herein. Customer shall promptly inform DigiCert if it becomes aware of any misuse of a Certificate, private key, or the Account. Customer is responsible for obtaining and maintaining any authorization or license necessary to use a Certificate, including any license required under United States export laws.
|
|
|
712 |
|
|
|
713 |
Management. DigiCert will generally issue, manage, renew, and/or Revoke a Certificate in accordance with any instructions submitted by Customer through the Account or API and may rely on such instructions as accurate. Although DigiCert may send a reminder about expiring Certificates, DigiCert is under no obligation to do so, and Customer is solely responsible for ensuring Certificates are renewed prior to expiration.
|
|
|
714 |
|
|
|
715 |
Security and Use of Key Sets. Customer shall protect the key sets associated with a Certificate and take all steps necessary to prevent the compromise, loss or unauthorized use of a private key associated with a Certificate. Customer shall request revocation of any Certificate if Customer has reason to believe that the integrity or reliability of a Certificate is compromised. If Customer suspects misuse or compromise of a private key, Customer shall promptly notify DigiCert, cease using the Certificate, and request revocation of the Certificate. Customer shall promptly cease using the key set corresponding to a Certificate upon the earlier of (i) revocation of the Certificate and (ii) the date when the allowed usage period for the Key Set expires.
|
|
|
716 |
|
|
|
717 |
Defective Certificates. If a Certificate contains a defect, DigiCert shall use commercially reasonable efforts to cure the defect after receiving notice from Customer. DigiCert is not obligated to correct a defect if (i) Customer misused, damaged, or modified the Certificate, (ii) Customer did not promptly report the defect to DigiCert, or (iii) Customer has breached any provision of this Agreement.
|
|
|
718 |
|
|
|
719 |
Relying Party Warranty. Customer acknowledges that the Relying Party Warranty is only for the benefit of Relying Parties. Customer does not have rights under the warranty, including any right to enforce the terms of the warranty or make a claim under the warranty. Relying Party means an entity other than Customer that acts in reliance on a Certificate or a digital signature. An Application Software Vendor is not a Relying Party when the software distributed by the Application Software Vendor merely displays information regarding a Certificate or facilitates the use of the Certificate or digital signature. Relying Party Warranty means a warranty offered to a Relying Party that meets the conditions found in the Relying Party Warranty Agreement posted on DigiCerts website at https://www.digicert.com/docs/agreements/DigiCert_RPA.pdf.
|
|
|
720 |
|
|
|
721 |
Representations. For each requested Certificate, Customer represents to DigiCert that:
|
|
|
722 |
|
|
|
723 |
Customer has the right to use or is the lawful owner of (i) any domain name(s) specified in the Certificate and (ii) any common name or organization name specified in the Certificate,
|
|
|
724 |
|
|
|
725 |
the individual accepting the agreement is expressly authorized by the Customer to sign and enter into a legally valid and enforceable agreement to obtain a form of digital identity for the Customer,
|
|
|
726 |
|
|
|
727 |
Customer has read, understands, and agrees to the CPS, and
|
|
|
728 |
|
|
|
729 |
the organization included in the certificate and the registered domain name holder is aware of and approves of each Certificate request.
|
|
|
730 |
|
|
|
731 |
By accepting an agreement that incorporates these terms, the signer is entering into a legally valid and enforceable agreement to obtain a form of digital identity for the Customer. The signer acknowledges that he/she has the authority to obtain the digital equivalent of a company stamp, seal, or officer's signature to establish the authenticity of the Customers website, and that the Customer is responsible for all uses of an Certificate. By accepting an agreement on behalf of the Customer, the signer represents that he/she (i) is acting as an authorized representative of the Customer, (ii) is expressly authorized by Customer to sign agreements and approve Certificate requests on Customers behalf, and (iii) has or will confirm Customers exclusive right to use the domain(s) to be included in any issued Certificates.
|
|
|
732 |
|
|
|
733 |
Restrictions. Customer shall only use a TLS/SSL Certificate on the servers accessible at the domain names listed in the issued Certificate. Customer shall not:
|
|
|
734 |
|
|
|
735 |
modify, sub license, or create a derivative work of any Certificate (except as required to use the Certificate for its intended purpose) or Private Key,
|
|
|
736 |
|
|
|
737 |
upload or distribute any files or software that may damage the operation of anothers computer,
|
|
|
738 |
|
|
|
739 |
make representations about or use a Certificate except as allowed in the CPS,
|
|
|
740 |
|
|
|
741 |
impersonate or misrepresent Customers affiliation with any entity,
|
|
|
742 |
|
|
|
743 |
use the Certificates or any related software (such as a DigiCert account) in a manner that could reasonably result in a civil or criminal action being taken against Customer or DigiCert,
|
|
|
744 |
|
|
|
745 |
use a Certificate or related software to breach the confidence of a third party or to send or receive unsolicited bulk correspondence,
|
|
|
746 |
|
|
|
747 |
interfere with the proper functioning of the DigiCert website or with any transactions conducted through the DigiCert website,
|
|
|
748 |
|
|
|
749 |
attempt to use a Certificate to issue other Certificates, or
|
|
|
750 |
|
|
|
751 |
intentionally create a private key that is substantially similar to a DigiCert or third party private key.
|
|
|
752 |
|
|
|
753 |
Certificate Revocation. DigiCert may revoke a Certificate without notice for the reasons stated in the CPS, including if DigiCert reasonably believes that:
|
|
|
754 |
|
|
|
755 |
Customer requested revocation of the Certificate or did not authorize the issuance of the Certificate,
|
|
|
756 |
|
|
|
757 |
Customer has breached its agreement or an obligation it has under the CPS,
|
|
|
758 |
|
|
|
759 |
any provision of the agreement with customer containing a representation or obligation related to the issuance, use, management, or revocation of the Certificate terminates or is held invalid,
|
|
|
760 |
|
|
|
761 |
Customer is added to a government prohibited person or entity list or is operating from a prohibited destination under the laws of the United States,
|
|
|
762 |
|
|
|
763 |
the Certificate contains inaccurate or misleading information,
|
|
|
764 |
|
|
|
765 |
the Certificate was used outside of its intended purpose or used to sign malicious software,
|
|
|
766 |
|
|
|
767 |
the private key associated with a Certificate was disclosed or compromised,
|
|
|
768 |
|
|
|
769 |
the Certificate was(a) misused, (b) used or issued contrary to law, the CPS, or industry standards, or (c) used, directly or indirectly, for illegal or fraudulent purposes,
|
|
|
770 |
|
|
|
771 |
industry standards or DigiCerts CPS require Certificate revocation, or
|
|
|
772 |
|
|
|
773 |
revocation is necessary to protect the rights, confidential information, operations, or reputation of DigiCert or a third party.
|
|
|
774 |
|
|
|
775 |
After revocation, Customer shall cease using the Certificate and remove the Certificate from all devices where it is installed and cease using the Certificate.
|
|
|
776 |
|
|
|
777 |
Industry Standards. Both parties shall comply with all industry and privacy standards that apply to the Certificates. If industry standards change, DigiCert and Customer shall work together in good faith to amend the applicable agreement, modify issued certificates, and comply with the changes.
|
|
|
778 |
|
|
|
779 |
Equipment. Customer is responsible, at Customers expense, for (i) all computers, telecommunication equipment, software, access to the Internet, and communications networks (if any) required to use the Certificates and related DigiCert software or services, and (ii) Customers conduct and its website maintenance, operation, development, and content.
|
|
|
780 |
|
|
|
781 |
Certificate Beneficiaries. Relying parties and Application Software Vendors are express third party beneficiaries of Customers obligations and representations related to the use or issuance of a Certificate. The relying parties and Application Software Vendors are not express third party beneficiaries with respect to any DigiCert software.
|
|
|
782 |
|
|
|
783 |
|
|
|
784 |
DIGICERT CERTIFICATE SUBSCRIBER AGREEMENT
|
|
|
785 |
|
|
|
786 |
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE PROCEEDING. YOU MUST CHECK "I AGREE"
|
|
|
787 |
BELOW TO ACKNOWLEDGE THAT YOU HAVE READ THIS AGREEMENT, THAT YOU UNDERSTAND IT,
|
|
|
788 |
AND THAT YOU AGREE TO IT. IF YOU DO NOT ACCEPT THIS AGREEMENT, DO NOT ORDER OR
|
|
|
789 |
APPROVE THE ISSUANCE OF A DIGITAL CERTIFICATE. IF YOU HAVE ANY QUESTIONS REGARDING
|
|
|
790 |
THIS AGREEMENT, PLEASE E-MAIL DIGICERT AT [email protected] OR CALL 1-800-896-7973.
|
|
|
791 |
THIS AGREEMENT CONTAINS A BINDING ARBITRATION CLAUSE.
|
|
|
792 |
|
|
|
793 |
These certificate terms of use are between DigiCert, Inc., a Utah corporation (DigiCert) and the entity
|
|
|
794 |
applying for a Certificate, as identified in the account or issued certificates. Certificate means a digitally
|
|
|
795 |
signed electronic data file issued by DigiCert to a person, group, or role in order to confirm your authorization
|
|
|
796 |
for use of the Private Key corresponding to the Public Key contained in the certificate. You and DigiCert agree
|
|
|
797 |
as follows:
|
|
|
798 |
|
|
|
799 |
1. Use
|
|
|
800 |
1.1. Applicability. These terms cover each Certificate issued by DigiCert to you, regardless of (i) the
|
|
|
801 |
Certificate type (email, code signing, Direct, or TLS/SSL), (ii) when you request the Certificate, or
|
|
|
802 |
(iii) when the Certificate actually issues.
|
|
|
803 |
1.2. Information. You will provide accurate, complete, and non-misleading information to DigiCert at
|
|
|
804 |
all times. If any information provided to DigiCert changes or becomes misleading or inaccurate,
|
|
|
805 |
you will promptly inform DigiCert and update the information. You may not request a certificate
|
|
|
806 |
with contents that infringe on the intellectual property rights of another entity. All certificate
|
|
|
807 |
request data is incorporated into this document as part of these terms.
|
|
|
808 |
1.3. Key Pairs. A Private Key means the key that is kept secret by you that is used to create Digital
|
|
|
809 |
Signatures and/or decrypt electronic records or files that were encrypted with the
|
|
|
810 |
corresponding Public Key. A Public Key means your publically disclosed key that is contained
|
|
|
811 |
in your Certificate and corresponds to the secret Private Key that you use. Subscribers should (i)
|
|
|
812 |
generate key pairs using trustworthy systems, (ii) use key pairs that are at least the equivalent of
|
|
|
813 |
RSA 2048 bit keys, (iii) keep all Private Keys confidential, (iv) within one working day, notify
|
|
|
814 |
DigiCert, cease using the Certificate, and request Certificate revocation if you suspect misuse or
|
|
|
815 |
compromise of a Private Key, and use reasonable measures to protect Private Keys from
|
|
|
816 |
disclosure. You will promptly cease using the Certificate and corresponding Private Key upon the
|
|
|
817 |
earlier of (i) revocation of the Certificate, (ii) termination of this agreement, (iii) expiration of the
|
|
|
818 |
Certificate, or (iv) industry standards no longer permit use of the Certificate or Private Key. You
|
|
|
819 |
are solely responsible for any failure to protect your Private Keys. You may only generate and
|
|
|
820 |
store key pairs for Adobe Signing Certificates and EV Code Signing Certificates on a FIPS 140-2
|
|
|
821 |
Level 2 device. All other Certificate types may be stored on secure software or hardware systems.
|
|
|
822 |
1.4. Issuance. After you request a Certificate, DigiCert will verify an entity in accordance with
|
|
|
823 |
DigiCerts CPS and applicable industry standards. If verification is completed to DigiCerts sole
|
|
|
824 |
satisfaction, then DigiCert will issue the requested Certificate and deliver the Certificate to you
|
|
|
825 |
using an appropriate delivery mechanism as selected by DigiCert. Typically, DigiCert delivers
|
|
|
826 |
Certificates either through your online DigiCert account or via a provided email address. DigiCert
|
|
|
827 |
may refuse to accept a Certificate request or issue a Certificate in its sole discretion. DigiCert will
|
|
|
828 |
notify you through the account if your request is refused but DigiCert is not required to provide a
|
|
|
829 |
reason for the refusal.
|
|
|
830 |
1.5. IGTF Certificates. The following applies to IGTF Certificates:
|
|
|
831 |
(i) Private Key Generation. For IGTF compliant Certificates, you must keep all Private Keys
|
|
|
832 |
confidential and use reasonable measures to protect the Private Key from disclosure. You
|
|
|
833 |
must request revocation of the Certificate within one working day of any suspected misuse
|
|
|
834 |
or compromise of a Certificate or Private Key. You must generate your key pair using one of
|
|
|
835 |
the following methods: (i) inside a secure hardware token, (ii) using trustworthy
|
|
|
836 |
cryptographic software on a local computer system where you are the sole user and
|
|
|
837 |
administrator, (iii) on a computer system administered by your sponsor or a third party if (a)
|
|
|
838 |
the key material is generated using trustworthy cryptographic software, (b) access is limited
|
|
|
839 |
to designated individuals, who are subject to and aware of applicable privacy rules and a
|
|
|
840 |
professional code of conduct, (c) the private key and pass phrase are not sent in clear text
|
|
|
841 |
over a network, (d) the encrypted private key file is not sent over the network unprotected,
|
|
|
842 |
(e) the system is located in a secure environment, where access is controlled and limited to
|
|
|
843 |
only authorized personnel, and (f) a system does not persistently keep pass phrases or plain
|
|
|
844 |
text private keys for longer than 24 hours.
|
|
|
845 |
(ii) IGTF Private Key Storage. For IGTF compliant Certificates, you may store your Private Key
|
|
|
846 |
using one of the following methods: (i) protected by a pass phrase on a hardware token from
|
|
|
847 |
which the Private Key cannot be extracted, (ii) in a persistently encrypted form on a
|
|
|
848 |
computer system where you are the sole user and administrator, or (iii) on a computer
|
|
|
849 |
system administered by your sponsor or a third party if (a) the Private Key is stored in a
|
|
|
850 |
persistently encrypted form and protected by a pass phrase, (b) data needed to decrypt or
|
|
|
851 |
use the private key is present only as a result of your action and only for as long as you are
|
|
|
852 |
using the system, (c) administrative access is limited to designated individuals who are
|
|
|
853 |
subject to and aware of applicable privacy rules and a professional code of conduct, (d) the
|
|
|
854 |
systems are located in a secure environment, where access is controlled and limited to only
|
|
|
855 |
authorized personnel, (e) the private key and pass phrase are not sent in clear text over a
|
|
|
856 |
network, (f) the encrypted private key file is not sent over the network unprotected, and (g)
|
|
|
857 |
the system does not persistently keep pass phrases or plain text private keys for longer than
|
|
|
858 |
24 hours. For IGTF passphrases, you must use pass phrases that are at least 12 characters
|
|
|
859 |
long and follow the industrys current best practices. If a third party is involved in
|
|
|
860 |
generating or storing a Private Key, the third party must have a defined data privacy and
|
|
|
861 |
security policy that provides reasonable assurance of data security. You shall make this
|
|
|
862 |
policy available to DigiCert upon request.
|
|
|
863 |
1.6. SSL and Code Signing Certificates. EV Certificate means a Certificate that contains the DigiCert
|
|
|
864 |
Extended Validation Certificate Policy Object Identifier as set forth in the CPS and is issued in
|
|
|
865 |
accordance with the EV Guidelines. EV Certificates include both SSL Certificates and Code
|
|
|
866 |
Signing Certificates. EV Guidelines means the Guidelines for Extended Validation Certificates as
|
|
|
867 |
officially published, amended, and updated by the CA/Browser Forum at
|
|
|
868 |
http://www.cabforum.org. CPS refers to DigiCerts written statements of the policies and
|
|
|
869 |
procedures used to operate its Public Key infrastructure. DigiCerts CPS documents are available
|
|
|
870 |
at http://www.digicert.com/ssl-cps-repository.htm.
|
|
|
871 |
(i) Certificate Transparency. To ensure Certificates function properly throughout their lifecycle,
|
|
|
872 |
DigiCert may log SSL Certificates with a public certificate transparency database. Because
|
|
|
873 |
this will become a requirement for Certificate functionality, you cannot opt out of this
|
|
|
874 |
process. Log server information is publicly accessible. Once submitted, information cannot
|
|
|
875 |
be removed from a log server.
|
|
|
876 |
(ii) Limitations on License. DigiCert may reject any request for an SSL Certificates only for
|
|
|
877 |
domain names registered to (i) you, (ii) your affiliates, or (iii) an entity that expressly
|
|
|
878 |
authorized, in writing, you to obtain and manage Certificates for the domain name in the
|
|
|
879 |
Certificate.
|
|
|
880 |
(iii) Certificate Approvers. During the term of this agreement, you expressly authorize the
|
|
|
881 |
individuals appointed as Certificate Approvers or Administrators in your account (the
|
|
|
882 |
designation of which is expressly incorporated into this agreement) to request and approve
|
|
|
883 |
EV Certificates on your behalf. With respect to DigiCerts obligations under the EV
|
|
|
884 |
Guidelines and other industry standards, you expressly authorize DigiCert to rely on any
|
|
|
885 |
representations made by a Certificate Approver in connection with an ordered Certificate,
|
|
|
886 |
including verification of your exclusive right to use the domain name listed in the Certificate.
|
|
|
887 |
You are responsible for all EV Certificates requested by a Certificate Approver until such
|
|
|
888 |
Certificate Approvers EV authority is revoked. You may revoke a certificate Approvers EV
|
|
|
889 |
authority by emailing DigiCert at [email protected]. You are responsible for periodically
|
|
|
890 |
reviewing and updating the individuals authorized to approve EV Certificate orders.
|
|
|
891 |
(iv) Representations. You represent that (a) you have the right to use the domain name, common
|
|
|
892 |
name, and organization name listed in the Certificate (if applicable), (b) if you represent an
|
|
|
893 |
entity applying for or that will be named in the Certificate, you are expressly authorized to
|
|
|
894 |
sign this agreement on behalf of that entity and will make the entity aware of each Certificate
|
|
|
895 |
request, (c) you have read, understand, and agree to the CPS and this agreement, (d) you will
|
|
|
896 |
make sure the organization included in the Certificate and the registered domain name
|
|
|
897 |
holder (if a domain name is included the Certificate) will be aware of and approve each
|
|
|
898 |
Certificate request.
|
|
|
899 |
(v) Acceptance. For EV Certificates: By accepting these terms, you are entering into a legally
|
|
|
900 |
valid and enforceable agreement to obtain a form of digital identity for the Certificates
|
|
|
901 |
subject. You acknowledge that you have the authority to obtain the digital equivalent of a
|
|
|
902 |
company stamp, seal, or (where applicable) officer's signature to establish the authenticity of
|
|
|
903 |
the subjects website or signed code, and that you are responsible for all uses of its EV
|
|
|
904 |
Certificate. By accepting this agreement on behalf of the subject, you represent that you (i)
|
|
|
905 |
are acting as an authorized representative of the subject, (ii) are expressly authorized by
|
|
|
906 |
subject to sign Subscriber agreements and approve EV Certificate requests on subjects
|
|
|
907 |
behalf, and (iii) if applicable, have confirmed subjects exclusive right to use the domain(s) to
|
|
|
908 |
be included in any issued EV Certificates.
|
|
|
909 |
1.7. License. Effective immediately after delivery and continuing until the Certificate expires or is
|
|
|
910 |
revoked, DigiCert grants you a revocable, non-exclusive, non-transferable license to use, for the
|
|
|
911 |
benefit of the subject, each issued Certificate and the corresponding Key Sets in accordance with
|
|
|
912 |
the CPS and the terms of this agreement. You are responsible for any use of the Certificate and
|
|
|
913 |
any equipment and software required to use the Certificate. You may not install or use a
|
|
|
914 |
Certificate until after you have reviewed and verified the accuracy of the data included in the
|
|
|
915 |
Certificate. You will promptly inform DigiCert if you become aware of any breach of this
|
|
|
916 |
agreement or misuse of a Certificate, Private Key, or your account. You are responsible for
|
|
|
917 |
obtaining and maintaining any authorization or license necessary to use a Certificate.
|
|
|
918 |
1.8. Restrictions. You should not (a) share your Certificate or Private Key with another user except
|
|
|
919 |
where permitted by the CPS, (b) use a Certificate or Private Key to operate nuclear power
|
|
|
920 |
facilities, air traffic control systems, aircraft navigation systems, weapons control systems, or any
|
|
|
921 |
other system requiring failsafe operation whose failure could lead to injury, death or
|
|
|
922 |
environmental damage, (c) modify, sub license, reverse-engineer or create a derivative work of
|
|
|
923 |
any Certificate (except as required to use the Certificate for its intended purpose) or Private Key,
|
|
|
924 |
(d) use or make representations about a Certificate except as allowed in the CPS, (e) impersonate
|
|
|
925 |
or misrepresent your affiliation with any entity or use a Certificate in a manner that could
|
|
|
926 |
reasonably result in a civil or criminal action being taken against you or DigiCert, (f) use a
|
|
|
927 |
Certificate to send or receive unsolicited bulk correspondence, sign or distribute any files,
|
|
|
928 |
software, or code that may damage the operation of anothers computer or that is downloaded
|
|
|
929 |
without a users consent, or breach the confidence of a third party, (g) attempt to use a
|
|
|
930 |
Certificate to issue other Certificates, or (h) intentionally create a Private Key that is substantially
|
|
|
931 |
similar to a DigiCert or third party Private Key.
|
|
|
932 |
1.9. Revocation. DigiCert may revoke a Certificate without notice for the reasons stated in the CPS,
|
|
|
933 |
including if DigiCert believes that (a) you or the subject requested revocation of the Certificate or
|
|
|
934 |
did not authorize the Certificates issuance, (b) you or the subject breach this agreement or fail to
|
|
|
935 |
comply with the CPS, (c) a provision of this agreement containing a representation or obligation
|
|
|
936 |
related to the issuance, use, management, or revocation of the Certificate terminates or is held
|
|
|
937 |
invalid, (d) you or the subject are added to a government prohibited person or entity list or are
|
|
|
938 |
operating from a prohibited destination under the laws of the United States, (e) the Certificate
|
|
|
939 |
contains inaccurate or misleading information, (f) the Certificate was used outside of its intended
|
|
|
940 |
purpose or used to sign malicious software, (g) the Private Key associated with a Certificate was
|
|
|
941 |
disclosed or compromised, (h) this agreement terminates, (i) the Certificate was used or issued,
|
|
|
942 |
directly or indirectly, contrary to law, the CPS, or industry standards, (j) industry standards or
|
|
|
943 |
DigiCerts CPS require revocation, or (k) revocation is necessary to protect the rights, confidential
|
|
|
944 |
information, operations, or reputation of DigiCert or a third party.
|
|
|
945 |
1.10. Renewals. DigiCert may send a reminder to you about expiring Certificates, but you are solely
|
|
|
946 |
responsible for ensuring your Certificates are renewed prior to their expiration.
|
|
|
947 |
1.11. Publication of Certificate. You consent to (i) DigiCerts public disclosure of information
|
|
|
948 |
embedded in an issued Certificate, and (ii) DigiCerts transfer of your information to servers
|
|
|
949 |
located inside the United States. DigiCert retains a right to use any information provided through
|
|
|
950 |
the account, provided that all such use is in compliance with its privacy policy as provided on its
|
|
|
951 |
website. DigiCert may modify the privacy policy in its sole discretion.
|
|
|
952 |
1.12. Express Install. DigiCerts may provide an express installation utility as part of its services. Using
|
|
|
953 |
this utility will automatically configure server settings as appropriate to use the Certificate. A
|
|
|
954 |
link to express install is provided either in the email providing notification of Certificate issuance
|
|
|
955 |
or on DigiCerts website. You may (i) not modify, sub-license, reverse engineer, or create a
|
|
|
956 |
derivative work of the utility and (ii) only use the utility with a DigiCert product or service and
|
|
|
957 |
not with Certificates, software, or other products or services provided from a third party. You are
|
|
|
958 |
solely liable for any use of the utility. DIGICERT HEREBY DISCLAIMS ALL WARRANTIES
|
|
|
959 |
ASSOCIATED WITH THE UTILITY AND ALL LIABILITY FOR YOUR USE OF THE UTILITY.
|
|
|
960 |
|
|
|
961 |
2. Term and Termination
|
|
|
962 |
2.1. Term. This agreement is effective upon your acceptance and lasts until the earlier of (i) the
|
|
|
963 |
expiration date of all Certificates issued under this agreement, or (ii) the termination of this
|
|
|
964 |
agreement by a party as allowed herein. All rights and licenses granted to you terminate
|
|
|
965 |
immediately upon termination of this agreement.
|
|
|
966 |
2.2. Termination. Either party may terminate this agreement for convenience by providing 30 days
|
|
|
967 |
prior notice to the other party. DigiCert may terminate the agreement immediately for any
|
|
|
968 |
reasonable reason related to this Agreement, including, but not limited to (i) you or the subject
|
|
|
969 |
materially breach this agreement, (ii) you or the subject engaged in illegal or fraudulent activity
|
|
|
970 |
or an activity that could materially harm DigiCerts business, (iii) DigiCert cannot verify you or
|
|
|
971 |
the subject to DigiCerts sole satisfaction, or (iv) if you or the subject (a) have a receiver, trustee,
|
|
|
972 |
or liquidator appointed over substantially all of your or the subjects assets, (b) have an
|
|
|
973 |
involuntary bankruptcy proceeding filed against you or the subject that is not dismissed within
|
|
|
974 |
30 days of filing, (c) file a voluntary petition of bankruptcy or reorganization.
|
|
|
975 |
2.3. Survival. All provisions of this agreement that, by their nature, are intended to survive
|
|
|
976 |
termination of the agreement and continue in full force and effect, including all provisions related
|
|
|
977 |
to representations by you under the following sections: Publication of Certificate (Section 1.11),
|
|
|
978 |
Disclaimer of Warranties and Limitations on Liability (Section 3), Indemnity (Section 4),
|
|
|
979 |
Arbitration (section 5), and the Miscellaneous provisions (Section 6).
|
|
|
980 |
3. Disclaimers of Warranty and Limitations on Liability
|
|
|
981 |
3.1. Relying Party Warranties. You acknowledge that any applicable Relying Party Warranty is only
|
|
|
982 |
for the benefit of Relying Parties. You do not have rights under the warranty, including any right
|
|
|
983 |
to enforce the terms of the warranty or make a claim under the warranty. Not all Certificates are
|
|
|
984 |
covered by a warranty. Relying Party means an entity that acts in reliance on a Certificate or a
|
|
|
985 |
Digital Signature. An Application Software Vendor is not a Relying Party when the software
|
|
|
986 |
distributed by the Application Software Vendor merely displays information regarding a
|
|
|
987 |
Certificate or facilitates the use of the Certificate or digital signature. Relying Party Warranty
|
|
|
988 |
is a warranty provided by DigiCert against certificate mis-issuance that is available only to
|
|
|
989 |
Relying Parties who meet the conditions and fulfill all of the terms set forth at
|
|
|
990 |
http://www.digicert.com/docs/agreements/DigiCert_RPA.pdf. Application Software Vendor
|
|
|
991 |
means a software developer that displays or uses Certificates and distributes root certificates.
|
|
|
992 |
3.2. Remedy. Your sole remedy for a defect in a Certificate is to have DigiCert use reasonable efforts
|
|
|
993 |
to correct the defect. DigiCert is not obligated to correct a defect if (i) the Certificate was
|
|
|
994 |
misused, damaged, or modified, (ii) you did not promptly report the defect to DigiCert, or (iii)
|
|
|
995 |
you breached any provision of this agreement.
|
|
|
996 |
3.3. Warranty Disclaimers. THE CERTIFICATES, AND ANY RELATED SOFTWARE, PRODUCTS, AND
|
|
|
997 |
SERVICES, INCLUDING THE EXPRESS INSTALL UTILITY, ARE PROVIDED "AS IS" AND "AS
|
|
|
998 |
AVAILABLE. TO THE MAXIMUM EXTENT PERMITTED BY LAW, DIGICERT DISCLAIMS ALL
|
|
|
999 |
EXPRESS AND IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY,
|
|
|
1000 |
FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. DIGICERT DOES NOT
|
|
|
1001 |
WARRANT THAT ANY SERVICE OR PRODUCT WILL MEET YOUR EXPECTATIONS OR THAT
|
|
|
1002 |
ACCESS TO THE ACCOUNT WILL BE TIMELY OR ERROR-FREE. DigiCert does not guarantee the
|
|
|
1003 |
availability of any products or services and may modify or discontinue any product or service
|
|
|
1004 |
offering at any time.
|
|
|
1005 |
3.4. Limitation on Liability. This agreement does not limit a partys liability for (i) death or personal
|
|
|
1006 |
injury resulting from the negligence of a party, or (ii) fraud or fraudulent statements made by a
|
|
|
1007 |
party. EXCEPT AS STATED ABOVE, DIGICERTS MAXIMUM LIABILITY RESULTING FROM THESE
|
|
|
1008 |
TERMS IS LIMITED TO THE AMOUNT PAID OR PAYABLE BY YOU TO DIGICERT DURING THE 12
|
|
|
1009 |
MONTHS PRIOR TO WHEN THE EVENT GIVING RISE TO THE LIABILITY OCCURRED. DIGICERT
|
|
|
1010 |
IS NOT LIABLE FOR ANY INDIRECT, CONSEQUENTIAL, SPECIAL, OR PUNITIVE DAMAGES OR
|
|
|
1011 |
ANY LOSS OF PROFIT, REVENUE, DATA, OR OPPORTUNITY, EVEN IF DIGICERT IS AWARE OF THE
|
|
|
1012 |
POSSIBILITY OF SUCH DAMAGES.
|
|
|
1013 |
3.5. Liability. You are liable for any claims (including damages, costs, and defense expenses) that are
|
|
|
1014 |
brought by third parties against DigiCert, its agents and assigns, that are result from use of your
|
|
|
1015 |
Certificate or Private Key or that are caused by your intentional or grossly negligent breach of
|
|
|
1016 |
this agreement. DigiCert is not responsible for your employees or agents, including any expenses
|
|
|
1017 |
owed to them.
|
|
|
1018 |
3.6. Extent. The limitations in this section apply to the maximum extent permitted by law and apply
|
|
|
1019 |
regardless of (i) the reason for or nature of the liability, including tort claims, (ii) the number of
|
|
|
1020 |
claims of liability, (iii) the extent or nature of the damages, or (iv) whether any other provisions
|
|
|
1021 |
of this agreement were breached or proven ineffective.
|
|
|
1022 |
|
|
|
1023 |
4. Indemnity
|
|
|
1024 |
4.1. Obligation. You will indemnify, hold harmless, and defend DigiCert and its employees, officers,
|
|
|
1025 |
directors, shareholders, affiliates, and assigns against all third party claims and all related
|
|
|
1026 |
liabilities, damages, and costs, including reasonable attorneys fees, arising from (i) your breach
|
|
|
1027 |
of this agreement, (ii) your failure to disclose a material fact related to the issuance of a
|
|
|
1028 |
Certificate or to protect the Authentication Mechanisms used to secure the account, (iii) an
|
|
|
1029 |
allegation that your actions or negligence was the cause of the claim, liability, or cost, (iv) your
|
|
|
1030 |
website, products, and services, or (v) your use of DigiCerts products or services to infringe on
|
|
|
1031 |
the rights of a third party.
|
|
|
1032 |
4.2. Indemnification Procedure. An entity seeking indemnification under this agreement
|
|
|
1033 |
(Indemnified Party) must notify you promptly of any event requiring indemnification.
|
|
|
1034 |
However, an Indemnified Partys failure to notify will not relieve you from your indemnification
|
|
|
1035 |
obligations, except to the extent that the failure to notify materially prejudices you. You may
|
|
|
1036 |
assume the defense of any proceeding requiring indemnification unless assuming the defense
|
|
|
1037 |
would result in potential conflicting interests as determined by the Indemnified Party in good
|
|
|
1038 |
faith. An Indemnified Party may, at your expense, defend itself until your counsel has initiated a
|
|
|
1039 |
defense of the Indemnified Party. Even after you assume the defense, the Indemnified Party may
|
|
|
1040 |
participate in any proceeding using counsel of its own choice and at its own expense. You may
|
|
|
1041 |
not settle any proceeding related to this agreement unless the settlement also includes an
|
|
|
1042 |
unconditional release of liability for all Indemnified Parties.
|
|
|
1043 |
4.3. Additions to and Limitations on Liability. Your indemnification obligations are not DigiCerts sole
|
|
|
1044 |
remedy under this agreement and are in addition to any other remedies that DigiCert may have
|
|
|
1045 |
against you. You must commence any claim or action arising from this agreement within one
|
|
|
1046 |
year from the occurrence of events giving rise to a cause of action. You waive your right to any
|
|
|
1047 |
claim that is commenced more than one year from the first date on which the cause of action
|
|
|
1048 |
arose.
|
|
|
1049 |
|
|
|
1050 |
5. Arbitration
|
|
|
1051 |
5.1. Requirement. To the maximum extent permitted by law, you will settle any dispute or claim
|
|
|
1052 |
related to this agreement, the CPS, DigiCerts websites, or any Certificate issued under this
|
|
|
1053 |
Agreement using binding arbitration in accordance with the Arbitration Rules of the American
|
|
|
1054 |
Arbitration Association (AAA). The parties shall hold all arbitration proceedings in Lehi, Utah.
|
|
|
1055 |
The parties shall settle all such disputes and claims settled in this manner in lieu of any action at
|
|
|
1056 |
law or equity; except that nothing in this subsection precludes a party from bringing an action for
|
|
|
1057 |
injunctive relief or other equitable relief.
|
|
|
1058 |
5.2. Proceeding. During arbitration, the parties shall use a single arbitrator appointed by the AAA to
|
|
|
1059 |
arbitrate a dispute or claim. The arbitrator must exhibit a reasonable familiarity with the issues.
|
|
|
1060 |
The award of the arbitrator is binding and final upon all parties. Either party may have a court
|
|
|
1061 |
with proper jurisdiction enter the award. This agreement remains in full force and effect while
|
|
|
1062 |
the outcome of the arbitration proceeding is pending. The arbitrator shall follow applicable law
|
|
|
1063 |
in conducting the arbitration.
|
|
|
1064 |
5.3. Costs. A party shall pay any costs, including reasonably attorney fees, to which the arbitrator
|
|
|
1065 |
determines that the prevailing party is entitled. Each party shall pay its own costs associated
|
|
|
1066 |
with the arbitration if such costs are not awarded by the arbitrator. The arbitrator may not
|
|
|
1067 |
award punitive damages or speculative damages to either party and does not have the power to
|
|
|
1068 |
amend this agreement.
|
|
|
1069 |
|
|
|
1070 |
6. Miscellaneous
|
|
|
1071 |
6.1. Agreement. Unless explicitly stated otherwise, this agreement, along with all documents referred
|
|
|
1072 |
to herein, constitutes the entire agreement between the parties with respect to the issuance and
|
|
|
1073 |
use of the requested Certificate, superseding all other agreements that may exist with respect to
|
|
|
1074 |
that particular Certificate. DigiCert may amend any of its (i) website and any documents listed
|
|
|
1075 |
thereon, (ii) CPS, (iii) fees, (iv) privacy policy, or (iv) the conditions under which you receive a
|
|
|
1076 |
Certificate. Amendments are effective upon the earlier of DigiCerts posting the amendment on
|
|
|
1077 |
its website or your receipt of the amendment. You must periodically review DigiCerts website to
|
|
|
1078 |
be aware of any changes to this agreement or the relevant documents. Your continued use of a
|
|
|
1079 |
Certificate after an amendment is posted constitutes your acceptance of the amendment. If a law
|
|
|
1080 |
or industry standard changes and that change affects the Certificates or other services provided
|
|
|
1081 |
under this agreement, then DigiCert may amend this agreement to the extent necessary to
|
|
|
1082 |
comply with the change. The laws of the state of Utah govern the interpretation, construction,
|
|
|
1083 |
and enforcement of this agreement and all matters related to it, including tort claims, without
|
|
|
1084 |
regards to any conflicts-of-laws principles. The parties hereby submit to the exclusive
|
|
|
1085 |
jurisdiction of and venue in the state and federal courts located in the State of Utah.
|
|
|
1086 |
6.2. Waiver. A partys failure to enforce or delay in enforcing a provision of this agreement does not
|
|
|
1087 |
waive (i) the partys right to enforce the same provision later, or (ii) the partys right to enforce
|
|
|
1088 |
any other provision of the agreement. A waiver is only effective if in writing and signed by the
|
|
|
1089 |
party against whom the waiver is claimed.
|
|
|
1090 |
6.3. Industry Standards. Both parties will comply with all industry and privacy standards applicable
|
|
|
1091 |
to the Certificates. If industry standards change, DigiCert and you will work together in good
|
|
|
1092 |
faith to amend this agreement to comply with the changes.
|
|
|
1093 |
6.4. Force Majeure and Internet Frailties. Neither party is liable for any failure or delay in performing
|
|
|
1094 |
its obligations under this agreement to the extent that the circumstances causing such failure or
|
|
|
1095 |
delay are beyond a partys reasonably control. You acknowledge that the Certificates are subject
|
|
|
1096 |
to the operation and telecommunication infrastructures of the Internet and the operation of your
|
|
|
1097 |
Internet connection services, all of which are beyond DigiCerts control.
|
|
|
1098 |
6.5. Notices. You must send all notices in English writing by first class mail with return receipt
|
|
|
1099 |
request to DigiCert, Inc. at 2600 West Executive Parkway, Suite 500, Lehi, Utah 84043. DigiCert
|
|
|
1100 |
will send notices to you either, in DigiCerts discretion, through the account or through your
|
|
|
1101 |
email address (as provided by you). Notices to DigiCert are effective when received. Notices to
|
|
|
1102 |
you are effective when sent.
|
|
|
1103 |
6.6. Assignment. You may not assign your rights or obligations under this agreement without the
|
|
|
1104 |
prior written consent of DigiCert. Any transfer without consent is void. DigiCert may assign its
|
|
|
1105 |
rights and obligations without your consent.
|
|
|
1106 |
6.7. Severability. The invalidity or unenforceability of a provision under this agreement, as
|
|
|
1107 |
determined by a court or administrative body of competent jurisdiction, does not affect the
|
|
|
1108 |
validity or enforceability of the remainder of this agreement. The parties will substitute any
|
|
|
1109 |
invalid or unenforceable provision with a valid or enforceable provision that achieves the same
|
|
|
1110 |
economic, legal, and commercial objectives as the invalid or unenforceable provision.
|
|
|
1111 |
6.8. Rights of Third Parties. Application Software Vendors and Relying Parties are express third party
|
|
|
1112 |
beneficiaries of your obligations and representations under this agreement that directly relate to
|
|
|
1113 |
the use or issuance of a Certificate. Other than the Application Software Vendors and Relying
|
|
|
1114 |
Parties, no third parties have any rights or remedies under the agreement.
|
|
|
1115 |
6.9. Interpretation. The definitive version of this agreement is written in English. If this agreement is
|
|
|
1116 |
translated into another language and there is a conflict between the English version and the
|
|
|
1117 |
translated version, the English language version controls.
|
|
|
1118 |
|
|
|
1119 |
ACCEPTANCE
|
|
|
1120 |
BY CHECKING "I AGREE", YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTAND THIS AGREEMENT
|
|
|
1121 |
AND THAT YOU WILL TO COMPLY WITH ITS TERMS. DO NOT CHECK "I AGREE" AND DO NOT PROCEED IF
|
|
|
1122 |
YOU DO NOT ACCEPT THIS AGREEMENT.
|
|
|
1123 |
|