Add brew Formula for Mac OS X support of tlsdate
First attempt at a reasonable Mac OS X port of tlsdate
Add ax_platform.m4 to m4 directory
Add CHANGELOG entry for osx port
Update brew forumla for tlsdate
Fix looking up DNS Name fields if the CN doesn't match the hostname.

There were two bugs:

* check_cn() aborted when the data read from the CN field wasn't exactly
  length of the hostname. What makes more sense to check here is to make
  sure that the number of bytes read matches the length of the buffer it
  was read into, cn_buf.
* check_san() didn't check any further DNS Names when the first didn't
  match as a wildcard name (the hostname needs to match on just one of
  the DNS Names, not all of them).
Merge pull request #76 from xnyhps/master

Fix looking up DNS Name fields if the CN doesn't match the hostname.
Add Thijs Alkemade to CHANGELOG for his nice patch
We will release 0.0.6 today
tlsdated: support command-line proxy override

This makes a proxy passed on the command line with -x supplant proxies for
configured sources, and makes the 'proxy' stanza in sources optional (in which
case we supply no proxy argument for them).

Signed-off-by: Elly Fong-Jones <ellyjones@chromium.org>
Merge pull request #77 from elly/tlsdated-proxy

tlsdated: support command-line proxy override
tlsdate-helper: fix SAN checking

Right now, SAN checking checks against the host we're opening a socket to
instead of the host we're actually trying to talk to, which is fine... as long
as we don't have a proxy. Note that this problem only manifests for hosts whose
CN is not equal to their hostname (so the default host of www.ptb.de is fine).

To observe the problem:
$ ssh -D 127.0.0.1:30000 somehost
$ tlsdate -H clients3.google.com -x socks5://127.0.0.1:30000
hostname verification failed for host 127.0.0.1!
child process failed in SSL handshake

With this fix, you instead see no output.

Signed-off-by: Elly Fong-Jones <ellyjones@chromium.org>
Merge pull request #78 from elly/proxy-san

tlsdate-helper: fix SAN checking
tlsdate-dbus-announce: use name and flush connection

Have tlsdate-dbus-announce grab a well-known bus name before it sends its
signal, and have it wait for the signal to actually be sent over the bus before
exiting.

Signed-off-by: Elly Fong-Jones <ellyjones@chromium.org>
Merge pull request #79 from elly/dbus-flush

tlsdate-dbus-announce: use name and flush connection
tlsdated: pass -l and -v through to tlsdate

Supply these options to tlsdate as needed. The ultimate goal of these changes is
to avoid passing an arbitrary tlsdate argv to tlsdated.

Signed-off-by: Elly Fong-Jones <ellyjones@chromium.org>
Merge pull request #80 from elly/tlsdate-argvec

tlsdated: pass -l and -v through to tlsdate
tlsdated: log more aggressively

Sometimes it's not clear from syslogs when tlsdated is starting and exiting, so
make it be explicit about these things when verbose. Also, dump both the cached
timestamp and the sysclock at startup.

Signed-off-by: Elly Fong-Jones <ellyjones@chromium.org>
Merge pull request #82 from elly/aggressive-logging

tlsdated: log more aggressively
tlsdate-helper: Include the CA cert container path in error messages

It makes debugging permission issues or incorrect paths more convenient.