Martin Willi
083142c4a0
encoding public EC keys is not really possible without subjectPublicKeyInfo
2009-08-26 16:15:38 +02:00
Martin Willi
08ed551ce0
implemented openssl EC key generation
2009-08-26 11:23:55 +02:00
Martin Willi
a0b850450f
fixed openssl RSA private key encoding
2009-08-26 11:23:55 +02:00
Martin Willi
e35c3e2a03
updated openssl plugin to new private/public key API, use encoder framework
2009-08-26 11:23:52 +02:00
Tobias Brunner
3901937d14
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
2009-08-14 13:30:59 +02:00
Andreas Steffen
994b80b513
activated CAMELLIA_CBC cipher in openssl plugin
2009-08-05 22:46:53 +02:00
Andreas Steffen
b6f739c13b
support of SHA224-based certificate signatures
2009-08-05 22:01:44 +02:00
Andreas Steffen
eebecebead
make ecp_x_coordinate_only = yes the default
2009-07-06 11:47:38 +02:00
Andreas Steffen
21863d6361
ecp_x_coordinate only option allows ECP interoperability with MS Windows
2009-07-06 08:47:18 +02:00
Martin Willi
00fcc0f8f3
added -avoid-version to LDFLAGS, plugins are not versioned
2009-07-03 08:57:11 +02:00
Andreas Steffen
942127a602
fixed 64 bit warning
2009-06-17 12:32:28 +02:00
Andreas Steffen
11e6d28533
pluto supports ECDSA authentication
2009-06-12 19:59:49 +02:00
Andreas Steffen
dfa5fb0358
implemented IKEv1 RSA signing in openssl_rsa_private_key.c
2009-06-10 15:29:57 +02:00
Andreas Steffen
29bbfc11ee
implemented IKEv1 signature verification in openssl_rsa_public_key.c
2009-06-10 13:43:51 +02:00
Martin Willi
86ab0bb65e
fixed crash in openssl private_key->get_public_key(), using encode/load workaround
2009-06-09 11:03:35 +02:00
Andreas Steffen
8b799d55ce
pluto and scepclient use private and public key plugins of libstrongswan
2009-06-09 11:03:32 +02:00
Andreas Steffen
ebb97511e6
dh_exponent_ansi_x9_42 is now a libstrongswan setting
2009-05-26 18:32:52 +02:00
Andreas Steffen
24400cf617
fixed setting of variable key length
2009-05-14 13:55:56 +02:00
Tobias Brunner
e382d96f62
compiler warning fixed
2009-05-06 09:11:19 -04:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Tobias Brunner
d24a74c5b4
merging changes from portability branch back to trunk
...
important change for developers: %Y replaces %D to print identities!
2009-04-30 11:37:54 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Tobias Brunner
b8fa437fb7
adding MD4 and DES (ECB) to openssl plugin
2009-02-18 19:41:33 +00:00
Tobias Brunner
83c42156a2
add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg.
2008-12-03 10:12:20 +00:00
Martin Willi
b8cbb6451c
ported some hard-to-merge cherries back to trunk :-/
...
shame, svn, shame: this was ways to complicated
we should consider a switch to git...
2008-11-12 15:09:24 +00:00
Martin Willi
2abc66b977
proper cleanup of openssl locking code
2008-11-05 12:37:37 +00:00
Martin Willi
3ac5a0db8c
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant
2008-11-05 11:29:56 +00:00
Martin Willi
7854475f42
OpenSSL requires a signature length of exactly RSA_size()
2008-11-04 14:05:42 +00:00
Martin Willi
d4f08fe324
removed superfluous get_other_public_value in diffie_hellman_t interface
2008-11-04 13:12:11 +00:00
Martin Willi
ddd7e6c656
fixed bignum export if BN_num_bytes() != DH_size()
2008-11-04 13:05:00 +00:00
Martin Willi
dcbea444ee
fixed memleak
2008-11-04 13:01:36 +00:00
Martin Willi
7de6da0c88
added locking mechanism for multithreaded use of OpenSSL
2008-11-03 16:14:12 +00:00
Martin Willi
ee66fa625e
removed accidently checked in debug code
2008-11-03 12:40:42 +00:00
Martin Willi
d6dc9db5ef
reverted 4541, does not fix the problem
2008-11-03 09:44:20 +00:00
Martin Willi
e301a69d6c
removed 0-byte truncation, fixes random Openssl RSA signature verification failures
2008-10-31 17:07:04 +00:00
Martin Willi
a13862be61
fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit)
2008-10-31 17:05:40 +00:00
Andreas Steffen
f5ab7f5f57
refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key
2008-10-28 01:59:01 +00:00
Andreas Steffen
21a45f2f2d
use 512 bits of entropy for secret DH exponents
2008-10-26 23:53:52 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Martin Willi
e577ad3985
creating default IKE proposals dynamically using algorithm enumeration API
2008-08-28 11:07:57 +00:00
Tobias Brunner
1b7d2e31a6
enabling support for hardware accelerators in OpenSSL
2008-06-25 12:39:32 +00:00
Tobias Brunner
a57e0580f6
refactoring
2008-06-10 09:19:18 +00:00
Tobias Brunner
ea0823dffd
ECDSA with OpenSSL
2008-06-10 09:08:27 +00:00
Martin Willi
e581a31d6a
link against openssl crypto library only
2008-06-06 08:04:42 +00:00
Andreas Steffen
7fe3ae88e4
handle default key sizes in openssl_crypter
2008-05-28 12:20:38 +00:00
Martin Willi
5e17e35c8d
fixed some compiler warnings
2008-05-23 15:49:43 +00:00
Tobias Brunner
17188f20dd
Id and typo
2008-05-22 12:13:10 +00:00
Tobias Brunner
346e9c5712
added the ECP groups from RFC 5114
2008-05-22 11:55:05 +00:00
Tobias Brunner
fc1a31d54b
added ECDH with OpenSSL (see RFC 4753)
2008-05-22 11:39:17 +00:00
Tobias Brunner
84770ded1e
RSA with OpenSSL
2008-05-15 12:41:06 +00:00
Martin Willi