Martin Willi
fd2a491b31
Stop checking once a key size constraint is not fulfilled
2012-03-20 17:31:23 +01:00
Martin Willi
45956d15ea
Free list after removing the last local credential set, fixes a leak report
2012-03-20 17:31:19 +01:00
Martin Willi
21c916886d
Added missing XAuth auth_class enum name
2012-03-20 17:31:16 +01:00
Martin Willi
6ebcbc654c
Added auth_cfg option to select XAUTH backend to use
2012-03-20 17:31:15 +01:00
Martin Willi
96c9159d96
Use a second authentication config to configure XAUTH authentication
2012-03-20 17:31:15 +01:00
Martin Willi
b4e815354c
Map auth_class to auth method and IKEv1 proposal attribute
2012-03-20 17:30:53 +01:00
Clavister OpenSource
23f4e4b42d
IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response.
2012-03-20 17:30:49 +01:00
Tobias Brunner
b20c54ff3f
Add builder part for parameters from algorithmIdentifier.
2012-02-01 18:27:45 +01:00
Tobias Brunner
35a1986142
Fixed additional typos in comments and log messages.
2012-01-12 11:42:42 +01:00
Adrian-Ken Rueegsegger
d887b8e134
Fix whitespaces
2012-01-12 11:25:18 +01:00
Adrian-Ken Rueegsegger
2a375e62f3
Some documentation corrections
2012-01-12 11:25:12 +01:00
Sansar Choinyambuu
95e37555c3
Reverse the changes made to openssl plugin for signature verification
2011-11-28 21:18:05 +01:00
Sansar Choinyambuu
5fbbfe0a48
use openssl rsa_verify function
2011-11-28 20:31:13 +01:00
Sansar Choinyambuu
19fa287f6e
Reverse the changes made to openssl plugin for signature verification
2011-11-28 14:39:53 +01:00
Sansar Choinyambuu
3cd6077b75
use openssl rsa_verify function
2011-11-28 14:39:53 +01:00
Tobias Brunner
a660f1426e
Fixed missing initializer compiler warning.
2011-11-25 09:52:19 +01:00
Tobias Brunner
edad908792
Fixed compiler warnings regarding enum comparison.
...
Warnings like
comparison of unsigned expression < 0 is always false
are reported with -Wextra when enum types that are compiled to an
unsigned type (which is up to the compiler) are checked for negativity.
2011-11-25 09:40:30 +01:00
Thomas Egerer
6e5e2762d3
Handle certificates being on hold in a CRL
...
Certificates which are set on hold in a CRL might be removed from any
subsequent CRL. Hence you cannot conclude that a certificate is revoked
for good in this case, you would try to retrieve an update CRL to see if
the certificate on hold is still on it or not.
2011-11-04 11:11:17 +01:00
Martin Willi
658c993c78
Include KEY_ANY in key_type_names
2011-10-14 10:04:45 +02:00
Andreas Steffen
58a8309c21
Migrated cred_encoding to INIT/METHOD macros
2011-10-02 10:55:08 +02:00
Andreas Steffen
7b9e6ddd20
Migrated auth_cfg to INIT/METHOD macros
2011-10-02 10:42:01 +02:00
Andreas Steffen
3cd78d98b7
Migrated ietf_attributes to INIT/METHOD macros
2011-09-29 22:46:43 +02:00
Andreas Steffen
a6e3eabfa6
Migrated shared_key to INIT/METHOD macros
2011-09-29 22:17:38 +02:00
Andreas Steffen
fabc874155
Migrated auth_cfg_wrapper to INIT/METHOD macros
2011-09-29 22:10:30 +02:00
Andreas Steffen
6d5907fddf
Migrated cert_cache to INIT/METHOD macros
2011-09-29 22:04:22 +02:00
Andreas Steffen
c9698de891
Migrated ocsp_response_wrapper to INIT/METHOD macros
2011-09-29 21:48:31 +02:00
Andreas Steffen
8b5219dd61
fixed typo
2011-09-08 12:08:17 +02:00
Thomas Egerer
2feb3d9e0b
Remove obsolete values from builder_part_names
...
Adds removal of builder parts obsoleted with git commit
15177f5785
2011-09-02 13:44:17 +02:00
Martin Willi
87ddfcc655
Added missing auth_rule_names
2011-08-22 18:42:32 +02:00
Martin Willi
c991645ff5
Moved auth_rule_names back to auth_cfg.c
2011-08-22 18:42:32 +02:00
Tobias Brunner
cbf5c2c61c
Readded docs for some arguments to global functions.
...
Those were overzealously removed in 28623fc538
2011-07-21 18:38:43 +02:00
Tobias Brunner
f3bb1bd039
Fixed common misspellings.
...
Mostly found by 'codespell'.
2011-07-20 16:14:10 +02:00
Tobias Brunner
47daa0e6fe
Replaced more complex iterator usages.
2011-07-06 09:43:45 +02:00
Tobias Brunner
28623fc538
"this" removed from comments.
2011-07-06 09:43:45 +02:00
Martin Willi
aca6434ba9
Fix a potential memleak if two threads fingerprint a credential simultaneously
2011-05-02 15:05:41 +02:00
Tobias Brunner
e0d388f2e3
Use proper return value for ietf_attr_t.compare.
2011-04-19 13:48:50 +02:00
Tobias Brunner
1f02bdc8d3
Fixed output in ietf_attributes_t.get_string.
2011-04-14 18:10:26 +02:00
Andreas Steffen
d390b3b901
[hopefully] fixed pathlen problem on ARM platforms
2011-02-10 15:51:18 +01:00
Martin Willi
a846bf06e8
Add missing AUTH_RULE for trusted self-signed peer certificates
2011-02-01 09:25:10 +01:00
Martin Willi
76cfaf13c1
Verify trustchain for each candidate certificate only once
2011-01-05 16:46:06 +01:00
Martin Willi
1a79d76abc
Added an AUTH_HELPER for revocation certificates
2011-01-05 16:46:06 +01:00
Martin Willi
85b9e9be99
Added CDP support to mem_cred
2011-01-05 16:46:06 +01:00
Martin Willi
b088fd4a76
Slightly renamed different policyConstraints to distinguish them better
2011-01-05 16:46:05 +01:00
Martin Willi
07eee80401
Added support for inhibitAnyPolicy constraint to x509 plugin
2011-01-05 16:46:05 +01:00
Martin Willi
b3d359e58f
Use a generic getter for all numerical X.509 constraints
2011-01-05 16:46:05 +01:00
Martin Willi
8469625fdc
Include subject cert to temporary auth info before completing trustchain
2011-01-05 16:46:04 +01:00
Martin Willi
6aba6ff061
Pass an additional anchor flag to validate() hook if we reach the root CA
2011-01-05 16:46:04 +01:00
Martin Willi
09e319d419
Always pass auth info to validate(), use pathlen to check for user certificate
2011-01-05 16:46:04 +01:00
Martin Willi
55e4d8982f
Added support for delta CRLs to x509 plugin
2011-01-05 16:46:03 +01:00
Martin Willi
a6478a0402
Simplified format of x509 CRL URI parsing/enumerator
2011-01-05 16:46:03 +01:00
Martin Willi