 Martin Willi
|
10b2898d3c
|
verify that the ECDSA auth signature was done with the correct curve
|
2009-08-27 17:58:02 +02:00 |
|
|
Martin Willi
|
472cb4ce77
|
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
|
2009-08-27 17:37:42 +02:00 |
|
|
Martin Willi
|
8b10355c84
|
support generation of EC certificates
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
82749537e2
|
added support for SIGN_ECDSA_WITH_SHA1 signature scheme in openssl
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
eb73685dac
|
create algorithmIdentifier dynamically from OID database
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
09fe3c7e4c
|
pkcs1 encoder supports subjectPublicKeyInfo encoding
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
1a8ef8aabc
|
fixed memleak in openssl fingerprinting
|
2009-08-27 10:40:49 +02:00 |
|
|
Martin Willi
|
b12c6d163d
|
do openssl fingerprinting/encoding directly, openssl provides all functions
|
2009-08-27 09:58:38 +02:00 |
|
|
Martin Willi
|
083142c4a0
|
encoding public EC keys is not really possible without subjectPublicKeyInfo
|
2009-08-26 16:15:38 +02:00 |
|
|
Martin Willi
|
df5c60bc5d
|
added a BUILD_FROM_FD option, supporting credential parsing from stdin
|
2009-08-26 13:03:23 +02:00 |
|
|
Martin Willi
|
08ed551ce0
|
implemented openssl EC key generation
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
a0b850450f
|
fixed openssl RSA private key encoding
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
cb4f09eff3
|
updated agent plugin to new fingerprint/encoding API
|
2009-08-26 11:23:53 +02:00 |
|
|
Martin Willi
|
8d09681559
|
updated pubkey plugin to new fingerprinting API
|
2009-08-26 11:23:52 +02:00 |
|
|
Martin Willi
|
6b6ece636c
|
updated x509 plugin to public key/x509 API changes
|
2009-08-26 11:23:52 +02:00 |
|
|
Martin Willi
|
e35c3e2a03
|
updated openssl plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
|
Martin Willi
|
cbd5138948
|
updated gcrypt plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
|
Martin Willi
|
741680d179
|
updated gmp plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
|
Martin Willi
|
64e77e8fbb
|
use credential builder API to parse trusted public keys
|
2009-08-26 11:23:52 +02:00 |
|
|
Martin Willi
|
d1b3e8607e
|
implemented PGP fingerprinting
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
e773fe4cab
|
implemented pkcs1 private/public key encoding and fingerprinting
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
831520d895
|
gmp uses component builder to build public- from private-key
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
8380503168
|
gcrypt uses component builder to build public- from private-key
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
b457e08fca
|
moved PGP code to pluto and gpg plugin
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
7033a70fd0
|
gmp plugin makes use of pkcs1/pgp/dnskey plugins
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
cbfafc1125
|
enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
5ef478aaee
|
implemented RFC3110 key builder in a plugin, added generic DNSKEY RR parsing
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
3addf4e937
|
renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types
|
2009-08-26 11:23:51 +02:00 |
|
|
Martin Willi
|
9493dd2ce0
|
implemented a pgp plugin providing PGP key parsing builders
|
2009-08-26 11:23:50 +02:00 |
|
|
Martin Willi
|
4e3d1e804e
|
make use of the pkcs1 plugin in gcrypt rsa key parsing
|
2009-08-26 11:23:50 +02:00 |
|
|
Martin Willi
|
3044774323
|
removed subjectPublicKeyInfo parsing, provided by pkcs1 plugin
|
2009-08-26 11:23:50 +02:00 |
|
|
Martin Willi
|
1e0f69373a
|
implemented a pkcs1 plugin providing PKCS#1 key parsing builders
|
2009-08-26 11:23:50 +02:00 |
|
|
Martin Willi
|
cbb62e8f4c
|
handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind
|
2009-08-26 11:23:49 +02:00 |
|
|
Martin Willi
|
11aa7e7869
|
use a pluto specific credential builder to build pluto cert_t's
|
2009-08-26 11:23:49 +02:00 |
|
|
Martin Willi
|
4d15129160
|
pass along X509 flags when loading PEM encoded data
|
2009-08-26 11:23:49 +02:00 |
|
|
Martin Willi
|
280469923d
|
make use of the pem helper plugin to load credentials
|
2009-08-26 11:23:49 +02:00 |
|
|
Martin Willi
|
c9db16b7dd
|
added file loading support to pem plugin, using mmap()
|
2009-08-26 11:23:48 +02:00 |
|
|
Martin Willi
|
160f4c225d
|
moved PEM parsing functionality to its own plugin
|
2009-08-26 11:23:48 +02:00 |
|
|
Tobias Brunner
|
3901937d14
|
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
|
2009-08-14 13:30:59 +02:00 |
|
|
Andreas Steffen
|
994b80b513
|
activated CAMELLIA_CBC cipher in openssl plugin
|
2009-08-05 22:46:53 +02:00 |
|
|
Andreas Steffen
|
b6f739c13b
|
support of SHA224-based certificate signatures
|
2009-08-05 22:01:44 +02:00 |
|
|
Andreas Steffen
|
def1777eca
|
streamlined integrity test output some more
|
2009-07-18 11:23:27 +02:00 |
|
|
Andreas Steffen
|
6b04ba288d
|
streamlined debug output of integrity tests
|
2009-07-17 17:00:17 +02:00 |
|
|
Tobias Brunner
|
233a132634
|
Removed an unnecessary include of a header that is not available on Mac OS X.
|
2009-07-15 22:42:22 +02:00 |
|
|
Andreas Steffen
|
eebecebead
|
make ecp_x_coordinate_only = yes the default
|
2009-07-06 11:47:38 +02:00 |
|
|
Andreas Steffen
|
21863d6361
|
ecp_x_coordinate only option allows ECP interoperability with MS Windows
|
2009-07-06 08:47:18 +02:00 |
|
|
Andreas Steffen
|
876a6d737f
|
corrected comment
|
2009-07-04 09:26:36 +02:00 |
|
|
Martin Willi
|
00fcc0f8f3
|
added -avoid-version to LDFLAGS, plugins are not versioned
|
2009-07-03 08:57:11 +02:00 |
|
|
Martin Willi
|
a2f1bb238e
|
enforce correct RSA signature lenght in gcrypt
|
2009-06-30 12:10:30 +02:00 |
|
|
Martin Willi
|
960e0c1040
|
check integrity of plugins before loading
|
2009-06-22 15:47:17 +02:00 |
|