Martin Willi
a9184df36b
do not build leak_detective.o if not enabled
2008-04-04 11:38:16 +00:00
Martin Willi
2429fb4958
defining hook functions ourself as definition in uClibc and glibc differ, fixes #36
2008-04-04 11:37:19 +00:00
Martin Willi
67d147e888
removed unused gmp.h to build libstrongswan without libgmp
2008-04-04 11:13:14 +00:00
Martin Willi
cce97b647a
redirecting all leak_report information to stderr
2008-04-03 11:25:08 +00:00
Martin Willi
6c45e62242
some code cleanups
2008-04-03 10:22:17 +00:00
Tobias Brunner
84b18d5fc7
replaced mutex in leak detective with thread scheduling
2008-04-03 09:24:35 +00:00
Martin Willi
e29ebcb1af
fixed compile warnings
2008-04-02 09:54:20 +00:00
Martin Willi
372b7ac7e2
added missing files for commit [3721]
2008-04-01 15:03:02 +00:00
Martin Willi
9d1c384b4b
loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format)
...
testcase
2008-04-01 14:51:31 +00:00
Martin Willi
0ea70ca66e
removed unneded publicKeyInfo ASN1 structure
2008-04-01 13:39:12 +00:00
Martin Willi
e411f94d44
changed enumerator implementation to handle reentrant code
2008-04-01 06:51:55 +00:00
Andreas Steffen
c63dc50f15
demoted ldap debug output to level 2
2008-03-28 22:44:45 +00:00
Martin Willi
b7ef3f625d
leak detective detects heap over- and underflow
2008-03-28 14:51:26 +00:00
Martin Willi
7939864dec
updated leak_detective whitelist: libxml and clearsilver functions
2008-03-28 13:16:36 +00:00
Martin Willi
15e21c5cba
fixed compiler warning
2008-03-28 10:21:04 +00:00
Martin Willi
cf4caefab1
whitelisted FCGX_Init
...
reporting count of leaks suppressed by whitelist
2008-03-27 11:42:35 +00:00
Andreas Steffen
1aad8bdfad
makeshift fix of --enable-integrity-test option
2008-03-26 20:16:42 +00:00
Martin Willi
7b88a983d8
caching of ocsp responses (experimental), no crl caching yet
2008-03-26 15:21:50 +00:00
Andreas Steffen
5298777ad8
treat sig_alg and algorithm comparison in a consistent way over all certificate types
2008-03-26 13:10:36 +00:00
Martin Willi
a852928a6f
fixed compiler warnings
2008-03-26 09:29:30 +00:00
Andreas Steffen
26930a8c3e
certificate factory can load certs from file
2008-03-25 22:28:27 +00:00
Andreas Steffen
ff98c85b57
added component BUILD_FROM_FILE
2008-03-25 13:26:33 +00:00
Andreas Steffen
13bec89740
renamed certificate field in x509_cert.c to encoding
2008-03-25 12:22:12 +00:00
Andreas Steffen
84a5c6a679
added ac.c
2008-03-25 10:13:57 +00:00
Andreas Steffen
3e6ee16478
defined *_create_from_file() constructors in libstrongswan/credentials/certificates
2008-03-25 10:12:45 +00:00
Andreas Steffen
63cb8a7fee
fixed refence counts before calling attribute certificate factory
2008-03-25 09:39:23 +00:00
Andreas Steffen
9bb8d23e17
corrected some doxygen entries
2008-03-22 08:15:18 +00:00
Andreas Steffen
855606efd4
optimized self-signed certificate detection
2008-03-21 20:37:08 +00:00
Andreas Steffen
ffce5db1b7
self-signed certificates were not marked by x509_cert.c
2008-03-21 19:07:12 +00:00
Andreas Steffen
c081a9bfe6
added ietf group attribute support to attibute certificate factory
2008-03-21 16:59:21 +00:00
Andreas Steffen
93da2684b6
fixed memory allocation problem in openac
2008-03-21 15:58:48 +00:00
Andreas Steffen
104c96a63c
added BUILD_SERIAL component and fixed several ac bugs
2008-03-21 12:44:15 +00:00
Andreas Steffen
a2083c30d5
added VALIDATION_UNKNOWN to cert_validation_names
2008-03-21 11:54:12 +00:00
Andreas Steffen
6ac3a7acbb
added credential factory support for BULD_NOT_BEFORE_TIME and BUILD_NOT_AFTER_TIME
2008-03-21 11:32:33 +00:00
Andreas Steffen
b6377673e7
added x509_ac_builder plugin
2008-03-21 10:52:11 +00:00
Andreas Steffen
bdec2e4f52
refactored openac and its attribute certificate factory
2008-03-20 15:23:52 +00:00
Martin Willi
a86e3ab37a
some C libraries need _GNU_SOURCE for rwlocks
2008-03-20 11:27:55 +00:00
Andreas Steffen
2b522ab450
added $
2008-03-20 09:30:07 +00:00
Andreas Steffen
384ebaa57a
included utils/linked_list.h
2008-03-20 09:28:58 +00:00
Andreas Steffen
1a9ad33e3b
cleaned up includes
2008-03-20 09:24:22 +00:00
Martin Willi
ca7663ece6
CA certificates are allowed to sign OCSP responsed without OCSP_SIGNER flag
2008-03-20 07:21:44 +00:00
Martin Willi
de7062a280
removed unimplemented private/public key function declarations
2008-03-19 14:21:56 +00:00
Martin Willi
cfede7f6e2
The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA,
...
as it requires to XOR the key into the hashers state.
A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA
and the FIPS-PRF function to properly use the existing SHA1 implementation.
2008-03-19 14:02:52 +00:00
Andreas Steffen
ae8715f956
attempt to achieve consistent debugging output
2008-03-19 12:06:38 +00:00
Martin Willi
081ae2eb61
fixed CRL check return value on revoked certificates
...
fixed possible refcounting bugs
generic return_null() implementation
2008-03-19 09:44:47 +00:00
Martin Willi
d7c529f5a6
creating public key from RSA private key
...
RSA key generation and signature test
2008-03-18 12:13:51 +00:00
Andreas Steffen
8d49b51f8b
made is_newer() a certificate_t method
2008-03-18 10:36:08 +00:00
Martin Willi
34e281ed32
enforcing x509_flags on certificate construction
2008-03-17 08:06:49 +00:00
Martin Willi
d4ba109c9c
fixed CRL revoked certs enumeration
2008-03-17 07:25:32 +00:00
Martin Willi
8d04f78d07
removed X509_PEER flag; flags are meant to read cert, not to store additional state in cert
...
removed x509_t.set_flags for the reason above
implemented a simple, generic shared_key_t
2008-03-14 15:11:29 +00:00
Martin Willi