Martin Willi
|
fdd7e21225
|
Added a token add/remove callback function to the manager
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
6522d6c50b
|
Enumerate tokens and their mechanisms, wait for slot events
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
0c21dc000d
|
Depend on libcharon until we have a thread pool to use
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
75451ac8ba
|
Add enum names for CK_MECHANISM_TYPE constants
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
b3b0e57cb1
|
Make the PKCS#11 padding string trimming public, add null terminator
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
71151d3c1b
|
Added a getter for the library alias
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
2e209becbc
|
Moved PKCS#11 library loading to dedicated manager
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
50e1a710ea
|
Use locking, prefer our mutex abstraction layer
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
a6456dd640
|
Added enum names for PKCS#11 return values
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
e328ef4f4c
|
Load PKCS#11 modules defined in strongswan.conf
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
34454dc39e
|
Implemented an abstraction layer for PKCS#11 module loading
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
fb85d61980
|
Imported the free pkcs11.h header form the Scute project
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
6e862e2152
|
Added PKCS#11 token plugin stub
|
2010-08-04 09:26:18 +02:00 |
|
Tobias Brunner
|
56bceda7b5
|
Fixed compiler warnings.
|
2010-08-03 19:00:46 +02:00 |
|
Martin Willi
|
0b71bc7af0
|
Moved eap-tls plugin to libcharon, updated to 4.4.1 APIs
|
2010-08-03 15:39:25 +02:00 |
|
Martin Willi
|
9dc73cd21c
|
Added support for AUTH_HMAC_SHA2_256_256, used in TLS
|
2010-08-03 15:39:24 +02:00 |
|
Martin Willi
|
2107953804
|
Added EAP-TLS plugin stub
|
2010-08-03 15:39:24 +02:00 |
|
Martin Willi
|
63163cc340
|
The va_list trick does not seem to be portable, revert dots-in-section fix
This reverts commit 8f50d06c35.
|
2010-07-30 10:57:59 +02:00 |
|
Martin Willi
|
8f50d06c35
|
Fixed settings lookup if the section/key contains dots
|
2010-07-29 12:14:32 +02:00 |
|
Martin Willi
|
c118559afe
|
Fix use of snprintf() in IETF attributes to string conversion
|
2010-07-28 10:54:48 +02:00 |
|
Martin Willi
|
018543f3a8
|
Fix use of snprintf() in identification DN to ASCII conversion
|
2010-07-28 10:54:47 +02:00 |
|
Martin Willi
|
e3b987f79b
|
Added support for Certificate, CRL and PKCS10 encoding to PEM plugin
|
2010-07-13 13:53:33 +02:00 |
|
Martin Willi
|
0406eeaacb
|
Support different encoding types in certificate.get_encoding()
|
2010-07-13 13:53:20 +02:00 |
|
Martin Willi
|
da9724e6d0
|
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
|
2010-07-13 11:29:35 +02:00 |
|
Martin Willi
|
24d327ab4d
|
Moved keys/key_encoding.[ch] to cred_encoding.[ch]
|
2010-07-13 11:02:35 +02:00 |
|
Martin Willi
|
e1c51fd859
|
Fixed doxygen group of cert_validator interface
|
2010-07-13 10:42:02 +02:00 |
|
Martin Willi
|
1c8c924610
|
Moved addrblock plugin to libcharon
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
c2e5cee413
|
Moved CRL/OCSP checking to a dedicated plugin called revocation
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
c1f9dad672
|
Made some useful methods in the credential manager public
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
5f9e62c54f
|
Moved X509 addrBlock validation to a separate addrblock plugin
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
2feb16f5dd
|
Added a certificate validation hook to the credential manager
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
c3a9bef08e
|
Migrated credential manager to INIT/METHOD macros
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
2ccc02a4fd
|
Moved credential manager to libstrongswan
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
5db798c8e0
|
Charon uses a generic trunstchain length limit, not only for X509 certificates
|
2010-07-13 10:26:06 +02:00 |
|
Martin Willi
|
380106ab0d
|
Avoid relocking while enumerator is alive
|
2010-07-06 16:28:25 +02:00 |
|
Tobias Brunner
|
83b23011de
|
Some Doxygen fixes.
|
2010-07-05 15:04:30 +02:00 |
|
Martin Willi
|
4172574bfb
|
Use the group constraint in a more generic fashion, not only for attribute certificates
|
2010-07-05 09:41:04 +02:00 |
|
Martin Willi
|
07c5aacce8
|
Select subjectAltName address family using address length in openssl plugin
|
2010-06-24 12:01:18 +02:00 |
|
Martin Willi
|
7a74295e42
|
Select subjectAltName address family using address length in x509 plugin
|
2010-06-24 12:01:18 +02:00 |
|
Tobias Brunner
|
1e3d66f8d3
|
Fixing compilation of the OpenSSL plugin if ENGINE support is disabled.
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
|
2010-06-22 11:55:34 +02:00 |
|
Tobias Brunner
|
5a367e99c3
|
Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled.
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
|
2010-06-22 11:55:33 +02:00 |
|
Tobias Brunner
|
9b6db5cd2e
|
Fixed plugin checks in Android.mk files.
|
2010-06-22 10:40:34 +02:00 |
|
Tobias Brunner
|
b2ddaf0775
|
Adding a remove_at method to the hash table.
This allows to remove key-value pairs while enumerating them.
|
2010-06-07 16:36:26 +02:00 |
|
Tobias Brunner
|
88b6f14143
|
Migrated hashtable_t to INIT/METHOD macros.
|
2010-06-07 15:53:36 +02:00 |
|
Martin Willi
|
5493ffde0b
|
traffic_selector_t is gone into libstrongswan, migrate printf hook registration, too.
|
2010-06-07 15:06:09 +02:00 |
|
Martin Willi
|
f00a101590
|
Unwrap subjectKeyIdentifier from OCTET_STRING
|
2010-05-26 16:09:50 +02:00 |
|
Martin Willi
|
09f38ebe54
|
Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier
|
2010-05-21 16:38:19 +02:00 |
|
Martin Willi
|
13c593f126
|
Added support for CRL generation to x509 plugin
|
2010-05-21 16:25:51 +02:00 |
|
Martin Willi
|
aab861608a
|
Removed is_newer() from certificate_t, obsoleting all implementations
|
2010-05-21 16:25:51 +02:00 |
|
Martin Willi
|
8029e5efd2
|
Added generic implementations for crl_is_newer/certificate_is_newer
|
2010-05-21 16:25:51 +02:00 |
|