denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,181 Commits 1 Branch 0 Tags
2b9b579af9ddf80e56ed1eb10bbbb8b76a2a299b
Commit Graph
1615 Commits
Author SHA1 Message Date
Andreas Steffen cfa190bb7c compute memory requirement for PEM-encoding correctly 2011-01-07 05:29:59 +01:00
Martin Willi 7b3740d958 Added support for delta CRL checking to revocation plugin 2011-01-05 16:46:07 +01:00
Martin Willi d3a18dade1 Check for issuer only if we actually got a CRL 2011-01-05 16:46:06 +01:00
Martin Willi c5f213cc0f Check inhibitAnyPolicy in constraints plugin 2011-01-05 16:46:05 +01:00
Martin Willi b088fd4a76 Slightly renamed different policyConstraints to distinguish them better 2011-01-05 16:46:05 +01:00
Martin Willi 07eee80401 Added support for inhibitAnyPolicy constraint to x509 plugin 2011-01-05 16:46:05 +01:00
Martin Willi b3d359e58f Use a generic getter for all numerical X.509 constraints 2011-01-05 16:46:05 +01:00
Martin Willi b1703d6cb3 Check inhibitPolicyMapping in constraints plugin 2011-01-05 16:46:05 +01:00
Martin Willi 927120a128 Check requireExplicitPolicy in constraints plugin 2011-01-05 16:46:04 +01:00
Martin Willi 6aba6ff061 Pass an additional anchor flag to validate() hook if we reach the root CA 2011-01-05 16:46:04 +01:00
Martin Willi 09e319d419 Always pass auth info to validate(), use pathlen to check for user certificate 2011-01-05 16:46:04 +01:00
Martin Willi 55e4d8982f Added support for delta CRLs to x509 plugin 2011-01-05 16:46:03 +01:00
Martin Willi 1019cad161 Moved CRL distribution point building to an exportable function 2011-01-05 16:46:03 +01:00
Martin Willi a6478a0402 Simplified format of x509 CRL URI parsing/enumerator 2011-01-05 16:46:03 +01:00
Martin Willi e24a02a28f Fail on critical extensions in openssl CRLs 2011-01-05 16:46:03 +01:00
Martin Willi 51b7e9ce72 Respect enforce_critical setting in x509 plugin CRLs 2011-01-05 16:46:03 +01:00
Martin Willi d14d3b31b8 Parse CRL extensions in a switch statement 2011-01-05 16:46:03 +01:00
Martin Willi 6c547631c0 Respect policy mappings in certificatePolicy validation 2011-01-05 16:46:03 +01:00
Martin Willi 5595d2bcff Validate simple certificatePolicy inheritance 2011-01-05 16:46:03 +01:00
Martin Willi a742d97fb8 Added support for policyConstraints to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 5dba5852fc Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too 2011-01-05 16:46:02 +01:00
Martin Willi 5a0caa4b3a Added policyMappings support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 20bd78106e Added certificatePolicy support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi b0892d094c Fail when parsing unsupported critical extensions in openssl_x509 2011-01-05 16:46:02 +01:00
Martin Willi a6850b8499 Do not parse certificates with invalid version in openssl plugin 2011-01-05 16:46:01 +01:00
Martin Willi a2b340764f Implemented NameConstraint matching in constraints plugin 2011-01-05 16:46:00 +01:00
Martin Willi 7eeb37dea9 Added support for generating NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi 7c325cee5c Added support for parsing NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi dbfbbec368 Added name constraint enumerator to x509 interface 2011-01-05 16:46:00 +01:00
Martin Willi a199ef15e6 Migrated x509_cert_t to INIT/METHOD macros 2011-01-05 16:46:00 +01:00
Martin Willi be8858e9b6 Moved X509 pathlen constraint checking to constraints plugin 2011-01-05 16:46:00 +01:00
Martin Willi 01d3038137 Added plugin stub for advanced X509 constraint checking 2011-01-05 16:46:00 +01:00
Martin Willi 6840a6fb98 CRL/OCSP validation stores trustchain information in auth_cfg 2011-01-05 16:45:56 +01:00
Martin Willi 6ffd9f88ce Use subject, not issuer, of CRL issuing certificate 2011-01-05 16:45:56 +01:00
Martin Willi dffb176f2b CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation 2011-01-05 16:45:56 +01:00
Martin Willi ece5ac2271 Parse and encode crlSign keyUsage flag in x509 plugin 2011-01-05 16:45:56 +01:00
Martin Willi 7d7beaa1fa Use certificate CRLIssuer information to look up cacched CRLs or CDPs 2011-01-05 16:45:56 +01:00
Martin Willi 4e508517d7 Added support for CRL Issuers to x509 and OpenSSL plugins 2011-01-05 16:45:55 +01:00
Martin Willi 1535913aed Load plugins only once, even if listed twice 2011-01-05 16:45:49 +01:00
Andreas Steffen d77c6c49a9 printed plugin names have a hyphen 2010-12-24 05:53:27 +01:00
Martin Willi 33bfdf6f37 Fixed public key construction from PKCS#11 private key 2010-12-23 10:29:01 +01:00
Martin Willi 23a737eb29 Probe for supported AF_ALG algorithms, register dynamically 2010-12-20 10:09:20 +01:00
Martin Willi 4ee5d97d57 Register algorithms with dependencies only if dependency available 2010-12-20 10:00:39 +01:00
Martin Willi d214ebdf82 Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish) 2010-12-20 09:52:02 +01:00
Martin Willi 533151692f Implemented PRFs using AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi 06eb35efb0 Use the AF_ALG wrapper in hasher, crypter and signer 2010-12-20 09:52:02 +01:00
Martin Willi 1b5de7ce3b Use a generic AF_ALG wrapper for common operations 2010-12-20 09:52:02 +01:00
Martin Willi a5c973b955 Implemented crypter on top of AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi e75e1c9473 Implemented signer interface using AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi 6f08911321 Implemented hasher based on AF_ALG 2010-12-20 09:52:02 +01:00