denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,566 Commits 1 Branch 0 Tags
2d5a20061a44bf3fe5fe8c6c9607fc4c95330f00
Commit Graph
1012 Commits
Author SHA1 Message Date
Martin Willi 0c21dc000d Depend on libcharon until we have a thread pool to use 2010-08-04 09:26:19 +02:00
Martin Willi 75451ac8ba Add enum names for CK_MECHANISM_TYPE constants 2010-08-04 09:26:19 +02:00
Martin Willi b3b0e57cb1 Make the PKCS#11 padding string trimming public, add null terminator 2010-08-04 09:26:19 +02:00
Martin Willi 71151d3c1b Added a getter for the library alias 2010-08-04 09:26:19 +02:00
Martin Willi 2e209becbc Moved PKCS#11 library loading to dedicated manager 2010-08-04 09:26:19 +02:00
Martin Willi 50e1a710ea Use locking, prefer our mutex abstraction layer 2010-08-04 09:26:19 +02:00
Martin Willi a6456dd640 Added enum names for PKCS#11 return values 2010-08-04 09:26:19 +02:00
Martin Willi e328ef4f4c Load PKCS#11 modules defined in strongswan.conf 2010-08-04 09:26:19 +02:00
Martin Willi 34454dc39e Implemented an abstraction layer for PKCS#11 module loading 2010-08-04 09:26:19 +02:00
Martin Willi fb85d61980 Imported the free pkcs11.h header form the Scute project 2010-08-04 09:26:19 +02:00
Martin Willi 6e862e2152 Added PKCS#11 token plugin stub 2010-08-04 09:26:18 +02:00
Martin Willi 9dc73cd21c Added support for AUTH_HMAC_SHA2_256_256, used in TLS 2010-08-03 15:39:24 +02:00
Martin Willi e3b987f79b Added support for Certificate, CRL and PKCS10 encoding to PEM plugin 2010-07-13 13:53:33 +02:00
Martin Willi 0406eeaacb Support different encoding types in certificate.get_encoding() 2010-07-13 13:53:20 +02:00
Martin Willi da9724e6d0 Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding 2010-07-13 11:29:35 +02:00
Martin Willi 24d327ab4d Moved keys/key_encoding.[ch] to cred_encoding.[ch] 2010-07-13 11:02:35 +02:00
Martin Willi 1c8c924610 Moved addrblock plugin to libcharon 2010-07-13 10:26:07 +02:00
Martin Willi c2e5cee413 Moved CRL/OCSP checking to a dedicated plugin called revocation 2010-07-13 10:26:07 +02:00
Martin Willi 5f9e62c54f Moved X509 addrBlock validation to a separate addrblock plugin 2010-07-13 10:26:07 +02:00
Tobias Brunner 83b23011de Some Doxygen fixes. 2010-07-05 15:04:30 +02:00
Martin Willi 07c5aacce8 Select subjectAltName address family using address length in openssl plugin 2010-06-24 12:01:18 +02:00
Martin Willi 7a74295e42 Select subjectAltName address family using address length in x509 plugin 2010-06-24 12:01:18 +02:00
Tobias Brunner 1e3d66f8d3 Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
 2010-06-22 11:55:34 +02:00
Tobias Brunner 5a367e99c3 Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
 2010-06-22 11:55:33 +02:00
Martin Willi f00a101590 Unwrap subjectKeyIdentifier from OCTET_STRING 2010-05-26 16:09:50 +02:00
Martin Willi 09f38ebe54 Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier 2010-05-21 16:38:19 +02:00
Martin Willi 13c593f126 Added support for CRL generation to x509 plugin 2010-05-21 16:25:51 +02:00
Martin Willi aab861608a Removed is_newer() from certificate_t, obsoleting all implementations 2010-05-21 16:25:51 +02:00
Martin Willi 654218a31b Migrated x509_crl_t to INIT/METHOD macros 2010-05-21 16:25:51 +02:00
Martin Willi 6d7eed9a37 Implemented X.509 CRL reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 5728c6aa7e Implemented X.509 certificate reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 9806381322 Fixed doxygen group 2010-05-20 17:37:18 +02:00
Martin Willi 42df8beeb6 Explicitly link gpg-error to gcrypt plugin 2010-05-17 12:36:30 +02:00
Martin Willi 026b0058d5 Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin 2010-05-05 13:49:56 +02:00
Martin Willi 75d4322d68 Do not check pointer, but length of a chunk 2010-05-05 11:35:54 +02:00
Martin Willi c60b69e4bf Do not print filename twice if plugin loading fails, dlerror() contains the filename 2010-05-05 11:16:32 +02:00
Martin Willi eadbc3da2f Fixed RSA key generation with gcrypt 2010-04-29 09:51:37 +02:00
Martin Willi dd04a68f22 PEM encoder supports encoding from RSA components directly, allowing gcrypt plugin to encode in PEM 2010-04-29 09:36:45 +02:00
Martin Willi 4590260b2d Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten 2010-04-19 14:41:20 +02:00
Tobias Brunner 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. 2010-04-10 12:10:04 +02:00
Martin Willi b34b93dbf7 Store DH generator in a chunk, hide non-public data in a private struct 2010-04-08 15:08:35 +02:00
Tobias Brunner 0a4dc78755 Some whitespace fixes. 2010-04-06 12:56:06 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Andreas Steffen 29cf15a919 PEM encoding for OpenSSL RSA and EC public and private keys 2010-04-04 23:59:24 +02:00
Andreas Steffen cea2857263 PEM encoding for GMP RSA public and private keys 2010-04-04 19:11:18 +02:00
Andreas Steffen efcd3c7a63 fixed doxygen group 2010-04-03 21:55:30 +02:00
Andreas Steffen 0dee20d958 change #define to PEM_BUILDER_H_ 2010-04-03 21:43:27 +02:00
Tobias Brunner 75dc019252 Moving attr-sql plugin from libstrongswan to libhydra. 2010-03-24 18:53:09 +01:00
Heiko Hund 0d59713dd9 Fixed ipsec pool --batch command 
--batch mode has shown to be buggy in very obscure ways in the first real
life tests. For example a batch file

       --del pool1
       --replace pool2 --addresses file1

returned the error "/usr/libexec/ipsec/pool: unrecognized option '--lace'"
which was gone after moving the --del behind --replace. With the patch
from below applied everything works like a charm. From the info on the
man page it seem to be unrelated to this problem, though:

       A program that scans multiple  argument  vectors,  or
       rescans  the same vector more than once, and wants to
       make use of GNU extensions such as '+' and '-' at the
       start   of   optstring,   or  changes  the  value  of
       POSIXLY_CORRECT  between  scans,  must   reinitialize
       getopt()  by  resetting  optind to 0, rather than the
       traditional value of 1.  (Resetting to 0  forces  the
       invocation of an internal initialization routine that
       rechecks POSIXLY_CORRECT and checks  for  GNU  exten-
       sions in optstring.)

Signed-off-by: Heiko Hund <[email protected]>
 2010-03-24 08:21:36 +01:00
Martin Willi 7c11d10eb8 Removed strayed code fragment 2010-03-19 10:25:12 +01:00