 Martin Willi
|
3c2986bf0a
|
Support encoding of PKCS#7 "data" containers
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
637a8abb72
|
Add builder parts to generate PKCS#7 containers
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
d7aa09104f
|
Implement PKCS#7 enveloped-data parsing and decryption
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
98bbe0760f
|
Implement PKCS#7 signed-data parsing and verification
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
83ed1464e3
|
Implement PKCS#7 "data" content type parsing
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
ed1c430334
|
certificate_t.has_subject() matches for certificate serialNumber
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
9de6a7a85c
|
Implement generic PKCS#7 contentInfo parsing
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
bd20f040fd
|
Add a plugin stub for PKCS#7 containers
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
692f560546
|
Add container plugin features
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
fc67a932ba
|
Add a generic interface for crypto containers and a more specific PKCS#7 interface
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
67ca44ccbd
|
Rebuild PKCS#9 encoding after adding new attributes
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
60c9b5da8d
|
Don't store additional encoding for each PKCS#9 attribute
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
7f9fedc9bd
|
Unify PKCS#9 set_attribute* methods to a single add_attribute
This way the PKCS#9 implementation does not have to know
the encoding types for values
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
c1005c120c
|
PKCS#9 coding style cleanups
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
f0c02e27c4
|
Remove external build_encoding method in PKCS#9
|
2012-12-19 10:32:07 +01:00 |
|
|
Martin Willi
|
4185c64464
|
Use a ./configure check to detect pthread spinlock availability
_POSIX_SPIN_LOCKS does not seem to be defined correctly on all
systems (Debian libc 2.3.6). Fixes #262.
|
2012-12-18 09:51:33 +01:00 |
|
|
Martin Willi
|
b091d80aff
|
Replace optionsfrom LGPLv2 header by a GPLv2
|
2012-11-30 18:00:39 +01:00 |
|
|
Martin Willi
|
7277e4719e
|
Consolidated %any(6) host_t parsing
|
2012-11-29 10:22:52 +01:00 |
|
|
Martin Willi
|
98d0fd25a8
|
Remove numeric conversion from resolver, it is done directly in host_t
|
2012-11-29 10:22:52 +01:00 |
|
|
Martin Willi
|
47f35b46a1
|
host_create_from_dns() tries a numeric conversion before asking resolver
|
2012-11-29 10:22:51 +01:00 |
|
|
Martin Willi
|
f5fe52bf9a
|
Add a host_t constructor from string, but with a specific family
|
2012-11-29 10:22:51 +01:00 |
|
|
Andreas Steffen
|
48b23d06a8
|
allow the optional sharing if RSA private keys
|
2012-11-22 00:34:42 +01:00 |
|
|
Andreas Steffen
|
76bd0d7c1f
|
overwrite sensitive prime with zeroes
|
2012-11-18 22:55:22 +01:00 |
|
|
Andreas Steffen
|
168ee460c6
|
implemented generation of safe primes
|
2012-11-18 19:22:31 +01:00 |
|
|
Martin Willi
|
1e5e1fb685
|
libstrongswan can be initialized more than once
|
2012-11-14 10:14:31 +01:00 |
|
|
Andreas Steffen
|
9901207a09
|
transmit Product Vendor ID if known
|
2012-10-31 20:29:36 +01:00 |
|
|
Andreas Steffen
|
3e765dad95
|
added some Linux OS PENs
|
2012-10-31 14:53:01 +01:00 |
|
|
Andreas Steffen
|
12d68762f7
|
issue warning if sqlite finalize is missing
|
2012-10-26 13:22:02 +02:00 |
|
|
Martin Willi
|
828cefc313
|
Fix RSA encryption padding terminator in gmp plugin, broken with 5025135f
|
2012-10-24 20:26:10 +02:00 |
|
|
Tobias Brunner
|
bca34c3717
|
Moved utils.[ch] to utils folder
|
2012-10-24 16:07:53 +02:00 |
|
|
Tobias Brunner
|
f9625952ad
|
Moved settings_t to utils folder
|
2012-10-24 16:00:51 +02:00 |
|
|
Tobias Brunner
|
f05b427265
|
Moved debug.[ch] to utils folder
|
2012-10-24 16:00:51 +02:00 |
|
|
Tobias Brunner
|
d5c143e5be
|
Moved enum_name_t to utils folder
|
2012-10-24 16:00:50 +02:00 |
|
|
Tobias Brunner
|
125b37af6d
|
Moved chunk_t to utils folder
|
2012-10-24 16:00:50 +02:00 |
|
|
Tobias Brunner
|
05e448c5cc
|
Moved printf hooks to utils folder
|
2012-10-24 16:00:50 +02:00 |
|
|
Tobias Brunner
|
08944b68ac
|
Moved integrity_checker_t to utils folder
|
2012-10-24 16:00:50 +02:00 |
|
|
Tobias Brunner
|
12642a6831
|
Moved data structures to new collections subfolder
|
2012-10-24 16:00:49 +02:00 |
|
|
Tobias Brunner
|
fdee6b5f5a
|
Moved packet_t and tun_device_t to networking folder
|
2012-10-24 15:06:18 +02:00 |
|
|
Tobias Brunner
|
2e7cc07ecd
|
Moved host_t and host_resolver_t to a new networking subfolder
|
2012-10-24 15:06:18 +02:00 |
|
|
Martin Willi
|
fd6c0c8fb4
|
Add a traffic selector constructor creating a TS directly from a CIDR string
|
2012-10-24 13:25:02 +02:00 |
|
|
Martin Willi
|
712e81306f
|
PKCS#11 library search using keyid uses a fallback to look for certificates
|
2012-10-24 13:07:54 +02:00 |
|
|
Martin Willi
|
434902b302
|
Add a strongswan.conf option to disable loading of all certificates from a pkcs11 module
|
2012-10-24 13:07:53 +02:00 |
|
|
Martin Willi
|
36e47a409b
|
Explicit pkcs11 certificate loading can enforce a module and a slot
|
2012-10-24 13:07:53 +02:00 |
|
|
Martin Willi
|
5d4c27d077
|
Be less verbose if loading PKCS#11 certificate fails
|
2012-10-24 13:07:53 +02:00 |
|
|
Martin Willi
|
fbd3863571
|
Add a builder to load specific pkcs11 certificates by keyid
|
2012-10-24 13:07:52 +02:00 |
|
|
Martin Willi
|
ffe42fa405
|
If no pkcs11 public key for a private key found, search for a certificate
|
2012-10-24 13:07:52 +02:00 |
|
|
Martin Willi
|
44fdc62f82
|
Move pkcs11 public key lookup function declaration to header file
|
2012-10-24 13:07:52 +02:00 |
|
|
Martin Willi
|
60e59b7e7f
|
Add proposal keywords to explicitly specify PRF algorithms
|
2012-10-24 11:49:36 +02:00 |
|
|
Martin Willi
|
2232d88569
|
Support field with specifiers in %N printf hook
|
2012-10-24 11:34:30 +02:00 |
|
|
Tobias Brunner
|
3c4d383443
|
Added an option to reload certificates from PKCS#11 tokens on SIGHUP
|
2012-10-18 14:42:09 +02:00 |
|