Martin Willi
|
2ee8cd04bd
|
key encoding gained a cache() method, allows caching of externally created encodings
|
2009-08-27 09:57:49 +02:00 |
|
Martin Willi
|
083142c4a0
|
encoding public EC keys is not really possible without subjectPublicKeyInfo
|
2009-08-26 16:15:38 +02:00 |
|
Martin Willi
|
6a8791cd1f
|
complain about build errors in non-recursive cases only
|
2009-08-26 14:44:05 +02:00 |
|
Martin Willi
|
500f515a64
|
moved chunk_increment() function to libstrongswan
|
2009-08-26 14:07:26 +02:00 |
|
Martin Willi
|
df5c60bc5d
|
added a BUILD_FROM_FD option, supporting credential parsing from stdin
|
2009-08-26 13:03:23 +02:00 |
|
Martin Willi
|
7c577c8ea2
|
started implementation of a PKI tool, currently supporting RSA|ECDSA key generation
|
2009-08-26 11:23:55 +02:00 |
|
Martin Willi
|
08ed551ce0
|
implemented openssl EC key generation
|
2009-08-26 11:23:55 +02:00 |
|
Martin Willi
|
a0b850450f
|
fixed openssl RSA private key encoding
|
2009-08-26 11:23:55 +02:00 |
|
Martin Willi
|
cb4f09eff3
|
updated agent plugin to new fingerprint/encoding API
|
2009-08-26 11:23:53 +02:00 |
|
Martin Willi
|
8d09681559
|
updated pubkey plugin to new fingerprinting API
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
6b6ece636c
|
updated x509 plugin to public key/x509 API changes
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
a5e3153a36
|
updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
e35c3e2a03
|
updated openssl plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
cbd5138948
|
updated gcrypt plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
741680d179
|
updated gmp plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
1384a42e1b
|
changed get_id/get_encoding API of private/public key to use new encoding framework
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
1ef69b01ab
|
removed obsolete fingerprint identification types
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
edd354db6f
|
added generic implementation helpers for private_key_t.equals/belongs_to, public_key_t.equals
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
0dd2defc5a
|
added a seperate chache lookup, as encode() requires arguments expensive to build
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
64e77e8fbb
|
use credential builder API to parse trusted public keys
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
d1b3e8607e
|
implemented PGP fingerprinting
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
e773fe4cab
|
implemented pkcs1 private/public key encoding and fingerprinting
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
934d49a4f9
|
chunk_cat/cata/create_cat/length accept the sensitive data clearing mode 's'
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
957d116328
|
in addition to 'm'/'c' mode, asn1_wrap accepts a 's' mode clearing sensitive information
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
d9b24887a4
|
added a facility to hand out fingerprinting/key encoding to the pkcs1/pgp/... plugins
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
831520d895
|
gmp uses component builder to build public- from private-key
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
8380503168
|
gcrypt uses component builder to build public- from private-key
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
b457e08fca
|
moved PGP code to pluto and gpg plugin
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
7033a70fd0
|
gmp plugin makes use of pkcs1/pgp/dnskey plugins
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
cbfafc1125
|
enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
5ef478aaee
|
implemented RFC3110 key builder in a plugin, added generic DNSKEY RR parsing
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
3addf4e937
|
renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
9493dd2ce0
|
implemented a pgp plugin providing PGP key parsing builders
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
4e3d1e804e
|
make use of the pkcs1 plugin in gcrypt rsa key parsing
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
3044774323
|
removed subjectPublicKeyInfo parsing, provided by pkcs1 plugin
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
1e0f69373a
|
implemented a pkcs1 plugin providing PKCS#1 key parsing builders
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
7c2d883af7
|
show more information if building a credential fails
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
3f9ec06f6f
|
added getnetbyname/gethostbyname2 to leak detective whitelist, used by pluto
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
ddf7c6ac7b
|
do not enumerate builders returning NULL
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
cbb62e8f4c
|
handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind
|
2009-08-26 11:23:49 +02:00 |
|
Martin Willi
|
94463a33b4
|
removed obsolete PEM code in pluto/libstrongswan
|
2009-08-26 11:23:49 +02:00 |
|
Martin Willi
|
11aa7e7869
|
use a pluto specific credential builder to build pluto cert_t's
|
2009-08-26 11:23:49 +02:00 |
|
Martin Willi
|
4d15129160
|
pass along X509 flags when loading PEM encoded data
|
2009-08-26 11:23:49 +02:00 |
|
Martin Willi
|
280469923d
|
make use of the pem helper plugin to load credentials
|
2009-08-26 11:23:49 +02:00 |
|
Martin Willi
|
c9db16b7dd
|
added file loading support to pem plugin, using mmap()
|
2009-08-26 11:23:48 +02:00 |
|
Martin Willi
|
160f4c225d
|
moved PEM parsing functionality to its own plugin
|
2009-08-26 11:23:48 +02:00 |
|
Andreas Steffen
|
fc0ed07c1f
|
pruned OID tree
|
2009-08-18 18:24:26 +02:00 |
|
Andreas Steffen
|
c8b543a6fc
|
fixed wrong emailAddress OID introduced by revision c31687da
|
2009-08-18 17:52:00 +02:00 |
|
Tobias Brunner
|
f1777dff59
|
Replacing gethostbyname, gethostbyname2 and their _r variants with getaddrinfo to increase portability.
|
2009-08-14 16:14:32 +02:00 |
|
Tobias Brunner
|
26965b4ef3
|
OpenSolaris needs libsocket and libnsl for socket().
|
2009-08-14 14:50:53 +02:00 |
|