Martin Willi
|
3429be9514
|
Use a dedicated build part for challenge passwords, BUILD_PASSPHRASE gets obsolete
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
0556667dca
|
Use credential sets to load smartcard keys
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
70789d28a1
|
Handle PIN: as a magic keyword for prompt, use getpass() to silently read credentials
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
62be923683
|
Implemented a callback based credential set, currently for shared keys only
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
0749e91bec
|
Implemented a generic in-memory credential set, currently for shared keys only
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
a0bdd5d63e
|
Implemented callback PIN invocation for PKCS#11 login
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
7afc00d03c
|
Implemented keyid discovery on all modules/slots
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
0b8b664056
|
Pass the PKCS11 keyid as chunk, not as string
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
353d10d590
|
Reuse generic passphrase build part, not a dedicated PIN part
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
5f1e4438cb
|
Implemented private key on top of a PKCS#11 token
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
d007ce3206
|
Extended the PKCS#11 object enumerator by attribute retrieval
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
ddbac66028
|
Use the PKCS#11 object enumerator
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
9baa41c52d
|
Implemented a generic PKCS#11 object enumerator
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
cd251d9a21
|
Unload plugins in reverse order
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
3479c27931
|
Support module names in %smartcard specifier, streamlined smartcard building
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
36c852a08b
|
Added enumerator for PKCS#11 tokens
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
fe876b24d9
|
Handle NOT_SUPPORT return value from WaitForSlot
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
66033012c9
|
Reenabled dlclose
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
a6d2ec331b
|
Implemented a credential set on top of a PKCS#11 token
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
50a9e84540
|
Added NSPR PR_CallOnce to leak detective whitelist
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
044e0dd1b1
|
Added buffer checking variants of syslog functions to leak detective
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
fdd7e21225
|
Added a token add/remove callback function to the manager
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
6522d6c50b
|
Enumerate tokens and their mechanisms, wait for slot events
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
0c21dc000d
|
Depend on libcharon until we have a thread pool to use
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
75451ac8ba
|
Add enum names for CK_MECHANISM_TYPE constants
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
b3b0e57cb1
|
Make the PKCS#11 padding string trimming public, add null terminator
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
71151d3c1b
|
Added a getter for the library alias
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
2e209becbc
|
Moved PKCS#11 library loading to dedicated manager
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
50e1a710ea
|
Use locking, prefer our mutex abstraction layer
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
a6456dd640
|
Added enum names for PKCS#11 return values
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
e328ef4f4c
|
Load PKCS#11 modules defined in strongswan.conf
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
34454dc39e
|
Implemented an abstraction layer for PKCS#11 module loading
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
fb85d61980
|
Imported the free pkcs11.h header form the Scute project
|
2010-08-04 09:26:19 +02:00 |
|
Martin Willi
|
6e862e2152
|
Added PKCS#11 token plugin stub
|
2010-08-04 09:26:18 +02:00 |
|
Tobias Brunner
|
56bceda7b5
|
Fixed compiler warnings.
|
2010-08-03 19:00:46 +02:00 |
|
Martin Willi
|
0b71bc7af0
|
Moved eap-tls plugin to libcharon, updated to 4.4.1 APIs
|
2010-08-03 15:39:25 +02:00 |
|
Martin Willi
|
9dc73cd21c
|
Added support for AUTH_HMAC_SHA2_256_256, used in TLS
|
2010-08-03 15:39:24 +02:00 |
|
Martin Willi
|
2107953804
|
Added EAP-TLS plugin stub
|
2010-08-03 15:39:24 +02:00 |
|
Martin Willi
|
63163cc340
|
The va_list trick does not seem to be portable, revert dots-in-section fix
This reverts commit 8f50d06c35.
|
2010-07-30 10:57:59 +02:00 |
|
Martin Willi
|
8f50d06c35
|
Fixed settings lookup if the section/key contains dots
|
2010-07-29 12:14:32 +02:00 |
|
Martin Willi
|
c118559afe
|
Fix use of snprintf() in IETF attributes to string conversion
|
2010-07-28 10:54:48 +02:00 |
|
Martin Willi
|
018543f3a8
|
Fix use of snprintf() in identification DN to ASCII conversion
|
2010-07-28 10:54:47 +02:00 |
|
Martin Willi
|
e3b987f79b
|
Added support for Certificate, CRL and PKCS10 encoding to PEM plugin
|
2010-07-13 13:53:33 +02:00 |
|
Martin Willi
|
0406eeaacb
|
Support different encoding types in certificate.get_encoding()
|
2010-07-13 13:53:20 +02:00 |
|
Martin Willi
|
da9724e6d0
|
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
|
2010-07-13 11:29:35 +02:00 |
|
Martin Willi
|
24d327ab4d
|
Moved keys/key_encoding.[ch] to cred_encoding.[ch]
|
2010-07-13 11:02:35 +02:00 |
|
Martin Willi
|
e1c51fd859
|
Fixed doxygen group of cert_validator interface
|
2010-07-13 10:42:02 +02:00 |
|
Martin Willi
|
1c8c924610
|
Moved addrblock plugin to libcharon
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
c2e5cee413
|
Moved CRL/OCSP checking to a dedicated plugin called revocation
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
c1f9dad672
|
Made some useful methods in the credential manager public
|
2010-07-13 10:26:07 +02:00 |
|