Martin Willi
5f9e62c54f
Moved X509 addrBlock validation to a separate addrblock plugin
2010-07-13 10:26:07 +02:00
Martin Willi
2feb16f5dd
Added a certificate validation hook to the credential manager
2010-07-13 10:26:07 +02:00
Martin Willi
c3a9bef08e
Migrated credential manager to INIT/METHOD macros
2010-07-13 10:26:07 +02:00
Martin Willi
2ccc02a4fd
Moved credential manager to libstrongswan
2010-07-13 10:26:07 +02:00
Martin Willi
5db798c8e0
Charon uses a generic trunstchain length limit, not only for X509 certificates
2010-07-13 10:26:06 +02:00
Martin Willi
380106ab0d
Avoid relocking while enumerator is alive
2010-07-06 16:28:25 +02:00
Tobias Brunner
83b23011de
Some Doxygen fixes.
2010-07-05 15:04:30 +02:00
Martin Willi
4172574bfb
Use the group constraint in a more generic fashion, not only for attribute certificates
2010-07-05 09:41:04 +02:00
Martin Willi
07c5aacce8
Select subjectAltName address family using address length in openssl plugin
2010-06-24 12:01:18 +02:00
Martin Willi
7a74295e42
Select subjectAltName address family using address length in x509 plugin
2010-06-24 12:01:18 +02:00
Tobias Brunner
1e3d66f8d3
Fixing compilation of the OpenSSL plugin if ENGINE support is disabled.
...
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
2010-06-22 11:55:34 +02:00
Tobias Brunner
5a367e99c3
Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled.
...
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
2010-06-22 11:55:33 +02:00
Tobias Brunner
9b6db5cd2e
Fixed plugin checks in Android.mk files.
2010-06-22 10:40:34 +02:00
Tobias Brunner
b2ddaf0775
Adding a remove_at method to the hash table.
...
This allows to remove key-value pairs while enumerating them.
2010-06-07 16:36:26 +02:00
Tobias Brunner
88b6f14143
Migrated hashtable_t to INIT/METHOD macros.
2010-06-07 15:53:36 +02:00
Martin Willi
5493ffde0b
traffic_selector_t is gone into libstrongswan, migrate printf hook registration, too.
2010-06-07 15:06:09 +02:00
Martin Willi
f00a101590
Unwrap subjectKeyIdentifier from OCTET_STRING
2010-05-26 16:09:50 +02:00
Martin Willi
09f38ebe54
Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier
2010-05-21 16:38:19 +02:00
Martin Willi
13c593f126
Added support for CRL generation to x509 plugin
2010-05-21 16:25:51 +02:00
Martin Willi
aab861608a
Removed is_newer() from certificate_t, obsoleting all implementations
2010-05-21 16:25:51 +02:00
Martin Willi
8029e5efd2
Added generic implementations for crl_is_newer/certificate_is_newer
2010-05-21 16:25:51 +02:00
Martin Willi
654218a31b
Migrated x509_crl_t to INIT/METHOD macros
2010-05-21 16:25:51 +02:00
Martin Willi
6d7eed9a37
Implemented X.509 CRL reading using OpenSSL
2010-05-21 16:25:51 +02:00
Martin Willi
5728c6aa7e
Implemented X.509 certificate reading using OpenSSL
2010-05-21 16:25:51 +02:00
Martin Willi
9806381322
Fixed doxygen group
2010-05-20 17:37:18 +02:00
Martin Willi
40b2be16e3
Whitelist OpenSSLs ERR_put_error() in leak-detective
...
As we do not invoke ERR_get/clear_error() in all error cases, the
error codes are not removed from the error queue. But it is save
to whitelist the put function, as it uses a circular buffer that
does not grow beyond ERR_NUM_ERRORS errors (16 by default).
2010-05-20 17:37:18 +02:00
Martin Willi
091d178060
Option to skip slow addr2line resolution in leak-detective
2010-05-20 17:37:18 +02:00
Martin Willi
42df8beeb6
Explicitly link gpg-error to gcrypt plugin
2010-05-17 12:36:30 +02:00
Martin Willi
026b0058d5
Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin
2010-05-05 13:49:56 +02:00
Martin Willi
75d4322d68
Do not check pointer, but length of a chunk
2010-05-05 11:35:54 +02:00
Martin Willi
37c2aac89d
Double-check that a blob passed to is_asn1() is not empty
2010-05-05 11:35:53 +02:00
Martin Willi
c60b69e4bf
Do not print filename twice if plugin loading fails, dlerror() contains the filename
2010-05-05 11:16:32 +02:00
Martin Willi
b019c38fa2
Implemented base32 encoding of chunks.
2010-05-05 10:41:11 +02:00
Andreas Steffen
0ffedbfb46
added getprotobyname to whitelist
2010-05-02 21:13:10 +02:00
Tobias Brunner
726c0ae9d3
We have to rename thread_create on Mac OS X because it conflicts with a syscall.
2010-04-29 14:52:20 +02:00
Tobias Brunner
361f416d2c
The mutex of a thread has to be locked when destroying it.
2010-04-29 13:30:51 +02:00
Martin Willi
eadbc3da2f
Fixed RSA key generation with gcrypt
2010-04-29 09:51:37 +02:00
Martin Willi
dd04a68f22
PEM encoder supports encoding from RSA components directly, allowing gcrypt plugin to encode in PEM
2010-04-29 09:36:45 +02:00
Martin Willi
4590260b2d
Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten
2010-04-19 14:41:20 +02:00
Tobias Brunner
6edbe1652b
Integrating libhydra into the Android build system.
2010-04-12 16:47:47 +02:00
Andreas Steffen
054fd74658
fixed silly bug
2010-04-12 11:25:46 +02:00
Tobias Brunner
9f4b02e31d
Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan.
2010-04-10 12:10:04 +02:00
Martin Willi
b34b93dbf7
Store DH generator in a chunk, hide non-public data in a private struct
2010-04-08 15:08:35 +02:00
Martin Willi
f7c32feec0
Renamed clone function to avoid name clash with uclibc
2010-04-07 14:54:22 +02:00
Tobias Brunner
0a4dc78755
Some whitespace fixes.
2010-04-06 12:56:06 +02:00
Tobias Brunner
8b0e09103b
Adding DBG_LIB to all calls of libstrongswan's version of DBG*.
2010-04-06 12:47:40 +02:00
Tobias Brunner
9ed6341d3f
Adding support for debug groups in libstrongswan's logger.
2010-04-06 12:47:40 +02:00
Tobias Brunner
3fdee23f18
Move debug groups from charon's bus.h to libstrongswan's debug.h.
2010-04-06 12:47:40 +02:00
Andreas Steffen
29cf15a919
PEM encoding for OpenSSL RSA and EC public and private keys
2010-04-04 23:59:24 +02:00
Andreas Steffen
cea2857263
PEM encoding for GMP RSA public and private keys
2010-04-04 19:11:18 +02:00
Martin Willi