denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,358 Commits 1 Branch 0 Tags
3fa3d2666a547580b40822f3eb7f2dfd6a5861a3
Commit Graph
145 Commits
Author SHA1 Message Date
Martin Willi a742d97fb8 Added support for policyConstraints to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 5dba5852fc Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too 2011-01-05 16:46:02 +01:00
Martin Willi 5a0caa4b3a Added policyMappings support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 20bd78106e Added certificatePolicy support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 7eeb37dea9 Added support for generating NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi 7c325cee5c Added support for parsing NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi dbfbbec368 Added name constraint enumerator to x509 interface 2011-01-05 16:46:00 +01:00
Martin Willi a199ef15e6 Migrated x509_cert_t to INIT/METHOD macros 2011-01-05 16:46:00 +01:00
Martin Willi ece5ac2271 Parse and encode crlSign keyUsage flag in x509 plugin 2011-01-05 16:45:56 +01:00
Martin Willi 4e508517d7 Added support for CRL Issuers to x509 and OpenSSL plugins 2011-01-05 16:45:55 +01:00
Martin Willi 663e735553 Compare subject against all key identifiers in has_subject() 2010-09-09 17:46:20 +02:00
Andreas Steffen f85f0c2795 has_subject() now resolves ID_KEY_IDs 2010-09-09 17:15:46 +02:00
Martin Willi 772cba39e4 Parse UPN subjectAltNames in x509 plugin 2010-08-10 18:46:31 +02:00
Martin Willi 0406eeaacb Support different encoding types in certificate.get_encoding() 2010-07-13 13:53:20 +02:00
Martin Willi da9724e6d0 Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding 2010-07-13 11:29:35 +02:00
Martin Willi 7a74295e42 Select subjectAltName address family using address length in x509 plugin 2010-06-24 12:01:18 +02:00
Martin Willi aab861608a Removed is_newer() from certificate_t, obsoleting all implementations 2010-05-21 16:25:51 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Andreas Steffen ceeb9bac8b critical keyUsage extension must be parsed 2010-03-07 20:51:34 +01:00
Andreas Steffen 1ec8f22de2 set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true 2010-03-07 17:27:53 +01:00
Andreas Steffen b917f49684 initialize variables to avoid compiler warning 2010-02-05 12:34:37 +01:00
Martin Willi 7eab4a1be6 Support TLS client authentication Extended Key Usage in x509 generation 2010-01-14 12:00:43 +01:00
Andreas Steffen 3e33ae1004 ipsec pki --self|issue supports --pathlen option setting a path length constraint 2009-12-31 15:13:35 +01:00
Andreas Steffen e16a01a5e6 X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension 2009-12-22 13:18:27 +01:00
Andreas Steffen 91e35b7c9e added create_ipAddrBlock_enumerator() method to x509_t 2009-12-22 11:58:30 +01:00
Andreas Steffen 157125e4c9 traffic_selector supports RFC 3779 address range format 2009-12-21 21:29:01 +01:00
Andreas Steffen 513eb95e60 parse RFC 3779 addressFamily 2009-12-20 19:26:28 +01:00
Andreas Steffen 7d379a786c plugin name is x509 2009-12-20 16:01:35 +01:00
Andreas Steffen 28c25485ba discard certificate with unknown critical extensions 2009-12-20 15:53:39 +01:00
Andreas Steffen f3e366a9a0 use traffic_selector_t object to represent ipAddrBlocks 2009-12-20 15:15:02 +01:00
Andreas Steffen ad858aee15 parse ipAddrBlocks 2009-12-17 17:32:55 +01:00
Andreas Steffen 4c68a85a75 implemented path length constraint checkinf for IKEv2 2009-11-04 23:37:15 +01:00
Andreas Steffen fae322219f output optional pathLenConstraint in ipsec listcacerts 2009-11-04 07:30:07 +01:00
Andreas Steffen 00aa027503 implemented parsing of pathLenConstraint 2009-11-04 00:03:10 +01:00
Andreas Steffen 408e46a324 ipsec pki --issue suports --flag authServer option 2009-10-05 22:44:01 +02:00
Andreas Steffen ce40bf5def ipsec pki --issue supports --flag ocspSigning option 2009-10-05 21:20:42 +02:00
Andreas Steffen 0aa5cea248 mark embedded parsing in debug mode 2009-10-02 20:54:15 +02:00
Andreas Steffen daaedcb9c2 verify correctness of X.509 versions 2009-10-02 17:49:51 +02:00
Andreas Steffen 8ad23ba346 added get_subjectKeyIdentifier() to x509_t 2009-09-26 22:10:36 +02:00
Andreas Steffen a28334720c adding additional flags to loaded X.509 certificates 2009-09-22 12:55:25 +02:00
Andreas Steffen edf30136b0 implemented ASN.1 encoding of PKCS#10 attributes 2009-09-15 21:55:44 +02:00
Andreas Steffen 210d287368 extended hasher_signature_algorithm_to_oid() function 2009-09-13 21:41:51 +02:00
Andreas Steffen 4c51c6be01 parsing error caused segfault in destroy() 2009-09-13 20:56:12 +02:00
Andreas Steffen beace4af14 corrected captions 2009-09-12 17:39:15 +02:00
Martin Willi 6dc57cd02e x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations 2009-09-11 17:16:22 +02:00
Martin Willi 3b878dae7e Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro 2009-09-11 15:39:35 +02:00
Martin Willi 881b259943 x509 plugin supports encoding of CRL distribution points 2009-09-11 15:36:22 +02:00
Martin Willi d73f453c29 Updated x509 plugin to the new builder API 2009-09-10 16:20:21 +02:00
Martin Willi 7631aac20c x509 certificates support encoding of email, DNS and IP subjectAltNames 2009-09-08 13:17:41 +02:00
Martin Willi d7be290643 non self-signed x509 certificates are encoded with authorityKeyIdentifier 2009-09-08 11:26:05 +02:00