denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
18,358 Commits 1 Branch 0 Tags
3fa3d2666a547580b40822f3eb7f2dfd6a5861a3
Commit Graph
145 Commits
Author SHA1 Message Date
Martin Willi 5c92524449 x509 CA certificates are encoded with a subjectKeyIdentifier 2009-09-08 11:02:49 +02:00
Martin Willi 8ab900dee9 x509 plugin supports encoding of CA basicConstraint extension 2009-09-08 10:38:02 +02:00
Martin Willi b9b8a98f47 remove spaces within tabs (\t( )+\t) 2009-09-04 15:00:19 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Andreas Steffen 2aa67d2636 .., but a comment might be helpful 2009-08-28 09:28:39 +02:00
Andreas Steffen 6be3f0f1d0 removed TODO reminder 2009-08-28 09:26:46 +02:00
Andreas Steffen be04eef270 allow choice of digest algorithm in certificate generation 2009-08-28 09:08:03 +02:00
Martin Willi 472cb4ce77 distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures 2009-08-27 17:37:42 +02:00
Martin Willi 8b10355c84 support generation of EC certificates 2009-08-27 13:59:30 +02:00
Martin Willi eb73685dac create algorithmIdentifier dynamically from OID database 2009-08-27 13:59:30 +02:00
Martin Willi 6b6ece636c updated x509 plugin to public key/x509 API changes 2009-08-26 11:23:52 +02:00
Martin Willi 280469923d make use of the pem helper plugin to load credentials 2009-08-26 11:23:49 +02:00
Andreas Steffen f3e87f5935 created signature_scheme_from_oid() helper function 2009-06-09 11:03:34 +02:00
Andreas Steffen 8b799d55ce pluto and scepclient use private and public key plugins of libstrongswan 2009-06-09 11:03:32 +02:00
Andreas Steffen e24aaddde0 hide credentials headers in credential_factory.h 2009-05-28 15:35:02 +02:00
Andreas Steffen 435e23e647 set parsed = TRUE before calling parse_certificate() 2009-05-27 09:52:53 +02:00
Martin Willi 24cd2ca6ee moved very stroke specific x509 flag handling out of core library 2009-05-18 10:42:16 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Tobias Brunner d24a74c5b4 merging changes from portability branch back to trunk 
important change for developers: %Y replaces %D to print identities!
 2009-04-30 11:37:54 +00:00
Tobias Brunner d25ce3701e printf hooks refactored to increase portability (i.e. support for platforms without glibc-compatible customizable printf - the Vstr string library is currently required on such platforms). 2009-03-12 18:07:32 +00:00
Martin Willi aa5c5d3fde removed debugging leftovers 2008-12-08 19:15:38 +00:00
Martin Willi df68b54f4e basic x509 certificate generation 2008-12-08 15:29:36 +00:00
Martin Willi e13389a7f7 got rid of deprecated create_iterator_locked() 2008-11-05 08:32:38 +00:00
Martin Willi f7c17aa15c refactored credential builder 
allow enumeration of matching builders
	try a second builder if the first one fails
	builder clones resources internally on demand
	caller frees added resources on failure and success
	stricter handling of non-supported build parts
 2008-09-02 11:00:13 +00:00
Tobias Brunner ea0823dffd ECDSA with OpenSSL 2008-06-10 09:08:27 +00:00
Tobias Brunner 2904403e96 parsing of subjectPublicKeyInfo of x509 certificates extracted 2008-06-10 09:00:42 +00:00
Andreas Steffen 49b2395e3b check if parsing of the RSA public key in an X.509 certificate was successful 2008-05-23 19:22:37 +00:00
Martin Willi c963c4bc15 fixed parsing of openssl format public keys 2008-05-06 12:56:36 +00:00
Andreas Steffen e8a680d94a cosmetics 2008-04-28 16:02:53 +00:00
Andreas Steffen 460025e253 introduced ASN1_EXIT command in ASN.1 object syntax definition 2008-04-28 16:00:52 +00:00
Andreas Steffen c3628ebc35 optimized parser->success() 2008-04-26 11:08:36 +00:00
Andreas Steffen d3d7e46b8c refactoring of the ASN.1 parser 2008-04-26 09:24:14 +00:00
Tobias Brunner 6439267a8c support for hash and URL encoded certificate payloads in charon 2008-04-18 11:24:45 +00:00
Martin Willi b5dbcc6270 compare certificates against full encoding to allow equality check of untrusted certs 2008-04-07 08:28:35 +00:00
Martin Willi 67d147e888 removed unused gmp.h to build libstrongswan without libgmp 2008-04-04 11:13:14 +00:00
Martin Willi 7b88a983d8 caching of ocsp responses (experimental), no crl caching yet 2008-03-26 15:21:50 +00:00
Martin Willi a852928a6f fixed compiler warnings 2008-03-26 09:29:30 +00:00
Andreas Steffen 26930a8c3e certificate factory can load certs from file 2008-03-25 22:28:27 +00:00
Andreas Steffen 13bec89740 renamed certificate field in x509_cert.c to encoding 2008-03-25 12:22:12 +00:00
Andreas Steffen 855606efd4 optimized self-signed certificate detection 2008-03-21 20:37:08 +00:00
Andreas Steffen ffce5db1b7 self-signed certificates were not marked by x509_cert.c 2008-03-21 19:07:12 +00:00
Andreas Steffen 8d49b51f8b made is_newer() a certificate_t method 2008-03-18 10:36:08 +00:00
Martin Willi 34e281ed32 enforcing x509_flags on certificate construction 2008-03-17 08:06:49 +00:00
Martin Willi 8d04f78d07 removed X509_PEER flag; flags are meant to read cert, not to store additional state in cert 
removed x509_t.set_flags for the reason above
implemented a simple, generic shared_key_t
 2008-03-14 15:11:29 +00:00
Martin Willi 552cc11b1f merged the modularization branch (credentials) back to trunk 2008-03-13 14:14:44 +00:00