Martin Willi
472cb4ce77
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
2009-08-27 17:37:42 +02:00
Martin Willi
ed75a4dd69
do not flush cached encodings, keys are responsible for it
2009-08-27 13:59:30 +02:00
Martin Willi
2ee8cd04bd
key encoding gained a cache() method, allows caching of externally created encodings
2009-08-27 09:57:49 +02:00
Martin Willi
083142c4a0
encoding public EC keys is not really possible without subjectPublicKeyInfo
2009-08-26 16:15:38 +02:00
Martin Willi
6a8791cd1f
complain about build errors in non-recursive cases only
2009-08-26 14:44:05 +02:00
Martin Willi
df5c60bc5d
added a BUILD_FROM_FD option, supporting credential parsing from stdin
2009-08-26 13:03:23 +02:00
Martin Willi
7c577c8ea2
started implementation of a PKI tool, currently supporting RSA|ECDSA key generation
2009-08-26 11:23:55 +02:00
Martin Willi
a5e3153a36
updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk
2009-08-26 11:23:52 +02:00
Martin Willi
e35c3e2a03
updated openssl plugin to new private/public key API, use encoder framework
2009-08-26 11:23:52 +02:00
Martin Willi
1384a42e1b
changed get_id/get_encoding API of private/public key to use new encoding framework
2009-08-26 11:23:52 +02:00
Martin Willi
edd354db6f
added generic implementation helpers for private_key_t.equals/belongs_to, public_key_t.equals
2009-08-26 11:23:52 +02:00
Martin Willi
0dd2defc5a
added a seperate chache lookup, as encode() requires arguments expensive to build
2009-08-26 11:23:52 +02:00
Martin Willi
d9b24887a4
added a facility to hand out fingerprinting/key encoding to the pkcs1/pgp/... plugins
2009-08-26 11:23:51 +02:00
Martin Willi
cbfafc1125
enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP
2009-08-26 11:23:51 +02:00
Martin Willi
3addf4e937
renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types
2009-08-26 11:23:51 +02:00
Martin Willi
1e0f69373a
implemented a pkcs1 plugin providing PKCS#1 key parsing builders
2009-08-26 11:23:50 +02:00
Martin Willi
7c2d883af7
show more information if building a credential fails
2009-08-26 11:23:50 +02:00
Martin Willi
ddf7c6ac7b
do not enumerate builders returning NULL
2009-08-26 11:23:50 +02:00
Martin Willi
cbb62e8f4c
handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind
2009-08-26 11:23:49 +02:00
Martin Willi
11aa7e7869
use a pluto specific credential builder to build pluto cert_t's
2009-08-26 11:23:49 +02:00
Martin Willi
160f4c225d
moved PEM parsing functionality to its own plugin
2009-08-26 11:23:48 +02:00
Tobias Brunner
3901937d14
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
2009-08-14 13:30:59 +02:00
Andreas Steffen
b6f739c13b
support of SHA224-based certificate signatures
2009-08-05 22:01:44 +02:00
Andreas Steffen
225bb2b810
conversion from ECDSA_WITH_SHAxxx OIDs to signature schemes
2009-07-15 18:12:40 +02:00
Andreas Steffen
11e6d28533
pluto supports ECDSA authentication
2009-06-12 19:59:49 +02:00
Andreas Steffen
f3e87f5935
created signature_scheme_from_oid() helper function
2009-06-09 11:03:34 +02:00
Andreas Steffen
8b799d55ce
pluto and scepclient use private and public key plugins of libstrongswan
2009-06-09 11:03:32 +02:00
Andreas Steffen
e24aaddde0
hide credentials headers in credential_factory.h
2009-05-28 15:35:02 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Martin Willi
d5d5bc0f16
using rwlock to parallel build credentials
2008-12-09 15:57:51 +00:00
Tobias Brunner
83c42156a2
add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg.
2008-12-03 10:12:20 +00:00
Martin Willi
0592212f23
fixed builder_cancel macro to return NULL on failed build
2008-10-06 13:08:49 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Martin Willi
66860d3b8f
loading PEM encoded public keys
2008-06-11 14:10:02 +00:00
Tobias Brunner
ea0823dffd
ECDSA with OpenSSL
2008-06-10 09:08:27 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Tobias Brunner
550690d23b
fixed the cleanup code when the credential factory fails to create a builder
2008-05-19 12:43:01 +00:00
Martin Willi
7b88a983d8
caching of ocsp responses (experimental), no crl caching yet
2008-03-26 15:21:50 +00:00
Andreas Steffen
26930a8c3e
certificate factory can load certs from file
2008-03-25 22:28:27 +00:00
Andreas Steffen
ff98c85b57
added component BUILD_FROM_FILE
2008-03-25 13:26:33 +00:00
Andreas Steffen
84a5c6a679
added ac.c
2008-03-25 10:13:57 +00:00
Andreas Steffen
3e6ee16478
defined *_create_from_file() constructors in libstrongswan/credentials/certificates
2008-03-25 10:12:45 +00:00
Andreas Steffen
c081a9bfe6
added ietf group attribute support to attibute certificate factory
2008-03-21 16:59:21 +00:00
Andreas Steffen
104c96a63c
added BUILD_SERIAL component and fixed several ac bugs
2008-03-21 12:44:15 +00:00
Andreas Steffen
a2083c30d5
added VALIDATION_UNKNOWN to cert_validation_names
2008-03-21 11:54:12 +00:00
Andreas Steffen
6ac3a7acbb
added credential factory support for BULD_NOT_BEFORE_TIME and BUILD_NOT_AFTER_TIME
2008-03-21 11:32:33 +00:00
Andreas Steffen
bdec2e4f52
refactored openac and its attribute certificate factory
2008-03-20 15:23:52 +00:00
Andreas Steffen
2b522ab450
added $
2008-03-20 09:30:07 +00:00
Martin Willi