Martin Willi
4d7a762871
credmgr: introduce a hook function to catch trust chain validation errors
2013-07-18 16:00:30 +02:00
Martin Willi
19cb07b890
automake: replace INCLUDES by AM_CPPFLAGS
...
INCLUDES are now deprecated and throw warnings when using automake 1.13.
We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and
defines are passed to AM_CPPFLAGS only.
2013-07-18 14:59:19 +02:00
Tobias Brunner
c172a92bfb
constraints: Use plugin features with soft dependency on X.509 decoding
2013-06-11 11:18:18 +02:00
Tobias Brunner
f05b427265
Moved debug.[ch] to utils folder
2012-10-24 16:00:51 +02:00
Tobias Brunner
12642a6831
Moved data structures to new collections subfolder
2012-10-24 16:00:49 +02:00
Martin Willi
c55818ebb0
Added a (not yet implemented) plugin_t method to reload plugin configuration
2011-04-15 10:07:13 +02:00
Martin Willi
787b5884aa
Added a get_name() function to plugin_t, create_plugin_enumerator enumerates over plugin_t
2011-04-15 10:07:12 +02:00
Andreas Steffen
d390b3b901
[hopefully] fixed pathlen problem on ARM platforms
2011-02-10 15:51:18 +01:00
Martin Willi
c5f213cc0f
Check inhibitAnyPolicy in constraints plugin
2011-01-05 16:46:05 +01:00
Martin Willi
b3d359e58f
Use a generic getter for all numerical X.509 constraints
2011-01-05 16:46:05 +01:00
Martin Willi
b1703d6cb3
Check inhibitPolicyMapping in constraints plugin
2011-01-05 16:46:05 +01:00
Martin Willi
927120a128
Check requireExplicitPolicy in constraints plugin
2011-01-05 16:46:04 +01:00
Martin Willi
6aba6ff061
Pass an additional anchor flag to validate() hook if we reach the root CA
2011-01-05 16:46:04 +01:00
Martin Willi
09e319d419
Always pass auth info to validate(), use pathlen to check for user certificate
2011-01-05 16:46:04 +01:00
Martin Willi
6c547631c0
Respect policy mappings in certificatePolicy validation
2011-01-05 16:46:03 +01:00
Martin Willi
5595d2bcff
Validate simple certificatePolicy inheritance
2011-01-05 16:46:03 +01:00
Martin Willi
5dba5852fc
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
2011-01-05 16:46:02 +01:00
Martin Willi
a2b340764f
Implemented NameConstraint matching in constraints plugin
2011-01-05 16:46:00 +01:00
Martin Willi
be8858e9b6
Moved X509 pathlen constraint checking to constraints plugin
2011-01-05 16:46:00 +01:00
Martin Willi
01d3038137
Added plugin stub for advanced X509 constraint checking
2011-01-05 16:46:00 +01:00
Martin Willi