denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
19,541 Commits 1 Branch 0 Tags
545eb2416aaffe0d99e2139c7e11efd49a88ec3c
Commit Graph
4233 Commits
Author SHA1 Message Date
Andreas Steffen 4953a78a66 fixed parsing of X.509 certificatePolicies 2011-03-11 12:38:00 +01:00
Andreas Steffen cfeb687d7f added tcg-at-tpmIdLabel OID 2011-03-11 11:48:46 +01:00
Andreas Steffen fc01176a7d output unknown OIDs in dot string notation 2011-03-11 11:48:22 +01:00
Andreas Steffen f813069e89 fixed asn1_oid_to_string() conversion 2011-03-09 15:36:05 +01:00
Martin Willi 21f411b861 Use a boolean expression for refcount check, fixes refcounting if bool is a signed char 2011-03-09 07:52:13 +01:00
Andreas Steffen c54e1bb83b defined some TCG attribute OIDs 2011-03-08 07:27:00 +01:00
Andreas Steffen 04be19127d support of RSAES-OAEP public keys 2011-03-08 07:03:22 +01:00
Andreas Steffen bf10d793f6 added id-RSAES-OAEP and id-pSpecified OIDs 2011-03-07 22:46:28 +01:00
Andreas Steffen a79eba2e9c corrected pkcs11 error message 2011-03-01 22:19:58 +01:00
Martin Willi d17304cd29 Added a pseudo EAP type to allow an implementation to select the real type dynamically 2011-02-22 16:09:45 +01:00
Andreas Steffen 1a9f2443a2 prevent multiple debug outputs in case of non-monolithic plugins 2011-02-20 15:18:36 +01:00
Martin Willi 07bda3feea Whitelisted another tzset variant and dlsym 2011-02-18 16:08:01 +01:00
Tobias Brunner 6302f49754 Merged the monolithic and non-monolithic plugin loaders into one. 
This allows to add additional plugins even when the original build was
monolithic. Also fixes the pluto/xauth bug with the monolithic build.
 2011-02-10 16:49:42 +01:00
Andreas Steffen d390b3b901 [hopefully] fixed pathlen problem on ARM platforms 2011-02-10 15:51:18 +01:00
Andreas Steffen b98dfe1477 defined OID_STRONGSWAN 2011-02-07 23:42:29 +01:00
Tobias Brunner 84545f6e7c Some typos fixed. 2011-02-07 11:39:41 +01:00
Andreas Steffen c4fd3b2f42 introduced libstrongswan.x509.enforce_critical parameter 2011-02-05 09:01:18 +01:00
Tobias Brunner 6f61b32e52 Properly initialize variable 'critical'. 2011-02-04 18:02:49 +01:00
Martin Willi 7e0eae4985 Replace hashtable key if a put operation replaces value 
Fixes a crash if lifetime of key is bound to value (i.e. key == value)
 2011-02-03 17:09:09 +01:00
Martin Willi bf3e482141 Fix check to increase hashtable size properly 2011-02-03 17:08:53 +01:00
Martin Willi a846bf06e8 Add missing AUTH_RULE for trusted self-signed peer certificates 2011-02-01 09:25:10 +01:00
Andreas Steffen 8b42864884 fixed checking of unknown critical extensions in openssl_x509 2011-01-31 14:37:48 +01:00
Martin Willi 7cfa84f540 Whitelist gnutls init function 2011-01-17 18:20:12 +01:00
Martin Willi 2ca52c8048 Implemented an alternative HTTP fetcher based on libsoup 2011-01-17 18:20:06 +01:00
Martin Willi b94feb4b05 backtrace->contains_function takes multiple names, speeding up whitelist check drastically 2011-01-17 18:19:44 +01:00
Martin Willi ec8426a349 Add some common glib non-leaks to whitelist 2011-01-17 18:19:36 +01:00
Martin Willi c4048cd61f Add missing va_end to va_start in curl_fetcher 2011-01-17 18:19:17 +01:00
Martin Willi d27a8e5011 Do not pass an enum type to va_arg 2011-01-17 18:18:58 +01:00
Martin Willi 64e06d4f8f Compare ending address in ts->equals, fixes redundant traffic selector elimination 2011-01-14 13:24:08 +01:00
Andreas Steffen cfa190bb7c compute memory requirement for PEM-encoding correctly 2011-01-07 05:29:59 +01:00
Martin Willi 7721fc6695 Do not print empty DN identities as invalid 2011-01-05 16:46:07 +01:00
Martin Willi 7b3740d958 Added support for delta CRL checking to revocation plugin 2011-01-05 16:46:07 +01:00
Martin Willi 76cfaf13c1 Verify trustchain for each candidate certificate only once 2011-01-05 16:46:06 +01:00
Martin Willi 1a79d76abc Added an AUTH_HELPER for revocation certificates 2011-01-05 16:46:06 +01:00
Martin Willi 85b9e9be99 Added CDP support to mem_cred 2011-01-05 16:46:06 +01:00
Martin Willi d3a18dade1 Check for issuer only if we actually got a CRL 2011-01-05 16:46:06 +01:00
Martin Willi c5f213cc0f Check inhibitAnyPolicy in constraints plugin 2011-01-05 16:46:05 +01:00
Martin Willi b088fd4a76 Slightly renamed different policyConstraints to distinguish them better 2011-01-05 16:46:05 +01:00
Martin Willi 07eee80401 Added support for inhibitAnyPolicy constraint to x509 plugin 2011-01-05 16:46:05 +01:00
Martin Willi b3d359e58f Use a generic getter for all numerical X.509 constraints 2011-01-05 16:46:05 +01:00
Martin Willi b1703d6cb3 Check inhibitPolicyMapping in constraints plugin 2011-01-05 16:46:05 +01:00
Martin Willi 927120a128 Check requireExplicitPolicy in constraints plugin 2011-01-05 16:46:04 +01:00
Martin Willi 8469625fdc Include subject cert to temporary auth info before completing trustchain 2011-01-05 16:46:04 +01:00
Martin Willi 5eae41c6d8 Fail silently when trying to convert IPv6 address to v4 family host 2011-01-05 16:46:04 +01:00
Martin Willi 6aba6ff061 Pass an additional anchor flag to validate() hook if we reach the root CA 2011-01-05 16:46:04 +01:00
Martin Willi 09e319d419 Always pass auth info to validate(), use pathlen to check for user certificate 2011-01-05 16:46:04 +01:00
Martin Willi 55e4d8982f Added support for delta CRLs to x509 plugin 2011-01-05 16:46:03 +01:00
Martin Willi 1019cad161 Moved CRL distribution point building to an exportable function 2011-01-05 16:46:03 +01:00
Martin Willi a6478a0402 Simplified format of x509 CRL URI parsing/enumerator 2011-01-05 16:46:03 +01:00
Martin Willi e24a02a28f Fail on critical extensions in openssl CRLs 2011-01-05 16:46:03 +01:00