 Martin Willi
|
51b7e9ce72
|
Respect enforce_critical setting in x509 plugin CRLs
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
d14d3b31b8
|
Parse CRL extensions in a switch statement
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
6c547631c0
|
Respect policy mappings in certificatePolicy validation
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
5595d2bcff
|
Validate simple certificatePolicy inheritance
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
77a288e960
|
Added a certificate policy OID auth_cfg constraint
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
a742d97fb8
|
Added support for policyConstraints to x509 plugin
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
5dba5852fc
|
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
5a0caa4b3a
|
Added policyMappings support to x509 plugin
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
5122fa1e02
|
Added policyMappings OID identifier
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
20bd78106e
|
Added certificatePolicy support to x509 plugin
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
1038d9fee5
|
Added a null-safe strdup variant
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
b0892d094c
|
Fail when parsing unsupported critical extensions in openssl_x509
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
2d3ae93832
|
Added CertificatePolicy OID identifier
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
feac4a8162
|
Added conversion functions between string OIDs and its DER encoding
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
a6850b8499
|
Do not parse certificates with invalid version in openssl plugin
|
2011-01-05 16:46:01 +01:00 |
|
|
Martin Willi
|
a2b340764f
|
Implemented NameConstraint matching in constraints plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
7eeb37dea9
|
Added support for generating NameConstraints in x509 plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
7c325cee5c
|
Added support for parsing NameConstraints in x509 plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
dbfbbec368
|
Added name constraint enumerator to x509 interface
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
a199ef15e6
|
Migrated x509_cert_t to INIT/METHOD macros
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
be8858e9b6
|
Moved X509 pathlen constraint checking to constraints plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
01d3038137
|
Added plugin stub for advanced X509 constraint checking
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
7a3e0a6321
|
Added a strncaseeq variant to the string comparison macros
|
2011-01-05 16:45:59 +01:00 |
|
|
Martin Willi
|
6840a6fb98
|
CRL/OCSP validation stores trustchain information in auth_cfg
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
473d5aa868
|
Key strength checking stores all key sizes in auth_cfg, verifies all in complies()
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
6ffd9f88ce
|
Use subject, not issuer, of CRL issuing certificate
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
dffb176f2b
|
CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
ece5ac2271
|
Parse and encode crlSign keyUsage flag in x509 plugin
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
6807c0ca2c
|
Added a flag for X509 CRLSign keyUsage
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
e49bd37b5d
|
Remove x509_flag_names, flags do not work with ENUM()
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
7d7beaa1fa
|
Use certificate CRLIssuer information to look up cacched CRLs or CDPs
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
4e508517d7
|
Added support for CRL Issuers to x509 and OpenSSL plugins
|
2011-01-05 16:45:55 +01:00 |
|
|
Martin Willi
|
963b4d9477
|
Added key strength constraints for RSA or ECDSA trustchains
|
2011-01-05 16:45:53 +01:00 |
|
|
Martin Willi
|
502edf425f
|
Migrated psk/pubkey_authenticators to INIT/METHOD macros
|
2011-01-05 16:45:53 +01:00 |
|
|
Martin Willi
|
1535913aed
|
Load plugins only once, even if listed twice
|
2011-01-05 16:45:49 +01:00 |
|
|
Martin Willi
|
65697c2734
|
Added a CIDR notation based host constructor
|
2011-01-05 16:45:40 +01:00 |
|
|
Andreas Steffen
|
53e2c2e283
|
replaced spaces by tabs
|
2010-12-30 03:45:08 +01:00 |
|
|
Andreas Steffen
|
27a66f9393
|
implemented wrap around of registered IKEv1 algorithm names
|
2010-12-26 17:11:02 +01:00 |
|
|
Andreas Steffen
|
690d5aed59
|
disable AEAD crypto algorithm if no key size is supported
|
2010-12-25 16:14:55 +01:00 |
|
|
Andreas Steffen
|
d733a3babb
|
disable crypto algorithm if no key size is supported
|
2010-12-25 16:11:50 +01:00 |
|
|
Andreas Steffen
|
c6a043fad0
|
log if an AEAD algorithm does not support a given key size
|
2010-12-25 15:53:15 +01:00 |
|
|
Andreas Steffen
|
90288c76f8
|
log if a crypto algorithm does not support a given key size
|
2010-12-25 15:49:29 +01:00 |
|
|
Andreas Steffen
|
d77c6c49a9
|
printed plugin names have a hyphen
|
2010-12-24 05:53:27 +01:00 |
|
|
Martin Willi
|
33bfdf6f37
|
Fixed public key construction from PKCS#11 private key
|
2010-12-23 10:29:01 +01:00 |
|
|
Martin Willi
|
23a737eb29
|
Probe for supported AF_ALG algorithms, register dynamically
|
2010-12-20 10:09:20 +01:00 |
|
|
Martin Willi
|
4ee5d97d57
|
Register algorithms with dependencies only if dependency available
|
2010-12-20 10:00:39 +01:00 |
|
|
Martin Willi
|
d214ebdf82
|
Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
533151692f
|
Implemented PRFs using AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
06eb35efb0
|
Use the AF_ALG wrapper in hasher, crypter and signer
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
1b5de7ce3b
|
Use a generic AF_ALG wrapper for common operations
|
2010-12-20 09:52:02 +01:00 |
|