Commit Graph
583 Commits
Author SHA1 Message Date
Martin Willi 6840a6fb98 CRL/OCSP validation stores trustchain information in auth_cfg 2011-01-05 16:45:56 +01:00
Martin Willi 6ffd9f88ce Use subject, not issuer, of CRL issuing certificate 2011-01-05 16:45:56 +01:00
Martin Willi dffb176f2b CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation 2011-01-05 16:45:56 +01:00
Martin Willi ece5ac2271 Parse and encode crlSign keyUsage flag in x509 plugin 2011-01-05 16:45:56 +01:00
Martin Willi 7d7beaa1fa Use certificate CRLIssuer information to look up cacched CRLs or CDPs 2011-01-05 16:45:56 +01:00
Martin Willi 4e508517d7 Added support for CRL Issuers to x509 and OpenSSL plugins 2011-01-05 16:45:55 +01:00
Martin Willi 1535913aed Load plugins only once, even if listed twice 2011-01-05 16:45:49 +01:00
Andreas Steffen d77c6c49a9 printed plugin names have a hyphen 2010-12-24 05:53:27 +01:00
Martin Willi 33bfdf6f37 Fixed public key construction from PKCS#11 private key 2010-12-23 10:29:01 +01:00
Martin Willi 23a737eb29 Probe for supported AF_ALG algorithms, register dynamically 2010-12-20 10:09:20 +01:00
Martin Willi 4ee5d97d57 Register algorithms with dependencies only if dependency available 2010-12-20 10:00:39 +01:00
Martin Willi d214ebdf82 Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish) 2010-12-20 09:52:02 +01:00
Martin Willi 533151692f Implemented PRFs using AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi 06eb35efb0 Use the AF_ALG wrapper in hasher, crypter and signer 2010-12-20 09:52:02 +01:00
Martin Willi 1b5de7ce3b Use a generic AF_ALG wrapper for common operations 2010-12-20 09:52:02 +01:00
Martin Willi a5c973b955 Implemented crypter on top of AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi e75e1c9473 Implemented signer interface using AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi 6f08911321 Implemented hasher based on AF_ALG 2010-12-20 09:52:02 +01:00
Martin Willi 71c87e3483 Added plugin stub for AF_ALG 2010-12-20 09:52:02 +01:00
Andreas Steffen 5932f41fcc trace back crypto algorithms to the plugins that registered them 2010-12-18 16:31:12 +01:00
Andreas Steffen 7e02e49112 Migrated fips_prf plugin to INIT/METHOD macros 2010-12-04 20:56:21 +01:00
Andreas Steffen c7b778450e Migrated md4_plugin_t to INIT/METHOD macros 2010-12-04 20:45:49 +01:00
Andreas Steffen e5e79bd403 Migrated md5_plugin_t to INIT/METHOD macros 2010-12-04 20:43:41 +01:00
Andreas Steffen 1e84aa74aa Migrated ldap plugin to INIT/METHOD macros 2010-12-04 20:15:59 +01:00
Andreas Steffen 4df49844d9 Migrated pubkey_plugin_t to INIT/METHOD macros 2010-12-04 15:43:04 +01:00
Andreas Steffen dd621140d3 Migrated pkcs1_plugin_t to INIT/METHOD macros 2010-12-04 11:43:06 +01:00
Andreas Steffen c742935dac Migrated curl_plugin_t to INIT/METHOD macros 2010-12-04 11:40:40 +01:00
Andreas Steffen 1bb67ff852 Migrated random plugin to INIT/METHOD macros 2010-12-04 11:37:03 +01:00
Andreas Steffen 79bbe64e17 Migrated sha1_plugin_t to INIT/METHOD macros 2010-12-04 11:26:02 +01:00
Andreas Steffen 72c436c170 Migrated sha2_plugin_t to INIT/METHOD macros 2010-12-04 10:48:42 +01:00
Andreas Steffen 4d7e8032ec Migrated mysql plugin to INIT/METHOD macros 2010-12-04 10:38:35 +01:00
Andreas Steffen c6fde416c4 use private destroy() function 2010-12-04 10:28:30 +01:00
Andreas Steffen cca86ba94d Migrated sqlite plugin to INIT/METHOD macros 2010-12-04 10:20:33 +01:00
Andreas Steffen 621f9324d9 Migrated test_vectors_plugin_t to INIT/METHOD macros 2010-12-04 10:10:37 +01:00
Andreas Steffen 36e4aa7b9e Migrated x509_plugin_t to INIT/METHOD macros 2010-12-04 10:07:56 +01:00
Andreas Steffen b5eeebe657 Migrated pgp_plugin_t to INIT/METHOD macros 2010-12-04 09:30:25 +01:00
Andreas Steffen 9a76f6ded2 Migrated pem_plugin_t to INIT/METHOD macros 2010-12-04 09:25:22 +01:00
Andreas Steffen cb458beb31 Migrated dnskey_plugin_t to INIT/METHOD macros 2010-12-04 09:20:53 +01:00
Martin Willi b78ca4b04c Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20 2010-11-18 08:56:12 +01:00
Martin Willi cfa18d14f1 Use static args for C_Initialize(), OpenSC does not get a copy of the pointers 2010-11-18 08:44:22 +01:00
Martin Willi 9cda39923e Added a PKCS#11 module option to enforce OS Locking functions 2010-11-12 16:14:03 +01:00
Martin Willi 57398f621a Do not use CKA_TRUSTED attribute for Cryptoki version < 2.20, handling all certs as trusted 2010-11-10 18:36:15 +01:00
Martin Willi 59df2d2a6f Add flags for PKCS#11 libraries with reduced feature set 2010-11-10 18:36:15 +01:00
Tobias Brunner ed174fd7e2 Added missing include for RAND_seed and RAND_status. 2010-10-21 14:16:09 +02:00
Martin Willi 663e735553 Compare subject against all key identifiers in has_subject() 2010-09-09 17:46:20 +02:00
Andreas Steffen f85f0c2795 has_subject() now resolves ID_KEY_IDs 2010-09-09 17:15:46 +02:00
Martin Willi a92a348092 Register missing AUTH_HMAC_SHA384 algorithm without truncation 2010-09-06 16:50:58 +02:00
Martin Willi d987946e80 Added a final flag to builder registration to enumerate the actually supported algorithms 2010-09-03 18:09:48 +02:00
Martin Willi 033fe95f0b Added support for a non-truncated SHA384 HMAC variant, as used by TLS 2010-09-03 14:54:43 +02:00
Martin Willi ed60dfa14f Added support for MODP_CUSTOM to gcrypt plugin 2010-09-03 09:33:15 +02:00