denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,450 Commits 1 Branch 0 Tags
6a339fffc7eb981bf7593d2ff337be5e5f7f30e2
Commit Graph
4647 Commits
Author SHA1 Message Date
Martin Willi 6a339fffc7 Added inhibitAnyPolicy constraint support to pki tool 2011-01-05 16:46:05 +01:00
Martin Willi 07eee80401 Added support for inhibitAnyPolicy constraint to x509 plugin 2011-01-05 16:46:05 +01:00
Martin Willi b3d359e58f Use a generic getter for all numerical X.509 constraints 2011-01-05 16:46:05 +01:00
Martin Willi b1703d6cb3 Check inhibitPolicyMapping in constraints plugin 2011-01-05 16:46:05 +01:00
Martin Willi 927120a128 Check requireExplicitPolicy in constraints plugin 2011-01-05 16:46:04 +01:00
Martin Willi 8469625fdc Include subject cert to temporary auth info before completing trustchain 2011-01-05 16:46:04 +01:00
Martin Willi 5eae41c6d8 Fail silently when trying to convert IPv6 address to v4 family host 2011-01-05 16:46:04 +01:00
Martin Willi 6aba6ff061 Pass an additional anchor flag to validate() hook if we reach the root CA 2011-01-05 16:46:04 +01:00
Martin Willi 09e319d419 Always pass auth info to validate(), use pathlen to check for user certificate 2011-01-05 16:46:04 +01:00
Martin Willi 98ef286580 Merge test config into suite config, instead of having two distinct configs 2011-01-05 16:46:04 +01:00
Martin Willi de8521f6f2 Added support for delta CRLs to pki tool 2011-01-05 16:46:04 +01:00
Martin Willi 55e4d8982f Added support for delta CRLs to x509 plugin 2011-01-05 16:46:03 +01:00
Martin Willi 1019cad161 Moved CRL distribution point building to an exportable function 2011-01-05 16:46:03 +01:00
Martin Willi a6478a0402 Simplified format of x509 CRL URI parsing/enumerator 2011-01-05 16:46:03 +01:00
Martin Willi e24a02a28f Fail on critical extensions in openssl CRLs 2011-01-05 16:46:03 +01:00
Martin Willi 51b7e9ce72 Respect enforce_critical setting in x509 plugin CRLs 2011-01-05 16:46:03 +01:00
Martin Willi d14d3b31b8 Parse CRL extensions in a switch statement 2011-01-05 16:46:03 +01:00
Martin Willi 6c547631c0 Respect policy mappings in certificatePolicy validation 2011-01-05 16:46:03 +01:00
Martin Willi 58be32e88e Added a cert_policy option to conftest configurations 2011-01-05 16:46:03 +01:00
Martin Willi 5595d2bcff Validate simple certificatePolicy inheritance 2011-01-05 16:46:03 +01:00
Martin Willi 77a288e960 Added a certificate policy OID auth_cfg constraint 2011-01-05 16:46:03 +01:00
Martin Willi a864eb37b1 Added policyConstraints support to pki tool 2011-01-05 16:46:02 +01:00
Martin Willi a742d97fb8 Added support for policyConstraints to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 5dba5852fc Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too 2011-01-05 16:46:02 +01:00
Martin Willi 3ffc9d9a88 Added policyMappings support to pki tool 2011-01-05 16:46:02 +01:00
Martin Willi 5a0caa4b3a Added policyMappings support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 5122fa1e02 Added policyMappings OID identifier 2011-01-05 16:46:02 +01:00
Martin Willi 6c3ac04478 Added certificatePolicy options to pki tool 2011-01-05 16:46:02 +01:00
Martin Willi 20bd78106e Added certificatePolicy support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 1038d9fee5 Added a null-safe strdup variant 2011-01-05 16:46:02 +01:00
Martin Willi b0892d094c Fail when parsing unsupported critical extensions in openssl_x509 2011-01-05 16:46:02 +01:00
Martin Willi 2d3ae93832 Added CertificatePolicy OID identifier 2011-01-05 16:46:02 +01:00
Martin Willi feac4a8162 Added conversion functions between string OIDs and its DER encoding 2011-01-05 16:46:02 +01:00
Martin Willi a6850b8499 Do not parse certificates with invalid version in openssl plugin 2011-01-05 16:46:01 +01:00
Martin Willi a2b340764f Implemented NameConstraint matching in constraints plugin 2011-01-05 16:46:00 +01:00
Martin Willi e6fbe5933b pki --issue/self support permitted/excluded NameConstraints 2011-01-05 16:46:00 +01:00
Martin Willi 64bcaae203 pki --print prints NameConstraints 2011-01-05 16:46:00 +01:00
Martin Willi 7eeb37dea9 Added support for generating NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi 7c325cee5c Added support for parsing NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi dbfbbec368 Added name constraint enumerator to x509 interface 2011-01-05 16:46:00 +01:00
Martin Willi a199ef15e6 Migrated x509_cert_t to INIT/METHOD macros 2011-01-05 16:46:00 +01:00
Martin Willi be8858e9b6 Moved X509 pathlen constraint checking to constraints plugin 2011-01-05 16:46:00 +01:00
Martin Willi 01d3038137 Added plugin stub for advanced X509 constraint checking 2011-01-05 16:46:00 +01:00
Martin Willi 0beb1d6fbb Added a hook to reset ESP sequence numbers 2011-01-05 16:46:00 +01:00
Martin Willi 48ef001133 Accept a suffix to differentiate x509, crl, ecdsa and rsa files 2011-01-05 16:45:59 +01:00
Martin Willi c7f7a0ba06 Use strncaseeq instead of strncasecmp 2011-01-05 16:45:59 +01:00
Martin Willi 7a3e0a6321 Added a strncaseeq variant to the string comparison macros 2011-01-05 16:45:59 +01:00
Martin Willi 04a1279f91 Added tfc_padding option, changes signature to master changes 2011-01-05 16:45:59 +01:00
Martin Willi 6840a6fb98 CRL/OCSP validation stores trustchain information in auth_cfg 2011-01-05 16:45:56 +01:00
Martin Willi 473d5aa868 Key strength checking stores all key sizes in auth_cfg, verifies all in complies() 2011-01-05 16:45:56 +01:00