Martin Willi
a944d2092b
Use bits instead of bytes for a private/public key
2010-08-10 18:46:30 +02:00
Martin Willi
33ddaaabec
Added support for different encryption schemes to private/public keys
2010-08-10 18:46:30 +02:00
Martin Willi
57202484e4
Migrated remaining classes in openssl plugin to INIT/METHOD macros
2010-08-10 18:46:30 +02:00
Martin Willi
0556667dca
Use credential sets to load smartcard keys
2010-08-04 09:26:21 +02:00
Martin Willi
0b8b664056
Pass the PKCS11 keyid as chunk, not as string
2010-08-04 09:26:20 +02:00
Martin Willi
353d10d590
Reuse generic passphrase build part, not a dedicated PIN part
2010-08-04 09:26:20 +02:00
Martin Willi
3479c27931
Support module names in %smartcard specifier, streamlined smartcard building
2010-08-04 09:26:20 +02:00
Martin Willi
0406eeaacb
Support different encoding types in certificate.get_encoding()
2010-07-13 13:53:20 +02:00
Martin Willi
da9724e6d0
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
2010-07-13 11:29:35 +02:00
Tobias Brunner
83b23011de
Some Doxygen fixes.
2010-07-05 15:04:30 +02:00
Martin Willi
07c5aacce8
Select subjectAltName address family using address length in openssl plugin
2010-06-24 12:01:18 +02:00
Tobias Brunner
1e3d66f8d3
Fixing compilation of the OpenSSL plugin if ENGINE support is disabled.
...
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
2010-06-22 11:55:34 +02:00
Tobias Brunner
5a367e99c3
Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled.
...
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
2010-06-22 11:55:33 +02:00
Martin Willi
f00a101590
Unwrap subjectKeyIdentifier from OCTET_STRING
2010-05-26 16:09:50 +02:00
Martin Willi
aab861608a
Removed is_newer() from certificate_t, obsoleting all implementations
2010-05-21 16:25:51 +02:00
Martin Willi
6d7eed9a37
Implemented X.509 CRL reading using OpenSSL
2010-05-21 16:25:51 +02:00
Martin Willi
5728c6aa7e
Implemented X.509 certificate reading using OpenSSL
2010-05-21 16:25:51 +02:00
Martin Willi
9806381322
Fixed doxygen group
2010-05-20 17:37:18 +02:00
Martin Willi
026b0058d5
Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin
2010-05-05 13:49:56 +02:00
Martin Willi
4590260b2d
Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten
2010-04-19 14:41:20 +02:00
Tobias Brunner
9f4b02e31d
Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan.
2010-04-10 12:10:04 +02:00
Martin Willi
b34b93dbf7
Store DH generator in a chunk, hide non-public data in a private struct
2010-04-08 15:08:35 +02:00
Tobias Brunner
0a4dc78755
Some whitespace fixes.
2010-04-06 12:56:06 +02:00
Tobias Brunner
8b0e09103b
Adding DBG_LIB to all calls of libstrongswan's version of DBG*.
2010-04-06 12:47:40 +02:00
Andreas Steffen
29cf15a919
PEM encoding for OpenSSL RSA and EC public and private keys
2010-04-04 23:59:24 +02:00
Tobias Brunner
908d571796
Provide the Diffie Hellman parameters from a central location, so that we do not have to replicate them in every plugin that implements the DH interface.
...
The main reason for this change is that Android's libcrypto does not
include the get_rfcX_prime_Y functions by default. Therefore we would
have had to replicate the primes a third time.
2010-03-09 17:15:16 +01:00
Tobias Brunner
d14203b009
Replaced the deprecated RSA_generate_key with RSA_generate_key_ex.
2010-03-08 15:34:38 +01:00
Martin Willi
40f130dab3
Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin
2010-03-08 13:16:12 +01:00
Tobias Brunner
afb364fff9
Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0.
...
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
2010-03-02 12:03:44 +01:00
Tobias Brunner
4e657051f7
Streamlined the source file list formatting in plugin makefiles.
2010-03-02 10:40:50 +01:00
Tobias Brunner
6ec60bb92b
Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon.
2010-03-02 10:38:52 +01:00
Tobias Brunner
9ce567f895
Changed plugin constructors from plugin_create to plugin_name_plugin_create.
2010-03-02 09:10:26 +01:00
Tobias Brunner
6cc13cd9c5
Removing the plugin constructor declarations from the header files.
2010-03-02 09:10:19 +01:00
Tobias Brunner
eba28948a5
Link all plugins to libstrongswan.
2010-02-25 13:51:05 +01:00
Tobias Brunner
4a5a5dd290
Using the thread wrapper in charon, libstrongswan and their plugins.
2009-12-23 17:03:41 +01:00
Tobias Brunner
eba64cef41
Separated the public interfaces of the threading primitives.
2009-12-23 17:01:53 +01:00
Tobias Brunner
14f7091280
Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h).
2009-12-23 17:00:58 +01:00
Martin Willi
ee3d4ef801
Prefer MODP2048/1536 over ECP Diffie-Hellman groups
2009-11-12 13:10:30 +00:00
Martin Willi
640ed4d5a5
Public/Private keys implement a has_fingerprint() method
2009-09-21 16:47:25 +02:00
Martin Willi
012f62a820
Exponents of a RSA key in openssl are optional (for PGP)
2009-09-15 09:33:00 +02:00
Martin Willi
b9fbd66587
Added support to build RSA keys from components in openssl
2009-09-14 14:29:10 +02:00
Martin Willi
30c06407c6
Updated openssl plugin to the new builder API
2009-09-10 16:20:19 +02:00
Martin Willi
7b3814f75d
remove spaces before tabs at the beginning of lines (^( )+\t)
2009-09-04 15:02:11 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Andreas Steffen
e201f53e93
build_curve_signature() processes hash not data
2009-08-27 20:41:29 +02:00
Andreas Steffen
1dbaec2177
NID_hash and NID_ec_curve were interchanged
2009-08-27 20:28:41 +02:00
Andreas Steffen
ac6a0d5038
verify_signature() now processes hash not data
2009-08-27 20:18:22 +02:00
Andreas Steffen
c812802482
NID_hash and NID_ec_curver were interchanged
2009-08-27 20:11:49 +02:00
Martin Willi
10b2898d3c
verify that the ECDSA auth signature was done with the correct curve
2009-08-27 17:58:02 +02:00
Martin Willi
472cb4ce77
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
2009-08-27 17:37:42 +02:00
Martin Willi