 Martin Willi
|
7a74295e42
|
Select subjectAltName address family using address length in x509 plugin
|
2010-06-24 12:01:18 +02:00 |
|
|
Martin Willi
|
aab861608a
|
Removed is_newer() from certificate_t, obsoleting all implementations
|
2010-05-21 16:25:51 +02:00 |
|
|
Tobias Brunner
|
8b0e09103b
|
Adding DBG_LIB to all calls of libstrongswan's version of DBG*.
|
2010-04-06 12:47:40 +02:00 |
|
|
Andreas Steffen
|
ceeb9bac8b
|
critical keyUsage extension must be parsed
|
2010-03-07 20:51:34 +01:00 |
|
|
Andreas Steffen
|
1ec8f22de2
|
set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true
|
2010-03-07 17:27:53 +01:00 |
|
|
Andreas Steffen
|
b917f49684
|
initialize variables to avoid compiler warning
|
2010-02-05 12:34:37 +01:00 |
|
|
Martin Willi
|
7eab4a1be6
|
Support TLS client authentication Extended Key Usage in x509 generation
|
2010-01-14 12:00:43 +01:00 |
|
|
Andreas Steffen
|
3e33ae1004
|
ipsec pki --self|issue supports --pathlen option setting a path length constraint
|
2009-12-31 15:13:35 +01:00 |
|
|
Andreas Steffen
|
e16a01a5e6
|
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
|
2009-12-22 13:18:27 +01:00 |
|
|
Andreas Steffen
|
91e35b7c9e
|
added create_ipAddrBlock_enumerator() method to x509_t
|
2009-12-22 11:58:30 +01:00 |
|
|
Andreas Steffen
|
157125e4c9
|
traffic_selector supports RFC 3779 address range format
|
2009-12-21 21:29:01 +01:00 |
|
|
Andreas Steffen
|
513eb95e60
|
parse RFC 3779 addressFamily
|
2009-12-20 19:26:28 +01:00 |
|
|
Andreas Steffen
|
7d379a786c
|
plugin name is x509
|
2009-12-20 16:01:35 +01:00 |
|
|
Andreas Steffen
|
28c25485ba
|
discard certificate with unknown critical extensions
|
2009-12-20 15:53:39 +01:00 |
|
|
Andreas Steffen
|
f3e366a9a0
|
use traffic_selector_t object to represent ipAddrBlocks
|
2009-12-20 15:15:02 +01:00 |
|
|
Andreas Steffen
|
ad858aee15
|
parse ipAddrBlocks
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
4c68a85a75
|
implemented path length constraint checkinf for IKEv2
|
2009-11-04 23:37:15 +01:00 |
|
|
Andreas Steffen
|
fae322219f
|
output optional pathLenConstraint in ipsec listcacerts
|
2009-11-04 07:30:07 +01:00 |
|
|
Andreas Steffen
|
00aa027503
|
implemented parsing of pathLenConstraint
|
2009-11-04 00:03:10 +01:00 |
|
|
Andreas Steffen
|
408e46a324
|
ipsec pki --issue suports --flag authServer option
|
2009-10-05 22:44:01 +02:00 |
|
|
Andreas Steffen
|
ce40bf5def
|
ipsec pki --issue supports --flag ocspSigning option
|
2009-10-05 21:20:42 +02:00 |
|
|
Andreas Steffen
|
0aa5cea248
|
mark embedded parsing in debug mode
|
2009-10-02 20:54:15 +02:00 |
|
|
Andreas Steffen
|
daaedcb9c2
|
verify correctness of X.509 versions
|
2009-10-02 17:49:51 +02:00 |
|
|
Andreas Steffen
|
8ad23ba346
|
added get_subjectKeyIdentifier() to x509_t
|
2009-09-26 22:10:36 +02:00 |
|
|
Andreas Steffen
|
a28334720c
|
adding additional flags to loaded X.509 certificates
|
2009-09-22 12:55:25 +02:00 |
|
|
Andreas Steffen
|
edf30136b0
|
implemented ASN.1 encoding of PKCS#10 attributes
|
2009-09-15 21:55:44 +02:00 |
|
|
Andreas Steffen
|
210d287368
|
extended hasher_signature_algorithm_to_oid() function
|
2009-09-13 21:41:51 +02:00 |
|
|
Andreas Steffen
|
4c51c6be01
|
parsing error caused segfault in destroy()
|
2009-09-13 20:56:12 +02:00 |
|
|
Andreas Steffen
|
beace4af14
|
corrected captions
|
2009-09-12 17:39:15 +02:00 |
|
|
Martin Willi
|
6dc57cd02e
|
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
|
2009-09-11 17:16:22 +02:00 |
|
|
Martin Willi
|
3b878dae7e
|
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro
|
2009-09-11 15:39:35 +02:00 |
|
|
Martin Willi
|
881b259943
|
x509 plugin supports encoding of CRL distribution points
|
2009-09-11 15:36:22 +02:00 |
|
|
Martin Willi
|
d73f453c29
|
Updated x509 plugin to the new builder API
|
2009-09-10 16:20:21 +02:00 |
|
|
Martin Willi
|
7631aac20c
|
x509 certificates support encoding of email, DNS and IP subjectAltNames
|
2009-09-08 13:17:41 +02:00 |
|
|
Martin Willi
|
d7be290643
|
non self-signed x509 certificates are encoded with authorityKeyIdentifier
|
2009-09-08 11:26:05 +02:00 |
|
|
Martin Willi
|
5c92524449
|
x509 CA certificates are encoded with a subjectKeyIdentifier
|
2009-09-08 11:02:49 +02:00 |
|
|
Martin Willi
|
8ab900dee9
|
x509 plugin supports encoding of CA basicConstraint extension
|
2009-09-08 10:38:02 +02:00 |
|
|
Martin Willi
|
b9b8a98f47
|
remove spaces within tabs (\t( )+\t)
|
2009-09-04 15:00:19 +02:00 |
|
|
Martin Willi
|
7daf5226b7
|
removed trailing spaces ([[:space:]]+$)
|
2009-09-04 13:46:09 +02:00 |
|
|
Andreas Steffen
|
2aa67d2636
|
.., but a comment might be helpful
|
2009-08-28 09:28:39 +02:00 |
|
|
Andreas Steffen
|
6be3f0f1d0
|
removed TODO reminder
|
2009-08-28 09:26:46 +02:00 |
|
|
Andreas Steffen
|
be04eef270
|
allow choice of digest algorithm in certificate generation
|
2009-08-28 09:08:03 +02:00 |
|
|
Martin Willi
|
472cb4ce77
|
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
|
2009-08-27 17:37:42 +02:00 |
|
|
Martin Willi
|
8b10355c84
|
support generation of EC certificates
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
eb73685dac
|
create algorithmIdentifier dynamically from OID database
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
6b6ece636c
|
updated x509 plugin to public key/x509 API changes
|
2009-08-26 11:23:52 +02:00 |
|
|
Martin Willi
|
280469923d
|
make use of the pem helper plugin to load credentials
|
2009-08-26 11:23:49 +02:00 |
|
|
Andreas Steffen
|
f3e87f5935
|
created signature_scheme_from_oid() helper function
|
2009-06-09 11:03:34 +02:00 |
|
|
Andreas Steffen
|
8b799d55ce
|
pluto and scepclient use private and public key plugins of libstrongswan
|
2009-06-09 11:03:32 +02:00 |
|
|
Andreas Steffen
|
e24aaddde0
|
hide credentials headers in credential_factory.h
|
2009-05-28 15:35:02 +02:00 |
|