Martin Willi
|
ee3d4ef801
|
Prefer MODP2048/1536 over ECP Diffie-Hellman groups
|
2009-11-12 13:10:30 +00:00 |
|
Martin Willi
|
640ed4d5a5
|
Public/Private keys implement a has_fingerprint() method
|
2009-09-21 16:47:25 +02:00 |
|
Martin Willi
|
012f62a820
|
Exponents of a RSA key in openssl are optional (for PGP)
|
2009-09-15 09:33:00 +02:00 |
|
Martin Willi
|
b9fbd66587
|
Added support to build RSA keys from components in openssl
|
2009-09-14 14:29:10 +02:00 |
|
Martin Willi
|
30c06407c6
|
Updated openssl plugin to the new builder API
|
2009-09-10 16:20:19 +02:00 |
|
Martin Willi
|
7b3814f75d
|
remove spaces before tabs at the beginning of lines (^( )+\t)
|
2009-09-04 15:02:11 +02:00 |
|
Martin Willi
|
7daf5226b7
|
removed trailing spaces ([[:space:]]+$)
|
2009-09-04 13:46:09 +02:00 |
|
Andreas Steffen
|
e201f53e93
|
build_curve_signature() processes hash not data
|
2009-08-27 20:41:29 +02:00 |
|
Andreas Steffen
|
1dbaec2177
|
NID_hash and NID_ec_curve were interchanged
|
2009-08-27 20:28:41 +02:00 |
|
Andreas Steffen
|
ac6a0d5038
|
verify_signature() now processes hash not data
|
2009-08-27 20:18:22 +02:00 |
|
Andreas Steffen
|
c812802482
|
NID_hash and NID_ec_curver were interchanged
|
2009-08-27 20:11:49 +02:00 |
|
Martin Willi
|
10b2898d3c
|
verify that the ECDSA auth signature was done with the correct curve
|
2009-08-27 17:58:02 +02:00 |
|
Martin Willi
|
472cb4ce77
|
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
|
2009-08-27 17:37:42 +02:00 |
|
Martin Willi
|
82749537e2
|
added support for SIGN_ECDSA_WITH_SHA1 signature scheme in openssl
|
2009-08-27 13:59:30 +02:00 |
|
Martin Willi
|
1a8ef8aabc
|
fixed memleak in openssl fingerprinting
|
2009-08-27 10:40:49 +02:00 |
|
Martin Willi
|
b12c6d163d
|
do openssl fingerprinting/encoding directly, openssl provides all functions
|
2009-08-27 09:58:38 +02:00 |
|
Martin Willi
|
083142c4a0
|
encoding public EC keys is not really possible without subjectPublicKeyInfo
|
2009-08-26 16:15:38 +02:00 |
|
Martin Willi
|
08ed551ce0
|
implemented openssl EC key generation
|
2009-08-26 11:23:55 +02:00 |
|
Martin Willi
|
a0b850450f
|
fixed openssl RSA private key encoding
|
2009-08-26 11:23:55 +02:00 |
|
Martin Willi
|
e35c3e2a03
|
updated openssl plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
Tobias Brunner
|
3901937d14
|
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
|
2009-08-14 13:30:59 +02:00 |
|
Andreas Steffen
|
994b80b513
|
activated CAMELLIA_CBC cipher in openssl plugin
|
2009-08-05 22:46:53 +02:00 |
|
Andreas Steffen
|
b6f739c13b
|
support of SHA224-based certificate signatures
|
2009-08-05 22:01:44 +02:00 |
|
Andreas Steffen
|
eebecebead
|
make ecp_x_coordinate_only = yes the default
|
2009-07-06 11:47:38 +02:00 |
|
Andreas Steffen
|
21863d6361
|
ecp_x_coordinate only option allows ECP interoperability with MS Windows
|
2009-07-06 08:47:18 +02:00 |
|
Martin Willi
|
00fcc0f8f3
|
added -avoid-version to LDFLAGS, plugins are not versioned
|
2009-07-03 08:57:11 +02:00 |
|
Andreas Steffen
|
942127a602
|
fixed 64 bit warning
|
2009-06-17 12:32:28 +02:00 |
|
Andreas Steffen
|
11e6d28533
|
pluto supports ECDSA authentication
|
2009-06-12 19:59:49 +02:00 |
|
Andreas Steffen
|
dfa5fb0358
|
implemented IKEv1 RSA signing in openssl_rsa_private_key.c
|
2009-06-10 15:29:57 +02:00 |
|
Andreas Steffen
|
29bbfc11ee
|
implemented IKEv1 signature verification in openssl_rsa_public_key.c
|
2009-06-10 13:43:51 +02:00 |
|
Martin Willi
|
86ab0bb65e
|
fixed crash in openssl private_key->get_public_key(), using encode/load workaround
|
2009-06-09 11:03:35 +02:00 |
|
Andreas Steffen
|
8b799d55ce
|
pluto and scepclient use private and public key plugins of libstrongswan
|
2009-06-09 11:03:32 +02:00 |
|
Andreas Steffen
|
ebb97511e6
|
dh_exponent_ansi_x9_42 is now a libstrongswan setting
|
2009-05-26 18:32:52 +02:00 |
|
Andreas Steffen
|
24400cf617
|
fixed setting of variable key length
|
2009-05-14 13:55:56 +02:00 |
|
Tobias Brunner
|
e382d96f62
|
compiler warning fixed
|
2009-05-06 09:11:19 -04:00 |
|
Tobias Brunner
|
8c5d72cd0b
|
removing svn keyword $Id$ from all files
|
2009-04-30 13:19:35 +00:00 |
|
Tobias Brunner
|
d24a74c5b4
|
merging changes from portability branch back to trunk
important change for developers: %Y replaces %D to print identities!
|
2009-04-30 11:37:54 +00:00 |
|
Martin Willi
|
1490ff4d9b
|
updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
|
2009-03-24 17:43:01 +00:00 |
|
Tobias Brunner
|
b8fa437fb7
|
adding MD4 and DES (ECB) to openssl plugin
|
2009-02-18 19:41:33 +00:00 |
|
Tobias Brunner
|
83c42156a2
|
add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg.
|
2008-12-03 10:12:20 +00:00 |
|
Martin Willi
|
b8cbb6451c
|
ported some hard-to-merge cherries back to trunk :-/
shame, svn, shame: this was ways to complicated
we should consider a switch to git...
|
2008-11-12 15:09:24 +00:00 |
|
Martin Willi
|
2abc66b977
|
proper cleanup of openssl locking code
|
2008-11-05 12:37:37 +00:00 |
|
Martin Willi
|
3ac5a0db8c
|
replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant
|
2008-11-05 11:29:56 +00:00 |
|
Martin Willi
|
7854475f42
|
OpenSSL requires a signature length of exactly RSA_size()
|
2008-11-04 14:05:42 +00:00 |
|
Martin Willi
|
d4f08fe324
|
removed superfluous get_other_public_value in diffie_hellman_t interface
|
2008-11-04 13:12:11 +00:00 |
|
Martin Willi
|
ddd7e6c656
|
fixed bignum export if BN_num_bytes() != DH_size()
|
2008-11-04 13:05:00 +00:00 |
|
Martin Willi
|
dcbea444ee
|
fixed memleak
|
2008-11-04 13:01:36 +00:00 |
|
Martin Willi
|
7de6da0c88
|
added locking mechanism for multithreaded use of OpenSSL
|
2008-11-03 16:14:12 +00:00 |
|
Martin Willi
|
ee66fa625e
|
removed accidently checked in debug code
|
2008-11-03 12:40:42 +00:00 |
|
Martin Willi
|
d6dc9db5ef
|
reverted 4541, does not fix the problem
|
2008-11-03 09:44:20 +00:00 |
|