Andreas Steffen
|
fc12e3cd2e
|
pluto now uses x509 plugin for attribute certificate handling
|
2009-10-05 07:24:28 +02:00 |
|
Andreas Steffen
|
8ad23ba346
|
added get_subjectKeyIdentifier() to x509_t
|
2009-09-26 22:10:36 +02:00 |
|
Martin Willi
|
640ed4d5a5
|
Public/Private keys implement a has_fingerprint() method
|
2009-09-21 16:47:25 +02:00 |
|
Andreas Steffen
|
d78a0262d1
|
backwards compatibility with SQL format
|
2009-09-18 15:48:24 +02:00 |
|
Martin Willi
|
4cb0e1bb76
|
Added basic support for PGP certificates (no trust relationships yet)
|
2009-09-15 08:23:48 +02:00 |
|
Andreas Steffen
|
210d287368
|
extended hasher_signature_algorithm_to_oid() function
|
2009-09-13 21:41:51 +02:00 |
|
Andreas Steffen
|
ba274c2343
|
removed req.h
|
2009-09-13 21:03:36 +02:00 |
|
Andreas Steffen
|
f03e0e9147
|
support of PKCS#10 certificate request parsing
|
2009-09-13 21:00:15 +02:00 |
|
Martin Willi
|
6dc57cd02e
|
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
|
2009-09-11 17:16:22 +02:00 |
|
Martin Willi
|
881b259943
|
x509 plugin supports encoding of CRL distribution points
|
2009-09-11 15:36:22 +02:00 |
|
Martin Willi
|
f678f5c77e
|
Replaced builder_t objects by simple builder_function_t functions
|
2009-09-10 16:20:17 +02:00 |
|
Martin Willi
|
7631aac20c
|
x509 certificates support encoding of email, DNS and IP subjectAltNames
|
2009-09-08 13:17:41 +02:00 |
|
Martin Willi
|
323f9f990f
|
replaces four spaces by tabs, where appropriate
|
2009-09-04 14:50:23 +02:00 |
|
Martin Willi
|
7daf5226b7
|
removed trailing spaces ([[:space:]]+$)
|
2009-09-04 13:46:09 +02:00 |
|
Martin Willi
|
ad31f98a74
|
fixed certificate_t enum names
|
2009-09-01 11:28:05 +02:00 |
|
Andreas Steffen
|
f561d6f2e9
|
changed prefix of crl_reason_t values from CRL_ to CRL_REASON_
|
2009-08-31 23:21:50 +02:00 |
|
Andreas Steffen
|
be04eef270
|
allow choice of digest algorithm in certificate generation
|
2009-08-28 09:08:03 +02:00 |
|
Martin Willi
|
472cb4ce77
|
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
|
2009-08-27 17:37:42 +02:00 |
|
Martin Willi
|
ed75a4dd69
|
do not flush cached encodings, keys are responsible for it
|
2009-08-27 13:59:30 +02:00 |
|
Martin Willi
|
2ee8cd04bd
|
key encoding gained a cache() method, allows caching of externally created encodings
|
2009-08-27 09:57:49 +02:00 |
|
Martin Willi
|
083142c4a0
|
encoding public EC keys is not really possible without subjectPublicKeyInfo
|
2009-08-26 16:15:38 +02:00 |
|
Martin Willi
|
6a8791cd1f
|
complain about build errors in non-recursive cases only
|
2009-08-26 14:44:05 +02:00 |
|
Martin Willi
|
df5c60bc5d
|
added a BUILD_FROM_FD option, supporting credential parsing from stdin
|
2009-08-26 13:03:23 +02:00 |
|
Martin Willi
|
7c577c8ea2
|
started implementation of a PKI tool, currently supporting RSA|ECDSA key generation
|
2009-08-26 11:23:55 +02:00 |
|
Martin Willi
|
a5e3153a36
|
updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
e35c3e2a03
|
updated openssl plugin to new private/public key API, use encoder framework
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
1384a42e1b
|
changed get_id/get_encoding API of private/public key to use new encoding framework
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
edd354db6f
|
added generic implementation helpers for private_key_t.equals/belongs_to, public_key_t.equals
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
0dd2defc5a
|
added a seperate chache lookup, as encode() requires arguments expensive to build
|
2009-08-26 11:23:52 +02:00 |
|
Martin Willi
|
d9b24887a4
|
added a facility to hand out fingerprinting/key encoding to the pkcs1/pgp/... plugins
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
cbfafc1125
|
enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
3addf4e937
|
renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types
|
2009-08-26 11:23:51 +02:00 |
|
Martin Willi
|
1e0f69373a
|
implemented a pkcs1 plugin providing PKCS#1 key parsing builders
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
7c2d883af7
|
show more information if building a credential fails
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
ddf7c6ac7b
|
do not enumerate builders returning NULL
|
2009-08-26 11:23:50 +02:00 |
|
Martin Willi
|
cbb62e8f4c
|
handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind
|
2009-08-26 11:23:49 +02:00 |
|
Martin Willi
|
11aa7e7869
|
use a pluto specific credential builder to build pluto cert_t's
|
2009-08-26 11:23:49 +02:00 |
|
Martin Willi
|
160f4c225d
|
moved PEM parsing functionality to its own plugin
|
2009-08-26 11:23:48 +02:00 |
|
Tobias Brunner
|
3901937d14
|
OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t.
|
2009-08-14 13:30:59 +02:00 |
|
Andreas Steffen
|
b6f739c13b
|
support of SHA224-based certificate signatures
|
2009-08-05 22:01:44 +02:00 |
|
Andreas Steffen
|
225bb2b810
|
conversion from ECDSA_WITH_SHAxxx OIDs to signature schemes
|
2009-07-15 18:12:40 +02:00 |
|
Andreas Steffen
|
11e6d28533
|
pluto supports ECDSA authentication
|
2009-06-12 19:59:49 +02:00 |
|
Andreas Steffen
|
f3e87f5935
|
created signature_scheme_from_oid() helper function
|
2009-06-09 11:03:34 +02:00 |
|
Andreas Steffen
|
8b799d55ce
|
pluto and scepclient use private and public key plugins of libstrongswan
|
2009-06-09 11:03:32 +02:00 |
|
Andreas Steffen
|
e24aaddde0
|
hide credentials headers in credential_factory.h
|
2009-05-28 15:35:02 +02:00 |
|
Tobias Brunner
|
8c5d72cd0b
|
removing svn keyword $Id$ from all files
|
2009-04-30 13:19:35 +00:00 |
|
Martin Willi
|
a44bb9345f
|
merged multi-auth branch back into trunk
|
2009-04-14 10:34:24 +00:00 |
|
Martin Willi
|
1490ff4d9b
|
updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
|
2009-03-24 17:43:01 +00:00 |
|
Martin Willi
|
d5d5bc0f16
|
using rwlock to parallel build credentials
|
2008-12-09 15:57:51 +00:00 |
|
Tobias Brunner
|
83c42156a2
|
add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg.
|
2008-12-03 10:12:20 +00:00 |
|