Commit Graph
273 Commits
Author SHA1 Message Date
Andreas Steffen fc12e3cd2e pluto now uses x509 plugin for attribute certificate handling 2009-10-05 07:24:28 +02:00
Andreas Steffen 8ad23ba346 added get_subjectKeyIdentifier() to x509_t 2009-09-26 22:10:36 +02:00
Martin Willi 640ed4d5a5 Public/Private keys implement a has_fingerprint() method 2009-09-21 16:47:25 +02:00
Andreas Steffen d78a0262d1 backwards compatibility with SQL format 2009-09-18 15:48:24 +02:00
Martin Willi 4cb0e1bb76 Added basic support for PGP certificates (no trust relationships yet) 2009-09-15 08:23:48 +02:00
Andreas Steffen 210d287368 extended hasher_signature_algorithm_to_oid() function 2009-09-13 21:41:51 +02:00
Andreas Steffen ba274c2343 removed req.h 2009-09-13 21:03:36 +02:00
Andreas Steffen f03e0e9147 support of PKCS#10 certificate request parsing 2009-09-13 21:00:15 +02:00
Martin Willi 6dc57cd02e x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations 2009-09-11 17:16:22 +02:00
Martin Willi 881b259943 x509 plugin supports encoding of CRL distribution points 2009-09-11 15:36:22 +02:00
Martin Willi f678f5c77e Replaced builder_t objects by simple builder_function_t functions 2009-09-10 16:20:17 +02:00
Martin Willi 7631aac20c x509 certificates support encoding of email, DNS and IP subjectAltNames 2009-09-08 13:17:41 +02:00
Martin Willi 323f9f990f replaces four spaces by tabs, where appropriate 2009-09-04 14:50:23 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Martin Willi ad31f98a74 fixed certificate_t enum names 2009-09-01 11:28:05 +02:00
Andreas Steffen f561d6f2e9 changed prefix of crl_reason_t values from CRL_ to CRL_REASON_ 2009-08-31 23:21:50 +02:00
Andreas Steffen be04eef270 allow choice of digest algorithm in certificate generation 2009-08-28 09:08:03 +02:00
Martin Willi 472cb4ce77 distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures 2009-08-27 17:37:42 +02:00
Martin Willi ed75a4dd69 do not flush cached encodings, keys are responsible for it 2009-08-27 13:59:30 +02:00
Martin Willi 2ee8cd04bd key encoding gained a cache() method, allows caching of externally created encodings 2009-08-27 09:57:49 +02:00
Martin Willi 083142c4a0 encoding public EC keys is not really possible without subjectPublicKeyInfo 2009-08-26 16:15:38 +02:00
Martin Willi 6a8791cd1f complain about build errors in non-recursive cases only 2009-08-26 14:44:05 +02:00
Martin Willi df5c60bc5d added a BUILD_FROM_FD option, supporting credential parsing from stdin 2009-08-26 13:03:23 +02:00
Martin Willi 7c577c8ea2 started implementation of a PKI tool, currently supporting RSA|ECDSA key generation 2009-08-26 11:23:55 +02:00
Martin Willi a5e3153a36 updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk 2009-08-26 11:23:52 +02:00
Martin Willi e35c3e2a03 updated openssl plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi 1384a42e1b changed get_id/get_encoding API of private/public key to use new encoding framework 2009-08-26 11:23:52 +02:00
Martin Willi edd354db6f added generic implementation helpers for private_key_t.equals/belongs_to, public_key_t.equals 2009-08-26 11:23:52 +02:00
Martin Willi 0dd2defc5a added a seperate chache lookup, as encode() requires arguments expensive to build 2009-08-26 11:23:52 +02:00
Martin Willi d9b24887a4 added a facility to hand out fingerprinting/key encoding to the pkcs1/pgp/... plugins 2009-08-26 11:23:51 +02:00
Martin Willi cbfafc1125 enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP 2009-08-26 11:23:51 +02:00
Martin Willi 3addf4e937 renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types 2009-08-26 11:23:51 +02:00
Martin Willi 1e0f69373a implemented a pkcs1 plugin providing PKCS#1 key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 7c2d883af7 show more information if building a credential fails 2009-08-26 11:23:50 +02:00
Martin Willi ddf7c6ac7b do not enumerate builders returning NULL 2009-08-26 11:23:50 +02:00
Martin Willi cbb62e8f4c handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind 2009-08-26 11:23:49 +02:00
Martin Willi 11aa7e7869 use a pluto specific credential builder to build pluto cert_t's 2009-08-26 11:23:49 +02:00
Martin Willi 160f4c225d moved PEM parsing functionality to its own plugin 2009-08-26 11:23:48 +02:00
Tobias Brunner 3901937d14 OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t. 2009-08-14 13:30:59 +02:00
Andreas Steffen b6f739c13b support of SHA224-based certificate signatures 2009-08-05 22:01:44 +02:00
Andreas Steffen 225bb2b810 conversion from ECDSA_WITH_SHAxxx OIDs to signature schemes 2009-07-15 18:12:40 +02:00
Andreas Steffen 11e6d28533 pluto supports ECDSA authentication 2009-06-12 19:59:49 +02:00
Andreas Steffen f3e87f5935 created signature_scheme_from_oid() helper function 2009-06-09 11:03:34 +02:00
Andreas Steffen 8b799d55ce pluto and scepclient use private and public key plugins of libstrongswan 2009-06-09 11:03:32 +02:00
Andreas Steffen e24aaddde0 hide credentials headers in credential_factory.h 2009-05-28 15:35:02 +02:00
Tobias Brunner 8c5d72cd0b removing svn keyword $Id$ from all files 2009-04-30 13:19:35 +00:00
Martin Willi a44bb9345f merged multi-auth branch back into trunk 2009-04-14 10:34:24 +00:00
Martin Willi 1490ff4d9b updated Doxyfile
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Martin Willi d5d5bc0f16 using rwlock to parallel build credentials 2008-12-09 15:57:51 +00:00
Tobias Brunner 83c42156a2 add support for smartcards in charon by using the ENGINE API provided by OpenSSL, based on patches by Michael Roßberg. 2008-12-03 10:12:20 +00:00