 Andreas Steffen
|
91e35b7c9e
|
added create_ipAddrBlock_enumerator() method to x509_t
|
2009-12-22 11:58:30 +01:00 |
|
|
Andreas Steffen
|
157125e4c9
|
traffic_selector supports RFC 3779 address range format
|
2009-12-21 21:29:01 +01:00 |
|
|
Andreas Steffen
|
513eb95e60
|
parse RFC 3779 addressFamily
|
2009-12-20 19:26:28 +01:00 |
|
|
Andreas Steffen
|
7d379a786c
|
plugin name is x509
|
2009-12-20 16:01:35 +01:00 |
|
|
Andreas Steffen
|
28c25485ba
|
discard certificate with unknown critical extensions
|
2009-12-20 15:53:39 +01:00 |
|
|
Andreas Steffen
|
f3e366a9a0
|
use traffic_selector_t object to represent ipAddrBlocks
|
2009-12-20 15:15:02 +01:00 |
|
|
Andreas Steffen
|
ad858aee15
|
parse ipAddrBlocks
|
2009-12-17 17:32:55 +01:00 |
|
|
Martin Willi
|
83b760cb42
|
Migrated curl_fetcher to INIT/METHOD macros
|
2009-12-17 13:53:25 +01:00 |
|
|
Andreas Steffen
|
645f3865b2
|
ipsec pool manages dns and nbns servers
|
2009-12-16 18:11:57 +01:00 |
|
|
Andreas Steffen
|
3747f0f2e7
|
cosmetics
|
2009-12-16 13:33:09 +01:00 |
|
|
Andreas Steffen
|
a461e20dd8
|
provide attributes from SQL database
|
2009-12-16 12:31:41 +01:00 |
|
|
Martin Willi
|
4e90d9de9f
|
Removed obsolete curl interface specific destructor
|
2009-12-08 16:21:58 +01:00 |
|
|
Martin Willi
|
b5a2055fb1
|
Give plugins more control of which configuration attributes to request, and pass received attributes back to the requesting handler
|
2009-11-17 14:51:50 +01:00 |
|
|
Martin Willi
|
ee3d4ef801
|
Prefer MODP2048/1536 over ECP Diffie-Hellman groups
|
2009-11-12 13:10:30 +00:00 |
|
|
Andreas Steffen
|
bb7ae382fd
|
added some debugging to pgp certificate parsing
|
2009-11-10 10:04:55 +01:00 |
|
|
Andreas Steffen
|
262af16179
|
accept PGP v3 or v4 fingerprint as alternative to PGP user_id
|
2009-11-09 23:15:17 +01:00 |
|
|
Andreas Steffen
|
ab5762e32a
|
list v3 or v4 fingerprint
|
2009-11-08 23:21:03 +01:00 |
|
|
Andreas Steffen
|
9f0327e652
|
define TIME_32_BITS_SIGNED_MAX in utils.h
|
2009-11-08 18:55:52 +01:00 |
|
|
Andreas Steffen
|
4c68a85a75
|
implemented path length constraint checkinf for IKEv2
|
2009-11-04 23:37:15 +01:00 |
|
|
Andreas Steffen
|
fae322219f
|
output optional pathLenConstraint in ipsec listcacerts
|
2009-11-04 07:30:07 +01:00 |
|
|
Andreas Steffen
|
00aa027503
|
implemented parsing of pathLenConstraint
|
2009-11-04 00:03:10 +01:00 |
|
|
Martin Willi
|
4952dc11da
|
Fixed all doxygen warnings
|
2009-10-22 14:34:10 +02:00 |
|
|
Andreas Steffen
|
38031878dd
|
moved .gitignore for pool
|
2009-10-15 14:58:09 +02:00 |
|
|
Martin Willi
|
d38eb3355e
|
Migrated the lease_history option to the new libstrongswan plugin namespace
|
2009-10-15 10:14:10 +02:00 |
|
|
Andreas Steffen
|
668870be47
|
pool should be in th gitignore list
|
2009-10-14 14:37:03 +02:00 |
|
|
Andreas Steffen
|
270bb348e3
|
pluto now supports SQL-based virtual IP pools
|
2009-10-14 14:30:14 +02:00 |
|
|
Andreas Steffen
|
247794827e
|
move SQL-based pool functionality to new attr-sql libstrongswan plugin
|
2009-10-13 17:02:29 +02:00 |
|
|
Andreas Steffen
|
cf85e1319b
|
streamlined output from get_validity()
|
2009-10-06 14:22:27 +02:00 |
|
|
Andreas Steffen
|
408e46a324
|
ipsec pki --issue suports --flag authServer option
|
2009-10-05 22:44:01 +02:00 |
|
|
Andreas Steffen
|
ce40bf5def
|
ipsec pki --issue supports --flag ocspSigning option
|
2009-10-05 21:20:42 +02:00 |
|
|
Andreas Steffen
|
fc12e3cd2e
|
pluto now uses x509 plugin for attribute certificate handling
|
2009-10-05 07:24:28 +02:00 |
|
|
Andreas Steffen
|
0aa5cea248
|
mark embedded parsing in debug mode
|
2009-10-02 20:54:15 +02:00 |
|
|
Andreas Steffen
|
ec0abe4ab5
|
added some notBefore/notAfter debugging info
|
2009-10-02 20:14:09 +02:00 |
|
|
Andreas Steffen
|
daaedcb9c2
|
verify correctness of X.509 versions
|
2009-10-02 17:49:51 +02:00 |
|
|
Andreas Steffen
|
70e81857f9
|
generate known OIDs dynamically
|
2009-09-30 11:49:32 +02:00 |
|
|
Andreas Steffen
|
8ad23ba346
|
added get_subjectKeyIdentifier() to x509_t
|
2009-09-26 22:10:36 +02:00 |
|
|
Martin Willi
|
840743479a
|
Use mysql_config to query MySQL LIBS and CFLAGS
|
2009-09-23 12:45:03 +02:00 |
|
|
Andreas Steffen
|
a28334720c
|
adding additional flags to loaded X.509 certificates
|
2009-09-22 12:55:25 +02:00 |
|
|
Martin Willi
|
640ed4d5a5
|
Public/Private keys implement a has_fingerprint() method
|
2009-09-21 16:47:25 +02:00 |
|
|
Andreas Steffen
|
af784261f5
|
all arguments must be read
|
2009-09-20 21:56:22 +02:00 |
|
|
Martin Willi
|
4e1cade52f
|
Fixed loading of DER encoded certificate files
|
2009-09-16 11:24:35 +02:00 |
|
|
Andreas Steffen
|
edf30136b0
|
implemented ASN.1 encoding of PKCS#10 attributes
|
2009-09-15 21:55:44 +02:00 |
|
|
Martin Willi
|
012f62a820
|
Exponents of a RSA key in openssl are optional (for PGP)
|
2009-09-15 09:33:00 +02:00 |
|
|
Martin Willi
|
9f45b19fe7
|
Use ID_KEY_ID as PGP user id, as it can contain any string
|
2009-09-15 08:45:08 +02:00 |
|
|
Martin Willi
|
79c6f16212
|
Implemented support for preinstalled PGP certificates in charon
|
2009-09-15 08:23:48 +02:00 |
|
|
Martin Willi
|
4cb0e1bb76
|
Added basic support for PGP certificates (no trust relationships yet)
|
2009-09-15 08:23:48 +02:00 |
|
|
Martin Willi
|
88f3ffa1b1
|
Moved generic PGP parsing functions to pgp_utils.[ch]
|
2009-09-15 08:23:47 +02:00 |
|
|
Andreas Steffen
|
0001db115d
|
check if PKCS#10 version is 1
|
2009-09-14 19:38:57 +02:00 |
|
|
Andreas Steffen
|
29662a9b73
|
cosmetics
|
2009-09-14 19:29:05 +02:00 |
|
|
Martin Willi
|
b9fbd66587
|
Added support to build RSA keys from components in openssl
|
2009-09-14 14:29:10 +02:00 |
|