 Martin Willi
|
927120a128
|
Check requireExplicitPolicy in constraints plugin
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
6aba6ff061
|
Pass an additional anchor flag to validate() hook if we reach the root CA
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
09e319d419
|
Always pass auth info to validate(), use pathlen to check for user certificate
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
55e4d8982f
|
Added support for delta CRLs to x509 plugin
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
1019cad161
|
Moved CRL distribution point building to an exportable function
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
a6478a0402
|
Simplified format of x509 CRL URI parsing/enumerator
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
e24a02a28f
|
Fail on critical extensions in openssl CRLs
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
51b7e9ce72
|
Respect enforce_critical setting in x509 plugin CRLs
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
d14d3b31b8
|
Parse CRL extensions in a switch statement
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
6c547631c0
|
Respect policy mappings in certificatePolicy validation
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
5595d2bcff
|
Validate simple certificatePolicy inheritance
|
2011-01-05 16:46:03 +01:00 |
|
|
Martin Willi
|
a742d97fb8
|
Added support for policyConstraints to x509 plugin
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
5dba5852fc
|
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
5a0caa4b3a
|
Added policyMappings support to x509 plugin
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
20bd78106e
|
Added certificatePolicy support to x509 plugin
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
b0892d094c
|
Fail when parsing unsupported critical extensions in openssl_x509
|
2011-01-05 16:46:02 +01:00 |
|
|
Martin Willi
|
a6850b8499
|
Do not parse certificates with invalid version in openssl plugin
|
2011-01-05 16:46:01 +01:00 |
|
|
Martin Willi
|
a2b340764f
|
Implemented NameConstraint matching in constraints plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
7eeb37dea9
|
Added support for generating NameConstraints in x509 plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
7c325cee5c
|
Added support for parsing NameConstraints in x509 plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
dbfbbec368
|
Added name constraint enumerator to x509 interface
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
a199ef15e6
|
Migrated x509_cert_t to INIT/METHOD macros
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
be8858e9b6
|
Moved X509 pathlen constraint checking to constraints plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
01d3038137
|
Added plugin stub for advanced X509 constraint checking
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
6840a6fb98
|
CRL/OCSP validation stores trustchain information in auth_cfg
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
6ffd9f88ce
|
Use subject, not issuer, of CRL issuing certificate
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
dffb176f2b
|
CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
ece5ac2271
|
Parse and encode crlSign keyUsage flag in x509 plugin
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
7d7beaa1fa
|
Use certificate CRLIssuer information to look up cacched CRLs or CDPs
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
4e508517d7
|
Added support for CRL Issuers to x509 and OpenSSL plugins
|
2011-01-05 16:45:55 +01:00 |
|
|
Martin Willi
|
1535913aed
|
Load plugins only once, even if listed twice
|
2011-01-05 16:45:49 +01:00 |
|
|
Andreas Steffen
|
d77c6c49a9
|
printed plugin names have a hyphen
|
2010-12-24 05:53:27 +01:00 |
|
|
Martin Willi
|
33bfdf6f37
|
Fixed public key construction from PKCS#11 private key
|
2010-12-23 10:29:01 +01:00 |
|
|
Martin Willi
|
23a737eb29
|
Probe for supported AF_ALG algorithms, register dynamically
|
2010-12-20 10:09:20 +01:00 |
|
|
Martin Willi
|
4ee5d97d57
|
Register algorithms with dependencies only if dependency available
|
2010-12-20 10:00:39 +01:00 |
|
|
Martin Willi
|
d214ebdf82
|
Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
533151692f
|
Implemented PRFs using AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
06eb35efb0
|
Use the AF_ALG wrapper in hasher, crypter and signer
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
1b5de7ce3b
|
Use a generic AF_ALG wrapper for common operations
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
a5c973b955
|
Implemented crypter on top of AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
e75e1c9473
|
Implemented signer interface using AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
6f08911321
|
Implemented hasher based on AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
|
Martin Willi
|
71c87e3483
|
Added plugin stub for AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
|
Andreas Steffen
|
5932f41fcc
|
trace back crypto algorithms to the plugins that registered them
|
2010-12-18 16:31:12 +01:00 |
|
|
Andreas Steffen
|
7e02e49112
|
Migrated fips_prf plugin to INIT/METHOD macros
|
2010-12-04 20:56:21 +01:00 |
|
|
Andreas Steffen
|
c7b778450e
|
Migrated md4_plugin_t to INIT/METHOD macros
|
2010-12-04 20:45:49 +01:00 |
|
|
Andreas Steffen
|
e5e79bd403
|
Migrated md5_plugin_t to INIT/METHOD macros
|
2010-12-04 20:43:41 +01:00 |
|
|
Andreas Steffen
|
1e84aa74aa
|
Migrated ldap plugin to INIT/METHOD macros
|
2010-12-04 20:15:59 +01:00 |
|
|
Andreas Steffen
|
4df49844d9
|
Migrated pubkey_plugin_t to INIT/METHOD macros
|
2010-12-04 15:43:04 +01:00 |
|
|
Andreas Steffen
|
dd621140d3
|
Migrated pkcs1_plugin_t to INIT/METHOD macros
|
2010-12-04 11:43:06 +01:00 |
|