Tobias Brunner
|
982de5a5f5
|
Function added to clear secrets (but not certs) from mem_cred_t.
|
2010-12-03 18:00:00 +01:00 |
|
Tobias Brunner
|
68c7f18643
|
Alternative to mem_cred_t.add_cert added, which returns the certificate.
If the certificate is already cached, the cached version is returned.
|
2010-12-03 17:59:59 +01:00 |
|
Tobias Brunner
|
3023a75e67
|
Function added to mem_cred_t to add shared secret with a linked list of owners.
|
2010-12-03 17:59:59 +01:00 |
|
Martin Willi
|
c8f5aaf0a4
|
Renamed mem_cred_t clear function internally to clear_, fixes potential name conflict
|
2010-10-28 13:06:19 +00:00 |
|
Tobias Brunner
|
889c7947a6
|
Avoid duplicate certificates in mem_cred_t.
|
2010-10-14 17:36:20 +02:00 |
|
Tobias Brunner
|
5232ebb1b4
|
Added function to clear all credentials from mem_cred_t.
|
2010-10-14 17:36:19 +02:00 |
|
Tobias Brunner
|
e29aa7696f
|
Fixed possible segmentation fault.
|
2010-10-14 17:36:18 +02:00 |
|
Martin Willi
|
d987946e80
|
Added a final flag to builder registration to enumerate the actually supported algorithms
|
2010-09-03 18:09:48 +02:00 |
|
Martin Willi
|
0ac49c3292
|
Added an enumerator for registered credential builders
|
2010-09-02 10:49:02 +02:00 |
|
Martin Willi
|
b019136596
|
Migrated credential_factory to INIT/METHOD macros
|
2010-09-02 10:49:02 +02:00 |
|
Martin Willi
|
81137552e5
|
Added an AAA identity authentication config option
|
2010-08-31 17:26:20 +02:00 |
|
Martin Willi
|
f13a03add0
|
Moved EAP type/code definitions to a seprate header file in libstrongswan
|
2010-08-31 15:35:29 +02:00 |
|
Andreas Steffen
|
be63a48c36
|
defined EAP-TNC
|
2010-08-30 13:13:39 +02:00 |
|
Martin Willi
|
3dd06bd4ed
|
Added private key support to in-memory credential set
|
2010-08-25 10:28:23 +02:00 |
|
Martin Willi
|
72c6335de9
|
Added certificate support to in-memory credential set
|
2010-08-25 10:28:22 +02:00 |
|
Martin Willi
|
e0fcf43cf8
|
Build a trustchain even if no trust anchor is given
|
2010-08-23 12:01:43 +02:00 |
|
Andreas Steffen
|
87799b0c00
|
moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter
|
2010-08-13 15:07:53 +02:00 |
|
Martin Willi
|
a944d2092b
|
Use bits instead of bytes for a private/public key
|
2010-08-10 18:46:30 +02:00 |
|
Martin Willi
|
33ddaaabec
|
Added support for different encryption schemes to private/public keys
|
2010-08-10 18:46:30 +02:00 |
|
Andreas Steffen
|
fd8ad4198d
|
added TTLS to EAP short names, too
|
2010-08-06 06:06:40 +02:00 |
|
Andreas Steffen
|
f32e56bbce
|
added EAP_TTLS method
|
2010-08-05 21:01:39 +02:00 |
|
Martin Willi
|
0d08ebe7ac
|
Pass type of requested key in the callback credential set
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
15177f5785
|
Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use credential sets
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
3429be9514
|
Use a dedicated build part for challenge passwords, BUILD_PASSPHRASE gets obsolete
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
62be923683
|
Implemented a callback based credential set, currently for shared keys only
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
0749e91bec
|
Implemented a generic in-memory credential set, currently for shared keys only
|
2010-08-04 09:26:21 +02:00 |
|
Martin Willi
|
0b8b664056
|
Pass the PKCS11 keyid as chunk, not as string
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
353d10d590
|
Reuse generic passphrase build part, not a dedicated PIN part
|
2010-08-04 09:26:20 +02:00 |
|
Martin Willi
|
3479c27931
|
Support module names in %smartcard specifier, streamlined smartcard building
|
2010-08-04 09:26:20 +02:00 |
|
Tobias Brunner
|
56bceda7b5
|
Fixed compiler warnings.
|
2010-08-03 19:00:46 +02:00 |
|
Martin Willi
|
0b71bc7af0
|
Moved eap-tls plugin to libcharon, updated to 4.4.1 APIs
|
2010-08-03 15:39:25 +02:00 |
|
Martin Willi
|
2107953804
|
Added EAP-TLS plugin stub
|
2010-08-03 15:39:24 +02:00 |
|
Martin Willi
|
c118559afe
|
Fix use of snprintf() in IETF attributes to string conversion
|
2010-07-28 10:54:48 +02:00 |
|
Martin Willi
|
0406eeaacb
|
Support different encoding types in certificate.get_encoding()
|
2010-07-13 13:53:20 +02:00 |
|
Martin Willi
|
da9724e6d0
|
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
|
2010-07-13 11:29:35 +02:00 |
|
Martin Willi
|
24d327ab4d
|
Moved keys/key_encoding.[ch] to cred_encoding.[ch]
|
2010-07-13 11:02:35 +02:00 |
|
Martin Willi
|
e1c51fd859
|
Fixed doxygen group of cert_validator interface
|
2010-07-13 10:42:02 +02:00 |
|
Martin Willi
|
c2e5cee413
|
Moved CRL/OCSP checking to a dedicated plugin called revocation
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
c1f9dad672
|
Made some useful methods in the credential manager public
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
5f9e62c54f
|
Moved X509 addrBlock validation to a separate addrblock plugin
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
2feb16f5dd
|
Added a certificate validation hook to the credential manager
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
c3a9bef08e
|
Migrated credential manager to INIT/METHOD macros
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
2ccc02a4fd
|
Moved credential manager to libstrongswan
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
5db798c8e0
|
Charon uses a generic trunstchain length limit, not only for X509 certificates
|
2010-07-13 10:26:06 +02:00 |
|
Martin Willi
|
380106ab0d
|
Avoid relocking while enumerator is alive
|
2010-07-06 16:28:25 +02:00 |
|
Martin Willi
|
13c593f126
|
Added support for CRL generation to x509 plugin
|
2010-05-21 16:25:51 +02:00 |
|
Martin Willi
|
aab861608a
|
Removed is_newer() from certificate_t, obsoleting all implementations
|
2010-05-21 16:25:51 +02:00 |
|
Martin Willi
|
8029e5efd2
|
Added generic implementations for crl_is_newer/certificate_is_newer
|
2010-05-21 16:25:51 +02:00 |
|
Tobias Brunner
|
8b0e09103b
|
Adding DBG_LIB to all calls of libstrongswan's version of DBG*.
|
2010-04-06 12:47:40 +02:00 |
|
Andreas Steffen
|
b2be771ad8
|
fixed typo
|
2010-04-04 10:29:36 +02:00 |
|