denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
10,428 Commits 1 Branch 0 Tags
9a06a93ce7195a14b0e33d68e127c9207b14878f
Commit Graph
236 Commits
Author SHA1 Message Date
Thomas Egerer 6e5e2762d3 Handle certificates being on hold in a CRL 
Certificates which are set on hold in a CRL might be removed from any
subsequent CRL. Hence you cannot conclude that a certificate is revoked
for good in this case, you would try to retrieve an update CRL to see if
the certificate on hold is still on it or not.
 2011-11-04 11:11:17 +01:00
Martin Willi 658c993c78 Include KEY_ANY in key_type_names 2011-10-14 10:04:45 +02:00
Andreas Steffen 58a8309c21 Migrated cred_encoding to INIT/METHOD macros 2011-10-02 10:55:08 +02:00
Andreas Steffen 7b9e6ddd20 Migrated auth_cfg to INIT/METHOD macros 2011-10-02 10:42:01 +02:00
Andreas Steffen 3cd78d98b7 Migrated ietf_attributes to INIT/METHOD macros 2011-09-29 22:46:43 +02:00
Andreas Steffen a6e3eabfa6 Migrated shared_key to INIT/METHOD macros 2011-09-29 22:17:38 +02:00
Andreas Steffen fabc874155 Migrated auth_cfg_wrapper to INIT/METHOD macros 2011-09-29 22:10:30 +02:00
Andreas Steffen 6d5907fddf Migrated cert_cache to INIT/METHOD macros 2011-09-29 22:04:22 +02:00
Andreas Steffen c9698de891 Migrated ocsp_response_wrapper to INIT/METHOD macros 2011-09-29 21:48:31 +02:00
Andreas Steffen 8b5219dd61 fixed typo 2011-09-08 12:08:17 +02:00
Thomas Egerer 2feb3d9e0b Remove obsolete values from builder_part_names 
Adds removal of builder parts obsoleted with git commit
15177f5785.
 2011-09-02 13:44:17 +02:00
Martin Willi 87ddfcc655 Added missing auth_rule_names 2011-08-22 18:42:32 +02:00
Martin Willi c991645ff5 Moved auth_rule_names back to auth_cfg.c 2011-08-22 18:42:32 +02:00
Tobias Brunner cbf5c2c61c Readded docs for some arguments to global functions. 
Those were overzealously removed in 28623fc538.
 2011-07-21 18:38:43 +02:00
Tobias Brunner f3bb1bd039 Fixed common misspellings. 
Mostly found by 'codespell'.
 2011-07-20 16:14:10 +02:00
Tobias Brunner 47daa0e6fe Replaced more complex iterator usages. 2011-07-06 09:43:45 +02:00
Tobias Brunner 28623fc538 "this" removed from comments. 2011-07-06 09:43:45 +02:00
Martin Willi aca6434ba9 Fix a potential memleak if two threads fingerprint a credential simultaneously 2011-05-02 15:05:41 +02:00
Tobias Brunner e0d388f2e3 Use proper return value for ietf_attr_t.compare. 2011-04-19 13:48:50 +02:00
Tobias Brunner 1f02bdc8d3 Fixed output in ietf_attributes_t.get_string. 2011-04-14 18:10:26 +02:00
Andreas Steffen d390b3b901 [hopefully] fixed pathlen problem on ARM platforms 2011-02-10 15:51:18 +01:00
Martin Willi a846bf06e8 Add missing AUTH_RULE for trusted self-signed peer certificates 2011-02-01 09:25:10 +01:00
Martin Willi 76cfaf13c1 Verify trustchain for each candidate certificate only once 2011-01-05 16:46:06 +01:00
Martin Willi 1a79d76abc Added an AUTH_HELPER for revocation certificates 2011-01-05 16:46:06 +01:00
Martin Willi 85b9e9be99 Added CDP support to mem_cred 2011-01-05 16:46:06 +01:00
Martin Willi b088fd4a76 Slightly renamed different policyConstraints to distinguish them better 2011-01-05 16:46:05 +01:00
Martin Willi 07eee80401 Added support for inhibitAnyPolicy constraint to x509 plugin 2011-01-05 16:46:05 +01:00
Martin Willi b3d359e58f Use a generic getter for all numerical X.509 constraints 2011-01-05 16:46:05 +01:00
Martin Willi 8469625fdc Include subject cert to temporary auth info before completing trustchain 2011-01-05 16:46:04 +01:00
Martin Willi 6aba6ff061 Pass an additional anchor flag to validate() hook if we reach the root CA 2011-01-05 16:46:04 +01:00
Martin Willi 09e319d419 Always pass auth info to validate(), use pathlen to check for user certificate 2011-01-05 16:46:04 +01:00
Martin Willi 55e4d8982f Added support for delta CRLs to x509 plugin 2011-01-05 16:46:03 +01:00
Martin Willi a6478a0402 Simplified format of x509 CRL URI parsing/enumerator 2011-01-05 16:46:03 +01:00
Martin Willi 77a288e960 Added a certificate policy OID auth_cfg constraint 2011-01-05 16:46:03 +01:00
Martin Willi a742d97fb8 Added support for policyConstraints to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 5dba5852fc Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too 2011-01-05 16:46:02 +01:00
Martin Willi 5a0caa4b3a Added policyMappings support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 20bd78106e Added certificatePolicy support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 7eeb37dea9 Added support for generating NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi dbfbbec368 Added name constraint enumerator to x509 interface 2011-01-05 16:46:00 +01:00
Martin Willi be8858e9b6 Moved X509 pathlen constraint checking to constraints plugin 2011-01-05 16:46:00 +01:00
Martin Willi 473d5aa868 Key strength checking stores all key sizes in auth_cfg, verifies all in complies() 2011-01-05 16:45:56 +01:00
Martin Willi 6807c0ca2c Added a flag for X509 CRLSign keyUsage 2011-01-05 16:45:56 +01:00
Martin Willi e49bd37b5d Remove x509_flag_names, flags do not work with ENUM() 2011-01-05 16:45:56 +01:00
Martin Willi 4e508517d7 Added support for CRL Issuers to x509 and OpenSSL plugins 2011-01-05 16:45:55 +01:00
Martin Willi 963b4d9477 Added key strength constraints for RSA or ECDSA trustchains 2011-01-05 16:45:53 +01:00
Andreas Steffen 7883e7ce33 fixed bug in mem_cred.c:add_crl() 2010-12-12 21:34:27 +01:00
Tobias Brunner 75827463fa Insert certificates and secrets at the front of the lists. 
As the lookup is also from front to back, certificates added later are
now found first, which is useful in case of e.g. "reread cacerts".
 2010-12-03 18:00:00 +01:00
Tobias Brunner 5ad4fa295a Function add_crl added to mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 982de5a5f5 Function added to clear secrets (but not certs) from mem_cred_t. 2010-12-03 18:00:00 +01:00