denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
14,922 Commits 1 Branch 0 Tags
b12c53ce77beb8e04b044d0c0dc9249ddba72200
Commit Graph
304 Commits
Author SHA1 Message Date
Martin Willi a6478a0402 Simplified format of x509 CRL URI parsing/enumerator 2011-01-05 16:46:03 +01:00
Martin Willi 77a288e960 Added a certificate policy OID auth_cfg constraint 2011-01-05 16:46:03 +01:00
Martin Willi a742d97fb8 Added support for policyConstraints to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 5dba5852fc Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too 2011-01-05 16:46:02 +01:00
Martin Willi 5a0caa4b3a Added policyMappings support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 20bd78106e Added certificatePolicy support to x509 plugin 2011-01-05 16:46:02 +01:00
Martin Willi 7eeb37dea9 Added support for generating NameConstraints in x509 plugin 2011-01-05 16:46:00 +01:00
Martin Willi dbfbbec368 Added name constraint enumerator to x509 interface 2011-01-05 16:46:00 +01:00
Martin Willi be8858e9b6 Moved X509 pathlen constraint checking to constraints plugin 2011-01-05 16:46:00 +01:00
Martin Willi 473d5aa868 Key strength checking stores all key sizes in auth_cfg, verifies all in complies() 2011-01-05 16:45:56 +01:00
Martin Willi 6807c0ca2c Added a flag for X509 CRLSign keyUsage 2011-01-05 16:45:56 +01:00
Martin Willi e49bd37b5d Remove x509_flag_names, flags do not work with ENUM() 2011-01-05 16:45:56 +01:00
Martin Willi 4e508517d7 Added support for CRL Issuers to x509 and OpenSSL plugins 2011-01-05 16:45:55 +01:00
Martin Willi 963b4d9477 Added key strength constraints for RSA or ECDSA trustchains 2011-01-05 16:45:53 +01:00
Andreas Steffen 7883e7ce33 fixed bug in mem_cred.c:add_crl() 2010-12-12 21:34:27 +01:00
Tobias Brunner 75827463fa Insert certificates and secrets at the front of the lists. 
As the lookup is also from front to back, certificates added later are
now found first, which is useful in case of e.g. "reread cacerts".
 2010-12-03 18:00:00 +01:00
Tobias Brunner 5ad4fa295a Function add_crl added to mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 982de5a5f5 Function added to clear secrets (but not certs) from mem_cred_t. 2010-12-03 18:00:00 +01:00
Tobias Brunner 68c7f18643 Alternative to mem_cred_t.add_cert added, which returns the certificate. 
If the certificate is already cached, the cached version is returned.
 2010-12-03 17:59:59 +01:00
Tobias Brunner 3023a75e67 Function added to mem_cred_t to add shared secret with a linked list of owners. 2010-12-03 17:59:59 +01:00
Martin Willi c8f5aaf0a4 Renamed mem_cred_t clear function internally to clear_, fixes potential name conflict 2010-10-28 13:06:19 +00:00
Tobias Brunner 889c7947a6 Avoid duplicate certificates in mem_cred_t. 2010-10-14 17:36:20 +02:00
Tobias Brunner 5232ebb1b4 Added function to clear all credentials from mem_cred_t. 2010-10-14 17:36:19 +02:00
Tobias Brunner e29aa7696f Fixed possible segmentation fault. 2010-10-14 17:36:18 +02:00
Martin Willi d987946e80 Added a final flag to builder registration to enumerate the actually supported algorithms 2010-09-03 18:09:48 +02:00
Martin Willi 0ac49c3292 Added an enumerator for registered credential builders 2010-09-02 10:49:02 +02:00
Martin Willi b019136596 Migrated credential_factory to INIT/METHOD macros 2010-09-02 10:49:02 +02:00
Martin Willi 81137552e5 Added an AAA identity authentication config option 2010-08-31 17:26:20 +02:00
Martin Willi f13a03add0 Moved EAP type/code definitions to a seprate header file in libstrongswan 2010-08-31 15:35:29 +02:00
Andreas Steffen be63a48c36 defined EAP-TNC 2010-08-30 13:13:39 +02:00
Martin Willi 3dd06bd4ed Added private key support to in-memory credential set 2010-08-25 10:28:23 +02:00
Martin Willi 72c6335de9 Added certificate support to in-memory credential set 2010-08-25 10:28:22 +02:00
Martin Willi e0fcf43cf8 Build a trustchain even if no trust anchor is given 2010-08-23 12:01:43 +02:00
Andreas Steffen 87799b0c00 moved eap_from_string() fomr libcharon to libstrongswan to make it available in starter 2010-08-13 15:07:53 +02:00
Martin Willi a944d2092b Use bits instead of bytes for a private/public key 2010-08-10 18:46:30 +02:00
Martin Willi 33ddaaabec Added support for different encryption schemes to private/public keys 2010-08-10 18:46:30 +02:00
Andreas Steffen fd8ad4198d added TTLS to EAP short names, too 2010-08-06 06:06:40 +02:00
Andreas Steffen f32e56bbce added EAP_TTLS method 2010-08-05 21:01:39 +02:00
Martin Willi 0d08ebe7ac Pass type of requested key in the callback credential set 2010-08-04 09:26:21 +02:00
Martin Willi 15177f5785 Obseleted BUILD_PASSPHRASE(_CALLBACK) for private key loading, use credential sets 2010-08-04 09:26:21 +02:00
Martin Willi 3429be9514 Use a dedicated build part for challenge passwords, BUILD_PASSPHRASE gets obsolete 2010-08-04 09:26:21 +02:00
Martin Willi 62be923683 Implemented a callback based credential set, currently for shared keys only 2010-08-04 09:26:21 +02:00
Martin Willi 0749e91bec Implemented a generic in-memory credential set, currently for shared keys only 2010-08-04 09:26:21 +02:00
Martin Willi 0b8b664056 Pass the PKCS11 keyid as chunk, not as string 2010-08-04 09:26:20 +02:00
Martin Willi 353d10d590 Reuse generic passphrase build part, not a dedicated PIN part 2010-08-04 09:26:20 +02:00
Martin Willi 3479c27931 Support module names in %smartcard specifier, streamlined smartcard building 2010-08-04 09:26:20 +02:00
Tobias Brunner 56bceda7b5 Fixed compiler warnings. 2010-08-03 19:00:46 +02:00
Martin Willi 0b71bc7af0 Moved eap-tls plugin to libcharon, updated to 4.4.1 APIs 2010-08-03 15:39:25 +02:00
Martin Willi 2107953804 Added EAP-TLS plugin stub 2010-08-03 15:39:24 +02:00
Martin Willi c118559afe Fix use of snprintf() in IETF attributes to string conversion 2010-07-28 10:54:48 +02:00