Martin Willi
|
b78ca4b04c
|
Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20
|
2010-11-18 08:56:12 +01:00 |
|
Martin Willi
|
cfa18d14f1
|
Use static args for C_Initialize(), OpenSC does not get a copy of the pointers
|
2010-11-18 08:44:22 +01:00 |
|
Andreas Steffen
|
0ebff9f442
|
added ITA and strongSwan OIDs
|
2010-11-17 22:46:45 +01:00 |
|
Andreas Steffen
|
ba1ad6c430
|
corrected TCGID OID
|
2010-11-17 22:46:45 +01:00 |
|
Martin Willi
|
d93060759e
|
Remove obsolete pool_size argument in processor_create()
|
2010-11-16 09:39:06 +01:00 |
|
Martin Willi
|
9cda39923e
|
Added a PKCS#11 module option to enforce OS Locking functions
|
2010-11-12 16:14:03 +01:00 |
|
Martin Willi
|
57398f621a
|
Do not use CKA_TRUSTED attribute for Cryptoki version < 2.20, handling all certs as trusted
|
2010-11-10 18:36:15 +01:00 |
|
Martin Willi
|
59df2d2a6f
|
Add flags for PKCS#11 libraries with reduced feature set
|
2010-11-10 18:36:15 +01:00 |
|
Andreas Steffen
|
1888dd6bd5
|
implemented IMC/IMV handler
|
2010-11-09 20:43:50 +01:00 |
|
Martin Willi
|
c8f5aaf0a4
|
Renamed mem_cred_t clear function internally to clear_, fixes potential name conflict
|
2010-10-28 13:06:19 +00:00 |
|
Tobias Brunner
|
4915ea8217
|
Updated Android.mk to latest Makefile.am.
|
2010-10-21 15:02:32 +02:00 |
|
Tobias Brunner
|
ed174fd7e2
|
Added missing include for RAND_seed and RAND_status.
|
2010-10-21 14:16:09 +02:00 |
|
Tobias Brunner
|
889c7947a6
|
Avoid duplicate certificates in mem_cred_t.
|
2010-10-14 17:36:20 +02:00 |
|
Tobias Brunner
|
5232ebb1b4
|
Added function to clear all credentials from mem_cred_t.
|
2010-10-14 17:36:19 +02:00 |
|
Tobias Brunner
|
e29aa7696f
|
Fixed possible segmentation fault.
|
2010-10-14 17:36:18 +02:00 |
|
Andreas Steffen
|
8e91079f7f
|
ignore : separator characters in chunk_from_hex()
|
2010-10-12 19:13:05 +02:00 |
|
Andreas Steffen
|
ed08f7ce83
|
use DBG_TNC for TNC debugging output
|
2010-10-09 16:01:19 +02:00 |
|
Martin Willi
|
a8809bb0cb
|
Fixed status_t enum names definition
|
2010-10-04 10:48:00 +02:00 |
|
Martin Willi
|
663e735553
|
Compare subject against all key identifiers in has_subject()
|
2010-09-09 17:46:20 +02:00 |
|
Andreas Steffen
|
f85f0c2795
|
has_subject() now resolves ID_KEY_IDs
|
2010-09-09 17:15:46 +02:00 |
|
Andreas Steffen
|
52d4dc7fe2
|
added qcStatements OID
|
2010-09-07 11:17:51 +02:00 |
|
Martin Willi
|
a92a348092
|
Register missing AUTH_HMAC_SHA384 algorithm without truncation
|
2010-09-06 16:50:58 +02:00 |
|
Martin Willi
|
d987946e80
|
Added a final flag to builder registration to enumerate the actually supported algorithms
|
2010-09-03 18:09:48 +02:00 |
|
Martin Willi
|
7d7711aba4
|
Added a generic function to check if a DH group is an EC group
|
2010-09-03 16:22:10 +02:00 |
|
Martin Willi
|
033fe95f0b
|
Added support for a non-truncated SHA384 HMAC variant, as used by TLS
|
2010-09-03 14:54:43 +02:00 |
|
Martin Willi
|
ed60dfa14f
|
Added support for MODP_CUSTOM to gcrypt plugin
|
2010-09-03 09:33:15 +02:00 |
|
Martin Willi
|
42b1ac91c4
|
Added support for MODP_CUSTOM to openssl plugin
|
2010-09-03 09:33:15 +02:00 |
|
Martin Willi
|
08d8b9405b
|
Added support for MODP_CUSTOM to gmp plugin
|
2010-09-02 19:33:08 +02:00 |
|
Martin Willi
|
0abd558a65
|
Added a MODP_CUSTOM DH group which takes g and p as constructor arguments
|
2010-09-02 19:33:08 +02:00 |
|
Tobias Brunner
|
f6697eadb9
|
Scheduler and processor have been moved to libstrongswan.
Also reverts 0c21dc000d as the dependency
to libcharon is no longer required.
|
2010-09-02 19:04:23 +02:00 |
|
Tobias Brunner
|
bb381e26c6
|
Refer to scheduler and processor via lib and not hydra.
|
2010-09-02 19:04:18 +02:00 |
|
Tobias Brunner
|
e18556e9e9
|
Moved scheduler and thread pool to libstrongswan.
|
2010-09-02 19:04:18 +02:00 |
|
Tobias Brunner
|
1989c75e9e
|
Some minor comment fixes.
|
2010-09-02 19:01:23 +02:00 |
|
Martin Willi
|
0ac49c3292
|
Added an enumerator for registered credential builders
|
2010-09-02 10:49:02 +02:00 |
|
Martin Willi
|
b019136596
|
Migrated credential_factory to INIT/METHOD macros
|
2010-09-02 10:49:02 +02:00 |
|
Martin Willi
|
81137552e5
|
Added an AAA identity authentication config option
|
2010-08-31 17:26:20 +02:00 |
|
Martin Willi
|
f13a03add0
|
Moved EAP type/code definitions to a seprate header file in libstrongswan
|
2010-08-31 15:35:29 +02:00 |
|
Martin Willi
|
4332b5af89
|
Do not strdup() zero length strings in identification_create_from_string()
|
2010-08-31 15:34:45 +02:00 |
|
Andreas Steffen
|
be63a48c36
|
defined EAP-TNC
|
2010-08-30 13:13:39 +02:00 |
|
Martin Willi
|
2291754ddf
|
Unwrap crlNumber INTEGER in openssl CRL parsing
|
2010-08-30 11:23:46 +02:00 |
|
Martin Willi
|
3dd06bd4ed
|
Added private key support to in-memory credential set
|
2010-08-25 10:28:23 +02:00 |
|
Martin Willi
|
72c6335de9
|
Added certificate support to in-memory credential set
|
2010-08-25 10:28:22 +02:00 |
|
Martin Willi
|
908e752201
|
Rebuild library.lo after changing ./configure options
|
2010-08-23 12:01:48 +02:00 |
|
Martin Willi
|
e0fcf43cf8
|
Build a trustchain even if no trust anchor is given
|
2010-08-23 12:01:43 +02:00 |
|
Martin Willi
|
4f60466a01
|
Fall back to shifting with 32-bit words if 64-bit byte order conversion function missing
|
2010-08-23 10:10:36 +02:00 |
|
Martin Willi
|
f9efac2ba3
|
Implemented generic enum name to enum value mapping
|
2010-08-23 09:47:03 +02:00 |
|
Martin Willi
|
3c19b3461f
|
Introducing a dedicated debug message group for libtls
|
2010-08-23 09:47:03 +02:00 |
|
Martin Willi
|
cb3f0c9b31
|
Register missing SHA256 authenticator with no truncation, as used by TLS
|
2010-08-20 12:11:21 +02:00 |
|
Martin Willi
|
23cf96773a
|
Improve GCM performance by factor 2-3 by shifting full 32/64 bit words
|
2010-08-19 19:08:57 +02:00 |
|
Martin Willi
|
1a64981048
|
Implemented a gcm plugin providing GCM mode based on CBC crypters
|
2010-08-19 19:05:15 +02:00 |
|