Commit Graph
1332 Commits
Author SHA1 Message Date
Martin Willi b78ca4b04c Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20 2010-11-18 08:56:12 +01:00
Martin Willi cfa18d14f1 Use static args for C_Initialize(), OpenSC does not get a copy of the pointers 2010-11-18 08:44:22 +01:00
Andreas Steffen 0ebff9f442 added ITA and strongSwan OIDs 2010-11-17 22:46:45 +01:00
Andreas Steffen ba1ad6c430 corrected TCGID OID 2010-11-17 22:46:45 +01:00
Martin Willi d93060759e Remove obsolete pool_size argument in processor_create() 2010-11-16 09:39:06 +01:00
Martin Willi 9cda39923e Added a PKCS#11 module option to enforce OS Locking functions 2010-11-12 16:14:03 +01:00
Martin Willi 57398f621a Do not use CKA_TRUSTED attribute for Cryptoki version < 2.20, handling all certs as trusted 2010-11-10 18:36:15 +01:00
Martin Willi 59df2d2a6f Add flags for PKCS#11 libraries with reduced feature set 2010-11-10 18:36:15 +01:00
Andreas Steffen 1888dd6bd5 implemented IMC/IMV handler 2010-11-09 20:43:50 +01:00
Martin Willi c8f5aaf0a4 Renamed mem_cred_t clear function internally to clear_, fixes potential name conflict 2010-10-28 13:06:19 +00:00
Tobias Brunner 4915ea8217 Updated Android.mk to latest Makefile.am. 2010-10-21 15:02:32 +02:00
Tobias Brunner ed174fd7e2 Added missing include for RAND_seed and RAND_status. 2010-10-21 14:16:09 +02:00
Tobias Brunner 889c7947a6 Avoid duplicate certificates in mem_cred_t. 2010-10-14 17:36:20 +02:00
Tobias Brunner 5232ebb1b4 Added function to clear all credentials from mem_cred_t. 2010-10-14 17:36:19 +02:00
Tobias Brunner e29aa7696f Fixed possible segmentation fault. 2010-10-14 17:36:18 +02:00
Andreas Steffen 8e91079f7f ignore : separator characters in chunk_from_hex() 2010-10-12 19:13:05 +02:00
Andreas Steffen ed08f7ce83 use DBG_TNC for TNC debugging output 2010-10-09 16:01:19 +02:00
Martin Willi a8809bb0cb Fixed status_t enum names definition 2010-10-04 10:48:00 +02:00
Martin Willi 663e735553 Compare subject against all key identifiers in has_subject() 2010-09-09 17:46:20 +02:00
Andreas Steffen f85f0c2795 has_subject() now resolves ID_KEY_IDs 2010-09-09 17:15:46 +02:00
Andreas Steffen 52d4dc7fe2 added qcStatements OID 2010-09-07 11:17:51 +02:00
Martin Willi a92a348092 Register missing AUTH_HMAC_SHA384 algorithm without truncation 2010-09-06 16:50:58 +02:00
Martin Willi d987946e80 Added a final flag to builder registration to enumerate the actually supported algorithms 2010-09-03 18:09:48 +02:00
Martin Willi 7d7711aba4 Added a generic function to check if a DH group is an EC group 2010-09-03 16:22:10 +02:00
Martin Willi 033fe95f0b Added support for a non-truncated SHA384 HMAC variant, as used by TLS 2010-09-03 14:54:43 +02:00
Martin Willi ed60dfa14f Added support for MODP_CUSTOM to gcrypt plugin 2010-09-03 09:33:15 +02:00
Martin Willi 42b1ac91c4 Added support for MODP_CUSTOM to openssl plugin 2010-09-03 09:33:15 +02:00
Martin Willi 08d8b9405b Added support for MODP_CUSTOM to gmp plugin 2010-09-02 19:33:08 +02:00
Martin Willi 0abd558a65 Added a MODP_CUSTOM DH group which takes g and p as constructor arguments 2010-09-02 19:33:08 +02:00
Tobias Brunner f6697eadb9 Scheduler and processor have been moved to libstrongswan.
Also reverts 0c21dc000d as the dependency
to libcharon is no longer required.
2010-09-02 19:04:23 +02:00
Tobias Brunner bb381e26c6 Refer to scheduler and processor via lib and not hydra. 2010-09-02 19:04:18 +02:00
Tobias Brunner e18556e9e9 Moved scheduler and thread pool to libstrongswan. 2010-09-02 19:04:18 +02:00
Tobias Brunner 1989c75e9e Some minor comment fixes. 2010-09-02 19:01:23 +02:00
Martin Willi 0ac49c3292 Added an enumerator for registered credential builders 2010-09-02 10:49:02 +02:00
Martin Willi b019136596 Migrated credential_factory to INIT/METHOD macros 2010-09-02 10:49:02 +02:00
Martin Willi 81137552e5 Added an AAA identity authentication config option 2010-08-31 17:26:20 +02:00
Martin Willi f13a03add0 Moved EAP type/code definitions to a seprate header file in libstrongswan 2010-08-31 15:35:29 +02:00
Martin Willi 4332b5af89 Do not strdup() zero length strings in identification_create_from_string() 2010-08-31 15:34:45 +02:00
Andreas Steffen be63a48c36 defined EAP-TNC 2010-08-30 13:13:39 +02:00
Martin Willi 2291754ddf Unwrap crlNumber INTEGER in openssl CRL parsing 2010-08-30 11:23:46 +02:00
Martin Willi 3dd06bd4ed Added private key support to in-memory credential set 2010-08-25 10:28:23 +02:00
Martin Willi 72c6335de9 Added certificate support to in-memory credential set 2010-08-25 10:28:22 +02:00
Martin Willi 908e752201 Rebuild library.lo after changing ./configure options 2010-08-23 12:01:48 +02:00
Martin Willi e0fcf43cf8 Build a trustchain even if no trust anchor is given 2010-08-23 12:01:43 +02:00
Martin Willi 4f60466a01 Fall back to shifting with 32-bit words if 64-bit byte order conversion function missing 2010-08-23 10:10:36 +02:00
Martin Willi f9efac2ba3 Implemented generic enum name to enum value mapping 2010-08-23 09:47:03 +02:00
Martin Willi 3c19b3461f Introducing a dedicated debug message group for libtls 2010-08-23 09:47:03 +02:00
Martin Willi cb3f0c9b31 Register missing SHA256 authenticator with no truncation, as used by TLS 2010-08-20 12:11:21 +02:00
Martin Willi 23cf96773a Improve GCM performance by factor 2-3 by shifting full 32/64 bit words 2010-08-19 19:08:57 +02:00
Martin Willi 1a64981048 Implemented a gcm plugin providing GCM mode based on CBC crypters 2010-08-19 19:05:15 +02:00