8 Commits

Include renames

Author	SHA1	Message	Date
Andreas Steffen	05eb83e986	Slightly edited evaltest of ikev2/ocsp-untrusted-cert scenario	2014-03-31 22:22:58 +02:00
Martin Willi	91d71abb16	revocation: Restrict OCSP signing to specific certificates ... To avoid considering each cached OCSP response and evaluating its trustchain, we limit the certificates considered for OCSP signing to: - The issuing CA of the checked certificate - A directly delegated signer by the same CA, having the OCSP signer constraint - Any locally installed (trusted) certificate having the OCSP signer constraint The first two options cover the requirements from RFC 6960 2.6. For compatibility with non-conforming CAs, we allow the third option as exception, but require the installation of such certificates locally.	2014-03-31 14:40:33 +02:00
Andreas Steffen	a56fdff194	upgraded ikev2 scenarios to 5.0.0	2012-05-11 11:00:32 +02:00
Andreas Steffen	fc67132697	due to a bug fix reverted to the previous RULE_CRL_VALIDATION check	2011-09-09 09:25:54 +02:00
Andreas Steffen	4171cbd60b	adapted evaltest.dat to new RULE_OCSP_VALIDATION	2010-09-01 22:22:27 +02:00
Martin Willi	a44bb9345f	merged multi-auth branch back into trunk	2009-04-14 10:34:24 +00:00
Andreas Steffen	158a62c326	adapted ikev2 uml scenarios for the 4.2 version	2008-04-01 20:05:02 +00:00
Andreas Steffen	bd46337cb0	added	2007-03-14 15:42:40 +00:00