Adrian-Ken Rueegsegger
d887b8e134
Fix whitespaces
2012-01-12 11:25:18 +01:00
Tobias Brunner
a660f1426e
Fixed missing initializer compiler warning.
2011-11-25 09:52:19 +01:00
Thomas Egerer
6e5e2762d3
Handle certificates being on hold in a CRL
...
Certificates which are set on hold in a CRL might be removed from any
subsequent CRL. Hence you cannot conclude that a certificate is revoked
for good in this case, you would try to retrieve an update CRL to see if
the certificate on hold is still on it or not.
2011-11-04 11:11:17 +01:00
Tobias Brunner
cbf5c2c61c
Readded docs for some arguments to global functions.
...
Those were overzealously removed in 28623fc538
2011-07-21 18:38:43 +02:00
Tobias Brunner
f3bb1bd039
Fixed common misspellings.
...
Mostly found by 'codespell'.
2011-07-20 16:14:10 +02:00
Tobias Brunner
28623fc538
"this" removed from comments.
2011-07-06 09:43:45 +02:00
Andreas Steffen
d390b3b901
[hopefully] fixed pathlen problem on ARM platforms
2011-02-10 15:51:18 +01:00
Martin Willi
07eee80401
Added support for inhibitAnyPolicy constraint to x509 plugin
2011-01-05 16:46:05 +01:00
Martin Willi
b3d359e58f
Use a generic getter for all numerical X.509 constraints
2011-01-05 16:46:05 +01:00
Martin Willi
55e4d8982f
Added support for delta CRLs to x509 plugin
2011-01-05 16:46:03 +01:00
Martin Willi
a6478a0402
Simplified format of x509 CRL URI parsing/enumerator
2011-01-05 16:46:03 +01:00
Martin Willi
a742d97fb8
Added support for policyConstraints to x509 plugin
2011-01-05 16:46:02 +01:00
Martin Willi
5dba5852fc
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
2011-01-05 16:46:02 +01:00
Martin Willi
5a0caa4b3a
Added policyMappings support to x509 plugin
2011-01-05 16:46:02 +01:00
Martin Willi
20bd78106e
Added certificatePolicy support to x509 plugin
2011-01-05 16:46:02 +01:00
Martin Willi
dbfbbec368
Added name constraint enumerator to x509 interface
2011-01-05 16:46:00 +01:00
Martin Willi
6807c0ca2c
Added a flag for X509 CRLSign keyUsage
2011-01-05 16:45:56 +01:00
Martin Willi
e49bd37b5d
Remove x509_flag_names, flags do not work with ENUM()
2011-01-05 16:45:56 +01:00
Martin Willi
4e508517d7
Added support for CRL Issuers to x509 and OpenSSL plugins
2011-01-05 16:45:55 +01:00
Martin Willi
0406eeaacb
Support different encoding types in certificate.get_encoding()
2010-07-13 13:53:20 +02:00
Martin Willi
5db798c8e0
Charon uses a generic trunstchain length limit, not only for X509 certificates
2010-07-13 10:26:06 +02:00
Martin Willi
aab861608a
Removed is_newer() from certificate_t, obsoleting all implementations
2010-05-21 16:25:51 +02:00
Martin Willi
8029e5efd2
Added generic implementations for crl_is_newer/certificate_is_newer
2010-05-21 16:25:51 +02:00
Martin Willi
7eab4a1be6
Support TLS client authentication Extended Key Usage in x509 generation
2010-01-14 12:00:43 +01:00
Andreas Steffen
e16a01a5e6
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
2009-12-22 13:18:27 +01:00
Andreas Steffen
91e35b7c9e
added create_ipAddrBlock_enumerator() method to x509_t
2009-12-22 11:58:30 +01:00
Andreas Steffen
ab5762e32a
list v3 or v4 fingerprint
2009-11-08 23:21:03 +01:00
Andreas Steffen
4c68a85a75
implemented path length constraint checkinf for IKEv2
2009-11-04 23:37:15 +01:00
Andreas Steffen
00aa027503
implemented parsing of pathLenConstraint
2009-11-04 00:03:10 +01:00
Andreas Steffen
38031878dd
moved .gitignore for pool
2009-10-15 14:58:09 +02:00
Andreas Steffen
408e46a324
ipsec pki --issue suports --flag authServer option
2009-10-05 22:44:01 +02:00
Andreas Steffen
fc12e3cd2e
pluto now uses x509 plugin for attribute certificate handling
2009-10-05 07:24:28 +02:00
Andreas Steffen
8ad23ba346
added get_subjectKeyIdentifier() to x509_t
2009-09-26 22:10:36 +02:00
Andreas Steffen
d78a0262d1
backwards compatibility with SQL format
2009-09-18 15:48:24 +02:00
Martin Willi
4cb0e1bb76
Added basic support for PGP certificates (no trust relationships yet)
2009-09-15 08:23:48 +02:00
Andreas Steffen
ba274c2343
removed req.h
2009-09-13 21:03:36 +02:00
Andreas Steffen
f03e0e9147
support of PKCS#10 certificate request parsing
2009-09-13 21:00:15 +02:00
Martin Willi
323f9f990f
replaces four spaces by tabs, where appropriate
2009-09-04 14:50:23 +02:00
Martin Willi
7daf5226b7
removed trailing spaces ([[:space:]]+$)
2009-09-04 13:46:09 +02:00
Martin Willi
ad31f98a74
fixed certificate_t enum names
2009-09-01 11:28:05 +02:00
Andreas Steffen
f561d6f2e9
changed prefix of crl_reason_t values from CRL_ to CRL_REASON_
2009-08-31 23:21:50 +02:00
Martin Willi
a5e3153a36
updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk
2009-08-26 11:23:52 +02:00
Martin Willi
cbb62e8f4c
handle pluto specific certificates under CRED_CERTIFICATE, not as own credential kind
2009-08-26 11:23:49 +02:00
Tobias Brunner
8c5d72cd0b
removing svn keyword $Id$ from all files
2009-04-30 13:19:35 +00:00
Martin Willi
a44bb9345f
merged multi-auth branch back into trunk
2009-04-14 10:34:24 +00:00
Martin Willi
1490ff4d9b
updated Doxyfile
...
properly close all doxygen groups
fixed remaining doxygen warnings
2009-03-24 17:43:01 +00:00
Andreas Steffen
0672aa7b0e
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
2008-05-23 14:24:24 +00:00
Martin Willi
7b88a983d8
caching of ocsp responses (experimental), no crl caching yet
2008-03-26 15:21:50 +00:00
Andreas Steffen
26930a8c3e
certificate factory can load certs from file
2008-03-25 22:28:27 +00:00
Andreas Steffen
84a5c6a679
added ac.c
2008-03-25 10:13:57 +00:00
Adrian-Ken Rueegsegger