denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,292 Commits 1 Branch 0 Tags
da9724e6d0fe82db4191a2d15919b365f0f210b0
Commit Graph
125 Commits
Author SHA1 Message Date
Martin Willi da9724e6d0 Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding 2010-07-13 11:29:35 +02:00
Martin Willi 7a74295e42 Select subjectAltName address family using address length in x509 plugin 2010-06-24 12:01:18 +02:00
Martin Willi 09f38ebe54 Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier 2010-05-21 16:38:19 +02:00
Martin Willi 13c593f126 Added support for CRL generation to x509 plugin 2010-05-21 16:25:51 +02:00
Martin Willi aab861608a Removed is_newer() from certificate_t, obsoleting all implementations 2010-05-21 16:25:51 +02:00
Martin Willi 654218a31b Migrated x509_crl_t to INIT/METHOD macros 2010-05-21 16:25:51 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Andreas Steffen ceeb9bac8b critical keyUsage extension must be parsed 2010-03-07 20:51:34 +01:00
Andreas Steffen 1ec8f22de2 set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true 2010-03-07 17:27:53 +01:00
Tobias Brunner afb364fff9 Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0. 
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
 2010-03-02 12:03:44 +01:00
Tobias Brunner 4e657051f7 Streamlined the source file list formatting in plugin makefiles. 2010-03-02 10:40:50 +01:00
Tobias Brunner 6ec60bb92b Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon. 2010-03-02 10:38:52 +01:00
Tobias Brunner 9ce567f895 Changed plugin constructors from plugin_create to plugin_name_plugin_create. 2010-03-02 09:10:26 +01:00
Tobias Brunner 6cc13cd9c5 Removing the plugin constructor declarations from the header files. 2010-03-02 09:10:19 +01:00
Tobias Brunner eba28948a5 Link all plugins to libstrongswan. 2010-02-25 13:51:05 +01:00
Andreas Steffen b917f49684 initialize variables to avoid compiler warning 2010-02-05 12:34:37 +01:00
Martin Willi 7eab4a1be6 Support TLS client authentication Extended Key Usage in x509 generation 2010-01-14 12:00:43 +01:00
Andreas Steffen 3e33ae1004 ipsec pki --self|issue supports --pathlen option setting a path length constraint 2009-12-31 15:13:35 +01:00
Andreas Steffen e16a01a5e6 X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension 2009-12-22 13:18:27 +01:00
Andreas Steffen 91e35b7c9e added create_ipAddrBlock_enumerator() method to x509_t 2009-12-22 11:58:30 +01:00
Andreas Steffen 157125e4c9 traffic_selector supports RFC 3779 address range format 2009-12-21 21:29:01 +01:00
Andreas Steffen 513eb95e60 parse RFC 3779 addressFamily 2009-12-20 19:26:28 +01:00
Andreas Steffen 7d379a786c plugin name is x509 2009-12-20 16:01:35 +01:00
Andreas Steffen 28c25485ba discard certificate with unknown critical extensions 2009-12-20 15:53:39 +01:00
Andreas Steffen f3e366a9a0 use traffic_selector_t object to represent ipAddrBlocks 2009-12-20 15:15:02 +01:00
Andreas Steffen ad858aee15 parse ipAddrBlocks 2009-12-17 17:32:55 +01:00
Andreas Steffen 4c68a85a75 implemented path length constraint checkinf for IKEv2 2009-11-04 23:37:15 +01:00
Andreas Steffen fae322219f output optional pathLenConstraint in ipsec listcacerts 2009-11-04 07:30:07 +01:00
Andreas Steffen 00aa027503 implemented parsing of pathLenConstraint 2009-11-04 00:03:10 +01:00
Andreas Steffen cf85e1319b streamlined output from get_validity() 2009-10-06 14:22:27 +02:00
Andreas Steffen 408e46a324 ipsec pki --issue suports --flag authServer option 2009-10-05 22:44:01 +02:00
Andreas Steffen ce40bf5def ipsec pki --issue supports --flag ocspSigning option 2009-10-05 21:20:42 +02:00
Andreas Steffen fc12e3cd2e pluto now uses x509 plugin for attribute certificate handling 2009-10-05 07:24:28 +02:00
Andreas Steffen 0aa5cea248 mark embedded parsing in debug mode 2009-10-02 20:54:15 +02:00
Andreas Steffen ec0abe4ab5 added some notBefore/notAfter debugging info 2009-10-02 20:14:09 +02:00
Andreas Steffen daaedcb9c2 verify correctness of X.509 versions 2009-10-02 17:49:51 +02:00
Andreas Steffen 70e81857f9 generate known OIDs dynamically 2009-09-30 11:49:32 +02:00
Andreas Steffen 8ad23ba346 added get_subjectKeyIdentifier() to x509_t 2009-09-26 22:10:36 +02:00
Andreas Steffen a28334720c adding additional flags to loaded X.509 certificates 2009-09-22 12:55:25 +02:00
Andreas Steffen edf30136b0 implemented ASN.1 encoding of PKCS#10 attributes 2009-09-15 21:55:44 +02:00
Andreas Steffen 0001db115d check if PKCS#10 version is 1 2009-09-14 19:38:57 +02:00
Andreas Steffen 29662a9b73 cosmetics 2009-09-14 19:29:05 +02:00
Andreas Steffen 341af94dc6 support of PKCS#10 certificate request generation without attributes 2009-09-14 00:45:51 +02:00
Andreas Steffen 210d287368 extended hasher_signature_algorithm_to_oid() function 2009-09-13 21:41:51 +02:00
Andreas Steffen f03e0e9147 support of PKCS#10 certificate request parsing 2009-09-13 21:00:15 +02:00
Andreas Steffen 4c51c6be01 parsing error caused segfault in destroy() 2009-09-13 20:56:12 +02:00
Andreas Steffen beace4af14 corrected captions 2009-09-12 17:39:15 +02:00
Martin Willi 6dc57cd02e x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations 2009-09-11 17:16:22 +02:00
Martin Willi 3b878dae7e Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro 2009-09-11 15:39:35 +02:00
Martin Willi 881b259943 x509 plugin supports encoding of CRL distribution points 2009-09-11 15:36:22 +02:00