Martin Willi
|
dbfbbec368
|
Added name constraint enumerator to x509 interface
|
2011-01-05 16:46:00 +01:00 |
|
Martin Willi
|
a199ef15e6
|
Migrated x509_cert_t to INIT/METHOD macros
|
2011-01-05 16:46:00 +01:00 |
|
Martin Willi
|
be8858e9b6
|
Moved X509 pathlen constraint checking to constraints plugin
|
2011-01-05 16:46:00 +01:00 |
|
Martin Willi
|
01d3038137
|
Added plugin stub for advanced X509 constraint checking
|
2011-01-05 16:46:00 +01:00 |
|
Martin Willi
|
6840a6fb98
|
CRL/OCSP validation stores trustchain information in auth_cfg
|
2011-01-05 16:45:56 +01:00 |
|
Martin Willi
|
6ffd9f88ce
|
Use subject, not issuer, of CRL issuing certificate
|
2011-01-05 16:45:56 +01:00 |
|
Martin Willi
|
dffb176f2b
|
CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation
|
2011-01-05 16:45:56 +01:00 |
|
Martin Willi
|
ece5ac2271
|
Parse and encode crlSign keyUsage flag in x509 plugin
|
2011-01-05 16:45:56 +01:00 |
|
Martin Willi
|
7d7beaa1fa
|
Use certificate CRLIssuer information to look up cacched CRLs or CDPs
|
2011-01-05 16:45:56 +01:00 |
|
Martin Willi
|
4e508517d7
|
Added support for CRL Issuers to x509 and OpenSSL plugins
|
2011-01-05 16:45:55 +01:00 |
|
Martin Willi
|
1535913aed
|
Load plugins only once, even if listed twice
|
2011-01-05 16:45:49 +01:00 |
|
Andreas Steffen
|
d77c6c49a9
|
printed plugin names have a hyphen
|
2010-12-24 05:53:27 +01:00 |
|
Martin Willi
|
33bfdf6f37
|
Fixed public key construction from PKCS#11 private key
|
2010-12-23 10:29:01 +01:00 |
|
Martin Willi
|
23a737eb29
|
Probe for supported AF_ALG algorithms, register dynamically
|
2010-12-20 10:09:20 +01:00 |
|
Martin Willi
|
4ee5d97d57
|
Register algorithms with dependencies only if dependency available
|
2010-12-20 10:00:39 +01:00 |
|
Martin Willi
|
d214ebdf82
|
Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)
|
2010-12-20 09:52:02 +01:00 |
|
Martin Willi
|
533151692f
|
Implemented PRFs using AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
Martin Willi
|
06eb35efb0
|
Use the AF_ALG wrapper in hasher, crypter and signer
|
2010-12-20 09:52:02 +01:00 |
|
Martin Willi
|
1b5de7ce3b
|
Use a generic AF_ALG wrapper for common operations
|
2010-12-20 09:52:02 +01:00 |
|
Martin Willi
|
a5c973b955
|
Implemented crypter on top of AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
Martin Willi
|
e75e1c9473
|
Implemented signer interface using AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
Martin Willi
|
6f08911321
|
Implemented hasher based on AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
Martin Willi
|
71c87e3483
|
Added plugin stub for AF_ALG
|
2010-12-20 09:52:02 +01:00 |
|
Andreas Steffen
|
5932f41fcc
|
trace back crypto algorithms to the plugins that registered them
|
2010-12-18 16:31:12 +01:00 |
|
Andreas Steffen
|
7e02e49112
|
Migrated fips_prf plugin to INIT/METHOD macros
|
2010-12-04 20:56:21 +01:00 |
|
Andreas Steffen
|
c7b778450e
|
Migrated md4_plugin_t to INIT/METHOD macros
|
2010-12-04 20:45:49 +01:00 |
|
Andreas Steffen
|
e5e79bd403
|
Migrated md5_plugin_t to INIT/METHOD macros
|
2010-12-04 20:43:41 +01:00 |
|
Andreas Steffen
|
1e84aa74aa
|
Migrated ldap plugin to INIT/METHOD macros
|
2010-12-04 20:15:59 +01:00 |
|
Andreas Steffen
|
4df49844d9
|
Migrated pubkey_plugin_t to INIT/METHOD macros
|
2010-12-04 15:43:04 +01:00 |
|
Andreas Steffen
|
dd621140d3
|
Migrated pkcs1_plugin_t to INIT/METHOD macros
|
2010-12-04 11:43:06 +01:00 |
|
Andreas Steffen
|
c742935dac
|
Migrated curl_plugin_t to INIT/METHOD macros
|
2010-12-04 11:40:40 +01:00 |
|
Andreas Steffen
|
1bb67ff852
|
Migrated random plugin to INIT/METHOD macros
|
2010-12-04 11:37:03 +01:00 |
|
Andreas Steffen
|
79bbe64e17
|
Migrated sha1_plugin_t to INIT/METHOD macros
|
2010-12-04 11:26:02 +01:00 |
|
Andreas Steffen
|
72c436c170
|
Migrated sha2_plugin_t to INIT/METHOD macros
|
2010-12-04 10:48:42 +01:00 |
|
Andreas Steffen
|
4d7e8032ec
|
Migrated mysql plugin to INIT/METHOD macros
|
2010-12-04 10:38:35 +01:00 |
|
Andreas Steffen
|
c6fde416c4
|
use private destroy() function
|
2010-12-04 10:28:30 +01:00 |
|
Andreas Steffen
|
cca86ba94d
|
Migrated sqlite plugin to INIT/METHOD macros
|
2010-12-04 10:20:33 +01:00 |
|
Andreas Steffen
|
621f9324d9
|
Migrated test_vectors_plugin_t to INIT/METHOD macros
|
2010-12-04 10:10:37 +01:00 |
|
Andreas Steffen
|
36e4aa7b9e
|
Migrated x509_plugin_t to INIT/METHOD macros
|
2010-12-04 10:07:56 +01:00 |
|
Andreas Steffen
|
b5eeebe657
|
Migrated pgp_plugin_t to INIT/METHOD macros
|
2010-12-04 09:30:25 +01:00 |
|
Andreas Steffen
|
9a76f6ded2
|
Migrated pem_plugin_t to INIT/METHOD macros
|
2010-12-04 09:25:22 +01:00 |
|
Andreas Steffen
|
cb458beb31
|
Migrated dnskey_plugin_t to INIT/METHOD macros
|
2010-12-04 09:20:53 +01:00 |
|
Martin Willi
|
b78ca4b04c
|
Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20
|
2010-11-18 08:56:12 +01:00 |
|
Martin Willi
|
cfa18d14f1
|
Use static args for C_Initialize(), OpenSC does not get a copy of the pointers
|
2010-11-18 08:44:22 +01:00 |
|
Martin Willi
|
9cda39923e
|
Added a PKCS#11 module option to enforce OS Locking functions
|
2010-11-12 16:14:03 +01:00 |
|
Martin Willi
|
57398f621a
|
Do not use CKA_TRUSTED attribute for Cryptoki version < 2.20, handling all certs as trusted
|
2010-11-10 18:36:15 +01:00 |
|
Martin Willi
|
59df2d2a6f
|
Add flags for PKCS#11 libraries with reduced feature set
|
2010-11-10 18:36:15 +01:00 |
|
Tobias Brunner
|
ed174fd7e2
|
Added missing include for RAND_seed and RAND_status.
|
2010-10-21 14:16:09 +02:00 |
|
Martin Willi
|
663e735553
|
Compare subject against all key identifiers in has_subject()
|
2010-09-09 17:46:20 +02:00 |
|
Andreas Steffen
|
f85f0c2795
|
has_subject() now resolves ID_KEY_IDs
|
2010-09-09 17:15:46 +02:00 |
|