 Martin Willi
|
a846bf06e8
|
Add missing AUTH_RULE for trusted self-signed peer certificates
|
2011-02-01 09:25:10 +01:00 |
|
|
Martin Willi
|
76cfaf13c1
|
Verify trustchain for each candidate certificate only once
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
8469625fdc
|
Include subject cert to temporary auth info before completing trustchain
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
6aba6ff061
|
Pass an additional anchor flag to validate() hook if we reach the root CA
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
09e319d419
|
Always pass auth info to validate(), use pathlen to check for user certificate
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
be8858e9b6
|
Moved X509 pathlen constraint checking to constraints plugin
|
2011-01-05 16:46:00 +01:00 |
|
|
Martin Willi
|
473d5aa868
|
Key strength checking stores all key sizes in auth_cfg, verifies all in complies()
|
2011-01-05 16:45:56 +01:00 |
|
|
Martin Willi
|
963b4d9477
|
Added key strength constraints for RSA or ECDSA trustchains
|
2011-01-05 16:45:53 +01:00 |
|
|
Martin Willi
|
e0fcf43cf8
|
Build a trustchain even if no trust anchor is given
|
2010-08-23 12:01:43 +02:00 |
|
|
Tobias Brunner
|
56bceda7b5
|
Fixed compiler warnings.
|
2010-08-03 19:00:46 +02:00 |
|
|
Martin Willi
|
da9724e6d0
|
Renamed key_encod{ing,der}_t and constants, prepare for generic credential encoding
|
2010-07-13 11:29:35 +02:00 |
|
|
Martin Willi
|
c2e5cee413
|
Moved CRL/OCSP checking to a dedicated plugin called revocation
|
2010-07-13 10:26:07 +02:00 |
|
|
Martin Willi
|
c1f9dad672
|
Made some useful methods in the credential manager public
|
2010-07-13 10:26:07 +02:00 |
|
|
Martin Willi
|
5f9e62c54f
|
Moved X509 addrBlock validation to a separate addrblock plugin
|
2010-07-13 10:26:07 +02:00 |
|
|
Martin Willi
|
2feb16f5dd
|
Added a certificate validation hook to the credential manager
|
2010-07-13 10:26:07 +02:00 |
|
|
Martin Willi
|
c3a9bef08e
|
Migrated credential manager to INIT/METHOD macros
|
2010-07-13 10:26:07 +02:00 |
|
|
Martin Willi
|
2ccc02a4fd
|
Moved credential manager to libstrongswan
|
2010-07-13 10:26:07 +02:00 |
|