Tobias Brunner
|
11adf114c1
|
Fixed Doxygen comments after scanning complete src directory
|
2013-03-02 18:31:53 +01:00 |
|
Tobias Brunner
|
4c969f7906
|
openssl: The EVP GCM interface requires at least OpenSSL 1.0.1
|
2013-03-01 16:57:45 +01:00 |
|
Tobias Brunner
|
81f9cd39fd
|
openssl: Provide AES-GCM implementation
|
2013-02-28 18:17:42 +01:00 |
|
Tobias Brunner
|
5f7f4fa398
|
Order of arguments in Doxygen comment fixed
|
2013-02-28 18:17:42 +01:00 |
|
Tobias Brunner
|
0d237763dc
|
openssl: Disable PKCS#7/CMS when building against OpenSSL < 0.9.8g
Fixes #292.
|
2013-02-20 18:34:54 +01:00 |
|
Andreas Steffen
|
a4ddc0bb26
|
Encode RSA public keys in RFC 3110 DNSKEY format
|
2013-02-19 12:25:00 +01:00 |
|
Andreas Steffen
|
f2145c8d3a
|
Moved configuration from resolver manager to unbound plugin
Also streamlined log messages in unbound plugin.
|
2013-02-19 12:25:00 +01:00 |
|
Reto Guadagnini
|
cfd07978d0
|
unbound: Implementation of query method of unbound_resolver_t
|
2013-02-19 11:57:21 +01:00 |
|
Reto Guadagnini
|
5a4126b490
|
unbound: Implemented resolver_response_t as unbound_response_t
|
2013-02-19 11:57:21 +01:00 |
|
Reto Guadagnini
|
4a335a2164
|
unbound: Implemented rr_t as unbound_rr_t
|
2013-02-19 11:57:21 +01:00 |
|
Reto Guadagnini
|
9f963a7cfc
|
Added unbound plugin implementing the resolver interface using libunbound
|
2013-02-19 11:57:21 +01:00 |
|
Martin Willi
|
763e86c093
|
Use CURL_TIMEOUT and not CURL_CONNECTTIMEOUT for FETCHER_TIMEOUT in curl
This allows us to use this timeout beyond DNS resolution. For the initial
connect, we use a hardcoded timeout of 10s for now.
|
2013-02-08 11:08:06 +01:00 |
|
Tobias Brunner
|
a3a190b7bd
|
openssl: Properly honor OPENSSL_NO_* defines
|
2013-01-31 17:33:23 +01:00 |
|
Tobias Brunner
|
25637aa5d8
|
Fix Doxygen comment for rdrand plugin
|
2013-01-31 12:11:37 +01:00 |
|
Tobias Brunner
|
572a707765
|
Properly check MSB in openssl plugin's PKCS#7 implementation
|
2013-01-24 23:36:02 +01:00 |
|
Tobias Brunner
|
69c6a60176
|
g_thread_init() is deprecated since Glib 2.23
|
2013-01-24 19:13:40 +01:00 |
|
Martin Willi
|
1449e6dd55
|
Reseed rdrand after every 128bit sample only
|
2013-01-15 17:41:54 +01:00 |
|
Martin Willi
|
2cd6c5115b
|
Use raw opcodes for rdrand to build with older binutils
|
2013-01-11 10:45:14 +01:00 |
|
Martin Willi
|
19ae23452a
|
Provide RNG_TRUE quality in rdrand by mixing reseeded outputs using AES
|
2013-01-11 10:45:14 +01:00 |
|
Martin Willi
|
b9148ea232
|
Provide RNG_STRONG quality in rdrand by forcing PRNG reseed after every sample
|
2013-01-11 10:45:14 +01:00 |
|
Martin Willi
|
9fe24b004d
|
Provide RNG_WEAK quality random generator in rdrand
|
2013-01-11 10:45:14 +01:00 |
|
Martin Willi
|
ed8dc6f132
|
Add a rdrand plugin stub detecting availability of RDRAND instructions
|
2013-01-11 10:45:14 +01:00 |
|
Martin Willi
|
ff318ad3e1
|
Include opensslconf.h before checking its defines
|
2013-01-03 11:12:05 +01:00 |
|
Martin Willi
|
2b9e597b54
|
Don't build OpenSSL PKCS#7 code if OPENSSL_NO_CMS defined
|
2013-01-03 11:05:49 +01:00 |
|
Tobias Brunner
|
ef33a4ab82
|
Fixed some typos, courtesy of codespell
|
2012-12-20 09:35:26 +01:00 |
|
Martin Willi
|
0a344da291
|
Fix up serialNumber in openssl PKCS#7 if it has a leading MSB set
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
71dd4e7895
|
Don't handle PKCS#7 containers with infinite length encodings in pkcs7 plugin
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
3c820cdc23
|
Implement PKCS#7 decryption using openssl
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
2a87944a33
|
Make available wrapped certificates while verifying PKCS#7 signatures in openssl
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
04884be3b5
|
Implement openssl PKCS#7 certficiate enumeration
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
e96d945dcd
|
Fix doxygen grouping regarding containers and PKCS#7
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
03ba8f9e8c
|
Move PKCS#9 attribute lists to pkcs7 plugin, as we currently use it there only
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
804ba5bb50
|
Implement get_attribute() in openssl PKCS#7 backend
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
063ae4e52a
|
Allocate data returned by pkcs7_t.get_attribute()
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
c61723c69f
|
Implement OpenSSL PKCS#7 signed-data parsing and verification
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
568ad938d1
|
Add a stub for OpenSSL PKCS#7 parsing
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
6d21c61a09
|
Fix encryption algorithm/key size argument processing in PKCS#7 enveloped-data
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
ee97055835
|
Properly clone PKCS#7 attributes passed to builder
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
9e967d7dda
|
Add an enumerator for PKCS#7 contained certificates
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
d3d706f4fc
|
Add a getter for signed PKCS#7 attributes
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
b95b4730f5
|
Support multiple signerInfos while parsing PKCS#7 signed-data
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
5d932e4f01
|
Support encoding of PKCS#7 enveloped-data containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
32745a28cf
|
Support encoding of PKCS#7 signed-data containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
3c2986bf0a
|
Support encoding of PKCS#7 "data" containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
d7aa09104f
|
Implement PKCS#7 enveloped-data parsing and decryption
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
98bbe0760f
|
Implement PKCS#7 signed-data parsing and verification
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
83ed1464e3
|
Implement PKCS#7 "data" content type parsing
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
ed1c430334
|
certificate_t.has_subject() matches for certificate serialNumber
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
9de6a7a85c
|
Implement generic PKCS#7 contentInfo parsing
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
bd20f040fd
|
Add a plugin stub for PKCS#7 containers
|
2012-12-19 10:32:07 +01:00 |
|