 Tobias Brunner
|
eba28948a5
|
Link all plugins to libstrongswan.
|
2010-02-25 13:51:05 +01:00 |
|
|
Andreas Steffen
|
b917f49684
|
initialize variables to avoid compiler warning
|
2010-02-05 12:34:37 +01:00 |
|
|
Martin Willi
|
7eab4a1be6
|
Support TLS client authentication Extended Key Usage in x509 generation
|
2010-01-14 12:00:43 +01:00 |
|
|
Andreas Steffen
|
3e33ae1004
|
ipsec pki --self|issue supports --pathlen option setting a path length constraint
|
2009-12-31 15:13:35 +01:00 |
|
|
Andreas Steffen
|
e16a01a5e6
|
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
|
2009-12-22 13:18:27 +01:00 |
|
|
Andreas Steffen
|
91e35b7c9e
|
added create_ipAddrBlock_enumerator() method to x509_t
|
2009-12-22 11:58:30 +01:00 |
|
|
Andreas Steffen
|
157125e4c9
|
traffic_selector supports RFC 3779 address range format
|
2009-12-21 21:29:01 +01:00 |
|
|
Andreas Steffen
|
513eb95e60
|
parse RFC 3779 addressFamily
|
2009-12-20 19:26:28 +01:00 |
|
|
Andreas Steffen
|
7d379a786c
|
plugin name is x509
|
2009-12-20 16:01:35 +01:00 |
|
|
Andreas Steffen
|
28c25485ba
|
discard certificate with unknown critical extensions
|
2009-12-20 15:53:39 +01:00 |
|
|
Andreas Steffen
|
f3e366a9a0
|
use traffic_selector_t object to represent ipAddrBlocks
|
2009-12-20 15:15:02 +01:00 |
|
|
Andreas Steffen
|
ad858aee15
|
parse ipAddrBlocks
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
4c68a85a75
|
implemented path length constraint checkinf for IKEv2
|
2009-11-04 23:37:15 +01:00 |
|
|
Andreas Steffen
|
fae322219f
|
output optional pathLenConstraint in ipsec listcacerts
|
2009-11-04 07:30:07 +01:00 |
|
|
Andreas Steffen
|
00aa027503
|
implemented parsing of pathLenConstraint
|
2009-11-04 00:03:10 +01:00 |
|
|
Andreas Steffen
|
cf85e1319b
|
streamlined output from get_validity()
|
2009-10-06 14:22:27 +02:00 |
|
|
Andreas Steffen
|
408e46a324
|
ipsec pki --issue suports --flag authServer option
|
2009-10-05 22:44:01 +02:00 |
|
|
Andreas Steffen
|
ce40bf5def
|
ipsec pki --issue supports --flag ocspSigning option
|
2009-10-05 21:20:42 +02:00 |
|
|
Andreas Steffen
|
fc12e3cd2e
|
pluto now uses x509 plugin for attribute certificate handling
|
2009-10-05 07:24:28 +02:00 |
|
|
Andreas Steffen
|
0aa5cea248
|
mark embedded parsing in debug mode
|
2009-10-02 20:54:15 +02:00 |
|
|
Andreas Steffen
|
ec0abe4ab5
|
added some notBefore/notAfter debugging info
|
2009-10-02 20:14:09 +02:00 |
|
|
Andreas Steffen
|
daaedcb9c2
|
verify correctness of X.509 versions
|
2009-10-02 17:49:51 +02:00 |
|
|
Andreas Steffen
|
70e81857f9
|
generate known OIDs dynamically
|
2009-09-30 11:49:32 +02:00 |
|
|
Andreas Steffen
|
8ad23ba346
|
added get_subjectKeyIdentifier() to x509_t
|
2009-09-26 22:10:36 +02:00 |
|
|
Andreas Steffen
|
a28334720c
|
adding additional flags to loaded X.509 certificates
|
2009-09-22 12:55:25 +02:00 |
|
|
Andreas Steffen
|
edf30136b0
|
implemented ASN.1 encoding of PKCS#10 attributes
|
2009-09-15 21:55:44 +02:00 |
|
|
Andreas Steffen
|
0001db115d
|
check if PKCS#10 version is 1
|
2009-09-14 19:38:57 +02:00 |
|
|
Andreas Steffen
|
29662a9b73
|
cosmetics
|
2009-09-14 19:29:05 +02:00 |
|
|
Andreas Steffen
|
341af94dc6
|
support of PKCS#10 certificate request generation without attributes
|
2009-09-14 00:45:51 +02:00 |
|
|
Andreas Steffen
|
210d287368
|
extended hasher_signature_algorithm_to_oid() function
|
2009-09-13 21:41:51 +02:00 |
|
|
Andreas Steffen
|
f03e0e9147
|
support of PKCS#10 certificate request parsing
|
2009-09-13 21:00:15 +02:00 |
|
|
Andreas Steffen
|
4c51c6be01
|
parsing error caused segfault in destroy()
|
2009-09-13 20:56:12 +02:00 |
|
|
Andreas Steffen
|
beace4af14
|
corrected captions
|
2009-09-12 17:39:15 +02:00 |
|
|
Martin Willi
|
6dc57cd02e
|
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
|
2009-09-11 17:16:22 +02:00 |
|
|
Martin Willi
|
3b878dae7e
|
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro
|
2009-09-11 15:39:35 +02:00 |
|
|
Martin Willi
|
881b259943
|
x509 plugin supports encoding of CRL distribution points
|
2009-09-11 15:36:22 +02:00 |
|
|
Martin Willi
|
d73f453c29
|
Updated x509 plugin to the new builder API
|
2009-09-10 16:20:21 +02:00 |
|
|
Martin Willi
|
7631aac20c
|
x509 certificates support encoding of email, DNS and IP subjectAltNames
|
2009-09-08 13:17:41 +02:00 |
|
|
Martin Willi
|
d7be290643
|
non self-signed x509 certificates are encoded with authorityKeyIdentifier
|
2009-09-08 11:26:05 +02:00 |
|
|
Martin Willi
|
5c92524449
|
x509 CA certificates are encoded with a subjectKeyIdentifier
|
2009-09-08 11:02:49 +02:00 |
|
|
Martin Willi
|
8ab900dee9
|
x509 plugin supports encoding of CA basicConstraint extension
|
2009-09-08 10:38:02 +02:00 |
|
|
Martin Willi
|
7b3814f75d
|
remove spaces before tabs at the beginning of lines (^( )+\t)
|
2009-09-04 15:02:11 +02:00 |
|
|
Martin Willi
|
b9b8a98f47
|
remove spaces within tabs (\t( )+\t)
|
2009-09-04 15:00:19 +02:00 |
|
|
Martin Willi
|
323f9f990f
|
replaces four spaces by tabs, where appropriate
|
2009-09-04 14:50:23 +02:00 |
|
|
Martin Willi
|
7daf5226b7
|
removed trailing spaces ([[:space:]]+$)
|
2009-09-04 13:46:09 +02:00 |
|
|
Andreas Steffen
|
f561d6f2e9
|
changed prefix of crl_reason_t values from CRL_ to CRL_REASON_
|
2009-08-31 23:21:50 +02:00 |
|
|
Andreas Steffen
|
2aa67d2636
|
.., but a comment might be helpful
|
2009-08-28 09:28:39 +02:00 |
|
|
Andreas Steffen
|
6be3f0f1d0
|
removed TODO reminder
|
2009-08-28 09:26:46 +02:00 |
|
|
Andreas Steffen
|
be04eef270
|
allow choice of digest algorithm in certificate generation
|
2009-08-28 09:08:03 +02:00 |
|
|
Martin Willi
|
472cb4ce77
|
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
|
2009-08-27 17:37:42 +02:00 |
|