 Martin Willi
|
06a8df11d9
|
pki tool can issue/self-sign certificates with OCSP URIs
|
2009-09-11 17:17:56 +02:00 |
|
|
Martin Willi
|
6dc57cd02e
|
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
|
2009-09-11 17:16:22 +02:00 |
|
|
Martin Willi
|
6d24a5d746
|
added lost session cookie buffer
|
2009-09-11 16:23:15 +02:00 |
|
|
Martin Willi
|
3b878dae7e
|
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro
|
2009-09-11 15:39:35 +02:00 |
|
|
Martin Willi
|
3a7bd9bd49
|
pki tool can issue certificates with CRL distribution points
|
2009-09-11 15:36:22 +02:00 |
|
|
Martin Willi
|
881b259943
|
x509 plugin supports encoding of CRL distribution points
|
2009-09-11 15:36:22 +02:00 |
|
|
Martin Willi
|
31f87c29c7
|
double check session id has been initialized
|
2009-09-10 20:51:43 +02:00 |
|
|
Martin Willi
|
356b2b2780
|
pass NULL to library_init() to load settings from default file
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
5b03a350fc
|
use NULL to load plugins from default plugin directory
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
6de28173f0
|
remove obsolete @brief doxygen tags
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
6d8e913ab6
|
Use wrapped mutex_t/condvar_t instead of pthread_mutex/cond_t
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
48a606b5ff
|
libfast uses enumerator instead of deprecated iterator
|
2009-09-10 18:52:42 +02:00 |
|
|
Martin Willi
|
d73f453c29
|
Updated x509 plugin to the new builder API
|
2009-09-10 16:20:21 +02:00 |
|
|
Martin Willi
|
91ef5c66ab
|
Updated pubkey plugin to the new builder API
|
2009-09-10 16:20:20 +02:00 |
|
|
Martin Willi
|
872176d350
|
Updated pkcs1 plugin to the new builder API
|
2009-09-10 16:20:20 +02:00 |
|
|
Martin Willi
|
43224e9527
|
Updated pgp plugin to the new builder API
|
2009-09-10 16:20:20 +02:00 |
|
|
Martin Willi
|
de408caf93
|
Updated pem plugin to the new builder API
|
2009-09-10 16:20:19 +02:00 |
|
|
Martin Willi
|
30c06407c6
|
Updated openssl plugin to the new builder API
|
2009-09-10 16:20:19 +02:00 |
|
|
Martin Willi
|
1086d00e41
|
Updated gmp plugin to the new builder API
|
2009-09-10 16:20:19 +02:00 |
|
|
Martin Willi
|
a94acb58a2
|
Updated gcrypt plugin to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
26135ed9bb
|
Updated dnskey plugin to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
0a139eeac9
|
Updated agent plugin to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
d3674e25a7
|
Updated pluto to the new builder API
|
2009-09-10 16:20:18 +02:00 |
|
|
Martin Willi
|
f678f5c77e
|
Replaced builder_t objects by simple builder_function_t functions
|
2009-09-10 16:20:17 +02:00 |
|
|
Martin Willi
|
3ce9438b60
|
Use dynamic registration/usage invocation of command types
|
2009-09-10 16:18:30 +02:00 |
|
|
Martin Willi
|
6be68cc1c7
|
splitted PKI tool to a file per command
|
2009-09-10 12:31:40 +02:00 |
|
|
Martin Willi
|
e5e6c6f43c
|
use generic option parsing with usage information
|
2009-09-10 11:18:41 +02:00 |
|
|
Martin Willi
|
63ee88745a
|
fixed memleak
|
2009-09-09 17:16:00 +02:00 |
|
|
Martin Willi
|
1080a51fd2
|
evaluate arguments of chunk_clone/clonea/alloc/alloca only once
|
2009-09-09 16:24:21 +02:00 |
|
|
Martin Willi
|
b5d31b3e56
|
pki tool supports subjectAltNames in certificates
|
2009-09-08 13:27:35 +02:00 |
|
|
Martin Willi
|
7631aac20c
|
x509 certificates support encoding of email, DNS and IP subjectAltNames
|
2009-09-08 13:17:41 +02:00 |
|
|
Martin Willi
|
d7be290643
|
non self-signed x509 certificates are encoded with authorityKeyIdentifier
|
2009-09-08 11:26:05 +02:00 |
|
|
Martin Willi
|
5c92524449
|
x509 CA certificates are encoded with a subjectKeyIdentifier
|
2009-09-08 11:02:49 +02:00 |
|
|
Martin Willi
|
8871e59c11
|
pki tool --issue/--verify operations require a CA with CA basicConstraint
|
2009-09-08 10:44:08 +02:00 |
|
|
Martin Willi
|
e4a4589606
|
pki tool can set CA basicConstraint on --self/--issued certificates
|
2009-09-08 10:39:04 +02:00 |
|
|
Martin Willi
|
8ab900dee9
|
x509 plugin supports encoding of CA basicConstraint extension
|
2009-09-08 10:38:02 +02:00 |
|
|
Martin Willi
|
58f34613e0
|
pki tool can issue certificates
|
2009-09-07 16:04:30 +02:00 |
|
|
Martin Willi
|
faa4bd49fb
|
use sysconfdir, no need for an additional confdir variable
|
2009-09-07 15:10:30 +02:00 |
|
|
Martin Willi
|
c0e56a663e
|
only add generated m4 files to include path
|
2009-09-07 15:10:01 +02:00 |
|
|
Martin Willi
|
b7b5653386
|
Use macros to define --with options
|
2009-09-07 15:00:45 +02:00 |
|
|
Martin Willi
|
b803bc82f4
|
Use macros to define --enable/--disable options
|
2009-09-07 15:00:45 +02:00 |
|
|
Martin Willi
|
e5efb5a03b
|
Added a .gitignore for generated m4 scripts
|
2009-09-07 15:00:44 +02:00 |
|
|
Martin Willi
|
e455ae1343
|
use m4/ autoconf subdirectory
|
2009-09-07 15:00:32 +02:00 |
|
|
Martin Willi
|
8b3b4a244e
|
Removed trailing whitespaces in configure.in/Makefile.am
|
2009-09-07 11:48:03 +02:00 |
|
|
Martin Willi
|
7b3814f75d
|
remove spaces before tabs at the beginning of lines (^( )+\t)
|
2009-09-04 15:02:11 +02:00 |
|
|
Martin Willi
|
b9b8a98f47
|
remove spaces within tabs (\t( )+\t)
|
2009-09-04 15:00:19 +02:00 |
|
|
Martin Willi
|
323f9f990f
|
replaces four spaces by tabs, where appropriate
|
2009-09-04 14:50:23 +02:00 |
|
|
Martin Willi
|
7daf5226b7
|
removed trailing spaces ([[:space:]]+$)
|
2009-09-04 13:46:09 +02:00 |
|
|
Martin Willi
|
dd2b6f3073
|
fixed memleak in rekey collissions
|
2009-09-03 18:09:29 +02:00 |
|
|
Martin Willi
|
72e2faf291
|
Convert empty CREATE_CHILD_SA exchange to an INFORMATIONAL
|
2009-09-03 17:32:41 +02:00 |
|
|
Martin Willi
|
9beb83868f
|
Use get_notify() to look up single notifies
|
2009-09-03 17:32:01 +02:00 |
|
|
Martin Willi
|
3e15f99189
|
accept octet strings in is_asn1() check
|
2009-09-03 15:35:05 +02:00 |
|
|
Martin Willi
|
d176994235
|
Use recursive source address lookup if we get a gateway only
|
2009-09-03 14:46:39 +02:00 |
|
|
Martin Willi
|
12a230ddb4
|
Complain about rw(un)lock errors
|
2009-09-03 14:46:28 +02:00 |
|
|
Martin Willi
|
8fb4edc4ff
|
handle plugin loading failures
|
2009-09-01 16:20:45 +02:00 |
|
|
Martin Willi
|
d6a45127dc
|
plugins marked with a '!' are handled as critical: cancel if loading fails
|
2009-09-01 16:08:28 +02:00 |
|
|
Martin Willi
|
9412bbfa7c
|
use subjectPublicKeyInfo hash for CA certificate lookup
|
2009-09-01 14:06:44 +02:00 |
|
|
Martin Willi
|
8f68b72424
|
sql/rw-rsa and sql/rw-rsa-keyid scenarios require the pubkey plugin
|
2009-09-01 11:34:09 +02:00 |
|
|
Martin Willi
|
ad31f98a74
|
fixed certificate_t enum names
|
2009-09-01 11:28:05 +02:00 |
|
|
Martin Willi
|
6180a55852
|
use time_monotonic() instead of time() for statistics and time difference calculations
|
2009-08-31 18:00:28 +02:00 |
|
|
Martin Willi
|
de5784452b
|
use time_monotonic() instead of gettimeofday() for time difference calculations
|
2009-08-31 15:25:03 +02:00 |
|
|
Martin Willi
|
3d5818ec38
|
use monotonic time source in convar->timed_wait, and in the scheduler using it
|
2009-08-31 15:13:48 +02:00 |
|
|
Martin Willi
|
3f310c0d1f
|
implemented a monotonic timestamping function, unaffected from system time changes
|
2009-08-31 15:03:35 +02:00 |
|
|
Martin Willi
|
1d39663f7a
|
do not depend on gcrypt autoconf macros
|
2009-08-31 13:14:54 +02:00 |
|
|
Martin Willi
|
8706a151ff
|
added ECGDSA specific OIDs
|
2009-08-31 10:34:00 +02:00 |
|
|
Martin Willi
|
8365f7cd81
|
fixed crash in crl listing
|
2009-08-31 10:21:38 +02:00 |
|
|
Martin Willi
|
bf3b8c90d0
|
added workaround to parse PEM encoded PGP key with KEY_RSA
|
2009-08-28 17:25:07 +02:00 |
|
|
Martin Willi
|
4593ef51fd
|
implemented PGP Secret-Key Packet parsing
|
2009-08-28 17:23:58 +02:00 |
|
|
Martin Willi
|
caf1af1d9f
|
fixed memleak
|
2009-08-28 16:16:39 +02:00 |
|
|
Martin Willi
|
10b2898d3c
|
verify that the ECDSA auth signature was done with the correct curve
|
2009-08-27 17:58:02 +02:00 |
|
|
Martin Willi
|
472cb4ce77
|
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures
|
2009-08-27 17:37:42 +02:00 |
|
|
Martin Willi
|
cec37b643a
|
fixed return value
|
2009-08-27 15:28:45 +02:00 |
|
|
Martin Willi
|
7ef310f5b4
|
do not append a NULL paramter to ECDSA algorithmIdentifiers
|
2009-08-27 15:28:21 +02:00 |
|
|
Martin Willi
|
9436b31c94
|
PKI tool supports certificate verification
|
2009-08-27 14:43:40 +02:00 |
|
|
Martin Willi
|
ed75a4dd69
|
do not flush cached encodings, keys are responsible for it
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
85fd609ed6
|
whitelist openssl ecdsa_check function
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
5e97fa9900
|
PKI tool supports generation of self-signed certificates
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
8b10355c84
|
support generation of EC certificates
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
82749537e2
|
added support for SIGN_ECDSA_WITH_SHA1 signature scheme in openssl
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
eb73685dac
|
create algorithmIdentifier dynamically from OID database
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
c03b095ebe
|
use subjectPublicKeyInfo encoding type directly
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
09fe3c7e4c
|
pkcs1 encoder supports subjectPublicKeyInfo encoding
|
2009-08-27 13:59:30 +02:00 |
|
|
Martin Willi
|
d5dd43e777
|
implemented fingerprinting support for PKI tool
|
2009-08-27 10:41:07 +02:00 |
|
|
Martin Willi
|
1a8ef8aabc
|
fixed memleak in openssl fingerprinting
|
2009-08-27 10:40:49 +02:00 |
|
|
Martin Willi
|
b12c6d163d
|
do openssl fingerprinting/encoding directly, openssl provides all functions
|
2009-08-27 09:58:38 +02:00 |
|
|
Martin Willi
|
2ee8cd04bd
|
key encoding gained a cache() method, allows caching of externally created encodings
|
2009-08-27 09:57:49 +02:00 |
|
|
Martin Willi
|
083142c4a0
|
encoding public EC keys is not really possible without subjectPublicKeyInfo
|
2009-08-26 16:15:38 +02:00 |
|
|
Martin Willi
|
6a8791cd1f
|
complain about build errors in non-recursive cases only
|
2009-08-26 14:44:05 +02:00 |
|
|
Martin Willi
|
d16fd64d39
|
openac (and tools) do not depend on gmp anymore
|
2009-08-26 14:08:20 +02:00 |
|
|
Martin Willi
|
500f515a64
|
moved chunk_increment() function to libstrongswan
|
2009-08-26 14:07:26 +02:00 |
|
|
Martin Willi
|
d4df33f255
|
pki tool supports public key extraction from private key, certificates
|
2009-08-26 13:05:17 +02:00 |
|
|
Martin Willi
|
df5c60bc5d
|
added a BUILD_FROM_FD option, supporting credential parsing from stdin
|
2009-08-26 13:03:23 +02:00 |
|
|
Martin Willi
|
7c577c8ea2
|
started implementation of a PKI tool, currently supporting RSA|ECDSA key generation
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
08ed551ce0
|
implemented openssl EC key generation
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
a0b850450f
|
fixed openssl RSA private key encoding
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
16db1207cf
|
keyids in SQL use ID_KEY_ID type with subjectPublicKey SHA1 hash
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
41f57038e4
|
tests load pem/pkcs1 plugins, pubkey plugin not needed anymore
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
0df451bc07
|
use ./configured plugins in keyid scripts
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
500aa2607f
|
accept PEM encoded keys in keyid scripts
|
2009-08-26 11:23:55 +02:00 |
|
|
Martin Willi
|
94dde8a0ab
|
migrated scripts to new fingerprinting API
|
2009-08-26 11:23:55 +02:00 |
|