denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
16,197 Commits 1 Branch 0 Tags
fb63012e0cad81aa7a4289be6d6f1fea8bd2811f
Commit Graph
303 Commits
Author SHA1 Message Date
Tobias Brunner 1e3d66f8d3 Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_ENGINE.
 2010-06-22 11:55:34 +02:00
Tobias Brunner 5a367e99c3 Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. 
That is, enable compilation if OpenSSL was configured with
OPENSSL_NO_EC.
 2010-06-22 11:55:33 +02:00
Martin Willi f00a101590 Unwrap subjectKeyIdentifier from OCTET_STRING 2010-05-26 16:09:50 +02:00
Martin Willi aab861608a Removed is_newer() from certificate_t, obsoleting all implementations 2010-05-21 16:25:51 +02:00
Martin Willi 6d7eed9a37 Implemented X.509 CRL reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 5728c6aa7e Implemented X.509 certificate reading using OpenSSL 2010-05-21 16:25:51 +02:00
Martin Willi 9806381322 Fixed doxygen group 2010-05-20 17:37:18 +02:00
Martin Willi 026b0058d5 Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin 2010-05-05 13:49:56 +02:00
Martin Willi 4590260b2d Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten 2010-04-19 14:41:20 +02:00
Tobias Brunner 9f4b02e31d Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for settings in libstrongswan. 2010-04-10 12:10:04 +02:00
Martin Willi b34b93dbf7 Store DH generator in a chunk, hide non-public data in a private struct 2010-04-08 15:08:35 +02:00
Tobias Brunner 0a4dc78755 Some whitespace fixes. 2010-04-06 12:56:06 +02:00
Tobias Brunner 8b0e09103b Adding DBG_LIB to all calls of libstrongswan's version of DBG*. 2010-04-06 12:47:40 +02:00
Andreas Steffen 29cf15a919 PEM encoding for OpenSSL RSA and EC public and private keys 2010-04-04 23:59:24 +02:00
Tobias Brunner 908d571796 Provide the Diffie Hellman parameters from a central location, so that we do not have to replicate them in every plugin that implements the DH interface. 
The main reason for this change is that Android's libcrypto does not
include the get_rfcX_prime_Y functions by default.  Therefore we would
have had to replicate the primes a third time.
 2010-03-09 17:15:16 +01:00
Tobias Brunner d14203b009 Replaced the deprecated RSA_generate_key with RSA_generate_key_ex. 2010-03-08 15:34:38 +01:00
Martin Willi 40f130dab3 Implemented the PRF_KEYED_SHA1 algorithm in the openssl plugin 2010-03-08 13:16:12 +01:00
Tobias Brunner afb364fff9 Reverting eba28948a5 which was only necessary when cross-compiling the plugins for Android 2.0. 
With the coming monolithic build using Android.mk files this won't be
necessary anymore.
 2010-03-02 12:03:44 +01:00
Tobias Brunner 4e657051f7 Streamlined the source file list formatting in plugin makefiles. 2010-03-02 10:40:50 +01:00
Tobias Brunner 6ec60bb92b Link all enabled libstrongswan plugins into the library, link all enabled charon plugins into libcharon. 2010-03-02 10:38:52 +01:00
Tobias Brunner 9ce567f895 Changed plugin constructors from plugin_create to plugin_name_plugin_create. 2010-03-02 09:10:26 +01:00
Tobias Brunner 6cc13cd9c5 Removing the plugin constructor declarations from the header files. 2010-03-02 09:10:19 +01:00
Tobias Brunner eba28948a5 Link all plugins to libstrongswan. 2010-02-25 13:51:05 +01:00
Tobias Brunner 4a5a5dd290 Using the thread wrapper in charon, libstrongswan and their plugins. 2009-12-23 17:03:41 +01:00
Tobias Brunner eba64cef41 Separated the public interfaces of the threading primitives. 2009-12-23 17:01:53 +01:00
Tobias Brunner 14f7091280 Moved mutex.c to a separate folder in order to cleanly wrap other threading primitives (and utils/mutex.h is now threading.h). 2009-12-23 17:00:58 +01:00
Martin Willi ee3d4ef801 Prefer MODP2048/1536 over ECP Diffie-Hellman groups 2009-11-12 13:10:30 +00:00
Martin Willi 640ed4d5a5 Public/Private keys implement a has_fingerprint() method 2009-09-21 16:47:25 +02:00
Martin Willi 012f62a820 Exponents of a RSA key in openssl are optional (for PGP) 2009-09-15 09:33:00 +02:00
Martin Willi b9fbd66587 Added support to build RSA keys from components in openssl 2009-09-14 14:29:10 +02:00
Martin Willi 30c06407c6 Updated openssl plugin to the new builder API 2009-09-10 16:20:19 +02:00
Martin Willi 7b3814f75d remove spaces before tabs at the beginning of lines (^( )+\t) 2009-09-04 15:02:11 +02:00
Martin Willi 7daf5226b7 removed trailing spaces ([[:space:]]+$) 2009-09-04 13:46:09 +02:00
Andreas Steffen e201f53e93 build_curve_signature() processes hash not data 2009-08-27 20:41:29 +02:00
Andreas Steffen 1dbaec2177 NID_hash and NID_ec_curve were interchanged 2009-08-27 20:28:41 +02:00
Andreas Steffen ac6a0d5038 verify_signature() now processes hash not data 2009-08-27 20:18:22 +02:00
Andreas Steffen c812802482 NID_hash and NID_ec_curver were interchanged 2009-08-27 20:11:49 +02:00
Martin Willi 10b2898d3c verify that the ECDSA auth signature was done with the correct curve 2009-08-27 17:58:02 +02:00
Martin Willi 472cb4ce77 distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures 2009-08-27 17:37:42 +02:00
Martin Willi 82749537e2 added support for SIGN_ECDSA_WITH_SHA1 signature scheme in openssl 2009-08-27 13:59:30 +02:00
Martin Willi 1a8ef8aabc fixed memleak in openssl fingerprinting 2009-08-27 10:40:49 +02:00
Martin Willi b12c6d163d do openssl fingerprinting/encoding directly, openssl provides all functions 2009-08-27 09:58:38 +02:00
Martin Willi 083142c4a0 encoding public EC keys is not really possible without subjectPublicKeyInfo 2009-08-26 16:15:38 +02:00
Martin Willi 08ed551ce0 implemented openssl EC key generation 2009-08-26 11:23:55 +02:00
Martin Willi a0b850450f fixed openssl RSA private key encoding 2009-08-26 11:23:55 +02:00
Martin Willi e35c3e2a03 updated openssl plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Tobias Brunner 3901937d14 OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the enums mutex/condvar/rwlock_type_t. 2009-08-14 13:30:59 +02:00
Andreas Steffen 994b80b513 activated CAMELLIA_CBC cipher in openssl plugin 2009-08-05 22:46:53 +02:00
Andreas Steffen b6f739c13b support of SHA224-based certificate signatures 2009-08-05 22:01:44 +02:00
Andreas Steffen eebecebead make ecp_x_coordinate_only = yes the default 2009-07-06 11:47:38 +02:00