Commit Graph

Select branches

Hide Pull Requests

main

Mono Color

• 14cc5b845e pki: Mention --index in description Tobias Brunner 2023-11-15 15:16:07 +01:00
• 0dbb6867d8 NEWS: Add news for 5.9.12 Tobias Brunner 2023-11-15 14:05:09 +01:00
• 724e64cac4 Move ocsp_responder_t interface as it's not a certificate Tobias Brunner 2023-11-14 10:35:47 +01:00
• 14bd0bc743 Fixed some typos, courtesy of codespell Tobias Brunner 2023-11-14 10:11:16 +01:00
• 02a4c8cfa9 Version bump to 5.9.12rc1 Andreas Steffen 2023-11-14 08:12:00 +01:00
• 6941dcb17a x509: Fix regression introduced by commit a22147a Andreas Steffen 2023-11-14 08:00:27 +01:00
• a1224b6c80 Merge branch 'ocsp-responder-index' Tobias Brunner 2023-11-13 12:51:47 +01:00
• 801c6c32e5 testing: Use a single OCSP responder for ikev2-multi-ca/ocsp-signers scenario Tobias Brunner 2023-11-07 11:21:14 +01:00
• c10a13589e testing: Use pki --ocsp as OCSP responder Tobias Brunner 2023-10-31 09:28:33 +01:00
• 5764e1e506 pki: Pre-process common arguments Tobias Brunner 2023-10-31 09:17:05 +01:00
• 95c7d49954 pki: Add option to load certificate status information from index.txt Tobias Brunner 2023-10-30 18:12:12 +01:00
• f26ca67d8c pki: Add index.txt-based OCSP responder Tobias Brunner 2023-10-30 18:11:53 +01:00
• 1e8a72e7a0 chunk: Add helper to hash chunks via pointer Tobias Brunner 2023-10-30 17:57:23 +01:00
• 3e42b2f5cb pki: Drop legacy registration for OCSP responders Tobias Brunner 2023-10-30 17:50:18 +01:00
• efac611566 openxpki: Register as OCSP responder Tobias Brunner 2023-10-30 17:49:34 +01:00
• 515cecfe3e pki: Use OCSP responder manager for --ocsp --respond Tobias Brunner 2023-10-30 17:47:34 +01:00
• dab7c893a6 library: Add manager for OCSP responders Tobias Brunner 2023-10-30 17:34:51 +01:00
• 3197523bd5 Merge branch 'ocsp-responder' Tobias Brunner 2023-11-13 12:42:00 +01:00
• 821d7784a3 man: Extended pki man page and added pki --ocsp man page Andreas Steffen 2023-10-19 19:16:05 +02:00
• a0c9f9b842 pki: Added ocsp command Andreas Steffen 2023-10-13 21:25:19 +02:00
• ec325b4c09 pki: Added ocsp-req and ocsp-rsp types to pki --print Andreas Steffen 2023-07-03 12:42:09 +02:00
• a0f672d3d1 unit-tests: Update test_serial_gen suite Andreas Steffen 2023-06-15 16:39:25 +02:00
• 00ab8d62c0 x509: Support generation of OCSP responses Andreas Steffen 2023-06-15 15:47:19 +02:00
• aa0fe149d6 certificates: Added ocsp_single_response object Andreas Steffen 2023-06-15 15:42:42 +02:00
• 199c7083e1 openxpki: OCSP responder plugin accessing OpenXPKI Andreas Steffen 2023-06-15 16:24:34 +02:00
• 24d45de633 crl-reason: Fixed typo Andreas Steffen 2023-06-08 20:38:24 +02:00
• d72d0c0dfa utils: Added chunk_to_dec() function Andreas Steffen 2023-06-03 22:32:19 +02:00
• 9381559754 x509: Support parsing of OCSP requests Andreas Steffen 2023-06-15 16:37:45 +02:00
• 09e2a9ff50 pki --pkcs7: Set default to res = 1 Andreas Steffen 2023-06-02 09:06:13 +02:00
• 3cb8434367 kernel-netlink: Don't add replay state twice when updating SAs Tobias Brunner 2023-11-07 17:39:51 +01:00
• b345eb3051 Merge branch 'uri-san' Tobias Brunner 2023-11-13 12:34:32 +01:00
• 9c2ca27b62 identification: Support explicit uri: prefix for SANs of type uniformResourceIdentifier Tobias Brunner 2023-11-09 12:43:44 +01:00
• 500cacf6d8 x509: Add support to encode SANs of type uniformResourceIdentifier Tobias Brunner 2023-11-09 12:42:54 +01:00
• a22147a1b2 x509: Use issuer certificate's subjectKeyIdentifier if available Tobias Brunner 2023-11-06 18:39:11 +01:00
• 1a1dcf93a5 Merge branch 'pkcs12-no-pw' Tobias Brunner 2023-11-13 12:27:31 +01:00
• 8581a19dd7 charon-cmd: Add support for key types other than RSA Tobias Brunner 2023-10-18 17:29:25 +02:00
• 799511d90f pkcs12: Add support for PKCS#12 containers with empty or no password Tobias Brunner 2023-10-18 17:22:08 +02:00
• bdd8f14354 pkcs7: Add supported for unprotected PKCS#7 encrypted-data Tobias Brunner 2023-10-18 17:18:49 +02:00
• dc704cf206 pkcs8: Add support for unprotected PKCS#8 containers Tobias Brunner 2023-10-18 17:15:44 +02:00
• ad804fa036 pkcs12: Treat empty string and no password differently Tobias Brunner 2023-10-18 17:11:51 +02:00
• 7bb6aed5ab openssl: Add support for unprotected PKCS#12 containers Tobias Brunner 2023-10-18 17:01:52 +02:00
• bae841ea04 Merge branch 'x509-ipaddress-constraints' Tobias Brunner 2023-11-13 12:23:43 +01:00
• 1589f2d9ae constraints: Add support for IP address nameConstraints Tobias Brunner 2023-10-18 18:32:48 +02:00
• 1c3096fe50 openssl: Add support for IP address nameConstraints Tobias Brunner 2023-10-18 18:27:07 +02:00
• ede96fe3db x509: Add support for IP address nameConstraints Tobias Brunner 2023-10-18 18:25:14 +02:00
• f781b9d326 openssl: Add support for nameConstraints X.509 extension Tobias Brunner 2023-10-17 10:21:28 +02:00
• ed2d548fee Merge branch 'reqid-refcount' Tobias Brunner 2023-11-13 12:02:25 +01:00
• 00d054aae5 ikev2: Correctly maintain allocated reqid during make-before-break reauth Tobias Brunner 2023-10-02 16:24:01 +02:00
• 04bfe83f71 trap-manager: Maintain allocated reqids when handling acquires Tobias Brunner 2023-10-02 16:17:33 +02:00
• f9a9188a36 quick-delete: Correctly maintain allocated reqid when recreating CHILD_SA Tobias Brunner 2023-10-02 16:10:40 +02:00
• c923022733 child-delete: Correctly maintain allocated reqid when recreating CHILD_SA Tobias Brunner 2023-10-02 16:08:40 +02:00
• c2a4c8e38a ike-sa: Correctly maintain allocated reqid when recreating CHILD_SA Tobias Brunner 2023-10-02 16:21:28 +02:00
• f2bc526dbb ikev1: Only set reqid on rekeyed CHILD_SA if it was allocated dynamically Tobias Brunner 2023-10-02 16:06:48 +02:00
• bc39a3aecb child-rekey: Only set reqid on new CHILD_SA if it was allocated dynamically Tobias Brunner 2023-10-02 16:02:08 +02:00
• 4ea739baf4 quick-mode: Maintain reference to reqid while CHILD_SA is established Tobias Brunner 2023-10-02 16:20:01 +02:00
• 4bfd93b8db child-create: Maintain reference to reqid while CHILD_SA is established Tobias Brunner 2023-10-02 16:00:07 +02:00
• ff269f7f1f child-sa: Add method that returns a reference to an allocated reqid Tobias Brunner 2023-10-02 15:08:49 +02:00
• 13771206d4 child-sa: Keep a reference to the previous reqid Tobias Brunner 2023-10-02 15:47:02 +02:00
• e623f5792b kernel-interface: Add method to increase refcount for allocated reqid Tobias Brunner 2023-10-02 14:58:50 +02:00
• 02180ae2ff kernel-interface: Remove unnecessary parameters for release_reqid() Tobias Brunner 2023-10-02 14:08:56 +02:00
• 90cf0078e1 kernel-interface: Use reqid as sole key in hash table Tobias Brunner 2023-10-02 13:59:23 +02:00
• 04c17ab56a credential-manager: Add option to reject trusted end-entity certificates Tobias Brunner 2023-05-31 14:39:05 +02:00
• 28ccdff692 cert-enroll: Preventing some errors that might occur Andreas Steffen 2023-11-12 10:22:38 +01:00
• f328ef0e04 cert-enroll: Install TLS client/server credentials Andreas Steffen 2023-11-06 19:33:25 +01:00
• b5e4bf4b6c tls-server: Also change DH group when selecting a different EC curve Tobias Brunner 2023-10-05 10:27:18 +02:00
• 595fa077b6 ike-sa: Fix handling of redirects during IKE_AUTH Tobias Brunner 2023-08-31 13:45:10 +02:00
• 46c012b664 github: Use latest Sonar scanner Tobias Brunner 2023-10-31 12:22:35 +01:00
• eda91911fa Use wolfSSL 5.6.4 for tests Tobias Brunner 2023-10-31 09:41:49 +01:00
• 51872a0a0c Version bump to 5.9.12dr2 Andreas Steffen 2023-10-30 22:42:55 +01:00
• d6bfdf2b2b cert-enroll: Pack all source files into EXTRA_DIST Andreas Steffen 2023-10-26 15:15:37 +02:00
• b576024387 Merge branch 'reject-explicit-ecdsa' Tobias Brunner 2023-10-13 09:10:56 +02:00
• bb14a28671 unit-tests: Add a test case for explicit ECDSA parameters Tobias Brunner 2023-07-17 12:32:59 +02:00
• 578b561a22 Use Botan 3.2.0 for tests Tobias Brunner 2023-08-31 14:46:51 +02:00
• 0b989c7b20 botan: Reject EC keys with explicitly encoded parameters Tobias Brunner 2023-08-31 14:27:09 +02:00
• 2bccdefc2c openssl: Reject EC keys with explicitly encoded parameters Tobias Brunner 2023-07-17 12:01:06 +02:00
• a69184fb9d wolfssl: Reject EC keys with explicitly encoded parameters Tobias Brunner 2023-07-17 11:43:47 +02:00
• 6f0cd19fd6 cert-enroll: Fixed path in cert-install-openxpki Andreas Steffen 2023-10-12 08:14:38 +02:00
• b56c264041 cirrus: Use FreeBSD 12.4 Tobias Brunner 2023-10-09 14:57:17 +02:00
• 7e2e463285 cirrus: Use FreeBSD 13.2 Tobias Brunner 2023-10-09 14:52:25 +02:00
• 7dfb88ead2 Version bump to 5.9.12dr2 Andreas Steffen 2023-10-04 07:59:15 +02:00
• cbfc12b330 cert-enroll: certificate checking and enrollment Andreas Steffen 2023-09-01 12:33:09 +02:00
• 80e27fe9fd ike-sa: Destroy CHILD_SAs in order Tobias Brunner 2023-09-07 17:33:00 +02:00
• 190d8cbe19 libipsec: Also install routes without preferred source to forward traffic Boi Sletterink 2023-06-29 17:39:37 +02:00
• cdc34ddea2 configure: Fix in6_pktinfo auto detection Antony Antony 2023-09-04 11:18:23 +02:00
• 0bff5c98bc vici: Fix connecting to socket in Python bindings on Windows Tobias Brunner 2023-08-31 11:39:52 +02:00
• e2bba1e2cf android: New release after updating target SDK to 33 Tobias Brunner 2023-08-29 18:09:33 +02:00
• dfbafffc45 android: Increase compile-/targetSdkVersion to 33 (Android 13) Tobias Brunner 2023-08-29 17:57:29 +02:00
• ddf84c165d android: Request permission to display notifications on Android 13 Tobias Brunner 2023-08-29 17:45:32 +02:00
• 3839bcfe87 android: Compile OpenSSL with hardware acceleration Tobias Brunner 2023-08-29 17:41:46 +02:00
• 6d87a86510 android: Use new sockets to determine source IP Tobias Brunner 2023-05-17 10:17:14 +02:00
• 5005c2e4ab testing: Use pip from venv to download dependencies Tobias Brunner 2023-08-28 17:49:26 +02:00
• a619356b5f kernel-pfroute: Maintain virtual flag when repopulating interface addrs Tobias Brunner 2023-07-25 10:21:40 +02:00
• 006839b06a Merge branch 'netlink-buf' Tobias Brunner 2023-07-26 15:15:24 +02:00
• ba9228ab00 watcher: Change handling of POLLERR and remove WATCHER_EXCEPT Tobias Brunner 2023-07-21 10:01:41 +02:00
• 5971fc36c9 kernel-netlink: Also set the receive buffer size on event sockets Tobias Brunner 2023-07-21 09:39:09 +02:00
• 714c939018 kernel-netlink: Increase the default receive buffer size Tobias Brunner 2023-07-21 09:34:22 +02:00
• 0b47357091 ike: Fix untracking IKE_SA_INITs with non-zero MIDs and SPIs as half-open SAs Tobias Brunner 2023-07-05 10:41:11 +02:00
• 849c2c9707 child-rekey: Correctly encode protocol/SPI in CHILD_SA_NOT_FOUND notify Tobias Brunner 2023-06-21 15:57:38 +02:00
• 10a3c44a41 notify-payload: Add methods to simplify encoding and retrieving IKE SPIs Tobias Brunner 2023-03-16 15:42:11 +01:00
• e0e99c1dd3 sha3: Make sure to wipe the internal Keccak state Tobias Brunner 2023-07-11 11:59:46 +02:00