denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
697124975871ab4f1a0579c65bc056fea18dae8c
strongswan-ext/src/libstrongswan/credentials
T
History
Tobias Brunner 6971249758 auth-cfg: Avoid overflow when checking key strength compliance 
The enumerator strictly handles pointers to pointers, so passing a
`u_int` is incorrect on 64-bit platforms.

Fixes: 918e92c4c9 ("Support multiple different public key strength types in constraints")
2026-07-24 08:47:39 +02:00
..
certificates
certificate-printer: Fallback to binary OID printing for policy mappings
2026-07-24 08:47:35 +02:00
containers
Remove support for MD2
2025-09-23 15:59:35 +02:00
keys
signature-params: Only modify passed params if parsing succeeded
2026-07-24 08:47:39 +02:00
sets
cert-cache: Fix race conditions when inserting CRL/OCSP
2026-07-23 10:26:08 +02:00
auth_cfg.c
auth-cfg: Avoid overflow when checking key strength compliance
2026-07-24 08:47:39 +02:00
auth_cfg.h
auth-cfg: Add lower case enum names for auth_rule_t
2025-04-10 08:31:09 +02:00
builder.c
agent: Add option to open socket as specific user
2025-12-10 18:34:19 +01:00
builder.h
agent: Add option to open socket as specific user
2025-12-10 18:34:19 +01:00
cert_validator.h
Add support for IKEv2 OCSP extensions (RFC 4806)
2024-03-13 15:10:50 +01:00
cred_encoding.c
cred-encoding: Avoid potential use after free when caching encodings
2022-09-20 09:53:13 +02:00
cred_encoding.h
bliss: Remove legacy BLISS signatures
2024-11-22 14:05:36 +01:00
credential_factory.c
credential-factory: Enforce an upper limit when creating nested credentials
2026-04-02 08:16:07 +02:00
credential_factory.h
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
credential_manager.c
credential-manager: Check certificate expiry also for trusted self-signed certs
2026-05-22 14:33:28 +02:00
credential_manager.h
Add support for IKEv2 OCSP extensions (RFC 4806)
2024-03-13 15:10:50 +01:00
credential_set.h
Update copyright headers after acquisition by secunet
2022-06-28 10:22:56 +02:00
ocsp_responder.h
Move ocsp_responder_t interface as it's not a certificate
2023-11-14 10:35:47 +01:00
ocsp_responders.c
library: Add manager for OCSP responders
2023-11-13 12:45:54 +01:00
ocsp_responders.h
Move ocsp_responder_t interface as it's not a certificate
2023-11-14 10:35:47 +01:00