tteras/strongswan/src/libcharon/plugins/dnscert, branch master tteras' strongSwan tree Migrate all enumerators to venumerate() interface change 2017-05-26T11:56:44+00:00 Tobias Brunner tobias@strongswan.org 2017-05-11T07:17:02+00:00 95a63bf2813cd6ecad912237688526bbcc3481ee 






dnscert: Properly free enumerated certificates
2016-09-20T13:36:15+00:00

Tobias Brunner
tobias@strongswan.org

2016-09-13T12:13:47+00:00

149b7de35c870434704a087135004a60cf3e771f












Use standard unsigned integer types
2016-03-24T17:52:48+00:00

Andreas Steffen
andreas.steffen@strongswan.org

2016-03-22T12:22:01+00:00

b12c53ce77beb8e04b044d0c0dc9249ddba72200












libhydra: Remove empty unused library
2016-03-03T16:36:11+00:00

Tobias Brunner
tobias@strongswan.org

2016-02-12T15:35:54+00:00

28649f6d91971e0fe50078aec2937010e8c61cd8












plugins: Don't link with -rdynamic on Windows
2014-06-04T13:53:02+00:00

Martin Willi
martin@revosec.ch

2013-10-25T14:03:47+00:00

4163421f918d830585bfdccde0973d8801aad258












libcharon: Use lib->ns instead of charon->name
2014-02-12T13:34:32+00:00

Tobias Brunner
tobias@strongswan.org

2014-01-22T14:18:58+00:00

d223fe807a0a7fe6f358420256d11d407f7c9f07












Doxygen fixes
2013-10-15T09:25:55+00:00

Tobias Brunner
tobias@strongswan.org

2013-10-15T09:16:09+00:00

dd438ee22c79f48d51251e53c0cffff48b02b5bc












dnscert: Add DNS CERT support for pubkey authentication
2013-10-11T13:45:42+00:00

Ruslan N. Marchenko
me@ruff.mobi

2013-08-30T15:51:12+00:00

b638c131de07dc78de0877de41ad02ce32e6624c

Add DNSSEC protected CERT RR delivered certificate authentication.
The new dnscert plugin is based on the ipseckey plugin and relies on the
existing PEM decoder as well as x509 and PGP parsers.  As such the plugin
expects PEM encoded PKIX(x509) or PGP(GPG) certificate payloads.

The plugin is targeted to improve interoperability with Racoon, which
supports this type of authentication, ignoring in-stream certificates
and using only DNS provided certificates for FQDN IDs.





Add DNSSEC protected CERT RR delivered certificate authentication.
The new dnscert plugin is based on the ipseckey plugin and relies on the
existing PEM decoder as well as x509 and PGP parsers.  As such the plugin
expects PEM encoded PKIX(x509) or PGP(GPG) certificate payloads.

The plugin is targeted to improve interoperability with Racoon, which
supports this type of authentication, ignoring in-stream certificates
and using only DNS provided certificates for FQDN IDs.