| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| ... | |
| * | Added support for parsing NameConstraints in x509 plugin | Martin Willi | 2011-01-05 | 1 | -0/+59 |
| * | Added name constraint enumerator to x509 interface | Martin Willi | 2011-01-05 | 3 | -1/+38 |
| * | Migrated x509_cert_t to INIT/METHOD macros | Martin Willi | 2011-01-05 | 1 | -144/+88 |
| * | Moved X509 pathlen constraint checking to constraints plugin | Martin Willi | 2011-01-05 | 2 | -17/+29 |
| * | Added plugin stub for advanced X509 constraint checking | Martin Willi | 2011-01-05 | 7 | -0/+242 |
| * | Added a hook to reset ESP sequence numbers | Martin Willi | 2011-01-05 | 2 | -1/+159 |
| * | Accept a suffix to differentiate x509, crl, ecdsa and rsa files | Martin Willi | 2011-01-05 | 1 | -7/+7 |
| * | Use strncaseeq instead of strncasecmp | Martin Willi | 2011-01-05 | 5 | -5/+5 |
| * | Added a strncaseeq variant to the string comparison macros | Martin Willi | 2011-01-05 | 1 | -1/+6 |
| * | Added tfc_padding option, changes signature to master changes | Martin Willi | 2011-01-05 | 1 | -1/+5 |
| * | CRL/OCSP validation stores trustchain information in auth_cfg | Martin Willi | 2011-01-05 | 1 | -17/+31 |
| * | Key strength checking stores all key sizes in auth_cfg, verifies all in compl... | Martin Willi | 2011-01-05 | 2 | -75/+84 |
| * | Install "ipsec" script with tools or conftest | Martin Willi | 2011-01-05 | 2 | -1/+6 |
| * | Use subject, not issuer, of CRL issuing certificate | Martin Willi | 2011-01-05 | 1 | -1/+1 |
| * | CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation | Martin Willi | 2011-01-05 | 2 | -3/+3 |
| * | Parse and encode crlSign keyUsage flag in x509 plugin | Martin Willi | 2011-01-05 | 1 | -10/+71 |
| * | pki tool shows and builds crlSign keyUsage | Martin Willi | 2011-01-05 | 3 | -2/+14 |
| * | Added a flag for X509 CRLSign keyUsage | Martin Willi | 2011-01-05 | 1 | -0/+2 |
| * | Remove x509_flag_names, flags do not work with ENUM() | Martin Willi | 2011-01-05 | 3 | -35/+1 |
| * | Use certificate CRLIssuer information to look up cacched CRLs or CDPs | Martin Willi | 2011-01-05 | 1 | -50/+88 |
| * | Added --crlissuer option to pki --issue | Martin Willi | 2011-01-05 | 2 | -19/+26 |
| * | Added support for CRL Issuers to x509 and OpenSSL plugins | Martin Willi | 2011-01-05 | 8 | -70/+269 |
| * | Generate payload to rebuild_auth, works with injected unknown payloads | Martin Willi | 2011-01-05 | 1 | -13/+17 |
| * | Move rebuild_auth functionality to a standalone hook | Martin Willi | 2011-01-05 | 3 | -215/+259 |
| * | Added key strength constraints support to conftest | Martin Willi | 2011-01-05 | 1 | -0/+11 |
| * | Added key strength constraints for RSA or ECDSA trustchains | Martin Willi | 2011-01-05 | 3 | -0/+97 |
| * | Implemented hook to log traffic selectors | Martin Willi | 2011-01-05 | 2 | -1/+88 |
| * | The set_reserved() hook rebuilds AUTH if it mangles ID payload fields | Martin Willi | 2011-01-05 | 1 | -33/+214 |
| * | Include the used reserved bytes from ID payloads in AUTH calculation | Martin Willi | 2011-01-05 | 12 | -40/+132 |
| * | Migrated psk/pubkey_authenticators to INIT/METHOD macros | Martin Willi | 2011-01-05 | 4 | -84/+83 |
| * | Extended set_reserved hook to mangle sa_payload substructures | Martin Willi | 2011-01-05 | 1 | -42/+121 |
| * | Added substructure enumerators to sa_payload, proposal_substructure | Martin Willi | 2011-01-05 | 4 | -0/+28 |
| * | Moved check if packet already encoded to ike_sa, avoids message() hook invoca... | Martin Willi | 2011-01-05 | 3 | -17/+16 |
| * | The set_ike_version hook supports version flag mangling | Martin Willi | 2011-01-05 | 1 | -0/+11 |
| * | Added a message method to set the "higher version supported" flag | Martin Willi | 2011-01-05 | 4 | -0/+33 |
| * | Implemented hook to toggle initiator flag in IKE header | Martin Willi | 2011-01-05 | 2 | -1/+88 |
| * | Implemented a hook to set reserved bits | Martin Willi | 2011-01-05 | 2 | -1/+167 |
| * | Added reserved bit mangling wrapper functions to message | Martin Willi | 2011-01-05 | 2 | -1/+64 |
| * | Use payload_get_field() to look up payload fields | Martin Willi | 2011-01-05 | 1 | -10/+4 |
| * | Implemented a generic payload field lookup function | Martin Willi | 2011-01-05 | 2 | -0/+30 |
| * | Reserved field get parsed/generated like any other bit/byte field | Martin Willi | 2011-01-05 | 2 | -81/+12 |
| * | Added member fields for reserved bits and bytes in all payloads | Martin Willi | 2011-01-05 | 19 | -141/+272 |
| * | Migrated vendor_id_payload to INIT/METHOD macros | Martin Willi | 2011-01-05 | 2 | -69/+56 |
| * | Migrated ts_payload to INIT/METHOD macros | Martin Willi | 2011-01-05 | 2 | -185/+110 |
| * | Use enumerator instead of deprecated iterator | Martin Willi | 2011-01-05 | 1 | -13/+9 |
| * | Migrated transform_substructure to INIT/METHOD macros | Martin Willi | 2011-01-05 | 2 | -254/+101 |
| * | Removed obsolete clone mehtod from proposal_substructure | Martin Willi | 2011-01-05 | 2 | -37/+0 |
| * | Migrated transform_attribute to INIT/METHOD macros | Martin Willi | 2011-01-05 | 1 | -144/+77 |
| * | Migrated traffic_selector_substructre to INIT/METHOD macros | Martin Willi | 2011-01-05 | 1 | -97/+67 |
| * | Migrated notify_payload to INIT/METHOD macros | Martin Willi | 2011-01-05 | 1 | -121/+80 |
