| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| ... | |
| * | Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints,... | Martin Willi | 2011-01-05 | 10 | -13/+13 |
| * | Added policyMappings support to pki tool | Martin Willi | 2011-01-05 | 3 | -12/+121 |
| * | Added policyMappings support to x509 plugin | Martin Willi | 2011-01-05 | 5 | -3/+152 |
| * | Added policyMappings OID identifier | Martin Willi | 2011-01-05 | 1 | -1/+1 |
| * | Added certificatePolicy options to pki tool | Martin Willi | 2011-01-05 | 4 | -5/+136 |
| * | Added certificatePolicy support to x509 plugin | Martin Willi | 2011-01-05 | 5 | -11/+188 |
| * | Added a null-safe strdup variant | Martin Willi | 2011-01-05 | 7 | -8/+13 |
| * | Fail when parsing unsupported critical extensions in openssl_x509 | Martin Willi | 2011-01-05 | 1 | -1/+5 |
| * | Added CertificatePolicy OID identifier | Martin Willi | 2011-01-05 | 1 | -3/+3 |
| * | Added command line tool for OID to DER conversion function | Martin Willi | 2011-01-05 | 3 | -1/+35 |
| * | Added conversion functions between string OIDs and its DER encoding | Martin Willi | 2011-01-05 | 2 | -0/+110 |
| * | Do not parse certificates with invalid version in openssl plugin | Martin Willi | 2011-01-05 | 1 | -0/+7 |
| * | Implemented NameConstraint matching in constraints plugin | Martin Willi | 2011-01-05 | 1 | -0/+208 |
| * | pki --issue/self support permitted/excluded NameConstraints | Martin Willi | 2011-01-05 | 3 | -19/+57 |
| * | pki --print prints NameConstraints | Martin Willi | 2011-01-05 | 1 | -0/+25 |
| * | Added support for generating NameConstraints in x509 plugin | Martin Willi | 2011-01-05 | 3 | -4/+80 |
| * | Added support for parsing NameConstraints in x509 plugin | Martin Willi | 2011-01-05 | 1 | -0/+59 |
| * | Added name constraint enumerator to x509 interface | Martin Willi | 2011-01-05 | 3 | -1/+38 |
| * | Migrated x509_cert_t to INIT/METHOD macros | Martin Willi | 2011-01-05 | 1 | -144/+88 |
| * | Moved X509 pathlen constraint checking to constraints plugin | Martin Willi | 2011-01-05 | 2 | -17/+29 |
| * | Added plugin stub for advanced X509 constraint checking | Martin Willi | 2011-01-05 | 7 | -0/+242 |
| * | Added a hook to reset ESP sequence numbers | Martin Willi | 2011-01-05 | 2 | -1/+159 |
| * | Accept a suffix to differentiate x509, crl, ecdsa and rsa files | Martin Willi | 2011-01-05 | 1 | -7/+7 |
| * | Use strncaseeq instead of strncasecmp | Martin Willi | 2011-01-05 | 5 | -5/+5 |
| * | Added a strncaseeq variant to the string comparison macros | Martin Willi | 2011-01-05 | 1 | -1/+6 |
| * | Added tfc_padding option, changes signature to master changes | Martin Willi | 2011-01-05 | 1 | -1/+5 |
| * | CRL/OCSP validation stores trustchain information in auth_cfg | Martin Willi | 2011-01-05 | 1 | -17/+31 |
| * | Key strength checking stores all key sizes in auth_cfg, verifies all in compl... | Martin Willi | 2011-01-05 | 2 | -75/+84 |
| * | Install "ipsec" script with tools or conftest | Martin Willi | 2011-01-05 | 2 | -1/+6 |
| * | Use subject, not issuer, of CRL issuing certificate | Martin Willi | 2011-01-05 | 1 | -1/+1 |
| * | CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation | Martin Willi | 2011-01-05 | 2 | -3/+3 |
| * | Parse and encode crlSign keyUsage flag in x509 plugin | Martin Willi | 2011-01-05 | 1 | -10/+71 |
| * | pki tool shows and builds crlSign keyUsage | Martin Willi | 2011-01-05 | 3 | -2/+14 |
| * | Added a flag for X509 CRLSign keyUsage | Martin Willi | 2011-01-05 | 1 | -0/+2 |
| * | Remove x509_flag_names, flags do not work with ENUM() | Martin Willi | 2011-01-05 | 3 | -35/+1 |
| * | Use certificate CRLIssuer information to look up cacched CRLs or CDPs | Martin Willi | 2011-01-05 | 1 | -50/+88 |
| * | Added --crlissuer option to pki --issue | Martin Willi | 2011-01-05 | 2 | -19/+26 |
| * | Added support for CRL Issuers to x509 and OpenSSL plugins | Martin Willi | 2011-01-05 | 8 | -70/+269 |
| * | Generate payload to rebuild_auth, works with injected unknown payloads | Martin Willi | 2011-01-05 | 1 | -13/+17 |
| * | Move rebuild_auth functionality to a standalone hook | Martin Willi | 2011-01-05 | 3 | -215/+259 |
| * | Added key strength constraints support to conftest | Martin Willi | 2011-01-05 | 1 | -0/+11 |
| * | Added key strength constraints for RSA or ECDSA trustchains | Martin Willi | 2011-01-05 | 3 | -0/+97 |
| * | Implemented hook to log traffic selectors | Martin Willi | 2011-01-05 | 2 | -1/+88 |
| * | The set_reserved() hook rebuilds AUTH if it mangles ID payload fields | Martin Willi | 2011-01-05 | 1 | -33/+214 |
| * | Include the used reserved bytes from ID payloads in AUTH calculation | Martin Willi | 2011-01-05 | 12 | -40/+132 |
| * | Migrated psk/pubkey_authenticators to INIT/METHOD macros | Martin Willi | 2011-01-05 | 4 | -84/+83 |
| * | Extended set_reserved hook to mangle sa_payload substructures | Martin Willi | 2011-01-05 | 1 | -42/+121 |
| * | Added substructure enumerators to sa_payload, proposal_substructure | Martin Willi | 2011-01-05 | 4 | -0/+28 |
| * | Moved check if packet already encoded to ike_sa, avoids message() hook invoca... | Martin Willi | 2011-01-05 | 3 | -17/+16 |
| * | The set_ike_version hook supports version flag mangling | Martin Willi | 2011-01-05 | 1 | -0/+11 |
