tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
*	Silently install route again, even if it did not change.	Tobias Brunner	2011-11-04	2	-2/+12
\| \| \| \| \|	Address/interface changes can cause the route to disappear. Afterwards the route might look the same but that does not mean it is still installed.
*	Compile warning fixed in kernel interfaces.	Tobias Brunner	2011-11-04	2	-2/+2
\|
*	Common spelling errors fixed.	Tobias Brunner	2011-11-03	4	-4/+4
\|
*	NEWS about pkcs11 plugin added.	Tobias Brunner	2011-11-03	1	-0/+7
\|
*	pkcs11: Documented use_pubkey option in strongswan.conf(5).	Tobias Brunner	2011-11-03	1	-2/+7
\|
*	pkcs11: Make public key operations on tokens optional.	Tobias Brunner	2011-11-03	1	-20/+21
\|
*	pkcs11: Make sure a key can be used for a given signature scheme.	Tobias Brunner	2011-11-02	3	-16/+31
\|
*	pkcs11: Register ECDSA feature.	Tobias Brunner	2011-11-02	1	-1/+10
\|
*	pkcs11: We have to create our own hashes for some signature schemes.	Tobias Brunner	2011-11-02	4	-12/+81
\|
*	pkcs11: Lookup the public key of a private key by CKA_ID.	Tobias Brunner	2011-11-02	2	-0/+125
\| \| \| \| \| \|	Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there.
*	pkcs11: Search for private keys in a more generic way.	Tobias Brunner	2011-11-02	1	-20/+19
\| \| \| \| \| \|	Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key.
*	pkcs11: Added support to encode ECDSA public keys.	Tobias Brunner	2011-11-02	1	-0/+89
\|
*	pkcs11: Parse ECDSA public keys and find/create them on tokens.	Tobias Brunner	2011-11-02	1	-2/+177
\|
*	pkcs11: Added generic functions to find/create public keys on tokens.	Tobias Brunner	2011-11-02	1	-40/+75
\|
*	pkcs11: Store public key length in bits.	Tobias Brunner	2011-11-02	1	-3/+3
\|
*	pkcs11: Fix encoding of RSA public keys.	Tobias Brunner	2011-11-02	1	-0/+4
\|
*	pkcs11: Use create_object_attr_enumerator to encode RSA public key.	Tobias Brunner	2011-11-02	1	-17/+7
\|
*	pkcs11: Instead of a mutex use a new session to do multipart operations.	Tobias Brunner	2011-11-02	2	-40/+66
\|
*	pkcs11: Function added to retrieve multiple attributes from a single object.	Tobias Brunner	2011-11-02	2	-6/+62
\|
*	pkcs11: Memory leak fixed in DH/ECDH implementation.	Tobias Brunner	2011-11-02	1	-0/+2
\|
*	pkcs11: Invalid free fixed in DH/ECDH implementation.	Tobias Brunner	2011-11-02	1	-1/+4
\|
*	pkcs11: Changed how pkcs11-manager is initialized.	Tobias Brunner	2011-11-02	1	-42/+32
\| \| \| \| \|	The manager is now created directly, but events and certificate loading is deferred.
*	pkcs11: Add attributes to specify what we use the DH/ECDH keys for.	Tobias Brunner	2011-11-02	1	-2/+10
\|
*	version bump to 4.6.0	Andreas Steffen	2011-11-02	1	-1/+1
\|
*	enable integrity test in tnc/tnccs-dynamic scenario	Andreas Steffen	2011-11-02	3	-0/+12
\|
*	charon must load libtls if available	Andreas Steffen	2011-11-02	1	-0/+4
\|
*	fixed integrity tests of plugins using libtls or libtnccs	Andreas Steffen	2011-11-02	14	-18/+43
\|
*	removed xcbc plugin from sql scenarios	Andreas Steffen	2011-11-01	48	-48/+48
\|
*	tnc-tnccs plugin is now included in integrity tests	Andreas Steffen	2011-10-31	1	-3/+3
\|
*	pkcs11: Allow to build pkcs11 plugin on Android.	Tobias Brunner	2011-10-31	1	-0/+2
\|
*	pkcs11: Documented new options in strongswan.conf(5).	Tobias Brunner	2011-10-31	1	-0/+9
\|
*	pkcs11: Register the pkcs11 plugin before any other crypto plugins.	Tobias Brunner	2011-10-31	1	-1/+1
\| \| \| \| \|	This is what most users probably expect when they enable the pkcs11 plugin. All advanced features (like DH/RNG) are disabled by default.
*	pkcs11: Use callback registration for pkcs11-manager.	Tobias Brunner	2011-10-31	1	-25/+73
\| \| \| \| \| \|	Otherwise a plugin providing X509 decoding capabilities might be unloaded before the manager which will result in a segmentation fault when certificates in the manager's credential sets are to be destroyed.
*	pkcs11: Merged the ECDH into the DH implementation.	Tobias Brunner	2011-10-31	6	-405/+210
\|
*	pkcs11: Use get_ck_attribute for ECDH.	Tobias Brunner	2011-10-31	1	-63/+13
\|
*	pkcs11: Use get_ck_attribute for DH.	Tobias Brunner	2011-10-31	1	-28/+6
\|
*	pkcs11: Method added to library to extract a single attribute from an object.	Tobias Brunner	2011-10-31	2	-1/+50
\|
*	pkcs11: Added names for CKA_* constants.	Tobias Brunner	2011-10-31	2	-1/+123
\|
*	pkcs11: Added support for ECDH.	Tobias Brunner	2011-10-31	4	-1/+422
\|
*	pkcs11: Added definitions needed for ECDH to pkcs11.h.	Tobias Brunner	2011-10-31	1	-0/+24
\|
*	pkcs11: Specify object class and key type when deriving DH secrets.	Tobias Brunner	2011-10-31	1	-0/+4
\| \| \| \|	pkcs11_softtoken on OpenSolaris requires this (probably others too).
*	pkcs11: Add features support.	Tobias Brunner	2011-10-31	3	-84/+90
\|
*	pkcs11: Added support for DH.	Tobias Brunner	2011-10-31	4	-0/+377
\|
*	pkcs11: Error message fixed.	Tobias Brunner	2011-10-31	1	-1/+1
\|
*	pkcs11: Added support to generate random numbers on a token.	Tobias Brunner	2011-10-31	4	-0/+201
\|
*	pkcs11: Properly destroy mutex in pkcs11_hasher if no token found.	Tobias Brunner	2011-10-31	1	-0/+1
\|
*	Added features support to agent plugin	Andreas Steffen	2011-10-30	1	-4/+11
\|
*	Added features support to dnskey plugin	Andreas Steffen	2011-10-30	1	-7/+14
\|
*	Added features support to pgp plugin	Andreas Steffen	2011-10-30	1	-19/+23
\|
*	Added features support to pkcs1 plugin	Andreas Steffen	2011-10-30	1	-13/+16
\|