aboutsummaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Migrated scepclient to new modular PKCS# APIMartin Willi2012-12-193-95/+172
|
* Fix encryption algorithm/key size argument processing in PKCS#7 enveloped-dataMartin Willi2012-12-191-1/+1
|
* Properly clone PKCS#7 attributes passed to builderMartin Willi2012-12-191-1/+1
|
* Fix enum names for container_type_tMartin Willi2012-12-191-1/+1
|
* Add a --show option to pki --pkcs7 to print contained certificatesMartin Willi2012-12-191-1/+50
|
* Add an enumerator for PKCS#7 contained certificatesMartin Willi2012-12-194-0/+17
|
* pki --pkcs7 --verify shows prints the signing time, if availableMartin Willi2012-12-191-1/+17
|
* Add a getter for signed PKCS#7 attributesMartin Willi2012-12-194-0/+40
|
* Fix leak in pki --pkcs7 --decryptMartin Willi2012-12-191-0/+1
|
* Support multiple signerInfos while parsing PKCS#7 signed-dataMartin Willi2012-12-191-173/+229
|
* Add a pki command to sign, verify, encrypt and decrypt PKCS#7 containersMartin Willi2012-12-192-0/+392
|
* Support encoding of PKCS#7 enveloped-data containersMartin Willi2012-12-193-3/+231
|
* Support encoding of PKCS#7 signed-data containersMartin Willi2012-12-193-0/+195
|
* Support encoding of PKCS#7 "data" containersMartin Willi2012-12-193-5/+66
|
* Add builder parts to generate PKCS#7 containersMartin Willi2012-12-192-1/+10
|
* Implement PKCS#7 enveloped-data parsing and decryptionMartin Willi2012-12-194-0/+434
|
* Implement PKCS#7 signed-data parsing and verificationMartin Willi2012-12-194-0/+444
|
* Implement PKCS#7 "data" content type parsingMartin Willi2012-12-194-0/+146
|
* certificate_t.has_subject() matches for certificate serialNumberMartin Willi2012-12-192-0/+8
|
* Implement generic PKCS#7 contentInfo parsingMartin Willi2012-12-194-0/+153
|
* Add a plugin stub for PKCS#7 containersMartin Willi2012-12-195-0/+140
|
* Add container plugin featuresMartin Willi2012-12-192-0/+36
|
* Add a generic interface for crypto containers and a more specific PKCS#7 ↵Martin Willi2012-12-196-5/+178
| | | | interface
* Rebuild PKCS#9 encoding after adding new attributesMartin Willi2012-12-191-0/+3
|
* Don't store additional encoding for each PKCS#9 attributeMartin Willi2012-12-191-13/+15
|
* Unify PKCS#9 set_attribute* methods to a single add_attributeMartin Willi2012-12-194-59/+17
| | | | | This way the PKCS#9 implementation does not have to know the encoding types for values
* PKCS#9 coding style cleanupsMartin Willi2012-12-192-110/+41
|
* Remove external build_encoding method in PKCS#9Martin Willi2012-12-192-9/+5
|
* Fix deadlock in IMC/IMV managersTobias Brunner2012-12-182-8/+36
| | | | | | | | | Since reserve_id() might be called from e.g. notify_connection_change() using a write lock will not work as this can't be acquired while holding the read lock. Also, with the previous code it was possible that two IMCs/IMVs added by two threads at the same time would get the same ID assigned.
* Properly select IMC/IMV according to given primary ID in reserve_id()Tobias Brunner2012-12-182-2/+2
|
* Use a ./configure check to detect pthread spinlock availabilityMartin Willi2012-12-182-15/+9
| | | | | _POSIX_SPIN_LOCKS does not seem to be defined correctly on all systems (Debian libc 2.3.6). Fixes #262.
* kernel-netlinks get_interface() considers virtual IPs, tooMartin Willi2012-12-171-0/+13
| | | | | | | When using load-tester, we can install tunnel outer addresses on demand. As these are installed as "virtual", we have to consider virtual IPs in the get_interface() lookup to install "real" virtual IPs to these dynamic external addresses.
* If load-tester requests a virtual IP, use a dynamic local traffic selectorMartin Willi2012-12-171-2/+8
|
* Add missing CHILD_SA specific proposal keyword in conftest READMEMartin Willi2012-12-171-0/+1
|
* Fix traffic selectors also as initiator in case of transport mode over NATTobias Brunner2012-12-131-1/+1
|
* Fix debug output if responder selected invalid traffic selectors during QMTobias Brunner2012-12-131-2/+2
|
* fixed memory leak in TPM Version InfoAndreas Steffen2012-12-131-2/+5
|
* Fixed reading of configs in conftest utilityTobias Brunner2012-12-131-4/+4
|
* Migrate RADIUS accounting state while IKE_SA unique id changes during rekeyMartin Willi2012-12-111-0/+23
|
* Migrate cache and fire lookip events for unique_id change during IKE_SA rekeyMartin Willi2012-12-101-0/+13
|
* Inherit virtual IP and attributes from old to new, not from new to oldMartin Willi2012-12-101-5/+5
|
* Avoid that ruby 1.9 redefines snprintf(3) etc.Tobias Brunner2012-12-101-0/+2
| | | | Otherwise our custom printf specifiers won't work.
* Properly initialize linked list when enumerating interface addressesTobias Brunner2012-12-101-0/+1
|
* rb_cvar_set() takes three arguments in Ruby 1.9Tobias Brunner2012-12-101-0/+4
|
* Use rb_errinfo() instead of ruby_errinfo for Ruby 1.9Tobias Brunner2012-12-102-0/+5
|
* Use proper Ruby library depending on the available versionTobias Brunner2012-12-102-1/+9
|
* Fixed search for ruby.h in ./configure for newer Ruby releasesTobias Brunner2012-12-101-15/+16
|
* add dlcose strongswan.conf option to tnc-imc/tnc-imv pluginsAndreas Steffen2012-12-091-0/+6
|
* optionally skip dlclose() of IMCs/IMVs in order to track memory leaksAndreas Steffen2012-12-092-2/+6
|
* fixed memory leak in error caseAndreas Steffen2012-12-091-1/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-03-07 01:17:01 +0000