Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | Implement get_attribute() in openssl PKCS#7 backend | Martin Willi | 2012-12-19 | 1 | -1/+35 | |
| | | ||||||
* | | Allocate data returned by pkcs7_t.get_attribute() | Martin Willi | 2012-12-19 | 4 | -2/+9 | |
| | | ||||||
* | | Implement OpenSSL PKCS#7 signed-data parsing and verification | Martin Willi | 2012-12-19 | 1 | -4/+287 | |
| | | ||||||
* | | Add a stub for OpenSSL PKCS#7 parsing | Martin Willi | 2012-12-19 | 4 | -0/+172 | |
| | | ||||||
* | | Remove unused monolithic PKCS#7 code | Martin Willi | 2012-12-19 | 4 | -1241/+3 | |
| | | ||||||
* | | Migrated scepclient to new modular PKCS# API | Martin Willi | 2012-12-19 | 3 | -95/+172 | |
| | | ||||||
* | | Fix encryption algorithm/key size argument processing in PKCS#7 enveloped-data | Martin Willi | 2012-12-19 | 1 | -1/+1 | |
| | | ||||||
* | | Properly clone PKCS#7 attributes passed to builder | Martin Willi | 2012-12-19 | 1 | -1/+1 | |
| | | ||||||
* | | Fix enum names for container_type_t | Martin Willi | 2012-12-19 | 1 | -1/+1 | |
| | | ||||||
* | | Add a --show option to pki --pkcs7 to print contained certificates | Martin Willi | 2012-12-19 | 1 | -1/+50 | |
| | | ||||||
* | | Add an enumerator for PKCS#7 contained certificates | Martin Willi | 2012-12-19 | 4 | -0/+17 | |
| | | ||||||
* | | pki --pkcs7 --verify shows prints the signing time, if available | Martin Willi | 2012-12-19 | 1 | -1/+17 | |
| | | ||||||
* | | Add a getter for signed PKCS#7 attributes | Martin Willi | 2012-12-19 | 4 | -0/+40 | |
| | | ||||||
* | | Fix leak in pki --pkcs7 --decrypt | Martin Willi | 2012-12-19 | 1 | -0/+1 | |
| | | ||||||
* | | Support multiple signerInfos while parsing PKCS#7 signed-data | Martin Willi | 2012-12-19 | 1 | -173/+229 | |
| | | ||||||
* | | Add a pki command to sign, verify, encrypt and decrypt PKCS#7 containers | Martin Willi | 2012-12-19 | 2 | -0/+392 | |
| | | ||||||
* | | Support encoding of PKCS#7 enveloped-data containers | Martin Willi | 2012-12-19 | 3 | -3/+231 | |
| | | ||||||
* | | Support encoding of PKCS#7 signed-data containers | Martin Willi | 2012-12-19 | 3 | -0/+195 | |
| | | ||||||
* | | Support encoding of PKCS#7 "data" containers | Martin Willi | 2012-12-19 | 3 | -5/+66 | |
| | | ||||||
* | | Add builder parts to generate PKCS#7 containers | Martin Willi | 2012-12-19 | 2 | -1/+10 | |
| | | ||||||
* | | Implement PKCS#7 enveloped-data parsing and decryption | Martin Willi | 2012-12-19 | 4 | -0/+434 | |
| | | ||||||
* | | Implement PKCS#7 signed-data parsing and verification | Martin Willi | 2012-12-19 | 4 | -0/+444 | |
| | | ||||||
* | | Implement PKCS#7 "data" content type parsing | Martin Willi | 2012-12-19 | 4 | -0/+146 | |
| | | ||||||
* | | certificate_t.has_subject() matches for certificate serialNumber | Martin Willi | 2012-12-19 | 2 | -0/+8 | |
| | | ||||||
* | | Implement generic PKCS#7 contentInfo parsing | Martin Willi | 2012-12-19 | 4 | -0/+153 | |
| | | ||||||
* | | Add a plugin stub for PKCS#7 containers | Martin Willi | 2012-12-19 | 5 | -0/+140 | |
| | | ||||||
* | | Add container plugin features | Martin Willi | 2012-12-19 | 2 | -0/+36 | |
| | | ||||||
* | | Add a generic interface for crypto containers and a more specific PKCS#7 ↵ | Martin Willi | 2012-12-19 | 6 | -5/+178 | |
| | | | | | | | | interface | |||||
* | | Rebuild PKCS#9 encoding after adding new attributes | Martin Willi | 2012-12-19 | 1 | -0/+3 | |
| | | ||||||
* | | Don't store additional encoding for each PKCS#9 attribute | Martin Willi | 2012-12-19 | 1 | -13/+15 | |
| | | ||||||
* | | Unify PKCS#9 set_attribute* methods to a single add_attribute | Martin Willi | 2012-12-19 | 4 | -59/+17 | |
| | | | | | | | | | | This way the PKCS#9 implementation does not have to know the encoding types for values | |||||
* | | PKCS#9 coding style cleanups | Martin Willi | 2012-12-19 | 2 | -110/+41 | |
| | | ||||||
* | | Remove external build_encoding method in PKCS#9 | Martin Willi | 2012-12-19 | 2 | -9/+5 | |
|/ | ||||||
* | Fix deadlock in IMC/IMV managers | Tobias Brunner | 2012-12-18 | 2 | -8/+36 | |
| | | | | | | | | | Since reserve_id() might be called from e.g. notify_connection_change() using a write lock will not work as this can't be acquired while holding the read lock. Also, with the previous code it was possible that two IMCs/IMVs added by two threads at the same time would get the same ID assigned. | |||||
* | Properly select IMC/IMV according to given primary ID in reserve_id() | Tobias Brunner | 2012-12-18 | 2 | -2/+2 | |
| | ||||||
* | Use a ./configure check to detect pthread spinlock availability | Martin Willi | 2012-12-18 | 2 | -15/+9 | |
| | | | | | _POSIX_SPIN_LOCKS does not seem to be defined correctly on all systems (Debian libc 2.3.6). Fixes #262. | |||||
* | kernel-netlinks get_interface() considers virtual IPs, too | Martin Willi | 2012-12-17 | 1 | -0/+13 | |
| | | | | | | | When using load-tester, we can install tunnel outer addresses on demand. As these are installed as "virtual", we have to consider virtual IPs in the get_interface() lookup to install "real" virtual IPs to these dynamic external addresses. | |||||
* | If load-tester requests a virtual IP, use a dynamic local traffic selector | Martin Willi | 2012-12-17 | 1 | -2/+8 | |
| | ||||||
* | Add missing CHILD_SA specific proposal keyword in conftest README | Martin Willi | 2012-12-17 | 1 | -0/+1 | |
| | ||||||
* | Fix traffic selectors also as initiator in case of transport mode over NAT | Tobias Brunner | 2012-12-13 | 1 | -1/+1 | |
| | ||||||
* | Fix debug output if responder selected invalid traffic selectors during QM | Tobias Brunner | 2012-12-13 | 1 | -2/+2 | |
| | ||||||
* | fixed memory leak in TPM Version Info | Andreas Steffen | 2012-12-13 | 1 | -2/+5 | |
| | ||||||
* | Fixed reading of configs in conftest utility | Tobias Brunner | 2012-12-13 | 1 | -4/+4 | |
| | ||||||
* | Migrate RADIUS accounting state while IKE_SA unique id changes during rekey | Martin Willi | 2012-12-11 | 1 | -0/+23 | |
| | ||||||
* | Migrate cache and fire lookip events for unique_id change during IKE_SA rekey | Martin Willi | 2012-12-10 | 1 | -0/+13 | |
| | ||||||
* | Inherit virtual IP and attributes from old to new, not from new to old | Martin Willi | 2012-12-10 | 1 | -5/+5 | |
| | ||||||
* | Avoid that ruby 1.9 redefines snprintf(3) etc. | Tobias Brunner | 2012-12-10 | 1 | -0/+2 | |
| | | | | Otherwise our custom printf specifiers won't work. | |||||
* | Properly initialize linked list when enumerating interface addresses | Tobias Brunner | 2012-12-10 | 1 | -0/+1 | |
| | ||||||
* | rb_cvar_set() takes three arguments in Ruby 1.9 | Tobias Brunner | 2012-12-10 | 1 | -0/+4 | |
| | ||||||
* | Use rb_errinfo() instead of ruby_errinfo for Ruby 1.9 | Tobias Brunner | 2012-12-10 | 2 | -0/+5 | |
| |