Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 2 | -1683/+0 |
| | |||||
* | search : delimiter in ipsec.secrets entries from the rear | Andreas Steffen | 2007-11-16 | 1 | -1/+3 |
| | |||||
* | return argument has type size_t | Andreas Steffen | 2007-09-18 | 1 | -1/+1 |
| | |||||
* | check hash algorithms used in signatures | Andreas Steffen | 2007-09-11 | 1 | -1/+1 |
| | |||||
* | removed rsa_private_key clone() function | Andreas Steffen | 2007-09-11 | 1 | -1/+1 |
| | |||||
* | replaced get_rsa_private_key() by rsa_signature() in order restrict the ↵ | Andreas Steffen | 2007-09-11 | 1 | -28/+44 |
| | | | | distribution of private key material | ||||
* | overwrite storage used for shared secrets with pseudo-random bytes before ↵ | Andreas Steffen | 2007-09-10 | 1 | -27/+26 |
| | | | | releasing it | ||||
* | append new attribute certs at the end | Andreas Steffen | 2007-08-14 | 1 | -1/+7 |
| | |||||
* | adding attribute certficates to a chained list | Andreas Steffen | 2007-08-14 | 1 | -3/+25 |
| | |||||
* | has_rsa_private_key() must also be protected by keys_mutex | Andreas Steffen | 2007-08-10 | 1 | -1/+4 |
| | |||||
* | support of ipsec rereadsecrets for stroke | Andreas Steffen | 2007-08-10 | 1 | -9/+54 |
| | |||||
* | bug fix in linked_list deletion - instead of acerts destroyed certs twice4.1.5 | Andreas Steffen | 2007-08-08 | 1 | -1/+1 |
| | |||||
* | implemented listing of attribute certificates | Andreas Steffen | 2007-08-07 | 1 | -3/+31 |
| | |||||
* | ignoring unkown crl/ocsp uris | Martin Willi | 2007-07-04 | 1 | -2/+8 |
| | |||||
* | moved assignment of CERT_UNKNOWN4.1.3 | Andreas Steffen | 2007-05-25 | 1 | -2/+2 |
| | |||||
* | log trust pathlen | Andreas Steffen | 2007-05-25 | 1 | -4/+6 |
| | |||||
* | included a certificate label in the is_trusted() method | Andreas Steffen | 2007-05-25 | 1 | -8/+6 |
| | |||||
* | DBG1 level now shows stepping up through the certifiate hierarchy up to the ↵ | Andreas Steffen | 2007-05-25 | 1 | -2/+2 |
| | | | | trust anchor | ||||
* | set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification | Andreas Steffen | 2007-05-25 | 1 | -3/+7 |
| | |||||
* | fixed nextUpdate and until behaviour in the non-strict case | Andreas Steffen | 2007-05-19 | 1 | -10/+8 |
| | |||||
* | support of CA-based ipsec policies | Andreas Steffen | 2007-05-18 | 1 | -40/+40 |
| | |||||
* | verification of locally loaded peer certificates | Andreas Steffen | 2007-05-15 | 1 | -87/+92 |
| | |||||
* | support of multiple certificates with same peer id | Andreas Steffen | 2007-05-15 | 1 | -36/+74 |
| | |||||
* | changing UID/GID after startup of pluto/charon | Martin Willi | 2007-05-07 | 1 | -1/+3 |
| | | | | added --with-uid/--with-gid configure option | ||||
* | implementation of strictcrlpolicy=ifuri | Andreas Steffen | 2007-04-20 | 2 | -46/+56 |
| | |||||
* | started support of X.509 attribute certificates | Andreas Steffen | 2007-04-12 | 1 | -21/+93 |
| | |||||
* | removed list_crls() and list_ocsp() methods | Andreas Steffen | 2007-04-06 | 1 | -57/+2 |
| | |||||
* | support cachecrls=yes | Andreas Steffen | 2007-04-05 | 1 | -5/+13 |
| | |||||
* | implemented dynamic http-based CRL fetching | Andreas Steffen | 2007-04-03 | 1 | -8/+3 |
| | |||||
* | merged changes from eap-aka trunk | Martin Willi | 2007-03-28 | 1 | -15/+48 |
| | |||||
* | is_trusted() adds cert_status to cert_to_be_trusted | Andreas Steffen | 2007-03-28 | 1 | -3/+37 |
| | |||||
* | implemented ipsec listocsp function | Andreas Steffen | 2007-03-27 | 1 | -5/+32 |
| | |||||
* | results from the single responses is stored in the corresponding certinfo_t ↵ | Andreas Steffen | 2007-03-12 | 1 | -2/+2 |
| | | | | structs | ||||
* | moved credential_store.h from charon/config/credentials to libstrongswan | Andreas Steffen | 2007-03-09 | 2 | -286/+1 |
| | |||||
* | fixed a certinfo_t memory leak in verify() | Andreas Steffen | 2007-03-09 | 1 | -1/+4 |
| | |||||
* | ocsp signer certificate and ocsp response signature can be verified | Andreas Steffen | 2007-03-08 | 2 | -3/+69 |
| | |||||
* | fixed call of add_auth_certificate() | Andreas Steffen | 2007-03-08 | 2 | -7/+9 |
| | |||||
* | generalized get_ca_certificate() to get_auth_certificate(auth_flags) | Andreas Steffen | 2007-03-08 | 2 | -7/+9 |
| | |||||
* | support if ocsp signing certificates | Andreas Steffen | 2007-03-08 | 2 | -61/+97 |
| | |||||
* | add crl and ocsp uris to linked list after partial verification | Andreas Steffen | 2007-03-06 | 1 | -22/+35 |
| | |||||
* | refactored ca_info_t | Andreas Steffen | 2007-03-03 | 2 | -166/+115 |
| | |||||
* | added support for 0.0.0.0/0 traffic selectors | Martin Willi | 2007-03-01 | 1 | -1/+3 |
| | | | | fixed routing to make correct 0.0.0.0/0 routes | ||||
* | added support of OCSP accessLocations | Andreas Steffen | 2007-02-25 | 1 | -5/+17 |
| | |||||
* | full support of ca info records | Andreas Steffen | 2007-02-24 | 2 | -22/+111 |
| | |||||
* | support of ca info records | Andreas Steffen | 2007-02-23 | 2 | -0/+45 |
| | |||||
* | %T requires time_t ptr | Andreas Steffen | 2007-02-08 | 1 | -1/+1 |
| | |||||
* | better split up of library files "types.h" & "definitions.h" | Martin Willi | 2006-10-31 | 3 | -9/+6 |
| | | | | | | | | | centralized all printf specifier character definitions reuse of arginfo handlers more cleanups fixed more AMD64 issues added DEBUG_LEVEL compile flag to exclude DBGn() statements | ||||
* | moved typedefs to beginning of files to solve some include problems | Martin Willi | 2006-10-30 | 3 | -8/+8 |
| | | | | | | | splitted authenticator to have a separate implementation for each auth_method_t using va_copy to clone va_lists, should fix proplems on AMD64 some other cleanups | ||||
* | support of certreq payload in IKE_AUTH messages | Andreas Steffen | 2006-10-28 | 2 | -0/+39 |
| | |||||
* | added method get_ca_certificate() | Andreas Steffen | 2006-10-28 | 2 | -10/+54 |
| |