Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | reentrant save cert_cache | Martin Willi | 2008-03-28 | 1 | -12/+65 | |
| | ||||||
* | caching of CRLs | Martin Willi | 2008-03-28 | 2 | -127/+124 | |
| | ||||||
* | replaced get_public() by create_public_enumerator() to try multiple public ↵ | Martin Willi | 2008-03-27 | 2 | -120/+219 | |
| | | | | keys for signature verification | |||||
* | use trusted self-signed root CA certificates as trust anchor only | Martin Willi | 2008-03-27 | 1 | -6/+16 | |
| | ||||||
* | implemented cert cache flushing, ipsec purgeocsp | Martin Willi | 2008-03-27 | 4 | -0/+48 | |
| | ||||||
* | caching of ocsp responses (experimental), no crl caching yet | Martin Willi | 2008-03-26 | 2 | -173/+149 | |
| | ||||||
* | fixed rightca= constraint checking | Martin Willi | 2008-03-26 | 1 | -21/+58 | |
| | | | | implemented rightca= for intermediate CAs we do not have the certificate at config load | |||||
* | fixed auth_info_t.equals() | Martin Willi | 2008-03-26 | 1 | -1/+1 | |
| | ||||||
* | added equals() method to peer_cfg, ike_cfg, proposals, auth_info | Martin Willi | 2008-03-26 | 2 | -0/+112 | |
| | | | | | | allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator | |||||
* | shortened debug output | Andreas Steffen | 2008-03-21 | 1 | -2/+2 | |
| | ||||||
* | detect trusted self-signed before trust chain verification | Andreas Steffen | 2008-03-21 | 1 | -4/+14 | |
| | ||||||
* | optimized debug output of credential_manager.c | Andreas Steffen | 2008-03-21 | 1 | -21/+21 | |
| | ||||||
* | cert_cache_t caches subject-issuer relations and subject certificates | Martin Willi | 2008-03-20 | 3 | -3/+292 | |
| | | | | ocsp/crl do not benefit yet due missing lookup function | |||||
* | fallback to random end entity certificate if trustchain building fails | Martin Willi | 2008-03-20 | 1 | -3/+18 | |
| | ||||||
* | added support for certificate requests for not yet known CAs | Martin Willi | 2008-03-20 | 3 | -0/+25 | |
| | ||||||
* | fixed verification of preinstalled certificates | Martin Willi | 2008-03-20 | 1 | -1/+1 | |
| | ||||||
* | more trustchain verification improvements | Martin Willi | 2008-03-20 | 1 | -99/+103 | |
| | | | | should fix crl-revoked and two-certs scenarios | |||||
* | refactored trustchain verification, this should fix #33 | Martin Willi | 2008-03-19 | 5 | -329/+526 | |
| | | | | moved auth_info/ocsp_response credset wrapper to separate files | |||||
* | increased debug level in trust chain verification for auditing purposes | Andreas Steffen | 2008-03-19 | 1 | -31/+50 | |
| | ||||||
* | log nextUpdate of crls and ocsp responses | Andreas Steffen | 2008-03-19 | 1 | -12/+36 | |
| | ||||||
* | fixed stupid bug in fetch_ocsp() | Andreas Steffen | 2008-03-19 | 1 | -1/+1 | |
| | ||||||
* | attempt to achieve consistent debugging output | Andreas Steffen | 2008-03-19 | 1 | -31/+41 | |
| | ||||||
* | fixed CRL check return value on revoked certificates | Martin Willi | 2008-03-19 | 1 | -29/+19 | |
| | | | | | fixed possible refcounting bugs generic return_null() implementation | |||||
* | fixed compiler warning | Martin Willi | 2008-03-18 | 1 | -0/+1 | |
| | ||||||
* | made is_newer() a certificate_t method | Andreas Steffen | 2008-03-18 | 1 | -77/+120 | |
| | ||||||
* | refactored buggy trustchain building, fixed refcount bug | Martin Willi | 2008-03-14 | 1 | -105/+91 | |
| | ||||||
* | merged the modularization branch (credentials) back to trunk | Martin Willi | 2008-03-13 | 5 | -0/+2179 | |