aboutsummaryrefslogtreecommitdiffstats
path: root/src/charon/credentials
Commit message (Expand)AuthorAgeFilesLines
* reimplemented certificate cache:Martin Willi2008-12-151-154/+220
* purge auth_info when IKE_SA is established, releases cert memoryMartin Willi2008-12-092-2/+16
* fixed compiler warningTobias Brunner2008-12-031-1/+1
* wrapped all pthread_rwlock_t in profilable rwlock_tMartin Willi2008-11-052-38/+37
* refactored credential builderMartin Willi2008-09-022-2/+4
* completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributesAndreas Steffen2008-08-261-0/+1
* ported parts of two-sim branchMartin Willi2008-08-222-4/+39
* corrected captionAndreas Steffen2008-08-011-1/+1
* using shared read locks in credential set enumerators to avoid deadlocksMartin Willi2008-07-303-33/+79
* missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenarioAndreas Steffen2008-07-221-1/+1
* handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authenticationMartin Willi2008-05-141-2/+1
* some c-libs require _GNU_SOURCE for pthread_rwlockMartin Willi2008-04-231-1/+4
* Hash and URL cosmeticsAndreas Steffen2008-04-181-5/+5
* support for hash and URL encoded certificate payloads in charonTobias Brunner2008-04-183-52/+199
* type correctedTobias Brunner2008-04-182-3/+3
* added missing bits for credential cachingMartin Willi2008-04-171-29/+47
* extended credential_set_t interface by a cache_cert() methodMartin Willi2008-04-176-1/+51
* parallelized trust chain verificationMartin Willi2008-04-163-38/+148
* try to cache the same instance of equal certificatesMartin Willi2008-04-071-4/+17
* fixed bad cleanup which results in segfault if no issuer cert found, fixes #43Martin Willi2008-04-071-1/+0
* generate debug output if ocsp response does not contain status information fo...Andreas Steffen2008-04-021-2/+3
* additional debug line makes certificate status checking more understandableAndreas Steffen2008-04-021-3/+8
* some simplifications to trusted_enumerator_tMartin Willi2008-04-011-8/+7
* checking pretrusted but bad certificates only onceMartin Willi2008-04-011-13/+18
* minor changes in debug outputAndreas Steffen2008-03-311-1/+3
* output error message if maximum ca path length is reachedAndreas Steffen2008-03-311-0/+4
* utc argument in %#T was missingAndreas Steffen2008-03-311-4/+6
* received certificates have least priorityMartin Willi2008-03-311-9/+5
* fixed refcounting in certificate trustchain validationMartin Willi2008-03-311-3/+5
* fixed crash if crl fetching failsMartin Willi2008-03-281-6/+12
* reentrant save cert_cacheMartin Willi2008-03-281-12/+65
* caching of CRLsMartin Willi2008-03-282-127/+124
* replaced get_public() by create_public_enumerator() to try multiple public ke...Martin Willi2008-03-272-120/+219
* use trusted self-signed root CA certificates as trust anchor onlyMartin Willi2008-03-271-6/+16
* implemented cert cache flushing, ipsec purgeocspMartin Willi2008-03-274-0/+48
* caching of ocsp responses (experimental), no crl caching yetMartin Willi2008-03-262-173/+149
* fixed rightca= constraint checkingMartin Willi2008-03-261-21/+58
* fixed auth_info_t.equals()Martin Willi2008-03-261-1/+1
* added equals() method to peer_cfg, ike_cfg, proposals, auth_infoMartin Willi2008-03-262-0/+112
* shortened debug outputAndreas Steffen2008-03-211-2/+2
* detect trusted self-signed before trust chain verificationAndreas Steffen2008-03-211-4/+14
* optimized debug output of credential_manager.cAndreas Steffen2008-03-211-21/+21
* cert_cache_t caches subject-issuer relations and subject certificatesMartin Willi2008-03-203-3/+292
* fallback to random end entity certificate if trustchain building failsMartin Willi2008-03-201-3/+18
* added support for certificate requests for not yet known CAsMartin Willi2008-03-203-0/+25
* fixed verification of preinstalled certificatesMartin Willi2008-03-201-1/+1
* more trustchain verification improvementsMartin Willi2008-03-201-99/+103
* refactored trustchain verification, this should fix #33Martin Willi2008-03-195-329/+526
* increased debug level in trust chain verification for auditing purposesAndreas Steffen2008-03-191-31/+50
* log nextUpdate of crls and ocsp responsesAndreas Steffen2008-03-191-12/+36