index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
charon
/
credentials
Commit message (
Expand
)
Author
Age
Files
Lines
*
reimplemented certificate cache:
Martin Willi
2008-12-15
1
-154
/
+220
*
purge auth_info when IKE_SA is established, releases cert memory
Martin Willi
2008-12-09
2
-2
/
+16
*
fixed compiler warning
Tobias Brunner
2008-12-03
1
-1
/
+1
*
wrapped all pthread_rwlock_t in profilable rwlock_t
Martin Willi
2008-11-05
2
-38
/
+37
*
refactored credential builder
Martin Willi
2008-09-02
2
-2
/
+4
*
completed support of AUTHZ_CA_CERT and AUTHZ_CA_CERT_NAME attributes
Andreas Steffen
2008-08-26
1
-0
/
+1
*
ported parts of two-sim branch
Martin Willi
2008-08-22
2
-4
/
+39
*
corrected caption
Andreas Steffen
2008-08-01
1
-1
/
+1
*
using shared read locks in credential set enumerators to avoid deadlocks
Martin Willi
2008-07-30
3
-33
/
+79
*
missing FETCH_END caused SEGFAULT in ikev2/rw-hash-and-url scenario
Andreas Steffen
2008-07-22
1
-1
/
+1
*
handle ID_KEY_ID as a ID_PUBKEY_SHA1 for authentication
Martin Willi
2008-05-14
1
-2
/
+1
*
some c-libs require _GNU_SOURCE for pthread_rwlock
Martin Willi
2008-04-23
1
-1
/
+4
*
Hash and URL cosmetics
Andreas Steffen
2008-04-18
1
-5
/
+5
*
support for hash and URL encoded certificate payloads in charon
Tobias Brunner
2008-04-18
3
-52
/
+199
*
type corrected
Tobias Brunner
2008-04-18
2
-3
/
+3
*
added missing bits for credential caching
Martin Willi
2008-04-17
1
-29
/
+47
*
extended credential_set_t interface by a cache_cert() method
Martin Willi
2008-04-17
6
-1
/
+51
*
parallelized trust chain verification
Martin Willi
2008-04-16
3
-38
/
+148
*
try to cache the same instance of equal certificates
Martin Willi
2008-04-07
1
-4
/
+17
*
fixed bad cleanup which results in segfault if no issuer cert found, fixes #43
Martin Willi
2008-04-07
1
-1
/
+0
*
generate debug output if ocsp response does not contain status information fo...
Andreas Steffen
2008-04-02
1
-2
/
+3
*
additional debug line makes certificate status checking more understandable
Andreas Steffen
2008-04-02
1
-3
/
+8
*
some simplifications to trusted_enumerator_t
Martin Willi
2008-04-01
1
-8
/
+7
*
checking pretrusted but bad certificates only once
Martin Willi
2008-04-01
1
-13
/
+18
*
minor changes in debug output
Andreas Steffen
2008-03-31
1
-1
/
+3
*
output error message if maximum ca path length is reached
Andreas Steffen
2008-03-31
1
-0
/
+4
*
utc argument in %#T was missing
Andreas Steffen
2008-03-31
1
-4
/
+6
*
received certificates have least priority
Martin Willi
2008-03-31
1
-9
/
+5
*
fixed refcounting in certificate trustchain validation
Martin Willi
2008-03-31
1
-3
/
+5
*
fixed crash if crl fetching fails
Martin Willi
2008-03-28
1
-6
/
+12
*
reentrant save cert_cache
Martin Willi
2008-03-28
1
-12
/
+65
*
caching of CRLs
Martin Willi
2008-03-28
2
-127
/
+124
*
replaced get_public() by create_public_enumerator() to try multiple public ke...
Martin Willi
2008-03-27
2
-120
/
+219
*
use trusted self-signed root CA certificates as trust anchor only
Martin Willi
2008-03-27
1
-6
/
+16
*
implemented cert cache flushing, ipsec purgeocsp
Martin Willi
2008-03-27
4
-0
/
+48
*
caching of ocsp responses (experimental), no crl caching yet
Martin Willi
2008-03-26
2
-173
/
+149
*
fixed rightca= constraint checking
Martin Willi
2008-03-26
1
-21
/
+58
*
fixed auth_info_t.equals()
Martin Willi
2008-03-26
1
-1
/
+1
*
added equals() method to peer_cfg, ike_cfg, proposals, auth_info
Martin Willi
2008-03-26
2
-0
/
+112
*
shortened debug output
Andreas Steffen
2008-03-21
1
-2
/
+2
*
detect trusted self-signed before trust chain verification
Andreas Steffen
2008-03-21
1
-4
/
+14
*
optimized debug output of credential_manager.c
Andreas Steffen
2008-03-21
1
-21
/
+21
*
cert_cache_t caches subject-issuer relations and subject certificates
Martin Willi
2008-03-20
3
-3
/
+292
*
fallback to random end entity certificate if trustchain building fails
Martin Willi
2008-03-20
1
-3
/
+18
*
added support for certificate requests for not yet known CAs
Martin Willi
2008-03-20
3
-0
/
+25
*
fixed verification of preinstalled certificates
Martin Willi
2008-03-20
1
-1
/
+1
*
more trustchain verification improvements
Martin Willi
2008-03-20
1
-99
/
+103
*
refactored trustchain verification, this should fix #33
Martin Willi
2008-03-19
5
-329
/
+526
*
increased debug level in trust chain verification for auditing purposes
Andreas Steffen
2008-03-19
1
-31
/
+50
*
log nextUpdate of crls and ocsp responses
Andreas Steffen
2008-03-19
1
-12
/
+36
[next]