Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Save both base and delta CRLs to disk | Andreas Steffen | 2016-10-11 | 1 | -1/+4 |
| | |||||
* | vici: strongswan.conf cache_crls = yes saves fetched CRLs to disk | Andreas Steffen | 2016-10-11 | 1 | -1/+63 |
| | |||||
* | vici: flush-certs command flushes certificate cache | Andreas Steffen | 2016-09-13 | 1 | -0/+19 |
| | | | | | | | | | | When fresh CRLs are released with a high update frequency (e.g. every 24 hours) or OCSP is used then the certificate cache gets quickly filled with stale CRLs or OCSP responses. The new VICI flush-certs command allows to flush e.g. cached CRLs or OCSP responses only. Without the type argument all kind of certificates (e.g. also received end entity and intermediate CA certificates) are purged. | ||||
* | vici: Support of raw public keys | Andreas Steffen | 2016-01-09 | 1 | -1/+1 |
| | |||||
* | Refactored certificate management for the vici and stroke interfaces5.4.0dr1 | Andreas Steffen | 2015-12-12 | 1 | -11/+23 |
| | |||||
* | Share vici_cert_info.c with vici_cred.c | Andreas Steffen | 2015-12-11 | 1 | -37/+28 |
| | |||||
* | vici: Attribute certificates are not trusted | Tobias Brunner | 2015-11-12 | 1 | -1/+3 |
| | |||||
* | vici: Properly add CRLs to the credential set | Tobias Brunner | 2015-11-12 | 1 | -2/+8 |
| | | | | add_crl() ensures that old CLRs are not stored in the credential set. | ||||
* | vici: Certification Authority support added. | Andreas Steffen | 2015-07-21 | 1 | -0/+7 |
| | | | | | | CDP and OCSP URIs for a one or multiple certification authorities can be added via the VICI interface. swanctl allows to read definitions from a new authorities section. | ||||
* | vici: Return a success result for the clear-creds command | Martin Willi | 2014-10-10 | 1 | -4/+1 |
| | | | | | Even if the command actually can't fail, this looks more aligned to similar commands. | ||||
* | vici: Log owners of a just loaded shared-secret | Martin Willi | 2014-05-07 | 1 | -2/+18 |
| | |||||
* | vici: Handle "xauth" as an alias for "eap" secrets | Martin Willi | 2014-05-07 | 1 | -1/+1 |
| | |||||
* | vici: Add a load-shared command to load shared IKE and EAP secrets | Martin Willi | 2014-05-07 | 1 | -0/+68 |
| | |||||
* | vici: Add a load-key command to load private keys | Martin Willi | 2014-05-07 | 1 | -0/+50 |
| | |||||
* | vici: Support loading of different certificate types | Martin Willi | 2014-05-07 | 1 | -0/+93 |
| | |||||
* | vici: Add a credential backend | Martin Willi | 2014-05-07 | 1 | -0/+103 |