aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/asn1
Commit message (Collapse)AuthorAgeFilesLines
* asn1: Fix handling of invalid ASN.1 length in is_asn1()Tobias Brunner2013-07-311-0/+5
| | | | Fixes CVE-2013-5018.
* Recognize critical IssuingDistributionPoint CRL extensionAndreas Steffen2013-07-121-1/+1
|
* Add pkcs12 plugin which adds support for decoding PKCS#12 containersTobias Brunner2013-05-081-0/+11
|
* PKCS#5 wrapper can decrypt PKCS#12-like schemesTobias Brunner2013-05-081-1/+9
|
* Extract function to convert ASN.1 INTEGER object to u_int64_tTobias Brunner2013-05-082-0/+25
|
* Use the GEN silent rule when generating oid database with perlMartin Willi2013-05-061-2/+0
|
* added some otherNames OIDsAndreas Steffen2013-03-061-0/+6
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-242-2/+2
|
* added some new SHA-512 OIDsAndreas Steffen2012-10-031-0/+2
|
* Properly encode 0 in ASN.1.Tobias Brunner2012-06-111-10/+7
| | | | | According to X.690 an INTEGER object always has at least one content octet.
* Don't use chunk_skip() in asn1_length().Tobias Brunner2012-06-111-1/+2
| | | | | | | | chunk_skip() returns chunk_empty if the length of the chunk is equal to the number of bytes to skip, this is problematic as asn1_length() modifies the original chunk. asn1_parser_t for instance uses the modified chunk to later calculate the length of the resulting ASN.1 object which produces incorrect results if it is based on chunk_empty.
* Merge branch 'ikev1'Martin Willi2012-05-021-0/+3
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-201-0/+3
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
| | * Added support for iKEIntermediate X.509 extended key usage flag.Tobias Brunner2012-03-201-0/+3
| | | | | | | | | | | | Mac OS X requires server certificates to have this flag set.
* | | Add support for dnQualifier in DNs.Tobias Brunner2012-03-291-0/+1
|/ /
* | Moved log message for unexpected ASN.1 objects to level 2.Tobias Brunner2012-02-011-1/+1
| | | | | | | | This avoids error messages if later builders can successfully decode something.
* | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files.Tobias Brunner2012-02-012-7/+13
| |
* | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes).Tobias Brunner2012-02-012-3/+10
| |
* | Return parsed parameters from algorithmIdentifier if they are an OID (aka EC ↵Tobias Brunner2012-02-011-1/+1
| | | | | | | | | | | | | | named curve). Explicit EC parameters are not supported with this function, but before this change no parameters were actually ever returned.
* | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME.Tobias Brunner2011-12-232-6/+8
| |
* | Avoid integer overflow when parsing ASN.1 dates.Tobias Brunner2011-12-231-2/+2
| | | | | | | | This only works properly if sizeof(time_t) > 4.
* | Properly ASN.1 encode dates in certificates depending on the year.Tobias Brunner2011-12-232-8/+13
| |
* | Log ASN.1 parsing in new ASN debug group.Tobias Brunner2011-12-162-26/+26
|/
* support unstructuredAddress in left|rightidAndreas Steffen2011-04-181-1/+1
|
* fixed asn1_oid_from_string(), allowing it to handle up to 32 bit node numbersAndreas Steffen2011-03-121-11/+12
|
* added tcg-at-tpmIdLabel OIDAndreas Steffen2011-03-111-0/+1
|
* output unknown OIDs in dot string notationAndreas Steffen2011-03-111-4/+14
|
* fixed asn1_oid_to_string() conversionAndreas Steffen2011-03-091-15/+9
|
* defined some TCG attribute OIDsAndreas Steffen2011-03-081-1/+7
|
* support of RSAES-OAEP public keysAndreas Steffen2011-03-081-1/+1
|
* added id-RSAES-OAEP and id-pSpecified OIDsAndreas Steffen2011-03-071-0/+2
|
* defined OID_STRONGSWANAndreas Steffen2011-02-071-1/+1
|
* Added support for policyConstraints to x509 pluginMartin Willi2011-01-051-1/+1
|
* Added policyMappings OID identifierMartin Willi2011-01-051-1/+1
|
* Added CertificatePolicy OID identifierMartin Willi2011-01-051-3/+3
|
* Added conversion functions between string OIDs and its DER encodingMartin Willi2011-01-052-0/+110
|
* replaced spaces by tabsAndreas Steffen2010-12-301-1/+1
|
* removed superfluous whitespaceAndreas Steffen2010-12-031-1/+1
|
* Migrated asn1_parser_t to INIT/METHOD macrosAndreas Steffen2010-12-021-38/+28
|
* added ITA and strongSwan OIDsAndreas Steffen2010-11-171-0/+3
|
* corrected TCGID OIDAndreas Steffen2010-11-171-1/+1
|
* added qcStatements OIDAndreas Steffen2010-09-071-0/+1
|
* Added Microsoft OID for user principal name (UPN) subjectAltNamesMartin Willi2010-08-101-0/+1
|
* Double-check that a blob passed to is_asn1() is not emptyMartin Willi2010-05-051-1/+7
|
* Adding DBG_LIB to all calls of libstrongswan's version of DBG*.Tobias Brunner2010-04-062-26/+27
|
* set Certificate Sign and CRL Sign flags in keyUsage extension if CA is trueAndreas Steffen2010-03-071-1/+1
|
* Fixing some includes by replacing <> with "".Tobias Brunner2010-03-024-7/+4
| | | | I changed only the includes needed to fix the build on Android, which has an utils.h system header file, but we should probably change all the local includes in libstrongswan to "" and relative paths.
* Support TLS client authentication Extended Key Usage in x509 generationMartin Willi2010-01-141-1/+1
|
* Whitespace cleanup.Tobias Brunner2009-12-231-10/+10
|
* Using the thread wrapper in charon, libstrongswan and their plugins.Tobias Brunner2009-12-231-1/+0
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-03 16:38:12 +0000