aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/asn1
Commit message (Collapse)AuthorAgeFilesLines
* Fixed a minor vulnerability in which a malformed ASN.1 length field could ↵5.1.2rc1Andreas Steffen2014-02-141-0/+1
| | | | cause a crash of the charon daemon if the verbose debug level 3 (raw hex dump) for the asn subsystem is enabled.
* asn1: Support dates before 1970-01-01 (i.e. when time_t gets negative)Tobias Brunner2014-02-122-4/+23
| | | | | | On x86 we allow "overflows" around 1969/1970 but not for other dates. Fixes #509.
* asn1: Add additional validation for parsed ASN.1 date/time valuesTobias Brunner2014-02-121-1/+12
|
* Prototype implementation of IKE key exchange via NTRU encryptionAndreas Steffen2013-11-271-0/+24
|
* unit-tests: 100% function coverage for asn1.cAndreas Steffen2013-11-031-2/+2
|
* Some minor refactoring in asn1.cAndreas Steffen2013-11-021-11/+17
|
* Do not free zero-length integerAndreas Steffen2013-11-021-5/+10
|
* asn1: Fix handling of invalid ASN.1 length in is_asn1()Tobias Brunner2013-07-311-0/+5
| | | | Fixes CVE-2013-5018.
* Recognize critical IssuingDistributionPoint CRL extensionAndreas Steffen2013-07-121-1/+1
|
* Add pkcs12 plugin which adds support for decoding PKCS#12 containersTobias Brunner2013-05-081-0/+11
|
* PKCS#5 wrapper can decrypt PKCS#12-like schemesTobias Brunner2013-05-081-1/+9
|
* Extract function to convert ASN.1 INTEGER object to u_int64_tTobias Brunner2013-05-082-0/+25
|
* Use the GEN silent rule when generating oid database with perlMartin Willi2013-05-061-2/+0
|
* added some otherNames OIDsAndreas Steffen2013-03-061-0/+6
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-242-2/+2
|
* added some new SHA-512 OIDsAndreas Steffen2012-10-031-0/+2
|
* Properly encode 0 in ASN.1.Tobias Brunner2012-06-111-10/+7
| | | | | According to X.690 an INTEGER object always has at least one content octet.
* Don't use chunk_skip() in asn1_length().Tobias Brunner2012-06-111-1/+2
| | | | | | | | chunk_skip() returns chunk_empty if the length of the chunk is equal to the number of bytes to skip, this is problematic as asn1_length() modifies the original chunk. asn1_parser_t for instance uses the modified chunk to later calculate the length of the resulting ASN.1 object which produces incorrect results if it is based on chunk_empty.
* Merge branch 'ikev1'Martin Willi2012-05-021-0/+3
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-201-0/+3
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
| | * Added support for iKEIntermediate X.509 extended key usage flag.Tobias Brunner2012-03-201-0/+3
| | | | | | | | | | | | Mac OS X requires server certificates to have this flag set.
* | | Add support for dnQualifier in DNs.Tobias Brunner2012-03-291-0/+1
|/ /
* | Moved log message for unexpected ASN.1 objects to level 2.Tobias Brunner2012-02-011-1/+1
| | | | | | | | This avoids error messages if later builders can successfully decode something.
* | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files.Tobias Brunner2012-02-012-7/+13
| |
* | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes).Tobias Brunner2012-02-012-3/+10
| |
* | Return parsed parameters from algorithmIdentifier if they are an OID (aka EC ↵Tobias Brunner2012-02-011-1/+1
| | | | | | | | | | | | | | named curve). Explicit EC parameters are not supported with this function, but before this change no parameters were actually ever returned.
* | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME.Tobias Brunner2011-12-232-6/+8
| |
* | Avoid integer overflow when parsing ASN.1 dates.Tobias Brunner2011-12-231-2/+2
| | | | | | | | This only works properly if sizeof(time_t) > 4.
* | Properly ASN.1 encode dates in certificates depending on the year.Tobias Brunner2011-12-232-8/+13
| |
* | Log ASN.1 parsing in new ASN debug group.Tobias Brunner2011-12-162-26/+26
|/
* support unstructuredAddress in left|rightidAndreas Steffen2011-04-181-1/+1
|
* fixed asn1_oid_from_string(), allowing it to handle up to 32 bit node numbersAndreas Steffen2011-03-121-11/+12
|
* added tcg-at-tpmIdLabel OIDAndreas Steffen2011-03-111-0/+1
|
* output unknown OIDs in dot string notationAndreas Steffen2011-03-111-4/+14
|
* fixed asn1_oid_to_string() conversionAndreas Steffen2011-03-091-15/+9
|
* defined some TCG attribute OIDsAndreas Steffen2011-03-081-1/+7
|
* support of RSAES-OAEP public keysAndreas Steffen2011-03-081-1/+1
|
* added id-RSAES-OAEP and id-pSpecified OIDsAndreas Steffen2011-03-071-0/+2
|
* defined OID_STRONGSWANAndreas Steffen2011-02-071-1/+1
|
* Added support for policyConstraints to x509 pluginMartin Willi2011-01-051-1/+1
|
* Added policyMappings OID identifierMartin Willi2011-01-051-1/+1
|
* Added CertificatePolicy OID identifierMartin Willi2011-01-051-3/+3
|
* Added conversion functions between string OIDs and its DER encodingMartin Willi2011-01-052-0/+110
|
* replaced spaces by tabsAndreas Steffen2010-12-301-1/+1
|
* removed superfluous whitespaceAndreas Steffen2010-12-031-1/+1
|
* Migrated asn1_parser_t to INIT/METHOD macrosAndreas Steffen2010-12-021-38/+28
|
* added ITA and strongSwan OIDsAndreas Steffen2010-11-171-0/+3
|
* corrected TCGID OIDAndreas Steffen2010-11-171-1/+1
|
* added qcStatements OIDAndreas Steffen2010-09-071-0/+1
|
* Added Microsoft OID for user principal name (UPN) subjectAltNamesMartin Willi2010-08-101-0/+1
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-03 03:23:47 +0000