aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials/credential_manager.c
Commit message (Collapse)AuthorAgeFilesLines
* Add missing AUTH_RULE for trusted self-signed peer certificatesMartin Willi2011-02-011-0/+5
|
* Verify trustchain for each candidate certificate only onceMartin Willi2011-01-051-0/+19
|
* Include subject cert to temporary auth info before completing trustchainMartin Willi2011-01-051-4/+1
|
* Pass an additional anchor flag to validate() hook if we reach the root CAMartin Willi2011-01-051-4/+5
|
* Always pass auth info to validate(), use pathlen to check for user certificateMartin Willi2011-01-051-2/+1
|
* Moved X509 pathlen constraint checking to constraints pluginMartin Willi2011-01-051-17/+0
|
* Key strength checking stores all key sizes in auth_cfg, verifies all in ↵Martin Willi2011-01-051-43/+16
| | | | complies()
* Added key strength constraints for RSA or ECDSA trustchainsMartin Willi2011-01-051-0/+65
|
* Build a trustchain even if no trust anchor is givenMartin Willi2010-08-231-14/+23
|
* Fixed compiler warnings.Tobias Brunner2010-08-031-2/+4
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-131-1/+1
| | | | encoding
* Moved CRL/OCSP checking to a dedicated plugin called revocationMartin Willi2010-07-131-531/+0
|
* Made some useful methods in the credential manager publicMartin Willi2010-07-131-15/+18
|
* Moved X509 addrBlock validation to a separate addrblock pluginMartin Willi2010-07-131-59/+0
|
* Added a certificate validation hook to the credential managerMartin Willi2010-07-131-0/+39
|
* Migrated credential manager to INIT/METHOD macrosMartin Willi2010-07-131-161/+127
|
* Moved credential manager to libstrongswanMartin Willi2010-07-131-0/+1679