tteras/strongswan - tteras' strongSwan tree

	Commit message (Expand)	Author	Age	Files	Lines
*	credential-manager: Check cache queue when destroying trusted certificate enu...	Tobias Brunner	2016-03-10	1	-1/+2
*	credential-manager: Make online revocation checks optional for public key enu...	Tobias Brunner	2016-03-10	1	-2/+3
*	credential-manager: Store BLISS key strength in auth config	Tobias Brunner	2015-03-04	1	-0/+3
*	credmgr: Fix copy and paste error in add_validator	Thomas Egerer	2014-08-29	1	-1/+1
*	lib: All settings use configured namespace	Tobias Brunner	2014-02-12	1	-1/+1
*	credmgr: introduce a hook function to catch trust chain validation errors	Martin Willi	2013-07-18	1	-6/+39
*	credmgr: stop querying for secrets once we get a perfect match	Martin Willi	2013-07-18	1	-0/+4
*	credmgr: don't use pointers for id_match_t enum values	Martin Willi	2013-07-18	1	-2/+2
*	Merge branch 'multi-cert'	Martin Willi	2013-03-01	1	-1/+53
\|\
\| *	After merging the used trustchain with config, move used certificate to front	Martin Willi	2013-01-18	1	-0/+24
\| *	Try to build a trustchain for all configured certificates before enforcing one	Martin Willi	2013-01-18	1	-1/+29
* \|	Add a cert_validator hook allowing plugins to provide custom lifetime checking	Martin Willi	2013-02-19	1	-10/+48
* \|	Make cert_validator_t.validate optional to implement	Martin Willi	2013-02-19	1	-0/+4
\|/
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	1	-1/+1
*	Add an option to disable libstrongswan certificate caching	Martin Willi	2012-07-09	1	-18/+29
*	Add signature schemes to auth_cfg during trustchain validation	Martin Willi	2012-06-12	1	-10/+14
*	Merge branch 'ikev1-clean' into ikev1-master	Martin Willi	2012-03-20	1	-39/+102
\|\
\| *	Accept NULL auth_cfg_t passed to credential_manager_t.get_private()	Martin Willi	2012-03-20	1	-26/+32
\| *	Added a flag to register local credential sets exclusively, disabling all others	Martin Willi	2012-03-20	1	-15/+67
\| *	Free list after removing the last local credential set, fixes a leak report	Martin Willi	2012-03-20	1	-0/+5
* \|	Some documentation corrections	Adrian-Ken Rueegsegger	2012-01-12	1	-2/+2
\|/
*	Add missing AUTH_RULE for trusted self-signed peer certificates	Martin Willi	2011-02-01	1	-0/+5
*	Verify trustchain for each candidate certificate only once	Martin Willi	2011-01-05	1	-0/+19
*	Include subject cert to temporary auth info before completing trustchain	Martin Willi	2011-01-05	1	-4/+1
*	Pass an additional anchor flag to validate() hook if we reach the root CA	Martin Willi	2011-01-05	1	-4/+5
*	Always pass auth info to validate(), use pathlen to check for user certificate	Martin Willi	2011-01-05	1	-2/+1
*	Moved X509 pathlen constraint checking to constraints plugin	Martin Willi	2011-01-05	1	-17/+0
*	Key strength checking stores all key sizes in auth_cfg, verifies all in compl...	Martin Willi	2011-01-05	1	-43/+16
*	Added key strength constraints for RSA or ECDSA trustchains	Martin Willi	2011-01-05	1	-0/+65
*	Build a trustchain even if no trust anchor is given	Martin Willi	2010-08-23	1	-14/+23
*	Fixed compiler warnings.	Tobias Brunner	2010-08-03	1	-2/+4
*	Renamed key_encod{ing,der}_t and constants, prepare for generic credential en...	Martin Willi	2010-07-13	1	-1/+1
*	Moved CRL/OCSP checking to a dedicated plugin called revocation	Martin Willi	2010-07-13	1	-531/+0
*	Made some useful methods in the credential manager public	Martin Willi	2010-07-13	1	-15/+18
*	Moved X509 addrBlock validation to a separate addrblock plugin	Martin Willi	2010-07-13	1	-59/+0
*	Added a certificate validation hook to the credential manager	Martin Willi	2010-07-13	1	-0/+39
*	Migrated credential manager to INIT/METHOD macros	Martin Willi	2010-07-13	1	-161/+127
*	Moved credential manager to libstrongswan	Martin Willi	2010-07-13	1	-0/+1679