| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | credential-manager: Check cache queue when destroying trusted certificate ↵ | Tobias Brunner | 2016-03-10 | 1 | -1/+2 |
| | | | | | | | | | | | enumerator We already do this in the trusted public key enumerator (which internally uses the trusted certificate enumerator) but should do so also when this enumerator is used directly (since the public key enumerator has the read lock the additional call will just be skipped there). | ||||
| * | credential-manager: Make online revocation checks optional for public key ↵ | Tobias Brunner | 2016-03-10 | 1 | -2/+3 |
| | | | | | enumerator | ||||
| * | credential-manager: Store BLISS key strength in auth config | Tobias Brunner | 2015-03-04 | 1 | -0/+3 |
| | | |||||
| * | credmgr: Fix copy and paste error in add_validator | Thomas Egerer | 2014-08-29 | 1 | -1/+1 |
| | | | | | | | | | | This won't hurt as long as sets and validators are of the same class. But as soon as one of the object's class is changed this will cause either a compile error (best option), or result (most likely) in a crash. Signed-off-by: Thomas Egerer <thomas.egerer@secunet.com> | ||||
| * | lib: All settings use configured namespace | Tobias Brunner | 2014-02-12 | 1 | -1/+1 |
| | | |||||
| * | credmgr: introduce a hook function to catch trust chain validation errors | Martin Willi | 2013-07-18 | 1 | -6/+39 |
| | | |||||
| * | credmgr: stop querying for secrets once we get a perfect match | Martin Willi | 2013-07-18 | 1 | -0/+4 |
| | | |||||
| * | credmgr: don't use pointers for id_match_t enum values | Martin Willi | 2013-07-18 | 1 | -2/+2 |
| | | |||||
| * | Merge branch 'multi-cert' | Martin Willi | 2013-03-01 | 1 | -1/+53 |
| |\ | | | | | | | | | Allows the configuration of multiple certificates in leftcert, and select the correct certificate to use based on the received certificate requests. | ||||
| | * | After merging the used trustchain with config, move used certificate to front | Martin Willi | 2013-01-18 | 1 | -0/+24 |
| | | | |||||
| | * | Try to build a trustchain for all configured certificates before enforcing one | Martin Willi | 2013-01-18 | 1 | -1/+29 |
| | | | | | | | | | | | This enables the daemon to select from multiple configured certificates by building trustchains against the received certificate requests. | ||||
| * | | Add a cert_validator hook allowing plugins to provide custom lifetime checking | Martin Willi | 2013-02-19 | 1 | -10/+48 |
| | | | |||||
| * | | Make cert_validator_t.validate optional to implement | Martin Willi | 2013-02-19 | 1 | -0/+4 |
| |/ | |||||
| * | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | | |||||
| * | Add an option to disable libstrongswan certificate caching | Martin Willi | 2012-07-09 | 1 | -18/+29 |
| | | |||||
| * | Add signature schemes to auth_cfg during trustchain validation | Martin Willi | 2012-06-12 | 1 | -10/+14 |
| | | |||||
| * | Merge branch 'ikev1-clean' into ikev1-master | Martin Willi | 2012-03-20 | 1 | -39/+102 |
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins. | ||||
| | * | Accept NULL auth_cfg_t passed to credential_manager_t.get_private() | Martin Willi | 2012-03-20 | 1 | -26/+32 |
| | | | |||||
| | * | Added a flag to register local credential sets exclusively, disabling all others | Martin Willi | 2012-03-20 | 1 | -15/+67 |
| | | | |||||
| | * | Free list after removing the last local credential set, fixes a leak report | Martin Willi | 2012-03-20 | 1 | -0/+5 |
| | | | |||||
| * | | Some documentation corrections | Adrian-Ken Rueegsegger | 2012-01-12 | 1 | -2/+2 |
| |/ | |||||
| * | Add missing AUTH_RULE for trusted self-signed peer certificates | Martin Willi | 2011-02-01 | 1 | -0/+5 |
| | | |||||
| * | Verify trustchain for each candidate certificate only once | Martin Willi | 2011-01-05 | 1 | -0/+19 |
| | | |||||
| * | Include subject cert to temporary auth info before completing trustchain | Martin Willi | 2011-01-05 | 1 | -4/+1 |
| | | |||||
| * | Pass an additional anchor flag to validate() hook if we reach the root CA | Martin Willi | 2011-01-05 | 1 | -4/+5 |
| | | |||||
| * | Always pass auth info to validate(), use pathlen to check for user certificate | Martin Willi | 2011-01-05 | 1 | -2/+1 |
| | | |||||
| * | Moved X509 pathlen constraint checking to constraints plugin | Martin Willi | 2011-01-05 | 1 | -17/+0 |
| | | |||||
| * | Key strength checking stores all key sizes in auth_cfg, verifies all in ↵ | Martin Willi | 2011-01-05 | 1 | -43/+16 |
| | | | | | complies() | ||||
| * | Added key strength constraints for RSA or ECDSA trustchains | Martin Willi | 2011-01-05 | 1 | -0/+65 |
| | | |||||
| * | Build a trustchain even if no trust anchor is given | Martin Willi | 2010-08-23 | 1 | -14/+23 |
| | | |||||
| * | Fixed compiler warnings. | Tobias Brunner | 2010-08-03 | 1 | -2/+4 |
| | | |||||
| * | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 1 | -1/+1 |
| | | | | | encoding | ||||
| * | Moved CRL/OCSP checking to a dedicated plugin called revocation | Martin Willi | 2010-07-13 | 1 | -531/+0 |
| | | |||||
| * | Made some useful methods in the credential manager public | Martin Willi | 2010-07-13 | 1 | -15/+18 |
| | | |||||
| * | Moved X509 addrBlock validation to a separate addrblock plugin | Martin Willi | 2010-07-13 | 1 | -59/+0 |
| | | |||||
| * | Added a certificate validation hook to the credential manager | Martin Willi | 2010-07-13 | 1 | -0/+39 |
| | | |||||
| * | Migrated credential manager to INIT/METHOD macros | Martin Willi | 2010-07-13 | 1 | -161/+127 |
| | | |||||
| * | Moved credential manager to libstrongswan | Martin Willi | 2010-07-13 | 1 | -0/+1679 |
 |
index : tteras/strongswan | |
| tteras' strongSwan tree | gitolite |
| aboutsummaryrefslogtreecommitdiffstats |