aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials/sets
Commit message (Collapse)AuthorAgeFilesLines
* certificate: Return signature scheme and parameters from issued_by() methodTobias Brunner2017-11-082-11/+22
| | | | | This also required some include restructuring (avoid including library.h in headers) to avoid unresolvable circular dependencies.
* Fixed some typos, courtesy of codespellTobias Brunner2017-05-261-1/+1
|
* linked-list: Change return value of find_first() and signature of its callbackTobias Brunner2017-05-261-7/+9
| | | | This avoids the unportable five pointer hack.
* Change interface for enumerator_create_filter() callbackTobias Brunner2017-05-261-101/+113
| | | | | This avoids the unportable 5 pointer hack, but requires enumerating in the callback.
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-264-54/+65
|
* mem-cred: Add methods to add/remove shared keys with unique identifiersTobias Brunner2017-02-162-6/+107
| | | | Also added is a method to enumerate the unique identifiers.
* mem-cred: Add method to remove a private key with a specific fingerprintTobias Brunner2017-02-162-2/+38
|
* Fixed in-place update of cached base and delta CRLsAndreas Steffen2016-10-301-4/+4
|
* Newer CRLs replace older versions of the CRL in the cacheAndreas Steffen2016-10-261-0/+39
|
* mem-cred: Support storing a delta CRL together with its baseTobias Brunner2016-10-111-8/+30
| | | | | | | | | | | | So far every "newer" CRL (higher serial or by date) replaced an existing "older" CRL. This meant that delta CRLs replaced an existing base CRL and that base CRLs weren't added if a delta CRL was already stored. So the base had to be re-fetched every time after a delta CRL was added. With this change one delta CRL to the latest base may be stored. A newer delta CRL will replace an existing delta CRL (but not its base, older base CRLs are removed, though). And a newer base will replace the existing base and optional delta CRL.
* auth-cfg-wrapper: Fix memory leak with hash-and-URL certificatesTobias Brunner2016-09-121-1/+1
| | | | | | | We wrap the auth-cfg object and its contents, so there is no need to get an additional reference for the enumerated certificate. Fixes a44bb9345f04 ("merged multi-auth branch back into trunk")
* mem-cred: Fix memory leak when replacing existing CRLsTobias Brunner2016-05-111-0/+1
| | | | Fixes #1442.
* mem-cred: We don't need a write lock when looking for a certificateTobias Brunner2015-08-201-1/+1
|
* mem-cred: Add a method to atomically replace all certificatesTobias Brunner2015-08-202-10/+58
|
* mem-cred: Add a method to unify certificate references, without adding itMartin Willi2015-03-032-0/+31
| | | | | In contrast to add_cert_ref(), get_cert_ref() does not add the certificate to the set, but only finds a reference to the same certificate, if found.
* cert-cache: Prevent that a cached issuer is freed too earlyTobias Brunner2014-10-241-7/+10
| | | | | | | | Previously we got no reference to the cached issuer certificate before releasing the lock of the cache line, this allowed other threads, or even the same thread if it replaces a cache line, to destroy that issuer certificate in cache() (or flush()) before get_ref() for the issuer certificate is finally called.
* windows: Provide a sched_yield() implementationMartin Willi2014-06-041-1/+0
|
* mem-cred: Replace existing equal shared keys during add_shared()Martin Willi2014-05-071-3/+56
|
* mem-cred: Replace existing equal private keys during add_key()Martin Willi2014-05-071-0/+17
|
* auth-cfg: Declare an attribute certificate helper type to exchange acertsMartin Willi2014-03-311-1/+2
|
* Add a method to replace all secrets in a mem_cred_t objectTobias Brunner2013-03-202-5/+68
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-241-1/+1
|
* Moved data structures to new collections subfolderTobias Brunner2012-10-243-3/+3
|
* Add signature schemes to auth_cfg during trustchain validationMartin Willi2012-06-122-6/+26
|
* certificate_t->issued_by takes an argument to receive signature schemeMartin Willi2012-06-121-1/+1
|
* Migrated auth_cfg_wrapper to INIT/METHOD macrosAndreas Steffen2011-09-291-20/+19
|
* Migrated cert_cache to INIT/METHOD macrosAndreas Steffen2011-09-291-28/+24
|
* Migrated ocsp_response_wrapper to INIT/METHOD macrosAndreas Steffen2011-09-291-20/+20
|
* Added an AUTH_HELPER for revocation certificatesMartin Willi2011-01-051-1/+2
|
* Added CDP support to mem_credMartin Willi2011-01-052-1/+106
|
* fixed bug in mem_cred.c:add_crl()Andreas Steffen2010-12-121-1/+1
|
* Insert certificates and secrets at the front of the lists.Tobias Brunner2010-12-031-9/+9
| | | | | As the lookup is also from front to back, certificates added later are now found first, which is useful in case of e.g. "reread cacerts".
* Function add_crl added to mem_cred_t.Tobias Brunner2010-12-032-0/+70
|
* Function added to clear secrets (but not certs) from mem_cred_t.Tobias Brunner2010-12-032-4/+20
|
* Alternative to mem_cred_t.add_cert added, which returns the certificate.Tobias Brunner2010-12-032-4/+40
| | | | If the certificate is already cached, the cached version is returned.
* Function added to mem_cred_t to add shared secret with a linked list of owners.Tobias Brunner2010-12-032-10/+33
|
* Renamed mem_cred_t clear function internally to clear_, fixes potential name ↵Martin Willi2010-10-281-3/+3
| | | | conflict
* Avoid duplicate certificates in mem_cred_t.Tobias Brunner2010-10-141-3/+13
|
* Added function to clear all credentials from mem_cred_t.Tobias Brunner2010-10-142-3/+25
|
* Fixed possible segmentation fault.Tobias Brunner2010-10-141-1/+1
|
* Added private key support to in-memory credential setMartin Willi2010-08-252-1/+77
|
* Added certificate support to in-memory credential setMartin Willi2010-08-252-2/+121
|
* Pass type of requested key in the callback credential setMartin Willi2010-08-042-2/+7
|
* Implemented a callback based credential set, currently for shared keys onlyMartin Willi2010-08-042-0/+206
|
* Implemented a generic in-memory credential set, currently for shared keys onlyMartin Willi2010-08-042-0/+283
|
* Moved credential manager to libstrongswanMartin Willi2010-07-136-0/+935