Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | certificate: Return signature scheme and parameters from issued_by() method | Tobias Brunner | 2017-11-08 | 2 | -11/+22 |
| | | | | | This also required some include restructuring (avoid including library.h in headers) to avoid unresolvable circular dependencies. | ||||
* | Fixed some typos, courtesy of codespell | Tobias Brunner | 2017-05-26 | 1 | -1/+1 |
| | |||||
* | linked-list: Change return value of find_first() and signature of its callback | Tobias Brunner | 2017-05-26 | 1 | -7/+9 |
| | | | | This avoids the unportable five pointer hack. | ||||
* | Change interface for enumerator_create_filter() callback | Tobias Brunner | 2017-05-26 | 1 | -101/+113 |
| | | | | | This avoids the unportable 5 pointer hack, but requires enumerating in the callback. | ||||
* | Migrate all enumerators to venumerate() interface change | Tobias Brunner | 2017-05-26 | 4 | -54/+65 |
| | |||||
* | mem-cred: Add methods to add/remove shared keys with unique identifiers | Tobias Brunner | 2017-02-16 | 2 | -6/+107 |
| | | | | Also added is a method to enumerate the unique identifiers. | ||||
* | mem-cred: Add method to remove a private key with a specific fingerprint | Tobias Brunner | 2017-02-16 | 2 | -2/+38 |
| | |||||
* | Fixed in-place update of cached base and delta CRLs | Andreas Steffen | 2016-10-30 | 1 | -4/+4 |
| | |||||
* | Newer CRLs replace older versions of the CRL in the cache | Andreas Steffen | 2016-10-26 | 1 | -0/+39 |
| | |||||
* | mem-cred: Support storing a delta CRL together with its base | Tobias Brunner | 2016-10-11 | 1 | -8/+30 |
| | | | | | | | | | | | | So far every "newer" CRL (higher serial or by date) replaced an existing "older" CRL. This meant that delta CRLs replaced an existing base CRL and that base CRLs weren't added if a delta CRL was already stored. So the base had to be re-fetched every time after a delta CRL was added. With this change one delta CRL to the latest base may be stored. A newer delta CRL will replace an existing delta CRL (but not its base, older base CRLs are removed, though). And a newer base will replace the existing base and optional delta CRL. | ||||
* | auth-cfg-wrapper: Fix memory leak with hash-and-URL certificates | Tobias Brunner | 2016-09-12 | 1 | -1/+1 |
| | | | | | | | We wrap the auth-cfg object and its contents, so there is no need to get an additional reference for the enumerated certificate. Fixes a44bb9345f04 ("merged multi-auth branch back into trunk") | ||||
* | mem-cred: Fix memory leak when replacing existing CRLs | Tobias Brunner | 2016-05-11 | 1 | -0/+1 |
| | | | | Fixes #1442. | ||||
* | mem-cred: We don't need a write lock when looking for a certificate | Tobias Brunner | 2015-08-20 | 1 | -1/+1 |
| | |||||
* | mem-cred: Add a method to atomically replace all certificates | Tobias Brunner | 2015-08-20 | 2 | -10/+58 |
| | |||||
* | mem-cred: Add a method to unify certificate references, without adding it | Martin Willi | 2015-03-03 | 2 | -0/+31 |
| | | | | | In contrast to add_cert_ref(), get_cert_ref() does not add the certificate to the set, but only finds a reference to the same certificate, if found. | ||||
* | cert-cache: Prevent that a cached issuer is freed too early | Tobias Brunner | 2014-10-24 | 1 | -7/+10 |
| | | | | | | | | Previously we got no reference to the cached issuer certificate before releasing the lock of the cache line, this allowed other threads, or even the same thread if it replaces a cache line, to destroy that issuer certificate in cache() (or flush()) before get_ref() for the issuer certificate is finally called. | ||||
* | windows: Provide a sched_yield() implementation | Martin Willi | 2014-06-04 | 1 | -1/+0 |
| | |||||
* | mem-cred: Replace existing equal shared keys during add_shared() | Martin Willi | 2014-05-07 | 1 | -3/+56 |
| | |||||
* | mem-cred: Replace existing equal private keys during add_key() | Martin Willi | 2014-05-07 | 1 | -0/+17 |
| | |||||
* | auth-cfg: Declare an attribute certificate helper type to exchange acerts | Martin Willi | 2014-03-31 | 1 | -1/+2 |
| | |||||
* | Add a method to replace all secrets in a mem_cred_t object | Tobias Brunner | 2013-03-20 | 2 | -5/+68 |
| | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Moved data structures to new collections subfolder | Tobias Brunner | 2012-10-24 | 3 | -3/+3 |
| | |||||
* | Add signature schemes to auth_cfg during trustchain validation | Martin Willi | 2012-06-12 | 2 | -6/+26 |
| | |||||
* | certificate_t->issued_by takes an argument to receive signature scheme | Martin Willi | 2012-06-12 | 1 | -1/+1 |
| | |||||
* | Migrated auth_cfg_wrapper to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -20/+19 |
| | |||||
* | Migrated cert_cache to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -28/+24 |
| | |||||
* | Migrated ocsp_response_wrapper to INIT/METHOD macros | Andreas Steffen | 2011-09-29 | 1 | -20/+20 |
| | |||||
* | Added an AUTH_HELPER for revocation certificates | Martin Willi | 2011-01-05 | 1 | -1/+2 |
| | |||||
* | Added CDP support to mem_cred | Martin Willi | 2011-01-05 | 2 | -1/+106 |
| | |||||
* | fixed bug in mem_cred.c:add_crl() | Andreas Steffen | 2010-12-12 | 1 | -1/+1 |
| | |||||
* | Insert certificates and secrets at the front of the lists. | Tobias Brunner | 2010-12-03 | 1 | -9/+9 |
| | | | | | As the lookup is also from front to back, certificates added later are now found first, which is useful in case of e.g. "reread cacerts". | ||||
* | Function add_crl added to mem_cred_t. | Tobias Brunner | 2010-12-03 | 2 | -0/+70 |
| | |||||
* | Function added to clear secrets (but not certs) from mem_cred_t. | Tobias Brunner | 2010-12-03 | 2 | -4/+20 |
| | |||||
* | Alternative to mem_cred_t.add_cert added, which returns the certificate. | Tobias Brunner | 2010-12-03 | 2 | -4/+40 |
| | | | | If the certificate is already cached, the cached version is returned. | ||||
* | Function added to mem_cred_t to add shared secret with a linked list of owners. | Tobias Brunner | 2010-12-03 | 2 | -10/+33 |
| | |||||
* | Renamed mem_cred_t clear function internally to clear_, fixes potential name ↵ | Martin Willi | 2010-10-28 | 1 | -3/+3 |
| | | | | conflict | ||||
* | Avoid duplicate certificates in mem_cred_t. | Tobias Brunner | 2010-10-14 | 1 | -3/+13 |
| | |||||
* | Added function to clear all credentials from mem_cred_t. | Tobias Brunner | 2010-10-14 | 2 | -3/+25 |
| | |||||
* | Fixed possible segmentation fault. | Tobias Brunner | 2010-10-14 | 1 | -1/+1 |
| | |||||
* | Added private key support to in-memory credential set | Martin Willi | 2010-08-25 | 2 | -1/+77 |
| | |||||
* | Added certificate support to in-memory credential set | Martin Willi | 2010-08-25 | 2 | -2/+121 |
| | |||||
* | Pass type of requested key in the callback credential set | Martin Willi | 2010-08-04 | 2 | -2/+7 |
| | |||||
* | Implemented a callback based credential set, currently for shared keys only | Martin Willi | 2010-08-04 | 2 | -0/+206 |
| | |||||
* | Implemented a generic in-memory credential set, currently for shared keys only | Martin Willi | 2010-08-04 | 2 | -0/+283 |
| | |||||
* | Moved credential manager to libstrongswan | Martin Willi | 2010-07-13 | 6 | -0/+935 |