aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials
Commit message (Collapse)AuthorAgeFilesLines
...
* ipsec pki --self|issue supports --pathlen option setting a path length ↵Andreas Steffen2009-12-312-0/+3
| | | | constraint
* Using the thread wrapper in charon, libstrongswan and their plugins.Tobias Brunner2009-12-231-7/+7
|
* Separated the public interfaces of the threading primitives.Tobias Brunner2009-12-232-2/+2
|
* Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵Tobias Brunner2009-12-232-2/+2
| | | | primitives (and utils/mutex.h is now threading.h).
* X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate ↵Andreas Steffen2009-12-221-6/+8
| | | | extension
* added create_ipAddrBlock_enumerator() method to x509_tAndreas Steffen2009-12-221-0/+7
|
* list v3 or v4 fingerprintAndreas Steffen2009-11-081-0/+7
|
* implemented path length constraint checkinf for IKEv2Andreas Steffen2009-11-041-1/+2
|
* implemented parsing of pathLenConstraintAndreas Steffen2009-11-041-0/+9
|
* Fixed all doxygen warningsMartin Willi2009-10-223-5/+5
|
* moved .gitignore for poolAndreas Steffen2009-10-151-2/+0
|
* ipsec pki --issue suports --flag authServer optionAndreas Steffen2009-10-052-1/+4
|
* pluto now uses x509 plugin for attribute certificate handlingAndreas Steffen2009-10-055-6/+640
|
* added get_subjectKeyIdentifier() to x509_tAndreas Steffen2009-09-261-0/+7
|
* Public/Private keys implement a has_fingerprint() methodMartin Willi2009-09-215-0/+74
|
* backwards compatibility with SQL formatAndreas Steffen2009-09-182-3/+3
|
* Added basic support for PGP certificates (no trust relationships yet)Martin Willi2009-09-151-0/+39
|
* extended hasher_signature_algorithm_to_oid() functionAndreas Steffen2009-09-131-0/+1
|
* removed req.hAndreas Steffen2009-09-131-105/+0
|
* support of PKCS#10 certificate request parsingAndreas Steffen2009-09-134-1/+166
|
* x509 plugin supports encoding of OCSP AuthorityInfo AccessLocationsMartin Willi2009-09-112-0/+3
|
* x509 plugin supports encoding of CRL distribution pointsMartin Willi2009-09-112-0/+3
|
* Replaced builder_t objects by simple builder_function_t functionsMartin Willi2009-09-104-189/+35
|
* x509 certificates support encoding of email, DNS and IP subjectAltNamesMartin Willi2009-09-083-8/+8
|
* replaces four spaces by tabs, where appropriateMartin Willi2009-09-043-14/+14
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-0416-128/+128
|
* fixed certificate_t enum namesMartin Willi2009-09-011-1/+0
|
* changed prefix of crl_reason_t values from CRL_ to CRL_REASON_Andreas Steffen2009-08-312-9/+9
|
* allow choice of digest algorithm in certificate generationAndreas Steffen2009-08-283-0/+6
|
* distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA ↵Martin Willi2009-08-272-10/+18
| | | | signatures
* do not flush cached encodings, keys are responsible for itMartin Willi2009-08-271-10/+4
|
* key encoding gained a cache() method, allows caching of externally created ↵Martin Willi2009-08-272-1/+40
| | | | encodings
* encoding public EC keys is not really possible without subjectPublicKeyInfoMartin Willi2009-08-261-1/+3
|
* complain about build errors in non-recursive cases onlyMartin Willi2009-08-261-2/+16
|
* added a BUILD_FROM_FD option, supporting credential parsing from stdinMartin Willi2009-08-263-1/+5
|
* started implementation of a PKI tool, currently supporting RSA|ECDSA key ↵Martin Willi2009-08-261-0/+3
| | | | generation
* updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunkMartin Willi2009-08-263-9/+9
|
* updated openssl plugin to new private/public key API, use encoder frameworkMartin Willi2009-08-261-0/+8
|
* changed get_id/get_encoding API of private/public key to use new encoding ↵Martin Willi2009-08-262-27/+32
| | | | framework
* added generic implementation helpers for private_key_t.equals/belongs_to, ↵Martin Willi2009-08-264-3/+97
| | | | public_key_t.equals
* added a seperate chache lookup, as encode() requires arguments expensive to ↵Martin Willi2009-08-262-0/+34
| | | | build
* added a facility to hand out fingerprinting/key encoding to the ↵Martin Willi2009-08-262-0/+420
| | | | pkcs1/pgp/... plugins
* enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGPMartin Willi2009-08-261-2/+2
|
* renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support ↵Martin Willi2009-08-263-4/+4
| | | | other key types
* implemented a pkcs1 plugin providing PKCS#1 key parsing buildersMartin Willi2009-08-263-0/+32
|
* show more information if building a credential failsMartin Willi2009-08-261-2/+10
|
* do not enumerate builders returning NULLMartin Willi2009-08-261-2/+8
|
* handle pluto specific certificates under CRED_CERTIFICATE, not as own ↵Martin Willi2009-08-263-4/+11
| | | | credential kind
* use a pluto specific credential builder to build pluto cert_t'sMartin Willi2009-08-262-4/+7
|
* moved PEM parsing functionality to its own pluginMartin Willi2009-08-263-5/+19
|