index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libstrongswan
/
credentials
Commit message (
Collapse
)
Author
Age
Files
Lines
...
*
Support different encoding types in certificate.get_encoding()
Martin Willi
2010-07-13
2
-3
/
+28
|
*
Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵
Martin Willi
2010-07-13
7
-150
/
+149
|
|
|
|
encoding
*
Moved keys/key_encoding.[ch] to cred_encoding.[ch]
Martin Willi
2010-07-13
4
-3
/
+3
|
*
Fixed doxygen group of cert_validator interface
Martin Willi
2010-07-13
1
-1
/
+1
|
*
Moved CRL/OCSP checking to a dedicated plugin called revocation
Martin Willi
2010-07-13
1
-531
/
+0
|
*
Made some useful methods in the credential manager public
Martin Willi
2010-07-13
2
-15
/
+70
|
*
Moved X509 addrBlock validation to a separate addrblock plugin
Martin Willi
2010-07-13
2
-59
/
+2
|
*
Added a certificate validation hook to the credential manager
Martin Willi
2010-07-13
3
-0
/
+103
|
*
Migrated credential manager to INIT/METHOD macros
Martin Willi
2010-07-13
1
-161
/
+127
|
*
Moved credential manager to libstrongswan
Martin Willi
2010-07-13
12
-0
/
+4011
|
*
Charon uses a generic trunstchain length limit, not only for X509 certificates
Martin Willi
2010-07-13
1
-1
/
+0
|
*
Avoid relocking while enumerator is alive
Martin Willi
2010-07-06
1
-9
/
+10
|
*
Added support for CRL generation to x509 plugin
Martin Willi
2010-05-21
2
-0
/
+3
|
*
Removed is_newer() from certificate_t, obsoleting all implementations
Martin Willi
2010-05-21
1
-7
/
+0
|
*
Added generic implementations for crl_is_newer/certificate_is_newer
Martin Willi
2010-05-21
4
-1
/
+68
|
*
Adding DBG_LIB to all calls of libstrongswan's version of DBG*.
Tobias Brunner
2010-04-06
1
-1
/
+1
|
*
fixed typo
Andreas Steffen
2010-04-04
1
-1
/
+1
|
*
EAP-MSCHAPv2 can use stored NT hashes in addition to plaintext passwords
Martin Willi
2010-03-17
1
-0
/
+2
|
*
Support TLS client authentication Extended Key Usage in x509 generation
Martin Willi
2010-01-14
2
-9
/
+13
|
*
ipsec pki --self|issue supports --pathlen option setting a path length ↵
Andreas Steffen
2009-12-31
2
-0
/
+3
|
|
|
|
constraint
*
Using the thread wrapper in charon, libstrongswan and their plugins.
Tobias Brunner
2009-12-23
1
-7
/
+7
|
*
Separated the public interfaces of the threading primitives.
Tobias Brunner
2009-12-23
2
-2
/
+2
|
*
Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵
Tobias Brunner
2009-12-23
2
-2
/
+2
|
|
|
|
primitives (and utils/mutex.h is now threading.h).
*
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate ↵
Andreas Steffen
2009-12-22
1
-6
/
+8
|
|
|
|
extension
*
added create_ipAddrBlock_enumerator() method to x509_t
Andreas Steffen
2009-12-22
1
-0
/
+7
|
*
list v3 or v4 fingerprint
Andreas Steffen
2009-11-08
1
-0
/
+7
|
*
implemented path length constraint checkinf for IKEv2
Andreas Steffen
2009-11-04
1
-1
/
+2
|
*
implemented parsing of pathLenConstraint
Andreas Steffen
2009-11-04
1
-0
/
+9
|
*
Fixed all doxygen warnings
Martin Willi
2009-10-22
3
-5
/
+5
|
*
moved .gitignore for pool
Andreas Steffen
2009-10-15
1
-2
/
+0
|
*
ipsec pki --issue suports --flag authServer option
Andreas Steffen
2009-10-05
2
-1
/
+4
|
*
pluto now uses x509 plugin for attribute certificate handling
Andreas Steffen
2009-10-05
5
-6
/
+640
|
*
added get_subjectKeyIdentifier() to x509_t
Andreas Steffen
2009-09-26
1
-0
/
+7
|
*
Public/Private keys implement a has_fingerprint() method
Martin Willi
2009-09-21
5
-0
/
+74
|
*
backwards compatibility with SQL format
Andreas Steffen
2009-09-18
2
-3
/
+3
|
*
Added basic support for PGP certificates (no trust relationships yet)
Martin Willi
2009-09-15
1
-0
/
+39
|
*
extended hasher_signature_algorithm_to_oid() function
Andreas Steffen
2009-09-13
1
-0
/
+1
|
*
removed req.h
Andreas Steffen
2009-09-13
1
-105
/
+0
|
*
support of PKCS#10 certificate request parsing
Andreas Steffen
2009-09-13
4
-1
/
+166
|
*
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
Martin Willi
2009-09-11
2
-0
/
+3
|
*
x509 plugin supports encoding of CRL distribution points
Martin Willi
2009-09-11
2
-0
/
+3
|
*
Replaced builder_t objects by simple builder_function_t functions
Martin Willi
2009-09-10
4
-189
/
+35
|
*
x509 certificates support encoding of email, DNS and IP subjectAltNames
Martin Willi
2009-09-08
3
-8
/
+8
|
*
replaces four spaces by tabs, where appropriate
Martin Willi
2009-09-04
3
-14
/
+14
|
*
removed trailing spaces ([[:space:]]+$)
Martin Willi
2009-09-04
16
-128
/
+128
|
*
fixed certificate_t enum names
Martin Willi
2009-09-01
1
-1
/
+0
|
*
changed prefix of crl_reason_t values from CRL_ to CRL_REASON_
Andreas Steffen
2009-08-31
2
-9
/
+9
|
*
allow choice of digest algorithm in certificate generation
Andreas Steffen
2009-08-28
3
-0
/
+6
|
*
distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA ↵
Martin Willi
2009-08-27
2
-10
/
+18
|
|
|
|
signatures
*
do not flush cached encodings, keys are responsible for it
Martin Willi
2009-08-27
1
-10
/
+4
|
[prev]
[next]