aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials
Commit message (Collapse)AuthorAgeFilesLines
...
* Fix use of snprintf() in IETF attributes to string conversionMartin Willi2010-07-281-2/+11
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-132-3/+28
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-137-150/+149
| | | | encoding
* Moved keys/key_encoding.[ch] to cred_encoding.[ch]Martin Willi2010-07-134-3/+3
|
* Fixed doxygen group of cert_validator interfaceMartin Willi2010-07-131-1/+1
|
* Moved CRL/OCSP checking to a dedicated plugin called revocationMartin Willi2010-07-131-531/+0
|
* Made some useful methods in the credential manager publicMartin Willi2010-07-132-15/+70
|
* Moved X509 addrBlock validation to a separate addrblock pluginMartin Willi2010-07-132-59/+2
|
* Added a certificate validation hook to the credential managerMartin Willi2010-07-133-0/+103
|
* Migrated credential manager to INIT/METHOD macrosMartin Willi2010-07-131-161/+127
|
* Moved credential manager to libstrongswanMartin Willi2010-07-1312-0/+4011
|
* Charon uses a generic trunstchain length limit, not only for X509 certificatesMartin Willi2010-07-131-1/+0
|
* Avoid relocking while enumerator is aliveMartin Willi2010-07-061-9/+10
|
* Added support for CRL generation to x509 pluginMartin Willi2010-05-212-0/+3
|
* Removed is_newer() from certificate_t, obsoleting all implementationsMartin Willi2010-05-211-7/+0
|
* Added generic implementations for crl_is_newer/certificate_is_newerMartin Willi2010-05-214-1/+68
|
* Adding DBG_LIB to all calls of libstrongswan's version of DBG*.Tobias Brunner2010-04-061-1/+1
|
* fixed typoAndreas Steffen2010-04-041-1/+1
|
* EAP-MSCHAPv2 can use stored NT hashes in addition to plaintext passwordsMartin Willi2010-03-171-0/+2
|
* Support TLS client authentication Extended Key Usage in x509 generationMartin Willi2010-01-142-9/+13
|
* ipsec pki --self|issue supports --pathlen option setting a path length ↵Andreas Steffen2009-12-312-0/+3
| | | | constraint
* Using the thread wrapper in charon, libstrongswan and their plugins.Tobias Brunner2009-12-231-7/+7
|
* Separated the public interfaces of the threading primitives.Tobias Brunner2009-12-232-2/+2
|
* Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵Tobias Brunner2009-12-232-2/+2
| | | | primitives (and utils/mutex.h is now threading.h).
* X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate ↵Andreas Steffen2009-12-221-6/+8
| | | | extension
* added create_ipAddrBlock_enumerator() method to x509_tAndreas Steffen2009-12-221-0/+7
|
* list v3 or v4 fingerprintAndreas Steffen2009-11-081-0/+7
|
* implemented path length constraint checkinf for IKEv2Andreas Steffen2009-11-041-1/+2
|
* implemented parsing of pathLenConstraintAndreas Steffen2009-11-041-0/+9
|
* Fixed all doxygen warningsMartin Willi2009-10-223-5/+5
|
* moved .gitignore for poolAndreas Steffen2009-10-151-2/+0
|
* ipsec pki --issue suports --flag authServer optionAndreas Steffen2009-10-052-1/+4
|
* pluto now uses x509 plugin for attribute certificate handlingAndreas Steffen2009-10-055-6/+640
|
* added get_subjectKeyIdentifier() to x509_tAndreas Steffen2009-09-261-0/+7
|
* Public/Private keys implement a has_fingerprint() methodMartin Willi2009-09-215-0/+74
|
* backwards compatibility with SQL formatAndreas Steffen2009-09-182-3/+3
|
* Added basic support for PGP certificates (no trust relationships yet)Martin Willi2009-09-151-0/+39
|
* extended hasher_signature_algorithm_to_oid() functionAndreas Steffen2009-09-131-0/+1
|
* removed req.hAndreas Steffen2009-09-131-105/+0
|
* support of PKCS#10 certificate request parsingAndreas Steffen2009-09-134-1/+166
|
* x509 plugin supports encoding of OCSP AuthorityInfo AccessLocationsMartin Willi2009-09-112-0/+3
|
* x509 plugin supports encoding of CRL distribution pointsMartin Willi2009-09-112-0/+3
|
* Replaced builder_t objects by simple builder_function_t functionsMartin Willi2009-09-104-189/+35
|
* x509 certificates support encoding of email, DNS and IP subjectAltNamesMartin Willi2009-09-083-8/+8
|
* replaces four spaces by tabs, where appropriateMartin Willi2009-09-043-14/+14
|
* removed trailing spaces ([[:space:]]+$)Martin Willi2009-09-0416-128/+128
|
* fixed certificate_t enum namesMartin Willi2009-09-011-1/+0
|
* changed prefix of crl_reason_t values from CRL_ to CRL_REASON_Andreas Steffen2009-08-312-9/+9
|
* allow choice of digest algorithm in certificate generationAndreas Steffen2009-08-283-0/+6
|
* distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA ↵Martin Willi2009-08-272-10/+18
| | | | signatures