aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials
Commit message (Collapse)AuthorAgeFilesLines
...
* allow choice of digest algorithm in certificate generationAndreas Steffen2009-08-283-0/+6
|
* distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA ↵Martin Willi2009-08-272-10/+18
| | | | signatures
* do not flush cached encodings, keys are responsible for itMartin Willi2009-08-271-10/+4
|
* key encoding gained a cache() method, allows caching of externally created ↵Martin Willi2009-08-272-1/+40
| | | | encodings
* encoding public EC keys is not really possible without subjectPublicKeyInfoMartin Willi2009-08-261-1/+3
|
* complain about build errors in non-recursive cases onlyMartin Willi2009-08-261-2/+16
|
* added a BUILD_FROM_FD option, supporting credential parsing from stdinMartin Willi2009-08-263-1/+5
|
* started implementation of a PKI tool, currently supporting RSA|ECDSA key ↵Martin Willi2009-08-261-0/+3
| | | | generation
* updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunkMartin Willi2009-08-263-9/+9
|
* updated openssl plugin to new private/public key API, use encoder frameworkMartin Willi2009-08-261-0/+8
|
* changed get_id/get_encoding API of private/public key to use new encoding ↵Martin Willi2009-08-262-27/+32
| | | | framework
* added generic implementation helpers for private_key_t.equals/belongs_to, ↵Martin Willi2009-08-264-3/+97
| | | | public_key_t.equals
* added a seperate chache lookup, as encode() requires arguments expensive to ↵Martin Willi2009-08-262-0/+34
| | | | build
* added a facility to hand out fingerprinting/key encoding to the ↵Martin Willi2009-08-262-0/+420
| | | | pkcs1/pgp/... plugins
* enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGPMartin Willi2009-08-261-2/+2
|
* renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support ↵Martin Willi2009-08-263-4/+4
| | | | other key types
* implemented a pkcs1 plugin providing PKCS#1 key parsing buildersMartin Willi2009-08-263-0/+32
|
* show more information if building a credential failsMartin Willi2009-08-261-2/+10
|
* do not enumerate builders returning NULLMartin Willi2009-08-261-2/+8
|
* handle pluto specific certificates under CRED_CERTIFICATE, not as own ↵Martin Willi2009-08-263-4/+11
| | | | credential kind
* use a pluto specific credential builder to build pluto cert_t'sMartin Willi2009-08-262-4/+7
|
* moved PEM parsing functionality to its own pluginMartin Willi2009-08-263-5/+19
|
* OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵Tobias Brunner2009-08-141-1/+1
| | | | enums mutex/condvar/rwlock_type_t.
* support of SHA224-based certificate signaturesAndreas Steffen2009-08-052-0/+6
|
* conversion from ECDSA_WITH_SHAxxx OIDs to signature schemesAndreas Steffen2009-07-151-0/+6
|
* pluto supports ECDSA authenticationAndreas Steffen2009-06-122-3/+3
|
* created signature_scheme_from_oid() helper functionAndreas Steffen2009-06-092-1/+44
|
* pluto and scepclient use private and public key plugins of libstrongswanAndreas Steffen2009-06-096-24/+56
|
* hide credentials headers in credential_factory.hAndreas Steffen2009-05-281-3/+0
|
* removing svn keyword $Id$ from all filesTobias Brunner2009-04-3015-30/+0
|
* merged multi-auth branch back into trunkMartin Willi2009-04-142-11/+13
|
* updated DoxyfileMartin Willi2009-03-2410-11/+10
| | | | | | properly close all doxygen groups fixed remaining doxygen warnings
* using rwlock to parallel build credentialsMartin Willi2008-12-091-10/+10
|
* add support for smartcards in charon by using the ENGINE API provided by ↵Tobias Brunner2008-12-033-0/+8
| | | | OpenSSL, based on patches by Michael Roßberg.
* fixed builder_cancel macro to return NULL on failed buildMartin Willi2008-10-062-1/+15
|
* refactored credential builderMartin Willi2008-09-024-123/+66
| | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts
* loading PEM encoded public keysMartin Willi2008-06-113-0/+5
|
* ECDSA with OpenSSLTobias Brunner2008-06-102-7/+22
|
* added display of holderIssuer, holderSerial, and authorityKeyIdentifierAndreas Steffen2008-05-231-0/+28
|
* fixed the cleanup code when the credential factory fails to create a builderTobias Brunner2008-05-192-2/+42
|
* caching of ocsp responses (experimental), no crl caching yetMartin Willi2008-03-264-37/+13
|
* certificate factory can load certs from fileAndreas Steffen2008-03-256-149/+0
|
* added component BUILD_FROM_FILEAndreas Steffen2008-03-253-2/+6
|
* added ac.cAndreas Steffen2008-03-251-0/+55
|
* defined *_create_from_file() constructors in ↵Andreas Steffen2008-03-255-2/+96
| | | | libstrongswan/credentials/certificates
* added ietf group attribute support to attibute certificate factoryAndreas Steffen2008-03-213-2/+6
|
* added BUILD_SERIAL component and fixed several ac bugsAndreas Steffen2008-03-213-1/+5
|
* added VALIDATION_UNKNOWN to cert_validation_namesAndreas Steffen2008-03-211-0/+1
|
* added credential factory support for BULD_NOT_BEFORE_TIME and ↵Andreas Steffen2008-03-212-0/+6
| | | | BUILD_NOT_AFTER_TIME
* refactored openac and its attribute certificate factoryAndreas Steffen2008-03-202-0/+62
|