aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials
Commit message (Collapse)AuthorAgeFilesLines
...
* Fixed common misspellings.Tobias Brunner2011-07-202-3/+3
| | | | Mostly found by 'codespell'.
* Replaced more complex iterator usages.Tobias Brunner2011-07-061-23/+13
|
* "this" removed from comments.Tobias Brunner2011-07-065-11/+4
|
* Fix a potential memleak if two threads fingerprint a credential simultaneouslyMartin Willi2011-05-021-1/+6
|
* Use proper return value for ietf_attr_t.compare.Tobias Brunner2011-04-191-1/+1
|
* Fixed output in ietf_attributes_t.get_string.Tobias Brunner2011-04-141-2/+2
|
* [hopefully] fixed pathlen problem on ARM platformsAndreas Steffen2011-02-102-3/+4
|
* Add missing AUTH_RULE for trusted self-signed peer certificatesMartin Willi2011-02-011-0/+5
|
* Verify trustchain for each candidate certificate only onceMartin Willi2011-01-051-0/+19
|
* Added an AUTH_HELPER for revocation certificatesMartin Willi2011-01-053-1/+12
|
* Added CDP support to mem_credMartin Willi2011-01-052-1/+106
|
* Slightly renamed different policyConstraints to distinguish them betterMartin Willi2011-01-052-6/+6
|
* Added support for inhibitAnyPolicy constraint to x509 pluginMartin Willi2011-01-053-0/+5
|
* Use a generic getter for all numerical X.509 constraintsMartin Willi2011-01-051-10/+16
|
* Include subject cert to temporary auth info before completing trustchainMartin Willi2011-01-051-4/+1
|
* Pass an additional anchor flag to validate() hook if we reach the root CAMartin Willi2011-01-052-6/+8
|
* Always pass auth info to validate(), use pathlen to check for user certificateMartin Willi2011-01-051-2/+1
|
* Added support for delta CRLs to x509 pluginMartin Willi2011-01-053-0/+18
|
* Simplified format of x509 CRL URI parsing/enumeratorMartin Willi2011-01-053-5/+13
|
* Added a certificate policy OID auth_cfg constraintMartin Willi2011-01-052-0/+31
|
* Added support for policyConstraints to x509 pluginMartin Willi2011-01-053-1/+17
|
* Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for ↵Martin Willi2011-01-051-1/+1
| | | | PolicyConstraints, too
* Added policyMappings support to x509 pluginMartin Willi2011-01-053-0/+21
|
* Added certificatePolicy support to x509 pluginMartin Willi2011-01-053-0/+23
|
* Added support for generating NameConstraints in x509 pluginMartin Willi2011-01-052-0/+6
|
* Added name constraint enumerator to x509 interfaceMartin Willi2011-01-051-0/+8
|
* Moved X509 pathlen constraint checking to constraints pluginMartin Willi2011-01-051-17/+0
|
* Key strength checking stores all key sizes in auth_cfg, verifies all in ↵Martin Willi2011-01-052-75/+84
| | | | complies()
* Added a flag for X509 CRLSign keyUsageMartin Willi2011-01-051-0/+2
|
* Remove x509_flag_names, flags do not work with ENUM()Martin Willi2011-01-052-33/+0
|
* Added support for CRL Issuers to x509 and OpenSSL pluginsMartin Willi2011-01-053-2/+5
|
* Added key strength constraints for RSA or ECDSA trustchainsMartin Willi2011-01-053-0/+97
|
* fixed bug in mem_cred.c:add_crl()Andreas Steffen2010-12-121-1/+1
|
* Insert certificates and secrets at the front of the lists.Tobias Brunner2010-12-031-9/+9
| | | | | As the lookup is also from front to back, certificates added later are now found first, which is useful in case of e.g. "reread cacerts".
* Function add_crl added to mem_cred_t.Tobias Brunner2010-12-032-0/+70
|
* Function added to clear secrets (but not certs) from mem_cred_t.Tobias Brunner2010-12-032-4/+20
|
* Alternative to mem_cred_t.add_cert added, which returns the certificate.Tobias Brunner2010-12-032-4/+40
| | | | If the certificate is already cached, the cached version is returned.
* Function added to mem_cred_t to add shared secret with a linked list of owners.Tobias Brunner2010-12-032-10/+33
|
* Renamed mem_cred_t clear function internally to clear_, fixes potential name ↵Martin Willi2010-10-281-3/+3
| | | | conflict
* Avoid duplicate certificates in mem_cred_t.Tobias Brunner2010-10-141-3/+13
|
* Added function to clear all credentials from mem_cred_t.Tobias Brunner2010-10-142-3/+25
|
* Fixed possible segmentation fault.Tobias Brunner2010-10-141-1/+1
|
* Added a final flag to builder registration to enumerate the actually ↵Martin Willi2010-09-032-15/+27
| | | | supported algorithms
* Added an enumerator for registered credential buildersMartin Willi2010-09-022-0/+32
|
* Migrated credential_factory to INIT/METHOD macrosMartin Willi2010-09-021-30/+22
|
* Added an AAA identity authentication config optionMartin Willi2010-08-312-0/+10
|
* Moved EAP type/code definitions to a seprate header file in libstrongswanMartin Willi2010-08-312-142/+1
|
* defined EAP-TNCAndreas Steffen2010-08-302-2/+8
|
* Added private key support to in-memory credential setMartin Willi2010-08-252-1/+77
|
* Added certificate support to in-memory credential setMartin Willi2010-08-252-2/+121
|