aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials
Commit message (Expand)AuthorAgeFilesLines
* mem-cred: Fix memory leak when replacing existing CRLsTobias Brunner2016-05-111-0/+1
* Use standard unsigned integer typesAndreas Steffen2016-03-243-7/+7
* Fix some Doxygen issuesTobias Brunner2016-03-111-5/+5
* auth-cfg: Add a rule to suspend certificate validation constraintsTobias Brunner2016-03-102-0/+18
* credential-manager: Check cache queue when destroying trusted certificate enu...Tobias Brunner2016-03-101-1/+2
* credential-manager: Make online revocation checks optional for public key enu...Tobias Brunner2016-03-102-3/+9
* auth-cfg: Make IKE signature schemes configurableTobias Brunner2016-03-042-37/+63
* ikev2: Diversify signature scheme ruleThomas Egerer2016-03-042-30/+68
* Apply pubkey and signature constraints in vici pluginAndreas Steffen2015-12-172-0/+117
* Refactored certificate management for the vici and stroke interfaces5.4.0dr1Andreas Steffen2015-12-122-30/+130
* Changed some certificate_type_names and added x509_flag_namesAndreas Steffen2015-12-113-4/+36
* Print OCSP single responsesAndreas Steffen2015-12-112-3/+82
* Standardized printing of certificate informationAndreas Steffen2015-12-112-0/+651
* auth-cfg: Prefer merged rules over existing ones when moving themTobias Brunner2015-11-121-3/+3
* Explicitly mention SHA2 algorithm in BLISS OIDs and signature schemesAndreas Steffen2015-11-062-28/+28
* Support BLISS signatures with SHA-3 hashAndreas Steffen2015-11-032-4/+28
* auth-cfg: Don't enforce EAP_RADIUSTobias Brunner2015-08-211-1/+2
* mem-cred: We don't need a write lock when looking for a certificateTobias Brunner2015-08-201-1/+1
* mem-cred: Add a method to atomically replace all certificatesTobias Brunner2015-08-202-10/+58
* auth-cfg: Don't enforce EAP_DYNAMICTobias Brunner2015-08-201-1/+2
* auth-cfg: Matching one CA should be enough, similar to peer certificatesTobias Brunner2015-08-171-15/+20
* Fixed some typosTobias Brunner2015-08-132-2/+2
* credential-manager: Store BLISS key strength in auth configTobias Brunner2015-03-041-0/+3
* auth-cfg: Add BLISS key strength constraintTobias Brunner2015-03-042-21/+43
* public-key: Add helper to determine acceptable signature schemes for keysTobias Brunner2015-03-042-0/+78
* public-key: Add helper to map signature schemes to ASN.1 OIDsTobias Brunner2015-03-042-3/+54
* public-key: Add helper to determine key type from signature schemeTobias Brunner2015-03-042-0/+43
* mem-cred: Add a method to unify certificate references, without adding itMartin Willi2015-03-032-0/+31
* Allow SHA256 and SHA384 data hash for BLISS signatures.Andreas Steffen2015-02-262-0/+10
* Started implementing BLISS signature generationAndreas Steffen2014-11-292-7/+7
* Store and parse BLISS private and public keys in DER and PEM formatAndreas Steffen2014-11-291-0/+4
* Created framework for BLISS post-quantum signature algorithmAndreas Steffen2014-11-292-5/+16
* cert-cache: Prevent that a cached issuer is freed too earlyTobias Brunner2014-10-241-7/+10
* auth-cfg: Fix crash after several reauthentications with multiple authenticat...Tobias Brunner2014-09-111-1/+1
* credmgr: Fix copy and paste error in add_validatorThomas Egerer2014-08-291-1/+1
* windows: Provide a sched_yield() implementationMartin Willi2014-06-041-1/+0
* crl: Undefine <wincrypt.h>'s CRL_REASON_* and use our enum values insteadMartin Willi2014-06-031-8/+20
* auth-cfg: Cast literal default value to pointer typeMartin Willi2014-05-161-1/+1
* mem-cred: Replace existing equal shared keys during add_shared()Martin Willi2014-05-071-3/+56
* mem-cred: Replace existing equal private keys during add_key()Martin Willi2014-05-071-0/+17
* Added PUBKEY_RSA_MODULUS encoding typeAndreas Steffen2014-05-021-0/+2
* Added support for msSmartcardLogon EKUAndreas Steffen2014-04-081-10/+12
* Properly hash pointers for hash tables where appropriateTobias Brunner2014-03-311-17/+2
* auth-cfg: Declare an attribute certificate helper type to exchange acertsMartin Willi2014-03-313-2/+15
* x509: Replace the comma separated string AC group builder with a list based oneMartin Willi2014-03-312-4/+3
* x509: Integrate IETF attribute handling, and obsolete ietf_attributes_tMartin Willi2014-03-313-627/+0
* x509: Replace fixed acert group string getter by a more dynamic group enumeratorMartin Willi2014-03-313-50/+60
* ac: Remove unimplemented equals_holder() method from ac_tMartin Willi2014-03-311-8/+0
* lib: All settings use configured namespaceTobias Brunner2014-02-121-1/+1
* pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOBTobias Brunner2013-10-232-3/+0