aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/credentials
Commit message (Collapse)AuthorAgeFilesLines
...
| | * Free list after removing the last local credential set, fixes a leak reportMartin Willi2012-03-201-0/+5
| | |
| | * Added missing XAuth auth_class enum nameMartin Willi2012-03-201-1/+2
| | |
| | * Added auth_cfg option to select XAUTH backend to useMartin Willi2012-03-202-0/+12
| | |
| | * Use a second authentication config to configure XAUTH authenticationMartin Willi2012-03-201-4/+2
| | |
| | * Map auth_class to auth method and IKEv1 proposal attributeMartin Willi2012-03-201-0/+2
| | |
| | * IKEv1 XAUTH: Added ability to configure XAUTH+PSK. Added task to handle ↵Clavister OpenSource2012-03-201-0/+2
| | | | | | | | | | | | XAUTH requests. Modified task_manager_v1 to enable it to initiate new tasks immediately after finishing a response.
* | | Removed auth_cfg_t.replace_value() and replaced usages with add().Tobias Brunner2012-04-182-76/+35
| | | | | | | | | | | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient.
* | | Changed the order and semantics of rules we expect only once in auth_cfg_t.Tobias Brunner2012-04-182-114/+212
| | | | | | | | | | | | | | | | | | | | | These rules are now inserted at the front of the internal list, this allows to retrieve the rule added last with get(). For other rules the order in which they are added is maintained (this allows to properly enumerate them).
* | | Added a simple method to replace the value of a rule in auth_cfg_t.Tobias Brunner2012-04-162-32/+74
|/ /
* | Add builder part for parameters from algorithmIdentifier.Tobias Brunner2012-02-012-1/+4
| |
* | Fixed additional typos in comments and log messages.Tobias Brunner2012-01-121-1/+1
| |
* | Fix whitespacesAdrian-Ken Rueegsegger2012-01-121-4/+4
| |
* | Some documentation correctionsAdrian-Ken Rueegsegger2012-01-128-33/+32
| |
* | Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-282-3/+0
| |
* | use openssl rsa_verify functionSansar Choinyambuu2011-11-282-0/+3
| |
* | Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-282-3/+0
| |
* | use openssl rsa_verify functionSansar Choinyambuu2011-11-282-0/+3
| |
* | Fixed missing initializer compiler warning.Tobias Brunner2011-11-251-2/+2
| |
* | Fixed compiler warnings regarding enum comparison.Tobias Brunner2011-11-251-3/+3
|/ | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity.
* Handle certificates being on hold in a CRLThomas Egerer2011-11-042-0/+3
| | | | | | | Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not.
* Include KEY_ANY in key_type_namesMartin Willi2011-10-141-1/+2
|
* Migrated cred_encoding to INIT/METHOD macrosAndreas Steffen2011-10-021-36/+28
|
* Migrated auth_cfg to INIT/METHOD macrosAndreas Steffen2011-10-021-40/+30
|
* Migrated ietf_attributes to INIT/METHOD macrosAndreas Steffen2011-09-291-40/+42
|
* Migrated shared_key to INIT/METHOD macrosAndreas Steffen2011-09-291-26/+21
|
* Migrated auth_cfg_wrapper to INIT/METHOD macrosAndreas Steffen2011-09-291-20/+19
|
* Migrated cert_cache to INIT/METHOD macrosAndreas Steffen2011-09-291-28/+24
|
* Migrated ocsp_response_wrapper to INIT/METHOD macrosAndreas Steffen2011-09-291-20/+20
|
* fixed typoAndreas Steffen2011-09-081-1/+1
|
* Remove obsolete values from builder_part_namesThomas Egerer2011-09-021-2/+0
| | | | | Adds removal of builder parts obsoleted with git commit 15177f5785bcec6700f2a1a698cd8392c9bba5e9.
* Added missing auth_rule_namesMartin Willi2011-08-221-1/+6
|
* Moved auth_rule_names back to auth_cfg.cMartin Willi2011-08-221-0/+18
|
* Readded docs for some arguments to global functions.Tobias Brunner2011-07-214-11/+17
| | | | Those were overzealously removed in 28623fc5389829858c78c759a214aa5c64ea26c6.
* Fixed common misspellings.Tobias Brunner2011-07-202-3/+3
| | | | Mostly found by 'codespell'.
* Replaced more complex iterator usages.Tobias Brunner2011-07-061-23/+13
|
* "this" removed from comments.Tobias Brunner2011-07-065-11/+4
|
* Fix a potential memleak if two threads fingerprint a credential simultaneouslyMartin Willi2011-05-021-1/+6
|
* Use proper return value for ietf_attr_t.compare.Tobias Brunner2011-04-191-1/+1
|
* Fixed output in ietf_attributes_t.get_string.Tobias Brunner2011-04-141-2/+2
|
* [hopefully] fixed pathlen problem on ARM platformsAndreas Steffen2011-02-102-3/+4
|
* Add missing AUTH_RULE for trusted self-signed peer certificatesMartin Willi2011-02-011-0/+5
|
* Verify trustchain for each candidate certificate only onceMartin Willi2011-01-051-0/+19
|
* Added an AUTH_HELPER for revocation certificatesMartin Willi2011-01-053-1/+12
|
* Added CDP support to mem_credMartin Willi2011-01-052-1/+106
|
* Slightly renamed different policyConstraints to distinguish them betterMartin Willi2011-01-052-6/+6
|
* Added support for inhibitAnyPolicy constraint to x509 pluginMartin Willi2011-01-053-0/+5
|
* Use a generic getter for all numerical X.509 constraintsMartin Willi2011-01-051-10/+16
|
* Include subject cert to temporary auth info before completing trustchainMartin Willi2011-01-051-4/+1
|
* Pass an additional anchor flag to validate() hook if we reach the root CAMartin Willi2011-01-052-6/+8
|
* Always pass auth info to validate(), use pathlen to check for user certificateMartin Willi2011-01-051-2/+1
|