tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
...
* \|	use openssl rsa_verify function	Sansar Choinyambuu	2011-11-28	2	-0/+3
\| \|
* \|	Fixed missing initializer compiler warning.	Tobias Brunner	2011-11-25	1	-2/+2
\| \|
* \|	Fixed compiler warnings regarding enum comparison.	Tobias Brunner	2011-11-25	1	-3/+3
\|/ \| \| \| \| \| \| \| \|	Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity.
*	Handle certificates being on hold in a CRL	Thomas Egerer	2011-11-04	2	-0/+3
\| \| \| \| \| \| \|	Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not.
*	Include KEY_ANY in key_type_names	Martin Willi	2011-10-14	1	-1/+2
\|
*	Migrated cred_encoding to INIT/METHOD macros	Andreas Steffen	2011-10-02	1	-36/+28
\|
*	Migrated auth_cfg to INIT/METHOD macros	Andreas Steffen	2011-10-02	1	-40/+30
\|
*	Migrated ietf_attributes to INIT/METHOD macros	Andreas Steffen	2011-09-29	1	-40/+42
\|
*	Migrated shared_key to INIT/METHOD macros	Andreas Steffen	2011-09-29	1	-26/+21
\|
*	Migrated auth_cfg_wrapper to INIT/METHOD macros	Andreas Steffen	2011-09-29	1	-20/+19
\|
*	Migrated cert_cache to INIT/METHOD macros	Andreas Steffen	2011-09-29	1	-28/+24
\|
*	Migrated ocsp_response_wrapper to INIT/METHOD macros	Andreas Steffen	2011-09-29	1	-20/+20
\|
*	fixed typo	Andreas Steffen	2011-09-08	1	-1/+1
\|
*	Remove obsolete values from builder_part_names	Thomas Egerer	2011-09-02	1	-2/+0
\| \| \| \| \|	Adds removal of builder parts obsoleted with git commit 15177f5785bcec6700f2a1a698cd8392c9bba5e9.
*	Added missing auth_rule_names	Martin Willi	2011-08-22	1	-1/+6
\|
*	Moved auth_rule_names back to auth_cfg.c	Martin Willi	2011-08-22	1	-0/+18
\|
*	Readded docs for some arguments to global functions.	Tobias Brunner	2011-07-21	4	-11/+17
\| \| \| \|	Those were overzealously removed in 28623fc5389829858c78c759a214aa5c64ea26c6.
*	Fixed common misspellings.	Tobias Brunner	2011-07-20	2	-3/+3
\| \| \| \|	Mostly found by 'codespell'.
*	Replaced more complex iterator usages.	Tobias Brunner	2011-07-06	1	-23/+13
\|
*	"this" removed from comments.	Tobias Brunner	2011-07-06	5	-11/+4
\|
*	Fix a potential memleak if two threads fingerprint a credential simultaneously	Martin Willi	2011-05-02	1	-1/+6
\|
*	Use proper return value for ietf_attr_t.compare.	Tobias Brunner	2011-04-19	1	-1/+1
\|
*	Fixed output in ietf_attributes_t.get_string.	Tobias Brunner	2011-04-14	1	-2/+2
\|
*	[hopefully] fixed pathlen problem on ARM platforms	Andreas Steffen	2011-02-10	2	-3/+4
\|
*	Add missing AUTH_RULE for trusted self-signed peer certificates	Martin Willi	2011-02-01	1	-0/+5
\|
*	Verify trustchain for each candidate certificate only once	Martin Willi	2011-01-05	1	-0/+19
\|
*	Added an AUTH_HELPER for revocation certificates	Martin Willi	2011-01-05	3	-1/+12
\|
*	Added CDP support to mem_cred	Martin Willi	2011-01-05	2	-1/+106
\|
*	Slightly renamed different policyConstraints to distinguish them better	Martin Willi	2011-01-05	2	-6/+6
\|
*	Added support for inhibitAnyPolicy constraint to x509 plugin	Martin Willi	2011-01-05	3	-0/+5
\|
*	Use a generic getter for all numerical X.509 constraints	Martin Willi	2011-01-05	1	-10/+16
\|
*	Include subject cert to temporary auth info before completing trustchain	Martin Willi	2011-01-05	1	-4/+1
\|
*	Pass an additional anchor flag to validate() hook if we reach the root CA	Martin Willi	2011-01-05	2	-6/+8
\|
*	Always pass auth info to validate(), use pathlen to check for user certificate	Martin Willi	2011-01-05	1	-2/+1
\|
*	Added support for delta CRLs to x509 plugin	Martin Willi	2011-01-05	3	-0/+18
\|
*	Simplified format of x509 CRL URI parsing/enumerator	Martin Willi	2011-01-05	3	-5/+13
\|
*	Added a certificate policy OID auth_cfg constraint	Martin Willi	2011-01-05	2	-0/+31
\|
*	Added support for policyConstraints to x509 plugin	Martin Willi	2011-01-05	3	-1/+17
\|
*	Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for ↵	Martin Willi	2011-01-05	1	-1/+1
\| \| \| \|	PolicyConstraints, too
*	Added policyMappings support to x509 plugin	Martin Willi	2011-01-05	3	-0/+21
\|
*	Added certificatePolicy support to x509 plugin	Martin Willi	2011-01-05	3	-0/+23
\|
*	Added support for generating NameConstraints in x509 plugin	Martin Willi	2011-01-05	2	-0/+6
\|
*	Added name constraint enumerator to x509 interface	Martin Willi	2011-01-05	1	-0/+8
\|
*	Moved X509 pathlen constraint checking to constraints plugin	Martin Willi	2011-01-05	1	-17/+0
\|
*	Key strength checking stores all key sizes in auth_cfg, verifies all in ↵	Martin Willi	2011-01-05	2	-75/+84
\| \| \| \|	complies()
*	Added a flag for X509 CRLSign keyUsage	Martin Willi	2011-01-05	1	-0/+2
\|
*	Remove x509_flag_names, flags do not work with ENUM()	Martin Willi	2011-01-05	2	-33/+0
\|
*	Added support for CRL Issuers to x509 and OpenSSL plugins	Martin Willi	2011-01-05	3	-2/+5
\|
*	Added key strength constraints for RSA or ECDSA trustchains	Martin Willi	2011-01-05	3	-0/+97
\|
*	fixed bug in mem_cred.c:add_crl()	Andreas Steffen	2010-12-12	1	-1/+1
\|