tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	gcrypt: Add support for RSA-PSS signatures	Tobias Brunner	2017-11-08	1	-0/+6
\| \| \| \| \| \| \| \|	For salt lengths other than 20 this requires 0bd8137e68c2 ("cipher: Add option to specify salt length for PSS verification."), which was included in libgcrypt 1.7.0 (for Ubuntu requires 17.04). As that makes it pretty much useless for us (SHA-1 is a MUST NOT), we require that version to even provide the feature.
*	gcrypt: Register supported RSA signature/verification schemes	Tobias Brunner	2017-11-08	1	-0/+16
\|
*	128 bit default security strength requires 3072 bit prime DH group	Andreas Steffen	2015-12-14	1	-4/+4
\|
*	gcrypt: Explicitly initialize RNG backend to allocate static data	Martin Willi	2015-04-15	1	-0/+3
\| \| \| \| \| \|	The libgcrypt RNG implementation uses static buffer allocation which it does not free. There is no symbol we can catch in leak-detective, hence we explicitly initialize the RNG during the whitelisted gcrypt_plugin_create() function.
*	curl: For SSL features, depend on thread-safety provided by our crypto plugins	Martin Willi	2014-09-24	1	-0/+2
\| \| \| \| \| \| \| \| \|	To use SSL in curl, we need to initialize the SSL library in a thread-safe manner and provide the appropriate callbacks. As we already do that in our crypto plugins using these libraries, we depend on these features. This implies that we need the same plugin enabled (openssl, gcrypt) as the curl backend is configured to use to fetch from HTTPS URIs.
*	gcrypt: Use predefined pthread locking functions instead of custom hooks	Martin Willi	2014-07-01	1	-50/+4
\| \| \| \| \| \| \| \| \| \| \| \| \|	Starting with libgcrypt 1.6, it seems that custom locking functions are not supported anymore. Instead, the user has to select from one of the pre-defined set of locking functions. Given that we have a proper threading abstraction API with optional profiling on all platforms, this is somewhat annoying. However, there does not seem to be a way to use custom functions, and we have no other choice than using the provided macro magic to support all libgcrypt versions. Fixes #630.
*	lib: All settings use configured namespace	Tobias Brunner	2014-02-12	1	-2/+2
\|
*	Remove HASH_PREFERRED, usages are replaced with HASH_SHA1, which is required ↵	Tobias Brunner	2013-10-11	1	-1/+1
\| \| \| \|	for IKEv2 anyway
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	gcrypt: Register SHA1 first as HASH_PREFERRED depends on it	Tobias Brunner	2012-06-27	1	-1/+1
\|
*	gcrypt does not support MD2	Andreas Steffen	2011-11-09	1	-1/+0
\|
*	Add features support to gcrypt plugin.	Tobias Brunner	2011-10-17	1	-101/+74
\|
*	Added a (not yet implemented) plugin_t method to reload plugin configuration	Martin Willi	2011-04-15	1	-0/+1
\|
*	Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵	Martin Willi	2011-04-15	1	-35/+40
\| \| \| \|	over plugin_t
*	trace back crypto algorithms to the plugins that registered them	Andreas Steffen	2010-12-18	1	-33/+35
\|
*	Added a final flag to builder registration to enumerate the actually ↵	Martin Willi	2010-09-03	1	-3/+3
\| \| \| \|	supported algorithms
*	Added support for MODP_CUSTOM to gcrypt plugin	Martin Willi	2010-09-03	1	-0/+4
\|
*	Use a seperate section for each nested struct member in INIT macro	Martin Willi	2010-08-18	1	-1/+5
\|
*	Implemented AES/Camellia counter mode in gcrypt	Martin Willi	2010-08-13	1	-0/+6
\|
*	Migraded gcrypt plugin to INIT/METHOD macros	Martin Willi	2010-08-10	1	-7/+5
\|
*	Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten	Martin Willi	2010-04-19	1	-0/+6
\|
*	Adding DBG_LIB to all calls of libstrongswan's version of DBG*.	Tobias Brunner	2010-04-06	1	-1/+1
\|
*	Changed plugin constructors from plugin_create to plugin_name_plugin_create.	Tobias Brunner	2010-03-02	1	-1/+1
\|
*	Separated the public interfaces of the threading primitives.	Tobias Brunner	2009-12-23	1	-1/+1
\|
*	Moved mutex.c to a separate folder in order to cleanly wrap other threading ↵	Tobias Brunner	2009-12-23	1	-1/+1
\| \| \| \|	primitives (and utils/mutex.h is now threading.h).
*	Updated gcrypt plugin to the new builder API	Martin Willi	2009-09-10	1	-4/+8
\|
*	removed trailing spaces ([[:space:]]+$)	Martin Willi	2009-09-04	1	-24/+24
\|
*	OpenSolaris defines MUTEX_DEFAULT therefore we rename the members of the ↵	Tobias Brunner	2009-08-14	1	-1/+1
\| \| \| \|	enums mutex/condvar/rwlock_type_t.
*	support of SHA224-based certificate signatures	Andreas Steffen	2009-08-05	1	-0/+2
\|
*	HASH_MD2 is not implemented yet in gcrypt	Andreas Steffen	2009-06-18	1	-2/+0
\|
*	gcrypt actually does not implement IDEA	Martin Willi	2009-06-15	1	-2/+0
\|
*	added a gcrypt.quick_random option to generate weak testing keys faster	Martin Willi	2009-06-15	1	-0/+5
\|
*	gcrypt RSA public key implementation	Martin Willi	2009-06-09	1	-0/+5
\|
*	gcrypt RSA private key implementation	Martin Willi	2009-06-09	1	-0/+7
\|
*	gcrypt mpi based Diffie-Hellman implementation	Martin Willi	2009-06-09	1	-0/+21
\|
*	gcrypt rng implementation	Martin Willi	2009-06-09	1	-0/+11
\|
*	use abstract mutex_t for gcrypt locking callbacks	Martin Willi	2009-06-09	1	-4/+50
\|
*	gcrypt crypter implementation	Martin Willi	2009-06-09	1	-0/+25
\|
*	gcrypt hasher implementation	Martin Willi	2009-06-09	1	-0/+20
\|
*	initialize gcrypt threadsave, currently for pthread only	Martin Willi	2009-06-09	1	-1/+25
\|
*	added skeleton for libgcrypt based crypto plugin	Martin Willi	2009-06-09	1	-0/+52