aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/plugins/openssl/openssl_crl.c
Commit message (Collapse)AuthorAgeFilesLines
* openssl: Add support for signature schemes with parametersTobias Brunner2017-11-081-29/+11
|
* certificate: Return signature scheme and parameters from issued_by() methodTobias Brunner2017-11-081-2/+4
| | | | | This also required some include restructuring (avoid including library.h in headers) to avoid unresolvable circular dependencies.
* public-key: Add optional parameters argument to verify() methodTobias Brunner2017-11-081-1/+2
|
* openssl: Fix call of X509_CRL_get0_signature() with OpenSSL 1.1.0Tobias Brunner2017-10-101-3/+3
| | | | | | | The order of arguments in X509_CRL_get0_signature() is not the same as that of X509_get0_signature(). Fixes: 989ba4b6cd16 ("openssl: Update CRL API to OpenSSL 1.1.0")
* openssl: Add support for delta CRLsTobias Brunner2017-09-181-9/+55
|
* Migrate all enumerators to venumerate() interface changeTobias Brunner2017-05-261-2/+9
|
* openssl: Update CRL API to OpenSSL 1.1.0Tobias Brunner2016-06-291-7/+42
| | | | | | There is currently no way to compare the outer and inner algorithms encoded in a parsed CRL. X509_CRL_verify() does not seem to check that either, though (unlike X509_verify()).
* lib: All settings use configured namespaceTobias Brunner2014-02-121-1/+1
|
* Recognize critical IssuingDistributionPoint CRL extensionAndreas Steffen2013-07-121-0/+4
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-241-1/+1
|
* Moved data structures to new collections subfolderTobias Brunner2012-10-241-1/+1
|
* certificate_t->issued_by takes an argument to receive signature schemeMartin Willi2012-06-121-1/+6
|
* Fixed compiler warnings in openssl pluginMartin Willi2011-09-071-1/+1
|
* introduced libstrongswan.x509.enforce_critical parameterAndreas Steffen2011-02-051-1/+3
|
* Added support for delta CRLs to x509 pluginMartin Willi2011-01-051-0/+2
|
* Fail on critical extensions in openssl CRLsMartin Willi2011-01-051-1/+6
|
* Unwrap crlNumber INTEGER in openssl CRL parsingMartin Willi2010-08-301-4/+13
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-131-4/+13
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-131-1/+1
| | | | encoding
* Removed is_newer() from certificate_t, obsoleting all implementationsMartin Willi2010-05-211-30/+0
|
* Implemented X.509 CRL reading using OpenSSLMartin Willi2010-05-211-0/+551