Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | openssl: Add support for verifying RSASSA-PSS signatures | Tobias Brunner | 2017-11-08 | 1 | -3/+141 |
| | |||||
* | public-key: Add optional parameters argument to verify() method | Tobias Brunner | 2017-11-08 | 1 | -1/+1 |
| | |||||
* | gmp: Support of SHA-3 RSA signatures | Andreas Steffen | 2016-09-22 | 1 | -6/+6 |
| | |||||
* | openssl: Update RSA API to OpenSSL 1.1.0 | Tobias Brunner | 2016-06-29 | 1 | -7/+20 |
| | |||||
* | openssl: Explicitly include openssl/bn.h | Tobias Brunner | 2015-09-16 | 1 | -0/+1 |
| | | | | | | | | If OpenSSL is compiled with OPENSSL_NO_DEPRECATED some of the headers we include don't include openssl/bn.h anymore. Therefore, we have to explicitly include it ourselves where we use BN_* functions. Fixes #1113. | ||||
* | utils: Use chunk_equals_const() for all cryptographic purposes | Martin Willi | 2015-04-14 | 1 | -1/+1 |
| | |||||
* | openssl: Add default fallback when calculating fingerprints of RSA keys | Tobias Brunner | 2014-03-22 | 1 | -1/+15 |
| | | | | | | We still try to calculate these directly as it can avoid a dependency on the pkcs1 or other plugins. But for e.g. PGPv3 keys we need to delegate the actual fingerprint calculation to the pgp plugin. | ||||
* | openssl: Add generic RSA public key encoding | Tobias Brunner | 2013-09-13 | 1 | -3/+17 |
| | |||||
* | Check RSA_public_decrypt() length before constructing and comparing a chunk | Martin Willi | 2013-04-10 | 1 | -7/+10 |
| | | | | | If decryption fails, it returns -1. chunk_equals() should catch that error, but be more explicit in error checking. | ||||
* | openssl: Properly honor OPENSSL_NO_* defines | Tobias Brunner | 2013-01-31 | 1 | -0/+6 |
| | |||||
* | Moved debug.[ch] to utils folder | Tobias Brunner | 2012-10-24 | 1 | -1/+1 |
| | |||||
* | Add a return value to hasher_t.allocate_hash() | Martin Willi | 2012-07-16 | 1 | -2/+2 |
| | |||||
* | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 1 | -60/+0 |
| | |||||
* | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -2/+2 |
| | | | | Removed unused chunk variable from PTS verify_quote_signature function | ||||
* | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+60 |
| | |||||
* | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 1 | -60/+0 |
| | |||||
* | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -3/+2 |
| | | | | Removed unused chunk variable from PTS verify_quote_signature function | ||||
* | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+62 |
| | |||||
* | Use a seperate section for each nested struct member in INIT macro | Martin Willi | 2010-08-18 | 1 | -11/+13 |
| | |||||
* | Implemented RSA en-/decryption in openssl plugin | Martin Willi | 2010-08-11 | 1 | -3/+28 |
| | |||||
* | Use bits instead of bytes for a private/public key | Martin Willi | 2010-08-10 | 1 | -2/+2 |
| | |||||
* | Added support for different encryption schemes to private/public keys | Martin Willi | 2010-08-10 | 1 | -1/+2 |
| | |||||
* | Migrated remaining classes in openssl plugin to INIT/METHOD macros | Martin Willi | 2010-08-10 | 1 | -52/+37 |
| | |||||
* | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 1 | -14/+14 |
| | | | | encoding | ||||
* | Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin | Martin Willi | 2010-05-05 | 1 | -2/+14 |
| | |||||
* | Some whitespace fixes. | Tobias Brunner | 2010-04-06 | 1 | -1/+1 |
| | |||||
* | Adding DBG_LIB to all calls of libstrongswan's version of DBG*. | Tobias Brunner | 2010-04-06 | 1 | -3/+3 |
| | |||||
* | PEM encoding for OpenSSL RSA and EC public and private keys | Andreas Steffen | 2010-04-04 | 1 | -1/+14 |
| | |||||
* | Public/Private keys implement a has_fingerprint() method | Martin Willi | 2009-09-21 | 1 | -0/+1 |
| | |||||
* | Added support to build RSA keys from components in openssl | Martin Willi | 2009-09-14 | 1 | -6/+23 |
| | |||||
* | Updated openssl plugin to the new builder API | Martin Willi | 2009-09-10 | 1 | -74/+17 |
| | |||||
* | removed trailing spaces ([[:space:]]+$) | Martin Willi | 2009-09-04 | 1 | -17/+17 |
| | |||||
* | fixed memleak in openssl fingerprinting | Martin Willi | 2009-08-27 | 1 | -0/+1 |
| | |||||
* | do openssl fingerprinting/encoding directly, openssl provides all functions | Martin Willi | 2009-08-27 | 1 | -24/+61 |
| | |||||
* | updated openssl plugin to new private/public key API, use encoder framework | Martin Willi | 2009-08-26 | 1 | -171/+44 |
| | |||||
* | support of SHA224-based certificate signatures | Andreas Steffen | 2009-08-05 | 1 | -0/+2 |
| | |||||
* | pluto supports ECDSA authentication | Andreas Steffen | 2009-06-12 | 1 | -1/+0 |
| | |||||
* | implemented IKEv1 signature verification in openssl_rsa_public_key.c | Andreas Steffen | 2009-06-10 | 1 | -36/+54 |
| | |||||
* | pluto and scepclient use private and public key plugins of libstrongswan | Andreas Steffen | 2009-06-09 | 1 | -1/+29 |
| | |||||
* | removing svn keyword $Id$ from all files | Tobias Brunner | 2009-04-30 | 1 | -2/+0 |
| | |||||
* | merging changes from portability branch back to trunk | Tobias Brunner | 2009-04-30 | 1 | -2/+2 |
| | | | | | important change for developers: %Y replaces %D to print identities! | ||||
* | OpenSSL requires a signature length of exactly RSA_size() | Martin Willi | 2008-11-04 | 1 | -5/+3 |
| | |||||
* | removed accidently checked in debug code | Martin Willi | 2008-11-03 | 1 | -1/+0 |
| | |||||
* | reverted 4541, does not fix the problem | Martin Willi | 2008-11-03 | 1 | -0/+8 |
| | |||||
* | removed 0-byte truncation, fixes random Openssl RSA signature verification ↵ | Martin Willi | 2008-10-31 | 1 | -7/+0 |
| | | | | failures | ||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 1 | -16/+19 |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | ||||
* | RSA with OpenSSL | Tobias Brunner | 2008-05-15 | 1 | -0/+433 |