aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/plugins/openssl
Commit message (Collapse)AuthorAgeFilesLines
...
* Resetting OpenSSL HMAC with NULL key reuses existing keyMartin Willi2012-07-161-11/+2
|
* Make sure HMAC_Init is called before HMAC_Update, fixes crashMartin Willi2012-07-161-0/+5
|
* Add a return value to hasher_t.reset()Martin Willi2012-07-161-4/+8
|
* Add a return value to hasher_t.allocate_hash()Martin Willi2012-07-164-12/+9
|
* Add a return value to hasher_t.get_hash()Martin Willi2012-07-161-3/+10
|
* Add a return value to crypter_t.set_key()Martin Willi2012-07-161-1/+2
|
* Add a return value to crypter_t.decrypt()Martin Willi2012-07-161-2/+2
|
* Add a return value to crypter_t.encryptMartin Willi2012-07-161-10/+11
|
* Add a return value to mac_t.set_key()Martin Willi2012-07-161-2/+2
|
* Add a return value to mac_t.get_bytes()Martin Willi2012-07-161-10/+8
|
* Check rng return value when seeding OpenSSL RNGTobias Brunner2012-07-161-1/+5
|
* RNGs' get_bytes and allocate_bytes return booleanTobias Brunner2012-07-161-9/+10
|
* Add a return value to prf_t.set_key()Martin Willi2012-07-161-1/+6
|
* Add a return value to prf_t.allocate_bytes()Martin Willi2012-07-161-6/+3
|
* Add a return value to prf_t.get_bytes()Martin Willi2012-07-161-1/+3
|
* openssl: Ensure the thread ID is never zeroTobias Brunner2012-07-031-1/+3
| | | | | | This might otherwise cause problems because OpenSSL tries to lock mutexes recursively if it assumes the lock is held by a different thread e.g. during FIPS initialization.
* Make the hmac_t interface a generic interface for message authentication codesTobias Brunner2012-06-251-23/+23
|
* Simplified creation of PRFs and signers in openssl and hmac pluginsTobias Brunner2012-06-251-68/+5
|
* Use simple wrappers for HMAC based PRF and signer in openssl pluginTobias Brunner2012-06-258-562/+132
|
* Refactored OpenSSL based HMAC implementationTobias Brunner2012-06-255-173/+382
|
* Adding OpenSSL HMAC signer functions to openssl pluginAleksandr Grinberg2012-06-254-1/+322
|
* Adding OpenSSL HMAC pseudo random functions to openssl pluginAleksandr Grinberg2012-06-254-1/+245
|
* Adding OpenSSL random number functions to openssl pluginAleksandr Grinberg2012-06-254-1/+159
|
* certificate_t->issued_by takes an argument to receive signature schemeMartin Willi2012-06-122-3/+13
|
* Certificate decoding soft-depends on public key decoding of specific typesMartin Willi2012-05-021-0/+3
|
* OpenSSL plugin parses ECDSA private keys with explicitly specified EC ↵Tobias Brunner2012-02-011-9/+30
| | | | | | | parameters. This is needed in case the key itself does not contain the parameters, which is the case for PKCS#8.
* Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-281-60/+0
|
* Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-2/+2
| | | | Removed unused chunk variable from PTS verify_quote_signature function
* use openssl rsa_verify functionSansar Choinyambuu2011-11-281-0/+60
|
* Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-281-60/+0
|
* Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-3/+2
| | | | Removed unused chunk variable from PTS verify_quote_signature function
* use openssl rsa_verify functionSansar Choinyambuu2011-11-281-0/+62
|
* Change order of ocsp uris when parsing a certThomas Egerer2011-11-041-1/+1
|
* Use chunk_clear to memwipe shared secretThomas Egerer2011-11-041-1/+1
|
* Fixed AES key length in openssl pluginMartin Willi2011-10-141-2/+2
|
* Announce openssl features only if actually supportedMartin Willi2011-10-141-16/+64
|
* Add features support to openssl pluginMartin Willi2011-10-141-141/+118
|
* openssl: Adding support for key usage x509 extension.Tobias Brunner2011-10-051-1/+42
|
* Fixed compiler warnings in openssl pluginMartin Willi2011-09-072-2/+2
|
* Don't compile login() in openssl_rsa_private_key_t if ENGINE support is ↵Tobias Brunner2011-05-131-0/+2
| | | | disabled in OpenSSL.
* chunk_clear not clear_chunk.Tobias Brunner2011-05-101-1/+1
|
* Wipe memory after using key material (incomplete, to be continued)Martin Willi2011-05-092-2/+2
|
* Revert alloc_str changesMartin Willi2011-04-211-13/+8
| | | | | | This reverts commit fdead26ffe1da8501a6ff5e0639a6f44c723e763. This reverts commit 3e2419ebe32de72d824864eb2e0e677a7c197af1. This reverts commit 17ce69b47a1efd6234960cf7d1f50712aee61db5.
* Use thread save settings alloc_str function where appropriateMartin Willi2011-04-211-8/+13
|
* Added a (not yet implemented) plugin_t method to reload plugin configurationMartin Willi2011-04-151-0/+1
|
* Added a get_name() function to plugin_t, create_plugin_enumerator enumerates ↵Martin Willi2011-04-151-38/+43
| | | | over plugin_t
* [hopefully] fixed pathlen problem on ARM platformsAndreas Steffen2011-02-101-3/+7
|
* introduced libstrongswan.x509.enforce_critical parameterAndreas Steffen2011-02-052-3/+7
|
* fixed checking of unknown critical extensions in openssl_x509Andreas Steffen2011-01-311-1/+1
|
* Use a generic getter for all numerical X.509 constraintsMartin Willi2011-01-051-11/+10
|