tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	private-key: Add optional parameters argument to sign() method	Tobias Brunner	2017-11-08	1	-1/+1
\|
*	pkcs11: Look for the CKA_ID of the cert if it doesn't match the subjectKeyId	Raphael Geissert	2016-10-04	1	-4/+152
\| \| \| \| \| \| \| \| \| \| \| \| \| \|	charon-nm fails to find the private key when its CKA_ID doesn't match the subjectKeyIdentifier of the X.509 certificate. In such cases, the private key builder now falls back to enumerating all the certificates, looking for one that matches the supplied subjectKeyIdentifier. It then uses the CKA_ID of that certificate to find the corresponding private key. It effectively means that PKCS#11 tokens where the only identifier to relate the certificate, the public key, and the private key is the CKA_ID are now supported by charon-nm. Fixes #490.
*	gmp: Support of SHA-3 RSA signatures	Andreas Steffen	2016-09-22	1	-4/+4
\|
*	pkcs11: Skip zero-padding of r and s when preparing EC signature	Tobias Brunner	2016-04-05	1	-3/+9
\| \| \| \| \| \|	They are zero padded to fill the buffer. Fixes #1377.
*	pkcs11: Properly encode RFC 3279 ECDSA signatures	Tobias Brunner	2015-03-09	1	-2/+19
\| \| \| \|	Fixes #873.
*	Moved debug.[ch] to utils folder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	PKCS#11 library search using keyid uses a fallback to look for certificates	Martin Willi	2012-10-24	1	-4/+8
\|
*	If no pkcs11 public key for a private key found, search for a certificate	Martin Willi	2012-10-24	1	-4/+53
\|
*	Move pkcs11 public key lookup function declaration to header file	Martin Willi	2012-10-24	1	-6/+1
\|
*	Add a return value to hasher_t.allocate_hash()	Martin Willi	2012-07-16	1	-3/+5
\|
*	pkcs11: Make sure a key can be used for a given signature scheme.	Tobias Brunner	2011-11-02	1	-15/+24
\|
*	pkcs11: We have to create our own hashes for some signature schemes.	Tobias Brunner	2011-11-02	1	-8/+55
\|
*	pkcs11: Lookup the public key of a private key by CKA_ID.	Tobias Brunner	2011-11-02	1	-0/+9
\| \| \| \| \| \|	Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there.
*	pkcs11: Search for private keys in a more generic way.	Tobias Brunner	2011-11-02	1	-20/+19
\| \| \| \| \| \|	Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key.
*	pkcs11: Instead of a mutex use a new session to do multipart operations.	Tobias Brunner	2011-11-02	1	-21/+39
\|
*	Register manager of pkcs11 plugin as library object	Martin Willi	2011-08-24	1	-2/+2
\|
*	Fixed public key construction from PKCS#11 private key	Martin Willi	2010-12-23	1	-3/+3
\|
*	Do not query for CKA_ALWAYS_AUTHENTICATE if PKCS#11 Cryptoki version < 2.20	Martin Willi	2010-11-18	1	-3/+9
\|
*	Use a seperate section for each nested struct member in INIT macro	Martin Willi	2010-08-18	1	-13/+15
\|
*	Implemented public key encryption/private key decryption in PKCS#11	Martin Willi	2010-08-11	1	-4/+63
\|
*	Use bits instead of bytes for a private/public key	Martin Willi	2010-08-10	1	-2/+2
\|
*	Added support for different encryption schemes to private/public keys	Martin Willi	2010-08-10	1	-1/+2
\|
*	Export scheme_to_mechanism conversion function	Martin Willi	2010-08-06	1	-3/+3
\|
*	Support PKCS#11 keys requiring reauthentication for each operation	Martin Willi	2010-08-04	1	-11/+64
\|
*	Do not try to log in if we already have a user session	Martin Willi	2010-08-04	1	-0/+13
\|
*	Use credential sets to load smartcard keys	Martin Willi	2010-08-04	1	-12/+21
\|
*	Implemented a callback based credential set, currently for shared keys only	Martin Willi	2010-08-04	1	-37/+21
\|
*	Implemented callback PIN invocation for PKCS#11 login	Martin Willi	2010-08-04	1	-8/+47
\|
*	Implemented keyid discovery on all modules/slots	Martin Willi	2010-08-04	1	-7/+80
\|
*	Pass the PKCS11 keyid as chunk, not as string	Martin Willi	2010-08-04	1	-8/+6
\|
*	Reuse generic passphrase build part, not a dedicated PIN part	Martin Willi	2010-08-04	1	-6/+6
\|
*	Implemented private key on top of a PKCS#11 token	Martin Willi	2010-08-04	1	-0/+369