index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libstrongswan
/
plugins
/
x509
/
x509_cert.c
Commit message (
Collapse
)
Author
Age
Files
Lines
...
*
Migrated x509_cert_t to INIT/METHOD macros
Martin Willi
2011-01-05
1
-144
/
+88
|
*
Parse and encode crlSign keyUsage flag in x509 plugin
Martin Willi
2011-01-05
1
-10
/
+71
|
*
Added support for CRL Issuers to x509 and OpenSSL plugins
Martin Willi
2011-01-05
1
-57
/
+174
|
*
Compare subject against all key identifiers in has_subject()
Martin Willi
2010-09-09
1
-9
/
+12
|
*
has_subject() now resolves ID_KEY_IDs
Andreas Steffen
2010-09-09
1
-4
/
+14
|
*
Parse UPN subjectAltNames in x509 plugin
Martin Willi
2010-08-10
1
-9
/
+24
|
*
Support different encoding types in certificate.get_encoding()
Martin Willi
2010-07-13
1
-4
/
+14
|
*
Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵
Martin Willi
2010-07-13
1
-4
/
+4
|
|
|
|
encoding
*
Select subjectAltName address family using address length in x509 plugin
Martin Willi
2010-06-24
1
-1
/
+11
|
*
Removed is_newer() from certificate_t, obsoleting all implementations
Martin Willi
2010-05-21
1
-18
/
+0
|
*
Adding DBG_LIB to all calls of libstrongswan's version of DBG*.
Tobias Brunner
2010-04-06
1
-28
/
+30
|
*
critical keyUsage extension must be parsed
Andreas Steffen
2010-03-07
1
-0
/
+3
|
*
set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true
Andreas Steffen
2010-03-07
1
-4
/
+13
|
*
initialize variables to avoid compiler warning
Andreas Steffen
2010-02-05
1
-2
/
+2
|
*
Support TLS client authentication Extended Key Usage in x509 generation
Martin Willi
2010-01-14
1
-8
/
+16
|
*
ipsec pki --self|issue supports --pathlen option setting a path length ↵
Andreas Steffen
2009-12-31
1
-2
/
+18
|
|
|
|
constraint
*
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate ↵
Andreas Steffen
2009-12-22
1
-1
/
+2
|
|
|
|
extension
*
added create_ipAddrBlock_enumerator() method to x509_t
Andreas Steffen
2009-12-22
1
-0
/
+9
|
*
traffic_selector supports RFC 3779 address range format
Andreas Steffen
2009-12-21
1
-7
/
+75
|
*
parse RFC 3779 addressFamily
Andreas Steffen
2009-12-20
1
-2
/
+16
|
*
plugin name is x509
Andreas Steffen
2009-12-20
1
-1
/
+1
|
*
discard certificate with unknown critical extensions
Andreas Steffen
2009-12-20
1
-0
/
+8
|
*
use traffic_selector_t object to represent ipAddrBlocks
Andreas Steffen
2009-12-20
1
-1
/
+2
|
*
parse ipAddrBlocks
Andreas Steffen
2009-12-17
1
-1
/
+69
|
*
implemented path length constraint checkinf for IKEv2
Andreas Steffen
2009-11-04
1
-1
/
+1
|
*
output optional pathLenConstraint in ipsec listcacerts
Andreas Steffen
2009-11-04
1
-0
/
+9
|
*
implemented parsing of pathLenConstraint
Andreas Steffen
2009-11-04
1
-11
/
+36
|
*
ipsec pki --issue suports --flag authServer option
Andreas Steffen
2009-10-05
1
-14
/
+31
|
*
ipsec pki --issue supports --flag ocspSigning option
Andreas Steffen
2009-10-05
1
-7
/
+24
|
*
mark embedded parsing in debug mode
Andreas Steffen
2009-10-02
1
-0
/
+2
|
*
verify correctness of X.509 versions
Andreas Steffen
2009-10-02
1
-2
/
+18
|
*
added get_subjectKeyIdentifier() to x509_t
Andreas Steffen
2009-09-26
1
-14
/
+32
|
*
adding additional flags to loaded X.509 certificates
Andreas Steffen
2009-09-22
1
-0
/
+5
|
*
implemented ASN.1 encoding of PKCS#10 attributes
Andreas Steffen
2009-09-15
1
-40
/
+56
|
*
extended hasher_signature_algorithm_to_oid() function
Andreas Steffen
2009-09-13
1
-47
/
+4
|
*
parsing error caused segfault in destroy()
Andreas Steffen
2009-09-13
1
-1
/
+1
|
*
corrected captions
Andreas Steffen
2009-09-12
1
-3
/
+3
|
*
x509 plugin supports encoding of OCSP AuthorityInfo AccessLocations
Martin Willi
2009-09-11
1
-3
/
+42
|
*
Removed chunk_from_buf() in favor of a simpler chunk_from_chars() macro
Martin Willi
2009-09-11
1
-8
/
+7
|
*
x509 plugin supports encoding of CRL distribution points
Martin Willi
2009-09-11
1
-4
/
+46
|
*
Updated x509 plugin to the new builder API
Martin Willi
2009-09-10
1
-233
/
+167
|
*
x509 certificates support encoding of email, DNS and IP subjectAltNames
Martin Willi
2009-09-08
1
-5
/
+50
|
*
non self-signed x509 certificates are encoded with authorityKeyIdentifier
Martin Willi
2009-09-08
1
-5
/
+18
|
*
x509 CA certificates are encoded with a subjectKeyIdentifier
Martin Willi
2009-09-08
1
-3
/
+14
|
*
x509 plugin supports encoding of CA basicConstraint extension
Martin Willi
2009-09-08
1
-0
/
+22
|
*
remove spaces within tabs (\t( )+\t)
Martin Willi
2009-09-04
1
-5
/
+5
|
*
removed trailing spaces ([[:space:]]+$)
Martin Willi
2009-09-04
1
-89
/
+89
|
*
.., but a comment might be helpful
Andreas Steffen
2009-08-28
1
-0
/
+1
|
*
removed TODO reminder
Andreas Steffen
2009-08-28
1
-1
/
+0
|
*
allow choice of digest algorithm in certificate generation
Andreas Steffen
2009-08-28
1
-5
/
+49
|
[prev]
[next]