Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | ported some hard-to-merge cherries back to trunk :-/ | Martin Willi | 2008-11-12 | 1 | -2/+2 |
| | | | | | shame, svn, shame: this was ways to complicated we should consider a switch to git... | ||||
* | fixed compiler warnings issued by: | Martin Willi | 2008-11-11 | 2 | -10/+30 |
| | | | | | | gcc 4.3 curl.h gcc type-checking glibc with enabled FORTIFY_SOURCE checking | ||||
* | proper cleanup of openssl locking code | Martin Willi | 2008-11-05 | 1 | -7/+13 |
| | |||||
* | replaced most pthread_mutex/cond_t by wrapped mutex/condvar_t variant | Martin Willi | 2008-11-05 | 1 | -13/+12 |
| | |||||
* | got rid of deprecated create_iterator_locked() | Martin Willi | 2008-11-05 | 3 | -0/+5 |
| | |||||
* | OpenSSL requires a signature length of exactly RSA_size() | Martin Willi | 2008-11-04 | 1 | -5/+3 |
| | |||||
* | removed superfluous get_other_public_value in diffie_hellman_t interface | Martin Willi | 2008-11-04 | 3 | -66/+4 |
| | |||||
* | fixed bignum export if BN_num_bytes() != DH_size() | Martin Willi | 2008-11-04 | 2 | -45/+54 |
| | |||||
* | fixed memleak | Martin Willi | 2008-11-04 | 1 | -8/+11 |
| | |||||
* | added locking mechanism for multithreaded use of OpenSSL | Martin Willi | 2008-11-03 | 1 | -0/+117 |
| | |||||
* | removed accidently checked in debug code | Martin Willi | 2008-11-03 | 1 | -1/+0 |
| | |||||
* | reverted 4541, does not fix the problem | Martin Willi | 2008-11-03 | 1 | -0/+8 |
| | |||||
* | removed 0-byte truncation, fixes random Openssl RSA signature verification ↵ | Martin Willi | 2008-10-31 | 1 | -7/+0 |
| | | | | failures | ||||
* | fixed crash in openssl signature verification if sizeof(size_t) != ↵ | Martin Willi | 2008-10-31 | 1 | -1/+3 |
| | | | | sizeof(int) (64bit) | ||||
* | refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key | Andreas Steffen | 2008-10-28 | 2 | -22/+62 |
| | |||||
* | remove unused local DH_EXPONENT_ENTROPY definition | Andreas Steffen | 2008-10-27 | 1 | -2/+0 |
| | |||||
* | use 512 bits of entropy for secret DH exponents | Andreas Steffen | 2008-10-26 | 2 | -1/+4 |
| | |||||
* | implemented ipsec listalgs as a stroke command | Andreas Steffen | 2008-10-08 | 1 | -1/+1 |
| | |||||
* | get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 ↵ | Andreas Steffen | 2008-10-08 | 1 | -1/+1 |
| | | | | hash consistent with the IKEv2 keyid philosophy | ||||
* | Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype | Andreas Steffen | 2008-10-08 | 2 | -4/+24 |
| | |||||
* | using signed return value for read() | Martin Willi | 2008-09-30 | 1 | -1/+2 |
| | |||||
* | fixed DH value range testing | Martin Willi | 2008-09-17 | 1 | -1/+1 |
| | |||||
* | checking mpz_export return value properly | Martin Willi | 2008-09-17 | 3 | -8/+28 |
| | | | | fixes a potential DoS attack if a DH value of zero gets processed | ||||
* | agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific ↵ | Martin Willi | 2008-09-04 | 1 | -18/+68 |
| | | | | private key from the agent | ||||
* | libstrongswan agent plugin to use ssh-agent for RSA signatures | Martin Willi | 2008-09-02 | 5 | -0/+706 |
| | |||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 13 | -228/+267 |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | ||||
* | creating default IKE proposals dynamically using algorithm enumeration API | Martin Willi | 2008-08-28 | 4 | -31/+31 |
| | |||||
* | separated sha1_prf implementation from sha1_hasher | Martin Willi | 2008-08-28 | 6 | -133/+208 |
| | |||||
* | corrected caption | Andreas Steffen | 2008-08-21 | 1 | -1/+1 |
| | |||||
* | added sqlite busy handler: retries on locking conflicts | Martin Willi | 2008-08-21 | 1 | -0/+14 |
| | |||||
* | added a driver type getter for database implementations | Martin Willi | 2008-07-21 | 2 | -0/+18 |
| | |||||
* | using token enumerator to parser plugin list | Martin Willi | 2008-07-02 | 1 | -28/+7 |
| | |||||
* | sqlite plugin requires libsqlite3 => 3.3.1 to share connections | Martin Willi | 2008-06-30 | 1 | -5/+13 |
| | | | | use recursive locking if libsqlite3 < 3.5.0 | ||||
* | fixed ifndef typo for MYSQL_DATA_TRUNCATED check | Martin Willi | 2008-06-26 | 1 | -1/+1 |
| | |||||
* | fixed plugin loader destruction | Martin Willi | 2008-06-25 | 1 | -1/+1 |
| | |||||
* | enabling support for hardware accelerators in OpenSSL | Tobias Brunner | 2008-06-25 | 1 | -0/+6 |
| | |||||
* | reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version | Martin Willi | 2008-06-24 | 1 | -0/+7 |
| | |||||
* | enumerating loaded plugins in "ipsec statusall" | Martin Willi | 2008-06-24 | 2 | -2/+33 |
| | |||||
* | support of ECDSA signatures for all certificate types | Andreas Steffen | 2008-06-22 | 4 | -0/+13 |
| | |||||
* | removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql ↵ | Martin Willi | 2008-06-20 | 1 | -1/+0 |
| | | | | versions | ||||
* | loading PEM encoded public keys | Martin Willi | 2008-06-11 | 1 | -2/+18 |
| | |||||
* | refactoring | Tobias Brunner | 2008-06-10 | 1 | -27/+3 |
| | |||||
* | ECDSA with OpenSSL | Tobias Brunner | 2008-06-10 | 10 | -1/+1208 |
| | |||||
* | parsing of subjectPublicKeyInfo of x509 certificates extracted | Tobias Brunner | 2008-06-10 | 1 | -48/+26 |
| | |||||
* | link against openssl crypto library only | Martin Willi | 2008-06-06 | 1 | -1/+1 |
| | |||||
* | fixed NULL string mysql parameter | Martin Willi | 2008-06-05 | 1 | -1/+4 |
| | |||||
* | handle default key sizes in openssl_crypter | Andreas Steffen | 2008-05-28 | 1 | -4/+11 |
| | |||||
* | fixed copy-and-paste error | Andreas Steffen | 2008-05-23 | 1 | -1/+1 |
| | |||||
* | check if parsing of the RSA public key in an X.509 certificate was successful | Andreas Steffen | 2008-05-23 | 1 | -0/+5 |
| | |||||
* | fixed some compiler warnings | Martin Willi | 2008-05-23 | 1 | -1/+1 |
| |