aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan/plugins
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Properly initialize optional subject in PEM builder.Tobias Brunner2012-04-301-1/+1
| | |
* | | added support for raw RSA public keys to strokeAndreas Steffen2012-04-301-9/+24
| | |
* | | CERT_TRUSTED_PUBKEY stores notBefore, notAfter and subject informationAndreas Steffen2012-04-251-7/+41
| | |
* | | Added test vectors for AES-CMAC.Tobias Brunner2012-04-033-0/+153
| | |
* | | Implemented AES-CMAC based PRF and signer.Tobias Brunner2012-04-039-0/+915
| | | | | | | | | | | | | | | | | | The cmac plugin implements AES-CMAC as defined in RFC 4493 and the signer and PRF based on it as defined in RFC 4494 and RFC 4615, respectively.
* | | Fixed GNU license header in hmac and xcbc plugins.Tobias Brunner2012-04-032-4/+4
| | |
* | | Don't cast second argument of mem_printf_hook (%b) to size_t.Tobias Brunner2012-03-271-3/+3
|/ / | | | | | | | | | | | | | | | | | | | | | | | | Also treat the given number as unsigned int. Due to the printf hook registration the second argument of mem_printf_hook (if called via printf etc.) is always of type int*. Casting this to a size_t pointer and then dereferencing that as int does not work on big endian machines if int is smaller than size_t (e.g. on ppc64). In order to make this change work if the argument is of a type larger than int, size_t for instance, the second argument for %b has to be casted to (u_)int.
* | Compiler warnings fixed.Tobias Brunner2012-02-142-2/+2
| |
* | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files.Tobias Brunner2012-02-011-54/+310
| |
* | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes).Tobias Brunner2012-02-011-1/+251
| |
* | Added support to parse PKCS#8 encoded ECDSA private keys.Tobias Brunner2012-02-013-12/+28
| |
* | OpenSSL plugin parses ECDSA private keys with explicitly specified EC ↵Tobias Brunner2012-02-011-9/+30
| | | | | | | | | | | | | | parameters. This is needed in case the key itself does not contain the parameters, which is the case for PKCS#8.
* | Parse RSA private keys from PKCS#8 encoded blobs.Tobias Brunner2012-02-014-1/+151
| |
* | Added PKCS#8 stub plugin.Tobias Brunner2012-02-013-0/+132
| |
* | Cache list of plugin names to further simplify its usage.Tobias Brunner2012-01-192-20/+49
| | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins.
* | Function added to plugin_loader to get a list of the names of loaded plugins.Tobias Brunner2012-01-192-1/+34
| |
* | Fix whitespacesAdrian-Ken Rueegsegger2012-01-121-12/+12
| |
* | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME.Tobias Brunner2011-12-233-7/+7
| |
* | Properly ASN.1 encode dates in certificates depending on the year.Tobias Brunner2011-12-233-7/+7
| |
* | Also log PGP parsing in ASN log group.Tobias Brunner2011-12-162-19/+19
| |
* | Log messages for PKCS1 and PEM parsing in ASN log group.Tobias Brunner2011-12-162-11/+11
| |
* | Log most X.509 related messages in new ASN log group.Tobias Brunner2011-12-165-57/+57
| |
* | Be less verbose if plugin dependecy not satisfiedMartin Willi2011-12-071-1/+1
| |
* | Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-281-60/+0
| |
* | Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-2/+2
| | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function
* | use openssl rsa_verify functionSansar Choinyambuu2011-11-281-0/+60
| |
* | Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-281-60/+0
| |
* | Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-3/+2
| | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function
* | use openssl rsa_verify functionSansar Choinyambuu2011-11-281-0/+62
| |
* | pkcs11: Fixed a bug when creating public keys.Tobias Brunner2011-11-091-1/+1
|/
* gcrypt does not support MD2Andreas Steffen2011-11-091-1/+0
|
* assign get_features methodAndreas Steffen2011-11-071-1/+1
|
* Change order of ocsp uris when parsing a certThomas Egerer2011-11-041-1/+1
|
* Handle certificates being on hold in a CRLThomas Egerer2011-11-041-1/+11
| | | | | | | Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not.
* Use chunk_clear to memwipe shared secretThomas Egerer2011-11-041-1/+1
|
* Fix resource leak in x509_ocsp_responseThomas Egerer2011-11-041-0/+4
|
* Common spelling errors fixed.Tobias Brunner2011-11-031-1/+1
|
* pkcs11: Make public key operations on tokens optional.Tobias Brunner2011-11-031-20/+21
|
* pkcs11: Make sure a key can be used for a given signature scheme.Tobias Brunner2011-11-023-16/+31
|
* pkcs11: Register ECDSA feature.Tobias Brunner2011-11-021-1/+10
|
* pkcs11: We have to create our own hashes for some signature schemes.Tobias Brunner2011-11-024-12/+81
|
* pkcs11: Lookup the public key of a private key by CKA_ID.Tobias Brunner2011-11-022-0/+125
| | | | | | Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there.
* pkcs11: Search for private keys in a more generic way.Tobias Brunner2011-11-021-20/+19
| | | | | | Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key.
* pkcs11: Added support to encode ECDSA public keys.Tobias Brunner2011-11-021-0/+89
|
* pkcs11: Parse ECDSA public keys and find/create them on tokens.Tobias Brunner2011-11-021-2/+177
|
* pkcs11: Added generic functions to find/create public keys on tokens.Tobias Brunner2011-11-021-40/+75
|
* pkcs11: Store public key length in bits.Tobias Brunner2011-11-021-3/+3
|
* pkcs11: Fix encoding of RSA public keys.Tobias Brunner2011-11-021-0/+4
|
* pkcs11: Use create_object_attr_enumerator to encode RSA public key.Tobias Brunner2011-11-021-17/+7
|
* pkcs11: Instead of a mutex use a new session to do multipart operations.Tobias Brunner2011-11-022-40/+66
|