Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | | | Properly initialize optional subject in PEM builder. | Tobias Brunner | 2012-04-30 | 1 | -1/+1 | |
| | | | ||||||
* | | | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -9/+24 | |
| | | | ||||||
* | | | CERT_TRUSTED_PUBKEY stores notBefore, notAfter and subject information | Andreas Steffen | 2012-04-25 | 1 | -7/+41 | |
| | | | ||||||
* | | | Added test vectors for AES-CMAC. | Tobias Brunner | 2012-04-03 | 3 | -0/+153 | |
| | | | ||||||
* | | | Implemented AES-CMAC based PRF and signer. | Tobias Brunner | 2012-04-03 | 9 | -0/+915 | |
| | | | | | | | | | | | | | | | | | | The cmac plugin implements AES-CMAC as defined in RFC 4493 and the signer and PRF based on it as defined in RFC 4494 and RFC 4615, respectively. | |||||
* | | | Fixed GNU license header in hmac and xcbc plugins. | Tobias Brunner | 2012-04-03 | 2 | -4/+4 | |
| | | | ||||||
* | | | Don't cast second argument of mem_printf_hook (%b) to size_t. | Tobias Brunner | 2012-03-27 | 1 | -3/+3 | |
|/ / | | | | | | | | | | | | | | | | | | | | | | | | | Also treat the given number as unsigned int. Due to the printf hook registration the second argument of mem_printf_hook (if called via printf etc.) is always of type int*. Casting this to a size_t pointer and then dereferencing that as int does not work on big endian machines if int is smaller than size_t (e.g. on ppc64). In order to make this change work if the argument is of a type larger than int, size_t for instance, the second argument for %b has to be casted to (u_)int. | |||||
* | | Compiler warnings fixed. | Tobias Brunner | 2012-02-14 | 2 | -2/+2 | |
| | | ||||||
* | | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files. | Tobias Brunner | 2012-02-01 | 1 | -54/+310 | |
| | | ||||||
* | | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes). | Tobias Brunner | 2012-02-01 | 1 | -1/+251 | |
| | | ||||||
* | | Added support to parse PKCS#8 encoded ECDSA private keys. | Tobias Brunner | 2012-02-01 | 3 | -12/+28 | |
| | | ||||||
* | | OpenSSL plugin parses ECDSA private keys with explicitly specified EC ↵ | Tobias Brunner | 2012-02-01 | 1 | -9/+30 | |
| | | | | | | | | | | | | | | parameters. This is needed in case the key itself does not contain the parameters, which is the case for PKCS#8. | |||||
* | | Parse RSA private keys from PKCS#8 encoded blobs. | Tobias Brunner | 2012-02-01 | 4 | -1/+151 | |
| | | ||||||
* | | Added PKCS#8 stub plugin. | Tobias Brunner | 2012-02-01 | 3 | -0/+132 | |
| | | ||||||
* | | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 2 | -20/+49 | |
| | | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | |||||
* | | Function added to plugin_loader to get a list of the names of loaded plugins. | Tobias Brunner | 2012-01-19 | 2 | -1/+34 | |
| | | ||||||
* | | Fix whitespaces | Adrian-Ken Rueegsegger | 2012-01-12 | 1 | -12/+12 | |
| | | ||||||
* | | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME. | Tobias Brunner | 2011-12-23 | 3 | -7/+7 | |
| | | ||||||
* | | Properly ASN.1 encode dates in certificates depending on the year. | Tobias Brunner | 2011-12-23 | 3 | -7/+7 | |
| | | ||||||
* | | Also log PGP parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -19/+19 | |
| | | ||||||
* | | Log messages for PKCS1 and PEM parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -11/+11 | |
| | | ||||||
* | | Log most X.509 related messages in new ASN log group. | Tobias Brunner | 2011-12-16 | 5 | -57/+57 | |
| | | ||||||
* | | Be less verbose if plugin dependecy not satisfied | Martin Willi | 2011-12-07 | 1 | -1/+1 | |
| | | ||||||
* | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 1 | -60/+0 | |
| | | ||||||
* | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -2/+2 | |
| | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+60 | |
| | | ||||||
* | | Reverse the changes made to openssl plugin for signature verification | Sansar Choinyambuu | 2011-11-28 | 1 | -60/+0 | |
| | | ||||||
* | | Changed the static function name in openssl_rsa_public_key object | Sansar Choinyambuu | 2011-11-28 | 1 | -3/+2 | |
| | | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function | |||||
* | | use openssl rsa_verify function | Sansar Choinyambuu | 2011-11-28 | 1 | -0/+62 | |
| | | ||||||
* | | pkcs11: Fixed a bug when creating public keys. | Tobias Brunner | 2011-11-09 | 1 | -1/+1 | |
|/ | ||||||
* | gcrypt does not support MD2 | Andreas Steffen | 2011-11-09 | 1 | -1/+0 | |
| | ||||||
* | assign get_features method | Andreas Steffen | 2011-11-07 | 1 | -1/+1 | |
| | ||||||
* | Change order of ocsp uris when parsing a cert | Thomas Egerer | 2011-11-04 | 1 | -1/+1 | |
| | ||||||
* | Handle certificates being on hold in a CRL | Thomas Egerer | 2011-11-04 | 1 | -1/+11 | |
| | | | | | | | Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not. | |||||
* | Use chunk_clear to memwipe shared secret | Thomas Egerer | 2011-11-04 | 1 | -1/+1 | |
| | ||||||
* | Fix resource leak in x509_ocsp_response | Thomas Egerer | 2011-11-04 | 1 | -0/+4 | |
| | ||||||
* | Common spelling errors fixed. | Tobias Brunner | 2011-11-03 | 1 | -1/+1 | |
| | ||||||
* | pkcs11: Make public key operations on tokens optional. | Tobias Brunner | 2011-11-03 | 1 | -20/+21 | |
| | ||||||
* | pkcs11: Make sure a key can be used for a given signature scheme. | Tobias Brunner | 2011-11-02 | 3 | -16/+31 | |
| | ||||||
* | pkcs11: Register ECDSA feature. | Tobias Brunner | 2011-11-02 | 1 | -1/+10 | |
| | ||||||
* | pkcs11: We have to create our own hashes for some signature schemes. | Tobias Brunner | 2011-11-02 | 4 | -12/+81 | |
| | ||||||
* | pkcs11: Lookup the public key of a private key by CKA_ID. | Tobias Brunner | 2011-11-02 | 2 | -0/+125 | |
| | | | | | | Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there. | |||||
* | pkcs11: Search for private keys in a more generic way. | Tobias Brunner | 2011-11-02 | 1 | -20/+19 | |
| | | | | | | Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key. | |||||
* | pkcs11: Added support to encode ECDSA public keys. | Tobias Brunner | 2011-11-02 | 1 | -0/+89 | |
| | ||||||
* | pkcs11: Parse ECDSA public keys and find/create them on tokens. | Tobias Brunner | 2011-11-02 | 1 | -2/+177 | |
| | ||||||
* | pkcs11: Added generic functions to find/create public keys on tokens. | Tobias Brunner | 2011-11-02 | 1 | -40/+75 | |
| | ||||||
* | pkcs11: Store public key length in bits. | Tobias Brunner | 2011-11-02 | 1 | -3/+3 | |
| | ||||||
* | pkcs11: Fix encoding of RSA public keys. | Tobias Brunner | 2011-11-02 | 1 | -0/+4 | |
| | ||||||
* | pkcs11: Use create_object_attr_enumerator to encode RSA public key. | Tobias Brunner | 2011-11-02 | 1 | -17/+7 | |
| | ||||||
* | pkcs11: Instead of a mutex use a new session to do multipart operations. | Tobias Brunner | 2011-11-02 | 2 | -40/+66 | |
| |