Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | Enumerate tokens and their mechanisms, wait for slot events | Martin Willi | 2010-08-04 | 1 | -9/+222 | |
| | ||||||
* | Depend on libcharon until we have a thread pool to use | Martin Willi | 2010-08-04 | 1 | -1/+2 | |
| | ||||||
* | Add enum names for CK_MECHANISM_TYPE constants | Martin Willi | 2010-08-04 | 2 | -0/+279 | |
| | ||||||
* | Make the PKCS#11 padding string trimming public, add null terminator | Martin Willi | 2010-08-04 | 2 | -10/+18 | |
| | ||||||
* | Added a getter for the library alias | Martin Willi | 2010-08-04 | 2 | -0/+20 | |
| | ||||||
* | Moved PKCS#11 library loading to dedicated manager | Martin Willi | 2010-08-04 | 4 | -30/+135 | |
| | ||||||
* | Use locking, prefer our mutex abstraction layer | Martin Willi | 2010-08-04 | 1 | -1/+60 | |
| | ||||||
* | Added enum names for PKCS#11 return values | Martin Willi | 2010-08-04 | 2 | -3/+162 | |
| | ||||||
* | Load PKCS#11 modules defined in strongswan.conf | Martin Willi | 2010-08-04 | 1 | -0/+33 | |
| | ||||||
* | Implemented an abstraction layer for PKCS#11 module loading | Martin Willi | 2010-08-04 | 3 | -1/+201 | |
| | ||||||
* | Imported the free pkcs11.h header form the Scute project | Martin Willi | 2010-08-04 | 2 | -1/+1358 | |
| | ||||||
* | Added PKCS#11 token plugin stub | Martin Willi | 2010-08-04 | 3 | -0/+108 | |
| | ||||||
* | Added support for AUTH_HMAC_SHA2_256_256, used in TLS | Martin Willi | 2010-08-03 | 1 | -0/+3 | |
| | ||||||
* | Added support for Certificate, CRL and PKCS10 encoding to PEM plugin | Martin Willi | 2010-07-13 | 1 | -0/+19 | |
| | ||||||
* | Support different encoding types in certificate.get_encoding() | Martin Willi | 2010-07-13 | 11 | -50/+138 | |
| | ||||||
* | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 26 | -160/+160 | |
| | | | | encoding | |||||
* | Moved keys/key_encoding.[ch] to cred_encoding.[ch] | Martin Willi | 2010-07-13 | 3 | -3/+3 | |
| | ||||||
* | Moved addrblock plugin to libcharon | Martin Willi | 2010-07-13 | 5 | -292/+0 | |
| | ||||||
* | Moved CRL/OCSP checking to a dedicated plugin called revocation | Martin Willi | 2010-07-13 | 5 | -0/+750 | |
| | ||||||
* | Moved X509 addrBlock validation to a separate addrblock plugin | Martin Willi | 2010-07-13 | 5 | -0/+292 | |
| | ||||||
* | Some Doxygen fixes. | Tobias Brunner | 2010-07-05 | 1 | -4/+4 | |
| | ||||||
* | Select subjectAltName address family using address length in openssl plugin | Martin Willi | 2010-06-24 | 1 | -2/+12 | |
| | ||||||
* | Select subjectAltName address family using address length in x509 plugin | Martin Willi | 2010-06-24 | 1 | -1/+11 | |
| | ||||||
* | Fixing compilation of the OpenSSL plugin if ENGINE support is disabled. | Tobias Brunner | 2010-06-22 | 2 | -2/+14 | |
| | | | | | That is, enable compilation if OpenSSL was configured with OPENSSL_NO_ENGINE. | |||||
* | Fixing compilation of the OpenSSL plugin if Elliptic Curve support is disabled. | Tobias Brunner | 2010-06-22 | 4 | -3/+25 | |
| | | | | | That is, enable compilation if OpenSSL was configured with OPENSSL_NO_EC. | |||||
* | Unwrap subjectKeyIdentifier from OCTET_STRING | Martin Willi | 2010-05-26 | 1 | -4/+12 | |
| | ||||||
* | Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier | Martin Willi | 2010-05-21 | 1 | -1/+1 | |
| | ||||||
* | Added support for CRL generation to x509 plugin | Martin Willi | 2010-05-21 | 3 | -3/+199 | |
| | ||||||
* | Removed is_newer() from certificate_t, obsoleting all implementations | Martin Willi | 2010-05-21 | 9 | -175/+2 | |
| | ||||||
* | Migrated x509_crl_t to INIT/METHOD macros | Martin Willi | 2010-05-21 | 1 | -95/+70 | |
| | ||||||
* | Implemented X.509 CRL reading using OpenSSL | Martin Willi | 2010-05-21 | 4 | -1/+606 | |
| | ||||||
* | Implemented X.509 certificate reading using OpenSSL | Martin Willi | 2010-05-21 | 6 | -2/+1054 | |
| | ||||||
* | Fixed doxygen group | Martin Willi | 2010-05-20 | 1 | -1/+1 | |
| | ||||||
* | Explicitly link gpg-error to gcrypt plugin | Martin Willi | 2010-05-17 | 1 | -1/+1 | |
| | ||||||
* | Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin | Martin Willi | 2010-05-05 | 2 | -2/+16 | |
| | ||||||
* | Do not check pointer, but length of a chunk | Martin Willi | 2010-05-05 | 1 | -1/+1 | |
| | ||||||
* | Do not print filename twice if plugin loading fails, dlerror() contains the ↵ | Martin Willi | 2010-05-05 | 1 | -2/+1 | |
| | | | | filename | |||||
* | Fixed RSA key generation with gcrypt | Martin Willi | 2010-04-29 | 1 | -1/+1 | |
| | ||||||
* | PEM encoder supports encoding from RSA components directly, allowing gcrypt ↵ | Martin Willi | 2010-04-29 | 3 | -37/+42 | |
| | | | | plugin to encode in PEM | |||||
* | Added support for DH groups 22, 23 and 24, patch contributed by Joy Latten | Martin Willi | 2010-04-19 | 4 | -1/+29 | |
| | ||||||
* | Fixed OpenSSL engine_id setting, i.e. do not use 'library.' prefix for ↵ | Tobias Brunner | 2010-04-10 | 1 | -1/+1 | |
| | | | | settings in libstrongswan. | |||||
* | Store DH generator in a chunk, hide non-public data in a private struct | Martin Willi | 2010-04-08 | 3 | -18/+27 | |
| | ||||||
* | Some whitespace fixes. | Tobias Brunner | 2010-04-06 | 5 | -8/+8 | |
| | ||||||
* | Adding DBG_LIB to all calls of libstrongswan's version of DBG*. | Tobias Brunner | 2010-04-06 | 41 | -283/+340 | |
| | ||||||
* | PEM encoding for OpenSSL RSA and EC public and private keys | Andreas Steffen | 2010-04-04 | 5 | -12/+72 | |
| | ||||||
* | PEM encoding for GMP RSA public and private keys | Andreas Steffen | 2010-04-04 | 6 | -3/+167 | |
| | ||||||
* | fixed doxygen group | Andreas Steffen | 2010-04-03 | 1 | -1/+1 | |
| | ||||||
* | change #define to PEM_BUILDER_H_ | Andreas Steffen | 2010-04-03 | 1 | -3/+3 | |
| | ||||||
* | Moving attr-sql plugin from libstrongswan to libhydra. | Tobias Brunner | 2010-03-24 | 7 | -1989/+0 | |
| | ||||||
* | Fixed ipsec pool --batch command | Heiko Hund | 2010-03-24 | 1 | -2/+2 | |
| | | | | | | | | | | | | | | | | | | | | | | | | | | --batch mode has shown to be buggy in very obscure ways in the first real life tests. For example a batch file --del pool1 --replace pool2 --addresses file1 returned the error "/usr/libexec/ipsec/pool: unrecognized option '--lace'" which was gone after moving the --del behind --replace. With the patch from below applied everything works like a charm. From the info on the man page it seem to be unrelated to this problem, though: A program that scans multiple argument vectors, or rescans the same vector more than once, and wants to make use of GNU extensions such as '+' and '-' at the start of optstring, or changes the value of POSIXLY_CORRECT between scans, must reinitialize getopt() by resetting optind to 0, rather than the traditional value of 1. (Resetting to 0 forces the invocation of an internal initialization routine that rechecks POSIXLY_CORRECT and checks for GNU exten- sions in optstring.) Signed-off-by: Heiko Hund <hhund@astaro.com> |