Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 ↵ | Andreas Steffen | 2008-10-08 | 1 | -1/+1 | |
| | | | | hash consistent with the IKEv2 keyid philosophy | |||||
* | Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype | Andreas Steffen | 2008-10-08 | 2 | -4/+24 | |
| | ||||||
* | using signed return value for read() | Martin Willi | 2008-09-30 | 1 | -1/+2 | |
| | ||||||
* | fixed DH value range testing | Martin Willi | 2008-09-17 | 1 | -1/+1 | |
| | ||||||
* | checking mpz_export return value properly | Martin Willi | 2008-09-17 | 3 | -8/+28 | |
| | | | | fixes a potential DoS attack if a DH value of zero gets processed | |||||
* | agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific ↵ | Martin Willi | 2008-09-04 | 1 | -18/+68 | |
| | | | | private key from the agent | |||||
* | libstrongswan agent plugin to use ssh-agent for RSA signatures | Martin Willi | 2008-09-02 | 5 | -0/+706 | |
| | ||||||
* | refactored credential builder | Martin Willi | 2008-09-02 | 13 | -228/+267 | |
| | | | | | | | | | allow enumeration of matching builders try a second builder if the first one fails builder clones resources internally on demand caller frees added resources on failure and success stricter handling of non-supported build parts | |||||
* | creating default IKE proposals dynamically using algorithm enumeration API | Martin Willi | 2008-08-28 | 4 | -31/+31 | |
| | ||||||
* | separated sha1_prf implementation from sha1_hasher | Martin Willi | 2008-08-28 | 6 | -133/+208 | |
| | ||||||
* | corrected caption | Andreas Steffen | 2008-08-21 | 1 | -1/+1 | |
| | ||||||
* | added sqlite busy handler: retries on locking conflicts | Martin Willi | 2008-08-21 | 1 | -0/+14 | |
| | ||||||
* | added a driver type getter for database implementations | Martin Willi | 2008-07-21 | 2 | -0/+18 | |
| | ||||||
* | using token enumerator to parser plugin list | Martin Willi | 2008-07-02 | 1 | -28/+7 | |
| | ||||||
* | sqlite plugin requires libsqlite3 => 3.3.1 to share connections | Martin Willi | 2008-06-30 | 1 | -5/+13 | |
| | | | | use recursive locking if libsqlite3 < 3.5.0 | |||||
* | fixed ifndef typo for MYSQL_DATA_TRUNCATED check | Martin Willi | 2008-06-26 | 1 | -1/+1 | |
| | ||||||
* | fixed plugin loader destruction | Martin Willi | 2008-06-25 | 1 | -1/+1 | |
| | ||||||
* | enabling support for hardware accelerators in OpenSSL | Tobias Brunner | 2008-06-25 | 1 | -0/+6 | |
| | ||||||
* | reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version | Martin Willi | 2008-06-24 | 1 | -0/+7 | |
| | ||||||
* | enumerating loaded plugins in "ipsec statusall" | Martin Willi | 2008-06-24 | 2 | -2/+33 | |
| | ||||||
* | support of ECDSA signatures for all certificate types | Andreas Steffen | 2008-06-22 | 4 | -0/+13 | |
| | ||||||
* | removed unused MYSQL_DATA_TRUNCATED check for compatibility with older mysql ↵ | Martin Willi | 2008-06-20 | 1 | -1/+0 | |
| | | | | versions | |||||
* | loading PEM encoded public keys | Martin Willi | 2008-06-11 | 1 | -2/+18 | |
| | ||||||
* | refactoring | Tobias Brunner | 2008-06-10 | 1 | -27/+3 | |
| | ||||||
* | ECDSA with OpenSSL | Tobias Brunner | 2008-06-10 | 10 | -1/+1208 | |
| | ||||||
* | parsing of subjectPublicKeyInfo of x509 certificates extracted | Tobias Brunner | 2008-06-10 | 1 | -48/+26 | |
| | ||||||
* | link against openssl crypto library only | Martin Willi | 2008-06-06 | 1 | -1/+1 | |
| | ||||||
* | fixed NULL string mysql parameter | Martin Willi | 2008-06-05 | 1 | -1/+4 | |
| | ||||||
* | handle default key sizes in openssl_crypter | Andreas Steffen | 2008-05-28 | 1 | -4/+11 | |
| | ||||||
* | fixed copy-and-paste error | Andreas Steffen | 2008-05-23 | 1 | -1/+1 | |
| | ||||||
* | check if parsing of the RSA public key in an X.509 certificate was successful | Andreas Steffen | 2008-05-23 | 1 | -0/+5 | |
| | ||||||
* | fixed some compiler warnings | Martin Willi | 2008-05-23 | 1 | -1/+1 | |
| | ||||||
* | added display of holderIssuer, holderSerial, and authorityKeyIdentifier | Andreas Steffen | 2008-05-23 | 1 | -3/+40 | |
| | ||||||
* | implement basic listing of attribute certificates | Andreas Steffen | 2008-05-22 | 1 | -8/+3 | |
| | ||||||
* | Id and typo | Tobias Brunner | 2008-05-22 | 7 | -1/+13 | |
| | ||||||
* | added the ECP groups from RFC 5114 | Tobias Brunner | 2008-05-22 | 2 | -0/+10 | |
| | ||||||
* | added ECDH with OpenSSL (see RFC 4753) | Tobias Brunner | 2008-05-22 | 4 | -1/+421 | |
| | ||||||
* | fixed segmentation fault caused by malformed attribute certificates | Andreas Steffen | 2008-05-21 | 1 | -0/+5 | |
| | ||||||
* | added more verbosity if signature hash OID is unknown | Martin Willi | 2008-05-21 | 1 | -1/+3 | |
| | ||||||
* | removed debug statement | Andreas Steffen | 2008-05-20 | 1 | -1/+0 | |
| | ||||||
* | fixed whitespace eating in plugin loader | Andreas Steffen | 2008-05-20 | 1 | -10/+16 | |
| | ||||||
* | added missing break in case statement | Andreas Steffen | 2008-05-19 | 1 | -1/+3 | |
| | ||||||
* | fixed warning if plugin list has trailing whitespaces | Martin Willi | 2008-05-16 | 1 | -0/+4 | |
| | ||||||
* | loading default modules depending on configure options | Martin Willi | 2008-05-16 | 1 | -2/+6 | |
| | ||||||
* | plugin load configuration in strongswan.conf | Martin Willi | 2008-05-15 | 2 | -48/+82 | |
| | | | | | | some components accept a "component.load" option with a space separated list of plugins to load libcharon- plugins are now handled the same way as libstrongswan- plugins | |||||
* | RSA with OpenSSL | Tobias Brunner | 2008-05-15 | 6 | -1/+966 | |
| | ||||||
* | corrected deinitialisation of public key factory | Tobias Brunner | 2008-05-15 | 2 | -3/+3 | |
| | ||||||
* | generic public key factory moved | Tobias Brunner | 2008-05-15 | 6 | -14/+16 | |
| | ||||||
* | typo | Tobias Brunner | 2008-05-14 | 1 | -3/+3 | |
| | ||||||
* | reverted [3945], proper fix for zero value ASN1 integer | Martin Willi | 2008-05-13 | 1 | -3/+7 | |
| |