Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | implemented XCBC algorithms (signer, prf) for IKE on top of a crypter | Martin Willi | 2008-04-30 | 9 | -0/+837 | |
| | | | | | | supporting ike=...-aesxcbc-... in ipsec.conf added AUTH_AES_XCBC_96 and PRF_AES128_CBC to default IKE proposal AES XCBC testcase | |||||
* | crypter_t api supports in-place encryption using NULL as output parameter | Martin Willi | 2008-04-30 | 3 | -15/+53 | |
| | ||||||
* | simplified the OpenSSL crypter a bit | Tobias Brunner | 2008-04-30 | 1 | -10/+4 | |
| | ||||||
* | simplified the OpenSSL hasher a bit | Tobias Brunner | 2008-04-30 | 1 | -11/+3 | |
| | ||||||
* | OpenSSL hasher does not need an internal buffer anymore | Tobias Brunner | 2008-04-30 | 1 | -44/+21 | |
| | ||||||
* | adding diffie hellman with OpenSSL | Tobias Brunner | 2008-04-29 | 4 | -1/+313 | |
| | ||||||
* | use SHA-1 as preferred hasher in the OpenSSL plugin | Tobias Brunner | 2008-04-29 | 1 | -2/+2 | |
| | ||||||
* | cosmetics | Andreas Steffen | 2008-04-28 | 1 | -19/+19 | |
| | ||||||
* | introduced ASN1_EXIT command in ASN.1 object syntax definition | Andreas Steffen | 2008-04-28 | 8 | -176/+131 | |
| | ||||||
* | added wrapper for OpenSSL hashers | Tobias Brunner | 2008-04-28 | 4 | -1/+284 | |
| | ||||||
* | algo lookup corrected | Tobias Brunner | 2008-04-28 | 1 | -3/+3 | |
| | ||||||
* | made algo struct static | Tobias Brunner | 2008-04-28 | 1 | -2/+2 | |
| | ||||||
* | typos | Tobias Brunner | 2008-04-28 | 1 | -2/+2 | |
| | ||||||
* | added a wrapper plugin for OpenSSL crypters (AES, 3DES, Blowfish etc.) | Tobias Brunner | 2008-04-28 | 5 | -0/+439 | |
| | ||||||
* | optimized parser->success() | Andreas Steffen | 2008-04-26 | 6 | -59/+47 | |
| | ||||||
* | refactoring of the ASN.1 parser | Andreas Steffen | 2008-04-26 | 8 | -834/+873 | |
| | ||||||
* | experimental Padlock plugin supportin SHA1 and AES-128 for VIA C7 Esther | Martin Willi | 2008-04-22 | 7 | -0/+599 | |
| | ||||||
* | removed status result from crypter interface to be consistent with other ↵ | Martin Willi | 2008-04-22 | 2 | -137/+47 | |
| | | | | crypto interfaces | |||||
* | support for hash and URL encoded certificate payloads in charon | Tobias Brunner | 2008-04-18 | 1 | -0/+26 | |
| | ||||||
* | added error logging to sqlite plugin | Martin Willi | 2008-04-15 | 1 | -4/+24 | |
| | ||||||
* | added API for random number generators, served through credential factory | Martin Willi | 2008-04-15 | 8 | -46/+339 | |
| | | | | ported randomizer_t to a rng_t on top of /dev/(u)random (plugin random) | |||||
* | compare certificates against full encoding to allow equality check of ↵ | Martin Willi | 2008-04-07 | 5 | -36/+50 | |
| | | | | untrusted certs | |||||
* | fixed segfault when opening a SQLite database fails | Martin Willi | 2008-04-07 | 1 | -1/+2 | |
| | ||||||
* | removed unused gmp.h to build libstrongswan without libgmp | Martin Willi | 2008-04-04 | 1 | -1/+0 | |
| | ||||||
* | fixed compile warnings | Martin Willi | 2008-04-02 | 1 | -0/+1 | |
| | ||||||
* | added missing files for commit [3721] | Martin Willi | 2008-04-01 | 2 | -0/+197 | |
| | ||||||
* | loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format) | Martin Willi | 2008-04-01 | 3 | -1/+9 | |
| | | | | testcase | |||||
* | removed unneded publicKeyInfo ASN1 structure | Martin Willi | 2008-04-01 | 1 | -16/+1 | |
| | ||||||
* | demoted ldap debug output to level 2 | Andreas Steffen | 2008-03-28 | 1 | -1/+1 | |
| | ||||||
* | caching of ocsp responses (experimental), no crl caching yet | Martin Willi | 2008-03-26 | 5 | -76/+42 | |
| | ||||||
* | treat sig_alg and algorithm comparison in a consistent way over all ↵ | Andreas Steffen | 2008-03-26 | 2 | -3/+9 | |
| | | | | certificate types | |||||
* | fixed compiler warnings | Martin Willi | 2008-03-26 | 3 | -10/+15 | |
| | ||||||
* | certificate factory can load certs from file | Andreas Steffen | 2008-03-25 | 3 | -51/+414 | |
| | ||||||
* | renamed certificate field in x509_cert.c to encoding | Andreas Steffen | 2008-03-25 | 1 | -9/+5 | |
| | ||||||
* | fixed refence counts before calling attribute certificate factory | Andreas Steffen | 2008-03-25 | 1 | -0/+4 | |
| | ||||||
* | corrected some doxygen entries | Andreas Steffen | 2008-03-22 | 4 | -26/+13 | |
| | ||||||
* | optimized self-signed certificate detection | Andreas Steffen | 2008-03-21 | 1 | -7/+6 | |
| | ||||||
* | self-signed certificates were not marked by x509_cert.c | Andreas Steffen | 2008-03-21 | 1 | -14/+22 | |
| | ||||||
* | added ietf group attribute support to attibute certificate factory | Andreas Steffen | 2008-03-21 | 1 | -0/+4 | |
| | ||||||
* | fixed memory allocation problem in openac | Andreas Steffen | 2008-03-21 | 1 | -13/+9 | |
| | ||||||
* | added BUILD_SERIAL component and fixed several ac bugs | Andreas Steffen | 2008-03-21 | 1 | -6/+14 | |
| | ||||||
* | added credential factory support for BULD_NOT_BEFORE_TIME and ↵ | Andreas Steffen | 2008-03-21 | 1 | -22/+23 | |
| | | | | BUILD_NOT_AFTER_TIME | |||||
* | added x509_ac_builder plugin | Andreas Steffen | 2008-03-21 | 1 | -0/+5 | |
| | ||||||
* | refactored openac and its attribute certificate factory | Andreas Steffen | 2008-03-20 | 5 | -2/+1365 | |
| | ||||||
* | included utils/linked_list.h | Andreas Steffen | 2008-03-20 | 1 | -0/+1 | |
| | ||||||
* | CA certificates are allowed to sign OCSP responsed without OCSP_SIGNER flag | Martin Willi | 2008-03-20 | 1 | -1/+2 | |
| | ||||||
* | The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA, | Martin Willi | 2008-03-19 | 4 | -62/+146 | |
| | | | | | | as it requires to XOR the key into the hashers state. A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA and the FIPS-PRF function to properly use the existing SHA1 implementation. | |||||
* | attempt to achieve consistent debugging output | Andreas Steffen | 2008-03-19 | 1 | -6/+6 | |
| | ||||||
* | creating public key from RSA private key | Martin Willi | 2008-03-18 | 2 | -3/+23 | |
| | | | | RSA key generation and signature test | |||||
* | made is_newer() a certificate_t method | Andreas Steffen | 2008-03-18 | 3 | -52/+98 | |
| |