Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | openssl: RAND_pseudo_bytes() returns 0 if bytes are not cryptographically strong | Martin Willi | 2013-07-04 | 1 | -9/+6 | |
| | | | | For our purposes with RNG_WEAK this is fine, so accept a zero return value. | |||||
* | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 2 | -12/+8 | |
| | | | | | Multiple additional search paths can be added with the add_path() method. | |||||
* | plugin-loader: Method added to provide additional search paths for plugins | Tobias Brunner | 2013-06-27 | 2 | -10/+66 | |
| | ||||||
* | plugin-loader: Move logging of failed features to status() | Tobias Brunner | 2013-06-21 | 1 | -7/+11 | |
| | | | | | | | | | Still log an error message if critical features fail, as loaded plugins/features are not logged in that case. This way loaded plugins are printed before failed features and the relation is easier to make for users. It also allows programs to log this message on a different level. | |||||
* | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 2 | -0/+18 | |
| | ||||||
* | plugin-loader: Collect statistics while loading features, print them in case ↵ | Tobias Brunner | 2013-06-21 | 1 | -69/+40 | |
| | | | | | | | features failed to load There is no need to explicitly search for failed features in critical plugins as this is now detected while loading the features. | |||||
* | plugin-loader: Use different log level if failed feature is in critical plugin | Tobias Brunner | 2013-06-21 | 1 | -2/+16 | |
| | ||||||
* | plugin-loader: Log message when failing to load plugin | Tobias Brunner | 2013-06-21 | 1 | -0/+8 | |
| | ||||||
* | plugin-loader: Reduce verbosity while loading plugins | Tobias Brunner | 2013-06-21 | 1 | -4/+4 | |
| | ||||||
* | Move test-runners has_feature() function to plugin loader | Martin Willi | 2013-06-21 | 2 | -0/+38 | |
| | ||||||
* | pubkey: Improve comparison of raw public key certificate objects | Tobias Brunner | 2013-06-21 | 1 | -1/+11 | |
| | ||||||
* | curl: add an option to fetch bound to a local source address | Martin Willi | 2013-06-11 | 1 | -0/+9 | |
| | ||||||
* | Refactored plugin-loader with improved dependency resolution | Tobias Brunner | 2013-06-11 | 2 | -238/+479 | |
| | | | | | | With the new implementation the plugins don't have to be listed in any special order, dependencies are properly resolved. The order only matters if two plugins provide the same feature. | |||||
* | test-vectors: Use plugin features | Tobias Brunner | 2013-06-11 | 1 | -1/+12 | |
| | ||||||
* | revocation: Use plugin features with soft dependencies on fetcher and ↵ | Tobias Brunner | 2013-06-11 | 1 | -3/+35 | |
| | | | | en-/decoding | |||||
* | padlock: Use plugin features to properly register algorithms | Tobias Brunner | 2013-06-11 | 1 | -39/+43 | |
| | ||||||
* | pkcs11: Use plugin_features_add() in get_features() | Tobias Brunner | 2013-06-11 | 1 | -21/+8 | |
| | ||||||
* | plugin-feature: Added helper function to extend arrays of plugin features | Tobias Brunner | 2013-06-11 | 1 | -0/+21 | |
| | ||||||
* | constraints: Use plugin features with soft dependency on X.509 decoding | Tobias Brunner | 2013-06-11 | 1 | -3/+31 | |
| | ||||||
* | blowfish: Use plugin features to properly register crypter | Tobias Brunner | 2013-06-11 | 1 | -8/+13 | |
| | ||||||
* | unbound: Use plugin features and provide RESOLVER | Tobias Brunner | 2013-06-11 | 1 | -3/+12 | |
| | ||||||
* | plugin-feature: Add feature for DNSSEC-enabled resolvers | Tobias Brunner | 2013-06-11 | 2 | -0/+15 | |
| | ||||||
* | plugin-feature: Function added to exactly compare plugin features | Tobias Brunner | 2013-06-11 | 3 | -4/+66 | |
| | ||||||
* | openssl: add support for IP addr blocks in X.509 certificates | Michael Rossberg | 2013-05-24 | 1 | -1/+115 | |
| | ||||||
* | af-alg: fix number of signers after adding untruncated HMAC-SHA-512 (1f2a34d6) | Martin Willi | 2013-05-15 | 1 | -1/+1 | |
| | ||||||
* | openssl: Only warn about unavailable FIPS mode if the user requested it | Tobias Brunner | 2013-05-08 | 1 | -1/+1 | |
| | ||||||
* | openssl: Cleanup thread specific error buffer | Tobias Brunner | 2013-05-08 | 1 | -5/+38 | |
| | ||||||
* | openssl: Don't use deprecated CRYPTO_set_id_callback() with OpenSSL >= 1.0.0 | Tobias Brunner | 2013-05-08 | 1 | -17/+29 | |
| | ||||||
* | openssl: Add PKCS#12 parsing via OpenSSL | Tobias Brunner | 2013-05-08 | 4 | -0/+307 | |
| | ||||||
* | openssl: Properly cleanup OpenSSL library | Tobias Brunner | 2013-05-08 | 1 | -2/+7 | |
| | ||||||
* | PEM plugin loads PKCS#12 containers from (DER-encoded) files | Tobias Brunner | 2013-05-08 | 3 | -0/+24 | |
| | | | | | It is not actually able to handle PEM encoded PKCS#12 files produced by OpenSSL. | |||||
* | Remove pluto specific certificate types | Tobias Brunner | 2013-05-08 | 1 | -6/+0 | |
| | ||||||
* | Add support for untruncated HMAC-SHA-512 | Tobias Brunner | 2013-05-08 | 3 | -0/+4 | |
| | ||||||
* | Add pkcs12 plugin which adds support for decoding PKCS#12 containers | Tobias Brunner | 2013-05-08 | 5 | -0/+754 | |
| | ||||||
* | Register PKCS#8 builder for KEY_ANY | Tobias Brunner | 2013-05-08 | 1 | -0/+1 | |
| | ||||||
* | Add support for PKCS#7/CMS encrypted-data | Tobias Brunner | 2013-05-08 | 4 | -0/+256 | |
| | ||||||
* | Add test vectors for RC2 | Tobias Brunner | 2013-05-08 | 3 | -0/+118 | |
| | ||||||
* | Add implementation of the RC2 block cipher (RFC 2268) | Tobias Brunner | 2013-05-08 | 5 | -0/+532 | |
| | ||||||
* | Extract PKCS#5 handling from pkcs8 plugin to separate helper class | Tobias Brunner | 2013-05-08 | 1 | -455/+16 | |
| | ||||||
* | agent: Use sshkey plugin to parse keys, adds support for ECDSA | Tobias Brunner | 2013-05-07 | 2 | -56/+66 | |
| | ||||||
* | sshkey: Add support for ECDSA keys | Tobias Brunner | 2013-05-07 | 1 | -0/+70 | |
| | ||||||
* | sshkey: Added builder for SSHKEY RSA keys | Tobias Brunner | 2013-05-07 | 4 | -1/+139 | |
| | ||||||
* | Add sshkey plugin stub that will parse RFC 4253 public keys | Tobias Brunner | 2013-05-07 | 3 | -0/+129 | |
| | ||||||
* | openssl: Define a default for FIPS_MODE | Tobias Brunner | 2013-05-03 | 1 | -0/+4 | |
| | ||||||
* | support of OpenSSL FIPS-140-2 library | Andreas Steffen | 2013-04-16 | 2 | -1/+20 | |
| | ||||||
* | Allow SHA1_Init()/SHA1_Update() to fail if OpenSSL version >= 1.0 | Martin Willi | 2013-04-10 | 1 | -0/+14 | |
| | ||||||
* | Check RSA_public_decrypt() length before constructing and comparing a chunk | Martin Willi | 2013-04-10 | 1 | -7/+10 | |
| | | | | | If decryption fails, it returns -1. chunk_equals() should catch that error, but be more explicit in error checking. | |||||
* | RSA_check_key() may return -1 if it fails | Martin Willi | 2013-04-10 | 1 | -2/+2 | |
| | ||||||
* | RAND_bytes/RAND_pseudo_bytes returns -1 if it is not supported by RAND method | Martin Willi | 2013-04-10 | 1 | -1/+1 | |
| | ||||||
* | Check return value of ECDSA_Verify() correctly | Martin Willi | 2013-04-10 | 1 | -1/+1 | |
| |