Commit message (Collapse) | Author | Age | Files | Lines | ||
---|---|---|---|---|---|---|
... | ||||||
* | soup: omit deprecated g_type_init() when using >= GLIB 2.36 | Martin Willi | 2013-07-18 | 1 | -0/+2 | |
| | ||||||
* | keychain: flush certificate cache after reloading System keychain | Martin Willi | 2013-07-18 | 1 | -0/+2 | |
| | ||||||
* | keychain: monitor changes in the system keychain, reload when necessary | Martin Willi | 2013-07-18 | 1 | -0/+65 | |
| | ||||||
* | keychain: use SearchCopyNext keychain enumeration for System certs as well | Martin Willi | 2013-07-18 | 1 | -71/+12 | |
| | | | | | | | SecItemCopyMatching seems to be problematic regarding memory management. And as there does not seem to be a good alternative to enumerate the System Roots keychain using the SecItemCopyMatching API, we stick to the deprecated enumeration functions for now. | |||||
* | keychain: load certificates from System Roots Keychain | Martin Willi | 2013-07-18 | 1 | -0/+65 | |
| | ||||||
* | keychain: load certificates only once during startup, improving performance | Martin Willi | 2013-07-18 | 3 | -111/+78 | |
| | ||||||
* | keychain: support on-the-fly enumeration of trusted/untrusted certificates | Martin Willi | 2013-07-18 | 2 | -1/+118 | |
| | ||||||
* | keychain: add a stub for a credential plugin using OS X Keychain Services | Martin Willi | 2013-07-18 | 5 | -0/+247 | |
| | ||||||
* | openssl: parse X.509 extended key usage from extension parsing loop | Martin Willi | 2013-07-18 | 1 | -33/+38 | |
| | | | | | Otherwise parsing gets aborted if unknown critical extensions are handled as error. | |||||
* | openssl: show which critical X.509 extension is not supported | Martin Willi | 2013-07-18 | 1 | -1/+6 | |
| | ||||||
* | pkcs12: Add plugin dependencies with soft dependencies on the most common ↵ | Tobias Brunner | 2013-07-15 | 1 | -0/+6 | |
| | | | | algorithms | |||||
* | Recognize critical IssuingDistributionPoint CRL extension | Andreas Steffen | 2013-07-12 | 2 | -0/+7 | |
| | ||||||
* | Use strpfx() helper where appropriate | Tobias Brunner | 2013-07-08 | 4 | -4/+4 | |
| | ||||||
* | openssl: RAND_pseudo_bytes() returns 0 if bytes are not cryptographically strong | Martin Willi | 2013-07-04 | 1 | -9/+6 | |
| | | | | For our purposes with RNG_WEAK this is fine, so accept a zero return value. | |||||
* | plugin-loader: Removed unused path argument of load() method | Tobias Brunner | 2013-06-28 | 2 | -12/+8 | |
| | | | | | Multiple additional search paths can be added with the add_path() method. | |||||
* | plugin-loader: Method added to provide additional search paths for plugins | Tobias Brunner | 2013-06-27 | 2 | -10/+66 | |
| | ||||||
* | plugin-loader: Move logging of failed features to status() | Tobias Brunner | 2013-06-21 | 1 | -7/+11 | |
| | | | | | | | | | Still log an error message if critical features fail, as loaded plugins/features are not logged in that case. This way loaded plugins are printed before failed features and the relation is easier to make for users. It also allows programs to log this message on a different level. | |||||
* | plugin-loader: Add method to print loaded plugins on a given log level | Tobias Brunner | 2013-06-21 | 2 | -0/+18 | |
| | ||||||
* | plugin-loader: Collect statistics while loading features, print them in case ↵ | Tobias Brunner | 2013-06-21 | 1 | -69/+40 | |
| | | | | | | | features failed to load There is no need to explicitly search for failed features in critical plugins as this is now detected while loading the features. | |||||
* | plugin-loader: Use different log level if failed feature is in critical plugin | Tobias Brunner | 2013-06-21 | 1 | -2/+16 | |
| | ||||||
* | plugin-loader: Log message when failing to load plugin | Tobias Brunner | 2013-06-21 | 1 | -0/+8 | |
| | ||||||
* | plugin-loader: Reduce verbosity while loading plugins | Tobias Brunner | 2013-06-21 | 1 | -4/+4 | |
| | ||||||
* | Move test-runners has_feature() function to plugin loader | Martin Willi | 2013-06-21 | 2 | -0/+38 | |
| | ||||||
* | pubkey: Improve comparison of raw public key certificate objects | Tobias Brunner | 2013-06-21 | 1 | -1/+11 | |
| | ||||||
* | curl: add an option to fetch bound to a local source address | Martin Willi | 2013-06-11 | 1 | -0/+9 | |
| | ||||||
* | Refactored plugin-loader with improved dependency resolution | Tobias Brunner | 2013-06-11 | 2 | -238/+479 | |
| | | | | | | With the new implementation the plugins don't have to be listed in any special order, dependencies are properly resolved. The order only matters if two plugins provide the same feature. | |||||
* | test-vectors: Use plugin features | Tobias Brunner | 2013-06-11 | 1 | -1/+12 | |
| | ||||||
* | revocation: Use plugin features with soft dependencies on fetcher and ↵ | Tobias Brunner | 2013-06-11 | 1 | -3/+35 | |
| | | | | en-/decoding | |||||
* | padlock: Use plugin features to properly register algorithms | Tobias Brunner | 2013-06-11 | 1 | -39/+43 | |
| | ||||||
* | pkcs11: Use plugin_features_add() in get_features() | Tobias Brunner | 2013-06-11 | 1 | -21/+8 | |
| | ||||||
* | plugin-feature: Added helper function to extend arrays of plugin features | Tobias Brunner | 2013-06-11 | 1 | -0/+21 | |
| | ||||||
* | constraints: Use plugin features with soft dependency on X.509 decoding | Tobias Brunner | 2013-06-11 | 1 | -3/+31 | |
| | ||||||
* | blowfish: Use plugin features to properly register crypter | Tobias Brunner | 2013-06-11 | 1 | -8/+13 | |
| | ||||||
* | unbound: Use plugin features and provide RESOLVER | Tobias Brunner | 2013-06-11 | 1 | -3/+12 | |
| | ||||||
* | plugin-feature: Add feature for DNSSEC-enabled resolvers | Tobias Brunner | 2013-06-11 | 2 | -0/+15 | |
| | ||||||
* | plugin-feature: Function added to exactly compare plugin features | Tobias Brunner | 2013-06-11 | 3 | -4/+66 | |
| | ||||||
* | openssl: add support for IP addr blocks in X.509 certificates | Michael Rossberg | 2013-05-24 | 1 | -1/+115 | |
| | ||||||
* | af-alg: fix number of signers after adding untruncated HMAC-SHA-512 (1f2a34d6) | Martin Willi | 2013-05-15 | 1 | -1/+1 | |
| | ||||||
* | openssl: Only warn about unavailable FIPS mode if the user requested it | Tobias Brunner | 2013-05-08 | 1 | -1/+1 | |
| | ||||||
* | openssl: Cleanup thread specific error buffer | Tobias Brunner | 2013-05-08 | 1 | -5/+38 | |
| | ||||||
* | openssl: Don't use deprecated CRYPTO_set_id_callback() with OpenSSL >= 1.0.0 | Tobias Brunner | 2013-05-08 | 1 | -17/+29 | |
| | ||||||
* | openssl: Add PKCS#12 parsing via OpenSSL | Tobias Brunner | 2013-05-08 | 4 | -0/+307 | |
| | ||||||
* | openssl: Properly cleanup OpenSSL library | Tobias Brunner | 2013-05-08 | 1 | -2/+7 | |
| | ||||||
* | PEM plugin loads PKCS#12 containers from (DER-encoded) files | Tobias Brunner | 2013-05-08 | 3 | -0/+24 | |
| | | | | | It is not actually able to handle PEM encoded PKCS#12 files produced by OpenSSL. | |||||
* | Remove pluto specific certificate types | Tobias Brunner | 2013-05-08 | 1 | -6/+0 | |
| | ||||||
* | Add support for untruncated HMAC-SHA-512 | Tobias Brunner | 2013-05-08 | 3 | -0/+4 | |
| | ||||||
* | Add pkcs12 plugin which adds support for decoding PKCS#12 containers | Tobias Brunner | 2013-05-08 | 5 | -0/+754 | |
| | ||||||
* | Register PKCS#8 builder for KEY_ANY | Tobias Brunner | 2013-05-08 | 1 | -0/+1 | |
| | ||||||
* | Add support for PKCS#7/CMS encrypted-data | Tobias Brunner | 2013-05-08 | 4 | -0/+256 | |
| | ||||||
* | Add test vectors for RC2 | Tobias Brunner | 2013-05-08 | 3 | -0/+118 | |
| |