| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Parse CRL extensions in a switch statement | Martin Willi | 2011-01-05 | 1 | -18/+24 |
* | Respect policy mappings in certificatePolicy validation | Martin Willi | 2011-01-05 | 1 | -24/+64 |
* | Validate simple certificatePolicy inheritance | Martin Willi | 2011-01-05 | 1 | -0/+54 |
* | Added a certificate policy OID auth_cfg constraint | Martin Willi | 2011-01-05 | 2 | -0/+31 |
* | Added support for policyConstraints to x509 plugin | Martin Willi | 2011-01-05 | 6 | -8/+147 |
* | Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints,... | Martin Willi | 2011-01-05 | 4 | -6/+6 |
* | Added policyMappings support to x509 plugin | Martin Willi | 2011-01-05 | 5 | -3/+152 |
* | Added policyMappings OID identifier | Martin Willi | 2011-01-05 | 1 | -1/+1 |
* | Added certificatePolicy support to x509 plugin | Martin Willi | 2011-01-05 | 5 | -11/+188 |
* | Added a null-safe strdup variant | Martin Willi | 2011-01-05 | 2 | -1/+6 |
* | Fail when parsing unsupported critical extensions in openssl_x509 | Martin Willi | 2011-01-05 | 1 | -1/+5 |
* | Added CertificatePolicy OID identifier | Martin Willi | 2011-01-05 | 1 | -3/+3 |
* | Added conversion functions between string OIDs and its DER encoding | Martin Willi | 2011-01-05 | 2 | -0/+110 |
* | Do not parse certificates with invalid version in openssl plugin | Martin Willi | 2011-01-05 | 1 | -0/+7 |
* | Implemented NameConstraint matching in constraints plugin | Martin Willi | 2011-01-05 | 1 | -0/+208 |
* | Added support for generating NameConstraints in x509 plugin | Martin Willi | 2011-01-05 | 3 | -4/+80 |
* | Added support for parsing NameConstraints in x509 plugin | Martin Willi | 2011-01-05 | 1 | -0/+59 |
* | Added name constraint enumerator to x509 interface | Martin Willi | 2011-01-05 | 3 | -1/+38 |
* | Migrated x509_cert_t to INIT/METHOD macros | Martin Willi | 2011-01-05 | 1 | -144/+88 |
* | Moved X509 pathlen constraint checking to constraints plugin | Martin Willi | 2011-01-05 | 2 | -17/+29 |
* | Added plugin stub for advanced X509 constraint checking | Martin Willi | 2011-01-05 | 6 | -0/+238 |
* | Added a strncaseeq variant to the string comparison macros | Martin Willi | 2011-01-05 | 1 | -1/+6 |
* | CRL/OCSP validation stores trustchain information in auth_cfg | Martin Willi | 2011-01-05 | 1 | -17/+31 |
* | Key strength checking stores all key sizes in auth_cfg, verifies all in compl... | Martin Willi | 2011-01-05 | 2 | -75/+84 |
* | Use subject, not issuer, of CRL issuing certificate | Martin Willi | 2011-01-05 | 1 | -1/+1 |
* | CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation | Martin Willi | 2011-01-05 | 1 | -1/+1 |
* | Parse and encode crlSign keyUsage flag in x509 plugin | Martin Willi | 2011-01-05 | 1 | -10/+71 |
* | Added a flag for X509 CRLSign keyUsage | Martin Willi | 2011-01-05 | 1 | -0/+2 |
* | Remove x509_flag_names, flags do not work with ENUM() | Martin Willi | 2011-01-05 | 3 | -35/+1 |
* | Use certificate CRLIssuer information to look up cacched CRLs or CDPs | Martin Willi | 2011-01-05 | 1 | -50/+88 |
* | Added support for CRL Issuers to x509 and OpenSSL plugins | Martin Willi | 2011-01-05 | 6 | -65/+259 |
* | Added key strength constraints for RSA or ECDSA trustchains | Martin Willi | 2011-01-05 | 3 | -0/+97 |
* | Migrated psk/pubkey_authenticators to INIT/METHOD macros | Martin Willi | 2011-01-05 | 2 | -0/+13 |
* | Load plugins only once, even if listed twice | Martin Willi | 2011-01-05 | 1 | -0/+27 |
* | Added a CIDR notation based host constructor | Martin Willi | 2011-01-05 | 2 | -0/+44 |
* | replaced spaces by tabs | Andreas Steffen | 2010-12-30 | 1 | -1/+1 |
* | implemented wrap around of registered IKEv1 algorithm names | Andreas Steffen | 2010-12-26 | 1 | -0/+2 |
* | disable AEAD crypto algorithm if no key size is supported | Andreas Steffen | 2010-12-25 | 1 | -0/+1 |
* | disable crypto algorithm if no key size is supported | Andreas Steffen | 2010-12-25 | 1 | -8/+27 |
* | log if an AEAD algorithm does not support a given key size | Andreas Steffen | 2010-12-25 | 1 | -2/+6 |
* | log if a crypto algorithm does not support a given key size | Andreas Steffen | 2010-12-25 | 1 | -1/+3 |
* | printed plugin names have a hyphen | Andreas Steffen | 2010-12-24 | 7 | -5/+9 |
* | Fixed public key construction from PKCS#11 private key | Martin Willi | 2010-12-23 | 1 | -3/+3 |
* | Probe for supported AF_ALG algorithms, register dynamically | Martin Willi | 2010-12-20 | 10 | -161/+212 |
* | Register algorithms with dependencies only if dependency available | Martin Willi | 2010-12-20 | 6 | -64/+133 |
* | Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish) | Martin Willi | 2010-12-20 | 2 | -0/+18 |
* | Implemented PRFs using AF_ALG | Martin Willi | 2010-12-20 | 4 | -0/+253 |
* | Use the AF_ALG wrapper in hasher, crypter and signer | Martin Willi | 2010-12-20 | 3 | -278/+39 |
* | Use a generic AF_ALG wrapper for common operations | Martin Willi | 2010-12-20 | 3 | -0/+312 |
* | Implemented crypter on top of AF_ALG | Martin Willi | 2010-12-20 | 4 | -1/+362 |