index
:
tteras/strongswan
master
tteras
tteras-release
tteras' strongSwan tree
gitolite
about
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
src
/
libstrongswan
Commit message (
Collapse
)
Author
Age
Files
Lines
...
*
Parse CRL extensions in a switch statement
Martin Willi
2011-01-05
1
-18
/
+24
|
*
Respect policy mappings in certificatePolicy validation
Martin Willi
2011-01-05
1
-24
/
+64
|
*
Validate simple certificatePolicy inheritance
Martin Willi
2011-01-05
1
-0
/
+54
|
*
Added a certificate policy OID auth_cfg constraint
Martin Willi
2011-01-05
2
-0
/
+31
|
*
Added support for policyConstraints to x509 plugin
Martin Willi
2011-01-05
6
-8
/
+147
|
*
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for ↵
Martin Willi
2011-01-05
4
-6
/
+6
|
|
|
|
PolicyConstraints, too
*
Added policyMappings support to x509 plugin
Martin Willi
2011-01-05
5
-3
/
+152
|
*
Added policyMappings OID identifier
Martin Willi
2011-01-05
1
-1
/
+1
|
*
Added certificatePolicy support to x509 plugin
Martin Willi
2011-01-05
5
-11
/
+188
|
*
Added a null-safe strdup variant
Martin Willi
2011-01-05
2
-1
/
+6
|
*
Fail when parsing unsupported critical extensions in openssl_x509
Martin Willi
2011-01-05
1
-1
/
+5
|
*
Added CertificatePolicy OID identifier
Martin Willi
2011-01-05
1
-3
/
+3
|
*
Added conversion functions between string OIDs and its DER encoding
Martin Willi
2011-01-05
2
-0
/
+110
|
*
Do not parse certificates with invalid version in openssl plugin
Martin Willi
2011-01-05
1
-0
/
+7
|
*
Implemented NameConstraint matching in constraints plugin
Martin Willi
2011-01-05
1
-0
/
+208
|
*
Added support for generating NameConstraints in x509 plugin
Martin Willi
2011-01-05
3
-4
/
+80
|
*
Added support for parsing NameConstraints in x509 plugin
Martin Willi
2011-01-05
1
-0
/
+59
|
*
Added name constraint enumerator to x509 interface
Martin Willi
2011-01-05
3
-1
/
+38
|
*
Migrated x509_cert_t to INIT/METHOD macros
Martin Willi
2011-01-05
1
-144
/
+88
|
*
Moved X509 pathlen constraint checking to constraints plugin
Martin Willi
2011-01-05
2
-17
/
+29
|
*
Added plugin stub for advanced X509 constraint checking
Martin Willi
2011-01-05
6
-0
/
+238
|
*
Added a strncaseeq variant to the string comparison macros
Martin Willi
2011-01-05
1
-1
/
+6
|
*
CRL/OCSP validation stores trustchain information in auth_cfg
Martin Willi
2011-01-05
1
-17
/
+31
|
*
Key strength checking stores all key sizes in auth_cfg, verifies all in ↵
Martin Willi
2011-01-05
2
-75
/
+84
|
|
|
|
complies()
*
Use subject, not issuer, of CRL issuing certificate
Martin Willi
2011-01-05
1
-1
/
+1
|
*
CRLSign keyUsage or CA basicConstraint are sufficient for CRL validation
Martin Willi
2011-01-05
1
-1
/
+1
|
*
Parse and encode crlSign keyUsage flag in x509 plugin
Martin Willi
2011-01-05
1
-10
/
+71
|
*
Added a flag for X509 CRLSign keyUsage
Martin Willi
2011-01-05
1
-0
/
+2
|
*
Remove x509_flag_names, flags do not work with ENUM()
Martin Willi
2011-01-05
3
-35
/
+1
|
*
Use certificate CRLIssuer information to look up cacched CRLs or CDPs
Martin Willi
2011-01-05
1
-50
/
+88
|
*
Added support for CRL Issuers to x509 and OpenSSL plugins
Martin Willi
2011-01-05
6
-65
/
+259
|
*
Added key strength constraints for RSA or ECDSA trustchains
Martin Willi
2011-01-05
3
-0
/
+97
|
*
Migrated psk/pubkey_authenticators to INIT/METHOD macros
Martin Willi
2011-01-05
2
-0
/
+13
|
*
Load plugins only once, even if listed twice
Martin Willi
2011-01-05
1
-0
/
+27
|
*
Added a CIDR notation based host constructor
Martin Willi
2011-01-05
2
-0
/
+44
|
*
replaced spaces by tabs
Andreas Steffen
2010-12-30
1
-1
/
+1
|
*
implemented wrap around of registered IKEv1 algorithm names
Andreas Steffen
2010-12-26
1
-0
/
+2
|
*
disable AEAD crypto algorithm if no key size is supported
Andreas Steffen
2010-12-25
1
-0
/
+1
|
*
disable crypto algorithm if no key size is supported
Andreas Steffen
2010-12-25
1
-8
/
+27
|
*
log if an AEAD algorithm does not support a given key size
Andreas Steffen
2010-12-25
1
-2
/
+6
|
*
log if a crypto algorithm does not support a given key size
Andreas Steffen
2010-12-25
1
-1
/
+3
|
*
printed plugin names have a hyphen
Andreas Steffen
2010-12-24
7
-5
/
+9
|
*
Fixed public key construction from PKCS#11 private key
Martin Willi
2010-12-23
1
-3
/
+3
|
*
Probe for supported AF_ALG algorithms, register dynamically
Martin Willi
2010-12-20
10
-161
/
+212
|
*
Register algorithms with dependencies only if dependency available
Martin Willi
2010-12-20
6
-64
/
+133
|
*
Register some less common AF_ALG ciphers (cast5, serpent, twofish, blowfish)
Martin Willi
2010-12-20
2
-0
/
+18
|
*
Implemented PRFs using AF_ALG
Martin Willi
2010-12-20
4
-0
/
+253
|
*
Use the AF_ALG wrapper in hasher, crypter and signer
Martin Willi
2010-12-20
3
-278
/
+39
|
*
Use a generic AF_ALG wrapper for common operations
Martin Willi
2010-12-20
3
-0
/
+312
|
*
Implemented crypter on top of AF_ALG
Martin Willi
2010-12-20
4
-1
/
+362
|
[prev]
[next]