aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan
Commit message (Collapse)AuthorAgeFilesLines
...
* | | fixed typoAndreas Steffen2012-04-031-2/+2
| | |
* | | Added test vectors for AES-CMAC.Tobias Brunner2012-04-033-0/+153
| | |
* | | Implemented AES-CMAC based PRF and signer.Tobias Brunner2012-04-0310-0/+922
| | | | | | | | | | | | | | | | | | The cmac plugin implements AES-CMAC as defined in RFC 4493 and the signer and PRF based on it as defined in RFC 4494 and RFC 4615, respectively.
* | | Fixed GNU license header in hmac and xcbc plugins.Tobias Brunner2012-04-032-4/+4
| | |
* | | Add support for dnQualifier in DNs.Tobias Brunner2012-03-293-1/+6
| | |
* | | Don't cast second argument of mem_printf_hook (%b) to size_t.Tobias Brunner2012-03-274-7/+8
|/ / | | | | | | | | | | | | | | | | | | | | | | | | Also treat the given number as unsigned int. Due to the printf hook registration the second argument of mem_printf_hook (if called via printf etc.) is always of type int*. Casting this to a size_t pointer and then dereferencing that as int does not work on big endian machines if int is smaller than size_t (e.g. on ppc64). In order to make this change work if the argument is of a type larger than int, size_t for instance, the second argument for %b has to be casted to (u_)int.
* | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595.Tobias Brunner2012-02-271-0/+2
| | | | | | | | This requires a Linux kernel >= 2.6.33.
* | Compiler warnings fixed.Tobias Brunner2012-02-142-2/+2
| |
* | Moved log message for unexpected ASN.1 objects to level 2.Tobias Brunner2012-02-011-1/+1
| | | | | | | | This avoids error messages if later builders can successfully decode something.
* | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files.Tobias Brunner2012-02-013-61/+323
| |
* | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes).Tobias Brunner2012-02-013-4/+261
| |
* | Added support to parse PKCS#8 encoded ECDSA private keys.Tobias Brunner2012-02-013-12/+28
| |
* | OpenSSL plugin parses ECDSA private keys with explicitly specified EC ↵Tobias Brunner2012-02-011-9/+30
| | | | | | | | | | | | | | parameters. This is needed in case the key itself does not contain the parameters, which is the case for PKCS#8.
* | Add builder part for parameters from algorithmIdentifier.Tobias Brunner2012-02-012-1/+4
| |
* | Return parsed parameters from algorithmIdentifier if they are an OID (aka EC ↵Tobias Brunner2012-02-011-1/+1
| | | | | | | | | | | | | | named curve). Explicit EC parameters are not supported with this function, but before this change no parameters were actually ever returned.
* | Parse RSA private keys from PKCS#8 encoded blobs.Tobias Brunner2012-02-014-1/+151
| |
* | Added PKCS#8 stub plugin.Tobias Brunner2012-02-014-0/+139
| |
* | Disable crypto benchmarking if CLOCK_THREAD_CPUTIME_ID is not available.Tobias Brunner2012-01-301-0/+10
| |
* | Cache list of plugin names to further simplify its usage.Tobias Brunner2012-01-192-20/+49
| | | | | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins.
* | Function added to plugin_loader to get a list of the names of loaded plugins.Tobias Brunner2012-01-192-1/+34
| |
* | Various style, typo and whitespace correctionsAdrian-Ken Rueegsegger2012-01-131-3/+2
| |
* | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules.Tobias Brunner2012-01-121-0/+2
| | | | | | | | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically.
* | Fixed additional typos in comments and log messages.Tobias Brunner2012-01-122-2/+2
| |
* | Fix whitespacesAdrian-Ken Rueegsegger2012-01-122-16/+16
| |
* | Some documentation correctionsAdrian-Ken Rueegsegger2012-01-128-33/+32
| |
* | Fix gettid() on Android, which is defined in unistd.h there.Tobias Brunner2012-01-121-3/+4
| |
* | Use native gettid() if available (which is the case on Android).Tobias Brunner2012-01-101-3/+11
| |
* | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME.Tobias Brunner2011-12-236-14/+16
| |
* | Avoid integer overflow when parsing ASN.1 dates.Tobias Brunner2011-12-231-2/+2
| | | | | | | | This only works properly if sizeof(time_t) > 4.
* | Properly ASN.1 encode dates in certificates depending on the year.Tobias Brunner2011-12-236-16/+21
| |
* | Added atomic compare and swap operations.Tobias Brunner2011-12-232-0/+48
| | | | | | | | Using a GCC atomic builtin if available or a global mutex otherwise.
* | Also log PGP parsing in ASN log group.Tobias Brunner2011-12-162-19/+19
| |
* | Log messages for PKCS1 and PEM parsing in ASN log group.Tobias Brunner2011-12-162-11/+11
| |
* | Log most X.509 related messages in new ASN log group.Tobias Brunner2011-12-165-57/+57
| |
* | Log ASN.1 parsing in new ASN debug group.Tobias Brunner2011-12-162-26/+26
| |
* | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509).Tobias Brunner2011-12-162-0/+4
| | | | | | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels.
* | Log native thread ID when a thread is created.Tobias Brunner2011-12-161-1/+16
| | | | | | | | | | If possible gettid() is used, otherwise pthread_self() is logged (which is not completely portable, but seems to work on most supported platforms).
* | Log worker thread ID with two digits.Tobias Brunner2011-12-161-2/+2
| |
* | Make sure the certificate cache is flushed when plugins are unloaded.Tobias Brunner2011-12-151-0/+3
| | | | | | | | | | This avoids segmentation faults when plugins implementing cert_t are already unloaded when the cache is flushed during destruction.
* | Be less verbose if plugin dependecy not satisfiedMartin Willi2011-12-071-1/+1
| |
* | Create a dummy pthread key for value "0", as some buggy PKCS#11 libraries ↵Martin Willi2011-12-071-0/+10
| | | | | | | | mangle it
* | fixed copy-and-paste errorAndreas Steffen2011-12-041-1/+1
| |
* | Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-283-63/+0
| |
* | Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-2/+2
| | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function
* | use openssl rsa_verify functionSansar Choinyambuu2011-11-283-0/+63
| |
* | Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-283-63/+0
| |
* | Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-3/+2
| | | | | | | | Removed unused chunk variable from PTS verify_quote_signature function
* | use openssl rsa_verify functionSansar Choinyambuu2011-11-283-0/+65
| |
* | extended bio_reader and bio_writer to handle u_int64_tAndreas Steffen2011-11-285-0/+84
| |
* | Added ctime function to white listSansar Choinyambuu2011-11-281-0/+1
| |