aboutsummaryrefslogtreecommitdiffstats
path: root/src/libstrongswan
Commit message (Collapse)AuthorAgeFilesLines
...
* Create a dummy pthread key for value "0", as some buggy PKCS#11 libraries ↵Martin Willi2011-12-071-0/+10
| | | | mangle it
* fixed copy-and-paste errorAndreas Steffen2011-12-041-1/+1
|
* Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-283-63/+0
|
* Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-2/+2
| | | | Removed unused chunk variable from PTS verify_quote_signature function
* use openssl rsa_verify functionSansar Choinyambuu2011-11-283-0/+63
|
* Reverse the changes made to openssl plugin for signature verificationSansar Choinyambuu2011-11-283-63/+0
|
* Changed the static function name in openssl_rsa_public_key objectSansar Choinyambuu2011-11-281-3/+2
| | | | Removed unused chunk variable from PTS verify_quote_signature function
* use openssl rsa_verify functionSansar Choinyambuu2011-11-283-0/+65
|
* extended bio_reader and bio_writer to handle u_int64_tAndreas Steffen2011-11-285-0/+84
|
* Added ctime function to white listSansar Choinyambuu2011-11-281-0/+1
|
* Fixed compiler warnings for DH groups that define no subgroup.Tobias Brunner2011-11-251-8/+16
|
* Fixed missing initializer compiler warning.Tobias Brunner2011-11-251-2/+2
|
* Fixed compiler warnings regarding enum comparison.Tobias Brunner2011-11-252-4/+4
| | | | | | | | | Warnings like comparison of unsigned expression < 0 is always false are reported with -Wextra when enum types that are compiled to an unsigned type (which is up to the compiler) are checked for negativity.
* pkcs11: Fixed a bug when creating public keys.Tobias Brunner2011-11-091-1/+1
|
* gcrypt does not support MD2Andreas Steffen2011-11-091-1/+0
|
* assign get_features methodAndreas Steffen2011-11-071-1/+1
|
* Change order of ocsp uris when parsing a certThomas Egerer2011-11-041-1/+1
|
* Handle certificates being on hold in a CRLThomas Egerer2011-11-043-1/+14
| | | | | | | Certificates which are set on hold in a CRL might be removed from any subsequent CRL. Hence you cannot conclude that a certificate is revoked for good in this case, you would try to retrieve an update CRL to see if the certificate on hold is still on it or not.
* Use chunk_clear to memwipe shared secretThomas Egerer2011-11-041-1/+1
|
* Fix resource leak in x509_ocsp_responseThomas Egerer2011-11-041-0/+4
|
* Common spelling errors fixed.Tobias Brunner2011-11-031-1/+1
|
* pkcs11: Make public key operations on tokens optional.Tobias Brunner2011-11-031-20/+21
|
* pkcs11: Make sure a key can be used for a given signature scheme.Tobias Brunner2011-11-023-16/+31
|
* pkcs11: Register ECDSA feature.Tobias Brunner2011-11-021-1/+10
|
* pkcs11: We have to create our own hashes for some signature schemes.Tobias Brunner2011-11-024-12/+81
|
* pkcs11: Lookup the public key of a private key by CKA_ID.Tobias Brunner2011-11-022-0/+125
| | | | | | Currently this only works if a public key object with the same ID is available, if there isn't one we could search for a certificate with the same ID and extract the key from there.
* pkcs11: Search for private keys in a more generic way.Tobias Brunner2011-11-021-20/+19
| | | | | | Also, don't extract the public key directly from the private key. Some tokens actually do not return the public exponent (it's not required). We have to find a different way to get the public key.
* pkcs11: Added support to encode ECDSA public keys.Tobias Brunner2011-11-021-0/+89
|
* pkcs11: Parse ECDSA public keys and find/create them on tokens.Tobias Brunner2011-11-021-2/+177
|
* pkcs11: Added generic functions to find/create public keys on tokens.Tobias Brunner2011-11-021-40/+75
|
* pkcs11: Store public key length in bits.Tobias Brunner2011-11-021-3/+3
|
* pkcs11: Fix encoding of RSA public keys.Tobias Brunner2011-11-021-0/+4
|
* pkcs11: Use create_object_attr_enumerator to encode RSA public key.Tobias Brunner2011-11-021-17/+7
|
* pkcs11: Instead of a mutex use a new session to do multipart operations.Tobias Brunner2011-11-022-40/+66
|
* pkcs11: Function added to retrieve multiple attributes from a single object.Tobias Brunner2011-11-022-6/+62
|
* pkcs11: Memory leak fixed in DH/ECDH implementation.Tobias Brunner2011-11-021-0/+2
|
* pkcs11: Invalid free fixed in DH/ECDH implementation.Tobias Brunner2011-11-021-1/+4
|
* pkcs11: Changed how pkcs11-manager is initialized.Tobias Brunner2011-11-021-42/+32
| | | | | The manager is now created directly, but events and certificate loading is deferred.
* pkcs11: Add attributes to specify what we use the DH/ECDH keys for.Tobias Brunner2011-11-021-2/+10
|
* pkcs11: Allow to build pkcs11 plugin on Android.Tobias Brunner2011-10-311-0/+2
|
* pkcs11: Use callback registration for pkcs11-manager.Tobias Brunner2011-10-311-25/+73
| | | | | | Otherwise a plugin providing X509 decoding capabilities might be unloaded before the manager which will result in a segmentation fault when certificates in the manager's credential sets are to be destroyed.
* pkcs11: Merged the ECDH into the DH implementation.Tobias Brunner2011-10-316-405/+210
|
* pkcs11: Use get_ck_attribute for ECDH.Tobias Brunner2011-10-311-63/+13
|
* pkcs11: Use get_ck_attribute for DH.Tobias Brunner2011-10-311-28/+6
|
* pkcs11: Method added to library to extract a single attribute from an object.Tobias Brunner2011-10-312-1/+50
|
* pkcs11: Added names for CKA_* constants.Tobias Brunner2011-10-312-1/+123
|
* pkcs11: Added support for ECDH.Tobias Brunner2011-10-314-1/+422
|
* pkcs11: Added definitions needed for ECDH to pkcs11.h.Tobias Brunner2011-10-311-0/+24
|
* pkcs11: Specify object class and key type when deriving DH secrets.Tobias Brunner2011-10-311-0/+4
| | | | pkcs11_softtoken on OpenSolaris requires this (probably others too).
* pkcs11: Add features support.Tobias Brunner2011-10-313-84/+90
|