Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | added missing whitespace | Andreas Steffen | 2012-04-30 | 2 | -1/+2 |
| | |||||
* | Properly initialize optional subject in PEM builder. | Tobias Brunner | 2012-04-30 | 1 | -1/+1 |
| | |||||
* | added support for raw RSA public keys to stroke | Andreas Steffen | 2012-04-30 | 1 | -9/+24 |
| | |||||
* | CERT_TRUSTED_PUBKEY stores notBefore, notAfter and subject information | Andreas Steffen | 2012-04-25 | 1 | -7/+41 |
| | |||||
* | Removed auth_cfg_t.replace_value() and replaced usages with add(). | Tobias Brunner | 2012-04-18 | 2 | -76/+35 |
| | | | | | replace_value() was used to replace identities. Since for these the latest is now returned by get(), adding the new identity with add() is sufficient. | ||||
* | Changed the order and semantics of rules we expect only once in auth_cfg_t. | Tobias Brunner | 2012-04-18 | 2 | -114/+212 |
| | | | | | | | These rules are now inserted at the front of the internal list, this allows to retrieve the rule added last with get(). For other rules the order in which they are added is maintained (this allows to properly enumerate them). | ||||
* | Added a simple method to replace the value of a rule in auth_cfg_t. | Tobias Brunner | 2012-04-16 | 2 | -32/+74 |
| | |||||
* | Make AES-CMAC actually usable for IKEv2. | Tobias Brunner | 2012-04-04 | 1 | -0/+1 |
| | |||||
* | represent 0 as a single byte | Andreas Steffen | 2012-04-03 | 1 | -5/+1 |
| | |||||
* | moved chunk_skip_zero to chunk.h | Andreas Steffen | 2012-04-03 | 1 | -0/+18 |
| | |||||
* | fixed typo | Andreas Steffen | 2012-04-03 | 1 | -2/+2 |
| | |||||
* | Added test vectors for AES-CMAC. | Tobias Brunner | 2012-04-03 | 3 | -0/+153 |
| | |||||
* | Implemented AES-CMAC based PRF and signer. | Tobias Brunner | 2012-04-03 | 10 | -0/+922 |
| | | | | | | The cmac plugin implements AES-CMAC as defined in RFC 4493 and the signer and PRF based on it as defined in RFC 4494 and RFC 4615, respectively. | ||||
* | Fixed GNU license header in hmac and xcbc plugins. | Tobias Brunner | 2012-04-03 | 2 | -4/+4 |
| | |||||
* | Add support for dnQualifier in DNs. | Tobias Brunner | 2012-03-29 | 3 | -1/+6 |
| | |||||
* | Don't cast second argument of mem_printf_hook (%b) to size_t. | Tobias Brunner | 2012-03-27 | 4 | -7/+8 |
| | | | | | | | | | | | | | Also treat the given number as unsigned int. Due to the printf hook registration the second argument of mem_printf_hook (if called via printf etc.) is always of type int*. Casting this to a size_t pointer and then dereferencing that as int does not work on big endian machines if int is smaller than size_t (e.g. on ppc64). In order to make this change work if the argument is of a type larger than int, size_t for instance, the second argument for %b has to be casted to (u_)int. | ||||
* | Added support for untruncated MD5 and SHA1 HMACs in ESP as used in RFC 4595. | Tobias Brunner | 2012-02-27 | 1 | -0/+2 |
| | | | | This requires a Linux kernel >= 2.6.33. | ||||
* | Compiler warnings fixed. | Tobias Brunner | 2012-02-14 | 2 | -2/+2 |
| | |||||
* | Moved log message for unexpected ASN.1 objects to level 2. | Tobias Brunner | 2012-02-01 | 1 | -1/+1 |
| | | | | This avoids error messages if later builders can successfully decode something. | ||||
* | Added support for PKCS#5 v2 schemes when decrypting PKCS#8 files. | Tobias Brunner | 2012-02-01 | 3 | -61/+323 |
| | |||||
* | Added support for encrypted PKCS#8 files (for some PKCS#5 v1.5 schemes). | Tobias Brunner | 2012-02-01 | 3 | -4/+261 |
| | |||||
* | Added support to parse PKCS#8 encoded ECDSA private keys. | Tobias Brunner | 2012-02-01 | 3 | -12/+28 |
| | |||||
* | OpenSSL plugin parses ECDSA private keys with explicitly specified EC ↵ | Tobias Brunner | 2012-02-01 | 1 | -9/+30 |
| | | | | | | | parameters. This is needed in case the key itself does not contain the parameters, which is the case for PKCS#8. | ||||
* | Add builder part for parameters from algorithmIdentifier. | Tobias Brunner | 2012-02-01 | 2 | -1/+4 |
| | |||||
* | Return parsed parameters from algorithmIdentifier if they are an OID (aka EC ↵ | Tobias Brunner | 2012-02-01 | 1 | -1/+1 |
| | | | | | | | named curve). Explicit EC parameters are not supported with this function, but before this change no parameters were actually ever returned. | ||||
* | Parse RSA private keys from PKCS#8 encoded blobs. | Tobias Brunner | 2012-02-01 | 4 | -1/+151 |
| | |||||
* | Added PKCS#8 stub plugin. | Tobias Brunner | 2012-02-01 | 4 | -0/+139 |
| | |||||
* | Disable crypto benchmarking if CLOCK_THREAD_CPUTIME_ID is not available. | Tobias Brunner | 2012-01-30 | 1 | -0/+10 |
| | |||||
* | Cache list of plugin names to further simplify its usage. | Tobias Brunner | 2012-01-19 | 2 | -20/+49 |
| | | | | Also helpful for ipsec statusall to avoid having to enumerate plugins. | ||||
* | Function added to plugin_loader to get a list of the names of loaded plugins. | Tobias Brunner | 2012-01-19 | 2 | -1/+34 |
| | |||||
* | Various style, typo and whitespace corrections | Adrian-Ken Rueegsegger | 2012-01-13 | 1 | -3/+2 |
| | |||||
* | Android 4 requires LOCAL_MODULE_TAGS to be set for all modules. | Tobias Brunner | 2012-01-12 | 1 | -0/+2 |
| | | | | | | | Because all packages are now marked as optional executables that are to be installed on the final system have to be added to PRODUCT_PACKAGES in build/target/product/core.mk. Dependencies (such as libraries) are installed automatically. | ||||
* | Fixed additional typos in comments and log messages. | Tobias Brunner | 2012-01-12 | 2 | -2/+2 |
| | |||||
* | Fix whitespaces | Adrian-Ken Rueegsegger | 2012-01-12 | 2 | -16/+16 |
| | |||||
* | Some documentation corrections | Adrian-Ken Rueegsegger | 2012-01-12 | 8 | -33/+32 |
| | |||||
* | Fix gettid() on Android, which is defined in unistd.h there. | Tobias Brunner | 2012-01-12 | 1 | -3/+4 |
| | |||||
* | Use native gettid() if available (which is the case on Android). | Tobias Brunner | 2012-01-10 | 1 | -3/+11 |
| | |||||
* | Allow callers to force ASN.1 date encoding as GENERALIZEDTIME. | Tobias Brunner | 2011-12-23 | 6 | -14/+16 |
| | |||||
* | Avoid integer overflow when parsing ASN.1 dates. | Tobias Brunner | 2011-12-23 | 1 | -2/+2 |
| | | | | This only works properly if sizeof(time_t) > 4. | ||||
* | Properly ASN.1 encode dates in certificates depending on the year. | Tobias Brunner | 2011-12-23 | 6 | -16/+21 |
| | |||||
* | Added atomic compare and swap operations. | Tobias Brunner | 2011-12-23 | 2 | -0/+48 |
| | | | | Using a GCC atomic builtin if available or a global mutex otherwise. | ||||
* | Also log PGP parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -19/+19 |
| | |||||
* | Log messages for PKCS1 and PEM parsing in ASN log group. | Tobias Brunner | 2011-12-16 | 2 | -11/+11 |
| | |||||
* | Log most X.509 related messages in new ASN log group. | Tobias Brunner | 2011-12-16 | 5 | -57/+57 |
| | |||||
* | Log ASN.1 parsing in new ASN debug group. | Tobias Brunner | 2011-12-16 | 2 | -26/+26 |
| | |||||
* | Added ASN debug group to log low-level encoding/decoding (ASN.1, X.509). | Tobias Brunner | 2011-12-16 | 2 | -0/+4 |
| | | | | | This will allow us to remove quite some clutter from the LIB debug group for higher debug levels. | ||||
* | Log native thread ID when a thread is created. | Tobias Brunner | 2011-12-16 | 1 | -1/+16 |
| | | | | | If possible gettid() is used, otherwise pthread_self() is logged (which is not completely portable, but seems to work on most supported platforms). | ||||
* | Log worker thread ID with two digits. | Tobias Brunner | 2011-12-16 | 1 | -2/+2 |
| | |||||
* | Make sure the certificate cache is flushed when plugins are unloaded. | Tobias Brunner | 2011-12-15 | 1 | -0/+3 |
| | | | | | This avoids segmentation faults when plugins implementing cert_t are already unloaded when the cache is flushed during destruction. | ||||
* | Be less verbose if plugin dependecy not satisfied | Martin Willi | 2011-12-07 | 1 | -1/+1 |
| |