Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Added support of EdDSA signatures | Andreas Steffen | 2016-12-14 | 1 | -2/+8 |
| | |||||
* | pki: Add generic 'priv' key type that loads any type of private key | Tobias Brunner | 2016-10-05 | 1 | -1/+6 |
| | |||||
* | pki: Drop -priv suffix to specify private key types | Tobias Brunner | 2016-10-05 | 1 | -4/+7 |
| | |||||
* | Standardized printing of certificate information | Andreas Steffen | 2015-12-11 | 1 | -523/+20 |
| | | | | | | | The certificate_printer class allows the printing of certificate information to a text file (usually stdout). This class is used by the pki --print and swanctl --list-certs commands as well as by the stroke plugin. | ||||
* | Store and parse BLISS private and public keys in DER and PEM format | Andreas Steffen | 2014-11-29 | 1 | -3/+11 |
| | | | | | | | | Additionally generate SHA-1 fingerprints of raw BLISS subjectPublicKey and subjectPublicKeyInfo objects. Some basic functions used by the bliss_public_key class are shared with the bliss_private_key class. | ||||
* | pki: Print and document the name constraint type for DNS or email constraints | Martin Willi | 2014-10-30 | 1 | -2/+18 |
| | | | | | As email constraints may be for a specific host, it is not clear from the name itself if it is a DNS or email constraint. | ||||
* | pki: Switch to binary mode on Windows when reading/writing DER to FDs | Martin Willi | 2014-06-04 | 1 | -0/+1 |
| | |||||
* | pki: Fix memory leak when printing unknown AC group OIDs | Tobias Brunner | 2014-04-09 | 1 | -0/+1 |
| | |||||
* | Added support for msSmartcardLogon EKU | Andreas Steffen | 2014-04-08 | 1 | -0/+4 |
| | |||||
* | pki: Support printing attribute certificates | Martin Willi | 2014-03-31 | 1 | -1/+89 |
| | |||||
* | chunk: Use dynamically allocated buffer in chunk_from_fd() | Martin Willi | 2014-01-23 | 1 | -1/+6 |
| | | | | | | | | When acting on files, we can use fstat() to estimate the buffer size. On non-file FDs, we dynamically increase an allocated buffer. Additionally we slightly change the function signature to properly handle zero-length files and add appropriate unit tests. | ||||
* | pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOB | Tobias Brunner | 2013-10-23 | 1 | -2/+6 |
| | | | | This allows more than one builder to try parsing the data read from STDIN. | ||||
* | Merge branch 'ikev1' | Martin Willi | 2012-05-02 | 1 | -0/+4 |
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c | ||||
| * | Added support for iKEIntermediate flag to ipsec pki. | Tobias Brunner | 2012-03-20 | 1 | -0/+4 |
| | | |||||
* | | moved chunk_skip_zero to chunk.h | Andreas Steffen | 2012-04-03 | 1 | -17/+0 |
| | | |||||
* | | remove leading zeros in ASN.1 encoded serial numbers | Andreas Steffen | 2012-03-27 | 1 | -2/+22 |
|/ | |||||
* | Added inhibitAnyPolicy constraint support to pki tool | Martin Willi | 2011-01-05 | 1 | -1/+7 |
| | |||||
* | Use a generic getter for all numerical X.509 constraints | Martin Willi | 2011-01-05 | 1 | -10/+10 |
| | |||||
* | Added support for delta CRLs to pki tool | Martin Willi | 2011-01-05 | 1 | -0/+27 |
| | |||||
* | Simplified format of x509 CRL URI parsing/enumerator | Martin Willi | 2011-01-05 | 1 | -5/+6 |
| | |||||
* | Added policyConstraints support to pki tool | Martin Willi | 2011-01-05 | 1 | -0/+16 |
| | |||||
* | Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for ↵ | Martin Willi | 2011-01-05 | 1 | -1/+1 |
| | | | | PolicyConstraints, too | ||||
* | Added policyMappings support to pki tool | Martin Willi | 2011-01-05 | 1 | -0/+20 |
| | |||||
* | Added certificatePolicy options to pki tool | Martin Willi | 2011-01-05 | 1 | -0/+35 |
| | |||||
* | pki --print prints NameConstraints | Martin Willi | 2011-01-05 | 1 | -0/+25 |
| | |||||
* | pki tool shows and builds crlSign keyUsage | Martin Willi | 2011-01-05 | 1 | -0/+4 |
| | |||||
* | Added support for CRL Issuers to x509 and OpenSSL plugins | Martin Willi | 2011-01-05 | 1 | -3/+8 |
| | |||||
* | Added crl support to pki --print | Martin Willi | 2010-08-30 | 1 | -7/+52 |
| | |||||
* | Use bits instead of bytes for a private/public key | Martin Willi | 2010-08-10 | 1 | -1/+1 |
| | |||||
* | Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵ | Martin Willi | 2010-07-13 | 1 | -2/+2 |
| | | | | encoding | ||||
* | Added a --print command to pki that dumps different credentials | Martin Willi | 2010-05-20 | 1 | -0/+368 |