tteras/strongswan - tteras' strongSwan tree

	Commit message (Collapse)	Author	Age	Files	Lines
*	chunk: Use dynamically allocated buffer in chunk_from_fd()	Martin Willi	2014-01-23	1	-1/+7
\| \| \| \| \| \| \| \|	When acting on files, we can use fstat() to estimate the buffer size. On non-file FDs, we dynamically increase an allocated buffer. Additionally we slightly change the function signature to properly handle zero-length files and add appropriate unit tests.
*	pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOB	Tobias Brunner	2013-10-23	1	-1/+5
\| \| \| \|	This allows more than one builder to try parsing the data read from STDIN.
*	pki: Add pki --self man page	Tobias Brunner	2013-09-13	1	-2/+2
\| \| \| \|	Can be opened with "man pki --self".
*	Moved data structures to new collections subfolder	Tobias Brunner	2012-10-24	1	-1/+1
\|
*	Use centralized hasher names in pki utility	Martin Willi	2012-07-17	1	-2/+2
\|
*	Check rng return value when generating serial numbers in pki utility	Tobias Brunner	2012-07-16	1	-4/+4
\|
*	Merge branch 'ikev1-clean' into ikev1-master	Martin Willi	2012-03-20	1	-0/+4
\|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
\| *	Added support for iKEIntermediate flag to ipsec pki.	Tobias Brunner	2012-03-20	1	-0/+4
\| \|
* \|	pki: Avoid integer overflow when calculating certificate lifetimes.	Tobias Brunner	2011-12-23	1	-1/+1
\|/ \| \| \|	This only works properly if sizeof(time_t) > 4.
*	Slightly renamed different policyConstraints to distinguish them better	Martin Willi	2011-01-05	1	-6/+6
\|
*	Added inhibitAnyPolicy constraint support to pki tool	Martin Willi	2011-01-05	1	-2/+7
\|
*	Added policyConstraints support to pki tool	Martin Willi	2011-01-05	1	-21/+34
\|
*	Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for ↵	Martin Willi	2011-01-05	1	-1/+1
\| \| \| \|	PolicyConstraints, too
*	Added policyMappings support to pki tool	Martin Willi	2011-01-05	1	-6/+50
\|
*	Added certificatePolicy options to pki tool	Martin Willi	2011-01-05	1	-2/+50
\|
*	pki --issue/self support permitted/excluded NameConstraints	Martin Willi	2011-01-05	1	-16/+35
\|
*	pki tool shows and builds crlSign keyUsage	Martin Willi	2011-01-05	1	-1/+5
\|
*	Added PKCS#11 private key support to the pki tool	Martin Willi	2010-08-04	1	-3/+16
\|
*	Added pki PEM encoding support for certificates, CRLs and PKCS10 requests	Martin Willi	2010-07-13	1	-4/+12
\|
*	Support different encoding types in certificate.get_encoding()	Martin Willi	2010-07-13	1	-2/+1
\|
*	Changed default lifetime of certificates to 3 years	Martin Willi	2010-05-31	1	-2/+2
\|
*	Support extendedKeyUsage flags in self-signed certificates	Martin Willi	2010-05-31	1	-0/+16
\|
*	we don't accept a serial number with leading zeroes	Andreas Steffen	2010-03-14	1	-0/+5
\|
*	ipsec pki --self\|issue supports --pathlen option setting a path length ↵	Andreas Steffen	2009-12-31	1	-1/+6
\| \| \| \|	constraint
*	Removed obsolete per-command debug level option	Martin Willi	2009-09-16	1	-3/+0
\|
*	Handle pki --debug and --options in a generic way for all command	Martin Willi	2009-09-15	1	-28/+14
\|
*	pki tool supports single letter short options	Martin Willi	2009-09-15	1	-1/+1
\|
*	enable debug level setting	Andreas Steffen	2009-09-14	1	-0/+4
\|
*	fixed another typo	Andreas Steffen	2009-09-12	1	-1/+1
\|
*	fixed typo	Andreas Steffen	2009-09-12	1	-2/+2
\|
*	pki tool can issue/self-sign certificates with OCSP URIs	Martin Willi	2009-09-11	1	-4/+12
\|
*	Use dynamic registration/usage invocation of command types	Martin Willi	2009-09-10	1	-2/+2
\|
*	splitted PKI tool to a file per command	Martin Willi	2009-09-10	1	-0/+238