aboutsummaryrefslogtreecommitdiffstats
path: root/src/pki/commands
Commit message (Collapse)AuthorAgeFilesLines
* Standardized printing of certificate informationAndreas Steffen2015-12-111-523/+20
| | | | | | | The certificate_printer class allows the printing of certificate information to a text file (usually stdout). This class is used by the pki --print and swanctl --list-certs commands as well as by the stroke plugin.
* Support BLISS signatures with SHA-3 hashAndreas Steffen2015-11-035-5/+9
|
* pki: Add new type options to --issue command usage outputTobias Brunner2015-08-271-2/+2
|
* pki: Add --dn command to extract the subject DN of a certificateTobias Brunner2015-08-171-0/+146
|
* pki: Optionally extract public key from given private key in --issueTobias Brunner2015-08-101-4/+27
| | | | Fixes #618.
* pki: Choose default digest based on the signature keyTobias Brunner2015-03-235-10/+30
|
* pki: Use SHA-256 as default for signaturesTobias Brunner2015-03-235-50/+10
| | | | | | Since the BLISS private key supports this we don't do any special handling anymore (if the user choses a digest that is not supported, signing will simply fail later because no signature scheme will be found).
* Allow SHA256 and SHA384 data hash for BLISS signatures.Andreas Steffen2015-02-267-16/+36
| | | | | The default is SHA512 since this hash function is also used for the c_indices random oracle.
* pki: Document correct output formats for --pkcs12 --exportTobias Brunner2014-12-191-2/+2
|
* pki: Properly clean up if output format for --pkcs12 is wrongTobias Brunner2014-12-191-0/+2
|
* pki: Add command to export certificates and keys from PKCS#12 containersTobias Brunner2014-12-121-9/+101
|
* pki: Reformat PKCS#12 output and add an index for each certificate/keyTobias Brunner2014-12-121-11/+14
|
* pki: Add simple PKCS#12 display commandTobias Brunner2014-12-121-0/+150
|
* Implemented full BLISS support for IKEv2 public key authentication and the ↵Andreas Steffen2014-11-296-3/+37
| | | | pki tool
* Started implementing BLISS signature generationAndreas Steffen2014-11-291-2/+8
|
* Store and parse BLISS private and public keys in DER and PEM formatAndreas Steffen2014-11-292-4/+17
| | | | | | | | Additionally generate SHA-1 fingerprints of raw BLISS subjectPublicKey and subjectPublicKeyInfo objects. Some basic functions used by the bliss_public_key class are shared with the bliss_private_key class.
* Created framework for BLISS post-quantum signature algorithmAndreas Steffen2014-11-291-3/+11
|
* pki: Print and document the name constraint type for DNS or email constraintsMartin Willi2014-10-301-2/+18
| | | | | As email constraints may be for a specific host, it is not clear from the name itself if it is a DNS or email constraint.
* pki: Support complex trustchain and revocation checking in --verifyMartin Willi2014-06-041-48/+86
|
* pki: Switch to binary mode on Windows when reading/writing DER to FDsMartin Willi2014-06-0411-1/+16
|
* enum: Return boolean result for enum_from_name() lookupMartin Willi2014-05-165-10/+5
| | | | | | | | | | | Handling the result for enum_from_name() is difficult, as checking for negative return values requires a cast if the enum type is unsigned. The new signature clearly differentiates lookup result from lookup value. Further, this actually allows to convert real -1 enum values, which could not be distinguished from "not-found" and the -1 return value. This also fixes several clang warnings where enums are unsigned.
* pki: Fix memory leak when printing unknown AC group OIDsTobias Brunner2014-04-091-0/+1
|
* pki: Removed extra continue statementTobias Brunner2014-04-091-1/+0
|
* Added support for msSmartcardLogon EKUAndreas Steffen2014-04-083-2/+14
|
* pki: Support absolute --this/next-update CRL lifetimesMartin Willi2014-03-311-6/+22
|
* pki: Support absolute --not-before/after issued certificate lifetimesMartin Willi2014-03-311-6/+21
|
* pki: Support absolute --not-before/after self-signed certificate lifetimesMartin Willi2014-03-311-5/+22
|
* pki: Support absolute --not-before/after acert lifetimesMartin Willi2014-03-311-7/+26
|
* pki: Implement an acert command to issue attribute certificatesMartin Willi2014-03-311-0/+273
|
* pki: Support printing attribute certificatesMartin Willi2014-03-311-1/+89
|
* pki: Don't generate negative random serial numbers in X.509 certificatesMartin Willi2014-03-312-0/+2
| | | | According to RFC 5280 4.1.2.2 we MUST force non-negative serial numbers.
* pki: Fix minor resource leak on failure to read the private key in --req5.1.2rc2Tobias Brunner2014-02-181-1/+2
|
* chunk: Use dynamically allocated buffer in chunk_from_fd()Martin Willi2014-01-237-11/+53
| | | | | | | | When acting on files, we can use fstat() to estimate the buffer size. On non-file FDs, we dynamically increase an allocated buffer. Additionally we slightly change the function signature to properly handle zero-length files and add appropriate unit tests.
* pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOBTobias Brunner2013-10-237-10/+42
| | | | This allows more than one builder to try parsing the data read from STDIN.
* pki: --pub also accepts public keys (i.e. to convert them to a different format)Tobias Brunner2013-09-131-1/+15
|
* pki: Add support to encode public keys in SSH key formatTobias Brunner2013-09-131-1/+1
|
* pki: Add pki --verify man pageTobias Brunner2013-09-131-2/+1
|
* pki: Add pki --pub man pageTobias Brunner2013-09-131-2/+2
|
* pki: Add pki --pkcs7 man pageTobias Brunner2013-09-131-4/+4
|
* pki: Add pki --req man pageTobias Brunner2013-09-131-3/+2
|
* pki: Add pki --signcrl man pageTobias Brunner2013-09-131-6/+6
|
* pki: Add pki --issue man pageTobias Brunner2013-09-131-6/+6
|
* pki: Add pki --self man pageTobias Brunner2013-09-131-2/+2
| | | | Can be opened with "man pki --self".
* pki: Add pki --gen man pageTobias Brunner2013-09-131-2/+2
| | | | Can be opened with "man pki --gen".
* Encode RSA public keys in RFC 3110 DNSKEY formatAndreas Steffen2013-02-191-1/+1
|
* Properly read data from stream in pki --pkcs7Tobias Brunner2013-01-241-6/+9
|
* Properly destroy mem_cred object on pki --pkcs7 --helpTobias Brunner2013-01-241-0/+1
|
* Allocate data returned by pkcs7_t.get_attribute()Martin Willi2012-12-191-0/+1
|
* Add a --show option to pki --pkcs7 to print contained certificatesMartin Willi2012-12-191-1/+50
|
* pki --pkcs7 --verify shows prints the signing time, if availableMartin Willi2012-12-191-1/+17
|
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-31 15:11:11 +0000