aboutsummaryrefslogtreecommitdiffstats
path: root/src/pki
Commit message (Collapse)AuthorAgeFilesLines
* pki: Make cmds array static, ensuring that it is zero-initializedMartin Willi2014-02-201-2/+1
| | | | | As pki --help relies on a zero-terminated array, make the actually non-public cmds array static to ensure initialization.
* pki: Fix minor resource leak on failure to read the private key in --req5.1.2rc2Tobias Brunner2014-02-181-1/+2
|
* lib: Add global config namespaceTobias Brunner2014-02-121-1/+1
|
* pki: Declare correct section in pki --issue man pageTobias Brunner2014-01-241-1/+1
|
* chunk: Use dynamically allocated buffer in chunk_from_fd()Martin Willi2014-01-237-11/+53
| | | | | | | | When acting on files, we can use fstat() to estimate the buffer size. On non-file FDs, we dynamically increase an allocated buffer. Additionally we slightly change the function signature to properly handle zero-length files and add appropriate unit tests.
* pki: Make sure no command registers too many optionsTobias Brunner2014-01-232-4/+11
|
* pki: Increase MAX_COMMANDS to cover all currently available commandsTobias Brunner2014-01-231-2/+2
| | | | Fixes #452.
* pki: Print a warning if MAX_COMMANDS is too lowTobias Brunner2014-01-231-0/+7
|
* pki: Properly use ?: when defining option arraysTobias Brunner2014-01-231-2/+2
|
* pki: Replace BUILD_FROM_FD with passing a chunk via BUILD_BLOBTobias Brunner2013-10-237-10/+42
| | | | This allows more than one builder to try parsing the data read from STDIN.
* ignore *.1 manpage filesAndreas Steffen2013-09-171-1/+1
|
* pki: --pub also accepts public keys (i.e. to convert them to a different format)Tobias Brunner2013-09-132-3/+18
|
* pki: Add support to encode public keys in SSH key formatTobias Brunner2013-09-133-4/+16
|
* pki: Don't print an error if no arguments are givenTobias Brunner2013-09-131-1/+1
|
* pki: Install pki(1) as utility directly in $prefix/binTobias Brunner2013-09-1313-86/+85
| | | | ipsec pki is maintained as alias.
* pki: Add example commands to setup a simple CATobias Brunner2013-09-131-0/+75
|
* pki: Add pki --verify man pageTobias Brunner2013-09-134-4/+61
|
* pki: Add pki --pub man pageTobias Brunner2013-09-134-4/+81
|
* pki: Add pki --print man pageTobias Brunner2013-09-133-2/+57
|
* pki: Add pki --keyid man pageTobias Brunner2013-09-133-2/+76
|
* pki: Add pki --pkcs7 man pageTobias Brunner2013-09-134-6/+87
|
* pki: Add pki --req man pageTobias Brunner2013-09-134-5/+97
|
* pki: Add pki --signcrl man pageTobias Brunner2013-09-134-8/+134
|
* pki: Add pki --issue man pageTobias Brunner2013-09-134-8/+189
|
* pki: Add pki --self man pageTobias Brunner2013-09-134-4/+154
| | | | Can be opened with "man pki --self".
* pki: Add pki --gen man pageTobias Brunner2013-09-134-4/+118
| | | | Can be opened with "man pki --gen".
* pki: Add ipsec-pki(8) man pageTobias Brunner2013-09-134-0/+79
| | | | | | | Can be opened either with "man ipsec pki" or "man ipsec-pki". Since man(1) only supports one level of subpages, the forthcoming man pages for each command will have to be opened with "man pki --<command>".
* automake: replace INCLUDES by AM_CPPFLAGSMartin Willi2013-07-181-2/+2
| | | | | | INCLUDES are now deprecated and throw warnings when using automake 1.13. We now also differentiate AM_CPPFLAGS and AM_CFLAGS, where includes and defines are passed to AM_CPPFLAGS only.
* plugin-loader: Removed unused path argument of load() methodTobias Brunner2013-06-281-1/+1
| | | | | Multiple additional search paths can be added with the add_path() method.
* Fixed Doxygen comments after scanning complete src directoryTobias Brunner2013-03-022-2/+4
|
* Encode RSA public keys in RFC 3110 DNSKEY formatAndreas Steffen2013-02-192-1/+12
|
* Properly read data from stream in pki --pkcs7Tobias Brunner2013-01-241-6/+9
|
* Properly destroy mem_cred object on pki --pkcs7 --helpTobias Brunner2013-01-241-0/+1
|
* Allocate data returned by pkcs7_t.get_attribute()Martin Willi2012-12-191-0/+1
|
* Add a --show option to pki --pkcs7 to print contained certificatesMartin Willi2012-12-191-1/+50
|
* pki --pkcs7 --verify shows prints the signing time, if availableMartin Willi2012-12-191-1/+17
|
* Fix leak in pki --pkcs7 --decryptMartin Willi2012-12-191-0/+1
|
* Add a pki command to sign, verify, encrypt and decrypt PKCS#7 containersMartin Willi2012-12-192-0/+392
|
* allow the optional sharing if RSA private keysAndreas Steffen2012-11-221-3/+31
|
* implemented generation of safe primesAndreas Steffen2012-11-181-7/+20
|
* Moved debug.[ch] to utils folderTobias Brunner2012-10-244-4/+4
|
* Moved data structures to new collections subfolderTobias Brunner2012-10-244-4/+4
|
* Avoid overrunning array when registering pki command line optionsTobias Brunner2012-09-281-1/+1
|
* Use centralized hasher names in pki utilityMartin Willi2012-07-176-45/+8
|
* Check rng return value when generating serial numbers in pki utilityTobias Brunner2012-07-162-8/+8
|
* certificate_t->issued_by takes an argument to receive signature schemeMartin Willi2012-06-121-1/+1
|
* Merge branch 'ikev1'Martin Willi2012-05-023-0/+12
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/encoding/generator.c src/libcharon/encoding/payloads/notify_payload.c src/libcharon/encoding/payloads/notify_payload.h src/libcharon/encoding/payloads/payload.c src/libcharon/network/receiver.c src/libcharon/sa/authenticator.c src/libcharon/sa/authenticator.h src/libcharon/sa/ikev2/tasks/ike_init.c src/libcharon/sa/task_manager.c src/libstrongswan/credentials/auth_cfg.c
| * Merge branch 'ikev1-clean' into ikev1-masterMartin Willi2012-03-203-0/+12
| |\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: configure.in man/ipsec.conf.5.in src/libcharon/daemon.c src/libcharon/plugins/eap_ttls/eap_ttls_peer.c src/libcharon/plugins/eap_radius/eap_radius_accounting.c src/libcharon/plugins/eap_radius/eap_radius_forward.c src/libcharon/plugins/farp/farp_listener.c src/libcharon/sa/ike_sa.c src/libcharon/sa/keymat.c src/libcharon/sa/task_manager.c src/libcharon/sa/trap_manager.c src/libstrongswan/plugins/x509/x509_cert.c src/libstrongswan/utils.h Applied lost changes of moved files keymat.c and task_manager.c. Updated listener_t.message hook signature in new plugins.
| | * Added support for iKEIntermediate flag to ipsec pki.Tobias Brunner2012-03-203-0/+12
| | |
* | | ASN.1 two's complement encoding prevents overflow in CRL serial numberAndreas Steffen2012-04-041-10/+18
| | |
generated by cgit v1.2.3 (git 2.25.1) at 2025-08-03 08:47:41 +0000