aboutsummaryrefslogtreecommitdiffstats
path: root/src/pki
Commit message (Collapse)AuthorAgeFilesLines
* Do proper cleanup in error case in pki req.Tobias Brunner2011-04-141-1/+2
|
* Do proper cleanup in some error cases in pki signcrl.Tobias Brunner2011-04-141-2/+4
|
* use DN from pkcs10 request if it existsAndreas Steffen2011-02-071-5/+6
|
* Added support for empty subjects DNs to pki --issueMartin Willi2011-01-051-8/+7
|
* Use incremented serial of base CRL when signing delta CRLMartin Willi2011-01-051-0/+2
|
* Slightly renamed different policyConstraints to distinguish them betterMartin Willi2011-01-052-12/+12
|
* Added inhibitAnyPolicy constraint support to pki toolMartin Willi2011-01-053-5/+21
|
* Use a generic getter for all numerical X.509 constraintsMartin Willi2011-01-051-10/+10
|
* Added support for delta CRLs to pki toolMartin Willi2011-01-053-18/+91
|
* Simplified format of x509 CRL URI parsing/enumeratorMartin Willi2011-01-052-14/+30
|
* Added policyConstraints support to pki toolMartin Willi2011-01-054-46/+87
|
* Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for ↵Martin Willi2011-01-053-3/+3
| | | | PolicyConstraints, too
* Added policyMappings support to pki toolMartin Willi2011-01-053-12/+121
|
* Added certificatePolicy options to pki toolMartin Willi2011-01-054-5/+136
|
* pki --issue/self support permitted/excluded NameConstraintsMartin Willi2011-01-053-19/+57
|
* pki --print prints NameConstraintsMartin Willi2011-01-051-0/+25
|
* CRLSign keyUsage or CA basicConstraint are sufficient for CRL validationMartin Willi2011-01-051-2/+2
|
* pki tool shows and builds crlSign keyUsageMartin Willi2011-01-053-2/+14
|
* Added --crlissuer option to pki --issueMartin Willi2011-01-052-19/+26
|
* Added support for CRL Issuers to x509 and OpenSSL pluginsMartin Willi2011-01-051-3/+8
|
* Added crl support to pki --printMartin Willi2010-08-301-7/+52
|
* Build dedicated plugin lists for each strongSwan componentMartin Willi2010-08-121-1/+1
|
* Use bits instead of bytes for a private/public keyMartin Willi2010-08-101-1/+1
|
* Added PKCS#11 private key support to the pki toolMartin Willi2010-08-044-22/+81
|
* The pki tool uses a callback credential set to read in passphrase/PINMartin Willi2010-08-041-0/+67
|
* Use a dedicated build part for challenge passwords, BUILD_PASSPHRASE gets ↵Martin Willi2010-08-041-1/+1
| | | | obsolete
* Added pki PEM encoding support for certificates, CRLs and PKCS10 requestsMartin Willi2010-07-138-25/+90
|
* Support different encoding types in certificate.get_encoding()Martin Willi2010-07-134-8/+4
|
* Renamed key_encod{ing,der}_t and constants, prepare for generic credential ↵Martin Willi2010-07-136-15/+15
| | | | encoding
* Changed default lifetime of certificates to 3 yearsMartin Willi2010-05-312-4/+4
|
* Support extendedKeyUsage flags in self-signed certificatesMartin Willi2010-05-311-0/+16
|
* Added a --signcrl command to the pki utilityMartin Willi2010-05-213-1/+377
|
* Added a --print command to pki that dumps different credentialsMartin Willi2010-05-202-0/+369
|
* Fixing out-of-tree build after adding dependency to config.status.Tobias Brunner2010-04-291-1/+1
|
* Users of PLUGINS depend on config.status, rebuilding them if plugin ↵Martin Willi2010-04-291-1/+3
| | | | configuration is updated
* Adding DBG_LIB to all calls of libstrongswan's version of DBG*.Tobias Brunner2010-04-061-4/+4
|
* fixed short option nameAndreas Steffen2010-04-041-1/+1
|
* we don't accept a serial number with leading zeroesAndreas Steffen2010-03-142-0/+10
|
* Support TLS client authentication Extended Key Usage in x509 generationMartin Willi2010-01-141-1/+5
|
* ipsec pki --self|issue supports --pathlen option setting a path length ↵Andreas Steffen2009-12-312-3/+14
| | | | constraint
* Fixed all doxygen warningsMartin Willi2009-10-221-1/+1
|
* ipsec pki --issue suports --flag authServer optionAndreas Steffen2009-10-051-1/+5
|
* ipsec pki --issue supports --flag ocspSigning optionAndreas Steffen2009-10-051-0/+8
|
* Right-align short options in pki usageMartin Willi2009-09-241-7/+5
|
* Use the default debug hook if possibleMartin Willi2009-09-163-29/+1
|
* Removed obsolete per-command debug level optionMartin Willi2009-09-163-9/+0
|
* corrected usageAndreas Steffen2009-09-151-2/+1
|
* pki --req generates a PKCS#10 certificate requestAndreas Steffen2009-09-152-2/+195
|
* fixed typoAndreas Steffen2009-09-151-1/+1
|
* Handle pki --debug and --options in a generic way for all commandMartin Willi2009-09-158-133/+163
|