2011-01-05 |
Martin Willi | Added CDP support to mem_cred |
tree | commitdiff |
2011-01-05 |
Martin Willi | Check for issuer only if we actually got a CRL |
tree | commitdiff |
2011-01-05 |
Martin Willi | Updated conftest README |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for custom file loggers, loglevel settings |
tree | commitdiff |
2011-01-05 |
Martin Willi | Check inhibitAnyPolicy in constraints plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Slightly renamed different policyConstraints to disting... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added inhibitAnyPolicy constraint support to pki tool |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for inhibitAnyPolicy constraint to x509... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Use a generic getter for all numerical X.509 constraints |
tree | commitdiff |
2011-01-05 |
Martin Willi | Check inhibitPolicyMapping in constraints plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Check requireExplicitPolicy in constraints plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Include subject cert to temporary auth info before... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Fail silently when trying to convert IPv6 address to... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Pass an additional anchor flag to validate() hook if... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Always pass auth info to validate(), use pathlen to... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Merge test config into suite config, instead of having... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for delta CRLs to pki tool |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for delta CRLs to x509 plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Moved CRL distribution point building to an exportable... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Simplified format of x509 CRL URI parsing/enumerator |
tree | commitdiff |
2011-01-05 |
Martin Willi | Fail on critical extensions in openssl CRLs |
tree | commitdiff |
2011-01-05 |
Martin Willi | Respect enforce_critical setting in x509 plugin CRLs |
tree | commitdiff |
2011-01-05 |
Martin Willi | Parse CRL extensions in a switch statement |
tree | commitdiff |
2011-01-05 |
Martin Willi | Respect policy mappings in certificatePolicy validation |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added a cert_policy option to conftest configurations |
tree | commitdiff |
2011-01-05 |
Martin Willi | Validate simple certificatePolicy inheritance |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added a certificate policy OID auth_cfg constraint |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added policyConstraints support to pki tool |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for policyConstraints to x509 plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added policyMappings support to pki tool |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added policyMappings support to x509 plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added policyMappings OID identifier |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added certificatePolicy options to pki tool |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added certificatePolicy support to x509 plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added a null-safe strdup variant |
tree | commitdiff |
2011-01-05 |
Martin Willi | Fail when parsing unsupported critical extensions in... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added CertificatePolicy OID identifier |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added conversion functions between string OIDs and... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Do not parse certificates with invalid version in opens... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Implemented NameConstraint matching in constraints... |
tree | commitdiff |
2011-01-05 |
Martin Willi | pki --issue/self support permitted/excluded NameConstraints |
tree | commitdiff |
2011-01-05 |
Martin Willi | pki --print prints NameConstraints |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for generating NameConstraints in x509... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for parsing NameConstraints in x509 plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added name constraint enumerator to x509 interface |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated x509_cert_t to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Moved X509 pathlen constraint checking to constraints... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added plugin stub for advanced X509 constraint checking |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added a hook to reset ESP sequence numbers |
tree | commitdiff |
2011-01-05 |
Martin Willi | Accept a suffix to differentiate x509, crl, ecdsa and... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Use strncaseeq instead of strncasecmp |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added a strncaseeq variant to the string comparison... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added tfc_padding option, changes signature to master... |
tree | commitdiff |
2011-01-05 |
Martin Willi | CRL/OCSP validation stores trustchain information in... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Key strength checking stores all key sizes in auth_cfg... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Install "ipsec" script with tools or conftest |
tree | commitdiff |
2011-01-05 |
Martin Willi | Use subject, not issuer, of CRL issuing certificate |
tree | commitdiff |
2011-01-05 |
Martin Willi | CRLSign keyUsage or CA basicConstraint are sufficient... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Parse and encode crlSign keyUsage flag in x509 plugin |
tree | commitdiff |
2011-01-05 |
Martin Willi | pki tool shows and builds crlSign keyUsage |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added a flag for X509 CRLSign keyUsage |
tree | commitdiff |
2011-01-05 |
Martin Willi | Remove x509_flag_names, flags do not work with ENUM() |
tree | commitdiff |
2011-01-05 |
Martin Willi | Use certificate CRLIssuer information to look up cacche... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added --crlissuer option to pki --issue |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added support for CRL Issuers to x509 and OpenSSL plugins |
tree | commitdiff |
2011-01-05 |
Martin Willi | Generate payload to rebuild_auth, works with injected... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Move rebuild_auth functionality to a standalone hook |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added key strength constraints support to conftest |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added key strength constraints for RSA or ECDSA trustchains |
tree | commitdiff |
2011-01-05 |
Martin Willi | Implemented hook to log traffic selectors |
tree | commitdiff |
2011-01-05 |
Martin Willi | The set_reserved() hook rebuilds AUTH if it mangles... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Include the used reserved bytes from ID payloads in... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated psk/pubkey_authenticators to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Extended set_reserved hook to mangle sa_payload substru... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added substructure enumerators to sa_payload, proposal_... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Moved check if packet already encoded to ike_sa, avoids... |
tree | commitdiff |
2011-01-05 |
Martin Willi | The set_ike_version hook supports version flag mangling |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added a message method to set the "higher version suppo... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Implemented hook to toggle initiator flag in IKE header |
tree | commitdiff |
2011-01-05 |
Martin Willi | Implemented a hook to set reserved bits |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added reserved bit mangling wrapper functions to message |
tree | commitdiff |
2011-01-05 |
Martin Willi | Use payload_get_field() to look up payload fields |
tree | commitdiff |
2011-01-05 |
Martin Willi | Implemented a generic payload field lookup function |
tree | commitdiff |
2011-01-05 |
Martin Willi | Reserved field get parsed/generated like any other... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Added member fields for reserved bits and bytes in... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated vendor_id_payload to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated ts_payload to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Use enumerator instead of deprecated iterator |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated transform_substructure to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Removed obsolete clone mehtod from proposal_substructure |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated transform_attribute to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated traffic_selector_substructre to INIT/METHOD... |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated notify_payload to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated nonce_payload to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated ke_payload to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated id_payload to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Use standard ID getter in log_id hook |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated cp_payload to INIT/METHOD macros |
tree | commitdiff |
2011-01-05 |
Martin Willi | Migrated configuration_attribute to INIT/METHOD macros |
tree | commitdiff |
next |