| 2011-01-05 |
Martin Willi | Added conftest NEWS |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added NEWS about INITIAL_CONTACT support |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Destroy existing IKE_SAs with same identities when... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Send INITIAL_CONTACT for the first IKE_SA if it has... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Migrated ike_sa_manager_t to INIT/METHOD macros, some... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added option to use a different key when rebuilding... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Do not print empty DN identities as invalid |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for empty subjects DNs to pki --issue |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for OCSP responder URIs to conftest |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for delta CRL checking to revocation... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Use incremented serial of base CRL when signing delta CRL |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Show base CRL of delta CRLs in listcrls |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Verify trustchain for each candidate certificate only... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Provide CRLs received in CERT payloads to trustchain... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added an AUTH_HELPER for revocation certificates |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for CDPs to conftest |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added CDP support to mem_cred |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Check for issuer only if we actually got a CRL |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Updated conftest README |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for custom file loggers, loglevel settings |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Check inhibitAnyPolicy in constraints plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Slightly renamed different policyConstraints to disting... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added inhibitAnyPolicy constraint support to pki tool |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for inhibitAnyPolicy constraint to x509... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Use a generic getter for all numerical X.509 constraints |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Check inhibitPolicyMapping in constraints plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Check requireExplicitPolicy in constraints plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Include subject cert to temporary auth info before... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Fail silently when trying to convert IPv6 address to... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Pass an additional anchor flag to validate() hook if... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Always pass auth info to validate(), use pathlen to... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Merge test config into suite config, instead of having... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for delta CRLs to pki tool |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for delta CRLs to x509 plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Moved CRL distribution point building to an exportable... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Simplified format of x509 CRL URI parsing/enumerator |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Fail on critical extensions in openssl CRLs |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Respect enforce_critical setting in x509 plugin CRLs |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Parse CRL extensions in a switch statement |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Respect policy mappings in certificatePolicy validation |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added a cert_policy option to conftest configurations |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Validate simple certificatePolicy inheritance |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added a certificate policy OID auth_cfg constraint |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added policyConstraints support to pki tool |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for policyConstraints to x509 plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added policyMappings support to pki tool |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added policyMappings support to x509 plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added policyMappings OID identifier |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added certificatePolicy options to pki tool |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added certificatePolicy support to x509 plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added a null-safe strdup variant |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Fail when parsing unsupported critical extensions in... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added CertificatePolicy OID identifier |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added command line tool for OID to DER conversion function |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added conversion functions between string OIDs and... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Do not parse certificates with invalid version in opens... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Implemented NameConstraint matching in constraints... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | pki --issue/self support permitted/excluded NameConstraints |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | pki --print prints NameConstraints |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for generating NameConstraints in x509... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for parsing NameConstraints in x509 plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added name constraint enumerator to x509 interface |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Migrated x509_cert_t to INIT/METHOD macros |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Moved X509 pathlen constraint checking to constraints... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added plugin stub for advanced X509 constraint checking |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added a hook to reset ESP sequence numbers |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Accept a suffix to differentiate x509, crl, ecdsa and... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Use strncaseeq instead of strncasecmp |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added a strncaseeq variant to the string comparison... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added tfc_padding option, changes signature to master... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | CRL/OCSP validation stores trustchain information in... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Key strength checking stores all key sizes in auth_cfg... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Install "ipsec" script with tools or conftest |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Use subject, not issuer, of CRL issuing certificate |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | CRLSign keyUsage or CA basicConstraint are sufficient... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Parse and encode crlSign keyUsage flag in x509 plugin |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | pki tool shows and builds crlSign keyUsage |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added a flag for X509 CRLSign keyUsage |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Remove x509_flag_names, flags do not work with ENUM() |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Use certificate CRLIssuer information to look up cacche... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added --crlissuer option to pki --issue |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added support for CRL Issuers to x509 and OpenSSL plugins |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Generate payload to rebuild_auth, works with injected... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Move rebuild_auth functionality to a standalone hook |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added key strength constraints support to conftest |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added key strength constraints for RSA or ECDSA trustchains |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Implemented hook to log traffic selectors |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | The set_reserved() hook rebuilds AUTH if it mangles... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Include the used reserved bytes from ID payloads in... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Migrated psk/pubkey_authenticators to INIT/METHOD macros |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Extended set_reserved hook to mangle sa_payload substru... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added substructure enumerators to sa_payload, proposal_... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Moved check if packet already encoded to ike_sa, avoids... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | The set_ike_version hook supports version flag mangling |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added a message method to set the "higher version suppo... |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Implemented hook to toggle initiator flag in IKE header |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Implemented a hook to set reserved bits |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Added reserved bit mangling wrapper functions to message |
commit | commitdiff | tree | snapshot |
| 2011-01-05 |
Martin Willi | Use payload_get_field() to look up payload fields |
commit | commitdiff | tree | snapshot |
| next |
projects / strongswan.git / shortlog