Tobias Brunner
5b85b94e27
pkcs11: Make sure a key can be used for a given signature scheme.
2011-11-02 20:27:55 +01:00
Tobias Brunner
58d0a8d49b
pkcs11: Register ECDSA feature.
2011-11-02 20:27:55 +01:00
Tobias Brunner
fd48b220ed
pkcs11: We have to create our own hashes for some signature schemes.
2011-11-02 20:27:55 +01:00
Tobias Brunner
30a3ede8ce
pkcs11: Lookup the public key of a private key by CKA_ID.
...
Currently this only works if a public key object with the same ID is
available, if there isn't one we could search for a certificate with the
same ID and extract the key from there.
2011-11-02 20:27:55 +01:00
Tobias Brunner
5d2fccf439
pkcs11: Search for private keys in a more generic way.
...
Also, don't extract the public key directly from the private key. Some
tokens actually do not return the public exponent (it's not required).
We have to find a different way to get the public key.
2011-11-02 20:27:55 +01:00
Tobias Brunner
9e3b1e1495
pkcs11: Added support to encode ECDSA public keys.
2011-11-02 20:27:55 +01:00
Tobias Brunner
36d1627f6e
pkcs11: Parse ECDSA public keys and find/create them on tokens.
2011-11-02 20:27:55 +01:00
Tobias Brunner
574261163f
pkcs11: Added generic functions to find/create public keys on tokens.
2011-11-02 20:27:55 +01:00
Tobias Brunner
a8084ee011
pkcs11: Store public key length in bits.
2011-11-02 20:27:55 +01:00
Tobias Brunner
8859c1f26b
pkcs11: Fix encoding of RSA public keys.
2011-11-02 20:27:55 +01:00
Tobias Brunner
dae19d448d
pkcs11: Use create_object_attr_enumerator to encode RSA public key.
2011-11-02 20:27:54 +01:00
Tobias Brunner
b0319fe860
pkcs11: Instead of a mutex use a new session to do multipart operations.
2011-11-02 20:27:54 +01:00
Tobias Brunner
c198525104
pkcs11: Function added to retrieve multiple attributes from a single object.
2011-11-02 20:27:54 +01:00
Tobias Brunner
817d165cbc
pkcs11: Memory leak fixed in DH/ECDH implementation.
2011-11-02 20:27:54 +01:00
Tobias Brunner
43cd036a77
pkcs11: Invalid free fixed in DH/ECDH implementation.
2011-11-02 20:27:54 +01:00
Tobias Brunner
50ad6eacb6
pkcs11: Changed how pkcs11-manager is initialized.
...
The manager is now created directly, but events and certificate loading
is deferred.
2011-11-02 20:27:54 +01:00
Tobias Brunner
cf9d45ea08
pkcs11: Add attributes to specify what we use the DH/ECDH keys for.
2011-11-02 20:27:54 +01:00
Andreas Steffen
74d165a94b
version bump to 4.6.0
2011-11-02 09:30:45 +01:00
Andreas Steffen
a12bb386f7
enable integrity test in tnc/tnccs-dynamic scenario
2011-11-02 09:30:18 +01:00
Andreas Steffen
90bb98f4ac
charon must load libtls if available
2011-11-02 09:28:09 +01:00
Andreas Steffen
b597ac4a4c
fixed integrity tests of plugins using libtls or libtnccs
2011-11-02 06:42:08 +01:00
Andreas Steffen
6ae024392b
removed xcbc plugin from sql scenarios
2011-11-01 00:16:35 +01:00
Andreas Steffen
b08505da70
tnc-tnccs plugin is now included in integrity tests
2011-10-31 23:30:06 +01:00
Tobias Brunner
b7b5bca048
pkcs11: Allow to build pkcs11 plugin on Android.
2011-10-31 18:55:27 +01:00
Tobias Brunner
1a9e3e0147
pkcs11: Documented new options in strongswan.conf(5).
2011-10-31 18:50:10 +01:00
Tobias Brunner
b3b3613c60
pkcs11: Register the pkcs11 plugin before any other crypto plugins.
...
This is what most users probably expect when they enable the pkcs11
plugin. All advanced features (like DH/RNG) are disabled by default.
2011-10-31 18:46:16 +01:00
Tobias Brunner
23b50b776b
pkcs11: Use callback registration for pkcs11-manager.
...
Otherwise a plugin providing X509 decoding capabilities might be unloaded
before the manager which will result in a segmentation fault when
certificates in the manager's credential sets are to be destroyed.
2011-10-31 18:45:37 +01:00
Tobias Brunner
10b82be61f
pkcs11: Merged the ECDH into the DH implementation.
2011-10-31 18:45:37 +01:00
Tobias Brunner
89de89be57
pkcs11: Use get_ck_attribute for ECDH.
2011-10-31 18:45:37 +01:00
Tobias Brunner
cac6853180
pkcs11: Use get_ck_attribute for DH.
2011-10-31 18:45:37 +01:00
Tobias Brunner
8531106578
pkcs11: Method added to library to extract a single attribute from an object.
2011-10-31 18:45:36 +01:00
Tobias Brunner
6a5020fc67
pkcs11: Added names for CKA_* constants.
2011-10-31 18:45:36 +01:00
Tobias Brunner
4e346b1f97
pkcs11: Added support for ECDH.
2011-10-31 18:45:36 +01:00
Tobias Brunner
612e431305
pkcs11: Added definitions needed for ECDH to pkcs11.h.
2011-10-31 18:45:36 +01:00
Tobias Brunner
7c78a6e631
pkcs11: Specify object class and key type when deriving DH secrets.
...
pkcs11_softtoken on OpenSolaris requires this (probably others too).
2011-10-31 18:45:36 +01:00
Tobias Brunner
b730fd6fbd
pkcs11: Add features support.
2011-10-31 18:45:36 +01:00
Tobias Brunner
1bb5d7c3cb
pkcs11: Added support for DH.
2011-10-31 18:45:36 +01:00
Tobias Brunner
df241121fd
pkcs11: Error message fixed.
2011-10-31 18:45:35 +01:00
Tobias Brunner
1bb522bc34
pkcs11: Added support to generate random numbers on a token.
2011-10-31 18:45:35 +01:00
Tobias Brunner
deba3da5b0
pkcs11: Properly destroy mutex in pkcs11_hasher if no token found.
2011-10-31 18:45:29 +01:00
Andreas Steffen
7c57867ebd
Added features support to agent plugin
2011-10-30 17:59:23 +01:00
Andreas Steffen
1c2008f07f
Added features support to dnskey plugin
2011-10-30 17:57:16 +01:00
Andreas Steffen
80fe26ec74
Added features support to pgp plugin
2011-10-30 17:52:13 +01:00
Andreas Steffen
caebf7cee9
Added features support to pkcs1 plugin
2011-10-30 17:44:35 +01:00
Andreas Steffen
ffddcec322
added newline
2011-10-30 17:43:55 +01:00
Andreas Steffen
0770fa16f8
remove pem_encoder_encode
2011-10-30 17:21:57 +01:00
Andreas Steffen
e0442525bb
Add features support to pem plugin
2011-10-30 17:16:13 +01:00
Tobias Brunner
abb89a97d1
Some Doxygen fixes.
2011-10-28 21:24:52 +02:00
Tobias Brunner
075c706073
Copyright fixed.
2011-10-28 21:07:35 +02:00
Tobias Brunner
54ce738920
pluto: Compile warning fixed.
2011-10-27 15:42:44 +02:00
Tobias Brunner