 Martin Willi
|
8ba805f4db
|
Avoid variable name overloading
|
2011-01-12 14:37:09 +01:00 |
|
|
Andreas Steffen
|
213281de04
|
terminate TNCCS 1.1 connection after sending recommendation
|
2011-01-11 01:17:40 +01:00 |
|
|
Andreas Steffen
|
4c8e9708ca
|
fixed XML syntax for TNCCS-Recommendation messages
|
2011-01-11 01:17:40 +01:00 |
|
|
Andreas Steffen
|
59d1b15aea
|
implemented check_and_build_recommendation()
|
2011-01-11 01:17:40 +01:00 |
|
|
Andreas Steffen
|
21d96f44f7
|
correct numbering of batches
|
2011-01-11 01:17:40 +01:00 |
|
|
Andreas Steffen
|
8d0d0f0fe9
|
initialize the reference count correctly
|
2011-01-11 01:17:40 +01:00 |
|
|
Andreas Steffen
|
f33966fe8f
|
handle zero size Base64 conversions
|
2011-01-11 01:17:40 +01:00 |
|
|
Andreas Steffen
|
8a284e0454
|
communicate DELETE state to IMCs and IMVs
|
2011-01-11 01:17:40 +01:00 |
|
|
Martin Willi
|
719c33b41a
|
Send INITIAL_CONTACT even if we have a unique policy
|
2011-01-10 11:54:10 +01:00 |
|
|
Andreas Steffen
|
5fee822a93
|
implemented parsing of TNCCS 1.1 messages
|
2011-01-09 10:00:54 +01:00 |
|
|
Andreas Steffen
|
33749b879c
|
send notifyConnectionChange() to IMCs
|
2011-01-09 10:00:13 +01:00 |
|
|
Andreas Steffen
|
a226307f13
|
suiteb directory hasn't been moved to Master yet
|
2011-01-08 02:17:42 +01:00 |
|
|
Andreas Steffen
|
8235528840
|
generate TNCCS-Error messages
|
2011-01-08 02:17:42 +01:00 |
|
|
Andreas Steffen
|
1c4b4f76ad
|
created process() method for TNCCS messages
|
2011-01-08 02:17:42 +01:00 |
|
|
Martin Willi
|
44e513a320
|
Added support for trustchain key strength checking to rightauth option
|
2011-01-07 15:51:35 +01:00 |
|
|
Martin Willi
|
6367de28ad
|
Added a left/rightcertpolicy keyword to specify certificatePolicy requirements
|
2011-01-07 15:51:35 +01:00 |
|
|
Martin Willi
|
1ed482d808
|
Fix nonce comparison in rekey collisions, lowest nonce loses
|
2011-01-07 15:51:35 +01:00 |
|
|
Andreas Steffen
|
3a04dfaaf6
|
corrected naming of tnccs_reason_strings_msg_t object
|
2011-01-07 07:18:42 +01:00 |
|
|
Andreas Steffen
|
87fd83a91e
|
do not forget to advance node
|
2011-01-07 07:17:52 +01:00 |
|
|
Andreas Steffen
|
1f7aad7f58
|
libcharon plugins depend on libtls and/or libsimaka
|
2011-01-07 06:28:08 +01:00 |
|
|
Andreas Steffen
|
3e348daae5
|
fixed cert_validator_t:validate interface
|
2011-01-07 05:41:01 +01:00 |
|
|
Andreas Steffen
|
d9e21bf180
|
implemented TNCCS 1.1 without libtnc
|
2011-01-07 05:29:59 +01:00 |
|
|
Andreas Steffen
|
cfa190bb7c
|
compute memory requirement for PEM-encoding correctly
|
2011-01-07 05:29:59 +01:00 |
|
|
Martin Willi
|
6f5892f5c7
|
Destroy existing IKE_SAs with same identities when receiving INITIAL_CONTACT
|
2011-01-05 16:46:08 +01:00 |
|
|
Martin Willi
|
a4a1e24d37
|
Send INITIAL_CONTACT for the first IKE_SA if it has a unique policy
|
2011-01-05 16:46:08 +01:00 |
|
|
Martin Willi
|
240bd7dbb7
|
Migrated ike_sa_manager_t to INIT/METHOD macros, some cleanups
|
2011-01-05 16:46:08 +01:00 |
|
|
Martin Willi
|
5b0e6c593a
|
Added option to use a different key when rebuilding AUTH
|
2011-01-05 16:46:07 +01:00 |
|
|
Martin Willi
|
7721fc6695
|
Do not print empty DN identities as invalid
|
2011-01-05 16:46:07 +01:00 |
|
|
Martin Willi
|
3fd3f8dea8
|
Added support for empty subjects DNs to pki --issue
|
2011-01-05 16:46:07 +01:00 |
|
|
Martin Willi
|
97d30f0010
|
Added support for OCSP responder URIs to conftest
|
2011-01-05 16:46:07 +01:00 |
|
|
Martin Willi
|
7b3740d958
|
Added support for delta CRL checking to revocation plugin
|
2011-01-05 16:46:07 +01:00 |
|
|
Martin Willi
|
0110c26a04
|
Use incremented serial of base CRL when signing delta CRL
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
2e90006f96
|
Show base CRL of delta CRLs in listcrls
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
76cfaf13c1
|
Verify trustchain for each candidate certificate only once
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
3a89b3c52f
|
Provide CRLs received in CERT payloads to trustchain verification
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
1a79d76abc
|
Added an AUTH_HELPER for revocation certificates
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
968e5e665b
|
Added support for CDPs to conftest
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
85b9e9be99
|
Added CDP support to mem_cred
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
d3a18dade1
|
Check for issuer only if we actually got a CRL
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
06e6535151
|
Updated conftest README
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
dbec133eb8
|
Added support for custom file loggers, loglevel settings
|
2011-01-05 16:46:06 +01:00 |
|
|
Martin Willi
|
c5f213cc0f
|
Check inhibitAnyPolicy in constraints plugin
|
2011-01-05 16:46:05 +01:00 |
|
|
Martin Willi
|
b088fd4a76
|
Slightly renamed different policyConstraints to distinguish them better
|
2011-01-05 16:46:05 +01:00 |
|
|
Martin Willi
|
6a339fffc7
|
Added inhibitAnyPolicy constraint support to pki tool
|
2011-01-05 16:46:05 +01:00 |
|
|
Martin Willi
|
07eee80401
|
Added support for inhibitAnyPolicy constraint to x509 plugin
|
2011-01-05 16:46:05 +01:00 |
|
|
Martin Willi
|
b3d359e58f
|
Use a generic getter for all numerical X.509 constraints
|
2011-01-05 16:46:05 +01:00 |
|
|
Martin Willi
|
b1703d6cb3
|
Check inhibitPolicyMapping in constraints plugin
|
2011-01-05 16:46:05 +01:00 |
|
|
Martin Willi
|
927120a128
|
Check requireExplicitPolicy in constraints plugin
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
8469625fdc
|
Include subject cert to temporary auth info before completing trustchain
|
2011-01-05 16:46:04 +01:00 |
|
|
Martin Willi
|
5eae41c6d8
|
Fail silently when trying to convert IPv6 address to v4 family host
|
2011-01-05 16:46:04 +01:00 |
|