Commit Graph
19030 Commits
Author SHA1 Message Date
Martin Willi df5c60bc5d added a BUILD_FROM_FD option, supporting credential parsing from stdin 2009-08-26 13:03:23 +02:00
Martin Willi 7c577c8ea2 started implementation of a PKI tool, currently supporting RSA|ECDSA key generation 2009-08-26 11:23:55 +02:00
Martin Willi 08ed551ce0 implemented openssl EC key generation 2009-08-26 11:23:55 +02:00
Martin Willi a0b850450f fixed openssl RSA private key encoding 2009-08-26 11:23:55 +02:00
Martin Willi 16db1207cf keyids in SQL use ID_KEY_ID type with subjectPublicKey SHA1 hash 2009-08-26 11:23:55 +02:00
Martin Willi 41f57038e4 tests load pem/pkcs1 plugins, pubkey plugin not needed anymore 2009-08-26 11:23:55 +02:00
Martin Willi 0df451bc07 use ./configured plugins in keyid scripts 2009-08-26 11:23:55 +02:00
Martin Willi 500aa2607f accept PEM encoded keys in keyid scripts 2009-08-26 11:23:55 +02:00
Martin Willi 94dde8a0ab migrated scripts to new fingerprinting API 2009-08-26 11:23:55 +02:00
Martin Willi 9c3d2b3d60 updated medsrv and test to new fingerprint/encoding API 2009-08-26 11:23:55 +02:00
Martin Willi 1cd0d7969a updated load-tester plugin to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi 8eefe4617f use only KEY_ID_PUBKEY_SHA1 fingerprint charon internally 2009-08-26 11:23:53 +02:00
Martin Willi 87d2026341 updated nm plugin to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi cb4f09eff3 updated agent plugin to new fingerprint/encoding API 2009-08-26 11:23:53 +02:00
Martin Willi c5cd195c6c updated stroke plugin to fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi 64fdbce4da updated charon to new fingerprinting API 2009-08-26 11:23:53 +02:00
Martin Willi b4b68b64b8 updated pluto to new fingerprinting API 2009-08-26 11:23:52 +02:00
Martin Willi 5bceb90c86 updated scepclient to new encoding API 2009-08-26 11:23:52 +02:00
Martin Willi 8d09681559 updated pubkey plugin to new fingerprinting API 2009-08-26 11:23:52 +02:00
Martin Willi 6b6ece636c updated x509 plugin to public key/x509 API changes 2009-08-26 11:23:52 +02:00
Martin Willi a5e3153a36 updated x509/CRL/AC API to align with public key, authKeyIdentifier is a chunk 2009-08-26 11:23:52 +02:00
Martin Willi e35c3e2a03 updated openssl plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi cbd5138948 updated gcrypt plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi 741680d179 updated gmp plugin to new private/public key API, use encoder framework 2009-08-26 11:23:52 +02:00
Martin Willi 1384a42e1b changed get_id/get_encoding API of private/public key to use new encoding framework 2009-08-26 11:23:52 +02:00
Martin Willi 1ef69b01ab removed obsolete fingerprint identification types 2009-08-26 11:23:52 +02:00
Martin Willi edd354db6f added generic implementation helpers for private_key_t.equals/belongs_to, public_key_t.equals 2009-08-26 11:23:52 +02:00
Martin Willi 0dd2defc5a added a seperate chache lookup, as encode() requires arguments expensive to build 2009-08-26 11:23:52 +02:00
Martin Willi 64e77e8fbb use credential builder API to parse trusted public keys 2009-08-26 11:23:52 +02:00
Martin Willi d1b3e8607e implemented PGP fingerprinting 2009-08-26 11:23:51 +02:00
Martin Willi e773fe4cab implemented pkcs1 private/public key encoding and fingerprinting 2009-08-26 11:23:51 +02:00
Martin Willi 934d49a4f9 chunk_cat/cata/create_cat/length accept the sensitive data clearing mode 's' 2009-08-26 11:23:51 +02:00
Martin Willi 957d116328 in addition to 'm'/'c' mode, asn1_wrap accepts a 's' mode clearing sensitive information 2009-08-26 11:23:51 +02:00
Martin Willi d9b24887a4 added a facility to hand out fingerprinting/key encoding to the pkcs1/pgp/... plugins 2009-08-26 11:23:51 +02:00
Martin Willi 831520d895 gmp uses component builder to build public- from private-key 2009-08-26 11:23:51 +02:00
Martin Willi 8380503168 gcrypt uses component builder to build public- from private-key 2009-08-26 11:23:51 +02:00
Martin Willi b457e08fca moved PGP code to pluto and gpg plugin 2009-08-26 11:23:51 +02:00
Martin Willi 7033a70fd0 gmp plugin makes use of pkcs1/pgp/dnskey plugins 2009-08-26 11:23:51 +02:00
Martin Willi cbfafc1125 enforce RSA_PRIME1 > RSA_PRIME2 (p > q) in PGP 2009-08-26 11:23:51 +02:00
Martin Willi 5ef478aaee implemented RFC3110 key builder in a plugin, added generic DNSKEY RR parsing 2009-08-26 11:23:51 +02:00
Martin Willi 3addf4e937 renamed BUILD_BLOB_RFC_3110 to BUILD_BLOB_DNSKEY, we potentially support other key types 2009-08-26 11:23:51 +02:00
Martin Willi caa00e7ab7 pluto uses KEY_ANY builder to parse PGP public keys 2009-08-26 11:23:50 +02:00
Martin Willi 9493dd2ce0 implemented a pgp plugin providing PGP key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 4e3d1e804e make use of the pkcs1 plugin in gcrypt rsa key parsing 2009-08-26 11:23:50 +02:00
Martin Willi 3044774323 removed subjectPublicKeyInfo parsing, provided by pkcs1 plugin 2009-08-26 11:23:50 +02:00
Martin Willi 1e0f69373a implemented a pkcs1 plugin providing PKCS#1 key parsing builders 2009-08-26 11:23:50 +02:00
Martin Willi 750bbcf9a8 added support for %prompt-ing private key passhprases in strokes "ipsec secrets" 2009-08-26 11:23:50 +02:00
Martin Willi 7c2d883af7 show more information if building a credential fails 2009-08-26 11:23:50 +02:00
Martin Willi 833dcfa530 log loaded private key/certificates 2009-08-26 11:23:50 +02:00
Martin Willi 3f9ec06f6f added getnetbyname/gethostbyname2 to leak detective whitelist, used by pluto 2009-08-26 11:23:50 +02:00