dfd5cdcb88
cert_cache_t caches subject-issuer relations and subject certificates ocsp/crl do not benefit yet due missing lookup function
Martin Willi2008-03-20 14:31:36 +00:00
fe8f7626d1
fallback to random end entity certificate if trustchain building fails
Martin Willi2008-03-20 13:14:55 +00:00
ca7663ece6
CA certificates are allowed to sign OCSP responsed without OCSP_SIGNER flag
Martin Willi2008-03-20 07:21:44 +00:00
48acfe98ae
refactored trustchain verification, this should fix#33 moved auth_info/ocsp_response credset wrapper to separate files
Martin Willi2008-03-19 17:54:54 +00:00
84d8ff64cd
increased debug level in trust chain verification for auditing purposes
Andreas Steffen2008-03-19 17:04:09 +00:00
de7062a280
removed unimplemented private/public key function declarations
Martin Willi2008-03-19 14:21:56 +00:00
cfede7f6e2
The introduced SHA1_NOFINAL hasher was not sufficient for EAP-AKA, as it requires to XOR the key into the hashers state. A new SHA1 based keyed hash function, implemented as PRF, enables EAP-AKA and the FIPS-PRF function to properly use the existing SHA1 implementation.
Martin Willi2008-03-19 14:02:52 +00:00
3c448f019b
fixed peer_cfg lookup when omitting IDr
Martin Willi2008-03-19 10:08:59 +00:00
081ae2eb61
fixed CRL check return value on revoked certificates fixed possible refcounting bugs generic return_null() implementation
Martin Willi2008-03-19 09:44:47 +00:00
72d68379dc
correctly unregister IKE_SA at the bus
Martin Willi2008-03-15 14:08:43 +00:00
8d04f78d07
removed X509_PEER flag; flags are meant to read cert, not to store additional state in cert removed x509_t.set_flags for the reason above implemented a simple, generic shared_key_t
Martin Willi2008-03-14 15:11:29 +00:00
39ea88f694
credential lookup in mysql/sqlite database
Martin Willi2008-03-14 15:06:42 +00:00
298c9c8eed
some websites append a newline character to a DER-encoded binary blob
Andreas Steffen2008-02-05 19:27:05 +00:00
5bbac9ffff
split connections with different virtual IPs in different peer_cfgs respect different peer_cfg's when initiating a CHILD_SA within an existing IKE_SA
Martin Willi2008-02-05 12:39:30 +00:00
cdd33ec665
* replaced __thread with pthread_key_t/pthread_setspecific * use pthread_once to initialize the request handler
Tobias Brunner2008-02-05 09:31:21 +00:00
663fedbe44
implemented IKEV2 EAP-SIM server and client test module that use triplets stored in a file. For details see the scenario 'ikev2/rw-eap-sim-rsa'
Andreas Steffen2008-02-04 14:52:06 +00:00
0730fec464
refactored optionsfrom as in an object-oriented way using the options_t class. Eliminated all memory leaks
Andreas Steffen2008-02-04 14:44:14 +00:00
3b1692c058
use identifiers in EAP_SUCCESS/EAP_FAILURE payloads
Martin Willi2008-02-04 11:43:10 +00:00