Martin Willi
|
0aaf5ccfa6
|
Add an error-notify plugin to send catched alerts to listening applications
|
2012-12-19 10:40:33 +01:00 |
|
Martin Willi
|
578f72ceb0
|
Raise an alert if half-open timeout limit reached
|
2012-12-19 10:40:33 +01:00 |
|
Martin Willi
|
c57fe7ac6f
|
Raise an alert if an authorize() hook fails
|
2012-12-19 10:40:33 +01:00 |
|
Martin Willi
|
45d6134218
|
Raise an alert if allocating virtual IPs fails
|
2012-12-19 10:40:33 +01:00 |
|
Martin Willi
|
f285b9efc8
|
Raise an alert if kernel policy installation fails
|
2012-12-19 10:40:33 +01:00 |
|
Martin Willi
|
bcf3147e0a
|
Raise an alert if kernel SA installation fails
|
2012-12-19 10:40:33 +01:00 |
|
Martin Willi
|
24f30ec92f
|
Raise an alert on traffic selector mismatch
|
2012-12-19 10:40:32 +01:00 |
|
Martin Willi
|
c794455666
|
Raise alerts when enforcing IKE_SA unique policy
|
2012-12-19 10:40:32 +01:00 |
|
Martin Willi
|
5dd9c3087f
|
Raise an alert if CHILD_SA proposals mismatch
|
2012-12-19 10:40:32 +01:00 |
|
Martin Willi
|
bab949bb26
|
Raise an alert if IKE proposals mismatch
|
2012-12-19 10:40:32 +01:00 |
|
Martin Willi
|
3f7f5388a5
|
Raise an alert of generating local authentication data fails
|
2012-12-19 10:40:32 +01:00 |
|
Martin Willi
|
644be5d537
|
Free leaking scep attributes
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
429e6d5eee
|
Corrected error message if enveloped-data decryption fails
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
0a344da291
|
Fix up serialNumber in openssl PKCS#7 if it has a leading MSB set
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
71dd4e7895
|
Don't handle PKCS#7 containers with infinite length encodings in pkcs7 plugin
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
3c820cdc23
|
Implement PKCS#7 decryption using openssl
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
2a87944a33
|
Make available wrapped certificates while verifying PKCS#7 signatures in openssl
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
04884be3b5
|
Implement openssl PKCS#7 certficiate enumeration
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
e96d945dcd
|
Fix doxygen grouping regarding containers and PKCS#7
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
36f2e11c70
|
Enable pkcs7 plugin when building scepclient on Android
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
03ba8f9e8c
|
Move PKCS#9 attribute lists to pkcs7 plugin, as we currently use it there only
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
804ba5bb50
|
Implement get_attribute() in openssl PKCS#7 backend
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
063ae4e52a
|
Allocate data returned by pkcs7_t.get_attribute()
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
c61723c69f
|
Implement OpenSSL PKCS#7 signed-data parsing and verification
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
568ad938d1
|
Add a stub for OpenSSL PKCS#7 parsing
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
1865fb929a
|
Remove unused monolithic PKCS#7 code
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
74cc41c704
|
Migrated scepclient to new modular PKCS# API
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
6d21c61a09
|
Fix encryption algorithm/key size argument processing in PKCS#7 enveloped-data
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
ee97055835
|
Properly clone PKCS#7 attributes passed to builder
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
8ccf5a4731
|
Fix enum names for container_type_t
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
24b2dae2b6
|
Add a --show option to pki --pkcs7 to print contained certificates
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
9e967d7dda
|
Add an enumerator for PKCS#7 contained certificates
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
9afbe59953
|
pki --pkcs7 --verify shows prints the signing time, if available
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
d3d706f4fc
|
Add a getter for signed PKCS#7 attributes
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
5a50bec9d2
|
Fix leak in pki --pkcs7 --decrypt
|
2012-12-19 10:32:08 +01:00 |
|
Martin Willi
|
b95b4730f5
|
Support multiple signerInfos while parsing PKCS#7 signed-data
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
47120d4977
|
Add a pki command to sign, verify, encrypt and decrypt PKCS#7 containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
5d932e4f01
|
Support encoding of PKCS#7 enveloped-data containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
32745a28cf
|
Support encoding of PKCS#7 signed-data containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
3c2986bf0a
|
Support encoding of PKCS#7 "data" containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
637a8abb72
|
Add builder parts to generate PKCS#7 containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
d7aa09104f
|
Implement PKCS#7 enveloped-data parsing and decryption
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
98bbe0760f
|
Implement PKCS#7 signed-data parsing and verification
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
83ed1464e3
|
Implement PKCS#7 "data" content type parsing
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
ed1c430334
|
certificate_t.has_subject() matches for certificate serialNumber
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
9de6a7a85c
|
Implement generic PKCS#7 contentInfo parsing
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
bd20f040fd
|
Add a plugin stub for PKCS#7 containers
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
692f560546
|
Add container plugin features
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
fc67a932ba
|
Add a generic interface for crypto containers and a more specific PKCS#7 interface
|
2012-12-19 10:32:07 +01:00 |
|
Martin Willi
|
67ca44ccbd
|
Rebuild PKCS#9 encoding after adding new attributes
|
2012-12-19 10:32:07 +01:00 |