9 Commits

Author	SHA1	Message	Date
Tobias Brunner	e773dbaeba	ike-cert-post: Make absolutely sure certificates are only added to IKE_AUTH ... The AUTH payload check should be fine, but add some extra checks just to make really sure and also for clarification.	2021-06-24 10:11:13 +02:00
Tobias Brunner	d384f40f20	ike-cert-post: Encode intermediate CA certificates as hash-and-URL if possible	2019-11-26 11:12:26 +01:00
Tobias Brunner	ae06cfad36	ike-cert-post: Generate URL for hash-and-URL here ... This avoids having to register certificates with authority/ca backends beforehand, which is tricky for intermediate CA certificates loaded themselves via authority/ca sections. On the other hand, the form of these URLs can't be determined by config backends anymore (not an issue for the two current implementations, no idea if custom implementations ever made use of that possibility). If that became necessary, we could perhaps pass the certificate to the CDP enumerator or add a new method to the credential_set_t interface.	2019-11-26 11:12:26 +01:00
Tobias Brunner	1b67166921	Unify format of HSR copyright statements	2018-05-23 16:32:53 +02:00
Martin Willi	3ecfc83c6b	payload: Use common prefixes for all payload type identifiers ... The old identifiers did not use a proper namespace and often clashed with other defines.	2014-06-04 15:53:03 +02:00
Martin Willi	d417900335	ikev2: Send all known and valid attribute certificates for subject cert	2014-03-31 11:14:59 +02:00
Martin Willi	a14f7edfb2	ikev2: Slightly refactor certificate payload construction to separate functions	2014-03-31 11:14:58 +02:00
Martin Willi	87dd205b61	Add a return value to hasher_t.allocate_hash()	2012-07-16 14:55:06 +02:00
Martin Willi	15a682f4c2	Separated libcharon/sa directory with ikev1 and ikev2 subfolders	2012-03-20 17:31:26 +01:00