summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/x509.c
AgeCommit message (Collapse)Author
2002-03-06Fix a couple of snprintf length bugs. Same problem <chris@stallion.oz.au>Hakan Olsson
found for policy passphrases.
2002-01-23the last few sprintf -> snprintfHakan Olsson
2002-01-23strcpy->strlcpy, sprintf->snprintfHakan Olsson
2002-01-03strftime format fixes. From Christo Butcher <christo@fox-it.com>.Hakan Olsson
2001-08-25Add x509_DN_string API to get a printable DN component given oneNiklas Hallqvist
rpresented in ASN.1
2001-08-16Don't right-justify this debug message.Hakan Olsson
2001-07-13Be more verbose about why X509_verify_cert() failed. Thanks toHakan Olsson
<sakane@kame.net> for pointing out X509_verify_cert_error_string(). :)
2001-07-05Add prototypes and some other various cleanup.Hakan Olsson
2001-07-05On closer inspection, freeing the X509 names is bad. I should stopAngelos D. Keromytis
coding late while half-asleep.
2001-07-05Free X509 names in case of failure and when done.Angelos D. Keromytis
2001-07-01StyleNiklas Hallqvist
2001-06-22fix for filesystems where readdir does not return d_type, use stat instead.Niels Provos
okay deraadt@
2001-06-07log_error -> log_printAngelos D. Keromytis
2001-06-07No need to allocate/free X509 policy information -- the certs areAngelos D. Keromytis
converted as needed, and the CA certs are irrelevant.
2001-06-07Get rid of the main policy session (unnecessary).Angelos D. Keromytis
2001-06-05log_error() cleanupAngelos D. Keromytis
2001-06-05Bad niklas, re-committed redundant code.Angelos D. Keromytis
2001-06-05Style issues and commentaryNiklas Hallqvist
2001-05-31New routines for handling X509 cert representation.Angelos D. Keromytis
2001-05-12size_t -> u_int32_t (mcmahill@mtl.mit.edu)Angelos D. Keromytis
2001-04-12Correct various faulty x509 deallocations. By Niklas and me.Hakan Olsson
2001-04-09More style fixes...Hakan Olsson
2001-04-03Don't free reallocated memory.Hakan Olsson
2001-03-27Allocate a buffer large enough to contain the generated assertion.Hakan Olsson
Found with ElectricFence.
2001-03-14Make these compile again...Thorsten Lockert
2001-03-14Indentation and style fascismNiklas Hallqvist
2001-03-13Add logging classes for Negotiation and Policy, and change a number ofHakan Olsson
debug messages to use these instead. Change a number of 'log_print' to debug messages to keep the noise down. Use 'log_error' instead of 'log_print' in some cases when we have errno. Some indentation fixes. (niklas@ ok)
2001-02-23Allocate larger buffer for generated policies.Angelos D. Keromytis
2001-02-18Encode the X509 expiration in the KeyNote credential/policiesAngelos D. Keromytis
generated on the fly. For the record, this commit done at the beach in Cayman Islands :-)
2001-02-08Typo.Angelos D. Keromytis
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26There is no need to check the subjectAltName anymore, since we are in factNiklas Hallqvist
looking up the certificate via the name. The lookup method already guarantees a match. It is also a problem to look at the subjectAltName should we have got the certificate with no such name in it. Prodded by mickey@ although I solved the problem in a different way.
2001-01-26Pedantic style policeNiklas Hallqvist
2001-01-26Merge with EOM 1.54Niklas Hallqvist
author: ho Only include <gmp.h> with MP_FLAVOUR_GMP. Sync with OpenBSD.
2001-01-10Some more debug logging.Angelos D. Keromytis
2000-12-19gmp is gone, make it build again; cvs retardMichael Shalayeff
2000-12-12Merge with EOM 1.51Niklas Hallqvist
author: niklas more fascistoid style author: angelos Don't insert the *same* entry in two or more buckets! Thanks to cedric@wireless-networks.com for reporting/debugging and coming up with the patch. author: angelos Correct format string. author: angelos x509_hash() should also skip the cert length (willey@serasystems.com) author: angelos Add some error messages (ingham@ara.com)
2000-12-02Error messages.Angelos D. Keromytis
2000-11-30x509_hash() should also ignore the id length (for matching purposes)Angelos D. Keromytis
-- willey@serasystems.co
2000-11-23Merge with EOM 1.45Niklas Hallqvist
author: niklas style author: angelos Better ID matching, should solve (some?) of PGPnet interoperability problems. From mickey@
2000-10-07Merge with EOM 1.43Niklas Hallqvist
author: niklas Multiple subject name matching, makes certificate interop with PGPnet at least partly working. Added some error checking. author: provos style as pointed out by the code style pedant. author: ho Compile without USE_KEYNOTE/USE_POLICY.
2000-06-08Merge with EOM 1.40Niklas Hallqvist
author: angelos Different policy/Keynote sessions per Phase 1 SA. author: angelos Allow exchange of KeyNote credentials over IKE. Multiple credentials may be passed in a single CERT payload. KeyNote is used if a directory named as the local ID we use in an exchange exists in the KeyNote directory (default: /etc/isakmpd/keynote/). Note that asymmetric credentials are possible (use KeyNote in one direction and X509 in the other); such authentication is envisioned to be the most common: the clients will use KeyNote credentials to authenticate and authorize with a server, whilst the server will just provide an X509 certificate proving its binding to the IP address or ID. Totally asymmetric authentication (e.g., shared key in one direction, RSA in the other) is not supported by the IKE protocol.
2000-04-07Merge with EOM 1.38Niklas Hallqvist
author: niklas log_fatal is only OK during initialization, also style fixes
2000-03-08Merge with EOM 1.37Niklas Hallqvist
author: ho Add missing #ifdef USE_X509/#endif
2000-02-25regress/crypto/Makefile: Merge with EOM 1.5Niklas Hallqvist
regress/dh/Makefile: Merge with EOM 1.7 regress/group/Makefile: Merge with EOM 1.9 regress/prf/Makefile: Merge with EOM 1.4 regress/rsakeygen/Makefile: Merge with EOM 1.8 regress/x509/Makefile: Merge with EOM 1.10 Makefile: Merge with EOM 1.62 attribute.c: Merge with EOM 1.10 sa.c: Merge with EOM 1.99 conf.c: Merge with EOM 1.20 crypto.c: Merge with EOM 1.28 isakmpd.c: Merge with EOM 1.45 connection.c: Merge with EOM 1.19 doi.h: Merge with EOM 1.28 field.c: Merge with EOM 1.11 exchange.c: Merge with EOM 1.116 ike_auth.c: Merge with EOM 1.44 pf_key_v2.c: Merge with EOM 1.37 ike_phase_1.c: Merge with EOM 1.22 ipsec.c: Merge with EOM 1.118 isakmp_doi.c: Merge with EOM 1.40 log.c: Merge with EOM 1.26 log.h: Merge with EOM 1.18 math_group.c: Merge with EOM 1.23 message.c: Merge with EOM 1.144 pf_encap.c: Merge with EOM 1.70 policy.c: Merge with EOM 1.18 timer.c: Merge with EOM 1.13 transport.c: Merge with EOM 1.41 udp.c: Merge with EOM 1.47 ui.c: Merge with EOM 1.37 x509.c: Merge with EOM 1.36 author: niklas Made debug logging a compile time selectable feature
2000-02-19Makefile: Merge with EOM 1.61Niklas Hallqvist
crypto.c: Merge with EOM 1.27 exchange.c: Merge with EOM 1.115 ike_quick_mode.c: Merge with EOM 1.115 x509.c: Merge with EOM 1.35 features/ec: Merge with EOM 1.1 features/aggressive: Merge with EOM 1.1 features/policy: Merge with EOM 1.1 features/x509: Merge with EOM 1.1 author: niklas Allow isakmpd builders to remove optional parts and save bytes.
2000-02-11Merge with EOM 1.34Niklas Hallqvist
author: angelos Rename the "CN:" tag to "DN:", after Jorgen's suggestion.
2000-02-07ike_quick_mode.c: Merge with EOM 1.111Niklas Hallqvist
libcrypto.c: Merge with EOM 1.11 libcrypto.h: Merge with EOM 1.11 x509.c: Merge with EOM 1.33 author: angelos Add Canonical Names as policy targets (so they can be specified in the Licensees field), with the "CN:..." format.
2000-02-01apps/certpatch/certpatch.8: Merge with EOM 1.4Niklas Hallqvist
apps/certpatch/certpatch.c: Merge with EOM 1.6 exchange.c: Merge with EOM 1.114 ike_quick_mode.c: Merge with EOM 1.110 ike_phase_1.c: Merge with EOM 1.16 ike_auth.c: Merge with EOM 1.41 ike_aggressive.c: Merge with EOM 1.4 libcrypto.c: Merge with EOM 1.10 libcrypto.h: Merge with EOM 1.10 isakmpd.8: Merge with EOM 1.19 isakmpd.c: Merge with EOM 1.42 ipsec.h: Merge with EOM 1.40 init.c: Merge with EOM 1.22 message.c: Merge with EOM 1.143 message.h: Merge with EOM 1.49 sa.c: Merge with EOM 1.98 sa.h: Merge with EOM 1.54 policy.c: Merge with EOM 1.14 pf_key_v2.c: Merge with EOM 1.36 x509.c: Merge with EOM 1.32 x509.h: Merge with EOM 1.9 udp.c: Merge with EOM 1.46 author: niklas Angelos copyrights
2000-01-31ike_quick_mode.c: Merge with EOM 1.109Niklas Hallqvist
isakmpd.conf.5: Merge with EOM 1.38 message.c: Merge with EOM 1.142 pf_key_v2.c: Merge with EOM 1.35 x509.c: Merge with EOM 1.31 author: niklas (c) 2000
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-01 11:35:28 +0000