summaryrefslogtreecommitdiff
path: root/sbin/isakmpd/x509.c
AgeCommit message (Collapse)Author
2003-04-09Less noise for missing crl dir, demoted to debug message.Hakan Olsson
2002-12-03LOG_DBG for missing ca/, certs/, crls/ dirs, notHakan Olsson
log_error(). Suggested by markus@.
2002-09-11signed vs unsigned, some void * arithmetic, from -pedantic. niklas@ ok.Hakan Olsson
2002-09-05Do not require the presence of subjectAltName in certificates used forHakan Olsson
IKE auth. Should make interoperating with for example FreeS/WAN easier (Pluto).
2002-08-29Work around arguably correct OpenSSL behaviour and only ask for CRLHakan Olsson
checks when we actually have CRLs to check against. Problem pointed out by <sturm@sec.informatik.tu-darmstadt.de>.
2002-08-07A rewrite of the CRL support code, also from <Thomas.Walpuski@gmx.net>.Hakan Olsson
Some style mods, and checks added for OpenSSL version 0.9.7 or later. Currently CRLs are not supported for earlier versions. Manual pages updated.
2002-08-02CRL support for isakmpd. From <Thomas.Walpuski@gmx.net> with some minorHakan Olsson
modifications by me. ok niklas@.
2002-06-10Zap a few remaining libkeynote refs.Hakan Olsson
2002-06-10The dlopen() stuff goes away.Hakan Olsson
2002-06-01size_t must be cast to (unsigned long) and printed using %luTheo de Raadt
2002-03-06Fix a couple of snprintf length bugs. Same problem <chris@stallion.oz.au>Hakan Olsson
found for policy passphrases.
2002-01-23the last few sprintf -> snprintfHakan Olsson
2002-01-23strcpy->strlcpy, sprintf->snprintfHakan Olsson
2002-01-03strftime format fixes. From Christo Butcher <christo@fox-it.com>.Hakan Olsson
2001-08-25Add x509_DN_string API to get a printable DN component given oneNiklas Hallqvist
rpresented in ASN.1
2001-08-16Don't right-justify this debug message.Hakan Olsson
2001-07-13Be more verbose about why X509_verify_cert() failed. Thanks toHakan Olsson
<sakane@kame.net> for pointing out X509_verify_cert_error_string(). :)
2001-07-05Add prototypes and some other various cleanup.Hakan Olsson
2001-07-05On closer inspection, freeing the X509 names is bad. I should stopAngelos D. Keromytis
coding late while half-asleep.
2001-07-05Free X509 names in case of failure and when done.Angelos D. Keromytis
2001-07-01StyleNiklas Hallqvist
2001-06-22fix for filesystems where readdir does not return d_type, use stat instead.Niels Provos
okay deraadt@
2001-06-07log_error -> log_printAngelos D. Keromytis
2001-06-07No need to allocate/free X509 policy information -- the certs areAngelos D. Keromytis
converted as needed, and the CA certs are irrelevant.
2001-06-07Get rid of the main policy session (unnecessary).Angelos D. Keromytis
2001-06-05log_error() cleanupAngelos D. Keromytis
2001-06-05Bad niklas, re-committed redundant code.Angelos D. Keromytis
2001-06-05Style issues and commentaryNiklas Hallqvist
2001-05-31New routines for handling X509 cert representation.Angelos D. Keromytis
2001-05-12size_t -> u_int32_t (mcmahill@mtl.mit.edu)Angelos D. Keromytis
2001-04-12Correct various faulty x509 deallocations. By Niklas and me.Hakan Olsson
2001-04-09More style fixes...Hakan Olsson
2001-04-03Don't free reallocated memory.Hakan Olsson
2001-03-27Allocate a buffer large enough to contain the generated assertion.Hakan Olsson
Found with ElectricFence.
2001-03-14Make these compile again...Thorsten Lockert
2001-03-14Indentation and style fascismNiklas Hallqvist
2001-03-13Add logging classes for Negotiation and Policy, and change a number ofHakan Olsson
debug messages to use these instead. Change a number of 'log_print' to debug messages to keep the noise down. Use 'log_error' instead of 'log_print' in some cases when we have errno. Some indentation fixes. (niklas@ ok)
2001-02-23Allocate larger buffer for generated policies.Angelos D. Keromytis
2001-02-18Encode the X509 expiration in the KeyNote credential/policiesAngelos D. Keromytis
generated on the fly. For the record, this commit done at the beach in Cayman Islands :-)
2001-02-08Typo.Angelos D. Keromytis
2001-01-27(c) 2001Niklas Hallqvist
2001-01-26There is no need to check the subjectAltName anymore, since we are in factNiklas Hallqvist
looking up the certificate via the name. The lookup method already guarantees a match. It is also a problem to look at the subjectAltName should we have got the certificate with no such name in it. Prodded by mickey@ although I solved the problem in a different way.
2001-01-26Pedantic style policeNiklas Hallqvist
2001-01-26Merge with EOM 1.54Niklas Hallqvist
author: ho Only include <gmp.h> with MP_FLAVOUR_GMP. Sync with OpenBSD.
2001-01-10Some more debug logging.Angelos D. Keromytis
2000-12-19gmp is gone, make it build again; cvs retardMichael Shalayeff
2000-12-12Merge with EOM 1.51Niklas Hallqvist
author: niklas more fascistoid style author: angelos Don't insert the *same* entry in two or more buckets! Thanks to cedric@wireless-networks.com for reporting/debugging and coming up with the patch. author: angelos Correct format string. author: angelos x509_hash() should also skip the cert length (willey@serasystems.com) author: angelos Add some error messages (ingham@ara.com)
2000-12-02Error messages.Angelos D. Keromytis
2000-11-30x509_hash() should also ignore the id length (for matching purposes)Angelos D. Keromytis
-- willey@serasystems.co
2000-11-23Merge with EOM 1.45Niklas Hallqvist
author: niklas style author: angelos Better ID matching, should solve (some?) of PGPnet interoperability problems. From mickey@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-28 06:42:23 +0000