Jean-François Hren
|
15612b3a42
|
Add support for IKEv2 OCSP extensions (RFC 4806)
Closes strongswan/strongswan#2016
Co-authored-by: Tobias Brunner <tobias@strongswan.org>
|
2024-03-13 15:10:50 +01:00 |
|
Tobias Brunner
|
1f870ae189
|
cert-validator: Use a separate method for online revocation checking
This avoids having to repeat offline checks after basic trust chain
validation.
|
2022-10-03 10:48:46 +02:00 |
|
Tobias Brunner
|
19ef2aec15
|
Update copyright headers after acquisition by secunet
|
2022-06-28 10:22:56 +02:00 |
|
Josh Soref
|
b3ab7a48cc
|
Spelling fixes
* accumulating
* acquire
* alignment
* appropriate
* argument
* assign
* attribute
* authenticate
* authentication
* authenticator
* authority
* auxiliary
* brackets
* callback
* camellia
* can't
* cancelability
* certificate
* choinyambuu
* chunk
* collector
* collision
* communicating
* compares
* compatibility
* compressed
* confidentiality
* configuration
* connection
* consistency
* constraint
* construction
* constructor
* database
* decapsulated
* declaration
* decrypt
* derivative
* destination
* destroyed
* details
* devised
* dynamic
* ecapsulation
* encoded
* encoding
* encrypted
* enforcing
* enumerator
* establishment
* excluded
* exclusively
* exited
* expecting
* expire
* extension
* filter
* firewall
* foundation
* fulfillment
* gateways
* hashing
* hashtable
* heartbeats
* identifier
* identifiers
* identities
* identity
* implementers
* indicating
* initialize
* initiate
* initiation
* initiator
* inner
* instantiate
* legitimate
* libraries
* libstrongswan
* logger
* malloc
* manager
* manually
* measurement
* mechanism
* message
* network
* nonexistent
* object
* occurrence
* optional
* outgoing
* packages
* packets
* padding
* particular
* passphrase
* payload
* periodically
* policies
* possible
* previously
* priority
* proposal
* protocol
* provide
* provider
* pseudo
* pseudonym
* public
* qualifier
* quantum
* quintuplets
* reached
* reading
* recommendation to
* recommendation
* recursive
* reestablish
* referencing
* registered
* rekeying
* reliable
* replacing
* representing
* represents
* request
* request
* resolver
* result
* resulting
* resynchronization
* retriable
* revocation
* right
* rollback
* rule
* rules
* runtime
* scenario
* scheduled
* security
* segment
* service
* setting
* signature
* specific
* specified
* speed
* started
* steffen
* strongswan
* subjectaltname
* supported
* threadsafe
* traffic
* tremendously
* treshold
* unique
* uniqueness
* unknown
* until
* upper
* using
* validator
* verification
* version
* version
* warrior
Closes strongswan/strongswan#164.
|
2020-02-11 18:23:07 +01:00 |
|
Martin Willi
|
4d7a762871
|
credmgr: introduce a hook function to catch trust chain validation errors
|
2013-07-18 16:00:30 +02:00 |
|
Martin Willi
|
de399f550d
|
Add a cert_validator hook allowing plugins to provide custom lifetime checking
|
2013-02-19 14:31:18 +01:00 |
|
Martin Willi
|
790e00aaa9
|
Make cert_validator_t.validate optional to implement
|
2013-02-19 14:31:18 +01:00 |
|
Adrian-Ken Rueegsegger
|
2a375e62f3
|
Some documentation corrections
|
2012-01-12 11:25:12 +01:00 |
|
Andreas Steffen
|
d390b3b901
|
[hopefully] fixed pathlen problem on ARM platforms
|
2011-02-10 15:51:18 +01:00 |
|
Martin Willi
|
6aba6ff061
|
Pass an additional anchor flag to validate() hook if we reach the root CA
|
2011-01-05 16:46:04 +01:00 |
|
Martin Willi
|
e1c51fd859
|
Fixed doxygen group of cert_validator interface
|
2010-07-13 10:42:02 +02:00 |
|
Martin Willi
|
5f9e62c54f
|
Moved X509 addrBlock validation to a separate addrblock plugin
|
2010-07-13 10:26:07 +02:00 |
|
Martin Willi
|
2feb16f5dd
|
Added a certificate validation hook to the credential manager
|
2010-07-13 10:26:07 +02:00 |
|