summaryrefslogtreecommitdiffstats
path: root/src/crypto
Commit message (Expand)AuthorAgeFilesLines
* [crypto] Mark permanent certificates as permanentMichael Brown2016-08-311-0/+1
* [crypto] Add certstat() to display basic certificate informationMichael Brown2016-08-311-2/+2
* [crypto] Allow certificates to be marked as having been added explicitlyMichael Brown2016-08-311-4/+19
* [crypto] Expose certstore_del() to explicitly remove stored certificatesMichael Brown2016-08-311-4/+15
* [crypto] Generalise X.509 "valid" field to a "flags" fieldMichael Brown2016-08-252-5/+5
* [crypto] Add image_x509() to extract X.509 certificates from imageMichael Brown2016-08-251-0/+42
* [crypto] Enable both DER and PEM formats by defaultMichael Brown2016-07-291-0/+42
* [crypto] Allow for parsing of partial ASN.1 cursorsMichael Brown2016-07-281-6/+7
* [arm] Avoid instruction references to symbols defined via ".equ"Michael Brown2016-05-081-2/+8
* [crypto] Allow trusted certificates to be stored in non-volatile optionsMichael Brown2016-03-201-3/+7
* [build] Allow assembler section type character to vary by architectureMichael Brown2016-03-132-2/+2
* [crypto] Allow for zero-length ASN.1 cursorsMichael Brown2016-03-111-12/+0Star
* [ocsp] Avoid including a double path separator in request URIMichael Brown2016-01-211-28/+26Star
* [crypto] Dual-license more selected DRBG filesMichael Brown2016-01-041-0/+12
* [crypto] Dual-license selected DRBG filesMichael Brown2015-12-314-0/+48
* [crypto] Support SHA-{224,384,512} in X.509 certificatesMichael Brown2015-08-0210-72/+460
* [build] Fix strict-aliasing warning on older gcc versionsMichael Brown2015-07-281-4/+8
* [crypto] Remove AXTLS headersMichael Brown2015-07-275-526/+0Star
* [crypto] Replace AES implementationMichael Brown2015-07-273-622/+804
* [crypto] Add ECB block cipher mode (for debug and self-tests only)Michael Brown2015-07-272-1/+86
* [base64] Add buffer size parameter to base64_encode() and base64_decode()Michael Brown2015-04-241-1/+1
* [base16] Add buffer size parameter to base16_encode() and base16_decode()Michael Brown2015-04-241-1/+2
* [crypto] Add SHA-512/224 algorithmMichael Brown2015-04-121-0/+83
* [crypto] Add SHA-512/256 algorithmMichael Brown2015-04-121-0/+83
* [crypto] Add SHA-384 algorithmMichael Brown2015-04-121-0/+82
* [crypto] Add SHA-512 algorithmMichael Brown2015-04-122-4/+307
* [crypto] Add SHA-224 algorithmMichael Brown2015-04-122-13/+118
* [build] Fix the REQUIRE_SYMBOL mechanismMichael Brown2015-03-051-0/+3
* [legal] Relicense files under GPL2_OR_LATER_OR_UBDLMichael Brown2015-03-0223-23/+115
* [crypto] Fix parsing of OCSP responder ID key hashMichael Brown2014-11-241-3/+8
* [crypto] Fix debug messageMichael Brown2014-07-121-1/+1
* [crypto] Add support for iPAddress subject alternative namesMichael Brown2014-07-111-0/+55
* [crypto] Allow wildcard matches on commonName as well as subjectAltNameMichael Brown2014-04-011-10/+8Star
* [crypto] Add support for subjectAltName and wildcard certificatesMichael Brown2014-03-311-8/+132
* [crypto] Allow signed timestamp error margin to be configured at build timeMichael Brown2014-03-302-4/+6
* [crypto] Use fingerprint when no common name is available for debug messagesMichael Brown2014-03-281-4/+14
* [crypto] Generalise X.509 cache to a full certificate storeMichael Brown2014-03-285-238/+437
* [crypto] Add pubkey_match() to check for matching public/private key pairsMichael Brown2014-03-271-26/+89
* [crypto] Remove dynamically-allocated storage for certificate OCSP URIMichael Brown2014-03-252-33/+17Star
* [crypto] Remove dynamically-allocated storage for certificate nameMichael Brown2014-03-253-96/+134
* [ocsp] Handle OCSP responses that don't provide certificatesAlexander Chernyakhovsky2014-03-251-2/+7
* [uri] Refactor URI parsing and formattingMichael Brown2014-02-271-31/+31
* [deflate] Fix literal data length calculationMichael Brown2014-01-121-1/+1
* [deflate] Add support for DEFLATE decompressionMichael Brown2014-01-061-0/+1045
* [settings] Force settings into alphabetical order within sectionsMichael Brown2013-12-052-3/+3
* [settings] Explicitly separate the concept of a completed fetched settingMichael Brown2013-12-052-6/+6
* [settings] Change "not-found" semantics of fetch_setting_copy()Michael Brown2013-07-192-33/+6Star
* [crypto] Accept OCSP responses containing multiple certificatesMichael Brown2013-05-291-13/+132
* [crypto] Report meaningful error when certificate chain validation failsMichael Brown2013-05-101-7/+5Star
* [libc] Use __einfo() tuple as first argument to EUNIQ()Michael Brown2013-04-191-1/+1