Davide De Rosa
|
82f0431303
|
Take optional securityLevel field in TLSBox
|
2019-05-08 15:54:05 +02:00 |
Davide De Rosa
|
97f178cdac
|
Tolerate weak certificates
Lower SSL security level.
Fixes #97
|
2019-05-05 17:51:24 +02:00 |
Davide De Rosa
|
a48bcc7261
|
Decrypt generic EVP private key
Why PKCS#8?
|
2019-04-27 10:54:32 +02:00 |
Davide De Rosa
|
e0c06ece18
|
Drop extra EVP_PKEY_free call
|
2019-04-27 10:44:08 +02:00 |
Davide De Rosa
|
47b80d5361
|
Refactor to decrypt generic key
|
2019-04-02 00:31:54 +02:00 |
Davide De Rosa
|
f37bfb3579
|
Implement RSA privkey decryption via OpenSSL
|
2019-03-25 18:45:00 +01:00 |
Davide De Rosa
|
7d69e09c53
|
Update copyright
|
2019-03-09 11:44:18 +01:00 |
Davide De Rosa
|
0f2a5e1e14
|
Check NULL when verifying EKU
|
2019-02-25 23:33:31 +01:00 |
Davide De Rosa
|
8fe43269ab
|
Catch errors on CA MD5 calculation (PIA only)
|
2019-02-25 23:33:26 +01:00 |
Davide De Rosa
|
265aca0829
|
Make EKU verification optional in TLSBox
|
2019-02-25 11:16:26 +01:00 |
Davide De Rosa
|
e3a5302e06
|
Check NULL EKU and simplify OID comparison
|
2018-10-24 00:43:01 +02:00 |
Davide De Rosa
|
3a95568d0b
|
Remove unused code
|
2018-10-24 00:36:18 +02:00 |
Davide De Rosa
|
440a7f7da8
|
Verify server cert EKU
Fixes #27
|
2018-10-23 23:46:37 +02:00 |
Davide De Rosa
|
c32185b524
|
Review/complete mapping to ProviderError
Errors from TunnelKitNative were not mapped. Also, move TLS CA
verification error to TLSBox domain.
|
2018-10-23 23:44:25 +02:00 |
Davide De Rosa
|
26fc12c2ef
|
Add missing fclose() after fopen()
Slip-up from #32
|
2018-10-21 00:22:36 +02:00 |
Davide De Rosa
|
872e20a95a
|
Add function to compute MD5 from certificate
|
2018-10-18 12:32:22 +02:00 |
Davide De Rosa
|
093774535d
|
Make CA non-optional
Fix up nullability qualifiers in TLSBox.
Fixes #26
|
2018-10-06 15:53:22 +02:00 |
Davide De Rosa
|
b7a48d4f4f
|
Support client certificate in TLSBox
|
2018-08-28 12:55:27 +02:00 |
Davide De Rosa
|
6a71ada1c8
|
Drop support for redundant EC curves
|
2018-08-28 12:55:27 +02:00 |
Davide De Rosa
|
b172f79719
|
Re-license with proper per-file notices
Clarify explicitly the author/extent of the fork, with proper
credit to the original project's license and copyright holder.
|
2018-08-28 12:53:14 +02:00 |
Davide De Rosa
|
897e824340
|
Enforce use of non-preset CA certificates
|
2018-08-23 12:11:55 +02:00 |
Davide De Rosa
|
4d03df7066
|
Finish up renaming in headers and prefixes
|
2018-08-23 12:10:56 +02:00 |
Davide De Rosa
|
fe665e8ad5
|
Rename library to TunnelKit
|
2018-08-23 12:10:41 +02:00 |