wireguard-openbsd/sbin/iked/ca.c, branch jd/queueboosts WireGuard implementation for the OpenBSD kernel https://git.zx2c4.com/wireguard-openbsd/atom/sbin/iked/ca.c?h=jd%2Fqueueboosts 2020-06-17T19:41:04Z Fix length check in ca_getreq(). 2020-06-17T19:41:04Z tobhe tobhe@openbsd.org 2020-06-17T19:41:04Z urn:sha1:dc16ec330be59bc43d033b4e701c6d50d36e0510 ok patrick@ Remove unneccessary X509_NAME_oneline wrapper. Passing NULL as buf 2020-05-08T19:33:13Z tobhe tobhe@openbsd.org 2020-05-08T19:33:13Z urn:sha1:d38dc9a70468789aa2f99fd45827d32cafe5f0cf does the same thing. ok patrick@ "could not open public key" is an error and should be log_info. 2020-04-12T20:18:45Z tobhe tobhe@openbsd.org 2020-04-12T20:18:45Z urn:sha1:7b9e33fbf33e3278817edcc5159f00260182e589 Only make the type part of the idstring lowercase when looking for certs in 2020-04-10T20:58:32Z tobhe tobhe@openbsd.org 2020-04-10T20:58:32Z urn:sha1:23e034830c58c98f46395d917ee918071c54f46e '/etc/iked', otherwise certs with SubjAltNames containing uppercase letters are not found. ok markus@ Prevent multiple ibuf leaks. Clean up on proccess shutdown. 2020-04-08T20:04:19Z tobhe tobhe@openbsd.org 2020-04-08T20:04:19Z urn:sha1:44afdd6cea1e9b9bbb6e00e7bb16af023452dc7e ok markus@ Always prefer generic signature authentication (RFC 7427) , not just for RSA. 2020-04-07T18:52:57Z tobhe tobhe@openbsd.org 2020-04-07T18:52:57Z urn:sha1:c4fdf8b8ce85fdd534cdf06e6be9e345cb6dbbdd ok markus@ Fix pubkey leak in CA process for ASN1_DN IDs. 2020-04-06T20:23:16Z tobhe tobhe@openbsd.org 2020-04-06T20:23:16Z urn:sha1:82576a8f09c74301d767b49340abb83a885c171a ok markus@ Properly handle multiple CERTREQ payloads in CA process. Only for the 2020-04-01T21:09:26Z tobhe tobhe@openbsd.org 2020-04-01T21:09:26Z urn:sha1:12b74e2308a84c062a0e3f9df8c1d0d759f9e44a last CERTREQ a mismatch should trigger the fallback case, otherwise the following CERTREQs are ignored. ok markus@ Log summary of certificates in cert store when iked fails to find a 2020-03-31T20:19:51Z tobhe tobhe@openbsd.org 2020-03-31T20:19:51Z urn:sha1:a9cab3fa3311d560e017402a0a094487657b656e certificate for the policy's 'srcid'. ok markus@ Adjust cert type when choosing public key fallback. 2020-03-27T12:53:31Z tobhe tobhe@openbsd.org 2020-03-27T12:53:31Z urn:sha1:6dddc43c00bc478421e90715f27bb5bbcd62bcae ok patrick@