pfsense - Raptor Engineering's fork of the main repository for pfSense

	Commit message (Collapse)	Author	Age	Files	Lines
*	When creating an internal certificate, offer the user a choice of what ↵	jim-p	2011-11-09	1	-2/+15
\| \| \| \|	constraints to place upon the certificate (CA, Server, or User).
*	Specify full path to openssl.cnf, and select the relevant section to use ↵	jim-p	2011-10-27	1	-0/+6
\| \| \| \|	when generating certificates.
*	Add function to return a certificate's common name.	jim-p	2011-07-06	1	-0/+21
\|
*	Import error handling to avoid errors.	Ermal	2011-06-24	1	-4/+5
\|
*	Internal cert and CSR creation error handling added.	Evgeny Yurchenko	2011-06-23	1	-4/+12
\|
*	Internal CA creation error handling added.	Evgeny Yurchenko	2011-06-23	1	-2/+6
\|
*	Intermediate CAs and openssl_xxx() error checking in CA management.	Evgeny Yurchenko	2011-06-23	1	-0/+42
\|
*	Merge branch 'master' into yakatz-ssl	Bill Marquette	2011-05-14	1	-5/+13
\|\
\| *	Test for array/size before foreach	jim-p	2011-05-11	1	-2/+4
\| \|
\| *	Various CRL fixes, handle empty internal CRLs better.	jim-p	2011-05-11	1	-5/+8
\| \|
\| *	If we have deleted the last cert from the CRL, blank out the text.	jim-p	2011-05-05	1	-1/+4
\| \|
* \|	checking moduli of ssl csr request and response	yakatz	2011-04-21	1	-0/+19
\|/
*	Allow editing of CAs, so that imported CAs can have their private keys added ↵	jim-p	2011-03-30	1	-2/+4
\| \| \| \|	later (mainly affected users upgrading from 1.2.3 and wanting to use the cert manager). Also, allow editing the CA's serial, since this shouldn't really be 0 for imported CAs, but the serial of the last cert that was made from this CA.
*	Don't consider a cert as in use by the GUI if it's in HTTP mode. Fixes #1171	jim-p	2011-02-22	1	-1/+2
\|
*	Do not use references here when building a ca_chain_array. Really fixes ↵	jim-p	2011-02-01	1	-2/+2
\| \| \| \|	#1231 - CAs are no longer lost when a config write happens at bootup.
*	Ticket #621. Sort even csr subject to have the matching go ok during import ↵	Ermal	2011-01-12	1	-0/+1
\| \| \| \|	of externally signed cers.
*	Ticket #621. sort the contents of array used for generating subject by keys ↵	Ermal	2011-01-07	1	-3/+5
\| \| \| \|	so whenever we do subject comparison we will not have problem just because of the array keys ordering.
*	Fix this code a bit, my first attempt yesterday didn't work properly (this ↵	jim-p	2010-12-03	1	-4/+8
\| \| \| \|	should).
*	Try to handle when cert subject entries are arrays.	jim-p	2010-12-02	1	-3/+4
\|
*	Remove trailing carriage return	Scott Ullrich	2010-11-10	1	-1/+1
\|
*	Add ability to select reason codes for revocation. Reformat CRL edit screen ↵	jim-p	2010-10-21	1	-2/+1
\| \| \| \|	a bit. Ticket #555
*	Add more CRL functionality. Needs to wait on a new build for further testing.	jim-p	2010-10-20	1	-1/+1
\|
*	Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA ↵	jim-p	2010-10-19	1	-5/+5
\| \| \| \|	protection and standardize field names. Ticket #320.
*	Pass args to openssl_pkey_new() so it gets the key length too. Fixes #905	jim-p	2010-09-23	1	-3/+3
\|
*	Properly check if this is in use.	jim-p	2010-09-21	1	-1/+1
\|
*	Some fixes/enhancements/cleanup	jim-p	2010-09-21	1	-7/+37
\|
*	Prevent a foreach on what might not be an array. Fixes #900	jim-p	2010-09-16	1	-0/+4
\|
*	Fix this function's logic/variable tests.	jim-p	2010-09-16	1	-3/+3
\|
*	Add some safety belt checks so we don't try to update an imported crl	jim-p	2010-09-16	1	-0/+9
\|
*	Add some CRL support functions, not active or used in the GUI yet.	jim-p	2010-09-16	1	-2/+119
\|
*	Remove two unused functions (now useless) and add a few more utility functions.	jim-p	2010-09-02	1	-12/+48
\|
*	CA/CERT Move	jim-p	2010-09-01	1	-11/+11
\|
*	Add some user cert lookup functions.	jim-p	2010-07-07	1	-0/+26
\|
*	Allow importing of a CA's private key (optionally).	jim-p	2010-07-07	1	-1/+3
\|
*	Perform more strict validation on CA and Cert names before proceeding in the ↵	jim-p	2010-04-12	1	-0/+6
\| \| \| \|	wizard.
*	Remove uneeded line because openssl module will be already loaded.	Ermal	2010-03-15	1	-2/+0
\|
*	Ticket #161. Fix creation of certificates and the webgui one. This was a ↵	Ermal	2010-03-15	1	-2/+2
\| \| \| \|	problem on php API docs.
*	Ticket #395. Add the path to the openssl.cnf to avoid errors. ↵	Ermal Lu�i	2010-03-08	1	-0/+2
\| \| \| \|	/etc/ssl/openssl.cnf needs to be tuned more to suit pfSense.
*	Convert to int so the keylength is respected during sign.	Ermal Lu�i	2010-03-01	1	-1/+1
\|
*	Ticket #161. Seems this does the trick for firefox.	Ermal Lu�i	2010-02-10	1	-3/+3
\|
*	Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions	Scott Ullrich	2009-09-12	1	-1/+2
\|
*	Resolve merge	Scott Ullrich	2009-08-24	1	-226/+0
\|
*	Merge branch 'master' of git://rcs.pfsense.org/pfsense/nigel-ca-chain into ↵	Scott Ullrich	2009-08-24	1	-0/+331
\|\ \| \| \| \| \| \| \| \| \| \| \| \| \| \|	review/master Conflicts: etc/inc/certs.inc etc/inc/upgrade_config.inc
\| *	Found another bug in ca_chain_array.	Nigel Graham	2009-05-26	1	-1/+1
\| \|
\| *	Fixed a problem in ca_chain that caused a segmentation fault.	Nigel Graham	2009-05-26	1	-9/+9
\| \|
\| *	Added support for certificate chains to manager so that lighty can deliver ↵	Nigel Graham	2009-05-24	1	-0/+103
\| \| \| \| \| \| \| \|	them via SSL.
* \|	* Move functions that output html to guiconfig.inc	Ermal Luci	2009-06-18	1	-226/+224
\|/ \| \| \| \| \| \| \| \|	* Remove some recursive dependency on some includes * Remove ^M or \r from files * Remove some entries from functions.inc to avoid including them twice * Remove some unneccessary includes from some files NOTE: There is some more work to be done for pkg-utils.inc to be removed from backend as a dependency.
*	Add validation for the ca configuration array presence. Minor style fixes.	Matthew Grooms	2008-09-09	1	-9/+8
\|
*	Add validation	Seth Mos	2008-09-09	1	-4/+7
\|
*	Implement a certificate authority and certificate webui that can be used	Matthew Grooms	2008-08-09	1	-0/+224
	to centrally manage this data. There are no consumers at this time. This interface allow for the following ... Certificate Authority Manager: - List certificates authorities - Import existing certificate authority - Create internal certificate authority Certificate Manager: - List certificates - Import existing certificate - Create internal certificate using an internal CA - Generate certificate signing request for external CAs - Process certificate signing response from external CAs Certificate revocation is not currently implemented. The user system will also be extended to allow for user specific certificate management in a follow-up commit.