Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Add function to return a certificate's common name. | jim-p | 2011-07-06 | 1 | -0/+21 |
| | |||||
* | Import error handling to avoid errors. | Ermal | 2011-06-24 | 1 | -4/+5 |
| | |||||
* | Internal cert and CSR creation error handling added. | Evgeny Yurchenko | 2011-06-23 | 1 | -4/+12 |
| | |||||
* | Internal CA creation error handling added. | Evgeny Yurchenko | 2011-06-23 | 1 | -2/+6 |
| | |||||
* | Intermediate CAs and openssl_xxx() error checking in CA management. | Evgeny Yurchenko | 2011-06-23 | 1 | -0/+42 |
| | |||||
* | Merge branch 'master' into yakatz-ssl | Bill Marquette | 2011-05-14 | 1 | -5/+13 |
|\ | |||||
| * | Test for array/size before foreach | jim-p | 2011-05-11 | 1 | -2/+4 |
| | | |||||
| * | Various CRL fixes, handle empty internal CRLs better. | jim-p | 2011-05-11 | 1 | -5/+8 |
| | | |||||
| * | If we have deleted the last cert from the CRL, blank out the text. | jim-p | 2011-05-05 | 1 | -1/+4 |
| | | |||||
* | | checking moduli of ssl csr request and response | yakatz | 2011-04-21 | 1 | -0/+19 |
|/ | |||||
* | Allow editing of CAs, so that imported CAs can have their private keys added ↵ | jim-p | 2011-03-30 | 1 | -2/+4 |
| | | | | later (mainly affected users upgrading from 1.2.3 and wanting to use the cert manager). Also, allow editing the CA's serial, since this shouldn't really be 0 for imported CAs, but the serial of the last cert that was made from this CA. | ||||
* | Don't consider a cert as in use by the GUI if it's in HTTP mode. Fixes #1171 | jim-p | 2011-02-22 | 1 | -1/+2 |
| | |||||
* | Do not use references here when building a ca_chain_array. Really fixes ↵ | jim-p | 2011-02-01 | 1 | -2/+2 |
| | | | | #1231 - CAs are no longer lost when a config write happens at bootup. | ||||
* | Ticket #621. Sort even csr subject to have the matching go ok during import ↵ | Ermal | 2011-01-12 | 1 | -0/+1 |
| | | | | of externally signed cers. | ||||
* | Ticket #621. sort the contents of array used for generating subject by keys ↵ | Ermal | 2011-01-07 | 1 | -3/+5 |
| | | | | so whenever we do subject comparison we will not have problem just because of the array keys ordering. | ||||
* | Fix this code a bit, my first attempt yesterday didn't work properly (this ↵ | jim-p | 2010-12-03 | 1 | -4/+8 |
| | | | | should). | ||||
* | Try to handle when cert subject entries are arrays. | jim-p | 2010-12-02 | 1 | -3/+4 |
| | |||||
* | Remove trailing carriage return | Scott Ullrich | 2010-11-10 | 1 | -1/+1 |
| | |||||
* | Add ability to select reason codes for revocation. Reformat CRL edit screen ↵ | jim-p | 2010-10-21 | 1 | -2/+1 |
| | | | | a bit. Ticket #555 | ||||
* | Add more CRL functionality. Needs to wait on a new build for further testing. | jim-p | 2010-10-20 | 1 | -1/+1 |
| | |||||
* | Rename 'name' to 'descr' for CA, Certificates, and CRLs, to gain CDATA ↵ | jim-p | 2010-10-19 | 1 | -5/+5 |
| | | | | protection and standardize field names. Ticket #320. | ||||
* | Pass args to openssl_pkey_new() so it gets the key length too. Fixes #905 | jim-p | 2010-09-23 | 1 | -3/+3 |
| | |||||
* | Properly check if this is in use. | jim-p | 2010-09-21 | 1 | -1/+1 |
| | |||||
* | Some fixes/enhancements/cleanup | jim-p | 2010-09-21 | 1 | -7/+37 |
| | |||||
* | Prevent a foreach on what might not be an array. Fixes #900 | jim-p | 2010-09-16 | 1 | -0/+4 |
| | |||||
* | Fix this function's logic/variable tests. | jim-p | 2010-09-16 | 1 | -3/+3 |
| | |||||
* | Add some safety belt checks so we don't try to update an imported crl | jim-p | 2010-09-16 | 1 | -0/+9 |
| | |||||
* | Add some CRL support functions, not active or used in the GUI yet. | jim-p | 2010-09-16 | 1 | -2/+119 |
| | |||||
* | Remove two unused functions (now useless) and add a few more utility functions. | jim-p | 2010-09-02 | 1 | -12/+48 |
| | |||||
* | CA/CERT Move | jim-p | 2010-09-01 | 1 | -11/+11 |
| | |||||
* | Add some user cert lookup functions. | jim-p | 2010-07-07 | 1 | -0/+26 |
| | |||||
* | Allow importing of a CA's private key (optionally). | jim-p | 2010-07-07 | 1 | -1/+3 |
| | |||||
* | Perform more strict validation on CA and Cert names before proceeding in the ↵ | jim-p | 2010-04-12 | 1 | -0/+6 |
| | | | | wizard. | ||||
* | Remove uneeded line because openssl module will be already loaded. | Ermal | 2010-03-15 | 1 | -2/+0 |
| | |||||
* | Ticket #161. Fix creation of certificates and the webgui one. This was a ↵ | Ermal | 2010-03-15 | 1 | -2/+2 |
| | | | | problem on php API docs. | ||||
* | Ticket #395. Add the path to the openssl.cnf to avoid errors. ↵ | Ermal Luçi | 2010-03-08 | 1 | -0/+2 |
| | | | | /etc/ssl/openssl.cnf needs to be tuned more to suit pfSense. | ||||
* | Convert to int so the keylength is respected during sign. | Ermal Luçi | 2010-03-01 | 1 | -1/+1 |
| | |||||
* | Ticket #161. Seems this does the trick for firefox. | Ermal Luçi | 2010-02-10 | 1 | -3/+3 |
| | |||||
* | Add pfSense_BUILDER_BINARIES: and pfSense_MODULE: additions | Scott Ullrich | 2009-09-12 | 1 | -1/+2 |
| | |||||
* | Resolve merge | Scott Ullrich | 2009-08-24 | 1 | -226/+0 |
| | |||||
* | Merge branch 'master' of git://rcs.pfsense.org/pfsense/nigel-ca-chain into ↵ | Scott Ullrich | 2009-08-24 | 1 | -0/+331 |
|\ | | | | | | | | | | | | | | | review/master Conflicts: etc/inc/certs.inc etc/inc/upgrade_config.inc | ||||
| * | Found another bug in ca_chain_array. | Nigel Graham | 2009-05-26 | 1 | -1/+1 |
| | | |||||
| * | Fixed a problem in ca_chain that caused a segmentation fault. | Nigel Graham | 2009-05-26 | 1 | -9/+9 |
| | | |||||
| * | Added support for certificate chains to manager so that lighty can deliver ↵ | Nigel Graham | 2009-05-24 | 1 | -0/+103 |
| | | | | | | | | them via SSL. | ||||
* | | * Move functions that output html to guiconfig.inc | Ermal Luci | 2009-06-18 | 1 | -226/+224 |
|/ | | | | | | | | | * Remove some recursive dependency on some includes * Remove ^M or \r from files * Remove some entries from functions.inc to avoid including them twice * Remove some unneccessary includes from some files NOTE: There is some more work to be done for pkg-utils.inc to be removed from backend as a dependency. | ||||
* | Add validation for the ca configuration array presence. Minor style fixes. | Matthew Grooms | 2008-09-09 | 1 | -9/+8 |
| | |||||
* | Add validation | Seth Mos | 2008-09-09 | 1 | -4/+7 |
| | |||||
* | Implement a certificate authority and certificate webui that can be used | Matthew Grooms | 2008-08-09 | 1 | -0/+224 |
to centrally manage this data. There are no consumers at this time. This interface allow for the following ... Certificate Authority Manager: - List certificates authorities - Import existing certificate authority - Create internal certificate authority Certificate Manager: - List certificates - Import existing certificate - Create internal certificate using an internal CA - Generate certificate signing request for external CAs - Process certificate signing response from external CAs Certificate revocation is not currently implemented. The user system will also be extended to allow for user specific certificate management in a follow-up commit. |