 Andreas Steffen
|
0da0f3fc3f
|
delete group attributes after use
|
2009-10-05 23:17:36 +02:00 |
|
|
Andreas Steffen
|
a9fe23cf53
|
stroke_list outputs group attributes
|
2009-10-05 23:13:51 +02:00 |
|
|
Andreas Steffen
|
408e46a324
|
ipsec pki --issue suports --flag authServer option
|
2009-10-05 22:44:01 +02:00 |
|
|
Andreas Steffen
|
ce40bf5def
|
ipsec pki --issue supports --flag ocspSigning option
|
2009-10-05 21:20:42 +02:00 |
|
|
Martin Willi
|
6eacaffc72
|
Cleaned up EAP-AKA en/decoding, eliminated unaligned half-word reads
|
2009-10-05 14:06:32 +02:00 |
|
|
Martin Willi
|
3b836fc759
|
Cleaned up EAP-SIM en/decoding, eliminated unaligned half-word reads
|
2009-10-05 13:32:41 +02:00 |
|
|
Martin Willi
|
587ebae722
|
Distinguish invalid free()s between corrupted magic and invalid pointer
|
2009-10-05 11:02:54 +02:00 |
|
|
Andreas Steffen
|
fc12e3cd2e
|
pluto now uses x509 plugin for attribute certificate handling
|
2009-10-05 07:24:28 +02:00 |
|
|
Andreas Steffen
|
0ea9cbc6e9
|
fixed output of authKeyID
|
2009-10-02 21:20:45 +02:00 |
|
|
Andreas Steffen
|
0aa5cea248
|
mark embedded parsing in debug mode
|
2009-10-02 20:54:15 +02:00 |
|
|
Andreas Steffen
|
ec0abe4ab5
|
added some notBefore/notAfter debugging info
|
2009-10-02 20:14:09 +02:00 |
|
|
Andreas Steffen
|
daaedcb9c2
|
verify correctness of X.509 versions
|
2009-10-02 17:49:51 +02:00 |
|
|
Andreas Steffen
|
6f2f08fb8d
|
added all missing RFC 5280 OIDs
|
2009-10-02 14:10:27 +02:00 |
|
|
Andreas Steffen
|
03a52ce4e5
|
created ikev1/mode-config-multiple scenario
|
2009-10-01 09:42:35 +02:00 |
|
|
Andreas Steffen
|
eb4544f773
|
fixes multiple IPsec SAs with IKEv1 Mode Config
|
2009-10-01 09:41:35 +02:00 |
|
|
Andreas Steffen
|
70e81857f9
|
generate known OIDs dynamically
|
2009-09-30 11:49:32 +02:00 |
|
|
Andreas Steffen
|
0c8d08068e
|
pluto's crl handling now uses the x509 plugin
|
2009-09-30 09:29:15 +02:00 |
|
|
Andreas Steffen
|
5406c65702
|
scepclient uses pkcs10 from libstrongswan
|
2009-09-28 05:52:20 +02:00 |
|
|
Andreas Steffen
|
c72080cea8
|
abbreviated struct connection by connection_t
|
2009-09-27 23:49:37 +02:00 |
|
|
Andreas Steffen
|
0eff9f6539
|
pluto and scepclient now use the x509 plugin for certificates
|
2009-09-27 23:09:30 +02:00 |
|
|
Andreas Steffen
|
727b0f11e2
|
whitelist Curl_client_write
|
2009-09-27 23:07:21 +02:00 |
|
|
Andreas Steffen
|
8ad23ba346
|
added get_subjectKeyIdentifier() to x509_t
|
2009-09-26 22:10:36 +02:00 |
|
|
Martin Willi
|
f12d8cf719
|
Do not increase the invalid-KE/Cookie retry counter for additional keyingtry attempts
|
2009-09-24 14:49:41 +02:00 |
|
|
Martin Willi
|
cf76c42903
|
Do not create a replacement IKE_SA if we have CHILD_SAs to route only
|
2009-09-24 14:49:41 +02:00 |
|
|
Tobias Brunner
|
6e6975395e
|
Using the correct type for ME_ENDPOINT payloads in connectivity checks.
|
2009-09-24 11:29:34 +02:00 |
|
|
Martin Willi
|
17859fe6cf
|
Right-align short options in pki usage
|
2009-09-24 11:28:53 +02:00 |
|
|
Andreas Steffen
|
02bf410aa9
|
certificate subject DNs are in double quotes
|
2009-09-23 22:03:52 +02:00 |
|
|
Andreas Steffen
|
b362cc2382
|
streamlining of credential loading debug output
|
2009-09-23 21:55:48 +02:00 |
|
|
Andreas Steffen
|
1806024105
|
added fix of PKCS#7 wrapped certificates to NEWS
|
2009-09-23 21:50:56 +02:00 |
|
|
Andreas Steffen
|
45cc7ba403
|
added and fixed debug output of version information
|
2009-09-23 16:21:18 +02:00 |
|
|
Andreas Steffen
|
c0be0977e7
|
fixed PKCS#7 wrapped certificate parsing
|
2009-09-23 15:52:30 +02:00 |
|
|
Martin Willi
|
840743479a
|
Use mysql_config to query MySQL LIBS and CFLAGS
|
2009-09-23 12:45:03 +02:00 |
|
|
Martin Willi
|
0406ed7a16
|
Fixed a crash in source address lookup
|
2009-09-23 11:18:30 +02:00 |
|
|
Martin Willi
|
a7f79ee9c1
|
Define ME for all charon plugins
|
2009-09-23 11:13:27 +02:00 |
|
|
Martin Willi
|
e20b792108
|
Correctly handle --enable-mediation option
|
2009-09-23 10:50:00 +02:00 |
|
|
Andreas Steffen
|
677322b1bf
|
enforce coding rules
|
2009-09-22 21:50:28 +02:00 |
|
|
Andreas Steffen
|
b62ce860c1
|
enforce coding rules
|
2009-09-22 20:55:10 +02:00 |
|
|
Andreas Steffen
|
b88bbe8aa1
|
set XFRM_STATE_AF_UNSPEC flag
|
2009-09-22 20:55:10 +02:00 |
|
|
Martin Willi
|
b262680175
|
Emit a ALERT_SHUTDOWN_SIGNAL before shutting down the daemon
|
2009-09-22 17:00:00 +02:00 |
|
|
Andreas Steffen
|
a28334720c
|
adding additional flags to loaded X.509 certificates
|
2009-09-22 12:55:25 +02:00 |
|
|
Andreas Steffen
|
b80fa9ca38
|
readying NEWS for the strongswan-4.3.5dr2 release
|
2009-09-22 12:44:58 +02:00 |
|
|
Andreas Steffen
|
4b15ee8cd9
|
shortened file loading debug output
|
2009-09-22 12:33:13 +02:00 |
|
|
Andreas Steffen
|
1271983ab9
|
computed hash-and-url for new certificates
|
2009-09-22 12:05:37 +02:00 |
|
|
Martin Willi
|
f1092e20f4
|
Fixed encoding of hash-and-url cert payload
|
2009-09-22 10:07:04 +02:00 |
|
|
Martin Willi
|
cb64b21217
|
Do not assign SIM version to a volatile buffer on stack
|
2009-09-22 09:11:35 +02:00 |
|
|
Martin Willi
|
91cb348cc2
|
CA certificates are looked up using the subjectPublicKeyInfo keyid
|
2009-09-21 18:13:25 +02:00 |
|
|
Martin Willi
|
c84b139a87
|
Credential backends use has_fingerprint() methods to select keys/certificates
|
2009-09-21 17:03:00 +02:00 |
|
|
Martin Willi
|
640ed4d5a5
|
Public/Private keys implement a has_fingerprint() method
|
2009-09-21 16:47:25 +02:00 |
|
|
Martin Willi
|
fde7f5abf8
|
Correctly serve certificates if CERT_ANY requested
|
2009-09-21 15:34:29 +02:00 |
|
|
Martin Willi
|
c6a8990bc5
|
Enforce a local address of the same family as remote address
|
2009-09-21 15:30:40 +02:00 |
|