Martin Willi
|
0ea70ca66e
|
removed unneded publicKeyInfo ASN1 structure
|
2008-04-01 13:39:12 +00:00 |
|
Andreas Steffen
|
392f4e17c2
|
minimal stroke_list_ocsp() implementation
|
2008-04-01 12:11:09 +00:00 |
|
Tobias Brunner
|
9c2a905d63
|
stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID
|
2008-04-01 11:38:18 +00:00 |
|
Martin Willi
|
45d66f5af6
|
some simplifications to trusted_enumerator_t
|
2008-04-01 10:56:08 +00:00 |
|
Martin Willi
|
1bb85edffe
|
checking pretrusted but bad certificates only once
|
2008-04-01 10:43:44 +00:00 |
|
Andreas Steffen
|
946d1ecd59
|
stroke_list groups certificates by issuer
|
2008-04-01 10:26:27 +00:00 |
|
Martin Willi
|
dd2efc2c03
|
replaced the example manager database by a sql script
|
2008-04-01 07:16:48 +00:00 |
|
Martin Willi
|
e411f94d44
|
changed enumerator implementation to handle reentrant code
|
2008-04-01 06:51:55 +00:00 |
|
Andreas Steffen
|
c096472605
|
minor changes in debug output
|
2008-03-31 21:59:32 +00:00 |
|
Andreas Steffen
|
aaa7643b73
|
put DN in double quotes
|
2008-03-31 21:08:56 +00:00 |
|
Andreas Steffen
|
a92ea0ccb3
|
output error message if maximum ca path length is reached
|
2008-03-31 20:42:57 +00:00 |
|
Andreas Steffen
|
eafc0654ca
|
ipsec list suppresses duplicates
|
2008-03-31 20:21:24 +00:00 |
|
Tobias Brunner
|
e5ab32a7ee
|
timing of connectivity checks adjusted
|
2008-03-31 15:04:38 +00:00 |
|
Martin Willi
|
9e72d3bcaf
|
defining ME globally, as we need it in plugins
|
2008-03-31 15:01:43 +00:00 |
|
Andreas Steffen
|
58a05045cc
|
utc argument in %#T was missing
|
2008-03-31 14:36:00 +00:00 |
|
Tobias Brunner
|
9e183cd5b8
|
signal fixed
|
2008-03-31 14:27:16 +00:00 |
|
Andreas Steffen
|
681d56b1bb
|
disabled build of outdated dbus interface
|
2008-03-31 12:59:39 +00:00 |
|
Tobias Brunner
|
f98736aee6
|
changed order of server and peer reflexive endpoints (and also the priorities)
|
2008-03-31 10:56:49 +00:00 |
|
Martin Willi
|
0f7ef3d2a0
|
received certificates have least priority
fixed manager unlocking
|
2008-03-31 08:43:18 +00:00 |
|
Martin Willi
|
d69b267d58
|
fixed refcounting in certificate trustchain validation
|
2008-03-31 07:16:12 +00:00 |
|
Andreas Steffen
|
1c65129148
|
adapted configure options in testing.conf and build-umlrootfs
|
2008-03-29 19:33:02 +00:00 |
|
Andreas Steffen
|
dcc777652e
|
changed error message
|
2008-03-29 13:26:53 +00:00 |
|
Andreas Steffen
|
40f9006845
|
output uptime in status in local time
|
2008-03-29 08:55:09 +00:00 |
|
Andreas Steffen
|
d2aa6fcaeb
|
shortened menu item
|
2008-03-28 22:46:09 +00:00 |
|
Andreas Steffen
|
c63dc50f15
|
demoted ldap debug output to level 2
|
2008-03-28 22:44:45 +00:00 |
|
Andreas Steffen
|
95ef5db5c3
|
remove xml directory
|
2008-03-28 19:49:59 +00:00 |
|
Martin Willi
|
b7ef3f625d
|
leak detective detects heap over- and underflow
|
2008-03-28 14:51:26 +00:00 |
|
Martin Willi
|
7939864dec
|
updated leak_detective whitelist: libxml and clearsilver functions
|
2008-03-28 13:16:36 +00:00 |
|
Martin Willi
|
6b9290ff12
|
renamed xml plugin to smp to avoid confusion
added some dependency checks to configure
configure checks ClearSilver and fastcgi
cleanups in the build system here and there
|
2008-03-28 12:44:01 +00:00 |
|
Martin Willi
|
892fb43b12
|
fixed manager plugin loading
manager uses strongswan.conf to read its configuration
|
2008-03-28 12:41:05 +00:00 |
|
Martin Willi
|
35b6e2301f
|
fixed crash if crl fetching fails
|
2008-03-28 12:00:51 +00:00 |
|
Martin Willi
|
dca40a9483
|
fixed all pluto compiler warnings
|
2008-03-28 11:48:14 +00:00 |
|
Martin Willi
|
7539b1d1aa
|
fixed compiler warning in openace
fixed pem loading bug
|
2008-03-28 11:47:11 +00:00 |
|
Martin Willi
|
acf7956c68
|
fixed compiler warning in libfreeswan
|
2008-03-28 11:46:30 +00:00 |
|
Martin Willi
|
a43eb5aa3f
|
fixed compiler warning in scepclient
|
2008-03-28 11:45:56 +00:00 |
|
Martin Willi
|
0d2670e7e6
|
removed unused yynuput to fix compiler warning
|
2008-03-28 11:45:01 +00:00 |
|
Martin Willi
|
15e21c5cba
|
fixed compiler warning
|
2008-03-28 10:21:04 +00:00 |
|
Martin Willi
|
d55fa9aff7
|
reentrant save cert_cache
|
2008-03-28 08:38:51 +00:00 |
|
Martin Willi
|
ac1fefc2de
|
caching of CRLs
|
2008-03-28 08:14:47 +00:00 |
|
Martin Willi
|
d20e5c6ab5
|
replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification
|
2008-03-27 19:07:23 +00:00 |
|
Martin Willi
|
0d30ba3343
|
use trusted self-signed root CA certificates as trust anchor only
|
2008-03-27 13:38:02 +00:00 |
|
Tobias Brunner
|
e74bc8e51d
|
changed external interface to the mediation extension.
|
2008-03-27 12:31:35 +00:00 |
|
Tobias Brunner
|
b42421a04c
|
corrected ME_ENDPOINT length check
|
2008-03-27 12:29:51 +00:00 |
|
Martin Willi
|
52a61742e7
|
reusing generic shared_key_t implementation in med_db
|
2008-03-27 11:45:49 +00:00 |
|
Martin Willi
|
cf4caefab1
|
whitelisted FCGX_Init
reporting count of leaks suppressed by whitelist
|
2008-03-27 11:42:35 +00:00 |
|
Martin Willi
|
4204db116b
|
fixed memory leak in dispatcher
|
2008-03-27 10:24:37 +00:00 |
|
Tobias Brunner
|
54150b3f13
|
checking the size of ME_* notify payloads
|
2008-03-27 10:17:29 +00:00 |
|
Tobias Brunner
|
b0dee635d2
|
replaced the COOKIE notify payload in connectivity checks with a ME_CONNECTAUTH notify payload
|
2008-03-27 09:54:09 +00:00 |
|
Martin Willi
|
f957f7dfb3
|
implemented cert cache flushing, ipsec purgeocsp
|
2008-03-27 06:37:29 +00:00 |
|
Andreas Steffen
|
d61bd27a9a
|
fixed plugin/stroke Makefile
|
2008-03-26 20:24:55 +00:00 |
|