Martin Willi
|
2147da40a5
|
simplified identification_t.clone() using memcpy
|
2009-07-06 13:15:28 +02:00 |
|
Martin Willi
|
6bdd79d86c
|
use an enumerator to parse RDNs, based on asn1_unwrap() function
|
2009-07-06 13:15:28 +02:00 |
|
Martin Willi
|
5dd492efff
|
make filter enumerator methods static
|
2009-07-06 13:15:28 +02:00 |
|
Martin Willi
|
596e0540a5
|
asn1_unwrap() function to parse ASN.1 objects with length/type
|
2009-07-06 13:15:28 +02:00 |
|
Andreas Steffen
|
eebecebead
|
make ecp_x_coordinate_only = yes the default
|
2009-07-06 11:47:38 +02:00 |
|
Andreas Steffen
|
21863d6361
|
ecp_x_coordinate only option allows ECP interoperability with MS Windows
|
2009-07-06 08:47:18 +02:00 |
|
Andreas Steffen
|
887ed734d0
|
support of OpenPGP V4 fingerprints
|
2009-07-04 09:26:37 +02:00 |
|
Andreas Steffen
|
876a6d737f
|
corrected comment
|
2009-07-04 09:26:36 +02:00 |
|
Martin Willi
|
6e61122727
|
listen for CHILD_SA state changes only until it has been installed
|
2009-07-03 16:16:00 +02:00 |
|
Andreas Steffen
|
7be566dc1f
|
updated copyright statement
|
2009-07-03 11:43:48 +02:00 |
|
Martin Willi
|
90855e965a
|
added additional sanity checks to asn1_length() parsing
|
2009-07-03 09:26:48 +02:00 |
|
Martin Willi
|
00fcc0f8f3
|
added -avoid-version to LDFLAGS, plugins are not versioned
|
2009-07-03 08:57:11 +02:00 |
|
Martin Willi
|
7afd9d6672
|
defer MOBIKE update if we have no route to the peer
|
2009-07-02 10:56:13 +02:00 |
|
Martin Willi
|
133623871d
|
do not abort notifying listeners if a listener unregisters
|
2009-07-02 09:38:12 +02:00 |
|
Martin Willi
|
2b7129f9b3
|
added mconsole exec patch based on 2.6.30
|
2009-07-01 13:53:46 +02:00 |
|
Martin Willi
|
fb64239cab
|
added mconsole exec patch based on 2.6.29
|
2009-07-01 13:52:54 +02:00 |
|
Martin Willi
|
4fd40cf6b0
|
signal tunnel breakage to NetworkManager
|
2009-06-30 17:47:42 +02:00 |
|
Martin Willi
|
7f9fab77f8
|
restarting dbus is insufficient, restart network-manager after installation
|
2009-06-30 17:03:53 +02:00 |
|
Martin Willi
|
a2f1bb238e
|
enforce correct RSA signature lenght in gcrypt
|
2009-06-30 12:10:30 +02:00 |
|
Andreas Steffen
|
2ba6a53414
|
added missing header files
|
2009-06-24 00:07:36 +02:00 |
|
Martin Willi
|
d860a9b924
|
handle --disable-pluto/charon with --enable-integrity-test
|
2009-06-22 16:37:28 +02:00 |
|
Martin Willi
|
f0f420229a
|
deinit() library if integrity check fails
|
2009-06-22 16:18:53 +02:00 |
|
Martin Willi
|
4f2c48cd3d
|
build and verify on disk file integrity of pluto and charon executables
|
2009-06-22 15:47:18 +02:00 |
|
Martin Willi
|
da2834a280
|
removed functions from faked symbol list, not needed anymore with RTLD_LAZY
|
2009-06-22 15:47:18 +02:00 |
|
Martin Willi
|
cfe508d911
|
indicate use if integrity testing at startup
|
2009-06-22 15:47:18 +02:00 |
|
Martin Willi
|
67a7bb02ef
|
moved checksum_builder/libchechsum to top srcdir to respect build order
|
2009-06-22 15:47:18 +02:00 |
|
Martin Willi
|
e4e6a77a80
|
check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
bef508755b
|
build integrity_checker.c only if --enable-integrity-test set
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
6a8c8815fe
|
check on-disk and loaded segment integrity of libstrongswan
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
d88bcee079
|
reduced verbosity of integrity checker
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
e3b7be91e1
|
removed obsolete INTEGRITY_TEST and fips signer code
--enable-integrity-test now conditionally builds libchecksum
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
f1f51395d5
|
build checksums for charon plugins
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
a0fc89798a
|
library initialization fails if libstrongswan checksum is invalid
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
70f59fab9b
|
checksum.c depends on all libraries
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
12c68f1b3a
|
implemented a checksum_builder tool to build the checksum library
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
0179d4684a
|
integrity checker accepts an option checksum library on construction
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
059c479a2f
|
check integrity of libstrongswan
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
960e0c1040
|
check integrity of plugins before loading
|
2009-06-22 15:47:17 +02:00 |
|
Martin Willi
|
20d4fc97cf
|
implemented an integrity checker class to build and check code integrity
|
2009-06-22 15:47:16 +02:00 |
|
Martin Willi
|
2927db377d
|
dist-hook to remove .svn folder not needed anymore
|
2009-06-22 15:45:24 +02:00 |
|
Martin Willi
|
31b9c10800
|
removed unneeded newline
|
2009-06-22 15:35:18 +02:00 |
|
Andreas Steffen
|
71e725d325
|
use get_proposal_token() for algorithm selection
|
2009-06-20 12:09:36 +02:00 |
|
Andreas Steffen
|
c4963c92ac
|
version bump to 4.3.3
|
2009-06-19 17:00:34 +02:00 |
|
Andreas Steffen
|
c7f76958d7
|
authby=pubkey is now the default authentication
|
2009-06-19 10:41:38 +02:00 |
|
Martin Willi
|
1694e82c7c
|
fixed another 64bit compiler warning
|
2009-06-19 10:19:55 +02:00 |
|
Martin Willi
|
aab814c793
|
fixed compiler warning
|
2009-06-19 10:05:27 +02:00 |
|
Martin Willi
|
f53b7e00c2
|
reverted rule_count back to size_t, as it is passed as pointer (fixes 64bit issues)
|
2009-06-19 10:01:04 +02:00 |
|
Andreas Steffen
|
126f2130fb
|
added info about two DoS fixes
|
2009-06-18 19:29:16 +02:00 |
|
Andreas Steffen
|
1ea31180a0
|
HASH_MD2 is not implemented yet in gcrypt
|
2009-06-18 10:03:05 +02:00 |
|
Andreas Steffen
|
3d7250d472
|
added test vector for NULL encryption
|
2009-06-18 09:59:24 +02:00 |
|