Commit Graph
3908 Commits
Author SHA1 Message Date
Martin Willi 2147da40a5 simplified identification_t.clone() using memcpy 2009-07-06 13:15:28 +02:00
Martin Willi 6bdd79d86c use an enumerator to parse RDNs, based on asn1_unwrap() function 2009-07-06 13:15:28 +02:00
Martin Willi 5dd492efff make filter enumerator methods static 2009-07-06 13:15:28 +02:00
Martin Willi 596e0540a5 asn1_unwrap() function to parse ASN.1 objects with length/type 2009-07-06 13:15:28 +02:00
Andreas Steffen eebecebead make ecp_x_coordinate_only = yes the default 2009-07-06 11:47:38 +02:00
Andreas Steffen 21863d6361 ecp_x_coordinate only option allows ECP interoperability with MS Windows 2009-07-06 08:47:18 +02:00
Andreas Steffen 887ed734d0 support of OpenPGP V4 fingerprints 2009-07-04 09:26:37 +02:00
Andreas Steffen 876a6d737f corrected comment 2009-07-04 09:26:36 +02:00
Martin Willi 6e61122727 listen for CHILD_SA state changes only until it has been installed 2009-07-03 16:16:00 +02:00
Andreas Steffen 7be566dc1f updated copyright statement 2009-07-03 11:43:48 +02:00
Martin Willi 90855e965a added additional sanity checks to asn1_length() parsing 2009-07-03 09:26:48 +02:00
Martin Willi 00fcc0f8f3 added -avoid-version to LDFLAGS, plugins are not versioned 2009-07-03 08:57:11 +02:00
Martin Willi 7afd9d6672 defer MOBIKE update if we have no route to the peer 2009-07-02 10:56:13 +02:00
Martin Willi 133623871d do not abort notifying listeners if a listener unregisters 2009-07-02 09:38:12 +02:00
Martin Willi 2b7129f9b3 added mconsole exec patch based on 2.6.30 2009-07-01 13:53:46 +02:00
Martin Willi fb64239cab added mconsole exec patch based on 2.6.29 2009-07-01 13:52:54 +02:00
Martin Willi 4fd40cf6b0 signal tunnel breakage to NetworkManager 2009-06-30 17:47:42 +02:00
Martin Willi 7f9fab77f8 restarting dbus is insufficient, restart network-manager after installation 2009-06-30 17:03:53 +02:00
Martin Willi a2f1bb238e enforce correct RSA signature lenght in gcrypt 2009-06-30 12:10:30 +02:00
Andreas Steffen 2ba6a53414 added missing header files 2009-06-24 00:07:36 +02:00
Martin Willi d860a9b924 handle --disable-pluto/charon with --enable-integrity-test 2009-06-22 16:37:28 +02:00
Martin Willi f0f420229a deinit() library if integrity check fails 2009-06-22 16:18:53 +02:00
Martin Willi 4f2c48cd3d build and verify on disk file integrity of pluto and charon executables 2009-06-22 15:47:18 +02:00
Martin Willi da2834a280 removed functions from faked symbol list, not needed anymore with RTLD_LAZY 2009-06-22 15:47:18 +02:00
Martin Willi cfe508d911 indicate use if integrity testing at startup 2009-06-22 15:47:18 +02:00
Martin Willi 67a7bb02ef moved checksum_builder/libchechsum to top srcdir to respect build order 2009-06-22 15:47:18 +02:00
Martin Willi e4e6a77a80 check for dladdr() and dl_iterate_phdr() if --enable-integrity-test set 2009-06-22 15:47:17 +02:00
Martin Willi bef508755b build integrity_checker.c only if --enable-integrity-test set 2009-06-22 15:47:17 +02:00
Martin Willi 6a8c8815fe check on-disk and loaded segment integrity of libstrongswan 2009-06-22 15:47:17 +02:00
Martin Willi d88bcee079 reduced verbosity of integrity checker 2009-06-22 15:47:17 +02:00
Martin Willi e3b7be91e1 removed obsolete INTEGRITY_TEST and fips signer code
--enable-integrity-test now conditionally builds libchecksum
2009-06-22 15:47:17 +02:00
Martin Willi f1f51395d5 build checksums for charon plugins 2009-06-22 15:47:17 +02:00
Martin Willi a0fc89798a library initialization fails if libstrongswan checksum is invalid 2009-06-22 15:47:17 +02:00
Martin Willi 70f59fab9b checksum.c depends on all libraries 2009-06-22 15:47:17 +02:00
Martin Willi 12c68f1b3a implemented a checksum_builder tool to build the checksum library 2009-06-22 15:47:17 +02:00
Martin Willi 0179d4684a integrity checker accepts an option checksum library on construction 2009-06-22 15:47:17 +02:00
Martin Willi 059c479a2f check integrity of libstrongswan 2009-06-22 15:47:17 +02:00
Martin Willi 960e0c1040 check integrity of plugins before loading 2009-06-22 15:47:17 +02:00
Martin Willi 20d4fc97cf implemented an integrity checker class to build and check code integrity 2009-06-22 15:47:16 +02:00
Martin Willi 2927db377d dist-hook to remove .svn folder not needed anymore 2009-06-22 15:45:24 +02:00
Martin Willi 31b9c10800 removed unneeded newline 2009-06-22 15:35:18 +02:00
Andreas Steffen 71e725d325 use get_proposal_token() for algorithm selection 2009-06-20 12:09:36 +02:00
Andreas Steffen c4963c92ac version bump to 4.3.3 2009-06-19 17:00:34 +02:00
Andreas Steffen c7f76958d7 authby=pubkey is now the default authentication 2009-06-19 10:41:38 +02:00
Martin Willi 1694e82c7c fixed another 64bit compiler warning 2009-06-19 10:19:55 +02:00
Martin Willi aab814c793 fixed compiler warning 2009-06-19 10:05:27 +02:00
Martin Willi f53b7e00c2 reverted rule_count back to size_t, as it is passed as pointer (fixes 64bit issues) 2009-06-19 10:01:04 +02:00
Andreas Steffen 126f2130fb added info about two DoS fixes 2009-06-18 19:29:16 +02:00
Andreas Steffen 1ea31180a0 HASH_MD2 is not implemented yet in gcrypt 2009-06-18 10:03:05 +02:00
Andreas Steffen 3d7250d472 added test vector for NULL encryption 2009-06-18 09:59:24 +02:00