Tobias Brunner
24e0595437
Removed unused variables.
2011-04-12 14:44:49 +02:00
Tobias Brunner
c38877b395
pluto: Properly free secrets in error cases.
2011-02-10 16:49:42 +01:00
Tobias Brunner
84545f6e7c
Some typos fixed.
2011-02-07 11:39:41 +01:00
Tobias Brunner
2b2eecb6ec
Fixed whatis entry of pluto manpage.
2011-02-07 11:39:41 +01:00
Tobias Brunner
189cb3a1de
Escape - in manpages when used as minus sign.
2011-02-07 11:39:41 +01:00
Martin Willi
b3d359e58f
Use a generic getter for all numerical X.509 constraints
2011-01-05 16:46:05 +01:00
Martin Willi
a6478a0402
Simplified format of x509 CRL URI parsing/enumerator
2011-01-05 16:46:03 +01:00
Martin Willi
5dba5852fc
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
2011-01-05 16:46:02 +01:00
Martin Willi
4e508517d7
Added support for CRL Issuers to x509 and OpenSSL plugins
2011-01-05 16:45:55 +01:00
Andreas Steffen
27a66f9393
implemented wrap around of registered IKEv1 algorithm names
2010-12-26 17:11:02 +01:00
Martin Willi
d86bb6ef4d
Implemented Traffic Flow Confidentiality padding in kernel_interface
2010-12-20 09:45:39 +01:00
Andreas Steffen
5932f41fcc
trace back crypto algorithms to the plugins that registered them
2010-12-18 16:31:12 +01:00
Tobias Brunner
5feda42724
pluto: Fixed a regression introduced in f565d0c575.
...
Since scx_add could return a previously created smartcard object, using
sc->last_cert to store the newly added certificate could lead to segfaults.
2010-10-26 09:58:13 +02:00
Tobias Brunner
71711b67b4
pluto: Locking fixed in cert_add.
2010-10-26 09:58:13 +02:00
Andreas Steffen
1f2c328355
payloads are not aligned to 4 byte boundaries
2010-10-25 19:31:07 +02:00
Andreas Steffen
4b7d1262d9
define state_story for STATE_UNDEFINED
2010-10-16 16:15:10 +02:00
Egbert Koening
4de8398f93
fix segfault when reading certificate from smartcard
2010-10-15 11:09:38 +02:00
Tobias Brunner
4d10e260de
pluto: Install inbound policies together with outbound policies.
...
This avoids an error message when uninstalling the policies and charon
did it already like this.
2010-10-14 13:53:20 +02:00
Andreas Steffen
2b3124c76d
fixed release of virtual IP for XAUTH identities
2010-09-26 10:17:01 +02:00
Tobias Brunner
0a1233e642
Moved man pages for config files to a separate directory.
2010-09-10 12:01:19 +02:00
Andreas Steffen
f3051ebf53
fixed memory leak
2010-09-09 21:38:41 +02:00
Martin Willi
d987946e80
Added a final flag to builder registration to enumerate the actually supported algorithms
2010-09-03 18:09:48 +02:00
Tobias Brunner
1dfd6d18ff
pluto: Removed unused lifetime from raw_eroute.
2010-09-02 19:04:26 +02:00
Tobias Brunner
b5be105aaf
pluto: Added support for statically configured reqids.
2010-09-02 19:04:25 +02:00
Tobias Brunner
f8edbc22c7
pluto: Make marks available in updown script.
2010-09-02 19:04:25 +02:00
Tobias Brunner
190ee00c94
pluto: Fixed comparison of connections, if marks are specified.
2010-09-02 19:04:25 +02:00
Tobias Brunner
a280ba9525
pluto: Store xfrm marks on connection and use them when installing SAs and policies.
2010-09-02 19:04:25 +02:00
Tobias Brunner
f23e7394ae
pluto: Added PLUTO_UDP_ENC argument to updown script.
...
This contains the remote UDP port in case of UDP encapsulated ESP.
2010-09-02 19:04:25 +02:00
Tobias Brunner
3251294ceb
pluto: Return value fixed.
2010-09-02 19:04:25 +02:00
Tobias Brunner
d499bdf393
pluto: Removed bare shunt table.
2010-09-02 19:04:24 +02:00
Tobias Brunner
76467e030c
pluto: Handle changed NAT mappings via libhydra's kernel interface.
2010-09-02 19:04:24 +02:00
Tobias Brunner
a0cbce9e7c
pluto: Removed no_klips flag (--noklips option).
2010-09-02 19:04:24 +02:00
Tobias Brunner
eeca1b0466
pluto: Removed references to KLIPS from documentation, log messages and comments.
2010-09-02 19:04:24 +02:00
Tobias Brunner
6374671110
pluto: Added --debug-kernel as alias for --debug-klips.
2010-09-02 19:04:24 +02:00
Tobias Brunner
ebdbf28a4a
pluto: Replaced DBG_KLIPS with DBG_KERNEL.
2010-09-02 19:04:24 +02:00
Tobias Brunner
8dade8e6eb
pluto: Removed the KLIPS preprocessor flag.
2010-09-02 19:04:24 +02:00
Tobias Brunner
fc06e34e46
pluto: Removed unneeded kernel abstractions.
2010-09-02 19:04:23 +02:00
Tobias Brunner
36ff473016
pluto: Completely removed struct kernel_ops.
2010-09-02 19:04:23 +02:00
Tobias Brunner
296972aeaf
pluto: Refactored PF_KEY capabilities registration.
...
Although we use the kernel interface from libhydra we still need this to make
the available algorithms known to pluto.
2010-09-02 19:04:23 +02:00
Tobias Brunner
4f898afc22
pluto: Removed unneeded functions from PF_KEY interface.
...
We still use the algorithm registration.
2010-09-02 19:04:23 +02:00
Tobias Brunner
03ee9623f3
pluto: Completely removed orphaned_holds.
2010-09-02 19:04:23 +02:00
Tobias Brunner
44b4f0d06f
pluto: Install IN policy of a shunt eroute with protocol.
2010-09-02 19:04:23 +02:00
Tobias Brunner
9052216813
pluto: Fixed byte-order of ports in traffic selectors.
2010-09-02 19:04:23 +02:00
Tobias Brunner
c6fd7549e8
pluto: Listen for kernel events via libhydra's kernel interface.
2010-09-02 19:04:22 +02:00
Tobias Brunner
40bbff5dbf
pluto: Adapted kernel.c to changed kernel interface.
2010-09-02 19:04:22 +02:00
Tobias Brunner
c3f4d68f0d
pluto: Do not close all file descriptors on startup, just redirect stdin, stdout and stderr to /dev/null.
...
Otherwise the pipe used to synchronize pluto->events with the main
thread would be closed.
2010-09-02 19:04:21 +02:00
Tobias Brunner
8808edfb4c
pluto: Added a generic event queue.
...
This allows to easily execute arbitrary callbacks in the context of the pluto
main thread (e.g. in order to synchronize with threads from the thread-pool).
2010-09-02 19:04:21 +02:00
Tobias Brunner
4cf459a054
pluto: Fixed the reqid that is passed to the updown script.
2010-09-02 19:04:21 +02:00
Tobias Brunner
199a415710
pluto: Migrated setup_half_ipsec_sa to libhydra's kernel interface.
2010-09-02 19:04:21 +02:00
Tobias Brunner
44643c2d01
pluto: Removed unneeded get_proto_reqid.
...
We will use the same reqid for all protocols, as in charon.
2010-09-02 19:04:21 +02:00
Tobias Brunner