Tobias Brunner
3d829c4c0a
IPSEC_CONFDIR in ipsec script fixed.
2010-05-30 13:07:32 +02:00
Tobias Brunner
8f76653a4c
Adding the version number to the most relevant manual pages.
2010-05-30 13:03:04 +02:00
Tobias Brunner
1d3a48b559
Updated and corrected the ipsec.secrets(5) manual page.
2010-05-30 12:29:32 +02:00
Tobias Brunner
f115838bee
Updated and corrected the ipsec.conf(5) manual page.
2010-05-30 12:29:26 +02:00
Tobias Brunner
28550caaa8
Updated and corrected the ipsec(8) manual page.
2010-05-30 12:29:18 +02:00
Andreas Steffen
d9c751daac
added --leases command line option to synopsis
2010-05-29 13:29:23 +02:00
Andreas Steffen
751379e5e8
added --showattr command line option to synopsys
2010-05-29 13:23:20 +02:00
Tobias Brunner
d070e0a6d1
Do not install trap policy if remote host is %any.
2010-05-28 15:43:12 +02:00
Andreas Steffen
e8960c2a99
be lenient towards wrong attribute encodings
2010-05-28 15:07:21 +02:00
Martin Willi
2e08be79a3
Send empty SIM/AKA-NOTIFICATION response for non-success codes, too
2010-05-27 15:04:25 +02:00
Martin Willi
ddf29f5b07
Added support for reading raw PUT/POST data from HTTP request
2010-05-27 09:30:14 +02:00
Martin Willi
f00a101590
Unwrap subjectKeyIdentifier from OCTET_STRING
2010-05-26 16:09:50 +02:00
Andreas Steffen
e2bd6b616e
several subnets can be concatenated
2010-05-22 22:53:24 +02:00
Andreas Steffen
2111dc1b84
added --showattr command to usage()
2010-05-22 10:46:15 +02:00
Martin Willi
24632bc0e8
Fixed compiler warning in invocation of crl_is_newer()
2010-05-21 16:41:13 +02:00
Martin Willi
09f38ebe54
Use CAs subjectKeyIdentifier as CRLs authorityKeyIdentifier
2010-05-21 16:38:19 +02:00
Martin Willi
0c73ceff0a
Added a --signcrl command to the pki utility
2010-05-21 16:25:51 +02:00
Martin Willi
13c593f126
Added support for CRL generation to x509 plugin
2010-05-21 16:25:51 +02:00
Martin Willi
aab861608a
Removed is_newer() from certificate_t, obsoleting all implementations
2010-05-21 16:25:51 +02:00
Martin Willi
8029e5efd2
Added generic implementations for crl_is_newer/certificate_is_newer
2010-05-21 16:25:51 +02:00
Martin Willi
654218a31b
Migrated x509_crl_t to INIT/METHOD macros
2010-05-21 16:25:51 +02:00
Martin Willi
6d7eed9a37
Implemented X.509 CRL reading using OpenSSL
2010-05-21 16:25:51 +02:00
Martin Willi
5728c6aa7e
Implemented X.509 certificate reading using OpenSSL
2010-05-21 16:25:51 +02:00
Andreas Steffen
3e3059ba7c
oops, removed stray parenthesis
2010-05-20 17:39:10 +02:00
Martin Willi
9806381322
Fixed doxygen group
2010-05-20 17:37:18 +02:00
Martin Willi
40b2be16e3
Whitelist OpenSSLs ERR_put_error() in leak-detective
...
As we do not invoke ERR_get/clear_error() in all error cases, the
error codes are not removed from the error queue. But it is save
to whitelist the put function, as it uses a circular buffer that
does not grow beyond ERR_NUM_ERRORS errors (16 by default).
2010-05-20 17:37:18 +02:00
Martin Willi
2e57b21252
Added a --print command to pki that dumps different credentials
2010-05-20 17:37:18 +02:00
Martin Willi
091d178060
Option to skip slow addr2line resolution in leak-detective
2010-05-20 17:37:18 +02:00
Andreas Steffen
36c1650b19
range check for configuration attribute types
2010-05-20 17:35:10 +02:00
Andreas Steffen
c2d10df6e7
implement ipsec pool -showattr function
2010-05-20 17:24:43 +02:00
Andreas Steffen
05f1096cd8
removed deprecated use of ipsec pool --attr|del dns|nbns from usage()
2010-05-20 16:30:15 +02:00
Andreas Steffen
ad6dbc41e5
management of any attribute by ipsec pool
2010-05-19 21:51:21 +02:00
Andreas Steffen
f71cb4777e
checksum_builder() needs the pluto symbol
2010-05-19 08:02:22 +02:00
Andreas Steffen
ab0ecb7dd9
register virtual IPs under the XAUTH identity
2010-05-18 22:41:22 +02:00
Andreas Steffen
8d7fffc942
clarified secret loading debug output
2010-05-18 16:54:25 +02:00
Tobias Brunner
9ffb475e5d
Typo fixed.
2010-05-18 13:59:23 +02:00
Andreas Steffen
26ec52a405
implemented xauth as a pluto plugin
2010-05-18 13:51:27 +02:00
Martin Willi
ea409980b9
Handle collisions between rekey and the following delete properly
2010-05-18 12:21:38 +02:00
Martin Willi
d235274486
Added simple conditional packet receive delay
2010-05-18 12:21:05 +02:00
Martin Willi
45def2147b
Added simple conditional packet send delay
2010-05-18 12:20:32 +02:00
Martin Willi
42df8beeb6
Explicitly link gpg-error to gcrypt plugin
2010-05-17 12:36:30 +02:00
Andreas Steffen
31b39e5f7c
encoding of MODE_TUNNEL changed
2010-05-15 18:36:14 +02:00
Andreas Steffen
8143f10914
introduced xauth_identity keyword
2010-05-15 10:18:29 +02:00
Andreas Steffen
03b5e4d8d7
refactoring of Mode Config functionality allows transport and handling of any attribute
2010-05-14 17:07:03 +02:00
Andreas Steffen
fb7de3a8bf
implemented support of resolve plugin
2010-05-08 16:09:02 +02:00
Andreas Steffen
c2651ff13d
include demux.h only once
2010-05-06 21:55:19 +02:00
Andreas Steffen
c158df0f23
already defined in attributes/attributes.h
2010-05-06 21:44:15 +02:00
Andreas Steffen
4eee16354b
include state.h only once
2010-05-06 21:35:00 +02:00
Andreas Steffen
3baf4922e2
removed stray file
2010-05-06 10:35:25 +02:00
Martin Willi
026b0058d5
Support decoding of subjectPublicKeyInfo in openssl without pkcs1 plugin
2010-05-05 13:49:56 +02:00
Tobias Brunner