denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,349 Commits 1 Branch 0 Tags
49e8ac052d89c228f0f343ffd721c0f0ba0a3935
Commit Graph
1349 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Martin Willi 49e8ac052d ported changes from EAP branch, renabling EAP framework 2007-03-08 00:27:43 +00:00
Martin Willi 3c6337793f added (not yet supported) sha2 algorithms to kernel 
only adding a route if using tunnel mode
 2007-03-08 00:17:57 +00:00
Martin Willi 9aa20fdae8 added SHA2 MAC and PRF to default proposal 2007-03-08 00:16:33 +00:00
Martin Willi ea235d388e added more debug output 2007-03-08 00:15:15 +00:00
Martin Willi 3243e90188 experimental SHA2 HMAC and PRF implementations 2007-03-08 00:14:17 +00:00
Andreas Steffen 40695383ae parsing basic ocsp response 2007-03-08 00:13:15 +00:00
Andreas Steffen 08d42d3994 forgot to assign public.is_ocsp_signer() method 2007-03-07 23:31:03 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Andreas Steffen 8dfb0a31b5 added parsing level to x509_create_from_chunk() and added is_ocsp_signer() method 2007-03-07 22:57:50 +00:00
Andreas Steffen 78703918aa http post fetching using libcurl implemented 2007-03-07 19:28:03 +00:00
Andreas Steffen bdfff62db9 added fetcher.h and fetcher.c 2007-03-07 14:13:01 +00:00
Andreas Steffen 6a65758a80 added 2007-03-07 14:12:36 +00:00
Andreas Steffen a7d67e77a1 corrected @ingroup to utils 2007-03-07 14:11:47 +00:00
Andreas Steffen 62a8ee10c3 corrected comment 2007-03-07 14:11:02 +00:00
Andreas Steffen dd82ca4dcc start ocsp checking only if there are any ocspuris present 2007-03-07 13:22:07 +00:00
Andreas Steffen 0d1f911065 conntrack -F is used to flush the NAT states 2007-03-07 04:45:12 +00:00
Andreas Steffen 26ad49c8e7 the hostaccess=yes parameters are not needed anymore 2007-03-07 04:44:25 +00:00
Andreas Steffen 854b4e4460 use conntrack -F to flush NAT states 2007-03-07 04:29:13 +00:00
Andreas Steffen 764804739f replaced actual virtual IP addresses by symbolic ones 2007-03-07 04:28:34 +00:00
Andreas Steffen 74d1b5e5b0 removed unnecessary double quotes 2007-03-07 04:27:32 +00:00
Andreas Steffen 817fecddc9 nonce in ocsp_t was not properly initialized 2007-03-07 04:22:21 +00:00
Andreas Steffen 7687c463da ocsp request is now fully built but without requestor signature 2007-03-07 03:39:40 +00:00
Andreas Steffen 45fe480e87 starting to build ocsp request 2007-03-06 23:05:44 +00:00
Martin Willi 2540992a06 prevent from initiating multiple exchanges the same time 2007-03-06 22:17:53 +00:00
Martin Willi 915c065d61 updated apidoc documentation 2007-03-06 22:17:21 +00:00
Martin Willi c676f2e2a6 fixed notify handling in IKE_AUTH 
moved nonce payload before TS in CHILD_SA setup
 2007-03-06 20:58:39 +00:00
Martin Willi f2d4ec5639 moved REKEY_SA notify to the beginning of the message 2007-03-06 20:56:58 +00:00
Martin Willi 9de7540eee fixed traffic selector redundancy removal code (not completely tested) 2007-03-06 20:55:19 +00:00
Andreas Steffen 69351da14d add crl and ocsp uris to linked list after partial verification 2007-03-06 18:51:56 +00:00
Andreas Steffen fd8819e06f added print hook for certinfo_t printing 2007-03-06 14:27:34 +00:00
Andreas Steffen aa3af83a80 fixed typo 2007-03-06 14:26:03 +00:00
Martin Willi ddae0f9673 sending an SPI of 0 as responder when IKE_SA_INIT fails 2007-03-06 13:06:47 +00:00
Andreas Steffen ce7fdaca71 iterate certinfos linked list for matching serialNumber 2007-03-05 22:08:48 +00:00
Martin Willi 6e1be42744 some cleanups 
not assigning %any virtual IPs to peer anymore
 2007-03-05 22:07:36 +00:00
Martin Willi 02b3101b67 fixed double free bug 2007-03-05 22:02:14 +00:00
Andreas Steffen 0b0eb65573 added 2007-03-05 19:15:33 +00:00
Martin Willi 5bf1be3c9f fixed ID selection bug when peer doesn't include IDr payload 
allowing vendor ID in any messag
 2007-03-05 15:22:50 +00:00
Andreas Steffen 03ffdf7526 moved listing of crls to local_credential_store and ca 2007-03-03 21:10:22 +00:00
Andreas Steffen 81020aaefd refactored ca_info_t 2007-03-03 21:08:07 +00:00
Andreas Steffen e5b0570a02 refactored ca_info_t 2007-03-03 21:07:23 +00:00
Martin Willi 373b8a607f fixed netlink socket receiver code 
implemented interface enumeration code with netlink: no getifaddrs reqired anymore
 2007-03-03 14:56:24 +00:00
Martin Willi 285bbed595 refactored kernel interface, works reliable again 2007-03-03 13:04:07 +00:00
Martin Willi 1d51abb71b implemented get_iface() using RTM_GETADDR 
added support for multi-header netlink messages
really ugly now, need a lot of refactoring
 2007-03-02 17:08:38 +00:00
Martin Willi ebc59e3bb8 added debuggin for interface lookup 2007-03-01 12:53:20 +00:00
Martin Willi 3c940a2e4b fixed address lookup when !using getifaddrs() 2007-03-01 12:35:21 +00:00
Martin Willi 8f03147376 added firewalling support when using virtual IPs 2007-03-01 12:31:58 +00:00
Martin Willi 0c8aba6771 added support for 0.0.0.0/0 traffic selectors 
fixed routing to make correct 0.0.0.0/0 routes
 2007-03-01 11:42:08 +00:00
Andreas Steffen 671a54e9ab config-payload scenario fixes 2007-03-01 08:20:50 +00:00
Andreas Steffen 9b1f4540c6 preparations for PLUTO_MY_SOURCEIP 2007-03-01 07:45:43 +00:00
Andreas Steffen 7493cd0b6b corrected typo 2007-03-01 00:00:35 +00:00