Andreas Steffen
|
353b829177
|
fixed IKEv1 support of HMAC_SHA2_256_96
|
2009-12-09 09:33:32 +01:00 |
|
Andreas Steffen
|
a07531250e
|
IKEv1 support of ESP SHA2_HMAC with correct truncation
|
2009-12-09 00:24:42 +01:00 |
|
Andreas Steffen
|
eba568563c
|
changed error messages in the case of faulty esp and ike strings
|
2009-11-24 16:45:52 +01:00 |
|
Andreas Steffen
|
2eeab939a0
|
do not send all available kernel algorithms if esp string is faulty
|
2009-11-24 16:38:10 +01:00 |
|
Elmar Vonlanthen
|
792876ff87
|
check if alg_info_esp exists
|
2009-11-24 16:15:12 +01:00 |
|
Andreas Steffen
|
cda8ec7afc
|
added some parentheses
|
2009-11-24 14:36:17 +01:00 |
|
Andreas Steffen
|
c4570d188e
|
issue error message for expired certificates in OCSP trust chain checking
|
2009-11-24 12:37:38 +01:00 |
|
Martin Willi
|
0850e33518
|
Fixed compiler warning about missing return value
|
2009-11-12 11:17:02 +01:00 |
|
Andreas Steffen
|
209f52cb63
|
fixed 4.3.6 ocsp regression
|
2009-11-11 11:06:07 +01:00 |
|
Andreas Steffen
|
a618e33e8b
|
merged pluto's PGP certificate parsing with charon's
|
2009-11-10 23:54:51 +01:00 |
|
Andreas Steffen
|
f565d0c575
|
merged pluto's PGP certificate parsing with charon's
|
2009-11-10 23:54:04 +01:00 |
|
Andreas Steffen
|
e92e19c177
|
pluto ignores proprietary Juniper SRX notification 40001
|
2009-11-05 08:38:00 +01:00 |
|
Andreas Steffen
|
4c68a85a75
|
implemented path length constraint checkinf for IKEv2
|
2009-11-04 23:37:15 +01:00 |
|
Andreas Steffen
|
8fac84bcdd
|
check if acerts linked_list has been initialized before destroying it
|
2009-11-04 19:36:02 +01:00 |
|
Andreas Steffen
|
c95671cec2
|
implemented path length constraint checking for IKEv1
|
2009-11-04 18:10:31 +01:00 |
|
Andreas Steffen
|
efab9f551d
|
removed redundant and buggy debug statement
|
2009-11-04 14:28:20 +01:00 |
|
Andreas Steffen
|
fae322219f
|
output optional pathLenConstraint in ipsec listcacerts
|
2009-11-04 07:30:07 +01:00 |
|
Andreas Steffen
|
a58b1722b0
|
version bump to 4.3.6
|
2009-11-02 22:47:55 +01:00 |
|
Andreas Steffen
|
f893bce3e7
|
fixed a memory leak in OCSP fetching
|
2009-10-29 10:00:19 +01:00 |
|
Heiko Hund
|
158e9386d2
|
setting the IP family enables mixed tunnels
|
2009-10-16 14:50:12 +02:00 |
|
Andreas Steffen
|
215b0402b3
|
use directory enumerator to load authcerts
|
2009-10-15 18:01:10 +02:00 |
|
Andreas Steffen
|
ff1ca9a8a3
|
cleaned out some bugs in refactoring of ac.c
|
2009-10-15 17:30:04 +02:00 |
|
Andreas Steffen
|
38031878dd
|
moved .gitignore for pool
|
2009-10-15 14:58:09 +02:00 |
|
Andreas Steffen
|
270bb348e3
|
pluto now supports SQL-based virtual IP pools
|
2009-10-14 14:30:14 +02:00 |
|
Andreas Steffen
|
27f4dd33b2
|
use definitions from libstrongswan/attributes/attributes.h
|
2009-10-13 13:55:06 +02:00 |
|
Andreas Steffen
|
a86d534b4c
|
prepended all ISAKMP notification message types with ISAKMP_
|
2009-10-12 13:47:22 +02:00 |
|
Andreas Steffen
|
295e92fe36
|
fixed output of offered CA
|
2009-10-11 21:24:39 +02:00 |
|
Andreas Steffen
|
e8e2a147db
|
fixed broken smartcard support (bug #91)
|
2009-10-11 21:14:05 +02:00 |
|
Andreas Steffen
|
1c75e3404d
|
some missing refactoring changes
|
2009-10-11 20:14:18 +02:00 |
|
Andreas Steffen
|
d4acf1dd3c
|
myids might not be defined yet
|
2009-10-11 18:05:38 +02:00 |
|
Andreas Steffen
|
0004ee1687
|
fixed refactoring bug
|
2009-10-11 16:34:04 +02:00 |
|
Andreas Steffen
|
40441ddd39
|
removed orphaned sha1.c
|
2009-10-10 22:05:59 +02:00 |
|
Andreas Steffen
|
17722d4489
|
replaced struct id by identification_t
|
2009-10-10 21:19:38 +02:00 |
|
Andreas Steffen
|
878fc472e9
|
hex_str() isn't used externally any more
|
2009-10-08 13:04:07 +02:00 |
|
Andreas Steffen
|
e64b4e96c9
|
parsing of generalNames is not needed any more
|
2009-10-08 12:42:29 +02:00 |
|
Andreas Steffen
|
88212ee6e7
|
use of asn1_build_known_oid()
|
2009-10-08 12:35:36 +02:00 |
|
Andreas Steffen
|
0354d5703d
|
migrated public key IDs to identification_t
|
2009-10-08 11:25:43 +02:00 |
|
Andreas Steffen
|
84e390fdc4
|
list subjectAltNames
|
2009-10-06 23:50:26 +02:00 |
|
Andreas Steffen
|
20afe5e9f5
|
some ipsec listall finetuning
|
2009-10-06 23:19:46 +02:00 |
|
Andreas Steffen
|
ce2f2461e0
|
pluto and charon now have the same ipsec listall output format
|
2009-10-06 16:49:46 +02:00 |
|
Andreas Steffen
|
cf85e1319b
|
streamlined output from get_validity()
|
2009-10-06 14:22:27 +02:00 |
|
Andreas Steffen
|
fc12e3cd2e
|
pluto now uses x509 plugin for attribute certificate handling
|
2009-10-05 07:24:28 +02:00 |
|
Andreas Steffen
|
0ea9cbc6e9
|
fixed output of authKeyID
|
2009-10-02 21:20:45 +02:00 |
|
Andreas Steffen
|
eb4544f773
|
fixes multiple IPsec SAs with IKEv1 Mode Config
|
2009-10-01 09:41:35 +02:00 |
|
Andreas Steffen
|
0c8d08068e
|
pluto's crl handling now uses the x509 plugin
|
2009-09-30 09:29:15 +02:00 |
|
Andreas Steffen
|
c72080cea8
|
abbreviated struct connection by connection_t
|
2009-09-27 23:49:37 +02:00 |
|
Andreas Steffen
|
0eff9f6539
|
pluto and scepclient now use the x509 plugin for certificates
|
2009-09-27 23:09:30 +02:00 |
|
Andreas Steffen
|
45cc7ba403
|
added and fixed debug output of version information
|
2009-09-23 16:21:18 +02:00 |
|
Andreas Steffen
|
c0be0977e7
|
fixed PKCS#7 wrapped certificate parsing
|
2009-09-23 15:52:30 +02:00 |
|
Andreas Steffen
|
677322b1bf
|
enforce coding rules
|
2009-09-22 21:50:28 +02:00 |
|