Martin Willi
|
5dcda9e25b
|
added strongswan.conf option to disable route installation
|
2008-06-10 06:58:39 +00:00 |
|
Martin Willi
|
5a22a02156
|
DNS resolving of ike_cfg hosts dynamically on demand
|
2008-06-06 15:05:54 +00:00 |
|
Martin Willi
|
1e9c46f13d
|
configure option for updown firewall scripts
|
2008-06-06 08:24:39 +00:00 |
|
Martin Willi
|
915e04b2dd
|
extended leak detective white list for OpenSSL
|
2008-06-06 08:13:11 +00:00 |
|
Martin Willi
|
e581a31d6a
|
link against openssl crypto library only
|
2008-06-06 08:04:42 +00:00 |
|
Andreas Steffen
|
1e5522ffd7
|
convert comma-separated RDNs into slash-separated OpenSSL --subject format
|
2008-06-05 19:28:08 +00:00 |
|
Martin Willi
|
6649a3ca80
|
fixed --utc parsing position
support for DN filtering usign id="CN=asdf, O=asdf",addr=1.1.1.1
changed order of --leases columns
|
2008-06-05 13:56:10 +00:00 |
|
Martin Willi
|
4fa74562ae
|
fixed UTC identitation
implement filtering in --leases
|
2008-06-05 08:52:27 +00:00 |
|
Martin Willi
|
0f7aecf402
|
fixed NULL string mysql parameter
|
2008-06-05 08:24:55 +00:00 |
|
Andreas Steffen
|
89c87995e2
|
cosmetics in size field of ipsec pool --status command
|
2008-06-04 22:20:19 +00:00 |
|
Martin Willi
|
011b1cca94
|
do not roam IKE_SA in created or deleting state
|
2008-06-04 14:31:06 +00:00 |
|
Martin Willi
|
2ba1f9e761
|
added pool statistics (size, online, lease count, with usage ratio)
|
2008-06-04 14:01:44 +00:00 |
|
Martin Willi
|
f3e11fc478
|
some input validation checks for --add and --resize
--purge keeps an entry for each address to allow their reallaction
|
2008-06-04 13:18:55 +00:00 |
|
Martin Willi
|
f13e23754f
|
tolerating chown failures on installation, required to build some packages
|
2008-06-04 12:09:24 +00:00 |
|
Martin Willi
|
9fa66e8bbf
|
removed unused variable
|
2008-06-03 12:14:02 +00:00 |
|
Andreas Steffen
|
0655fe4fd8
|
CIRCLEQ patch submitted by Jay Pfeifer
|
2008-05-29 07:49:47 +00:00 |
|
Andreas Steffen
|
0caf2b936e
|
added missing comma in enumeration
|
2008-05-29 06:55:03 +00:00 |
|
Andreas Steffen
|
7fe3ae88e4
|
handle default key sizes in openssl_crypter
|
2008-05-28 12:20:38 +00:00 |
|
Andreas Steffen
|
8f7074cf2e
|
version bump to 4.2.4
|
2008-05-25 10:35:39 +00:00 |
|
Andreas Steffen
|
f9b1bcad24
|
do not list empty certuribase strings
|
2008-05-24 05:47:37 +00:00 |
|
Andreas Steffen
|
ed26207d08
|
fixed copy-and-paste error
|
2008-05-23 19:23:04 +00:00 |
|
Andreas Steffen
|
49b2395e3b
|
check if parsing of the RSA public key in an X.509 certificate was successful
|
2008-05-23 19:22:37 +00:00 |
|
Andreas Steffen
|
7dfb8a1bde
|
fix caption alignment if date is displayed in local time
|
2008-05-23 19:21:08 +00:00 |
|
Andreas Steffen
|
731ac6bf52
|
check if crypter is available in pem_to_bin()
|
2008-05-23 19:18:08 +00:00 |
|
Martin Willi
|
7624dbf068
|
process payload length more strictly
|
2008-05-23 18:23:17 +00:00 |
|
Martin Willi
|
5e17e35c8d
|
fixed some compiler warnings
|
2008-05-23 15:49:43 +00:00 |
|
Andreas Steffen
|
c7d81ad12c
|
added --utc option to ipsec pool
|
2008-05-23 15:46:25 +00:00 |
|
Martin Willi
|
de3d65a132
|
filtering out non matching path probing pairs explicitly
|
2008-05-23 15:43:42 +00:00 |
|
Andreas Steffen
|
0672aa7b0e
|
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
|
2008-05-23 14:24:24 +00:00 |
|
Andreas Steffen
|
eaa1399812
|
fixed the strongswan.conf path
|
2008-05-22 21:59:30 +00:00 |
|
Andreas Steffen
|
7199d22e77
|
implement basic listing of attribute certificates
|
2008-05-22 21:58:22 +00:00 |
|
Andreas Steffen
|
be1585c587
|
log received DH groups and PRFs if no common proposal is found
|
2008-05-22 14:18:44 +00:00 |
|
Tobias Brunner
|
17188f20dd
|
Id and typo
|
2008-05-22 12:13:10 +00:00 |
|
Tobias Brunner
|
346e9c5712
|
added the ECP groups from RFC 5114
|
2008-05-22 11:55:05 +00:00 |
|
Tobias Brunner
|
fc1a31d54b
|
added ECDH with OpenSSL (see RFC 4753)
|
2008-05-22 11:39:17 +00:00 |
|
Tobias Brunner
|
31430acc1b
|
correctly initialize the mediation and connection manager
|
2008-05-22 11:33:35 +00:00 |
|
Andreas Steffen
|
58ac5e2ff4
|
fixed segmentation fault caused by malformed attribute certificates
|
2008-05-21 22:53:45 +00:00 |
|
Martin Willi
|
e1d2435dbf
|
fixed parsing of UNKNOWN_PAYLOADs
|
2008-05-21 21:53:38 +00:00 |
|
Andreas Steffen
|
0005cee527
|
fixed typo
|
2008-05-21 21:52:59 +00:00 |
|
Andreas Steffen
|
4d9c95ffcd
|
version bump to 4.2.3
|
2008-05-21 18:40:11 +00:00 |
|
Martin Willi
|
85a119bc0b
|
replying to COOKIE2 mobike notify properly
including COOKIE2 ourself after path probing
|
2008-05-21 17:56:21 +00:00 |
|
Martin Willi
|
ce62751b60
|
writing guest pid to file (simplifies debugging)
|
2008-05-21 16:02:16 +00:00 |
|
Martin Willi
|
cb9edc54eb
|
using fixed size keys in key derivation for AES-XCBC PRF
|
2008-05-21 14:58:03 +00:00 |
|
Martin Willi
|
4f23ec78d1
|
added more verbosity if signature hash OID is unknown
|
2008-05-21 13:01:58 +00:00 |
|
Andreas Steffen
|
8bbb212f3a
|
list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen
|
2008-05-20 21:54:33 +00:00 |
|
Andreas Steffen
|
49aeafc502
|
removed debug statement
|
2008-05-20 16:23:58 +00:00 |
|
Andreas Steffen
|
7f02156ebf
|
fixed whitespace eating in plugin loader
|
2008-05-20 15:03:15 +00:00 |
|
Andreas Steffen
|
367cc86f4a
|
added missing break in case statement
|
2008-05-19 20:10:26 +00:00 |
|
Martin Willi
|
da1bc5e860
|
fixed loading of smp plugin
|
2008-05-19 14:20:07 +00:00 |
|
Tobias Brunner
|
081a14cd33
|
added an error message when strongswan.conf cannot be read
|
2008-05-19 13:20:33 +00:00 |
|