Tobias Brunner
b7b5bca048
pkcs11: Allow to build pkcs11 plugin on Android.
2011-10-31 18:55:27 +01:00
Tobias Brunner
23b50b776b
pkcs11: Use callback registration for pkcs11-manager.
...
Otherwise a plugin providing X509 decoding capabilities might be unloaded
before the manager which will result in a segmentation fault when
certificates in the manager's credential sets are to be destroyed.
2011-10-31 18:45:37 +01:00
Tobias Brunner
10b82be61f
pkcs11: Merged the ECDH into the DH implementation.
2011-10-31 18:45:37 +01:00
Tobias Brunner
89de89be57
pkcs11: Use get_ck_attribute for ECDH.
2011-10-31 18:45:37 +01:00
Tobias Brunner
cac6853180
pkcs11: Use get_ck_attribute for DH.
2011-10-31 18:45:37 +01:00
Tobias Brunner
8531106578
pkcs11: Method added to library to extract a single attribute from an object.
2011-10-31 18:45:36 +01:00
Tobias Brunner
6a5020fc67
pkcs11: Added names for CKA_* constants.
2011-10-31 18:45:36 +01:00
Tobias Brunner
4e346b1f97
pkcs11: Added support for ECDH.
2011-10-31 18:45:36 +01:00
Tobias Brunner
612e431305
pkcs11: Added definitions needed for ECDH to pkcs11.h.
2011-10-31 18:45:36 +01:00
Tobias Brunner
7c78a6e631
pkcs11: Specify object class and key type when deriving DH secrets.
...
pkcs11_softtoken on OpenSolaris requires this (probably others too).
2011-10-31 18:45:36 +01:00
Tobias Brunner
b730fd6fbd
pkcs11: Add features support.
2011-10-31 18:45:36 +01:00
Tobias Brunner
1bb5d7c3cb
pkcs11: Added support for DH.
2011-10-31 18:45:36 +01:00
Tobias Brunner
df241121fd
pkcs11: Error message fixed.
2011-10-31 18:45:35 +01:00
Tobias Brunner
1bb522bc34
pkcs11: Added support to generate random numbers on a token.
2011-10-31 18:45:35 +01:00
Tobias Brunner
deba3da5b0
pkcs11: Properly destroy mutex in pkcs11_hasher if no token found.
2011-10-31 18:45:29 +01:00
Andreas Steffen
7c57867ebd
Added features support to agent plugin
2011-10-30 17:59:23 +01:00
Andreas Steffen
1c2008f07f
Added features support to dnskey plugin
2011-10-30 17:57:16 +01:00
Andreas Steffen
80fe26ec74
Added features support to pgp plugin
2011-10-30 17:52:13 +01:00
Andreas Steffen
caebf7cee9
Added features support to pkcs1 plugin
2011-10-30 17:44:35 +01:00
Andreas Steffen
ffddcec322
added newline
2011-10-30 17:43:55 +01:00
Andreas Steffen
0770fa16f8
remove pem_encoder_encode
2011-10-30 17:21:57 +01:00
Andreas Steffen
e0442525bb
Add features support to pem plugin
2011-10-30 17:16:13 +01:00
Tobias Brunner
abb89a97d1
Some Doxygen fixes.
2011-10-28 21:24:52 +02:00
Tobias Brunner
075c706073
Copyright fixed.
2011-10-28 21:07:35 +02:00
Tobias Brunner
54ce738920
pluto: Compile warning fixed.
2011-10-27 15:42:44 +02:00
Tobias Brunner
3b8ed73708
pluto: plugin_list.* added to Android.mk.
2011-10-27 15:42:10 +02:00
Tobias Brunner
07bf080e6d
Added missing backslash.
2011-10-27 15:41:30 +02:00
Tobias Brunner
4683630442
Forgot to add Android.mk in ba5b559b41.
2011-10-26 18:31:34 +02:00
Tobias Brunner
8fde0b669b
Destroy objects hashtable after plugin_manager.
...
If plugins are not explicitly unloaded before library_deinit is called
there could have been a segfault because some plugins might unregister
objects during unloading/destruction.
2011-10-26 17:39:12 +02:00
Andreas Steffen
45542fff6c
Add features support to pubkey plugin
2011-10-26 12:16:54 +02:00
Andreas Steffen
e8eef89718
Add features support to x509 plugin
2011-10-26 12:09:03 +02:00
Andreas Steffen
b21cfa93f8
Cosmetics
2011-10-26 10:32:54 +02:00
Andreas Steffen
473c477978
added listplugins support to pluto and whack
2011-10-26 10:31:48 +02:00
Andreas Steffen
1f73f5c5c4
add listplugins to ipsec shell command
2011-10-26 09:30:58 +02:00
Tobias Brunner
87c65e76fc
Don't link to tnc libraries on Android as no tnc plugins are currently enabled.
2011-10-25 11:57:00 +02:00
Tobias Brunner
ba5b559b41
Build libtnccs on Android.
2011-10-25 11:56:26 +02:00
Andreas Steffen
5d36af6936
share some code between IMC and IMV managers
2011-10-25 09:45:35 +02:00
Andreas Steffen
61f7036e69
removed unneeded includes
2011-10-25 09:45:35 +02:00
Mirko Parthey
f3da58aaa9
Fix DNS error handling for keyexchange=ike.
...
starter fails to load a connection when a peer's DNS name is temporarily
unresolvable and keyexchange=ike was specified, which defaults to IKEv2.
The connection loads just fine in case of keyexchange=ikev2.
2011-10-25 09:44:17 +02:00
Andreas Steffen
f0a8bf47f7
refactored TNC framework
2011-10-25 01:10:16 +02:00
Andreas Steffen
c008d2cc46
moved imv_manager to libtnccs
2011-10-25 01:10:16 +02:00
Andreas Steffen
f0fa002fd1
moved imc_manager to libtnccs
2011-10-25 01:10:16 +02:00
Tobias Brunner
5d549cd4e1
Log if charon failed to establish a CHILD_SA but keeps the IKE_SA up.
2011-10-21 18:09:02 +02:00
Tobias Brunner
bb3357e886
starter: Android.mk updated to use kernel-netlink via libhydra.
2011-10-21 14:24:34 +02:00
Tobias Brunner
adab84533e
starter: Use kernel interfaces to flush SAD and SPD.
...
This now supports platforms where neither 'ip xfrm' nor 'setkey' are
available (like Android).
2011-10-21 14:24:34 +02:00
Tobias Brunner
f3a682c1ff
starter: Load plugins specific to starter.
2011-10-21 14:24:34 +02:00
Tobias Brunner
d19eaf7457
starter: INFO_FILE is not used anymore.
2011-10-21 14:24:34 +02:00
Tobias Brunner
677955e9d4
The load-tester plugin does not support SAD/SPD flushing.
2011-10-21 14:24:33 +02:00
Tobias Brunner
0e6aafb5b6
The kernel-klips plugin does currently not support SAD/SPD flushing.
2011-10-21 14:24:33 +02:00
Tobias Brunner
773572f9e0
Implemented flushing of SAD and SPD entries via PF_KEY.
2011-10-21 14:24:33 +02:00