Tobias Brunner
7b1fc2f7cf
Fixing a compiler warning when building with -Wextra.
2010-03-16 12:42:58 +01:00
Tobias Brunner
01b87c2bc1
Fixed a bug in pluto's x509 handling.
...
This bug would have lead to a segmentation fault, if no public key could
have been extracted from a certificate.
2010-03-12 17:28:20 +01:00
Andreas Steffen
4cedab5ad7
deleted old strongSwan VIDs
2010-03-12 03:29:18 +01:00
Andreas Steffen
469d448333
recognize strongSwan VID
2010-03-07 17:52:04 +01:00
Martin Willi
3eb633e1e6
Remove the invalid cast in time() parameter, as reported by Marius Tomaschewski.
2010-03-04 08:44:23 +01:00
Tobias Brunner
38da64fe12
Detect windows hosts to add specific workarounds.
2010-02-12 10:57:39 +01:00
Tobias Brunner
71baf5a8f0
Adding support for AES GMAC (RFC4543).
2010-02-12 10:57:39 +01:00
Tobias Brunner
3cc0cc4332
Increased the buffer for netlink responses.
...
If an error occurs while manipulating policies in the kernel, the
original netlink request gets attached to the response.
Prior to Linux 2.6.32 the size in the netlink header of the response was
wrong.
2010-02-05 20:10:54 +01:00
Andreas Steffen
6c9c0baee9
init_fetch() changed to fetch_initialize()
2010-02-05 06:17:02 +01:00
Andreas Steffen
889ff9389b
renamed init_fetch() to fetch_initialize()
2010-02-02 19:44:34 +01:00
Tobias Brunner
dc5969242f
Join pluto's fetching thread instead of detaching it in order to avoid that the leak-detective reports a memleak.
2010-02-02 15:23:39 +01:00
Andreas Steffen
bf1e0df7c5
warn if loaded local certificate is invalid
2010-02-01 12:29:32 +01:00
Andreas Steffen
dd37fa8620
pluto and charon are using the same strongSwan Vendor ID
2010-01-11 00:43:46 +01:00
Tobias Brunner
e9a1852aac
Pluto's fetcher thread is now created via libstrongswan.
2009-12-26 15:50:34 +01:00
Tobias Brunner
070ac5b0b7
Check if libpthread is required or not.
2009-12-23 17:02:26 +01:00
Andreas Steffen
b6623e87b4
IKEv1 daemon supports DNS and NBNS server assignment from database
2009-12-16 21:49:51 +01:00
Andreas Steffen
de962d6e7d
add IKEv1 support for the Camellia cipher
2009-12-15 19:13:06 +01:00
Andreas Steffen
353b829177
fixed IKEv1 support of HMAC_SHA2_256_96
2009-12-09 09:33:32 +01:00
Andreas Steffen
a07531250e
IKEv1 support of ESP SHA2_HMAC with correct truncation
2009-12-09 00:24:42 +01:00
Andreas Steffen
eba568563c
changed error messages in the case of faulty esp and ike strings
2009-11-24 16:45:52 +01:00
Andreas Steffen
2eeab939a0
do not send all available kernel algorithms if esp string is faulty
2009-11-24 16:38:10 +01:00
Elmar Vonlanthen
792876ff87
check if alg_info_esp exists
2009-11-24 16:15:12 +01:00
Andreas Steffen
cda8ec7afc
added some parentheses
2009-11-24 14:36:17 +01:00
Andreas Steffen
c4570d188e
issue error message for expired certificates in OCSP trust chain checking
2009-11-24 12:37:38 +01:00
Martin Willi
0850e33518
Fixed compiler warning about missing return value
2009-11-12 11:17:02 +01:00
Andreas Steffen
209f52cb63
fixed 4.3.6 ocsp regression
2009-11-11 11:06:07 +01:00
Andreas Steffen
a618e33e8b
merged pluto's PGP certificate parsing with charon's
2009-11-10 23:54:51 +01:00
Andreas Steffen
f565d0c575
merged pluto's PGP certificate parsing with charon's
2009-11-10 23:54:04 +01:00
Andreas Steffen
e92e19c177
pluto ignores proprietary Juniper SRX notification 40001
2009-11-05 08:38:00 +01:00
Andreas Steffen
4c68a85a75
implemented path length constraint checkinf for IKEv2
2009-11-04 23:37:15 +01:00
Andreas Steffen
8fac84bcdd
check if acerts linked_list has been initialized before destroying it
2009-11-04 19:36:02 +01:00
Andreas Steffen
c95671cec2
implemented path length constraint checking for IKEv1
2009-11-04 18:10:31 +01:00
Andreas Steffen
efab9f551d
removed redundant and buggy debug statement
2009-11-04 14:28:20 +01:00
Andreas Steffen
fae322219f
output optional pathLenConstraint in ipsec listcacerts
2009-11-04 07:30:07 +01:00
Andreas Steffen
a58b1722b0
version bump to 4.3.6
2009-11-02 22:47:55 +01:00
Andreas Steffen
f893bce3e7
fixed a memory leak in OCSP fetching
2009-10-29 10:00:19 +01:00
Heiko Hund
158e9386d2
setting the IP family enables mixed tunnels
2009-10-16 14:50:12 +02:00
Andreas Steffen
215b0402b3
use directory enumerator to load authcerts
2009-10-15 18:01:10 +02:00
Andreas Steffen
ff1ca9a8a3
cleaned out some bugs in refactoring of ac.c
2009-10-15 17:30:04 +02:00
Andreas Steffen
38031878dd
moved .gitignore for pool
2009-10-15 14:58:09 +02:00
Andreas Steffen
270bb348e3
pluto now supports SQL-based virtual IP pools
2009-10-14 14:30:14 +02:00
Andreas Steffen
27f4dd33b2
use definitions from libstrongswan/attributes/attributes.h
2009-10-13 13:55:06 +02:00
Andreas Steffen
a86d534b4c
prepended all ISAKMP notification message types with ISAKMP_
2009-10-12 13:47:22 +02:00
Andreas Steffen
295e92fe36
fixed output of offered CA
2009-10-11 21:24:39 +02:00
Andreas Steffen
e8e2a147db
fixed broken smartcard support (bug #91 )
2009-10-11 21:14:05 +02:00
Andreas Steffen
1c75e3404d
some missing refactoring changes
2009-10-11 20:14:18 +02:00
Andreas Steffen
d4acf1dd3c
myids might not be defined yet
2009-10-11 18:05:38 +02:00
Andreas Steffen
0004ee1687
fixed refactoring bug
2009-10-11 16:34:04 +02:00
Andreas Steffen
40441ddd39
removed orphaned sha1.c
2009-10-10 22:05:59 +02:00
Andreas Steffen
17722d4489
replaced struct id by identification_t
2009-10-10 21:19:38 +02:00
Tobias Brunner