Tobias Brunner
809750d72b
pluto: Fixed potential memory leak when processing requested virtual IPs.
2011-04-14 18:10:52 +02:00
Tobias Brunner
267d47d6f2
pluto: Properly free buffer in error cases in read_packet.
2011-04-14 18:10:27 +02:00
Tobias Brunner
e51cae33a9
Fix compiler warnings at creation of CRL cache filenames.
...
This was not really a problem because ptr is the first member of a chunk_t
and it contains a null-terminated string at that point. But it's clearer
this way.
2011-04-14 18:10:27 +02:00
Tobias Brunner
64f4237b1e
Fix "set nexthop to him when instantiating rightallowyes template with leftnexthop == right"
...
This fixes commit 280f6b1ab2 .
2011-04-14 18:10:26 +02:00
Tobias Brunner
e54a2bd20e
pluto: Properly initialize a.continuation.
2011-04-12 17:39:11 +02:00
Tobias Brunner
2cec32e8eb
pluto: Properly initialize ta.encrypter.
2011-04-12 17:22:50 +02:00
Tobias Brunner
7f1fb6b69d
pluto: Fixed off by one error when reading private keys.
2011-04-12 15:54:29 +02:00
Tobias Brunner
24e0595437
Removed unused variables.
2011-04-12 14:44:49 +02:00
Tobias Brunner
c38877b395
pluto: Properly free secrets in error cases.
2011-02-10 16:49:42 +01:00
Tobias Brunner
84545f6e7c
Some typos fixed.
2011-02-07 11:39:41 +01:00
Tobias Brunner
2b2eecb6ec
Fixed whatis entry of pluto manpage.
2011-02-07 11:39:41 +01:00
Tobias Brunner
189cb3a1de
Escape - in manpages when used as minus sign.
2011-02-07 11:39:41 +01:00
Martin Willi
b3d359e58f
Use a generic getter for all numerical X.509 constraints
2011-01-05 16:46:05 +01:00
Martin Willi
a6478a0402
Simplified format of x509 CRL URI parsing/enumerator
2011-01-05 16:46:03 +01:00
Martin Willi
5dba5852fc
Slightly renamed X509_NO_PATH_LEN_CONSTRAINT to use it for PolicyConstraints, too
2011-01-05 16:46:02 +01:00
Martin Willi
4e508517d7
Added support for CRL Issuers to x509 and OpenSSL plugins
2011-01-05 16:45:55 +01:00
Andreas Steffen
27a66f9393
implemented wrap around of registered IKEv1 algorithm names
2010-12-26 17:11:02 +01:00
Martin Willi
d86bb6ef4d
Implemented Traffic Flow Confidentiality padding in kernel_interface
2010-12-20 09:45:39 +01:00
Andreas Steffen
5932f41fcc
trace back crypto algorithms to the plugins that registered them
2010-12-18 16:31:12 +01:00
Tobias Brunner
5feda42724
pluto: Fixed a regression introduced in f565d0c575.
...
Since scx_add could return a previously created smartcard object, using
sc->last_cert to store the newly added certificate could lead to segfaults.
2010-10-26 09:58:13 +02:00
Tobias Brunner
71711b67b4
pluto: Locking fixed in cert_add.
2010-10-26 09:58:13 +02:00
Andreas Steffen
1f2c328355
payloads are not aligned to 4 byte boundaries
2010-10-25 19:31:07 +02:00
Andreas Steffen
4b7d1262d9
define state_story for STATE_UNDEFINED
2010-10-16 16:15:10 +02:00
Egbert Koening
4de8398f93
fix segfault when reading certificate from smartcard
2010-10-15 11:09:38 +02:00
Tobias Brunner
4d10e260de
pluto: Install inbound policies together with outbound policies.
...
This avoids an error message when uninstalling the policies and charon
did it already like this.
2010-10-14 13:53:20 +02:00
Andreas Steffen
2b3124c76d
fixed release of virtual IP for XAUTH identities
2010-09-26 10:17:01 +02:00
Tobias Brunner
0a1233e642
Moved man pages for config files to a separate directory.
2010-09-10 12:01:19 +02:00
Andreas Steffen
f3051ebf53
fixed memory leak
2010-09-09 21:38:41 +02:00
Martin Willi
d987946e80
Added a final flag to builder registration to enumerate the actually supported algorithms
2010-09-03 18:09:48 +02:00
Tobias Brunner
1dfd6d18ff
pluto: Removed unused lifetime from raw_eroute.
2010-09-02 19:04:26 +02:00
Tobias Brunner
b5be105aaf
pluto: Added support for statically configured reqids.
2010-09-02 19:04:25 +02:00
Tobias Brunner
f8edbc22c7
pluto: Make marks available in updown script.
2010-09-02 19:04:25 +02:00
Tobias Brunner
190ee00c94
pluto: Fixed comparison of connections, if marks are specified.
2010-09-02 19:04:25 +02:00
Tobias Brunner
a280ba9525
pluto: Store xfrm marks on connection and use them when installing SAs and policies.
2010-09-02 19:04:25 +02:00
Tobias Brunner
f23e7394ae
pluto: Added PLUTO_UDP_ENC argument to updown script.
...
This contains the remote UDP port in case of UDP encapsulated ESP.
2010-09-02 19:04:25 +02:00
Tobias Brunner
3251294ceb
pluto: Return value fixed.
2010-09-02 19:04:25 +02:00
Tobias Brunner
d499bdf393
pluto: Removed bare shunt table.
2010-09-02 19:04:24 +02:00
Tobias Brunner
76467e030c
pluto: Handle changed NAT mappings via libhydra's kernel interface.
2010-09-02 19:04:24 +02:00
Tobias Brunner
a0cbce9e7c
pluto: Removed no_klips flag (--noklips option).
2010-09-02 19:04:24 +02:00
Tobias Brunner
eeca1b0466
pluto: Removed references to KLIPS from documentation, log messages and comments.
2010-09-02 19:04:24 +02:00
Tobias Brunner
6374671110
pluto: Added --debug-kernel as alias for --debug-klips.
2010-09-02 19:04:24 +02:00
Tobias Brunner
ebdbf28a4a
pluto: Replaced DBG_KLIPS with DBG_KERNEL.
2010-09-02 19:04:24 +02:00
Tobias Brunner
8dade8e6eb
pluto: Removed the KLIPS preprocessor flag.
2010-09-02 19:04:24 +02:00
Tobias Brunner
fc06e34e46
pluto: Removed unneeded kernel abstractions.
2010-09-02 19:04:23 +02:00
Tobias Brunner
36ff473016
pluto: Completely removed struct kernel_ops.
2010-09-02 19:04:23 +02:00
Tobias Brunner
296972aeaf
pluto: Refactored PF_KEY capabilities registration.
...
Although we use the kernel interface from libhydra we still need this to make
the available algorithms known to pluto.
2010-09-02 19:04:23 +02:00
Tobias Brunner
4f898afc22
pluto: Removed unneeded functions from PF_KEY interface.
...
We still use the algorithm registration.
2010-09-02 19:04:23 +02:00
Tobias Brunner
03ee9623f3
pluto: Completely removed orphaned_holds.
2010-09-02 19:04:23 +02:00
Tobias Brunner
44b4f0d06f
pluto: Install IN policy of a shunt eroute with protocol.
2010-09-02 19:04:23 +02:00
Tobias Brunner
9052216813
pluto: Fixed byte-order of ports in traffic selectors.
2010-09-02 19:04:23 +02:00