denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,211 Commits 1 Branch 0 Tags
8fb4edc4ff59fca5dba590f567ffa559bf28522e
Commit Graph
2817 Commits
Author SHA1 Message Date
Martin Willi 8fb4edc4ff handle plugin loading failures 2009-09-01 16:20:45 +02:00
Martin Willi d6a45127dc plugins marked with a '!' are handled as critical: cancel if loading fails 2009-09-01 16:08:28 +02:00
Tobias Brunner deddfde91b Description of new lifetime limits added to manpage. 2009-09-01 12:54:33 +02:00
Tobias Brunner 686aba2589 Added lifetime/margintime keywords as alias for keylife/rekeymargin. 2009-09-01 12:54:33 +02:00
Tobias Brunner e75f423753 Refactored the lifetime_cfg_t struct to be simpler and more expressive. Initialization is now static. 2009-09-01 12:54:33 +02:00
Tobias Brunner abff49a7ff Handling of new lifetime limits added to stroke. 2009-09-01 12:53:44 +02:00
Tobias Brunner ca41aa0602 Added keywords for the new lifetime limits to starter. 2009-09-01 12:53:44 +02:00
Tobias Brunner 9c7faa8618 Added parser for unsigned long long ints to starter. 2009-09-01 12:53:44 +02:00
Tobias Brunner f40c115531 If no inbound CHILD_SA is found, try to find an outbound SA. 
Due to the new lifetime limits in- and outbound SAs may expire
individually.
 2009-09-01 12:53:44 +02:00
Tobias Brunner 1087b9cebb Set the packet and byte limits in the netlink and pfkey kernel interfaces. 2009-09-01 12:53:44 +02:00
Tobias Brunner e3c7e72973 Terminology and return value of get_lifetime of child_sa_t corrected. 2009-09-01 12:53:44 +02:00
Tobias Brunner cb123493d1 child_sa_t adapted to the new lifetime configuration. 2009-09-01 12:53:43 +02:00
Tobias Brunner 888af96343 Adapted the kernel interfaces to the new lifetime configuration. 2009-09-01 12:53:13 +02:00
Tobias Brunner e0a8a8c3ec Adapted the config backends to the new lifetime configuration. 2009-09-01 12:50:50 +02:00
Tobias Brunner caf87c7dcb child_cfg_t now takes a lifetime_cfg_t to configure the lifetime limits. Also adjusted the jitter calculation, so it works for values > RAND_MAX. 2009-09-01 12:50:50 +02:00
Tobias Brunner 86e4728550 lifetime_cfg_t added to configure lifetime limits of a CHILD_SA. 2009-09-01 12:50:50 +02:00
Tobias Brunner e822fc576a Added side effect free min and max macros. 2009-09-01 12:50:50 +02:00
Martin Willi ad31f98a74 fixed certificate_t enum names 2009-09-01 11:28:05 +02:00
Andreas Steffen f561d6f2e9 changed prefix of crl_reason_t values from CRL_ to CRL_REASON_ 2009-08-31 23:21:50 +02:00
Andreas Steffen dc4aadc3f2 use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 23:05:45 +02:00
Andreas Steffen a63f62c03b use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 22:58:34 +02:00
Martin Willi 6180a55852 use time_monotonic() instead of time() for statistics and time difference calculations 2009-08-31 18:00:28 +02:00
Martin Willi de5784452b use time_monotonic() instead of gettimeofday() for time difference calculations 2009-08-31 15:25:03 +02:00
Martin Willi 3d5818ec38 use monotonic time source in convar->timed_wait, and in the scheduler using it 2009-08-31 15:13:48 +02:00
Martin Willi 3f310c0d1f implemented a monotonic timestamping function, unaffected from system time changes 2009-08-31 15:03:35 +02:00
Martin Willi 1d39663f7a do not depend on gcrypt autoconf macros 2009-08-31 13:14:54 +02:00
Martin Willi 8706a151ff added ECGDSA specific OIDs 2009-08-31 10:34:00 +02:00
Martin Willi 8365f7cd81 fixed crash in crl listing 2009-08-31 10:21:38 +02:00
Andreas Steffen c9f74892cc clear RSA private key chunks after use 2009-08-30 19:12:29 +02:00
Andreas Steffen 1982096aa0 ASN.1 DER encoding of private key is not needed anymore 2009-08-30 19:05:43 +02:00
Andreas Steffen 735628f3e3 removed position debug output 2009-08-30 17:37:27 +02:00
Martin Willi bf3b8c90d0 added workaround to parse PEM encoded PGP key with KEY_RSA 2009-08-28 17:25:07 +02:00
Martin Willi 4593ef51fd implemented PGP Secret-Key Packet parsing 2009-08-28 17:23:58 +02:00
Martin Willi caf1af1d9f fixed memleak 2009-08-28 16:16:39 +02:00
Andreas Steffen 2aa67d2636 .., but a comment might be helpful 2009-08-28 09:28:39 +02:00
Andreas Steffen 6be3f0f1d0 removed TODO reminder 2009-08-28 09:26:46 +02:00
Andreas Steffen be04eef270 allow choice of digest algorithm in certificate generation 2009-08-28 09:08:03 +02:00
Andreas Steffen e201f53e93 build_curve_signature() processes hash not data 2009-08-27 20:41:29 +02:00
Andreas Steffen 1dbaec2177 NID_hash and NID_ec_curve were interchanged 2009-08-27 20:28:41 +02:00
Andreas Steffen ac6a0d5038 verify_signature() now processes hash not data 2009-08-27 20:18:22 +02:00
Andreas Steffen c812802482 NID_hash and NID_ec_curver were interchanged 2009-08-27 20:11:49 +02:00
Martin Willi 10b2898d3c verify that the ECDSA auth signature was done with the correct curve 2009-08-27 17:58:02 +02:00
Martin Willi 472cb4ce77 distinguish between RFC 4754 (concatenated) and RFC 3279 (DER encoded) ECDSA signatures 2009-08-27 17:37:42 +02:00
Andreas Steffen 78aa4ebd62 OID_EC_PUBLICKEY has a parameters field, defining the elliptic curve 2009-08-27 16:34:16 +02:00
Andreas Steffen 263872c47d added OID_EC_PUBLIC_KEY algorithmIdentifier 2009-08-27 16:07:59 +02:00
Andreas Steffen 050649ac41 cosmetics 2009-08-27 15:35:56 +02:00
Martin Willi cec37b643a fixed return value 2009-08-27 15:28:45 +02:00
Martin Willi 7ef310f5b4 do not append a NULL paramter to ECDSA algorithmIdentifiers 2009-08-27 15:28:21 +02:00
Martin Willi 9436b31c94 PKI tool supports certificate verification 2009-08-27 14:43:40 +02:00
Martin Willi ed75a4dd69 do not flush cached encodings, keys are responsible for it 2009-08-27 13:59:30 +02:00