denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,404 Commits 1 Branch 0 Tags
b6032b24008e032f2b957ca615161b9e0a76575a
Commit Graph
1336 Commits
Author SHA1 Message Date
Andreas Steffen f8ab4a8f76 log shared secret with debug level 4 2008-04-06 17:51:29 +00:00
Andreas Steffen 1b247314fd default is hostaccess=no 2008-04-06 12:15:05 +00:00
Andreas Steffen bc722433be version bump to 4.2.1 2008-04-06 12:12:13 +00:00
Martin Willi a9184df36b do not build leak_detective.o if not enabled 2008-04-04 11:38:16 +00:00
Martin Willi 2429fb4958 defining hook functions ourself as definition in uClibc and glibc differ, fixes #36 2008-04-04 11:37:19 +00:00
Martin Willi 67d147e888 removed unused gmp.h to build libstrongswan without libgmp 2008-04-04 11:13:14 +00:00
Tobias Brunner 4c7e6112c5 and another 2008-04-03 15:22:06 +00:00
Tobias Brunner 471f923071 fixed two other memory leaks 2008-04-03 15:13:25 +00:00
Martin Willi cce97b647a redirecting all leak_report information to stderr 2008-04-03 11:25:08 +00:00
Martin Willi 6c45e62242 some code cleanups 2008-04-03 10:22:17 +00:00
Tobias Brunner 84b18d5fc7 replaced mutex in leak detective with thread scheduling 2008-04-03 09:24:35 +00:00
Tobias Brunner 8e91a36314 thread locking for sender and processor optimized 2008-04-03 09:19:12 +00:00
Martin Willi 6af29ccf33 configure option in strongswan.conf for thread count 2008-04-03 08:37:24 +00:00
Martin Willi 6e4e27f8de updated test data to use correct encoding data 2008-04-03 06:45:17 +00:00
Andreas Steffen 196b28a470 demoted more notify debug messages to level 2 2008-04-02 19:15:05 +00:00
Andreas Steffen f342cc08c0 make peer IP address and peer IP available to the xauth_module.verify_secret() method 2008-04-02 19:04:45 +00:00
Andreas Steffen 97da3d2de0 renamed AES_cbc_encrypt to SS_AES_cbc_encrypt due to name collision with OpenSSL library 2008-04-02 18:51:10 +00:00
Andreas Steffen 7a9d3ae471 support of force_keepalive parameter 2008-04-02 18:35:23 +00:00
Tobias Brunner c3f803c4c6 fixing some memory leaks 2008-04-02 18:21:03 +00:00
Tobias Brunner f049b29491 securing total_threads with the mutex while destroying the processor 2008-04-02 15:28:08 +00:00
Andreas Steffen 1ee637d8b1 generate debug output if ocsp response does not contain status information for a given certificate 2008-04-02 14:28:17 +00:00
Martin Willi 513f20156a fixed med_db test 2008-04-02 12:27:39 +00:00
Martin Willi 489e3da0ea updated mediation database to public key authentication 
added mysql table definition, test data
testcase
 2008-04-02 12:25:14 +00:00
Martin Willi e29ebcb1af fixed compile warnings 2008-04-02 09:54:20 +00:00
Andreas Steffen 281d04502e additional debug line makes certificate status checking more understandable 2008-04-02 06:25:59 +00:00
Andreas Steffen 9372f44c67 workaround for parsing IPv6 PSKs requires extract_last_token() 2008-04-01 20:40:29 +00:00
Andreas Steffen 080555e76a demoted received notify debug message to level 2 2008-04-01 20:22:38 +00:00
Martin Willi 372b7ac7e2 added missing files for commit [3721] 2008-04-01 15:03:02 +00:00
Martin Willi 9d1c384b4b loading of subjectPublicKeyInfo wrapped keys using KEY_ANY (openssl format) 
testcase
 2008-04-01 14:51:31 +00:00
Martin Willi 0ea70ca66e removed unneded publicKeyInfo ASN1 structure 2008-04-01 13:39:12 +00:00
Andreas Steffen 392f4e17c2 minimal stroke_list_ocsp() implementation 2008-04-01 12:11:09 +00:00
Tobias Brunner 9c2a905d63 stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID 2008-04-01 11:38:18 +00:00
Martin Willi 45d66f5af6 some simplifications to trusted_enumerator_t 2008-04-01 10:56:08 +00:00
Martin Willi 1bb85edffe checking pretrusted but bad certificates only once 2008-04-01 10:43:44 +00:00
Andreas Steffen 946d1ecd59 stroke_list groups certificates by issuer 2008-04-01 10:26:27 +00:00
Martin Willi dd2efc2c03 replaced the example manager database by a sql script 2008-04-01 07:16:48 +00:00
Martin Willi e411f94d44 changed enumerator implementation to handle reentrant code 2008-04-01 06:51:55 +00:00
Andreas Steffen c096472605 minor changes in debug output 2008-03-31 21:59:32 +00:00
Andreas Steffen aaa7643b73 put DN in double quotes 2008-03-31 21:08:56 +00:00
Andreas Steffen a92ea0ccb3 output error message if maximum ca path length is reached 2008-03-31 20:42:57 +00:00
Andreas Steffen eafc0654ca ipsec list suppresses duplicates 2008-03-31 20:21:24 +00:00
Tobias Brunner e5ab32a7ee timing of connectivity checks adjusted 2008-03-31 15:04:38 +00:00
Martin Willi 9e72d3bcaf defining ME globally, as we need it in plugins 2008-03-31 15:01:43 +00:00
Andreas Steffen 58a05045cc utc argument in %#T was missing 2008-03-31 14:36:00 +00:00
Tobias Brunner 9e183cd5b8 signal fixed 2008-03-31 14:27:16 +00:00
Tobias Brunner f98736aee6 changed order of server and peer reflexive endpoints (and also the priorities) 2008-03-31 10:56:49 +00:00
Martin Willi 0f7ef3d2a0 received certificates have least priority 
fixed manager unlocking
 2008-03-31 08:43:18 +00:00
Martin Willi d69b267d58 fixed refcounting in certificate trustchain validation 2008-03-31 07:16:12 +00:00
Andreas Steffen dcc777652e changed error message 2008-03-29 13:26:53 +00:00
Andreas Steffen 40f9006845 output uptime in status in local time 2008-03-29 08:55:09 +00:00