Andreas Steffen
6d508e8f36
version bump to 4.5.2dr4
2011-04-02 07:46:16 +02:00
Andreas Steffen
bf2233b32d
updated ikev2/rw-eap-tnc scenarios
2011-04-01 19:44:25 +02:00
Miklos Vajna
fc16b361ef
Install systemd service file if systemd is available
2011-03-29 09:27:54 +02:00
Andreas Steffen
7aa2d1ca49
log TNC PEP decision with level 0
2011-03-25 12:49:05 +01:00
Martin Willi
952fb7b5a1
Increase whitelist message identity buffer to 128 bytes
2011-03-23 14:18:15 +01:00
Martin Willi
fc2e43eb27
Fix order of PURGE_* flags to be compatible with STROKE_PURGE_* keywords
2011-03-23 09:28:40 +01:00
Tobias Brunner
a6390879d5
Make availability of glob(3) optional in settings_t.
...
If glob(3) is not available just try to open the pattern as regular
file. The reason for this change is that glob(3) is not available on Android.
2011-03-22 19:21:26 +01:00
Tobias Brunner
913591ecb8
Make sure that files included in settings_t are regular files.
2011-03-22 19:21:15 +01:00
Tobias Brunner
f5958b6225
Define PLUGINDIR in Android.mk even though it is currently not used.
...
The combined plugin loader requires PLUGINDIR to be defined.
2011-03-22 17:41:37 +01:00
Tobias Brunner
566173366d
File lists in Android.mk files updated to those in the Makefiles.
2011-03-22 17:41:29 +01:00
Tobias Brunner
3eede76288
Fall back to _LINUX_CAPABILITY_VERSION if no explicit version is defined.
...
This is the case on Android.
2011-03-22 17:39:05 +01:00
Andreas Steffen
3f5647819b
redirect debug output of imc/imv pairs to syslog
2011-03-19 23:23:52 +01:00
Andreas Steffen
b03dd40fe6
some changes to the ikev2/rw-eap-tnc-11|20 scenarios
2011-03-19 16:48:06 +01:00
Andreas Steffen
16ee58e036
TNC server did not issue a TNC_CONNECTION_STATE_HANDSHAKE NotifyConnection message
2011-03-19 16:43:22 +01:00
Andreas Steffen
357894c692
af-alg plugin does not require hmac and xcbc plugins
2011-03-18 09:55:26 +01:00
Andreas Steffen
e236ed1e8d
added duplicheck.enable and whitelist.enable options to strongswan.conf man page
2011-03-18 08:01:09 +01:00
Andreas Steffen
ae04b73eb4
added af-alg-ikev1/alg-camellia scenario
2011-03-18 07:39:21 +01:00
Andreas Steffen
ec160f132c
added af-alg-ikev2/alg-camellia scenario
2011-03-18 07:34:48 +01:00
Andreas Steffen
efe7e863e7
added the af-alg-ikev1/rw-cert scenario
2011-03-17 23:16:41 +01:00
Andreas Steffen
d6946481ae
added the af-alg-ikev2/rw-cert scenario
2011-03-17 22:55:26 +01:00
Andreas Steffen
788fc89cc2
build the af-alg plugin in the UML test environment
2011-03-17 22:53:09 +01:00
Andreas Steffen
edd1fc71c2
include linux/if_alg.h in the strongSwan distribution
2011-03-17 22:52:04 +01:00
Andreas Steffen
d32a84fbc4
version bump to 4.5.2dr3
2011-03-17 20:24:44 +01:00
Andreas Steffen
6ca05fe2e9
added NEWS for 4.5.2dr2 release
2011-03-17 20:24:00 +01:00
Martin Willi
f8d2f903bf
Added a strongswan.conf "enabled" option for duplicheck plugin
2011-03-17 17:34:11 +01:00
Martin Willi
c236b214f2
Added strongswan.conf and runtime option to enable/disable whitelist plugin
2011-03-17 17:15:16 +01:00
Martin Willi
3ced6b51e4
Move establish/inherit of rekeyed IKE_SAs to delete messages
...
Having the inherit() function delayed to the IKE_SA establish procedure
was problematic. The task destroy function was never a good place and
results in locking/cleanup problems. After establishing the SA, it
should be really checked in ASAP to avoid any triggered DPD checks
to get lost.
2011-03-15 15:20:09 +01:00
Martin Willi
f42156a8c8
Wrap IKE delete after rekey into rekey task for responder, too
2011-03-15 11:51:53 +01:00
Martin Willi
11f89bc948
Do not invoke processor restart() if not required
...
Doing so might result in a deadlock during shutdown if a delayed
restart is locked on the bus during the debug statement.
2011-03-15 11:48:19 +01:00
Martin Willi
41080cbbd9
Migrated ike_rekey task to INIT/METHOD macros
2011-03-15 11:30:02 +01:00
Andreas Steffen
19897724d3
fixed asn1_oid_from_string(), allowing it to handle up to 32 bit node numbers
2011-03-12 13:46:14 +01:00
Andreas Steffen
4953a78a66
fixed parsing of X.509 certificatePolicies
2011-03-11 12:38:00 +01:00
Andreas Steffen
cfeb687d7f
added tcg-at-tpmIdLabel OID
2011-03-11 11:48:46 +01:00
Andreas Steffen
fc01176a7d
output unknown OIDs in dot string notation
2011-03-11 11:48:22 +01:00
Andreas Steffen
adba3c695d
version bump to 4.5.2dr2
2011-03-11 09:12:13 +01:00
Andreas Steffen
6f2378c1ce
added NEWS for the 4.5.2dr1 release
2011-03-11 09:11:37 +01:00
Andreas Steffen
f813069e89
fixed asn1_oid_to_string() conversion
2011-03-09 15:36:05 +01:00
Martin Willi
21f411b861
Use a boolean expression for refcount check, fixes refcounting if bool is a signed char
2011-03-09 07:52:13 +01:00
Martin Willi
5f47296f22
Migrated sim_manager to INIT/METHOD macros
2011-03-08 16:42:27 +01:00
Martin Willi
7b3bfe4b6c
Protect sim card/provider/hook (un-)registration with a rwlock
2011-03-08 16:42:27 +01:00
Martin Willi
f58db72482
Splitted sim_manager.h header to sim_{card,provider,hooks}.h
2011-03-08 16:42:27 +01:00
Andreas Steffen
c54e1bb83b
defined some TCG attribute OIDs
2011-03-08 07:27:00 +01:00
Andreas Steffen
04be19127d
support of RSAES-OAEP public keys
2011-03-08 07:03:22 +01:00
Andreas Steffen
bf10d793f6
added id-RSAES-OAEP and id-pSpecified OIDs
2011-03-07 22:46:28 +01:00
Andreas Steffen
25ed5672a6
initiate or route all child configs if they have different names from their parent peer config
2011-03-04 07:02:31 +01:00
Martin Willi
50110dfef8
Align netlink attributes properly if rta_len not a multiple of RTA_ALIGNTO
2011-03-02 16:07:38 +01:00
Andreas Steffen
ea1c20d14b
initiate or route child configs which don't have a peer config of the same name
2011-03-01 22:24:19 +01:00
Andreas Steffen
a2ebc1bd69
put DN in double quotes
2011-03-01 22:19:59 +01:00
Andreas Steffen
a79eba2e9c
corrected pkcs11 error message
2011-03-01 22:19:58 +01:00
Martin Willi
007c47088c
Implemented permanent certificate coupling plugin
2011-02-28 16:39:40 +01:00
Andreas Steffen