Andreas Steffen
c502b1b4c6
added virtual-ip scenario
2007-05-23 21:41:05 +00:00
Andreas Steffen
02ee40ad6a
defined ietfAttr_t type and its destroy function
2007-05-23 19:43:24 +00:00
Andreas Steffen
8fbac48e26
removed old FreeS/WAN cvs revision entries
2007-05-23 19:27:48 +00:00
Andreas Steffen
2911f4ee37
added #include <linux/types.h> required by 2.6.21 linux headers
2007-05-23 19:27:02 +00:00
Martin Willi
76042f8471
proper thread cancellation when using the charon->interfaces
2007-05-23 09:08:13 +00:00
Martin Willi
0f6b068259
fixed crash when using 0.0.0.0/0 subnets
2007-05-23 06:33:22 +00:00
Martin Willi
b1450b48a0
removed misleading warning when rekeying
2007-05-23 06:32:41 +00:00
Martin Willi
16878f6823
support for virtual IP definition on client side:
...
if leftsourceip is defined, it is requested.
server may define rightsourceip=%config to accept any,
or it may overwrite it using rightsourceip.
if server does not return an IP, client enforces its configured leftsourceip.
2007-05-22 13:49:31 +00:00
Martin Willi
a06c068191
fixed memleak
2007-05-22 09:38:42 +00:00
Martin Willi
905438735a
using local address as gateway in installed routes
2007-05-22 07:47:16 +00:00
Andreas Steffen
3eb9630071
support of left|rightgroups parameter
2007-05-20 15:38:36 +00:00
Andreas Steffen
9a590819a2
reduced crl validity of research and sales ca to 15 days
2007-05-19 19:47:24 +00:00
Andreas Steffen
3388e7674d
fixed nextUpdate and until behaviour in the non-strict case
2007-05-19 19:46:13 +00:00
Andreas Steffen
4756b7aa5d
set rightca= to root CA
2007-05-18 13:19:47 +00:00
Andreas Steffen
9619b0d33a
added multi-level-ca-revoked scenario
2007-05-18 13:18:28 +00:00
Andreas Steffen
51a9174071
added multi-level-ca-loop scenario
2007-05-18 12:42:49 +00:00
Andreas Steffen
35d4809c3e
support of CA-based ipsec policies
2007-05-18 12:28:05 +00:00
Andreas Steffen
6e04f25313
support of CA-based ipsec policies
2007-05-18 12:25:37 +00:00
Andreas Steffen
a11cd0a102
support of crlnumber in research and sales CAs
2007-05-18 12:24:50 +00:00
Andreas Steffen
162f1b7056
added multi-level-ca-ldap scenario
2007-05-18 12:23:31 +00:00
Andreas Steffen
9f97b8a108
added multi-level-ca scenario
2007-05-18 12:23:10 +00:00
Andreas Steffen
f24b4886ac
ca-based policy now requires rightca=%any in the two-certs scenario
2007-05-18 10:53:58 +00:00
Andreas Steffen
89665b3866
add is_ca() method
2007-05-18 10:16:10 +00:00
Andreas Steffen
27432db603
added set_ca_info() and get_ca_info() methods
2007-05-18 10:15:23 +00:00
Andreas Steffen
889c2ded1c
output of eap_type_names requires %N format
2007-05-18 10:14:01 +00:00
Andreas Steffen
ec3c02a303
added set_other_ca() and get_other_ca()
2007-05-17 17:55:29 +00:00
Andreas Steffen
7d26a0ee03
added set_other_ca() and get_other_ca()
2007-05-17 17:55:02 +00:00
Andreas Steffen
13de65882b
export MAX_CA_PATH_LEN
2007-05-17 17:19:09 +00:00
Andreas Steffen
45156cc791
check self-signedness of certificate at creation time
2007-05-17 17:18:38 +00:00
Martin Willi
bcd887781a
removed route_job, handled all in interface_manager
2007-05-16 08:49:10 +00:00
Martin Willi
ce27ac8012
routing/unrouting through interface
2007-05-16 08:32:15 +00:00
Martin Willi
933521270d
removed dead folder
2007-05-16 06:42:52 +00:00
Andreas Steffen
ad9da6ec4b
hierarchical display of tests
2007-05-15 20:30:21 +00:00
Andreas Steffen
a3354a6908
multiple peer certificate support
2007-05-15 19:07:38 +00:00
Andreas Steffen
522bd94862
removed reference to radij.c code
2007-05-15 19:06:05 +00:00
Andreas Steffen
9b6591e796
authentication failure is handled in ike_auth.c
2007-05-15 19:05:26 +00:00
Andreas Steffen
16c72c0c4f
cosmetics
2007-05-15 19:04:15 +00:00
Andreas Steffen
8a664830d0
cosmetics
2007-05-15 19:03:23 +00:00
Andreas Steffen
547f1dd56c
added two-certs scenario
2007-05-15 15:54:06 +00:00
Andreas Steffen
df9fbd2c64
adapted authentication failure text to those in the authenticators
2007-05-15 14:52:44 +00:00
Andreas Steffen
ca78602304
verification of locally loaded peer certificates
2007-05-15 14:51:04 +00:00
Andreas Steffen
2e324229c0
support of multiple certificates with same peer id
2007-05-15 12:46:05 +00:00
Andreas Steffen
b17e0db372
cosmetics
2007-05-15 12:45:19 +00:00
Martin Willi
1387e64af1
working dummy for NetworkManager DBUS interface
...
more a tech demo
2007-05-14 13:22:04 +00:00
Andreas Steffen
4262749f11
version bump to 4.1.3
2007-05-10 12:40:09 +00:00
Martin Willi
a6a039aa10
simplified capability dropping
2007-05-09 13:12:06 +00:00
Martin Willi
3cd3f48428
properly implemented interface_managers initiate, terminte_[ike|child]
...
proper thread release when stroke is CTRL+C'ed
fixed some permission issues
2007-05-09 12:33:08 +00:00
Martin Willi
d08b27799a
properly ignoring signals rised by a thread which is in listening state
2007-05-08 12:58:33 +00:00
Martin Willi
6874bf698c
changing UID/GID after startup of pluto/charon
...
added --with-uid/--with-gid configure option
2007-05-07 12:38:46 +00:00
Martin Willi
a4a3884c83
extended interface_manager (more work needed here)
2007-05-03 14:22:52 +00:00
Andreas Steffen