 Andreas Steffen
|
e209c4d820
|
disable crypto self-test
|
2009-05-15 14:39:42 +02:00 |
|
|
Andreas Steffen
|
deb73fee10
|
fixed fatal typo
|
2009-05-15 14:17:05 +02:00 |
|
|
Andreas Steffen
|
d2fbf2c516
|
cleaned up pluto's IKE alg descriptors
|
2009-05-15 14:08:02 +02:00 |
|
|
Martin Willi
|
9caceb6ed5
|
updated prf identifiers
|
2009-05-15 13:49:05 +02:00 |
|
|
Martin Willi
|
b79ca7858b
|
updated integrity algorithm identifiers
|
2009-05-15 13:48:44 +02:00 |
|
|
Martin Willi
|
832427064c
|
added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA
|
2009-05-15 11:02:56 +02:00 |
|
|
Andreas Steffen
|
bb51102b89
|
use left|rightauth notation in eap scenarios
|
2009-05-15 10:40:08 +02:00 |
|
|
Martin Willi
|
5cb3210acf
|
stroke accepts "down conn1{*}/[*]" to delete all CHILD/IKE_SAs using a given config
|
2009-05-15 10:18:43 +02:00 |
|
|
Andreas Steffen
|
13e51a62a8
|
fixed copy-and-paste error
|
2009-05-15 10:17:17 +02:00 |
|
|
Andreas Steffen
|
2728c31031
|
uml evaltest changes due to 4.3.x
|
2009-05-15 10:01:30 +02:00 |
|
|
Andreas Steffen
|
35ba7192bd
|
added plutdebug=control
|
2009-05-15 10:01:30 +02:00 |
|
|
Andreas Steffen
|
244dbb06db
|
if enabled, load openssl plugin by default in pluto
|
2009-05-15 10:01:30 +02:00 |
|
|
Tobias Brunner
|
5020a456c0
|
more intuitive leap year check
|
2009-05-15 09:36:55 +02:00 |
|
|
Andreas Steffen
|
24bb9fdbf7
|
also support 192 bit keys for Twofish and Serpent
|
2009-05-15 01:48:56 +02:00 |
|
|
Andreas Steffen
|
315fd57225
|
fixed copy-and-paste caption error
|
2009-05-15 01:40:27 +02:00 |
|
|
Andreas Steffen
|
1bfb8007c2
|
got rid of libcrypto
|
2009-05-15 01:28:48 +02:00 |
|
|
Andreas Steffen
|
c628e3455d
|
removed libcrypto includes
|
2009-05-14 23:07:17 +02:00 |
|
|
Andreas Steffen
|
b5fd65e95c
|
cleaned up pluto's crypto framework
|
2009-05-14 22:56:10 +02:00 |
|
|
Andreas Steffen
|
9908e8785c
|
completed serpent plugin
|
2009-05-14 22:30:24 +02:00 |
|
|
Andreas Steffen
|
12eece1b27
|
cosmetics
|
2009-05-14 22:25:38 +02:00 |
|
|
Andreas Steffen
|
8bdc0327fb
|
split encrypt/decrypt functionality of crypto_cbc()
|
2009-05-14 21:04:49 +02:00 |
|
|
Andreas Steffen
|
7121eca633
|
fixed ikev1 iv derivation
|
2009-05-14 21:04:49 +02:00 |
|
|
Tobias Brunner
|
7cdb1ddf08
|
Mac OS X doesn't have SADB_X_AALG_AES_XCBC_MAC
|
2009-05-14 17:38:36 +02:00 |
|
|
Tobias Brunner
|
9f090745cf
|
added another possible location for the ipsec.h header file
|
2009-05-14 17:38:32 +02:00 |
|
|
Tobias Brunner
|
c1532e840d
|
fixed compiler warning
|
2009-05-14 17:38:27 +02:00 |
|
|
Tobias Brunner
|
9015c073de
|
make socket_t compatible with RFC 2292 (that got obsoleted by RFC 3542)
|
2009-05-14 17:16:21 +02:00 |
|
|
Andreas Steffen
|
978c2df17a
|
completed twofish sources
|
2009-05-14 16:51:53 +02:00 |
|
|
Andreas Steffen
|
4a85e33ccc
|
ported twofish as a plugin
|
2009-05-14 15:39:31 +02:00 |
|
|
Andreas Steffen
|
13bb168485
|
fixed 32 bit overflow check
|
2009-05-14 15:39:31 +02:00 |
|
|
Martin Willi
|
c296e51c40
|
added eap_start option to radius plugin
EAP-Start sends an empty EAP message to initiate EAP conversation
before doing EAP-Identity.
|
2009-05-14 14:14:29 +02:00 |
|
|
Andreas Steffen
|
2b02b0fe9f
|
introduced encryption test vectors
|
2009-05-14 13:55:56 +02:00 |
|
|
Andreas Steffen
|
0a8ad227d4
|
renamed ENCR_TWOFISH and ENCR_SERPENT to ENCR_TWOFISH_CBC and ENCR_SERPENT_CBC, respectively
|
2009-05-14 13:55:56 +02:00 |
|
|
Andreas Steffen
|
24400cf617
|
fixed setting of variable key length
|
2009-05-14 13:55:56 +02:00 |
|
|
Andreas Steffen
|
6e0ff31e07
|
use localtime_r() instead of localtime()
|
2009-05-14 13:55:56 +02:00 |
|
|
Andreas Steffen
|
7eea232f44
|
clone iv before blowfish en|decryption
|
2009-05-14 13:55:56 +02:00 |
|
|
Andreas Steffen
|
111b963931
|
replaced clone_bytes() by clalloc()
|
2009-05-14 13:55:56 +02:00 |
|
|
Andreas Steffen
|
910221c236
|
fixed indentation
|
2009-05-14 13:55:55 +02:00 |
|
|
Andreas Steffen
|
30a896173b
|
compute ASN.1 to UTC time without time functions
|
2009-05-14 13:55:55 +02:00 |
|
|
Andreas Steffen
|
3783980edb
|
changed TRUE/FALSE to 1/0
|
2009-05-14 13:55:55 +02:00 |
|
|
Andreas Steffen
|
3bc613d01d
|
blowfish block size is 8 bytes
|
2009-05-14 13:55:55 +02:00 |
|
|
Andreas Steffen
|
42dd330305
|
fixed caption
|
2009-05-14 13:55:55 +02:00 |
|
|
Andreas Steffen
|
cb81cc1dc0
|
changed remaining plog() to DBG1()
|
2009-05-14 13:55:55 +02:00 |
|
|
Martin Willi
|
64e8ca281f
|
simplified SPI allocation after refactorings
|
2009-05-14 10:28:18 +02:00 |
|
|
Martin Willi
|
d50746febe
|
identation cleanups
|
2009-05-13 15:57:31 +02:00 |
|
|
Martin Willi
|
ad65a713e4
|
fixed identation
|
2009-05-13 14:55:35 +02:00 |
|
|
Tobias Brunner
|
75a354bb6b
|
fixing compilation of socket_t on systems that have neither IP_PKTINFO (Linux) nor IP_SENDSRCADDR (FreeBSD)
|
2009-05-12 17:40:43 +02:00 |
|
|
Martin Willi
|
0a3ca29021
|
fixed cleanup of traffic selector lists
|
2009-05-12 17:13:09 +02:00 |
|
|
Martin Willi
|
8f0ab613e5
|
do not destroy packet twice if message generation failed
|
2009-05-12 14:38:48 +02:00 |
|
|
Martin Willi
|
e1fa02bc62
|
properly end CERT_PRE task after detecting the final authentication round
|
2009-05-12 11:26:50 +02:00 |
|
|
Martin Willi
|
9dd2b42728
|
do not report increasing rekey times if rekeying currently active
|
2009-05-12 10:56:49 +02:00 |
|