f049b29491
securing total_threads with the mutex while destroying the processor
Tobias Brunner2008-04-02 15:28:08 +00:00
1ee637d8b1
generate debug output if ocsp response does not contain status information for a given certificate
Andreas Steffen2008-04-02 14:28:17 +00:00
489e3da0ea
updated mediation database to public key authentication added mysql table definition, test data testcase
Martin Willi2008-04-02 12:25:14 +00:00
9c2a905d63
stopping connectivity checks on the responders side after receiving an IKE_SA_INIT request with the proper ME_CONNECTID
Tobias Brunner2008-04-01 11:38:18 +00:00
45d66f5af6
some simplifications to trusted_enumerator_t
Martin Willi2008-04-01 10:56:08 +00:00
1bb85edffe
checking pretrusted but bad certificates only once
Martin Willi2008-04-01 10:43:44 +00:00
b7ef3f625d
leak detective detects heap over- and underflow
Martin Willi2008-03-28 14:51:26 +00:00
7939864dec
updated leak_detective whitelist: libxml and clearsilver functions
Martin Willi2008-03-28 13:16:36 +00:00
6b9290ff12
renamed xml plugin to smp to avoid confusion added some dependency checks to configure configure checks ClearSilver and fastcgi cleanups in the build system here and there
Martin Willi2008-03-28 12:44:01 +00:00
892fb43b12
fixed manager plugin loading manager uses strongswan.conf to read its configuration
Martin Willi2008-03-28 12:41:05 +00:00
d20e5c6ab5
replaced get_public() by create_public_enumerator() to try multiple public keys for signature verification
Martin Willi2008-03-27 19:07:23 +00:00
0d30ba3343
use trusted self-signed root CA certificates as trust anchor only
Martin Willi2008-03-27 13:38:02 +00:00
e74bc8e51d
changed external interface to the mediation extension.
Tobias Brunner2008-03-27 12:31:35 +00:00
1aad8bdfad
makeshift fix of --enable-integrity-test option
Andreas Steffen2008-03-26 20:16:42 +00:00
dc04b7c743
mediation extension adapted to the naming convention of the current version of the draft. note: the external interface (config, autotools) has not yet been changed
Tobias Brunner2008-03-26 18:40:19 +00:00
7b88a983d8
caching of ocsp responses (experimental), no crl caching yet
Martin Willi2008-03-26 15:21:50 +00:00
391abda082
fixed compile error if --enable-p2p is set
Martin Willi2008-03-26 14:45:24 +00:00
5298777ad8
treat sig_alg and algorithm comparison in a consistent way over all certificate types
Andreas Steffen2008-03-26 13:10:36 +00:00
e37f7715bf
fixed rightca= constraint checking implemented rightca= for intermediate CAs we do not have the certificate at config load
Martin Willi2008-03-26 12:23:46 +00:00
0b14fdb92b
splitted stroke plugin to several files: socket: reads messages from socket, dispatching config: process add/del conn, serves configs through backend_t control: controlling of the daemon (up/down/route/...( cred: credential loading, serves creds through credential_set_t ca: ca sections from ipsec.conf, serves cdp's through credential_set_t list: log status information to stroke console (status/statusall/list*) shared_key: shared key implementation for keys read from ipsec.secrets plugin: registers stroke plugin and starts socket w/ thread
Martin Willi2008-03-26 10:10:40 +00:00
3c7e72f5b0
added equals() method to peer_cfg, ike_cfg, proposals, auth_info allows easier merging of ipsec.conf connections replaced some iterators through enumerators made proposals algorithm_t private using enumerator
Martin Willi2008-03-26 10:06:45 +00:00