denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,397 Commits 1 Branch 0 Tags
05d16853728e07b3e6d3035152771a1110b026fd
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 2f264a311b user standard cert 2007-03-14 14:52:13 +00:00
Andreas Steffen 19e071d54c deleted 2007-03-14 14:51:57 +00:00
Andreas Steffen f7ddccd988 deleted 2007-03-14 14:51:05 +00:00
Andreas Steffen 3f2cc77ac1 added 2007-03-14 14:02:39 +00:00
Andreas Steffen ae21d486c9 added 2007-03-14 13:04:56 +00:00
Andreas Steffen b1894cdd92 modified description.txt and evaltest.dat 2007-03-14 13:00:55 +00:00
Andreas Steffen 108d07181d added 2007-03-14 09:05:27 +00:00
Andreas Steffen 19808f71ec added 2007-03-14 08:17:27 +00:00
Andreas Steffen 2eab924979 version bump to strongswan-4.1.0 and linux-2.6.20.3 2007-03-14 08:15:36 +00:00
Andreas Steffen 220e51d27a cosmetics 2007-03-14 08:01:47 +00:00
Andreas Steffen d46a73288d increased control debugging output 2007-03-14 07:22:37 +00:00
Andreas Steffen db0f828413 results from the single responses is stored in the corresponding certinfo_t structs 2007-03-12 13:42:31 +00:00
Andreas Steffen 7c1b9ab784 moved credential_store.h from charon/config/credentials to libstrongswan 2007-03-09 16:50:19 +00:00
Andreas Steffen 9619b5fa90 last patch removed, changed CURLOPT_FILE to CURLOPT_WRITEDATA 2007-03-09 16:12:51 +00:00
Andreas Steffen bda09299fc fixed memory leak by calling curl_slist_free_all(headers) 2007-03-09 16:09:49 +00:00
Andreas Steffen dbc45e90d4 fixed memory leak by calling curl_slist_free_all(headers) 2007-03-09 16:08:28 +00:00
Andreas Steffen bb225522c7 whitelisting static Curl_getaddrinfo() memory leak 2007-03-09 16:07:22 +00:00
Andreas Steffen 5455cf230f fixed a certinfo_t memory leak in verify() 2007-03-09 14:59:28 +00:00
Andreas Steffen d45d2f1e21 fixed a memory leak in response_t 2007-03-09 14:44:34 +00:00
Andreas Steffen 1bcb84605f ocsp signer certificate and ocsp response signature can be verified 2007-03-08 23:29:04 +00:00
Andreas Steffen 162afac75f fixed call of add_auth_certificate() 2007-03-08 19:44:14 +00:00
Andreas Steffen 33d108de22 generalized get_ca_certificate() to get_auth_certificate(auth_flags) 2007-03-08 18:56:43 +00:00
Andreas Steffen 54645fb275 added fetcher_finalize() to clean up libcurl 2007-03-08 17:00:32 +00:00
Andreas Steffen 8d0cd21a01 support of setting and getting authority flags 2007-03-08 16:48:16 +00:00
Andreas Steffen 9149635ffa support if ocsp signing certificates 2007-03-08 16:47:18 +00:00
Andreas Steffen 9f4039755d support if ocsp signing certificates 2007-03-08 16:46:50 +00:00
Andreas Steffen 95f6a18fc7 added ocsp_parse_single_response 2007-03-08 00:35:20 +00:00
Andreas Steffen 40695383ae parsing basic ocsp response 2007-03-08 00:13:15 +00:00
Andreas Steffen 08d42d3994 forgot to assign public.is_ocsp_signer() method 2007-03-07 23:31:03 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Andreas Steffen 8dfb0a31b5 added parsing level to x509_create_from_chunk() and added is_ocsp_signer() method 2007-03-07 22:57:50 +00:00
Andreas Steffen 78703918aa http post fetching using libcurl implemented 2007-03-07 19:28:03 +00:00
Andreas Steffen bdfff62db9 added fetcher.h and fetcher.c 2007-03-07 14:13:01 +00:00
Andreas Steffen 6a65758a80 added 2007-03-07 14:12:36 +00:00
Andreas Steffen a7d67e77a1 corrected @ingroup to utils 2007-03-07 14:11:47 +00:00
Andreas Steffen 62a8ee10c3 corrected comment 2007-03-07 14:11:02 +00:00
Andreas Steffen dd82ca4dcc start ocsp checking only if there are any ocspuris present 2007-03-07 13:22:07 +00:00
Andreas Steffen 0d1f911065 conntrack -F is used to flush the NAT states 2007-03-07 04:45:12 +00:00
Andreas Steffen 26ad49c8e7 the hostaccess=yes parameters are not needed anymore 2007-03-07 04:44:25 +00:00
Andreas Steffen 854b4e4460 use conntrack -F to flush NAT states 2007-03-07 04:29:13 +00:00
Andreas Steffen 764804739f replaced actual virtual IP addresses by symbolic ones 2007-03-07 04:28:34 +00:00
Andreas Steffen 74d1b5e5b0 removed unnecessary double quotes 2007-03-07 04:27:32 +00:00
Andreas Steffen 817fecddc9 nonce in ocsp_t was not properly initialized 2007-03-07 04:22:21 +00:00
Andreas Steffen 7687c463da ocsp request is now fully built but without requestor signature 2007-03-07 03:39:40 +00:00
Andreas Steffen 45fe480e87 starting to build ocsp request 2007-03-06 23:05:44 +00:00
Andreas Steffen 69351da14d add crl and ocsp uris to linked list after partial verification 2007-03-06 18:51:56 +00:00
Andreas Steffen fd8819e06f added print hook for certinfo_t printing 2007-03-06 14:27:34 +00:00
Andreas Steffen aa3af83a80 fixed typo 2007-03-06 14:26:03 +00:00
Andreas Steffen ce7fdaca71 iterate certinfos linked list for matching serialNumber 2007-03-05 22:08:48 +00:00
Andreas Steffen 0b0eb65573 added 2007-03-05 19:15:33 +00:00
Andreas Steffen 03ffdf7526 moved listing of crls to local_credential_store and ca 2007-03-03 21:10:22 +00:00
Andreas Steffen 81020aaefd refactored ca_info_t 2007-03-03 21:08:07 +00:00
Andreas Steffen e5b0570a02 refactored ca_info_t 2007-03-03 21:07:23 +00:00
Andreas Steffen 671a54e9ab config-payload scenario fixes 2007-03-01 08:20:50 +00:00
Andreas Steffen 9b1f4540c6 preparations for PLUTO_MY_SOURCEIP 2007-03-01 07:45:43 +00:00
Andreas Steffen 7493cd0b6b corrected typo 2007-03-01 00:00:35 +00:00
Andreas Steffen 83c3750ac3 added cert with OCSP access info 2007-02-28 23:25:13 +00:00
Andreas Steffen b62f2fc895 dpd now takes 180 s and 5 retransmits 2007-02-28 23:19:20 +00:00
Andreas Steffen 1b44633cbc changed grep to creating aquire job for CHILD SA 2007-02-28 23:02:40 +00:00
Andreas Steffen 501fac0c88 replaced actual virtual IPs by place holders 2007-02-28 22:38:49 +00:00
Andreas Steffen f4d7dec384 virtual-ip scenario has been replaces by config-payload scenario 2007-02-28 22:21:58 +00:00
Andreas Steffen bc92caaabf added 2007-02-28 22:16:23 +00:00
Andreas Steffen 63b97bda3f added 2007-02-28 22:16:16 +00:00
Andreas Steffen 05bda56556 added ocsp.h and ocsp.c 2007-02-28 20:31:07 +00:00
Andreas Steffen eb8aaa6747 added 2007-02-28 20:30:44 +00:00
Andreas Steffen e6b1066edc cosmetics 2007-02-27 22:05:49 +00:00
Andreas Steffen 2ddcc33e16 added once flag to certinfo_t 2007-02-27 21:23:51 +00:00
Andreas Steffen bc5c21baac cosmetics 2007-02-27 21:22:57 +00:00
Andreas Steffen 87dabcbd1e added certinfos linked list 2007-02-27 21:21:54 +00:00
Andreas Steffen f3f390eb76 changed ca info to ca 2007-02-25 18:47:09 +00:00
Andreas Steffen c5d0fbb665 support of ca info sections 2007-02-25 08:18:11 +00:00
Andreas Steffen 9c6032510f added support of OCSP accessLocations 2007-02-25 08:15:46 +00:00
Andreas Steffen 508d22b2f9 correct interface definition 2007-02-25 08:15:38 +00:00
Andreas Steffen 7d119253f6 added support of OCSP accessLocations 2007-02-25 08:14:50 +00:00
Andreas Steffen db56de5bf7 full support of ca info records 2007-02-24 23:21:57 +00:00
Andreas Steffen e3c0ece8c8 added the create_crluri_iterator method 2007-02-24 23:21:45 +00:00
Andreas Steffen 7eb4010c01 replace ca is realized as del_ca followed by add_ca 2007-02-24 23:20:27 +00:00
Andreas Steffen 98a905838a last CA keyword is KW_OCSPURI2 2007-02-24 23:19:28 +00:00
Andreas Steffen b3e4211fc3 full support of ca info records 2007-02-24 23:18:31 +00:00
Andreas Steffen 83fbaa1ff0 full support of ca info records 2007-02-24 23:18:08 +00:00
Andreas Steffen 84fd27d06a alphabetically sorting print commands 2007-02-24 00:35:23 +00:00
Andreas Steffen 87f0656c39 listing ca_info items 2007-02-24 00:34:44 +00:00
Andreas Steffen 7d203c3b75 replace printf.h by stdio.h 2007-02-24 00:34:17 +00:00
Andreas Steffen 0cdec3baa5 addin get_keyid() method 2007-02-24 00:33:48 +00:00
Andreas Steffen 182d20e94e support of ca info records 2007-02-23 15:15:31 +00:00
Andreas Steffen 2ef41cdad9 support of ca info records 2007-02-23 15:14:59 +00:00
Andreas Steffen b70b08c8e2 version bump to 4.0.8 2007-02-23 15:14:21 +00:00
Andreas Steffen f13570a0d6 support of ca info records 2007-02-23 15:13:33 +00:00
Andreas Steffen 113be7f186 support of ca info records 2007-02-23 15:13:21 +00:00
Andreas Steffen 1ff95477e7 typo 2007-02-21 23:08:35 +00:00
Andreas Steffen 7a01e2b9a3 SHA512-HMAC bug fix and hash function self-test support 2007-02-21 13:10:24 +00:00
Andreas Steffen 51f4dfa035 SHA512-HMAC bug fix and hash function self-test support 2007-02-21 13:10:08 +00:00
Andreas Steffen 9f6a17a444 handle strong SHA-2 signatures in X.509 certificates 2007-02-21 13:08:45 +00:00
Andreas Steffen cd3958f86a SHA-2 fixes and add-ons 2007-02-21 13:07:39 +00:00
Andreas Steffen 2ea734180e version bumps 2007-02-21 13:07:09 +00:00
Andreas Steffen 8aa3e1ac65 remove strong certs and keys after test 2007-02-21 13:06:26 +00:00
Andreas Steffen c831506e35 added 2007-02-21 13:05:53 +00:00
Andreas Steffen 61eb45caf5 added PRINT_CAINFO hook 2007-02-14 10:54:39 +00:00
Andreas Steffen 786b0706b4 stroke now recognizes the keywords listocspcerts|cainfos|ocsp, rereadocspcerts and purgeocsp 2007-02-14 01:08:41 +00:00
Andreas Steffen 1e77bdc36b enable IP forwarding 2007-02-14 01:05:58 +00:00