denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,797 Commits 1 Branch 0 Tags
0a46e963ff45030336c0c59e7378420062a24cce
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 0a46e963ff added three mobike scenarios 2007-07-04 17:39:10 +00:00
Andreas Steffen 01a08cb2e7 output crl uri as a printable string instead of a binary blob 2007-07-04 13:36:41 +00:00
Andreas Steffen ed0d8e8008 added entrustVersInfo OID 2007-07-04 12:11:38 +00:00
Andreas Steffen eea626ed25 describe eap option in ipsec.conf.5 man page 2007-07-04 05:42:58 +00:00
Andreas Steffen ae4388dca0 cosmetics 2007-07-04 05:42:09 +00:00
Andreas Steffen 4f22a3e339 removed the ipsec.conf version number 2007-07-04 05:41:51 +00:00
Andreas Steffen 959b01aca5 version bumps 2007-07-03 13:08:13 +00:00
Andreas Steffen 3ba90600f2 recognize strongswan-2.8.6 VID 2007-07-03 13:06:27 +00:00
Andreas Steffen a0a0bdd727 starter bug fix and pkcs11initargs patch by Robert Varga 2007-07-03 12:51:29 +00:00
Andreas Steffen dd0ee786db support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:33:02 +00:00
Andreas Steffen e0e6137dd3 support of PKCS#11 init arguments required by NSS softoken, patch contributed by Robert Varga 2007-07-03 09:26:44 +00:00
Andreas Steffen bcac22f3a6 DBG1 level for 'peer supports MOBIKE' debug message 2007-07-02 20:13:15 +00:00
Andreas Steffen 561f88e306 fixed typo 2007-07-02 20:10:26 +00:00
Andreas Steffen 066518270f cosmetics 2007-07-02 17:56:04 +00:00
Andreas Steffen fdd32ee6e5 fix of the bug fix, courtesy of Robert Varga 2007-07-02 17:48:30 +00:00
Andreas Steffen 2f806bd866 bug fix courtesy of Robert Varga 2007-07-02 17:42:16 +00:00
Andreas Steffen c598ac6360 changes in uml configuration to allow mobike 2007-07-02 09:52:20 +00:00
Andreas Steffen cea6634fde MobIKE requires iptables to open udp/4500 2007-06-28 21:33:51 +00:00
Andreas Steffen b9212e5a93 MobIKE requires iptables to open udp/4500 2007-06-28 21:33:13 +00:00
Andreas Steffen c2bc2b2782 alphabetical order 2007-06-27 21:49:09 +00:00
Andreas Steffen e0e7ef070d separated pluto, charon, and klips setup config section parameters 2007-06-27 15:42:11 +00:00
Andreas Steffen 6a39bc4061 added passthrough scenario 2007-06-27 14:25:15 +00:00
Andreas Steffen 487fe29ee3 added lefthostaccess and leftprotoport parameters 2007-06-27 14:03:56 +00:00
Andreas Steffen 1fbdab8507 right=%<fqdn> wildcard added 2007-06-27 13:31:16 +00:00
Andreas Steffen 7900ab1b7a update ipsec.conf man page 2007-06-27 13:29:36 +00:00
Andreas Steffen c4c916f90a add starter.8 man page to distribution 2007-06-27 13:29:20 +00:00
Andreas Steffen 6fa8bd61c1 cosmetics 2007-06-27 10:04:02 +00:00
Andreas Steffen 2f153a2263 recognize wildcard keyingtries=%forever 2007-06-27 08:11:22 +00:00
Andreas Steffen a80521d13e recognize wildcards right=%group and keyingtries=%forever 2007-06-27 08:11:08 +00:00
Andreas Steffen cae8f3e9b6 updated copyright statement 2007-06-27 07:36:44 +00:00
Andreas Steffen 31302718ff fixed distro and copyright information 2007-06-27 07:25:19 +00:00
Andreas Steffen 361712fe37 use of the right=%<fqdn> wildcard 2007-06-26 10:46:30 +00:00
Andreas Steffen 3f946e1c90 support of right=%<FQDN> wildcard 2007-06-25 11:28:39 +00:00
Andreas Steffen e6a22d8728 discarded unused functions 2007-06-25 09:06:13 +00:00
Andreas Steffen 3345c0a1ed make starter behave more gracefully in the presence of non-fatal errors 2007-06-25 07:10:23 +00:00
Andreas Steffen 078ce348ae IKEv1 rightallowany flag introduced 2007-06-20 09:46:54 +00:00
Andreas Steffen 280f6b1ab2 set nexthop to him when instantiating rightallowyes template with leftnexthop == right 2007-06-18 20:07:47 +00:00
Andreas Steffen d0f55e236d support of right|leftallowany flag 2007-06-18 17:51:45 +00:00
Andreas Steffen 571bca865b added dynamic DNS scenarios 2007-06-18 17:50:54 +00:00
Andreas Steffen 174c9e18c1 eliminated nexthop 2007-06-17 15:29:49 +00:00
Andreas Steffen 2dc0366994 fixed typo 2007-06-16 20:22:05 +00:00
Andreas Steffen 0c8e0615aa recognize strongswan-2.8.5 VID 2007-06-16 20:21:14 +00:00
Andreas Steffen aca0317d92 removed all nexthop statements 2007-06-10 18:52:14 +00:00
Andreas Steffen b9659a50dc version bumps to linux 2.6.21.3 kernel and strongswan 4.1.4 2007-06-08 07:11:06 +00:00
Andreas Steffen ed1813ff6f added x as a wildcard for number of tests 2007-06-08 07:10:00 +00:00
Andreas Steffen 0b455e2e7b pass eroutes now need explicit routes 2007-06-08 07:06:10 +00:00
Andreas Steffen b7af55ac87 no need for left|rightnexthop parameter any more 2007-06-08 07:03:14 +00:00
Andreas Steffen 7a1f49c314 do not delete existing routes with NETKEY 2007-06-08 07:01:17 +00:00
Andreas Steffen e93c68ba0d _updown inserts routes only if a sourceip is defined 2007-06-06 13:37:43 +00:00
Andreas Steffen ef01451916 insert route only in case of sourceip 2007-06-06 13:30:27 +00:00
Andreas Steffen 9bac1d6640 do not print nexthop in ipsec status[all] 2007-06-06 13:16:48 +00:00
Andreas Steffen d0a6ed9a3c version bump to 4.1.4 2007-05-26 19:07:39 +00:00
Andreas Steffen b5463662d2 version bump to 4.1.4 2007-05-26 19:05:34 +00:00
Andreas Steffen ad8c6c60dc moved assignment of CERT_UNKNOWN 2007-05-25 14:04:39 +00:00
Andreas Steffen 2b34eafbc0 changed exceeded to reached 2007-05-25 11:42:00 +00:00
Andreas Steffen 3f9834a491 log trust pathlen 2007-05-25 11:41:06 +00:00
Andreas Steffen 3367fa8b74 fixed html output 2007-05-25 11:33:49 +00:00
Andreas Steffen 41e16cf4cf libfreeswan kernel header problem fixed 2007-05-25 11:17:16 +00:00
Andreas Steffen 89eeedc243 included a certificate label in the is_trusted() method 2007-05-25 11:10:35 +00:00
Andreas Steffen 60b44bbe62 stop dave in posttest.dat 2007-05-25 09:29:10 +00:00
Andreas Steffen 0bc543f1dc multi-level-ca-strict scenario added 2007-05-25 09:23:24 +00:00
Andreas Steffen 238b92d632 virtual-ip-override scenario added 2007-05-25 09:22:42 +00:00
Andreas Steffen 845cfa025b stop iptables on dave 2007-05-25 09:22:08 +00:00
Andreas Steffen f44dbc639b DBG1 level now shows stepping up through the certifiate hierarchy up to the trust anchor 2007-05-25 08:29:35 +00:00
Andreas Steffen 13b872ebd2 set certinfo status to CERT_UNKNOWN before crl and|or ocsp verification 2007-05-25 08:21:27 +00:00
Andreas Steffen f2566a3bac x509_t* argument in get_issuer() method is not constant any more because a short cut to the ca might be set 2007-05-25 08:17:29 +00:00
Andreas Steffen fc92116296 fixed virtual-ip scenario 2007-05-25 07:28:00 +00:00
Andreas Steffen ea7f3e1bca version bump to 4.1.3 2007-05-25 07:27:33 +00:00
Andreas Steffen 64bf6e564b added parsing of charging and group attributes 2007-05-25 07:26:33 +00:00
Andreas Steffen babb69109f version bump to 4.1.3 2007-05-25 07:25:38 +00:00
Andreas Steffen 8c06e9c0ed added #define LDAP_DEPRECATED in order to use old ldap_init() function 2007-05-24 12:09:48 +00:00
Andreas Steffen 3e4eac0b63 removed unneeded libdes files speed.c and des_opts.c 2007-05-24 12:08:44 +00:00
Andreas Steffen 0749196612 cecho changes in UML scripts 2007-05-23 22:24:47 +00:00
Andreas Steffen c502b1b4c6 added virtual-ip scenario 2007-05-23 21:41:05 +00:00
Andreas Steffen 02ee40ad6a defined ietfAttr_t type and its destroy function 2007-05-23 19:43:24 +00:00
Andreas Steffen 8fbac48e26 removed old FreeS/WAN cvs revision entries 2007-05-23 19:27:48 +00:00
Andreas Steffen 2911f4ee37 added #include <linux/types.h> required by 2.6.21 linux headers 2007-05-23 19:27:02 +00:00
Andreas Steffen 3eb9630071 support of left|rightgroups parameter 2007-05-20 15:38:36 +00:00
Andreas Steffen 9a590819a2 reduced crl validity of research and sales ca to 15 days 2007-05-19 19:47:24 +00:00
Andreas Steffen 3388e7674d fixed nextUpdate and until behaviour in the non-strict case 2007-05-19 19:46:13 +00:00
Andreas Steffen 4756b7aa5d set rightca= to root CA 2007-05-18 13:19:47 +00:00
Andreas Steffen 9619b0d33a added multi-level-ca-revoked scenario 2007-05-18 13:18:28 +00:00
Andreas Steffen 51a9174071 added multi-level-ca-loop scenario 2007-05-18 12:42:49 +00:00
Andreas Steffen 35d4809c3e support of CA-based ipsec policies 2007-05-18 12:28:05 +00:00
Andreas Steffen 6e04f25313 support of CA-based ipsec policies 2007-05-18 12:25:37 +00:00
Andreas Steffen a11cd0a102 support of crlnumber in research and sales CAs 2007-05-18 12:24:50 +00:00
Andreas Steffen 162f1b7056 added multi-level-ca-ldap scenario 2007-05-18 12:23:31 +00:00
Andreas Steffen 9f97b8a108 added multi-level-ca scenario 2007-05-18 12:23:10 +00:00
Andreas Steffen f24b4886ac ca-based policy now requires rightca=%any in the two-certs scenario 2007-05-18 10:53:58 +00:00
Andreas Steffen 89665b3866 add is_ca() method 2007-05-18 10:16:10 +00:00
Andreas Steffen 27432db603 added set_ca_info() and get_ca_info() methods 2007-05-18 10:15:23 +00:00
Andreas Steffen 889c2ded1c output of eap_type_names requires %N format 2007-05-18 10:14:01 +00:00
Andreas Steffen ec3c02a303 added set_other_ca() and get_other_ca() 2007-05-17 17:55:29 +00:00
Andreas Steffen 7d26a0ee03 added set_other_ca() and get_other_ca() 2007-05-17 17:55:02 +00:00
Andreas Steffen 13de65882b export MAX_CA_PATH_LEN 2007-05-17 17:19:09 +00:00
Andreas Steffen 45156cc791 check self-signedness of certificate at creation time 2007-05-17 17:18:38 +00:00
Andreas Steffen ad9da6ec4b hierarchical display of tests 2007-05-15 20:30:21 +00:00
Andreas Steffen a3354a6908 multiple peer certificate support 2007-05-15 19:07:38 +00:00
Andreas Steffen 522bd94862 removed reference to radij.c code 2007-05-15 19:06:05 +00:00
Andreas Steffen 9b6591e796 authentication failure is handled in ike_auth.c 2007-05-15 19:05:26 +00:00