Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen 10c13ed264 fixed dereferencing bug caused by bool type redefinition 2009-08-02 16:58:32 +02:00
Andreas Steffen f35f229fd6 implemented query_sa() for PFKEYv2 2009-08-02 11:46:33 +02:00
Andreas Steffen 47eb87d437 corrected interface definition 2009-07-31 08:57:55 +02:00
Andreas Steffen 3f720dc7c3 update usetime only if usebytes increase 2009-07-30 23:19:42 +02:00
Andreas Steffen 2ad51539f6 display transmitted bytes per SA 2009-07-30 21:33:19 +02:00
Andreas Steffen ecff28c5c5 fixe KW_END_FIRST..KW_END_LAST keyword range 2009-07-28 15:44:24 +02:00
Andreas Steffen acb34739e4 improved DPD error message 2009-07-22 22:30:21 +02:00
Andreas Steffen e1089f5906 added file and segment lengths to checksum.c 2009-07-21 22:23:51 +02:00
Andreas Steffen 8ce8e19068 version bump to 4.3.4 2009-07-21 22:21:52 +02:00
Andreas Steffen 144b433402 version bump of Linux UML kernel to 2.6.30.2 2009-07-21 15:51:04 +02:00
Andreas Steffen def1777eca streamlined integrity test output some more 2009-07-18 11:23:27 +02:00
Andreas Steffen 1d941f12ad advertise activated integrity tests 2009-07-18 00:37:35 +02:00
Andreas Steffen aa74d70595 added latest NEWS 2009-07-17 22:54:23 +02:00
Andreas Steffen d9b67a9fc0 added ikev1/net2net-pgp-v4 scenario 2009-07-17 22:36:12 +02:00
Andreas Steffen 542471e3fe adapted scenario description for OpenPGP V3 keys 2009-07-17 22:33:22 +02:00
Andreas Steffen 03b704fd55 enable crypt debugging in ikev1/esp-alg-camellia scenario 2009-07-17 21:27:54 +02:00
Andreas Steffen 2e4a94ec26 added strongswan-2.8.11 and strongswan-4.2.17 VIDs 2009-07-17 21:19:32 +02:00
Andreas Steffen f179ba474e enable integrity test in all rw-cert scenarios 2009-07-17 20:52:14 +02:00
Andreas Steffen e3f3b004e2 fix test vector error output 2009-07-17 20:36:21 +02:00
Andreas Steffen eab241fb56 stop strongswan if integrity check of libstrongswan or daemon fails 2009-07-17 20:33:19 +02:00
Andreas Steffen 6b04ba288d streamlined debug output of integrity tests 2009-07-17 17:00:17 +02:00
Andreas Steffen ca366aeea0 enforce strongSwan coding rules 2009-07-17 16:57:07 +02:00
Andreas Steffen 521aa00fb1 shortened cypto test output 2009-07-17 16:36:01 +02:00
Andreas Steffen 848133ff1c accelerate lookup in non-concatenated pools 2009-07-17 13:58:29 +02:00
Andreas Steffen dfd8ddfb33 added scenario ikev2/ip-split-pools-db 2009-07-17 13:38:57 +02:00
Andreas Steffen ec54df1762 added sql/ip-split-pools-db and sql/ip-split-pools-db-restart scenarios 2009-07-17 11:50:59 +02:00
Andreas Steffen 7f522b5fd8 check for an existing lease over all assigned pools first 2009-07-17 11:48:35 +02:00
Andreas Steffen 07be083b7f fixed problem with static leases over multiple pools 2009-07-16 21:53:46 +02:00
Andreas Steffen d44b03563a double free caused strange side effects 2009-07-13 20:28:36 +02:00
Andreas Steffen 5c49289e27 great, I got my comma back 2009-07-12 21:08:37 +02:00
Andreas Steffen 1c7f456a0b ecp_x_coordinate_only option and IKEv1 AEAD support 2009-07-12 00:05:42 +02:00
Andreas Steffen a7a42f92d5 addes ikev1/esp-alg-aes-ccm and ikev1/esp-alg-aes-gcm scenarios 2009-07-12 00:05:42 +02:00
Andreas Steffen 540d02f6c0 pluto supports AES_CCM and AES_GCM ESP algorithms 2009-07-12 00:05:42 +02:00
Andreas Steffen c5ebd00517 put variable definitions up front 2009-07-12 00:05:42 +02:00
Andreas Steffen ad92c1f6cd cosmetics 2009-07-12 00:05:42 +02:00
Andreas Steffen a3ee331b0c added listener.h to charon_SOURCES 2009-07-12 00:05:41 +02:00
Andreas Steffen 356cdc2d72 update libfreeswan/pfkeyv2.h 2009-07-10 07:15:08 +02:00
Andreas Steffen eebecebead make ecp_x_coordinate_only = yes the default 2009-07-06 11:47:38 +02:00
Andreas Steffen 887ed734d0 support of OpenPGP V4 fingerprints 2009-07-04 09:26:37 +02:00
Andreas Steffen 876a6d737f corrected comment 2009-07-04 09:26:36 +02:00
Andreas Steffen 7be566dc1f updated copyright statement 2009-07-03 11:43:48 +02:00
Andreas Steffen 2ba6a53414 added missing header files 2009-06-24 00:07:36 +02:00
Andreas Steffen 71e725d325 use get_proposal_token() for algorithm selection 2009-06-20 12:09:36 +02:00
Andreas Steffen c4963c92ac version bump to 4.3.3 2009-06-19 17:00:34 +02:00
Andreas Steffen 126f2130fb added info about two DoS fixes 2009-06-18 19:29:16 +02:00
Andreas Steffen 1ea31180a0 HASH_MD2 is not implemented yet in gcrypt 2009-06-18 10:03:05 +02:00
Andreas Steffen 3d7250d472 added test vector for NULL encryption 2009-06-18 09:59:24 +02:00
Andreas Steffen c233bb932a added test vector for NULL encryption 2009-06-18 09:42:05 +02:00
Andreas Steffen 21142d40d1 added md2 and md4 test vectors 2009-06-18 09:32:57 +02:00
Andreas Steffen 6561694796 added 2 des test vectors 2009-06-18 08:23:51 +02:00
Andreas Steffen 420bfb4fb5 added gcrypt-ikev2/alg-camellia scenario 2009-06-18 07:48:38 +02:00
Andreas Steffen 0e9ded6838 removed serpent and twofish plugins - use gcrypt instead 2009-06-18 07:27:40 +02:00
Andreas Steffen 9709520a84 moved alg-serpent and alg-twofish scenarios to gcrypt-ikev1 2009-06-18 07:15:51 +02:00
Andreas Steffen 8caf7711c9 fixed typo 2009-06-18 05:56:02 +02:00
Andreas Steffen bfab805898 removed superfluous print argument 2009-06-17 22:54:57 +02:00
Andreas Steffen e1101d5994 added 2 RC5 test vectors 2009-06-17 22:34:03 +02:00
Andreas Steffen ed65740846 added 2 IDEA test vectors 2009-06-17 21:53:30 +02:00
Andreas Steffen 364786b69f added 6 serpent test vectors 2009-06-17 21:37:26 +02:00
Andreas Steffen 142b7326a6 added 3 Twofish test vectors 2009-06-17 15:50:27 +02:00
Andreas Steffen a36c082da6 added one CAST-128 test vector 2009-06-17 15:24:20 +02:00
Andreas Steffen 1db85f2cc7 corrected ASN.1 encoding of OID node 2009-06-17 15:08:03 +02:00
Andreas Steffen 46ec53098e added Camellia encryption support to scepclient 2009-06-17 14:42:57 +02:00
Andreas Steffen 61bfc3acae added 6 Camellia test vectors 2009-06-17 14:22:00 +02:00
Andreas Steffen 22511bbd34 added 6 Camellia test vectors 2009-06-17 14:21:34 +02:00
Andreas Steffen c3fcdd9322 added 2 3DES-CBC and 3 AES-CBC test vectors 2009-06-17 00:08:44 +02:00
Andreas Steffen bd33859fb8 some more scenario adaptations 2009-06-16 21:03:13 +02:00
Andreas Steffen c8db70156d test-vector support in rw-cert scenarios 2009-06-16 20:53:41 +02:00
Andreas Steffen e0b09f8e76 added two gcrypt scenarios 2009-06-16 18:47:28 +02:00
Andreas Steffen 9e533e3d8e --enable-test-vectors and --enable-gcrypt in UML scenarios 2009-06-16 18:06:16 +02:00
Andreas Steffen 280effc034 moved ike_alg descriptions to crypto.c 2009-06-16 18:06:16 +02:00
Andreas Steffen b07ffa2490 reformatted crypto_test output 2009-06-16 14:58:49 +02:00
Andreas Steffen b32af12051 pluto supports ECP DH groups and ECDSA authentication 2009-06-16 11:23:40 +02:00
Andreas Steffen 5fa879238b initiator now checks for private key much earlier 2009-06-16 07:59:31 +02:00
Andreas Steffen 0002de3b98 adaptations of UML scenarios to 4.3.2 2009-06-16 07:33:22 +02:00
Andreas Steffen cd312fcc43 remove whitespace 2009-06-15 19:30:44 +02:00
Andreas Steffen ebde1a7ddd consistent display of strongSwan version 2009-06-13 16:03:08 +02:00
Andreas Steffen 2b92fc9880 test_vectors.h is part of the distribution 2009-06-13 15:17:24 +02:00
Andreas Steffen c71f212627 renamed OAKLEY_ECDSA_512 to OAKLEY_ECDSA_512 2009-06-13 15:16:49 +02:00
Andreas Steffen 1930cb22ff updated pluto.load configuration in ikev1 scenarios 2009-06-13 08:56:05 +02:00
Andreas Steffen c035d44c0e fixed evaltest.dat 2009-06-13 08:49:03 +02:00
Andreas Steffen d90ea16030 reduced debug level in ikev2/alg-blowfish scenario 2009-06-13 08:44:50 +02:00
Andreas Steffen 80873f2c5e added openssl-ikev1/ecdsa-certs scenario 2009-06-13 08:43:34 +02:00
Andreas Steffen 0005269132 ECDSA 256 and 384 certificates for moon 2009-06-13 07:28:47 +02:00
Andreas Steffen 8df811146d fixed broken XAUTH authentication 2009-06-12 21:04:48 +02:00
Andreas Steffen b34862b14e not restricted to RSA public keys 2009-06-12 20:17:02 +02:00
Andreas Steffen 37c9f11f11 load_private_key() loads all kinds of keys 2009-06-12 20:09:00 +02:00
Andreas Steffen 3c5a2342b4 ASN.1 parsing of RSA public key not needed anymore 2009-06-12 20:06:39 +02:00
Andreas Steffen 11e6d28533 pluto supports ECDSA authentication 2009-06-12 19:59:49 +02:00
Andreas Steffen eca36f44de split openssl scenarios into openssl-ikev1 and openssl-ikev2 2009-06-12 19:59:48 +02:00
Andreas Steffen 355bab380c additional check in case of non-positive months 2009-06-10 15:33:39 +02:00
Andreas Steffen dfa5fb0358 implemented IKEv1 RSA signing in openssl_rsa_private_key.c 2009-06-10 15:29:57 +02:00
Andreas Steffen 29bbfc11ee implemented IKEv1 signature verification in openssl_rsa_public_key.c 2009-06-10 13:43:51 +02:00
Andreas Steffen c04bf43363 fixed typo in asn1.c 2009-06-10 12:00:26 +02:00
Andreas Steffen 95c00dfcf9 fixed DoS vulnerability in the parsing of ASN.1 time strings 2009-06-10 11:39:17 +02:00
Andreas Steffen b29832c74f fixed DoS vulnerability in the parsing of distinguished names 2009-06-09 22:03:33 +02:00
Andreas Steffen 2d870072fa asn1_integer() ensures correct DER encoding of ASN1_INTEGER (two's complement) 2009-06-09 13:27:59 +02:00
Andreas Steffen a038ef2bb1 renamed listing of IKEv1 authentication algorithms 2009-06-09 11:43:08 +02:00
Andreas Steffen 3d2745110e more concise listing of ESP algorithms 2009-06-09 11:03:35 +02:00
Andreas Steffen 527960de0f activated INTEGRITY_TEST option in pluto 2009-06-09 11:03:35 +02:00
Andreas Steffen d615ffdcf3 implement gmp_rsa_private_key.decrypt() 2009-06-09 11:03:35 +02:00