denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
1,366 Commits 1 Branch 0 Tags
1216db7e8b653070cfa5f597ff571947bf74d12c
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 162afac75f fixed call of add_auth_certificate() 2007-03-08 19:44:14 +00:00
Andreas Steffen 33d108de22 generalized get_ca_certificate() to get_auth_certificate(auth_flags) 2007-03-08 18:56:43 +00:00
Andreas Steffen 54645fb275 added fetcher_finalize() to clean up libcurl 2007-03-08 17:00:32 +00:00
Andreas Steffen 8d0cd21a01 support of setting and getting authority flags 2007-03-08 16:48:16 +00:00
Andreas Steffen 9149635ffa support if ocsp signing certificates 2007-03-08 16:47:18 +00:00
Andreas Steffen 9f4039755d support if ocsp signing certificates 2007-03-08 16:46:50 +00:00
Andreas Steffen 95f6a18fc7 added ocsp_parse_single_response 2007-03-08 00:35:20 +00:00
Andreas Steffen 40695383ae parsing basic ocsp response 2007-03-08 00:13:15 +00:00
Andreas Steffen 08d42d3994 forgot to assign public.is_ocsp_signer() method 2007-03-07 23:31:03 +00:00
Andreas Steffen 4eacb268a0 added parsing level to x509_create_from_chunk() 2007-03-07 22:58:25 +00:00
Andreas Steffen 8dfb0a31b5 added parsing level to x509_create_from_chunk() and added is_ocsp_signer() method 2007-03-07 22:57:50 +00:00
Andreas Steffen 78703918aa http post fetching using libcurl implemented 2007-03-07 19:28:03 +00:00
Andreas Steffen bdfff62db9 added fetcher.h and fetcher.c 2007-03-07 14:13:01 +00:00
Andreas Steffen 6a65758a80 added 2007-03-07 14:12:36 +00:00
Andreas Steffen a7d67e77a1 corrected @ingroup to utils 2007-03-07 14:11:47 +00:00
Andreas Steffen 62a8ee10c3 corrected comment 2007-03-07 14:11:02 +00:00
Andreas Steffen dd82ca4dcc start ocsp checking only if there are any ocspuris present 2007-03-07 13:22:07 +00:00
Andreas Steffen 0d1f911065 conntrack -F is used to flush the NAT states 2007-03-07 04:45:12 +00:00
Andreas Steffen 26ad49c8e7 the hostaccess=yes parameters are not needed anymore 2007-03-07 04:44:25 +00:00
Andreas Steffen 854b4e4460 use conntrack -F to flush NAT states 2007-03-07 04:29:13 +00:00
Andreas Steffen 764804739f replaced actual virtual IP addresses by symbolic ones 2007-03-07 04:28:34 +00:00
Andreas Steffen 74d1b5e5b0 removed unnecessary double quotes 2007-03-07 04:27:32 +00:00
Andreas Steffen 817fecddc9 nonce in ocsp_t was not properly initialized 2007-03-07 04:22:21 +00:00
Andreas Steffen 7687c463da ocsp request is now fully built but without requestor signature 2007-03-07 03:39:40 +00:00
Andreas Steffen 45fe480e87 starting to build ocsp request 2007-03-06 23:05:44 +00:00
Andreas Steffen 69351da14d add crl and ocsp uris to linked list after partial verification 2007-03-06 18:51:56 +00:00
Andreas Steffen fd8819e06f added print hook for certinfo_t printing 2007-03-06 14:27:34 +00:00
Andreas Steffen aa3af83a80 fixed typo 2007-03-06 14:26:03 +00:00
Andreas Steffen ce7fdaca71 iterate certinfos linked list for matching serialNumber 2007-03-05 22:08:48 +00:00
Andreas Steffen 0b0eb65573 added 2007-03-05 19:15:33 +00:00
Andreas Steffen 03ffdf7526 moved listing of crls to local_credential_store and ca 2007-03-03 21:10:22 +00:00
Andreas Steffen 81020aaefd refactored ca_info_t 2007-03-03 21:08:07 +00:00
Andreas Steffen e5b0570a02 refactored ca_info_t 2007-03-03 21:07:23 +00:00
Andreas Steffen 671a54e9ab config-payload scenario fixes 2007-03-01 08:20:50 +00:00
Andreas Steffen 9b1f4540c6 preparations for PLUTO_MY_SOURCEIP 2007-03-01 07:45:43 +00:00
Andreas Steffen 7493cd0b6b corrected typo 2007-03-01 00:00:35 +00:00
Andreas Steffen 83c3750ac3 added cert with OCSP access info 2007-02-28 23:25:13 +00:00
Andreas Steffen b62f2fc895 dpd now takes 180 s and 5 retransmits 2007-02-28 23:19:20 +00:00
Andreas Steffen 1b44633cbc changed grep to creating aquire job for CHILD SA 2007-02-28 23:02:40 +00:00
Andreas Steffen 501fac0c88 replaced actual virtual IPs by place holders 2007-02-28 22:38:49 +00:00
Andreas Steffen f4d7dec384 virtual-ip scenario has been replaces by config-payload scenario 2007-02-28 22:21:58 +00:00
Andreas Steffen bc92caaabf added 2007-02-28 22:16:23 +00:00
Andreas Steffen 63b97bda3f added 2007-02-28 22:16:16 +00:00
Andreas Steffen 05bda56556 added ocsp.h and ocsp.c 2007-02-28 20:31:07 +00:00
Andreas Steffen eb8aaa6747 added 2007-02-28 20:30:44 +00:00
Andreas Steffen e6b1066edc cosmetics 2007-02-27 22:05:49 +00:00
Andreas Steffen 2ddcc33e16 added once flag to certinfo_t 2007-02-27 21:23:51 +00:00
Andreas Steffen bc5c21baac cosmetics 2007-02-27 21:22:57 +00:00
Andreas Steffen 87dabcbd1e added certinfos linked list 2007-02-27 21:21:54 +00:00
Andreas Steffen f3f390eb76 changed ca info to ca 2007-02-25 18:47:09 +00:00
Andreas Steffen c5d0fbb665 support of ca info sections 2007-02-25 08:18:11 +00:00
Andreas Steffen 9c6032510f added support of OCSP accessLocations 2007-02-25 08:15:46 +00:00
Andreas Steffen 508d22b2f9 correct interface definition 2007-02-25 08:15:38 +00:00
Andreas Steffen 7d119253f6 added support of OCSP accessLocations 2007-02-25 08:14:50 +00:00
Andreas Steffen db56de5bf7 full support of ca info records 2007-02-24 23:21:57 +00:00
Andreas Steffen e3c0ece8c8 added the create_crluri_iterator method 2007-02-24 23:21:45 +00:00
Andreas Steffen 7eb4010c01 replace ca is realized as del_ca followed by add_ca 2007-02-24 23:20:27 +00:00
Andreas Steffen 98a905838a last CA keyword is KW_OCSPURI2 2007-02-24 23:19:28 +00:00
Andreas Steffen b3e4211fc3 full support of ca info records 2007-02-24 23:18:31 +00:00
Andreas Steffen 83fbaa1ff0 full support of ca info records 2007-02-24 23:18:08 +00:00
Andreas Steffen 84fd27d06a alphabetically sorting print commands 2007-02-24 00:35:23 +00:00
Andreas Steffen 87f0656c39 listing ca_info items 2007-02-24 00:34:44 +00:00
Andreas Steffen 7d203c3b75 replace printf.h by stdio.h 2007-02-24 00:34:17 +00:00
Andreas Steffen 0cdec3baa5 addin get_keyid() method 2007-02-24 00:33:48 +00:00
Andreas Steffen 182d20e94e support of ca info records 2007-02-23 15:15:31 +00:00
Andreas Steffen 2ef41cdad9 support of ca info records 2007-02-23 15:14:59 +00:00
Andreas Steffen b70b08c8e2 version bump to 4.0.8 2007-02-23 15:14:21 +00:00
Andreas Steffen f13570a0d6 support of ca info records 2007-02-23 15:13:33 +00:00
Andreas Steffen 113be7f186 support of ca info records 2007-02-23 15:13:21 +00:00
Andreas Steffen 1ff95477e7 typo 2007-02-21 23:08:35 +00:00
Andreas Steffen 7a01e2b9a3 SHA512-HMAC bug fix and hash function self-test support 2007-02-21 13:10:24 +00:00
Andreas Steffen 51f4dfa035 SHA512-HMAC bug fix and hash function self-test support 2007-02-21 13:10:08 +00:00
Andreas Steffen 9f6a17a444 handle strong SHA-2 signatures in X.509 certificates 2007-02-21 13:08:45 +00:00
Andreas Steffen cd3958f86a SHA-2 fixes and add-ons 2007-02-21 13:07:39 +00:00
Andreas Steffen 2ea734180e version bumps 2007-02-21 13:07:09 +00:00
Andreas Steffen 8aa3e1ac65 remove strong certs and keys after test 2007-02-21 13:06:26 +00:00
Andreas Steffen c831506e35 added 2007-02-21 13:05:53 +00:00
Andreas Steffen 61eb45caf5 added PRINT_CAINFO hook 2007-02-14 10:54:39 +00:00
Andreas Steffen 786b0706b4 stroke now recognizes the keywords listocspcerts|cainfos|ocsp, rereadocspcerts and purgeocsp 2007-02-14 01:08:41 +00:00
Andreas Steffen 1e77bdc36b enable IP forwarding 2007-02-14 01:05:58 +00:00
Andreas Steffen 5943682737 prepared support of ca information records and ocsp functionality 2007-02-14 01:04:46 +00:00
Andreas Steffen 34d7935ed4 added support of ca information records and ocsp keywords 2007-02-14 01:03:08 +00:00
Andreas Steffen 06133e1de7 enabled adding and deleting ca information records 2007-02-14 01:02:09 +00:00
Andreas Steffen 3a5f6dff7a fixed starter crash due to freeing default IPSEC_EAPDIR string 2007-02-14 00:56:58 +00:00
Andreas Steffen 8245a9142c add --eapdir option only if defined in ipsec.conf 2007-02-14 00:53:45 +00:00
Andreas Steffen 6fda18d99d %T requires time_t ptr 2007-02-08 17:59:37 +00:00
Andreas Steffen f56d2b2623 output peer id if RSA public key is not found 2007-02-02 11:04:05 +00:00
Andreas Steffen 846e4b0517 fixed typo 2007-02-02 11:03:33 +00:00
Andreas Steffen 9247a99973 version bump to 4.0.8 2007-02-02 11:02:29 +00:00
Andreas Steffen 280f5aeb47 added configuration of XAUTH and ModeConfig push mode 2007-01-29 08:38:17 +00:00
Andreas Steffen 85657c7bd3 version bump 2007-01-29 07:47:31 +00:00
Andreas Steffen c796659f23 version bump 2007-01-29 07:47:03 +00:00
Andreas Steffen 6fdf5f44cf Cisco XAUTH interoperability 2007-01-29 07:46:09 +00:00
Andreas Steffen ef05d8465b XAUTH interoperability with Cisco 2007-01-29 07:43:34 +00:00
Andreas Steffen f527c5a288 removed IPSECPOLICY compile option 2007-01-29 07:42:30 +00:00
Andreas Steffen e43641e712 unload xauth_module only if XAUTH_DEFAULT_LIB is defined 2007-01-28 00:14:50 +00:00
Andreas Steffen 7bca75e51c loading the XAUTH module requires libdl 2007-01-28 00:08:49 +00:00
Andreas Steffen 4830536d8c added some more attributes, inst XAUTH_TYPE in reply 2007-01-26 18:09:28 +00:00
Andreas Steffen f8200bf0f7 Mode Config refactoring 2007-01-25 19:40:34 +00:00
Andreas Steffen 1c266d7d69 XAUTH fixes and Cisco Unity support 2007-01-25 19:39:50 +00:00