Andreas Steffen
|
1271983ab9
|
computed hash-and-url for new certificates
|
2009-09-22 12:05:37 +02:00 |
|
Andreas Steffen
|
8153be823b
|
plugin has been renamed to resolve
|
2009-09-20 22:03:23 +02:00 |
|
Andreas Steffen
|
399ce164ad
|
delete resolv_conf_* files
|
2009-09-20 21:59:36 +02:00 |
|
Andreas Steffen
|
af784261f5
|
all arguments must be read
|
2009-09-20 21:56:22 +02:00 |
|
Andreas Steffen
|
4819ec6a71
|
resolv_conf plugin renamed to resolve
|
2009-09-20 19:06:58 +02:00 |
|
Andreas Steffen
|
03f096df7e
|
adapt evaltest.dat to changed debug output
|
2009-09-20 17:23:24 +02:00 |
|
Andreas Steffen
|
d7f2ffcf11
|
renewed certs in dynamic-initiator/dynamic-responder scenarios
|
2009-09-19 08:18:42 +02:00 |
|
Andreas Steffen
|
6aa8d2c8bb
|
use new certificates
|
2009-09-19 00:26:55 +02:00 |
|
Andreas Steffen
|
05a6a77d85
|
eliminated double library_deinit()
|
2009-09-19 00:00:56 +02:00 |
|
Andreas Steffen
|
309b8b3956
|
keyids of renewed keys
|
2009-09-18 21:44:57 +02:00 |
|
Andreas Steffen
|
afcd0b9787
|
updated to renewed certs in SQL database
|
2009-09-18 21:22:37 +02:00 |
|
Andreas Steffen
|
bdfe17c79b
|
renewal of end entity certificates
|
2009-09-18 21:17:03 +02:00 |
|
Andreas Steffen
|
ddbb34093f
|
fixed --enable-eap-md5 and --enable-eap-gtc options
|
2009-09-18 18:23:26 +02:00 |
|
Andreas Steffen
|
d78a0262d1
|
backwards compatibility with SQL format
|
2009-09-18 15:48:24 +02:00 |
|
Andreas Steffen
|
d245f5cf33
|
some reformulations
|
2009-09-17 22:21:14 +02:00 |
|
Andreas Steffen
|
8101695b32
|
fixed typo
|
2009-09-15 16:48:13 +02:00 |
|
Andreas Steffen
|
f561d6f2e9
|
changed prefix of crl_reason_t values from CRL_ to CRL_REASON_
|
2009-08-31 23:21:50 +02:00 |
|
Andreas Steffen
|
dc4aadc3f2
|
use crl_reason_t definition from <credentials/certificates/crl.h>
|
2009-08-31 23:05:45 +02:00 |
|
Andreas Steffen
|
a63f62c03b
|
use crl_reason_t definition from <credentials/certificates/crl.h>
|
2009-08-31 22:58:34 +02:00 |
|
Andreas Steffen
|
52673c4348
|
generation of keyid requires pkcs1 plugin
|
2009-08-30 22:55:40 +02:00 |
|
Andreas Steffen
|
c9f74892cc
|
clear RSA private key chunks after use
|
2009-08-30 19:12:29 +02:00 |
|
Andreas Steffen
|
1982096aa0
|
ASN.1 DER encoding of private key is not needed anymore
|
2009-08-30 19:05:43 +02:00 |
|
Andreas Steffen
|
26fa5a37d9
|
new UML scenario certs have SHA256 digest
|
2009-08-30 17:58:34 +02:00 |
|
Andreas Steffen
|
735628f3e3
|
removed position debug output
|
2009-08-30 17:37:27 +02:00 |
|
Andreas Steffen
|
2aa67d2636
|
.., but a comment might be helpful
|
2009-08-28 09:28:39 +02:00 |
|
Andreas Steffen
|
6be3f0f1d0
|
removed TODO reminder
|
2009-08-28 09:26:46 +02:00 |
|
Andreas Steffen
|
be04eef270
|
allow choice of digest algorithm in certificate generation
|
2009-08-28 09:08:03 +02:00 |
|
Andreas Steffen
|
e201f53e93
|
build_curve_signature() processes hash not data
|
2009-08-27 20:41:29 +02:00 |
|
Andreas Steffen
|
1dbaec2177
|
NID_hash and NID_ec_curve were interchanged
|
2009-08-27 20:28:41 +02:00 |
|
Andreas Steffen
|
ac6a0d5038
|
verify_signature() now processes hash not data
|
2009-08-27 20:18:22 +02:00 |
|
Andreas Steffen
|
c812802482
|
NID_hash and NID_ec_curver were interchanged
|
2009-08-27 20:11:49 +02:00 |
|
Andreas Steffen
|
78aa4ebd62
|
OID_EC_PUBLICKEY has a parameters field, defining the elliptic curve
|
2009-08-27 16:34:16 +02:00 |
|
Andreas Steffen
|
263872c47d
|
added OID_EC_PUBLIC_KEY algorithmIdentifier
|
2009-08-27 16:07:59 +02:00 |
|
Andreas Steffen
|
050649ac41
|
cosmetics
|
2009-08-27 15:35:56 +02:00 |
|
Andreas Steffen
|
fb70fc24d3
|
revoked soon-to-expire carol certificate
|
2009-08-27 13:36:02 +02:00 |
|
Andreas Steffen
|
87cb92d944
|
renewed expiring strongSwan certicates for UML scenarios
|
2009-08-27 13:21:04 +02:00 |
|
Andreas Steffen
|
277627043e
|
pgp plugin required in ikev1/net2net-pgp-v3|v4 scenarios
|
2009-08-26 23:42:05 +02:00 |
|
Andreas Steffen
|
9df7699419
|
dnskey plugin required in ikev1/net2net-rsa scenario
|
2009-08-26 23:11:06 +02:00 |
|
Andreas Steffen
|
706c6abe70
|
ikev1 psk scenarios don't need pkcs1 and pem plugins
|
2009-08-26 22:46:39 +02:00 |
|
Andreas Steffen
|
7c512d8b21
|
fixed typo
|
2009-08-26 22:25:24 +02:00 |
|
Andreas Steffen
|
51a9db85f4
|
streamlined file loading labels
|
2009-08-26 22:02:00 +02:00 |
|
Andreas Steffen
|
289ce4ade6
|
use --outform consistantly
|
2009-08-26 18:55:18 +02:00 |
|
Andreas Steffen
|
2f1f17f137
|
the option has been changed to --outform
|
2009-08-26 18:41:19 +02:00 |
|
Andreas Steffen
|
a05c4a856e
|
added pki/.libs/pki to the libs
|
2009-08-26 18:27:04 +02:00 |
|
Andreas Steffen
|
ca275b383f
|
fixed two typos
|
2009-08-26 17:29:57 +02:00 |
|
Andreas Steffen
|
8bc2a8086c
|
version bump to 4.3.5
|
2009-08-18 18:35:37 +02:00 |
|
Andreas Steffen
|
fc0ed07c1f
|
pruned OID tree
|
2009-08-18 18:24:26 +02:00 |
|
Andreas Steffen
|
c8b543a6fc
|
fixed wrong emailAddress OID introduced by revision c31687da
|
2009-08-18 17:52:00 +02:00 |
|
Andreas Steffen
|
2f5b1e0eb7
|
check success of library_init()
|
2009-08-14 22:13:51 +02:00 |
|
Andreas Steffen
|
12a699c58d
|
fixed 4.3 refactoring error
|
2009-08-11 08:51:16 +02:00 |
|
Andreas Steffen
|
87079f58e1
|
added -module -avoid-version LDFLAGS
|
2009-08-11 01:06:45 +02:00 |
|
Andreas Steffen
|
8ddcac4c48
|
prepare CAMELLIA_CCM ESP encryption
|
2009-08-10 16:30:42 +02:00 |
|
Andreas Steffen
|
20af53fe33
|
add ikev1/esp-alg-aes-ctr scenario
|
2009-08-08 19:20:53 +02:00 |
|
Andreas Steffen
|
453c6aea16
|
added ikev2/esp-alg-aes-ctr scenario
|
2009-08-08 19:08:17 +02:00 |
|
Andreas Steffen
|
4b5b92bfee
|
%llu correctly prints u_int64_t
|
2009-08-07 09:50:36 +02:00 |
|
Andreas Steffen
|
4a02deb088
|
printing u_int64_t caused segfault on 32-bit platforms
|
2009-08-07 08:47:29 +02:00 |
|
Andreas Steffen
|
f53088c657
|
added openssl-ikev2/alg-camellia scenario
|
2009-08-06 16:48:41 +02:00 |
|
Andreas Steffen
|
5d8306de68
|
use SS_RC_FIRST and SS_RC_LAST
|
2009-08-06 16:42:44 +02:00 |
|
Andreas Steffen
|
3646c8a159
|
abort pluto or charon if initialization fails
|
2009-08-06 16:32:52 +02:00 |
|
Andreas Steffen
|
994b80b513
|
activated CAMELLIA_CBC cipher in openssl plugin
|
2009-08-05 22:46:53 +02:00 |
|
Andreas Steffen
|
b6f739c13b
|
support of SHA224-based certificate signatures
|
2009-08-05 22:01:44 +02:00 |
|
Andreas Steffen
|
10c13ed264
|
fixed dereferencing bug caused by bool type redefinition
|
2009-08-02 16:58:32 +02:00 |
|
Andreas Steffen
|
f35f229fd6
|
implemented query_sa() for PFKEYv2
|
2009-08-02 11:46:33 +02:00 |
|
Andreas Steffen
|
47eb87d437
|
corrected interface definition
|
2009-07-31 08:57:55 +02:00 |
|
Andreas Steffen
|
3f720dc7c3
|
update usetime only if usebytes increase
|
2009-07-30 23:19:42 +02:00 |
|
Andreas Steffen
|
2ad51539f6
|
display transmitted bytes per SA
|
2009-07-30 21:33:19 +02:00 |
|
Andreas Steffen
|
ecff28c5c5
|
fixe KW_END_FIRST..KW_END_LAST keyword range
|
2009-07-28 15:44:24 +02:00 |
|
Andreas Steffen
|
acb34739e4
|
improved DPD error message
|
2009-07-22 22:30:21 +02:00 |
|
Andreas Steffen
|
e1089f5906
|
added file and segment lengths to checksum.c
|
2009-07-21 22:23:51 +02:00 |
|
Andreas Steffen
|
8ce8e19068
|
version bump to 4.3.4
|
2009-07-21 22:21:52 +02:00 |
|
Andreas Steffen
|
144b433402
|
version bump of Linux UML kernel to 2.6.30.2
|
2009-07-21 15:51:04 +02:00 |
|
Andreas Steffen
|
def1777eca
|
streamlined integrity test output some more
|
2009-07-18 11:23:27 +02:00 |
|
Andreas Steffen
|
1d941f12ad
|
advertise activated integrity tests
|
2009-07-18 00:37:35 +02:00 |
|
Andreas Steffen
|
aa74d70595
|
added latest NEWS
|
2009-07-17 22:54:23 +02:00 |
|
Andreas Steffen
|
d9b67a9fc0
|
added ikev1/net2net-pgp-v4 scenario
|
2009-07-17 22:36:12 +02:00 |
|
Andreas Steffen
|
542471e3fe
|
adapted scenario description for OpenPGP V3 keys
|
2009-07-17 22:33:22 +02:00 |
|
Andreas Steffen
|
03b704fd55
|
enable crypt debugging in ikev1/esp-alg-camellia scenario
|
2009-07-17 21:27:54 +02:00 |
|
Andreas Steffen
|
2e4a94ec26
|
added strongswan-2.8.11 and strongswan-4.2.17 VIDs
|
2009-07-17 21:19:32 +02:00 |
|
Andreas Steffen
|
f179ba474e
|
enable integrity test in all rw-cert scenarios
|
2009-07-17 20:52:14 +02:00 |
|
Andreas Steffen
|
e3f3b004e2
|
fix test vector error output
|
2009-07-17 20:36:21 +02:00 |
|
Andreas Steffen
|
eab241fb56
|
stop strongswan if integrity check of libstrongswan or daemon fails
|
2009-07-17 20:33:19 +02:00 |
|
Andreas Steffen
|
6b04ba288d
|
streamlined debug output of integrity tests
|
2009-07-17 17:00:17 +02:00 |
|
Andreas Steffen
|
ca366aeea0
|
enforce strongSwan coding rules
|
2009-07-17 16:57:07 +02:00 |
|
Andreas Steffen
|
521aa00fb1
|
shortened cypto test output
|
2009-07-17 16:36:01 +02:00 |
|
Andreas Steffen
|
848133ff1c
|
accelerate lookup in non-concatenated pools
|
2009-07-17 13:58:29 +02:00 |
|
Andreas Steffen
|
dfd8ddfb33
|
added scenario ikev2/ip-split-pools-db
|
2009-07-17 13:38:57 +02:00 |
|
Andreas Steffen
|
ec54df1762
|
added sql/ip-split-pools-db and sql/ip-split-pools-db-restart scenarios
|
2009-07-17 11:50:59 +02:00 |
|
Andreas Steffen
|
7f522b5fd8
|
check for an existing lease over all assigned pools first
|
2009-07-17 11:48:35 +02:00 |
|
Andreas Steffen
|
07be083b7f
|
fixed problem with static leases over multiple pools
|
2009-07-16 21:53:46 +02:00 |
|
Andreas Steffen
|
d44b03563a
|
double free caused strange side effects
|
2009-07-13 20:28:36 +02:00 |
|
Andreas Steffen
|
5c49289e27
|
great, I got my comma back
|
2009-07-12 21:08:37 +02:00 |
|
Andreas Steffen
|
1c7f456a0b
|
ecp_x_coordinate_only option and IKEv1 AEAD support
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
a7a42f92d5
|
addes ikev1/esp-alg-aes-ccm and ikev1/esp-alg-aes-gcm scenarios
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
540d02f6c0
|
pluto supports AES_CCM and AES_GCM ESP algorithms
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
c5ebd00517
|
put variable definitions up front
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
ad92c1f6cd
|
cosmetics
|
2009-07-12 00:05:42 +02:00 |
|
Andreas Steffen
|
a3ee331b0c
|
added listener.h to charon_SOURCES
|
2009-07-12 00:05:41 +02:00 |
|
Andreas Steffen
|
356cdc2d72
|
update libfreeswan/pfkeyv2.h
|
2009-07-10 07:15:08 +02:00 |
|
Andreas Steffen
|
eebecebead
|
make ecp_x_coordinate_only = yes the default
|
2009-07-06 11:47:38 +02:00 |
|
Andreas Steffen
|
887ed734d0
|
support of OpenPGP V4 fingerprints
|
2009-07-04 09:26:37 +02:00 |
|