Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen 1271983ab9 computed hash-and-url for new certificates 2009-09-22 12:05:37 +02:00
Andreas Steffen 8153be823b plugin has been renamed to resolve 2009-09-20 22:03:23 +02:00
Andreas Steffen 399ce164ad delete resolv_conf_* files 2009-09-20 21:59:36 +02:00
Andreas Steffen af784261f5 all arguments must be read 2009-09-20 21:56:22 +02:00
Andreas Steffen 4819ec6a71 resolv_conf plugin renamed to resolve 2009-09-20 19:06:58 +02:00
Andreas Steffen 03f096df7e adapt evaltest.dat to changed debug output 2009-09-20 17:23:24 +02:00
Andreas Steffen d7f2ffcf11 renewed certs in dynamic-initiator/dynamic-responder scenarios 2009-09-19 08:18:42 +02:00
Andreas Steffen 6aa8d2c8bb use new certificates 2009-09-19 00:26:55 +02:00
Andreas Steffen 05a6a77d85 eliminated double library_deinit() 2009-09-19 00:00:56 +02:00
Andreas Steffen 309b8b3956 keyids of renewed keys 2009-09-18 21:44:57 +02:00
Andreas Steffen afcd0b9787 updated to renewed certs in SQL database 2009-09-18 21:22:37 +02:00
Andreas Steffen bdfe17c79b renewal of end entity certificates 2009-09-18 21:17:03 +02:00
Andreas Steffen ddbb34093f fixed --enable-eap-md5 and --enable-eap-gtc options 2009-09-18 18:23:26 +02:00
Andreas Steffen d78a0262d1 backwards compatibility with SQL format 2009-09-18 15:48:24 +02:00
Andreas Steffen d245f5cf33 some reformulations 2009-09-17 22:21:14 +02:00
Andreas Steffen 8101695b32 fixed typo 2009-09-15 16:48:13 +02:00
Andreas Steffen f561d6f2e9 changed prefix of crl_reason_t values from CRL_ to CRL_REASON_ 2009-08-31 23:21:50 +02:00
Andreas Steffen dc4aadc3f2 use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 23:05:45 +02:00
Andreas Steffen a63f62c03b use crl_reason_t definition from <credentials/certificates/crl.h> 2009-08-31 22:58:34 +02:00
Andreas Steffen 52673c4348 generation of keyid requires pkcs1 plugin 2009-08-30 22:55:40 +02:00
Andreas Steffen c9f74892cc clear RSA private key chunks after use 2009-08-30 19:12:29 +02:00
Andreas Steffen 1982096aa0 ASN.1 DER encoding of private key is not needed anymore 2009-08-30 19:05:43 +02:00
Andreas Steffen 26fa5a37d9 new UML scenario certs have SHA256 digest 2009-08-30 17:58:34 +02:00
Andreas Steffen 735628f3e3 removed position debug output 2009-08-30 17:37:27 +02:00
Andreas Steffen 2aa67d2636 .., but a comment might be helpful 2009-08-28 09:28:39 +02:00
Andreas Steffen 6be3f0f1d0 removed TODO reminder 2009-08-28 09:26:46 +02:00
Andreas Steffen be04eef270 allow choice of digest algorithm in certificate generation 2009-08-28 09:08:03 +02:00
Andreas Steffen e201f53e93 build_curve_signature() processes hash not data 2009-08-27 20:41:29 +02:00
Andreas Steffen 1dbaec2177 NID_hash and NID_ec_curve were interchanged 2009-08-27 20:28:41 +02:00
Andreas Steffen ac6a0d5038 verify_signature() now processes hash not data 2009-08-27 20:18:22 +02:00
Andreas Steffen c812802482 NID_hash and NID_ec_curver were interchanged 2009-08-27 20:11:49 +02:00
Andreas Steffen 78aa4ebd62 OID_EC_PUBLICKEY has a parameters field, defining the elliptic curve 2009-08-27 16:34:16 +02:00
Andreas Steffen 263872c47d added OID_EC_PUBLIC_KEY algorithmIdentifier 2009-08-27 16:07:59 +02:00
Andreas Steffen 050649ac41 cosmetics 2009-08-27 15:35:56 +02:00
Andreas Steffen fb70fc24d3 revoked soon-to-expire carol certificate 2009-08-27 13:36:02 +02:00
Andreas Steffen 87cb92d944 renewed expiring strongSwan certicates for UML scenarios 2009-08-27 13:21:04 +02:00
Andreas Steffen 277627043e pgp plugin required in ikev1/net2net-pgp-v3|v4 scenarios 2009-08-26 23:42:05 +02:00
Andreas Steffen 9df7699419 dnskey plugin required in ikev1/net2net-rsa scenario 2009-08-26 23:11:06 +02:00
Andreas Steffen 706c6abe70 ikev1 psk scenarios don't need pkcs1 and pem plugins 2009-08-26 22:46:39 +02:00
Andreas Steffen 7c512d8b21 fixed typo 2009-08-26 22:25:24 +02:00
Andreas Steffen 51a9db85f4 streamlined file loading labels 2009-08-26 22:02:00 +02:00
Andreas Steffen 289ce4ade6 use --outform consistantly 2009-08-26 18:55:18 +02:00
Andreas Steffen 2f1f17f137 the option has been changed to --outform 2009-08-26 18:41:19 +02:00
Andreas Steffen a05c4a856e added pki/.libs/pki to the libs 2009-08-26 18:27:04 +02:00
Andreas Steffen ca275b383f fixed two typos 2009-08-26 17:29:57 +02:00
Andreas Steffen 8bc2a8086c version bump to 4.3.5 2009-08-18 18:35:37 +02:00
Andreas Steffen fc0ed07c1f pruned OID tree 2009-08-18 18:24:26 +02:00
Andreas Steffen c8b543a6fc fixed wrong emailAddress OID introduced by revision c31687da 2009-08-18 17:52:00 +02:00
Andreas Steffen 2f5b1e0eb7 check success of library_init() 2009-08-14 22:13:51 +02:00
Andreas Steffen 12a699c58d fixed 4.3 refactoring error 2009-08-11 08:51:16 +02:00
Andreas Steffen 87079f58e1 added -module -avoid-version LDFLAGS 2009-08-11 01:06:45 +02:00
Andreas Steffen 8ddcac4c48 prepare CAMELLIA_CCM ESP encryption 2009-08-10 16:30:42 +02:00
Andreas Steffen 20af53fe33 add ikev1/esp-alg-aes-ctr scenario 2009-08-08 19:20:53 +02:00
Andreas Steffen 453c6aea16 added ikev2/esp-alg-aes-ctr scenario 2009-08-08 19:08:17 +02:00
Andreas Steffen 4b5b92bfee %llu correctly prints u_int64_t 2009-08-07 09:50:36 +02:00
Andreas Steffen 4a02deb088 printing u_int64_t caused segfault on 32-bit platforms 2009-08-07 08:47:29 +02:00
Andreas Steffen f53088c657 added openssl-ikev2/alg-camellia scenario 2009-08-06 16:48:41 +02:00
Andreas Steffen 5d8306de68 use SS_RC_FIRST and SS_RC_LAST 2009-08-06 16:42:44 +02:00
Andreas Steffen 3646c8a159 abort pluto or charon if initialization fails 2009-08-06 16:32:52 +02:00
Andreas Steffen 994b80b513 activated CAMELLIA_CBC cipher in openssl plugin 2009-08-05 22:46:53 +02:00
Andreas Steffen b6f739c13b support of SHA224-based certificate signatures 2009-08-05 22:01:44 +02:00
Andreas Steffen 10c13ed264 fixed dereferencing bug caused by bool type redefinition 2009-08-02 16:58:32 +02:00
Andreas Steffen f35f229fd6 implemented query_sa() for PFKEYv2 2009-08-02 11:46:33 +02:00
Andreas Steffen 47eb87d437 corrected interface definition 2009-07-31 08:57:55 +02:00
Andreas Steffen 3f720dc7c3 update usetime only if usebytes increase 2009-07-30 23:19:42 +02:00
Andreas Steffen 2ad51539f6 display transmitted bytes per SA 2009-07-30 21:33:19 +02:00
Andreas Steffen ecff28c5c5 fixe KW_END_FIRST..KW_END_LAST keyword range 2009-07-28 15:44:24 +02:00
Andreas Steffen acb34739e4 improved DPD error message 2009-07-22 22:30:21 +02:00
Andreas Steffen e1089f5906 added file and segment lengths to checksum.c 2009-07-21 22:23:51 +02:00
Andreas Steffen 8ce8e19068 version bump to 4.3.4 2009-07-21 22:21:52 +02:00
Andreas Steffen 144b433402 version bump of Linux UML kernel to 2.6.30.2 2009-07-21 15:51:04 +02:00
Andreas Steffen def1777eca streamlined integrity test output some more 2009-07-18 11:23:27 +02:00
Andreas Steffen 1d941f12ad advertise activated integrity tests 2009-07-18 00:37:35 +02:00
Andreas Steffen aa74d70595 added latest NEWS 2009-07-17 22:54:23 +02:00
Andreas Steffen d9b67a9fc0 added ikev1/net2net-pgp-v4 scenario 2009-07-17 22:36:12 +02:00
Andreas Steffen 542471e3fe adapted scenario description for OpenPGP V3 keys 2009-07-17 22:33:22 +02:00
Andreas Steffen 03b704fd55 enable crypt debugging in ikev1/esp-alg-camellia scenario 2009-07-17 21:27:54 +02:00
Andreas Steffen 2e4a94ec26 added strongswan-2.8.11 and strongswan-4.2.17 VIDs 2009-07-17 21:19:32 +02:00
Andreas Steffen f179ba474e enable integrity test in all rw-cert scenarios 2009-07-17 20:52:14 +02:00
Andreas Steffen e3f3b004e2 fix test vector error output 2009-07-17 20:36:21 +02:00
Andreas Steffen eab241fb56 stop strongswan if integrity check of libstrongswan or daemon fails 2009-07-17 20:33:19 +02:00
Andreas Steffen 6b04ba288d streamlined debug output of integrity tests 2009-07-17 17:00:17 +02:00
Andreas Steffen ca366aeea0 enforce strongSwan coding rules 2009-07-17 16:57:07 +02:00
Andreas Steffen 521aa00fb1 shortened cypto test output 2009-07-17 16:36:01 +02:00
Andreas Steffen 848133ff1c accelerate lookup in non-concatenated pools 2009-07-17 13:58:29 +02:00
Andreas Steffen dfd8ddfb33 added scenario ikev2/ip-split-pools-db 2009-07-17 13:38:57 +02:00
Andreas Steffen ec54df1762 added sql/ip-split-pools-db and sql/ip-split-pools-db-restart scenarios 2009-07-17 11:50:59 +02:00
Andreas Steffen 7f522b5fd8 check for an existing lease over all assigned pools first 2009-07-17 11:48:35 +02:00
Andreas Steffen 07be083b7f fixed problem with static leases over multiple pools 2009-07-16 21:53:46 +02:00
Andreas Steffen d44b03563a double free caused strange side effects 2009-07-13 20:28:36 +02:00
Andreas Steffen 5c49289e27 great, I got my comma back 2009-07-12 21:08:37 +02:00
Andreas Steffen 1c7f456a0b ecp_x_coordinate_only option and IKEv1 AEAD support 2009-07-12 00:05:42 +02:00
Andreas Steffen a7a42f92d5 addes ikev1/esp-alg-aes-ccm and ikev1/esp-alg-aes-gcm scenarios 2009-07-12 00:05:42 +02:00
Andreas Steffen 540d02f6c0 pluto supports AES_CCM and AES_GCM ESP algorithms 2009-07-12 00:05:42 +02:00
Andreas Steffen c5ebd00517 put variable definitions up front 2009-07-12 00:05:42 +02:00
Andreas Steffen ad92c1f6cd cosmetics 2009-07-12 00:05:42 +02:00
Andreas Steffen a3ee331b0c added listener.h to charon_SOURCES 2009-07-12 00:05:41 +02:00
Andreas Steffen 356cdc2d72 update libfreeswan/pfkeyv2.h 2009-07-10 07:15:08 +02:00
Andreas Steffen eebecebead make ecp_x_coordinate_only = yes the default 2009-07-06 11:47:38 +02:00
Andreas Steffen 887ed734d0 support of OpenPGP V4 fingerprints 2009-07-04 09:26:37 +02:00