 Andreas Steffen
|
bb7b613b83
|
eliminated bashisms in _updown scripts
|
2008-07-18 10:04:40 +00:00 |
|
|
Andreas Steffen
|
08ab369b8c
|
included Thomas in copyright statement
|
2008-07-16 12:28:29 +00:00 |
|
|
Andreas Steffen
|
519e87b078
|
updated copyright statement
|
2008-07-16 10:17:04 +00:00 |
|
|
Andreas Steffen
|
872aa6ea51
|
fixed bashism in ipsec.in
|
2008-07-16 06:59:08 +00:00 |
|
|
Andreas Steffen
|
326bfd0450
|
set XFRM_STATE_AF_UNSPEC flag only in IPsec tunnel mode
|
2008-07-15 21:35:55 +00:00 |
|
|
Andreas Steffen
|
de5f70e74d
|
typo
|
2008-07-15 15:31:34 +00:00 |
|
|
Andreas Steffen
|
eb0cc33886
|
The XFRM_STATE_AF_UNSPEC flag added to xfrm.h allows IPv4-over-IPv6 and IPv6-over-IPv6 tunnels with the 2.6.26 and later Linux kernels
|
2008-07-15 15:28:00 +00:00 |
|
|
Andreas Steffen
|
6d58c2be9a
|
cosmetics
|
2008-07-15 13:09:09 +00:00 |
|
|
Andreas Steffen
|
0ef961b878
|
added pfsgroup to ipsec.conf.5 man page
|
2008-07-15 13:07:27 +00:00 |
|
|
Andreas Steffen
|
4336a1c611
|
edited description
|
2008-07-11 17:09:48 +00:00 |
|
|
Andreas Steffen
|
a771dc33d0
|
added the ikev2/any-interface scenario
|
2008-07-11 17:08:25 +00:00 |
|
|
Andreas Steffen
|
174960bedc
|
expanded ikev2/ip-two-pools-db to a spoke-to-hub network using virtual IP addresses
|
2008-07-11 15:24:02 +00:00 |
|
|
Andreas Steffen
|
858a9fd584
|
update_peerid() does not accept %any as a certificate's subjectAltName
|
2008-07-09 22:13:39 +00:00 |
|
|
Andreas Steffen
|
60721cee73
|
reset version to 4.2.5
|
2008-07-03 16:43:18 +00:00 |
|
|
Andreas Steffen
|
174216c79d
|
update NEWS with ip pool add-ons and fixes
|
2008-07-03 16:42:45 +00:00 |
|
|
Andreas Steffen
|
2c258d7373
|
ipsec statusall displays dpd options
|
2008-07-02 10:48:57 +00:00 |
|
|
Andreas Steffen
|
1dec30625e
|
check if parsing of ipsec update was successful
|
2008-07-02 05:51:49 +00:00 |
|
|
Andreas Steffen
|
4ddd73351c
|
added simple ikev2/ip-two-pools scenario
|
2008-07-01 20:38:30 +00:00 |
|
|
Andreas Steffen
|
8997db6a99
|
added ikev2/ip-two-pools-db scenario
|
2008-07-01 15:16:28 +00:00 |
|
|
Andreas Steffen
|
556e426fd8
|
renamed STROKE_DOWNSRCIP to STROKE_DOWN_SRCIP
|
2008-07-01 13:47:26 +00:00 |
|
|
Andreas Steffen
|
5397a7f91d
|
show authentication method in ipsec statusall
|
2008-06-30 17:08:47 +00:00 |
|
|
Andreas Steffen
|
9d1f86cf1a
|
added sql/rw-eap-aka-rsa scenario
|
2008-06-30 07:24:55 +00:00 |
|
|
Andreas Steffen
|
1b7db64f6f
|
configure plugin path in scripts
|
2008-06-29 14:43:50 +00:00 |
|
|
Andreas Steffen
|
39b7780df9
|
created scripts/Makefile.am
|
2008-06-29 13:57:00 +00:00 |
|
|
Andreas Steffen
|
125aaf1ab1
|
log received vendor id as a hex value
|
2008-06-27 17:11:54 +00:00 |
|
|
Andreas Steffen
|
dc04f16e26
|
corrected vendor_id_payload diagram
|
2008-06-27 15:22:27 +00:00 |
|
|
Andreas Steffen
|
9de95037a0
|
corrected some NEWS entries
|
2008-06-26 13:50:54 +00:00 |
|
|
Andreas Steffen
|
f234c83612
|
corrected description of openssl/ike-alg-ecp-high scenario
|
2008-06-26 13:49:48 +00:00 |
|
|
Andreas Steffen
|
615611afc1
|
version bump to 4.2.5
|
2008-06-26 09:59:55 +00:00 |
|
|
Andreas Steffen
|
6567648616
|
check migration of ESP sequence numbers in MOBIKE scenarios
|
2008-06-26 09:46:23 +00:00 |
|
|
Andreas Steffen
|
e25bedb722
|
use ip xfrm with the detailed -s option
|
2008-06-26 09:41:22 +00:00 |
|
|
Andreas Steffen
|
e0bb4dbbfe
|
mention ESP sequence number updates
|
2008-06-26 08:44:59 +00:00 |
|
|
Andreas Steffen
|
73a8eed31c
|
updated NEWS for the imminent 4.2.4 release
|
2008-06-25 08:41:16 +00:00 |
|
|
Andreas Steffen
|
7c8eff1eaa
|
cosmetics
|
2008-06-23 09:08:49 +00:00 |
|
|
Andreas Steffen
|
7f6d8d5172
|
set version to 4.2.4
|
2008-06-22 18:08:37 +00:00 |
|
|
Andreas Steffen
|
63265f0e58
|
generate CRL for strongSwan EC Root CA
|
2008-06-22 17:56:42 +00:00 |
|
|
Andreas Steffen
|
0d12006def
|
support of ECDSA signatures for all certificate types
|
2008-06-22 17:41:07 +00:00 |
|
|
Andreas Steffen
|
3af698fa4d
|
added openssl/ecdsa-certs scenario
|
2008-06-22 16:54:45 +00:00 |
|
|
Andreas Steffen
|
1bd02e864c
|
added strongSwan EC Root CA
|
2008-06-22 16:41:00 +00:00 |
|
|
Andreas Steffen
|
867aae5d76
|
remove ikev2/nat-pf scenario
|
2008-06-22 11:41:49 +00:00 |
|
|
Andreas Steffen
|
11f7d0f9fa
|
check for selected IKE proposal
|
2008-06-22 11:26:37 +00:00 |
|
|
Andreas Steffen
|
bc997f6583
|
display selected IKE proposal in ipsec statusall
|
2008-06-22 11:24:33 +00:00 |
|
|
Andreas Steffen
|
ff8d906b07
|
removed ikev2/nat-double-snat scenario
|
2008-06-21 13:45:54 +00:00 |
|
|
Andreas Steffen
|
c7fa158852
|
used ipsec pool --leases --filter option in evaltest.dat
|
2008-06-21 13:31:54 +00:00 |
|
|
Andreas Steffen
|
635ee1bf7d
|
adapted evaltest.dat to modified RSA signature debug output
|
2008-06-21 13:30:24 +00:00 |
|
|
Andreas Steffen
|
fa97d9104f
|
added strongswan.conf with plugin list
|
2008-06-21 13:24:49 +00:00 |
|
|
Andreas Steffen
|
9d3cb1afb3
|
test ipsec pool --del option
|
2008-06-21 13:19:58 +00:00 |
|
|
Andreas Steffen
|
949b9664a5
|
adapted evaltest.dat to modified RSA signature debug output
|
2008-06-21 13:19:13 +00:00 |
|
|
Andreas Steffen
|
5b0362ade9
|
public key operations using the OpenSSL library require the pubkey plugin
|
2008-06-21 13:16:17 +00:00 |
|
|
Andreas Steffen
|
7d4bb52073
|
make config_auth_method_t backward compatible to existing sql templates
|
2008-06-10 20:31:53 +00:00 |
|
|
Andreas Steffen
|
1e5522ffd7
|
convert comma-separated RDNs into slash-separated OpenSSL --subject format
|
2008-06-05 19:28:08 +00:00 |
|
|
Andreas Steffen
|
179dd12c3a
|
added statistics functions and input validation checks to ipsec pool
|
2008-06-05 12:17:08 +00:00 |
|
|
Andreas Steffen
|
da4ad32547
|
moved copying of tables.sql after the strongswan installation
|
2008-06-05 07:25:27 +00:00 |
|
|
Andreas Steffen
|
89c87995e2
|
cosmetics in size field of ipsec pool --status command
|
2008-06-04 22:20:19 +00:00 |
|
|
Andreas Steffen
|
0ebc87f73e
|
added missing strongswan.conf
|
2008-05-31 08:56:13 +00:00 |
|
|
Andreas Steffen
|
76340368a6
|
divided ipsec.sql into tables.sql and data.sql
|
2008-05-31 08:53:48 +00:00 |
|
|
Andreas Steffen
|
fe46d8da37
|
added missing TCPDUMPHOST alice
|
2008-05-29 08:58:49 +00:00 |
|
|
Andreas Steffen
|
5785683afe
|
added two Elliptic Curve DH Group scenarios using the openssl library
|
2008-05-29 08:28:20 +00:00 |
|
|
Andreas Steffen
|
0655fe4fd8
|
CIRCLEQ patch submitted by Jay Pfeifer
|
2008-05-29 07:49:47 +00:00 |
|
|
Andreas Steffen
|
0caf2b936e
|
added missing comma in enumeration
|
2008-05-29 06:55:03 +00:00 |
|
|
Andreas Steffen
|
2e6749af0a
|
activate --enable-openssl option in uml scenarios
|
2008-05-28 14:13:40 +00:00 |
|
|
Andreas Steffen
|
1cc594f9bc
|
added openssl/rw-cert uml scenario
|
2008-05-28 13:49:53 +00:00 |
|
|
Andreas Steffen
|
7fe3ae88e4
|
handle default key sizes in openssl_crypter
|
2008-05-28 12:20:38 +00:00 |
|
|
Andreas Steffen
|
f1c2489e1e
|
added ikev2/rw-eap-md5-rsa scenario
|
2008-05-28 10:38:12 +00:00 |
|
|
Andreas Steffen
|
e825ede271
|
reinsert hash_and_url = yes option in strongswan.conf
|
2008-05-28 08:35:28 +00:00 |
|
|
Andreas Steffen
|
c9be754a45
|
define plugins to be loaded in strongswan.conf
|
2008-05-28 08:29:51 +00:00 |
|
|
Andreas Steffen
|
8f7074cf2e
|
version bump to 4.2.4
|
2008-05-25 10:35:39 +00:00 |
|
|
Andreas Steffen
|
f9b1bcad24
|
do not list empty certuribase strings
|
2008-05-24 05:47:37 +00:00 |
|
|
Andreas Steffen
|
ed26207d08
|
fixed copy-and-paste error
|
2008-05-23 19:23:04 +00:00 |
|
|
Andreas Steffen
|
49b2395e3b
|
check if parsing of the RSA public key in an X.509 certificate was successful
|
2008-05-23 19:22:37 +00:00 |
|
|
Andreas Steffen
|
7dfb8a1bde
|
fix caption alignment if date is displayed in local time
|
2008-05-23 19:21:08 +00:00 |
|
|
Andreas Steffen
|
731ac6bf52
|
check if crypter is available in pem_to_bin()
|
2008-05-23 19:18:08 +00:00 |
|
|
Andreas Steffen
|
83d9e870ad
|
some bug fixes
|
2008-05-23 16:06:58 +00:00 |
|
|
Andreas Steffen
|
c7d81ad12c
|
added --utc option to ipsec pool
|
2008-05-23 15:46:25 +00:00 |
|
|
Andreas Steffen
|
0672aa7b0e
|
added display of holderIssuer, holderSerial, and authorityKeyIdentifier
|
2008-05-23 14:24:24 +00:00 |
|
|
Andreas Steffen
|
8cc16c9d9e
|
fixed the strongswan.conf path
|
2008-05-22 21:59:54 +00:00 |
|
|
Andreas Steffen
|
eaa1399812
|
fixed the strongswan.conf path
|
2008-05-22 21:59:30 +00:00 |
|
|
Andreas Steffen
|
7199d22e77
|
implement basic listing of attribute certificates
|
2008-05-22 21:58:22 +00:00 |
|
|
Andreas Steffen
|
be1585c587
|
log received DH groups and PRFs if no common proposal is found
|
2008-05-22 14:18:44 +00:00 |
|
|
Andreas Steffen
|
58ac5e2ff4
|
fixed segmentation fault caused by malformed attribute certificates
|
2008-05-21 22:53:45 +00:00 |
|
|
Andreas Steffen
|
0005cee527
|
fixed typo
|
2008-05-21 21:52:59 +00:00 |
|
|
Andreas Steffen
|
4d9c95ffcd
|
version bump to 4.2.3
|
2008-05-21 18:40:11 +00:00 |
|
|
Andreas Steffen
|
8bbb212f3a
|
list proposed ESP ENCRYPTION and INTEGRITY algorithms if no proposal is chosen
|
2008-05-20 21:54:33 +00:00 |
|
|
Andreas Steffen
|
a57cd446c6
|
added support of AES-CCM and AES-GCM
|
2008-05-20 19:38:28 +00:00 |
|
|
Andreas Steffen
|
02cd76241a
|
corrected evaltest.dat of ip-pool-db scenarios
|
2008-05-20 18:33:23 +00:00 |
|
|
Andreas Steffen
|
59495f8ae2
|
added the sql/ip-pool-db-restart and sql/ip-pool-db-expired scenarios
|
2008-05-20 18:30:39 +00:00 |
|
|
Andreas Steffen
|
49aeafc502
|
removed debug statement
|
2008-05-20 16:23:58 +00:00 |
|
|
Andreas Steffen
|
7f02156ebf
|
fixed whitespace eating in plugin loader
|
2008-05-20 15:03:15 +00:00 |
|
|
Andreas Steffen
|
367cc86f4a
|
added missing break in case statement
|
2008-05-19 20:10:26 +00:00 |
|
|
Andreas Steffen
|
6898ca1397
|
added ikev2/esp-alg-aes-ccm and ikev2/esp-alg-aes-gcm scenarios
|
2008-05-17 21:57:08 +00:00 |
|
|
Andreas Steffen
|
a327ee9589
|
suppress listing of integrity algorithm if it is undefined
|
2008-05-17 21:52:58 +00:00 |
|
|
Andreas Steffen
|
15c508c708
|
ccm and gcm icv_sizes are accepted both in bits and octets
|
2008-05-17 21:51:47 +00:00 |
|
|
Andreas Steffen
|
d8ff9eee6b
|
added missing semicolon
|
2008-05-15 19:40:38 +00:00 |
|
|
Andreas Steffen
|
bde895181d
|
added ikev2/compress scenario
|
2008-05-14 20:07:16 +00:00 |
|
|
Andreas Steffen
|
8fb81c3f5b
|
ip pool now suppresses plugin loading debug output
|
2008-05-13 19:38:50 +00:00 |
|
|
Andreas Steffen
|
6878fa738a
|
applied aes-xcbc-96 to ike as well
|
2008-05-13 19:37:01 +00:00 |
|
|
Andreas Steffen
|
2e77a49c8c
|
added sql/ip-pool-db scenario
|
2008-05-13 19:35:10 +00:00 |
|
|
Andreas Steffen
|
ef31d1161d
|
added caption to ipsec.sql file
|
2008-05-13 05:53:21 +00:00 |
|
|
Andreas Steffen
|
2e6342db52
|
do-test always downloads ipsec.sql
|
2008-05-13 05:51:12 +00:00 |
|
|
Andreas Steffen
|
d6436bfbd9
|
added empty ipsec.sql file
|
2008-05-13 05:50:23 +00:00 |
|