Martin Willi
d4f08fe324
removed superfluous get_other_public_value in diffie_hellman_t interface
2008-11-04 13:12:11 +00:00
Martin Willi
ddd7e6c656
fixed bignum export if BN_num_bytes() != DH_size()
2008-11-04 13:05:00 +00:00
Martin Willi
dcbea444ee
fixed memleak
2008-11-04 13:01:36 +00:00
Martin Willi
7de6da0c88
added locking mechanism for multithreaded use of OpenSSL
2008-11-03 16:14:12 +00:00
Martin Willi
ee66fa625e
removed accidently checked in debug code
2008-11-03 12:40:42 +00:00
Martin Willi
d6dc9db5ef
reverted 4541, does not fix the problem
2008-11-03 09:44:20 +00:00
Martin Willi
e301a69d6c
removed 0-byte truncation, fixes random Openssl RSA signature verification failures
2008-10-31 17:07:04 +00:00
Martin Willi
a13862be61
fixed crash in openssl signature verification if sizeof(size_t) != sizeof(int) (64bit)
2008-10-31 17:05:40 +00:00
Martin Willi
19aff61b19
reverted changeset 4529:
...
Camellia is 22 in IKEv1, but not-yet defined in IKEv2
in IKEv2, 22 is reserved for AES-XTS
2008-10-30 13:21:21 +00:00
Andreas Steffen
fdaed5289a
added Camellia CBC to list of encryption algorithms
2008-10-30 03:31:36 +00:00
Martin Willi
f65ba4e978
prf handles zero-length allocations graceful
2008-10-29 14:12:54 +00:00
Andreas Steffen
f5ab7f5f57
refining changeset 4483 by introducing charon.dh_exponent_ansi_x9_42 key
2008-10-28 01:59:01 +00:00
Andreas Steffen
aeaa6a9b45
remove unused local DH_EXPONENT_ENTROPY definition
2008-10-27 00:02:22 +00:00
Andreas Steffen
21a45f2f2d
use 512 bits of entropy for secret DH exponents
2008-10-26 23:53:52 +00:00
Martin Willi
104c28d603
fixed perl oid generation
2008-10-16 15:38:48 +00:00
Martin Willi
f868dc0ca2
condvar->wait() can handle recursive mutex
2008-10-16 11:29:42 +00:00
Tobias Brunner
1adaa02bb2
merging kernel_pfkey plugin back from kernel-interface branch
2008-10-14 08:46:31 +00:00
Andreas Steffen
d1cbe55127
implemented ipsec listalgs as a stroke command
2008-10-08 07:00:13 +00:00
Andreas Steffen
af09048e35
get_subject() of a CERT_TRUSTED_PUBKEY object returns ID_PUBKEY_INFO_SHA1 hash consistent with the IKEv2 keyid philosophy
2008-10-08 03:35:52 +00:00
Andreas Steffen
95fd1dedb3
Implemented BUILD_BLOB_ASN1_DER for the CERT_TRUSTED_PUBKEY subtype
2008-10-08 01:19:26 +00:00
Martin Willi
0592212f23
fixed builder_cancel macro to return NULL on failed build
2008-10-06 13:08:49 +00:00
Martin Willi
ceff3064fe
using signed return value for read()
2008-09-30 06:27:50 +00:00
Martin Willi
cdaf57ec34
fixed DH value range testing
2008-09-17 09:02:30 +00:00
Martin Willi
73f6886a50
checking mpz_export return value properly
...
fixes a potential DoS attack if a DH value of zero gets processed
2008-09-17 08:10:48 +00:00
Andreas Steffen
b33c11b6c7
stroke parses and lists AC groups
2008-09-17 02:17:01 +00:00
Andreas Steffen
07d7f9a402
time values in strongswan.conf can be optionally specified in days (d), hours (h), minutes (m), or seconds (s)
2008-09-04 16:19:46 +00:00
Martin Willi
6af6f88a79
agent plugin optionally accepts a BUILD_PUBLIC_KEY to select a specific private key from the agent
2008-09-04 08:35:11 +00:00
Martin Willi
21c9546321
libstrongswan agent plugin to use ssh-agent for RSA signatures
2008-09-02 11:04:26 +00:00
Martin Willi
f7c17aa15c
refactored credential builder
...
allow enumeration of matching builders
try a second builder if the first one fails
builder clones resources internally on demand
caller frees added resources on failure and success
stricter handling of non-supported build parts
2008-09-02 11:00:13 +00:00
Andreas Steffen
4da0116d78
OIDs used by strongSwan
2008-09-01 11:38:03 +00:00
Martin Willi
e609b1cda2
capability API to allow plugin-controlled capability set
2008-08-28 16:27:48 +00:00
Martin Willi
e577ad3985
creating default IKE proposals dynamically using algorithm enumeration API
2008-08-28 11:07:57 +00:00
Martin Willi
f1b014b9a3
separated sha1_prf implementation from sha1_hasher
2008-08-28 10:57:24 +00:00
Martin Willi
9482208633
crypto_factory algorithm enumeration API
...
implementation of "ipsec listalgs"
2008-08-28 09:24:42 +00:00
Tobias Brunner
6c20579a43
mkdir_p: utility function to create a directory and all required parent directories
2008-08-28 07:47:55 +00:00
Martin Willi
822901061b
ported parts of two-sim branch
...
eap_identity parameter to exchange in eap_identity
some auth_info/peer_cfg refactorings
fixed some bugs, introduced new ones
2008-08-22 10:44:51 +00:00
Martin Willi
1caa265c61
a (incomplete) implementation of draft-sheffer-ikev2-gtc-00.txt using PAM
2008-08-21 12:10:07 +00:00
Andreas Steffen
dc6a2edd0d
corrected caption
2008-08-21 11:58:58 +00:00
Martin Willi
2d6559b107
added sqlite busy handler: retries on locking conflicts
2008-08-21 09:25:06 +00:00
Andreas Steffen
af165431d2
fixed libstrongswan integrity test
2008-08-19 18:51:30 +00:00
Martin Willi
092a9b88ad
added options for virtual IP, UDP encapsulation, IPComp
...
proper handling of libstrongswan/glib TRUE/FALSE conflict
2008-07-31 14:32:11 +00:00
Martin Willi
fc861b0b7e
added a driver type getter for database implementations
2008-07-21 11:13:06 +00:00
Martin Willi
11e855179e
using token enumerator to parser plugin list
2008-07-02 08:19:43 +00:00
Martin Willi
fca4d3ee03
implementation of a simple "token enumerator"
2008-07-02 08:09:07 +00:00
Martin Willi
fe5d7c43be
whitelisting leaks of ENGINE_load_builtin_engines
2008-07-01 07:53:03 +00:00
Martin Willi
7da767f773
sqlite plugin requires libsqlite3 => 3.3.1 to share connections
...
use recursive locking if libsqlite3 < 3.5.0
2008-06-30 11:06:18 +00:00
Martin Willi
854a2e1760
fixed ifndef typo for MYSQL_DATA_TRUNCATED check
2008-06-26 07:31:52 +00:00
Martin Willi
236083cb56
fixed plugin loader destruction
2008-06-25 14:53:49 +00:00
Tobias Brunner
1b7d2e31a6
enabling support for hardware accelerators in OpenSSL
2008-06-25 12:39:32 +00:00
Martin Willi
fae6e24dad
reintroducing MYSQL_DATA_TRUNCATED if supported on that mysql version
2008-06-24 14:30:14 +00:00
Martin Willi