 Andreas Steffen
|
1ec8f22de2
|
set Certificate Sign and CRL Sign flags in keyUsage extension if CA is true
|
2010-03-07 17:27:53 +01:00 |
|
|
Andreas Steffen
|
3cfbc91a98
|
renewed Authorization Authority certificate
|
2010-02-27 22:16:36 +01:00 |
|
|
Andreas Steffen
|
b65d7f8a15
|
version bump to 4.4.0
|
2010-02-15 20:58:41 +01:00 |
|
|
Andreas Steffen
|
2d07095e01
|
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
|
2010-02-06 12:34:41 +01:00 |
|
|
Andreas Steffen
|
dd0b1b9a16
|
generated hash-and-url files for rfc3779 certs
|
2010-02-06 11:41:44 +01:00 |
|
|
Andreas Steffen
|
76fe5500c4
|
hash-and-url avoids IP fragementation, cert and crl fetch based on IPv6
|
2010-02-06 11:39:33 +01:00 |
|
|
Andreas Steffen
|
5094bfd85f
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 20:39:13 +01:00 |
|
|
Andreas Steffen
|
61d7ff0c19
|
IPv6 fragment and http access are not needed in PSK scenario
|
2010-02-05 20:27:03 +01:00 |
|
|
Andreas Steffen
|
699c47a9be
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 20:16:26 +01:00 |
|
|
Andreas Steffen
|
1f2da75069
|
IPv6 frag netfilter rule not needed anymore
|
2010-02-05 20:04:01 +01:00 |
|
|
Andreas Steffen
|
563a177830
|
hash-and-url avoids IP fragmentation, cert and crl fetch based on IPv6
|
2010-02-05 19:58:42 +01:00 |
|
|
Andreas Steffen
|
b917f49684
|
initialize variables to avoid compiler warning
|
2010-02-05 12:34:37 +01:00 |
|
|
Andreas Steffen
|
6c9c0baee9
|
init_fetch() changed to fetch_initialize()
|
2010-02-05 06:17:02 +01:00 |
|
|
Andreas Steffen
|
52719d719c
|
use static IPsec policy netfilter rules in MOBIKE scenarios
|
2010-02-04 10:05:44 +01:00 |
|
|
Andreas Steffen
|
8501181925
|
remove any charon.pid files remaining at the end of each scenario
|
2010-02-04 08:53:52 +01:00 |
|
|
Andreas Steffen
|
00eb9267ad
|
IPSEC_ROUTING_TABLE is now called routing_table
|
2010-02-03 19:32:50 +01:00 |
|
|
Andreas Steffen
|
ec37b04732
|
differentiate between executed and displayed iptables commands
|
2010-02-03 19:21:55 +01:00 |
|
|
Andreas Steffen
|
0d8bdf24ff
|
added ikev2/inactivity-timeout scenario
|
2010-02-03 10:28:30 +01:00 |
|
|
Andreas Steffen
|
889ff9389b
|
renamed init_fetch() to fetch_initialize()
|
2010-02-02 19:44:34 +01:00 |
|
|
Andreas Steffen
|
b7fd2ea76c
|
corrected captions
|
2010-02-01 12:44:44 +01:00 |
|
|
Andreas Steffen
|
bf1e0df7c5
|
warn if loaded local certificate is invalid
|
2010-02-01 12:29:32 +01:00 |
|
|
Andreas Steffen
|
8fb389b299
|
added ikev2/rw-eap-sim-only-radius scenario
|
2010-01-11 11:20:45 +01:00 |
|
|
Andreas Steffen
|
b979032088
|
log EAP-only authentication proposal
|
2010-01-11 11:17:40 +01:00 |
|
|
Andreas Steffen
|
87eb27681a
|
send strongSwan Vendor ID in ikev2/alg-sha256-96 scenario
|
2010-01-11 00:54:33 +01:00 |
|
|
Andreas Steffen
|
dd37fa8620
|
pluto and charon are using the same strongSwan Vendor ID
|
2010-01-11 00:43:46 +01:00 |
|
|
Andreas Steffen
|
580063971b
|
added some recent new attributes registered with IANA
|
2010-01-07 07:49:16 +01:00 |
|
|
Andreas Steffen
|
7eaec999ca
|
make error message about missing MD4 hasher more explicit
|
2009-12-30 23:32:03 +01:00 |
|
|
Andreas Steffen
|
83c282ebb4
|
differentiate EAP method initialization errors
|
2009-12-30 21:34:59 +01:00 |
|
|
Andreas Steffen
|
a2847740d2
|
removed charon-specific load statement in pluto scenario
|
2009-12-26 17:13:53 +01:00 |
|
|
Andreas Steffen
|
c5454eaf61
|
added RFC 3779 CA
|
2009-12-25 11:20:59 +01:00 |
|
|
Andreas Steffen
|
7c697964d3
|
added three RFC 3779 scenarios
|
2009-12-25 11:20:59 +01:00 |
|
|
Andreas Steffen
|
e98a4d8028
|
Added RFC 3779 support to NEWS
|
2009-12-25 11:20:58 +01:00 |
|
|
Andreas Steffen
|
d002c62347
|
enforce RFC 3779 address constraints on traffic selectors
|
2009-12-25 11:20:58 +01:00 |
|
|
Andreas Steffen
|
32d8f44229
|
verify RFC3779 IP address blocks along X.509 certificate trust chain
|
2009-12-23 14:21:31 +01:00 |
|
|
Andreas Steffen
|
925eadba5f
|
do not recalculate netbits for true subnets
|
2009-12-22 17:07:08 +01:00 |
|
|
Andreas Steffen
|
e16a01a5e6
|
X509_IP_ADDR_BLOCKS flag signals the presence of an ipAddrBlock certificate extension
|
2009-12-22 13:18:27 +01:00 |
|
|
Andreas Steffen
|
91e35b7c9e
|
added create_ipAddrBlock_enumerator() method to x509_t
|
2009-12-22 11:58:30 +01:00 |
|
|
Andreas Steffen
|
7686f981a4
|
cosmetics
|
2009-12-22 09:53:53 +01:00 |
|
|
Andreas Steffen
|
194c3cedc5
|
fixed IPv6 bug in calc_range()
|
2009-12-22 00:49:23 +01:00 |
|
|
Andreas Steffen
|
3f4d8815a4
|
fixed initialization of netbits
|
2009-12-21 23:03:14 +01:00 |
|
|
Andreas Steffen
|
252f38f6f8
|
fixed distribution list
|
2009-12-21 22:28:08 +01:00 |
|
|
Andreas Steffen
|
157125e4c9
|
traffic_selector supports RFC 3779 address range format
|
2009-12-21 21:29:01 +01:00 |
|
|
Andreas Steffen
|
678aab7850
|
this->type is set by traffic_selector_create()
|
2009-12-20 20:01:18 +01:00 |
|
|
Andreas Steffen
|
513eb95e60
|
parse RFC 3779 addressFamily
|
2009-12-20 19:26:28 +01:00 |
|
|
Andreas Steffen
|
7d379a786c
|
plugin name is x509
|
2009-12-20 16:01:35 +01:00 |
|
|
Andreas Steffen
|
28c25485ba
|
discard certificate with unknown critical extensions
|
2009-12-20 15:53:39 +01:00 |
|
|
Andreas Steffen
|
f3e366a9a0
|
use traffic_selector_t object to represent ipAddrBlocks
|
2009-12-20 15:15:02 +01:00 |
|
|
Andreas Steffen
|
1125a0be81
|
moved traffic_selectors from charon to libstrongswan
|
2009-12-20 14:57:38 +01:00 |
|
|
Andreas Steffen
|
92f0aa9736
|
firewall-enabled ipv6/net2net-ip6-in-ip4-ikev2 scenario
|
2009-12-17 19:43:33 +01:00 |
|
|
Andreas Steffen
|
02ee613325
|
firewall-enabled ipv6/net2net-ip4-in-ip6-ikev2 scenario
|
2009-12-17 18:50:45 +01:00 |
|
|
Andreas Steffen
|
ad858aee15
|
parse ipAddrBlocks
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
9789d3a9b9
|
fixed updown plugin for mixed IPv4/IPv6 tunnels
|
2009-12-17 17:32:55 +01:00 |
|
|
Andreas Steffen
|
f721e0fb5f
|
added IKEv1 Camellia support to NEWS
|
2009-12-16 21:52:32 +01:00 |
|
|
Andreas Steffen
|
98b0657c0a
|
ikev1/ip-pool-db-push scenario tests DNS and NBNS server support
|
2009-12-16 21:50:39 +01:00 |
|
|
Andreas Steffen
|
b6623e87b4
|
IKEv1 daemon supports DNS and NBNS server assignment from database
|
2009-12-16 21:49:51 +01:00 |
|
|
Andreas Steffen
|
4d64cbbc4e
|
ikev1/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 21:22:13 +01:00 |
|
|
Andreas Steffen
|
c236049850
|
sql/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 19:02:23 +01:00 |
|
|
Andreas Steffen
|
42eb4951f9
|
ikev2/ip-pool-db scenario tests DNS and NBNS server support
|
2009-12-16 18:45:29 +01:00 |
|
|
Andreas Steffen
|
a71556060a
|
added ipsec pool DNS and NBNS support to NEWS
|
2009-12-16 18:20:07 +01:00 |
|
|
Andreas Steffen
|
645f3865b2
|
ipsec pool manages dns and nbns servers
|
2009-12-16 18:11:57 +01:00 |
|
|
Andreas Steffen
|
3747f0f2e7
|
cosmetics
|
2009-12-16 13:33:09 +01:00 |
|
|
Andreas Steffen
|
a461e20dd8
|
provide attributes from SQL database
|
2009-12-16 12:31:41 +01:00 |
|
|
Andreas Steffen
|
b75002bc95
|
added openssl-ikev1/alg-camellia scenario
|
2009-12-15 19:55:58 +01:00 |
|
|
Andreas Steffen
|
1191779744
|
removed superfluous ikev1/esp-alg-camellia scenario
|
2009-12-15 19:16:28 +01:00 |
|
|
Andreas Steffen
|
cbcd91314b
|
added gcrypt-ikev1/alg-camellia scenario
|
2009-12-15 19:15:44 +01:00 |
|
|
Andreas Steffen
|
de962d6e7d
|
add IKEv1 support for the Camellia cipher
|
2009-12-15 19:13:06 +01:00 |
|
|
Andreas Steffen
|
25df6196df
|
activate tcpdump in ikev1/esp-alg-des scenario
|
2009-12-10 22:37:43 +01:00 |
|
|
Andreas Steffen
|
982596e427
|
shuffled output order to achieve consistence
|
2009-12-09 17:26:35 +01:00 |
|
|
Andreas Steffen
|
4d025314c8
|
added pfkey/alg-sha384 and pfkey/alg-sha512 scenarios
|
2009-12-09 17:25:12 +01:00 |
|
|
Andreas Steffen
|
3e4b1010b0
|
adapted openssl-ikev2/alg scenarios
|
2009-12-09 15:51:43 +01:00 |
|
|
Andreas Steffen
|
4ab5874ccd
|
adapted gcrypt-ikev2/alg-camellia scenario
|
2009-12-09 15:48:03 +01:00 |
|
|
Andreas Steffen
|
fcca5b5caf
|
adapted gcrypt-ikev1 alg scenarios
|
2009-12-09 15:45:45 +01:00 |
|
|
Andreas Steffen
|
8603d1d76c
|
adapted ikev1 alg and esp scenarios
|
2009-12-09 15:41:54 +01:00 |
|
|
Andreas Steffen
|
4c8f3dff9c
|
adapted pfkey alg and esp scenarios
|
2009-12-09 15:38:17 +01:00 |
|
|
Andreas Steffen
|
8e7e81451b
|
remove again the ikev2/esp-alg-camellia scenario
|
2009-12-09 15:26:43 +01:00 |
|
|
Andreas Steffen
|
99133d3086
|
adapted ikev2 alg and esp scenarios
|
2009-12-09 15:19:10 +01:00 |
|
|
Andreas Steffen
|
344061ebce
|
removed redundant ikev1/ike-alg-sha2 scenarios
|
2009-12-09 10:11:03 +01:00 |
|
|
Andreas Steffen
|
01a8af1b1b
|
added ikev1/alg-sha512 scenario
|
2009-12-09 09:51:54 +01:00 |
|
|
Andreas Steffen
|
cb7e304d33
|
added ikev1/alg-sha384 scenario
|
2009-12-09 09:46:40 +01:00 |
|
|
Andreas Steffen
|
5d9d779808
|
renamed ikev1/alg-sha2_256 scenario to ikev1/alg-sha256
|
2009-12-09 09:36:16 +01:00 |
|
|
Andreas Steffen
|
05ffbc6e59
|
added ikev1/alg-sha256-96 scenario
|
2009-12-09 09:35:17 +01:00 |
|
|
Andreas Steffen
|
353b829177
|
fixed IKEv1 support of HMAC_SHA2_256_96
|
2009-12-09 09:33:32 +01:00 |
|
|
Andreas Steffen
|
0a975307f1
|
added Juniper SRX support to NEWS
|
2009-12-09 08:00:19 +01:00 |
|
|
Andreas Steffen
|
ee2679ec25
|
if end id is missing assign IP address to raw public key
|
2009-12-09 07:24:43 +01:00 |
|
|
Andreas Steffen
|
a07531250e
|
IKEv1 support of ESP SHA2_HMAC with correct truncation
|
2009-12-09 00:24:42 +01:00 |
|
|
Andreas Steffen
|
4b615edab4
|
some code optimizations
|
2009-12-09 00:24:42 +01:00 |
|
|
Andreas Steffen
|
e1573b3fe8
|
added ipAddrBlocks OID
|
2009-12-09 00:24:41 +01:00 |
|
|
Andreas Steffen
|
7747210f26
|
removed redundant ikev2/esp-alg-camellia scenario
|
2009-12-09 00:24:41 +01:00 |
|
|
Andreas Steffen
|
04933ea74e
|
added ikev2/alg-3des-md5 scenario
|
2009-12-08 12:54:42 +01:00 |
|
|
Andreas Steffen
|
7868162b35
|
added RFC-conforming ikev2/sha2 scenarios
|
2009-11-26 23:48:29 +01:00 |
|
|
Andreas Steffen
|
68db91ca32
|
adapted ikev2/alg-aes-xcbc scenario
|
2009-11-26 23:46:27 +01:00 |
|
|
Andreas Steffen
|
4b55cf5d09
|
put identities in single quotes
|
2009-11-25 09:02:09 +01:00 |
|
|
Andreas Steffen
|
653da7c907
|
added more debugging in configuration attribute handling
|
2009-11-24 23:17:07 +01:00 |
|
|
Andreas Steffen
|
eba568563c
|
changed error messages in the case of faulty esp and ike strings
|
2009-11-24 16:45:52 +01:00 |
|
|
Andreas Steffen
|
2eeab939a0
|
do not send all available kernel algorithms if esp string is faulty
|
2009-11-24 16:38:10 +01:00 |
|
|
Andreas Steffen
|
cda8ec7afc
|
added some parentheses
|
2009-11-24 14:36:17 +01:00 |
|
|
Andreas Steffen
|
93e2377c7f
|
allow ECP DH groups in pfsgroup definition
|
2009-11-24 14:35:25 +01:00 |
|
|
Andreas Steffen
|
17d52fbba1
|
renewed OCSP Signing certificate
|
2009-11-24 13:55:38 +01:00 |
|
|
Andreas Steffen
|
c4570d188e
|
issue error message for expired certificates in OCSP trust chain checking
|
2009-11-24 12:37:38 +01:00 |
|
|
Andreas Steffen
|
227583ba59
|
updated IKEv2 notification messages assigned by IANA
|
2009-11-24 09:21:00 +01:00 |
|