Andreas Steffen
|
221a64e4f7
|
fixed test scenarios
|
2007-04-20 14:51:39 +00:00 |
|
Andreas Steffen
|
ea4563d93f
|
ocsp-strict-ifuri added
|
2007-04-20 14:50:42 +00:00 |
|
Andreas Steffen
|
ce9b4ea6e6
|
ocsp-no-signer-cert added
|
2007-04-20 14:49:50 +00:00 |
|
Andreas Steffen
|
cb5485318f
|
initialize isCA to FALSE
|
2007-04-20 14:36:55 +00:00 |
|
Andreas Steffen
|
b073ad64b8
|
isOcspSigner was not initialized
|
2007-04-20 12:38:35 +00:00 |
|
Andreas Steffen
|
a3590ac1bd
|
wrong delimiters in ipsec.in
|
2007-04-20 12:23:03 +00:00 |
|
Andreas Steffen
|
4841189b72
|
implementation of strictcrlpolicy=ifuri
|
2007-04-20 11:12:08 +00:00 |
|
Andreas Steffen
|
ab58c17445
|
removed linux26/xfrm.h
|
2007-04-19 15:02:55 +00:00 |
|
Andreas Steffen
|
7ef4be2cb1
|
unshare argument buffers
|
2007-04-19 14:26:11 +00:00 |
|
Andreas Steffen
|
622f50801c
|
kernel_netlink.c now includes src/include/linux/xfrm.h
|
2007-04-19 14:15:00 +00:00 |
|
Andreas Steffen
|
8501be235c
|
added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords
|
2007-04-14 18:09:44 +00:00 |
|
Andreas Steffen
|
be6258485c
|
fixed destroy() bug
|
2007-04-14 17:34:41 +00:00 |
|
Andreas Steffen
|
6598f99af0
|
exported parse_generalNames()
|
2007-04-14 17:34:18 +00:00 |
|
Andreas Steffen
|
ddf1b3e09e
|
added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords
|
2007-04-14 17:33:29 +00:00 |
|
Andreas Steffen
|
f9e0dc3e02
|
added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords
|
2007-04-14 17:33:02 +00:00 |
|
Andreas Steffen
|
4390abeb94
|
added trailing newline to list()
|
2007-04-12 20:16:14 +00:00 |
|
Andreas Steffen
|
e4c58fdb09
|
set sleep back to 180 s
|
2007-04-12 19:41:24 +00:00 |
|
Andreas Steffen
|
734dc32edd
|
started to parse attribute certificates
|
2007-04-12 19:39:11 +00:00 |
|
Andreas Steffen
|
3e21837582
|
cosmetics
|
2007-04-12 19:33:13 +00:00 |
|
Andreas Steffen
|
854a96ae47
|
moved parse_time() from x509.c to asn1.c
|
2007-04-12 18:58:27 +00:00 |
|
Andreas Steffen
|
56352fca2f
|
replace cert by this in parse_certificate()
|
2007-04-12 18:57:33 +00:00 |
|
Andreas Steffen
|
f5ce017b0d
|
parse_authorityKeyIdentifier() is made available externally
|
2007-04-12 18:56:46 +00:00 |
|
Andreas Steffen
|
34ee184a2d
|
external functions are defined in asn1.h and x509.h now
|
2007-04-12 18:55:44 +00:00 |
|
Andreas Steffen
|
f880eb2dca
|
started support of X.509 attribute certificates
|
2007-04-12 17:49:33 +00:00 |
|
Andreas Steffen
|
0dbe579a51
|
added AA and AATR cert paths
|
2007-04-12 16:43:21 +00:00 |
|
Andreas Steffen
|
4cda602393
|
fixed output of list_auth_certificates()
|
2007-04-12 16:42:07 +00:00 |
|
Andreas Steffen
|
f865d34b35
|
fixed output of list_certinfos()
|
2007-04-12 16:36:12 +00:00 |
|
Andreas Steffen
|
6a132a53e5
|
corrected copyright statement
|
2007-04-12 16:21:02 +00:00 |
|
Andreas Steffen
|
4d50f872d4
|
adapted evaltest to refactored ipsec status output
|
2007-04-11 08:18:38 +00:00 |
|
Andreas Steffen
|
90faff8e5a
|
reduced sleep from 180 to 170 seconds
|
2007-04-10 23:22:26 +00:00 |
|
Andreas Steffen
|
86b7215627
|
fixed bug with roadwarrior and wildcard IDs
|
2007-04-10 22:39:09 +00:00 |
|
Andreas Steffen
|
a07aad39dc
|
edited comment and debug output
|
2007-04-10 22:38:06 +00:00 |
|
Andreas Steffen
|
4876f521d6
|
best must be initialized to 2*MAX_WILDCARDS+1
|
2007-04-10 22:35:45 +00:00 |
|
Andreas Steffen
|
241ab32c10
|
changed tab spacing from 8 to 4
|
2007-04-10 19:31:42 +00:00 |
|
Andreas Steffen
|
83e60eb29a
|
version bump to 4.1.2
|
2007-04-10 11:53:35 +00:00 |
|
Andreas Steffen
|
1628cd6bda
|
adapt evaltest to changed debug output
|
2007-04-06 10:39:24 +00:00 |
|
Andreas Steffen
|
babdde4fa4
|
cosmetics in debug output
|
2007-04-06 10:35:13 +00:00 |
|
Andreas Steffen
|
f5fc277463
|
crl-ldap scenario added
|
2007-04-06 10:02:27 +00:00 |
|
Andreas Steffen
|
db88e37d2f
|
ldap-based crl fetching supported
|
2007-04-06 09:51:04 +00:00 |
|
Andreas Steffen
|
2c0e0f4f62
|
changed LDAP_VER compile option to LIBLDAP
|
2007-04-06 09:49:05 +00:00 |
|
Andreas Steffen
|
241d2ff3bc
|
support of ldap-based crl fetching
|
2007-04-06 09:44:06 +00:00 |
|
Andreas Steffen
|
4c56bd64e5
|
removed list_crls() and list_ocsp() methods
|
2007-04-06 09:43:20 +00:00 |
|
Andreas Steffen
|
3c5c3431b3
|
removed list_crls() and list_ocsp() methods
|
2007-04-06 09:42:45 +00:00 |
|
Andreas Steffen
|
915c7add1f
|
enabled crl fetching using crlcheckinterval != 0
|
2007-04-05 17:51:12 +00:00 |
|
Andreas Steffen
|
46b9ff68d0
|
cachecrls=yes supported by IKEv2
|
2007-04-05 17:44:50 +00:00 |
|
Andreas Steffen
|
389623374f
|
enabled crl fetching using crlcheckinterval != 0
|
2007-04-05 17:40:33 +00:00 |
|
Andreas Steffen
|
1d1e55b4c3
|
added crl-to-cache
|
2007-04-05 17:18:25 +00:00 |
|
Andreas Steffen
|
7771780b38
|
added crl-from-cache
|
2007-04-05 17:18:15 +00:00 |
|
Andreas Steffen
|
a224faf9ea
|
block crl fetching
|
2007-04-05 17:10:59 +00:00 |
|
Andreas Steffen
|
45c97f180f
|
block crl fetching
|
2007-04-05 17:09:54 +00:00 |
|
Andreas Steffen
|
69837d5baa
|
support multiple ocsp servers
|
2007-04-05 17:08:51 +00:00 |
|
Andreas Steffen
|
8883eef7b8
|
support cachecrls=yes
|
2007-04-05 17:07:14 +00:00 |
|
Andreas Steffen
|
e58afb1a0a
|
support of crlcheckinterval=0 to disable IKEv2 CRL fetching
|
2007-04-04 07:49:05 +00:00 |
|
Andreas Steffen
|
e47a7a131d
|
reinsert SHAREDTREE
|
2007-04-04 05:29:20 +00:00 |
|
Andreas Steffen
|
c056d929b2
|
--enable-ldap without value 3
|
2007-04-04 05:26:21 +00:00 |
|
Andreas Steffen
|
d15d1cc4f3
|
recognize strongSwan 2.8.4 VID
|
2007-04-04 05:25:06 +00:00 |
|
Andreas Steffen
|
8f76dbe8b1
|
support of dynamical http-based CRL fetching
|
2007-04-03 22:05:04 +00:00 |
|
Andreas Steffen
|
ace5de18b2
|
iptables -L has now a link of its own
|
2007-04-03 22:03:25 +00:00 |
|
Andreas Steffen
|
3d62a7d225
|
fixed crl fetching bug
|
2007-04-03 22:02:17 +00:00 |
|
Andreas Steffen
|
7e4f8db2bf
|
added ip route list and iptables -L
|
2007-04-03 21:18:46 +00:00 |
|
Andreas Steffen
|
a0eaa59b50
|
implemented dynamic http-based CRL fetching
|
2007-04-03 21:11:23 +00:00 |
|
Andreas Steffen
|
5d6dc162f2
|
send VID_NATT_IETF_02_N for Windows 2003 server support
|
2007-04-03 21:10:08 +00:00 |
|
Andreas Steffen
|
a8f02ad5f5
|
implemented dynamic http-based CRL fetching
|
2007-04-03 21:09:11 +00:00 |
|
Andreas Steffen
|
f166af2c0a
|
implemented http get method
|
2007-04-03 19:46:50 +00:00 |
|
Andreas Steffen
|
3b4f7d922a
|
IKEv1 changes
|
2007-04-03 12:41:37 +00:00 |
|
Andreas Steffen
|
b0f9f02ca4
|
added --enable-nat-transport and --disable-vendor-id configuration options
|
2007-04-03 07:58:34 +00:00 |
|
Andreas Steffen
|
7b0c588a88
|
added --enable-nat-transport and --disable-vendor-id configuration options
|
2007-04-03 07:58:21 +00:00 |
|
Andreas Steffen
|
a0c15611a4
|
bug fix: check existence of encryption key before sending encrypted notification
|
2007-04-02 19:04:51 +00:00 |
|
Andreas Steffen
|
6819e4d754
|
implemented ipsec purgeocsp
|
2007-03-28 20:43:38 +00:00 |
|
Andreas Steffen
|
6af6c0bfc3
|
cosmetics
|
2007-03-28 20:43:25 +00:00 |
|
Andreas Steffen
|
2bfadf7f3b
|
implemented ipsec purgeocsp
|
2007-03-28 20:43:11 +00:00 |
|
Andreas Steffen
|
9d9c72e317
|
is_trusted() adds cert_status to cert_to_be_trusted
|
2007-03-28 05:38:42 +00:00 |
|
Andreas Steffen
|
203e15fe03
|
fixed delta time format: 2 seconds, 1 second, 0 seconds
|
2007-03-28 05:37:20 +00:00 |
|
Andreas Steffen
|
7a89380eca
|
replaced expired since %V by expired %V ago
|
2007-03-28 05:36:27 +00:00 |
|
Andreas Steffen
|
1bf8530507
|
implemented ipsec listocsp function
|
2007-03-27 04:40:25 +00:00 |
|
Andreas Steffen
|
469e9686ae
|
cmp_chunk returns int argument
|
2007-03-27 04:39:44 +00:00 |
|
Andreas Steffen
|
0953f2a65f
|
registered PRINT_CERTINFO function with symbol Y
|
2007-03-27 04:38:22 +00:00 |
|
Andreas Steffen
|
ef49c3486a
|
added chunk_compare() which compares orders chunks
|
2007-03-27 04:37:15 +00:00 |
|
Andreas Steffen
|
51ae94d775
|
added OCSP signing certificates for the research and sales CAs
|
2007-03-26 07:08:39 +00:00 |
|
Andreas Steffen
|
e3e6a1ec22
|
added ocsp-multi-level scenario
|
2007-03-26 07:05:02 +00:00 |
|
Andreas Steffen
|
0f7995b11e
|
added CERT_ROOF
|
2007-03-23 22:01:59 +00:00 |
|
Andreas Steffen
|
387c29c62d
|
added CERT_ROOF
|
2007-03-23 22:01:40 +00:00 |
|
Andreas Steffen
|
d7eee6e1ca
|
added certificate encoding OCSP content
|
2007-03-23 21:53:12 +00:00 |
|
Andreas Steffen
|
35101bf86a
|
version bump to 4.1.1
|
2007-03-23 17:22:12 +00:00 |
|
Andreas Steffen
|
4b0f0e6cb4
|
carol's cert and private key does not have to be deleted
|
2007-03-23 17:20:44 +00:00 |
|
Andreas Steffen
|
e92b363955
|
strongSwan version bumps and Windows Vista VIDs
|
2007-03-23 17:19:57 +00:00 |
|
Andreas Steffen
|
1eb6a5f4a2
|
deleted
|
2007-03-21 22:19:17 +00:00 |
|
Andreas Steffen
|
d8d948a7e0
|
added
|
2007-03-21 22:19:00 +00:00 |
|
Andreas Steffen
|
878aecdf12
|
renamed ocsp-timeouts to ocsp-timeouts-good
|
2007-03-21 22:18:17 +00:00 |
|
Andreas Steffen
|
69ed04bf1d
|
OCSP support
|
2007-03-20 10:47:00 +00:00 |
|
Andreas Steffen
|
f9a73bee9c
|
delay OCSP response by 5 seconds
|
2007-03-20 04:35:16 +00:00 |
|
Andreas Steffen
|
4a82b49126
|
Shortened distribution string
|
2007-03-16 11:48:29 +00:00 |
|
Andreas Steffen
|
59097f9db1
|
Shortened distribution string
|
2007-03-16 11:47:48 +00:00 |
|
Andreas Steffen
|
85877eabdf
|
shortened distribution string
|
2007-03-16 11:41:54 +00:00 |
|
Andreas Steffen
|
114c6646af
|
add daemon.log to web page
|
2007-03-15 15:01:36 +00:00 |
|
Andreas Steffen
|
4ebaa476f1
|
remove /etc/resolv.conf
|
2007-03-15 15:00:51 +00:00 |
|
Andreas Steffen
|
34bbd0c32e
|
version bump to 4.1.0
|
2007-03-15 14:28:47 +00:00 |
|
Andreas Steffen
|
28bd885e03
|
added apache2/ocsp log directory to winnetou
|
2007-03-15 14:18:26 +00:00 |
|
Andreas Steffen
|
037ce7862f
|
removed killall openssl
|
2007-03-15 13:56:35 +00:00 |
|
Andreas Steffen
|
ab0d19ae66
|
removed killall openssl
|
2007-03-15 13:56:09 +00:00 |
|