Commit Graph
100 Commits
Author SHA1 Message Date
Andreas Steffen 221a64e4f7 fixed test scenarios 2007-04-20 14:51:39 +00:00
Andreas Steffen ea4563d93f ocsp-strict-ifuri added 2007-04-20 14:50:42 +00:00
Andreas Steffen ce9b4ea6e6 ocsp-no-signer-cert added 2007-04-20 14:49:50 +00:00
Andreas Steffen cb5485318f initialize isCA to FALSE 2007-04-20 14:36:55 +00:00
Andreas Steffen b073ad64b8 isOcspSigner was not initialized 2007-04-20 12:38:35 +00:00
Andreas Steffen a3590ac1bd wrong delimiters in ipsec.in 2007-04-20 12:23:03 +00:00
Andreas Steffen 4841189b72 implementation of strictcrlpolicy=ifuri 2007-04-20 11:12:08 +00:00
Andreas Steffen ab58c17445 removed linux26/xfrm.h 2007-04-19 15:02:55 +00:00
Andreas Steffen 7ef4be2cb1 unshare argument buffers 2007-04-19 14:26:11 +00:00
Andreas Steffen 622f50801c kernel_netlink.c now includes src/include/linux/xfrm.h 2007-04-19 14:15:00 +00:00
Andreas Steffen 8501be235c added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords 2007-04-14 18:09:44 +00:00
Andreas Steffen be6258485c fixed destroy() bug 2007-04-14 17:34:41 +00:00
Andreas Steffen 6598f99af0 exported parse_generalNames() 2007-04-14 17:34:18 +00:00
Andreas Steffen ddf1b3e09e added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords 2007-04-14 17:33:29 +00:00
Andreas Steffen f9e0dc3e02 added listaacerts, listacerts, listgroups, rereadaacerts, and rereadacerts keywords 2007-04-14 17:33:02 +00:00
Andreas Steffen 4390abeb94 added trailing newline to list() 2007-04-12 20:16:14 +00:00
Andreas Steffen e4c58fdb09 set sleep back to 180 s 2007-04-12 19:41:24 +00:00
Andreas Steffen 734dc32edd started to parse attribute certificates 2007-04-12 19:39:11 +00:00
Andreas Steffen 3e21837582 cosmetics 2007-04-12 19:33:13 +00:00
Andreas Steffen 854a96ae47 moved parse_time() from x509.c to asn1.c 2007-04-12 18:58:27 +00:00
Andreas Steffen 56352fca2f replace cert by this in parse_certificate() 2007-04-12 18:57:33 +00:00
Andreas Steffen f5ce017b0d parse_authorityKeyIdentifier() is made available externally 2007-04-12 18:56:46 +00:00
Andreas Steffen 34ee184a2d external functions are defined in asn1.h and x509.h now 2007-04-12 18:55:44 +00:00
Andreas Steffen f880eb2dca started support of X.509 attribute certificates 2007-04-12 17:49:33 +00:00
Andreas Steffen 0dbe579a51 added AA and AATR cert paths 2007-04-12 16:43:21 +00:00
Andreas Steffen 4cda602393 fixed output of list_auth_certificates() 2007-04-12 16:42:07 +00:00
Andreas Steffen f865d34b35 fixed output of list_certinfos() 2007-04-12 16:36:12 +00:00
Andreas Steffen 6a132a53e5 corrected copyright statement 2007-04-12 16:21:02 +00:00
Andreas Steffen 4d50f872d4 adapted evaltest to refactored ipsec status output 2007-04-11 08:18:38 +00:00
Andreas Steffen 90faff8e5a reduced sleep from 180 to 170 seconds 2007-04-10 23:22:26 +00:00
Andreas Steffen 86b7215627 fixed bug with roadwarrior and wildcard IDs 2007-04-10 22:39:09 +00:00
Andreas Steffen a07aad39dc edited comment and debug output 2007-04-10 22:38:06 +00:00
Andreas Steffen 4876f521d6 best must be initialized to 2*MAX_WILDCARDS+1 2007-04-10 22:35:45 +00:00
Andreas Steffen 241ab32c10 changed tab spacing from 8 to 4 2007-04-10 19:31:42 +00:00
Andreas Steffen 83e60eb29a version bump to 4.1.2 2007-04-10 11:53:35 +00:00
Andreas Steffen 1628cd6bda adapt evaltest to changed debug output 2007-04-06 10:39:24 +00:00
Andreas Steffen babdde4fa4 cosmetics in debug output 2007-04-06 10:35:13 +00:00
Andreas Steffen f5fc277463 crl-ldap scenario added 2007-04-06 10:02:27 +00:00
Andreas Steffen db88e37d2f ldap-based crl fetching supported 2007-04-06 09:51:04 +00:00
Andreas Steffen 2c0e0f4f62 changed LDAP_VER compile option to LIBLDAP 2007-04-06 09:49:05 +00:00
Andreas Steffen 241d2ff3bc support of ldap-based crl fetching 2007-04-06 09:44:06 +00:00
Andreas Steffen 4c56bd64e5 removed list_crls() and list_ocsp() methods 2007-04-06 09:43:20 +00:00
Andreas Steffen 3c5c3431b3 removed list_crls() and list_ocsp() methods 2007-04-06 09:42:45 +00:00
Andreas Steffen 915c7add1f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:51:12 +00:00
Andreas Steffen 46b9ff68d0 cachecrls=yes supported by IKEv2 2007-04-05 17:44:50 +00:00
Andreas Steffen 389623374f enabled crl fetching using crlcheckinterval != 0 2007-04-05 17:40:33 +00:00
Andreas Steffen 1d1e55b4c3 added crl-to-cache 2007-04-05 17:18:25 +00:00
Andreas Steffen 7771780b38 added crl-from-cache 2007-04-05 17:18:15 +00:00
Andreas Steffen a224faf9ea block crl fetching 2007-04-05 17:10:59 +00:00
Andreas Steffen 45c97f180f block crl fetching 2007-04-05 17:09:54 +00:00
Andreas Steffen 69837d5baa support multiple ocsp servers 2007-04-05 17:08:51 +00:00
Andreas Steffen 8883eef7b8 support cachecrls=yes 2007-04-05 17:07:14 +00:00
Andreas Steffen e58afb1a0a support of crlcheckinterval=0 to disable IKEv2 CRL fetching 2007-04-04 07:49:05 +00:00
Andreas Steffen e47a7a131d reinsert SHAREDTREE 2007-04-04 05:29:20 +00:00
Andreas Steffen c056d929b2 --enable-ldap without value 3 2007-04-04 05:26:21 +00:00
Andreas Steffen d15d1cc4f3 recognize strongSwan 2.8.4 VID 2007-04-04 05:25:06 +00:00
Andreas Steffen 8f76dbe8b1 support of dynamical http-based CRL fetching 2007-04-03 22:05:04 +00:00
Andreas Steffen ace5de18b2 iptables -L has now a link of its own 2007-04-03 22:03:25 +00:00
Andreas Steffen 3d62a7d225 fixed crl fetching bug 2007-04-03 22:02:17 +00:00
Andreas Steffen 7e4f8db2bf added ip route list and iptables -L 2007-04-03 21:18:46 +00:00
Andreas Steffen a0eaa59b50 implemented dynamic http-based CRL fetching 2007-04-03 21:11:23 +00:00
Andreas Steffen 5d6dc162f2 send VID_NATT_IETF_02_N for Windows 2003 server support 2007-04-03 21:10:08 +00:00
Andreas Steffen a8f02ad5f5 implemented dynamic http-based CRL fetching 2007-04-03 21:09:11 +00:00
Andreas Steffen f166af2c0a implemented http get method 2007-04-03 19:46:50 +00:00
Andreas Steffen 3b4f7d922a IKEv1 changes 2007-04-03 12:41:37 +00:00
Andreas Steffen b0f9f02ca4 added --enable-nat-transport and --disable-vendor-id configuration options 2007-04-03 07:58:34 +00:00
Andreas Steffen 7b0c588a88 added --enable-nat-transport and --disable-vendor-id configuration options 2007-04-03 07:58:21 +00:00
Andreas Steffen a0c15611a4 bug fix: check existence of encryption key before sending encrypted notification 2007-04-02 19:04:51 +00:00
Andreas Steffen 6819e4d754 implemented ipsec purgeocsp 2007-03-28 20:43:38 +00:00
Andreas Steffen 6af6c0bfc3 cosmetics 2007-03-28 20:43:25 +00:00
Andreas Steffen 2bfadf7f3b implemented ipsec purgeocsp 2007-03-28 20:43:11 +00:00
Andreas Steffen 9d9c72e317 is_trusted() adds cert_status to cert_to_be_trusted 2007-03-28 05:38:42 +00:00
Andreas Steffen 203e15fe03 fixed delta time format: 2 seconds, 1 second, 0 seconds 2007-03-28 05:37:20 +00:00
Andreas Steffen 7a89380eca replaced expired since %V by expired %V ago 2007-03-28 05:36:27 +00:00
Andreas Steffen 1bf8530507 implemented ipsec listocsp function 2007-03-27 04:40:25 +00:00
Andreas Steffen 469e9686ae cmp_chunk returns int argument 2007-03-27 04:39:44 +00:00
Andreas Steffen 0953f2a65f registered PRINT_CERTINFO function with symbol Y 2007-03-27 04:38:22 +00:00
Andreas Steffen ef49c3486a added chunk_compare() which compares orders chunks 2007-03-27 04:37:15 +00:00
Andreas Steffen 51ae94d775 added OCSP signing certificates for the research and sales CAs 2007-03-26 07:08:39 +00:00
Andreas Steffen e3e6a1ec22 added ocsp-multi-level scenario 2007-03-26 07:05:02 +00:00
Andreas Steffen 0f7995b11e added CERT_ROOF 2007-03-23 22:01:59 +00:00
Andreas Steffen 387c29c62d added CERT_ROOF 2007-03-23 22:01:40 +00:00
Andreas Steffen d7eee6e1ca added certificate encoding OCSP content 2007-03-23 21:53:12 +00:00
Andreas Steffen 35101bf86a version bump to 4.1.1 2007-03-23 17:22:12 +00:00
Andreas Steffen 4b0f0e6cb4 carol's cert and private key does not have to be deleted 2007-03-23 17:20:44 +00:00
Andreas Steffen e92b363955 strongSwan version bumps and Windows Vista VIDs 2007-03-23 17:19:57 +00:00
Andreas Steffen 1eb6a5f4a2 deleted 2007-03-21 22:19:17 +00:00
Andreas Steffen d8d948a7e0 added 2007-03-21 22:19:00 +00:00
Andreas Steffen 878aecdf12 renamed ocsp-timeouts to ocsp-timeouts-good 2007-03-21 22:18:17 +00:00
Andreas Steffen 69ed04bf1d OCSP support 2007-03-20 10:47:00 +00:00
Andreas Steffen f9a73bee9c delay OCSP response by 5 seconds 2007-03-20 04:35:16 +00:00
Andreas Steffen 4a82b49126 Shortened distribution string 2007-03-16 11:48:29 +00:00
Andreas Steffen 59097f9db1 Shortened distribution string 2007-03-16 11:47:48 +00:00
Andreas Steffen 85877eabdf shortened distribution string 2007-03-16 11:41:54 +00:00
Andreas Steffen 114c6646af add daemon.log to web page 2007-03-15 15:01:36 +00:00
Andreas Steffen 4ebaa476f1 remove /etc/resolv.conf 2007-03-15 15:00:51 +00:00
Andreas Steffen 34bbd0c32e version bump to 4.1.0 2007-03-15 14:28:47 +00:00
Andreas Steffen 28bd885e03 added apache2/ocsp log directory to winnetou 2007-03-15 14:18:26 +00:00
Andreas Steffen 037ce7862f removed killall openssl 2007-03-15 13:56:35 +00:00
Andreas Steffen ab0d19ae66 removed killall openssl 2007-03-15 13:56:09 +00:00