 Andreas Steffen
|
230702901f
|
recovered lost asn1_init() function
|
2007-09-18 21:21:19 +00:00 |
|
|
Andreas Steffen
|
dbba276912
|
declared timetoasn1()function
|
2007-09-18 21:04:55 +00:00 |
|
|
Andreas Steffen
|
03108e6dd1
|
moved position of timetoas1n
|
2007-09-18 21:04:39 +00:00 |
|
|
Andreas Steffen
|
dee4d8d7d6
|
added all required includes
|
2007-09-18 20:49:05 +00:00 |
|
|
Andreas Steffen
|
9b2cf1c66b
|
fixed to bugs in optionsfrom.c
|
2007-09-18 20:35:28 +00:00 |
|
|
Andreas Steffen
|
3b4b26cdf3
|
moved loglite.c from openac to scepclient
|
2007-09-18 15:59:56 +00:00 |
|
|
Andreas Steffen
|
3500e049c4
|
added new version of optionsfrom using libstrongswan
|
2007-09-18 11:26:51 +00:00 |
|
|
Andreas Steffen
|
b4979ff724
|
removed some empty lines
|
2007-09-18 11:23:52 +00:00 |
|
|
Andreas Steffen
|
cb23c49143
|
return argument has type size_t
|
2007-09-18 11:21:55 +00:00 |
|
|
Andreas Steffen
|
703b4b0332
|
connection name to IKE_SA initiating
|
2007-09-15 20:30:04 +00:00 |
|
|
Andreas Steffen
|
a2ab401c56
|
put IKE_SA and CHILD_SA names in single quotes
|
2007-09-15 16:06:58 +00:00 |
|
|
Andreas Steffen
|
be682af3e8
|
log name of IKE_SA in state changes
|
2007-09-15 15:54:51 +00:00 |
|
|
Andreas Steffen
|
3f4076b7c8
|
log name of established IKE_SA
|
2007-09-15 15:54:30 +00:00 |
|
|
Andreas Steffen
|
21b3099ac4
|
log name of established CHILD_SA
|
2007-09-15 15:53:10 +00:00 |
|
|
Andreas Steffen
|
cf9cec125a
|
adapted format of IKE SPIs to strongSwan Manager's style
|
2007-09-15 15:35:02 +00:00 |
|
|
Andreas Steffen
|
58b263df43
|
corrected image title
|
2007-09-15 15:28:48 +00:00 |
|
|
Andreas Steffen
|
15a9d460c0
|
peer_cfg now knows about group memberships
|
2007-09-13 15:33:17 +00:00 |
|
|
Andreas Steffen
|
c63bbdca32
|
added compiler-soothing parentheses
|
2007-09-13 08:22:37 +00:00 |
|
|
Andreas Steffen
|
28c5feddbd
|
added Daniel Wydler to copyright.c
|
2007-09-13 07:07:30 +00:00 |
|
|
Andreas Steffen
|
064cbe5d36
|
removed unused LARGEST_HASH_OID_SIZE definition
|
2007-09-13 06:26:57 +00:00 |
|
|
Andreas Steffen
|
b5816842f9
|
replaced 8 by BITS_PER_BYTE
|
2007-09-12 09:19:59 +00:00 |
|
|
Andreas Steffen
|
ba02f63eb1
|
error message outputs hash size differences
|
2007-09-12 08:02:41 +00:00 |
|
|
Andreas Steffen
|
ad63d68aa9
|
renamed encoded_hash to digestInfo
|
2007-09-12 08:01:59 +00:00 |
|
|
Andreas Steffen
|
f7cce7e33a
|
included pem.h and x509.h; fixed comparison bug
|
2007-09-12 07:56:00 +00:00 |
|
|
Andreas Steffen
|
794d2526b4
|
removed unused chunk variable
|
2007-09-12 07:54:56 +00:00 |
|
|
Andreas Steffen
|
38ad6a7b35
|
included kernel_alg.h
|
2007-09-12 07:54:28 +00:00 |
|
|
Andreas Steffen
|
8b373ee6fc
|
added error messages in signature verification
|
2007-09-12 07:06:52 +00:00 |
|
|
Andreas Steffen
|
f749108056
|
increased debug level for errors to DBG1
|
2007-09-12 06:56:59 +00:00 |
|
|
Andreas Steffen
|
1cb2cb622e
|
overwrite shared_key with random bytes before freeing it
|
2007-09-11 21:06:46 +00:00 |
|
|
Andreas Steffen
|
e5f33737ab
|
check for surplus bytes in EM structure after the digestInfo
|
2007-09-11 20:45:59 +00:00 |
|
|
Andreas Steffen
|
2f9f5149c4
|
check hash algorithms used in signatures
|
2007-09-11 20:10:38 +00:00 |
|
|
Andreas Steffen
|
dd968b9b20
|
OID_UNKNOWN (-1) requires int type
|
2007-09-11 17:33:37 +00:00 |
|
|
Andreas Steffen
|
c1ff717690
|
removed rsa_private_key clone() function
|
2007-09-11 16:26:08 +00:00 |
|
|
Andreas Steffen
|
780390e96a
|
added md2, sha256, sha384, and sha512 ASN.1 algorithm IDs
|
2007-09-11 16:25:28 +00:00 |
|
|
Andreas Steffen
|
f0c156fbc9
|
replaced get_rsa_private_key() by rsa_signature() in order restrict the distribution of private key material
|
2007-09-11 10:18:25 +00:00 |
|
|
Andreas Steffen
|
922464d00a
|
mpz_clear_randomized() overwrites private key material before releasing it
|
2007-09-10 19:34:46 +00:00 |
|
|
Andreas Steffen
|
7bac086733
|
overwrite storage used for shared secrets with pseudo-random bytes before releasing it
|
2007-09-10 19:12:01 +00:00 |
|
|
Andreas Steffen
|
db78593370
|
ipsec barf is not supported by the strongSwan 4.1 branch
|
2007-09-10 13:32:15 +00:00 |
|
|
Andreas Steffen
|
bb3d6c3dbe
|
the new function chunk_free_randomized() overwrites the contents of a chunk with pseudo-random bytes before freeing it
|
2007-09-10 12:16:24 +00:00 |
|
|
Andreas Steffen
|
e7d9fa7f98
|
added new Windows Vista VID, courtesy of Jacco de Leeuw
|
2007-09-10 12:11:46 +00:00 |
|
|
Andreas Steffen
|
054767bfff
|
version bump to 4.1.7
|
2007-09-03 19:04:38 +00:00 |
|
|
Andreas Steffen
|
f5da63e937
|
correct debug
|
2007-09-02 15:59:59 +00:00 |
|
|
Andreas Steffen
|
8c4339bdd2
|
added mobike option to man page
|
2007-09-02 11:44:32 +00:00 |
|
|
Andreas Steffen
|
3eac4dfdda
|
added new features
|
2007-09-02 11:24:53 +00:00 |
|
|
Andreas Steffen
|
0e3073608d
|
re-introduced the XAUTH_VID compile option
|
2007-09-02 11:13:24 +00:00 |
|
|
Andreas Steffen
|
cfee19c26c
|
added bitnames for POLICY_BEET and POLICY_MOBIKE flags
|
2007-08-29 13:17:30 +00:00 |
|
|
Andreas Steffen
|
cdc70899a8
|
change ipsec route table in UML scenarios
|
2007-08-29 13:03:34 +00:00 |
|
|
Andreas Steffen
|
0886e64022
|
updated index.txt.old
|
2007-08-29 12:50:26 +00:00 |
|
|
Andreas Steffen
|
c5dfb88ab8
|
_updown removed from distribution
|
2007-08-29 11:59:52 +00:00 |
|
|
Andreas Steffen
|
bdc0b55b72
|
included the FIPS integrity test in LICENSE, CREDITS and NEWs
|
2007-08-29 11:04:55 +00:00 |
|
|
Andreas Steffen
|
0bc5a23023
|
renamed integrity check to integrity test
|
2007-08-29 10:36:08 +00:00 |
|
|
Andreas Steffen
|
d3250f74af
|
cosmetics
|
2007-08-29 10:31:37 +00:00 |
|
|
Andreas Steffen
|
32be2ec599
|
fixed 64 bit issue (size_t is 32 bit)
|
2007-08-29 10:30:17 +00:00 |
|
|
Andreas Steffen
|
ab13376877
|
fips_verify_hmac_signature() now returns a boolean status
|
2007-08-29 09:43:02 +00:00 |
|
|
Andreas Steffen
|
df29e8f745
|
SHA-1 HMAC signature is now computed over concatenation of TEXT and RODATA segments
|
2007-08-29 09:13:08 +00:00 |
|
|
Andreas Steffen
|
fa50e4df48
|
compute SHA-1 HMAC over libstrongswan TEXT segment for the time being
|
2007-08-29 08:54:53 +00:00 |
|
|
Andreas Steffen
|
ef5f65626f
|
change self_test to self-test
|
2007-08-29 07:03:47 +00:00 |
|
|
Andreas Steffen
|
d8b45dcdd2
|
build fips_signer and fips_signature with USE_INTEGRITY_TEST condition only
|
2007-08-29 07:02:13 +00:00 |
|
|
Andreas Steffen
|
2fb15ac606
|
changed interface of fips_verify_hmac_signature
|
2007-08-29 05:43:45 +00:00 |
|
|
Andreas Steffen
|
90bcf8b286
|
free hmac_signature string after use
|
2007-08-29 05:43:05 +00:00 |
|
|
Andreas Steffen
|
d64b48a80b
|
beautification
|
2007-08-29 05:42:22 +00:00 |
|
|
Andreas Steffen
|
55434a1ba5
|
started implementation of libstrongswan code integrity check
|
2007-08-29 00:37:10 +00:00 |
|
|
Andreas Steffen
|
0e54968584
|
defined ietfAttr_create_from_string()
|
2007-08-29 00:35:51 +00:00 |
|
|
Andreas Steffen
|
bf422b1664
|
fixed typo
|
2007-08-28 09:59:53 +00:00 |
|
|
Andreas Steffen
|
12fe0e60df
|
set ignore properties
|
2007-08-28 07:02:51 +00:00 |
|
|
Andreas Steffen
|
52d39feb81
|
set ignore properties
|
2007-08-28 07:02:23 +00:00 |
|
|
Andreas Steffen
|
8234dd1216
|
testing/do-tests is made from do-tests.in by inserting actual routing table
|
2007-08-28 06:40:39 +00:00 |
|
|
Andreas Steffen
|
35800a11ee
|
testing/do-tests is made from do-tests.in by inserting actual routing table
|
2007-08-28 06:38:04 +00:00 |
|
|
Andreas Steffen
|
9ee1111d8b
|
added --enable-integrity-test and --disable-self-test options
|
2007-08-28 06:36:31 +00:00 |
|
|
Andreas Steffen
|
9a63ddd84d
|
initiated support of caIssuers accessLocation
|
2007-08-17 08:01:10 +00:00 |
|
|
Andreas Steffen
|
2a48f47406
|
required CA is that.ca not this.ca
|
2007-08-17 07:22:04 +00:00 |
|
|
Andreas Steffen
|
2133593696
|
matching_request instead of matching_trust must go into the metric
|
2007-08-17 07:21:26 +00:00 |
|
|
Andreas Steffen
|
0f9f19f54e
|
fixed maximum path length info in match_requested_ca()
|
2007-08-17 07:20:27 +00:00 |
|
|
Andreas Steffen
|
6a85215809
|
sort attributes alphabetically
|
2007-08-15 22:58:15 +00:00 |
|
|
Andreas Steffen
|
cd15679122
|
added caIssuers OID
|
2007-08-15 09:46:40 +00:00 |
|
|
Andreas Steffen
|
1bce8ec70d
|
corrected typo
|
2007-08-15 09:46:14 +00:00 |
|
|
Andreas Steffen
|
7cbe4a33e9
|
use symbolic shell variables in library paths
|
2007-08-15 08:40:16 +00:00 |
|
|
Andreas Steffen
|
96cc677c96
|
removed oid.txt and oid.pl in pluto subdir
|
2007-08-15 08:29:55 +00:00 |
|
|
Andreas Steffen
|
683d66fe93
|
aligned pluto/oid.txt to libstrongswan/asn1/oid.txt
|
2007-08-14 21:21:21 +00:00 |
|
|
Andreas Steffen
|
2d064166db
|
added Microsof Encrypting File System Extended Key Usage OID
|
2007-08-14 21:13:53 +00:00 |
|
|
Andreas Steffen
|
b086f62ca1
|
added Microsof Smartcard Logon Extended Key Usage OID
|
2007-08-14 21:05:40 +00:00 |
|
|
Andreas Steffen
|
bb70071b26
|
finetuning of phase1 matching metrics
|
2007-08-14 19:15:01 +00:00 |
|
|
Andreas Steffen
|
929b9e367a
|
append new attribute certs at the end
|
2007-08-14 13:04:36 +00:00 |
|
|
Andreas Steffen
|
06faefe43d
|
adding attribute certficates to a chained list
|
2007-08-14 12:27:02 +00:00 |
|
|
Andreas Steffen
|
efddbcb0b5
|
soft-limit treatment of unmatched certificate requests using a priority metric
|
2007-08-14 12:26:22 +00:00 |
|
|
Andreas Steffen
|
3c1100187f
|
replaced hex_str() by fprintf(#B) for printing unknown OIDs
|
2007-08-14 12:24:35 +00:00 |
|
|
Andreas Steffen
|
9148e44b39
|
fixed bug occuring with multiple occurences of the same cacert on a smartcard
|
2007-08-13 07:47:47 +00:00 |
|
|
Andreas Steffen
|
8f687a7591
|
has_rsa_private_key() must also be protected by keys_mutex
|
2007-08-10 12:10:36 +00:00 |
|
|
Andreas Steffen
|
c045d90a8e
|
corrected debug output
|
2007-08-10 11:23:45 +00:00 |
|
|
Andreas Steffen
|
dc481855bb
|
set default to uml=false
|
2007-08-10 10:47:48 +00:00 |
|
|
Andreas Steffen
|
0dbc039ab5
|
added listaacerts,listacerts,rereadsecerts,rereadocspcerts,rereadaacerts,rereadacerts to stroke
|
2007-08-10 10:19:53 +00:00 |
|
|
Andreas Steffen
|
3f343ad67a
|
fixed typo stroke keyword list
|
2007-08-10 10:00:59 +00:00 |
|
|
Andreas Steffen
|
f872f9d17d
|
ipsec stroke rereadsecrets|rereadaacerts|rereadacerts|listacerts supported
|
2007-08-10 09:19:58 +00:00 |
|
|
Andreas Steffen
|
8ff58b051c
|
ipsec stroke rereadaacerts|rereadacerts supported
|
2007-08-10 09:17:34 +00:00 |
|
|
Andreas Steffen
|
a74be4f7eb
|
set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS
|
2007-08-10 08:49:20 +00:00 |
|
|
Andreas Steffen
|
a027d51106
|
set STROKE_REREAD_FIRST to STROKE_REREAD_SECRETS
|
2007-08-10 08:49:03 +00:00 |
|
|
Andreas Steffen
|
138d7f9a79
|
added rereadsecrets keyword to stroke
|
2007-08-10 08:05:03 +00:00 |
|
|
Andreas Steffen
|
84db83336b
|
support of ipsec rereadsecrets for stroke
|
2007-08-10 07:16:32 +00:00 |
|
|
Andreas Steffen
|
3dcf9dbd70
|
version bump to 4.1.6
|
2007-08-08 08:17:48 +00:00 |
|
|
Andreas Steffen
|
037575682a
|
bug fix in linked_list deletion - instead of acerts destroyed certs twice
|
2007-08-08 06:02:59 +00:00 |
|