denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,788 Commits 1 Branch 0 Tags
272c81134c28df1667cb14322c6d81a786711a59
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Andreas Steffen 355bab380c additional check in case of non-positive months 2009-06-10 15:33:39 +02:00
Andreas Steffen dfa5fb0358 implemented IKEv1 RSA signing in openssl_rsa_private_key.c 2009-06-10 15:29:57 +02:00
Andreas Steffen 29bbfc11ee implemented IKEv1 signature verification in openssl_rsa_public_key.c 2009-06-10 13:43:51 +02:00
Andreas Steffen c04bf43363 fixed typo in asn1.c 2009-06-10 12:00:26 +02:00
Andreas Steffen 95c00dfcf9 fixed DoS vulnerability in the parsing of ASN.1 time strings 2009-06-10 11:39:17 +02:00
Andreas Steffen b29832c74f fixed DoS vulnerability in the parsing of distinguished names 2009-06-09 22:03:33 +02:00
Andreas Steffen 2d870072fa asn1_integer() ensures correct DER encoding of ASN1_INTEGER (two's complement) 2009-06-09 13:27:59 +02:00
Andreas Steffen a038ef2bb1 renamed listing of IKEv1 authentication algorithms 2009-06-09 11:43:08 +02:00
Andreas Steffen 3d2745110e more concise listing of ESP algorithms 2009-06-09 11:03:35 +02:00
Andreas Steffen 527960de0f activated INTEGRITY_TEST option in pluto 2009-06-09 11:03:35 +02:00
Andreas Steffen d615ffdcf3 implement gmp_rsa_private_key.decrypt() 2009-06-09 11:03:35 +02:00
Andreas Steffen c50ff68d0c implemented gmp_rsa_public_key.encrypt() method 2009-06-09 11:03:35 +02:00
Andreas Steffen 290b2359c2 some fixes in pkcs7.c 2009-06-09 11:03:35 +02:00
Andreas Steffen 23d7e76788 hooray, pluto and scepclient do not depend on libgmp anymore 2009-06-09 11:03:34 +02:00
Andreas Steffen 4ca4efb28f update strongswan.conf for pluto and scepclient 2009-06-09 11:03:34 +02:00
Andreas Steffen 53df4793d4 pkcs7.c also uses signature_scheme_from_oid() 2009-06-09 11:03:34 +02:00
Andreas Steffen f3e87f5935 created signature_scheme_from_oid() helper function 2009-06-09 11:03:34 +02:00
Andreas Steffen 9410aa262a hardened OpenPGP parser 2009-06-09 11:03:34 +02:00
Andreas Steffen c146b2c8df pluto now requires pubkey plugin 2009-06-09 11:03:33 +02:00
Andreas Steffen 123fdf700a updated documentation on leftsendcert 2009-06-09 11:03:33 +02:00
Andreas Steffen b6f19a6ab4 used rsa coeff field in OpenPGP secret key payload 2009-06-09 11:03:33 +02:00
Andreas Steffen 1bb4d7dd79 fixed OpenPGPv3 fingerprint computation 2009-06-09 11:03:33 +02:00
Andreas Steffen d17a120598 fixed OpenPGP parsing 2009-06-09 11:03:33 +02:00
Andreas Steffen ca062e48ee moved PGP types to pgp/pgp.h 2009-06-09 11:03:33 +02:00
Andreas Steffen 8b799d55ce pluto and scepclient use private and public key plugins of libstrongswan 2009-06-09 11:03:32 +02:00
Andreas Steffen 14c408ee4a _updown script fix for ALT Linux, courtesy of Michael Shigorin 2009-05-29 08:10:02 +02:00
Andreas Steffen 5c1e8ca7ae missed keyid2sql.c 2009-05-28 15:50:05 +02:00
Andreas Steffen af1feed96a NO_CREDENTIAL_FACTORY compile option not needed anymore 2009-05-28 15:44:22 +02:00
Andreas Steffen e24aaddde0 hide credentials headers in credential_factory.h 2009-05-28 15:35:02 +02:00
Andreas Steffen 435e23e647 set parsed = TRUE before calling parse_certificate() 2009-05-27 09:52:53 +02:00
Andreas Steffen e0daac5536 fixed typo 2009-05-27 08:46:13 +02:00
Andreas Steffen ebb97511e6 dh_exponent_ansi_x9_42 is now a libstrongswan setting 2009-05-26 18:32:52 +02:00
Andreas Steffen 517895bd05 eliminated ipsec_policy.h 2009-05-26 17:19:26 +02:00
Andreas Steffen 0355a1320c show strongSwan version in pluto's statusall 2009-05-26 15:35:32 +02:00
Andreas Steffen f64d8240b2 resolve clone naming conflict with uclibc 2009-05-25 08:38:36 +02:00
Andreas Steffen 986b3122a9 removed optionsfrom.c from libfreeswan 2009-05-24 21:04:50 +02:00
Andreas Steffen 4a64f1d3ba whack uses optionsfrom from libstrongswan 2009-05-24 20:59:28 +02:00
Andreas Steffen c0bc85c5b6 cosmetics 2009-05-24 20:14:13 +02:00
Andreas Steffen 90df644ed6 suppress Routed Connections caption if list is empty 2009-05-24 20:06:55 +02:00
Andreas Steffen 7d858a9d3c pluto uses optionsfrom from libstrongswan 2009-05-24 20:03:01 +02:00
Andreas Steffen 96d42f445e pluto now needs the gmp plugin 2009-05-24 19:33:16 +02:00
Andreas Steffen b8f8b2f1ce load gmp plugin in ike scenarios 2009-05-24 18:16:00 +02:00
Andreas Steffen 5aab375958 added openssl/ikev1-alg-ecp-low and openssl/ikev1-alg-ecp-high scenarios 2009-05-24 18:12:31 +02:00
Andreas Steffen 8585af7acb KE payload of ECP groups has X and Y coordinates 2009-05-24 18:06:49 +02:00
Andreas Steffen 7bb47ea4f3 fixed typo 2009-05-24 16:48:58 +02:00
Andreas Steffen 727a56c633 added openssl/rw-cert-ikev1 scenario 2009-05-24 16:42:30 +02:00
Andreas Steffen a09d1c386a renamed some IKEv2 OpenSSL scenarios 2009-05-24 16:41:13 +02:00
Andreas Steffen bce979ae44 pluto now requires gmp plugin for DH functions 2009-05-24 16:11:24 +02:00
Andreas Steffen 52ccea657b use the Diffie-Hellman functionality of libstrongswan 2009-05-24 11:26:00 +02:00
Andreas Steffen 770b408902 cosmetics 2009-05-24 11:24:19 +02:00
Andreas Steffen 2799f19432 added dh group descriptions 2009-05-24 11:23:24 +02:00
Andreas Steffen 42bdf001f0 updated copyright statements 2009-05-22 17:25:32 +02:00
Andreas Steffen a213175d96 version bump to 4.3.2 2009-05-22 17:05:58 +02:00
Andreas Steffen c22889b96c fixed compiler warning 2009-05-22 14:15:39 +02:00
Andreas Steffen 050cc5828a completed NEWS for 4.3.1 2009-05-22 13:41:48 +02:00
Andreas Steffen b88dabb521 recognize ipsec purgeike command 2009-05-22 13:32:48 +02:00
Andreas Steffen d128dd62fc load plugins for scepclient 2009-05-22 10:45:32 +02:00
Andreas Steffen 0de8862be8 load plugins for scepclient 2009-05-22 10:40:25 +02:00
Andreas Steffen 1280c707e7 psk scenarios don't have to load the curl plugin 2009-05-22 10:35:11 +02:00
Andreas Steffen fe68a04d3a psk scenarios don't have to load the curl plugin 2009-05-22 10:26:38 +02:00
Andreas Steffen e20c65ebc5 lod plugins for scepclient 2009-05-22 10:10:31 +02:00
Andreas Steffen 5d9a369b63 psk scenarios don't have to load the curl plugin 2009-05-22 09:50:53 +02:00
Andreas Steffen b235b32e8b load plugins for scepclient 2009-05-22 09:50:09 +02:00
Andreas Steffen 8a5c2ecdb0 added pluto's plugins in ikev1/attr-cert scenario 2009-05-22 09:19:08 +02:00
Andreas Steffen d95e6f97a7 use pluto's default plugins 2009-05-22 09:15:51 +02:00
Andreas Steffen d44fd82164 some more NEWS 2009-05-21 20:54:45 +02:00
Andreas Steffen f6bb013ab7 adapted IKEv2 scenarios to new crypto proposal output 2009-05-20 08:04:01 +02:00
Andreas Steffen 706fd144fe adapted scenarios to new crypto proposal output 2009-05-20 07:51:25 +02:00
Andreas Steffen 80cbbfed36 make signer names consistent 2009-05-19 22:56:14 +02:00
Andreas Steffen f11670f8f8 remove ikev1/alg-sha-equals-sha1 scenario 2009-05-19 22:55:12 +02:00
Andreas Steffen e36c67aca4 same format as IKEv1 2009-05-19 22:12:29 +02:00
Andreas Steffen 0be0c52624 added lookup of ESP_NULL 2009-05-19 16:46:49 +02:00
Andreas Steffen 24e72a311a status output of 3DES_CBC without key length 2009-05-19 16:02:50 +02:00
Andreas Steffen d57456f425 removed unused functions 2009-05-19 15:45:01 +02:00
Andreas Steffen 4dc4c11efd added des and default length cbc encryption algorithms 2009-05-19 15:45:01 +02:00
Andreas Steffen f66f534ee9 output of encryption algs with zero key length 2009-05-19 15:45:01 +02:00
Andreas Steffen 597cee84d3 support of ESP AES_XCBC_96 2009-05-19 15:45:01 +02:00
Andreas Steffen e3891754e6 fixed debug output of ah transforms 2009-05-19 13:32:17 +02:00
Andreas Steffen 7de1884270 removed tab 2009-05-19 10:05:09 +02:00
Andreas Steffen a57820c59b streamlined pluto alg_info debug output 2009-05-19 10:02:25 +02:00
Andreas Steffen 4491d66692 add _CBC to all encryption algorithms in CBC mode 2009-05-19 10:02:24 +02:00
Andreas Steffen 3bf5727acb fixed lookup table 2009-05-19 10:02:24 +02:00
Andreas Steffen b0471fb272 puto uses proposal_get_token() from libstrongswan 2009-05-19 10:02:24 +02:00
Andreas Steffen 5908478527 moved definition of proposal_token from proposal.c to proposal_keywords.h 2009-05-19 10:02:24 +02:00
Andreas Steffen 7736a40448 use of attr and resolv-conf plugins in config-payload scenario 2009-05-16 11:07:29 +02:00
Andreas Steffen 7b72af2eba another lease identity to be single-quoted 2009-05-16 11:05:15 +02:00
Andreas Steffen b75d6242c9 optimized gperf 2009-05-15 22:54:29 +02:00
Andreas Steffen 5e3b318c69 didn't want to commit that 2009-05-15 22:47:36 +02:00
Andreas Steffen 433cb51bb9 moved IKEv2 proposals and transforms to libstrongswan 2009-05-15 22:43:48 +02:00
Andreas Steffen 540061b59a removed some ancient files 2009-05-15 21:25:21 +02:00
Andreas Steffen 89699b7660 added OAKLEY_CAMELLIA 2009-05-15 21:08:43 +02:00
Andreas Steffen dcf47581a8 shortened DH group names 2009-05-15 20:58:04 +02:00
Andreas Steffen 11239b55b6 oops, this was a hash_desc 2009-05-15 19:13:32 +02:00
Andreas Steffen 8cabe789a7 st_okley.hash contains hash algorithm 2009-05-15 19:10:42 +02:00
Andreas Steffen d8cb1d1668 abort pluto if crypto self-test fails 2009-05-15 17:44:02 +02:00
Andreas Steffen 5eb61e3bca strongswan.conf for ikev1/ikev2 scenarios 2009-05-15 17:27:54 +02:00
Andreas Steffen 4a1387ecf4 strongswan.conf required for ldap scenarios 2009-05-15 17:14:47 +02:00
Andreas Steffen 06169c84b1 strongswan.conf for exotic algorithms 2009-05-15 16:57:03 +02:00
Andreas Steffen 6ef94ae994 new default strongswan.conf for UML scenarios 2009-05-15 16:42:05 +02:00
Andreas Steffen c6f43acc62 cosmetics in show_debug() output 2009-05-15 15:58:00 +02:00